Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A911D080/5C24970AE4AC11EB99710A15C4F9AE02/0D0106EAE5BF11EB801D410DC4F9AE02.roa
File: 0D0106EAE5BF11EB801D410DC4F9AE02.roa (raw, json)
Hash identifier: 3jMfh6JrAWUp0w/oStB2daKxlSbx8MU7h4k/yNQbZVo=
Subject key identifier: 9F:5E:68:8B:78:F2:4E:1C:C6:0C:8D:18:34:6A:A4:0D:97:2D:33:2B
Certificate issuer: /CN=A911D080/serialNumber=391A6F675F4BAADC21DD79A9BB4FF095635657B2
Certificate serial: 04A5
Authority key identifier: 39:1A:6F:67:5F:4B:AA:DC:21:DD:79:A9:BB:4F:F0:95:63:56:57:B2
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ORpvZ19Lqtwh3Xmpu0_wlWNWV7I.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911D080/5C24970AE4AC11EB99710A15C4F9AE02/0D0106EAE5BF11EB801D410DC4F9AE02.roa
Signing time: Mon 29 Apr 2024 01:44:16 +0000
ROA not before: Mon 29 Apr 2024 01:44:16 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 9341
IP address blocks: 103.111.28.0/24 maxlen: 24
103.111.29.0/24 maxlen: 24
103.111.30.0/24 maxlen: 24
103.111.31.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A911D080/5C24970AE4AC11EB99710A15C4F9AE02/ORpvZ19Lqtwh3Xmpu0_wlWNWV7I.crl
rsync://rpki.apnic.net/member_repository/A911D080/5C24970AE4AC11EB99710A15C4F9AE02/ORpvZ19Lqtwh3Xmpu0_wlWNWV7I.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ORpvZ19Lqtwh3Xmpu0_wlWNWV7I.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 15 Apr 2025 23:10:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1189 (0x4a5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911D080
Validity
Not Before: Apr 29 01:44:16 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=662efb70-e302
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:f1:ae:72:4c:8e:45:07:9f:7e:56:b5:f1:0e:
08:f4:34:5f:e7:96:33:09:24:e1:aa:0c:19:78:20:
65:2d:97:38:a0:b3:27:8f:15:82:7a:1e:29:72:e4:
4d:de:44:59:37:c8:1c:c2:8c:af:91:87:a8:f6:13:
f2:c1:68:44:5a:6e:98:4b:08:33:fc:cf:40:e5:cb:
4d:55:8d:fc:28:14:6c:87:c5:63:bf:b5:2a:55:07:
29:12:7e:a9:08:83:d4:b3:97:48:c5:a7:f2:d1:53:
ca:6c:66:62:1e:bb:0f:d3:5e:19:4e:26:08:75:00:
a0:28:59:e2:17:82:33:3e:64:11:16:58:64:54:27:
a8:79:fc:e5:61:f9:da:ee:aa:c3:65:db:9a:64:b9:
a4:50:60:05:5c:e4:ff:4e:82:96:d5:e4:a8:d6:ad:
92:7d:1f:51:47:97:dc:a0:ad:c7:70:ac:cc:79:e5:
97:04:51:43:63:38:d0:fa:38:8b:0b:a6:2a:2b:1d:
6a:34:96:f8:4e:e1:af:ad:6c:ec:4c:64:ff:ea:e4:
9c:dc:31:93:c1:8c:41:1a:1f:40:77:d0:97:7e:1e:
65:52:0d:26:3b:d8:3c:d6:43:5f:d7:87:a6:24:05:
dc:2e:79:29:7e:0e:59:bd:b7:da:91:71:37:1a:b0:
07:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:5E:68:8B:78:F2:4E:1C:C6:0C:8D:18:34:6A:A4:0D:97:2D:33:2B
X509v3 Authority Key Identifier:
keyid:39:1A:6F:67:5F:4B:AA:DC:21:DD:79:A9:BB:4F:F0:95:63:56:57:B2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911D080/5C24970AE4AC11EB99710A15C4F9AE02/ORpvZ19Lqtwh3Xmpu0_wlWNWV7I.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ORpvZ19Lqtwh3Xmpu0_wlWNWV7I.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911D080/5C24970AE4AC11EB99710A15C4F9AE02/0D0106EAE5BF11EB801D410DC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.111.28.0/22
Signature Algorithm: sha256WithRSAEncryption
35:44:5c:ab:bb:08:48:d4:d7:77:57:bc:76:4e:2c:01:49:f1:
bf:31:4f:f0:45:33:9f:50:2a:cd:fd:ea:70:45:fe:76:86:c1:
22:1e:df:15:3d:bc:01:6a:0e:95:a2:0e:43:4d:62:34:88:cb:
72:04:55:11:a8:ba:0b:ad:e4:f4:1a:74:22:a1:28:77:34:80:
da:e9:1e:ad:7b:50:d6:f1:d6:fd:e0:77:26:4d:35:89:00:81:
e0:d2:3b:f4:35:62:d4:c9:b5:c2:2d:eb:66:b2:0a:55:fc:e0:
35:90:00:ab:d3:ae:5c:f8:22:ee:84:40:11:88:8a:da:90:18:
2e:fe:7c:26:ad:20:d7:90:43:63:a0:43:c1:b9:5c:6f:1c:55:
30:00:2a:5b:07:7c:88:c7:e4:95:bb:26:e9:d2:98:3c:04:33:
df:6d:e0:3d:61:a0:18:c1:27:4f:97:b4:9c:55:7b:0d:bb:95:
4f:f1:30:6a:c2:a6:0b:b6:17:30:e4:1f:02:d7:8e:6a:08:29:
c6:27:94:c3:5a:a1:71:3e:9e:a2:e0:b9:cf:38:34:7e:f7:c7:
1e:9d:5d:4f:41:c9:d3:9a:9c:9a:b2:99:01:6e:91:f5:de:b3:
a9:e2:90:5d:ec:4a:1a:1a:01:08:cc:ae:d6:2a:20:6a:79:b0:
b2:f2:c2:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 12:17:22 2025 by rpki-client