Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9118FFA/0586068A2B7C11EF89E84144C4F9AE02/E80A0D282B9D11EFB61F1148C4F9AE02.roa
File: E80A0D282B9D11EFB61F1148C4F9AE02.roa (raw, json)
Hash identifier: F0SsWsfme5DR54sccnOQA0ilylY47//E27uoZDHPm3k=
Subject key identifier: 03:AC:C7:12:3A:A2:B3:6C:32:95:C0:74:F8:2E:B0:21:3A:A5:6A:E7
Certificate issuer: /CN=A9118FFA/serialNumber=9FE881D8BD32AD15AB7BE7B4EC4F752212546C76
Certificate serial: 40
Authority key identifier: 9F:E8:81:D8:BD:32:AD:15:AB:7B:E7:B4:EC:4F:75:22:12:54:6C:76
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n-iB2L0yrRWre-e07E91IhJUbHY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9118FFA/0586068A2B7C11EF89E84144C4F9AE02/E80A0D282B9D11EFB61F1148C4F9AE02.roa
Signing time: Thu 03 Oct 2024 06:40:17 +0000
ROA not before: Thu 03 Oct 2024 06:40:17 +0000
ROA not after: Tue 30 Dec 2025 00:00:00 +0000
asID: 7474
IP address blocks: 103.122.4.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9118FFA/0586068A2B7C11EF89E84144C4F9AE02/n-iB2L0yrRWre-e07E91IhJUbHY.crl
rsync://rpki.apnic.net/member_repository/A9118FFA/0586068A2B7C11EF89E84144C4F9AE02/n-iB2L0yrRWre-e07E91IhJUbHY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n-iB2L0yrRWre-e07E91IhJUbHY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 20 Apr 2025 05:01:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 64 (0x40)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9118FFA, serialNumber=9FE881D8BD32AD15AB7BE7B4EC4F752212546C76
Validity
Not Before: Oct 3 06:40:17 2024 GMT
Not After : Dec 30 00:00:00 2025 GMT
Subject: CN=66fe3c51-8018
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:4a:90:50:3d:df:dd:fe:a6:fa:fd:6b:12:85:
a9:ab:ce:77:e5:57:3a:df:01:a1:51:dc:fb:0f:d1:
13:32:41:27:18:81:76:71:8e:51:6c:16:13:2a:da:
15:9b:dd:64:04:98:fe:9a:c0:26:fa:76:7e:40:08:
7d:1f:83:80:b1:7d:88:18:2d:d2:98:3d:46:c1:76:
37:27:df:78:9b:2e:37:c6:df:ac:17:fa:a4:53:31:
41:fa:6e:40:4d:15:40:a4:79:51:c2:fa:6d:0a:ec:
af:7f:f6:f8:9f:d9:a7:0b:27:04:96:dc:be:2c:06:
24:8f:06:f1:10:fc:df:1c:98:c2:09:6f:87:a9:97:
e4:9d:0f:4d:bb:ec:75:6f:54:2c:8b:f3:90:38:87:
f3:51:bf:16:9d:a4:2c:2d:6f:75:fb:f5:90:1d:40:
c9:46:e2:71:c1:98:60:5c:4d:bf:5c:09:2c:5b:28:
2b:40:2b:c2:b3:ae:a4:ff:c2:bc:13:5e:fd:ec:64:
b7:9c:b7:2e:a9:5e:69:9d:8e:d4:09:c1:e9:a4:29:
b2:bc:b8:5d:e3:1d:47:d9:78:00:47:27:49:7e:35:
fd:e4:e3:b8:69:d4:d1:04:17:8f:2c:c4:ba:66:67:
d7:bd:bf:46:a9:7c:37:94:b0:eb:5d:24:3e:b6:65:
4e:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:AC:C7:12:3A:A2:B3:6C:32:95:C0:74:F8:2E:B0:21:3A:A5:6A:E7
X509v3 Authority Key Identifier:
keyid:9F:E8:81:D8:BD:32:AD:15:AB:7B:E7:B4:EC:4F:75:22:12:54:6C:76
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9118FFA/0586068A2B7C11EF89E84144C4F9AE02/n-iB2L0yrRWre-e07E91IhJUbHY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n-iB2L0yrRWre-e07E91IhJUbHY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9118FFA/0586068A2B7C11EF89E84144C4F9AE02/E80A0D282B9D11EFB61F1148C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.122.4.0/24
Signature Algorithm: sha256WithRSAEncryption
63:ba:db:fd:58:0f:4d:2c:88:f8:9c:d7:2a:86:14:37:32:48:
30:d7:f3:85:ee:83:80:d6:7f:3b:1d:4a:2c:4a:c1:0b:7b:d7:
93:f8:95:cb:5c:39:08:ba:50:5d:08:19:27:f8:bf:32:14:ac:
08:e0:6b:31:f5:0a:1a:91:9d:cc:85:b2:3f:6d:eb:1d:92:f4:
b9:30:38:23:78:a4:02:8a:f5:8a:6b:a8:fb:0d:90:04:ef:b8:
8e:fa:2c:2d:dd:c8:b3:c0:37:db:8b:9a:ba:e9:d5:ba:1e:32:
c5:58:f6:ec:9f:26:10:27:3a:45:a4:4c:84:c2:1f:31:cd:b5:
86:8d:22:43:02:45:fb:6c:23:fe:4a:7c:0a:37:9a:77:dd:47:
db:64:8d:eb:30:e0:15:9d:b2:8e:d4:e0:68:a0:14:b6:5e:3f:
2c:8f:68:c4:af:44:87:fd:ba:42:37:96:77:06:24:ec:73:f7:
7b:e5:91:de:18:0d:a9:de:04:26:c7:7c:42:50:70:2a:ac:56:
c4:db:7f:cc:be:e4:2c:ea:cc:5b:4a:eb:9e:f9:1e:5d:b9:7e:
73:5b:75:b6:60:ca:28:59:90:b5:95:3b:db:d3:4d:5d:e1:92:
1d:83:14:de:4a:31:14:b4:1b:4b:c4:0d:79:49:fd:0f:22:84:
98:c3:42:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 02:37:09 2025 by rpki-client