Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A911BD54/D90112843F4F11E59512E04CC4F9AE02/7135F534A05E11EDAC005F21C4F9AE02.roa
File: 7135F534A05E11EDAC005F21C4F9AE02.roa (raw, json)
Hash identifier: BPqGgTO/FXgmhll9acyqoVIwbgNH2EbF72C/59rTKAs=
Subject key identifier: 64:E8:C4:9A:43:9B:B0:CF:55:21:55:86:B8:CF:DD:8B:4B:5B:10:CA
Certificate issuer: /CN=A911BD54/serialNumber=2F59CEDA614815F4632F39D5A31C2A5148C6B4FA
Certificate serial: 24FD
Authority key identifier: 2F:59:CE:DA:61:48:15:F4:63:2F:39:D5:A3:1C:2A:51:48:C6:B4:FA
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/L1nO2mFIFfRjLznVoxwqUUjGtPo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911BD54/D90112843F4F11E59512E04CC4F9AE02/7135F534A05E11EDAC005F21C4F9AE02.roa
Signing time: Tue 31 Dec 2024 15:53:39 +0000
ROA not before: Tue 31 Dec 2024 15:53:39 +0000
ROA not after: Mon 02 Mar 2026 00:00:00 +0000
asID: 150686
IP address blocks: 147.50.196.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A911BD54/D90112843F4F11E59512E04CC4F9AE02/L1nO2mFIFfRjLznVoxwqUUjGtPo.crl
rsync://rpki.apnic.net/member_repository/A911BD54/D90112843F4F11E59512E04CC4F9AE02/L1nO2mFIFfRjLznVoxwqUUjGtPo.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/L1nO2mFIFfRjLznVoxwqUUjGtPo.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 19 Apr 2025 15:40:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 9469 (0x24fd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911BD54, serialNumber=2F59CEDA614815F4632F39D5A31C2A5148C6B4FA
Validity
Not Before: Dec 31 15:53:39 2024 GMT
Not After : Mar 2 00:00:00 2026 GMT
Subject: CN=67741383-7410
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:65:6d:22:66:5c:e7:ab:5d:93:0b:81:55:2e:
d1:ea:b9:2d:52:75:ad:8b:a1:c1:15:f1:a6:e2:de:
3e:dd:65:13:f0:26:9c:55:cc:54:4f:71:cd:f2:35:
c4:38:fe:d4:55:7a:b5:6d:61:eb:56:59:7e:f9:d5:
fb:e6:e7:14:a7:a8:0f:0b:43:c6:cf:de:91:44:d6:
c0:d8:4e:1b:38:e3:e1:35:1d:d1:04:c8:b1:75:1f:
8c:e6:de:4d:22:18:85:de:91:1d:f6:7c:f0:a0:98:
65:e4:b8:f4:14:c2:92:88:f6:22:59:9a:42:dd:fc:
19:39:32:a6:99:8a:6c:a9:8b:4a:2b:84:cd:bf:d8:
55:23:71:3e:bd:1f:31:e5:3d:83:1f:98:e3:7e:4b:
c1:72:ac:ec:a8:ca:ca:6c:57:52:88:6a:15:89:34:
8c:e9:1e:c3:dc:fb:c6:02:e2:4f:2a:f5:f1:22:ae:
88:e3:58:0b:45:24:71:06:da:10:44:ec:cc:98:39:
f9:b9:61:1b:f5:63:a6:ba:c3:1d:eb:85:98:4a:d1:
90:88:d9:be:0a:da:47:67:62:a1:0c:6d:af:ae:27:
6b:57:32:fb:17:98:c7:4d:ca:77:ba:42:53:b1:0d:
10:17:84:a6:a8:2c:41:bc:b4:a0:57:81:2c:b1:9e:
46:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:E8:C4:9A:43:9B:B0:CF:55:21:55:86:B8:CF:DD:8B:4B:5B:10:CA
X509v3 Authority Key Identifier:
keyid:2F:59:CE:DA:61:48:15:F4:63:2F:39:D5:A3:1C:2A:51:48:C6:B4:FA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911BD54/D90112843F4F11E59512E04CC4F9AE02/L1nO2mFIFfRjLznVoxwqUUjGtPo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/L1nO2mFIFfRjLznVoxwqUUjGtPo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911BD54/D90112843F4F11E59512E04CC4F9AE02/7135F534A05E11EDAC005F21C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
147.50.196.0/24
Signature Algorithm: sha256WithRSAEncryption
0c:04:98:c2:6d:f4:31:94:9e:e7:54:85:8e:32:47:6f:25:59:
64:80:62:fe:26:71:18:62:98:64:d8:39:a3:46:75:d7:28:55:
64:0d:ec:eb:7c:55:05:7e:ba:c7:1a:76:aa:a3:58:da:e9:5c:
2b:75:2a:61:6e:5b:4c:3c:96:c9:d0:27:40:25:d2:13:ac:75:
6a:2c:56:c0:4f:18:2f:0a:bf:bd:0c:32:7c:4a:6e:83:f5:1b:
06:cd:08:19:dc:75:e2:e5:ec:ee:da:d3:97:ad:87:2d:37:e7:
4a:47:82:0a:62:2c:4a:bf:81:71:be:2b:ee:7f:b5:fb:81:18:
5d:13:b7:cf:80:7f:e1:67:cb:f7:94:13:79:34:c3:43:43:3f:
68:ae:59:1c:0c:bc:44:ae:ba:c1:8f:92:76:53:ce:ef:f3:d4:
2b:23:e7:10:34:57:f8:13:7e:ac:b0:1b:59:99:c9:66:a9:e2:
22:ac:fa:e7:1b:bc:a1:cf:3a:3d:1c:69:46:d3:82:0e:be:b6:
67:7b:5e:36:fc:d2:e4:5d:f0:1e:10:7a:ce:08:d8:48:a9:64:
c2:a6:35:47:89:74:23:34:38:c1:87:eb:c1:4b:77:3f:5f:69:
db:c7:d6:65:29:57:ba:61:90:58:71:14:12:49:a3:42:96:91:
0c:e3:fa:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 10:55:27 2025 by rpki-client