Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/c3cd7c24-12cb-4abc-8fd2-5e2bcbb85ae6/977f90e2-d257-4dde-9740-b0391458d8ed.roa
File: 977f90e2-d257-4dde-9740-b0391458d8ed.roa (raw, json)
Hash identifier: NJ0oYm6BTaZQSK9hbA0XzfLtdm7HJfFBFXqupHFoGNc=
Subject key identifier: 2C:77:DB:88:81:38:5B:21:8E:67:19:43:33:2A:B0:D2:6F:D4:9D:91
Certificate issuer: /CN=A91CD28A0000/serialNumber=97EBF348F376B867FC76B2B2B91078C3DD494883
Certificate serial: 3421E66AD3A7C47F6D928497B26EB5904E80EBDC
Authority key identifier: 97:EB:F3:48:F3:76:B8:67:FC:76:B2:B2:B9:10:78:C3:DD:49:48:83
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l-vzSPN2uGf8drKyuRB4w91JSIM.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/c3cd7c24-12cb-4abc-8fd2-5e2bcbb85ae6/977f90e2-d257-4dde-9740-b0391458d8ed.roa
Signing time: Mon 31 Mar 2025 15:01:07 +0000
ROA not before: Mon 31 Mar 2025 15:01:07 +0000
ROA not after: Mon 05 May 2025 23:59:59 +0000
asID: 16509
IP address blocks: 240f:8000::/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/c3cd7c24-12cb-4abc-8fd2-5e2bcbb85ae6/90ca90a9-a10a-44e7-82b9-1365746ba55e.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/c3cd7c24-12cb-4abc-8fd2-5e2bcbb85ae6/manifest.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l-vzSPN2uGf8drKyuRB4w91JSIM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 11 Apr 2025 15:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
34:21:e6:6a:d3:a7:c4:7f:6d:92:84:97:b2:6e:b5:90:4e:80:eb:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91CD28A0000
Validity
Not Before: Mar 31 15:01:07 2025 GMT
Not After : May 5 23:59:59 2025 GMT
Subject: CN=4257e925-715f-47a2-893e-0e3f97ec7e22
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:46:cb:5e:ac:c8:b9:23:96:c7:d2:1a:ac:d5:
e9:8a:ac:4a:4f:95:57:42:e6:53:bc:52:a4:58:0b:
95:cc:2e:5a:15:23:58:3b:55:ad:69:cf:40:59:3e:
f5:23:4d:3b:29:a0:64:9c:bc:82:21:3d:d6:ff:52:
2d:50:30:a7:34:21:68:d2:c9:05:b8:8e:30:ec:ab:
69:5a:b3:82:59:3c:41:94:93:2a:73:c5:0c:cc:a7:
0b:de:d0:d0:6c:01:35:39:38:1a:9f:54:25:35:6c:
5d:a1:9c:27:f9:15:d0:c8:b3:bb:7b:66:65:38:92:
8a:12:74:7f:7d:25:dd:7f:54:c4:e2:28:cd:48:d8:
84:5a:f2:bc:2f:3f:93:82:62:87:4e:88:f9:47:0c:
7d:61:57:a5:57:54:44:ba:60:3a:a6:e2:2e:72:ec:
4d:69:f9:91:85:91:e0:89:59:a9:ce:14:6b:9d:b9:
c5:96:10:9e:97:36:c1:79:d4:3f:22:aa:ce:72:6b:
30:71:7a:1e:e0:f6:f5:57:47:4f:26:e2:04:bc:67:
9f:0e:e3:61:92:df:07:53:48:3c:a7:d2:d4:f8:e8:
96:5d:d6:df:37:13:ad:a9:5e:21:67:e6:54:97:83:
d3:e3:46:03:dc:ce:e7:c5:8a:40:96:63:9d:0e:19:
fb:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:77:DB:88:81:38:5B:21:8E:67:19:43:33:2A:B0:D2:6F:D4:9D:91
X509v3 Authority Key Identifier:
keyid:97:EB:F3:48:F3:76:B8:67:FC:76:B2:B2:B9:10:78:C3:DD:49:48:83
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l-vzSPN2uGf8drKyuRB4w91JSIM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/c3cd7c24-12cb-4abc-8fd2-5e2bcbb85ae6/977f90e2-d257-4dde-9740-b0391458d8ed.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/c3cd7c24-12cb-4abc-8fd2-5e2bcbb85ae6/90ca90a9-a10a-44e7-82b9-1365746ba55e.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240f:8000::/24
Signature Algorithm: sha256WithRSAEncryption
20:59:50:6a:24:07:52:18:7c:e6:07:99:f7:88:f5:48:13:d4:
65:c4:82:b4:41:8d:8c:78:19:25:55:6a:67:6e:a1:b1:b6:50:
2f:69:3b:b5:37:76:47:2e:c1:a7:55:2d:97:3f:7c:62:47:e7:
0a:47:25:ff:d0:83:5d:5a:fc:32:a5:84:2b:72:6e:72:e0:d6:
11:46:e5:57:7e:82:87:71:81:16:ea:2c:60:18:b5:76:cf:14:
2b:43:c4:39:ab:a1:f8:a5:c8:ea:55:22:f4:2f:db:ad:36:18:
50:8e:da:0f:4d:39:30:ff:03:14:45:2c:c8:5f:ff:56:f8:0f:
e6:8d:f0:6e:fa:1c:e4:33:5d:69:3a:85:d2:ca:59:96:f1:ec:
69:03:5c:9c:2c:b7:49:d1:4d:50:8d:fb:85:e0:fa:64:d4:0e:
8c:11:61:35:ab:01:3a:01:c7:a4:99:15:cf:28:a7:fc:83:a2:
50:a7:e7:fd:99:84:9d:d6:1e:83:db:83:47:df:bb:38:8e:98:
41:27:30:e5:41:5c:9f:b0:10:3c:c1:0a:8d:e3:77:4d:d7:39:
5b:ab:78:98:47:7d:e1:48:e8:88:9e:c2:90:12:7c:ef:4f:2a:
35:96:67:f7:3d:19:41:ce:46:e9:cc:67:54:98:6c:fa:67:5a:
b5:6d:b7:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 12:14:09 2025 by rpki-client