Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A911FDBA/077851A41D9D11E2987CEE8B08B02CD2/800275E63FF911EB9BC3F51FC4F9AE02.roa
File: 800275E63FF911EB9BC3F51FC4F9AE02.roa (raw, json)
Hash identifier: GhXAuDsottF/BTuRuS6OoHwQzw9kjGM2I7psy27j7Nk=
Subject key identifier: 97:8C:BE:D1:58:0A:A5:5F:41:1F:4C:EE:08:BC:71:3B:82:ED:68:4A
Certificate issuer: /CN=A911FDBA/serialNumber=FEF9143B1616CDA1159B59ECD5E3993E982654FE
Certificate serial: 3490
Authority key identifier: FE:F9:14:3B:16:16:CD:A1:15:9B:59:EC:D5:E3:99:3E:98:26:54:FE
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_vkUOxYWzaEVm1ns1eOZPpgmVP4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911FDBA/077851A41D9D11E2987CEE8B08B02CD2/800275E63FF911EB9BC3F51FC4F9AE02.roa
Signing time: Tue 19 Nov 2024 02:42:21 +0000
ROA not before: Tue 19 Nov 2024 02:42:21 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 9280
IP address blocks: 202.60.90.0/24 maxlen: 24
202.60.91.0/24 maxlen: 24
202.131.92.0/24 maxlen: 24
2400:d400:9280::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A911FDBA/077851A41D9D11E2987CEE8B08B02CD2/_vkUOxYWzaEVm1ns1eOZPpgmVP4.crl
rsync://rpki.apnic.net/member_repository/A911FDBA/077851A41D9D11E2987CEE8B08B02CD2/_vkUOxYWzaEVm1ns1eOZPpgmVP4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_vkUOxYWzaEVm1ns1eOZPpgmVP4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 15 Apr 2025 15:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13456 (0x3490)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911FDBA
Validity
Not Before: Nov 19 02:42:21 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=673bfb0d-25cc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:5a:5e:63:f9:e8:cf:d0:27:10:60:2c:a5:48:
d2:72:c5:e2:32:c1:31:49:b0:05:ce:8d:a1:83:50:
dd:95:38:aa:6c:f2:f5:03:ab:fb:00:5e:17:88:22:
c3:9c:ab:c4:c5:04:02:9e:27:a6:5b:47:e2:ad:55:
db:4a:25:57:9c:66:fd:e7:b7:fa:08:d7:e0:88:58:
b1:9b:2c:29:1c:fb:e3:49:a8:26:88:1f:4d:c9:d6:
6a:a6:d9:91:43:f4:d6:9f:d3:e4:51:80:7e:e2:92:
d0:77:41:b2:ba:5c:58:99:74:fc:bd:db:4b:bb:56:
02:d4:03:4e:1e:9c:cf:4c:a7:e9:29:c1:7f:1f:2a:
11:cd:68:21:97:12:18:a9:bd:5b:c4:d5:cf:a4:f0:
72:b5:26:05:03:dc:8a:bb:12:25:9b:81:9e:54:39:
76:4d:f0:36:ae:2e:be:2f:e1:76:30:3a:ab:c6:ca:
33:e8:6b:c1:6c:3f:97:01:5c:0e:28:fa:2b:35:fd:
db:77:54:cf:05:01:82:ae:c8:48:e7:4e:85:dd:40:
64:7f:0e:10:64:18:ca:b4:25:b8:38:e8:38:db:b0:
60:15:df:e0:0e:5a:4e:82:ac:b3:a6:b3:fe:8c:c4:
83:69:68:c8:93:78:2b:5a:86:7f:24:69:b3:9d:b4:
f7:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:8C:BE:D1:58:0A:A5:5F:41:1F:4C:EE:08:BC:71:3B:82:ED:68:4A
X509v3 Authority Key Identifier:
keyid:FE:F9:14:3B:16:16:CD:A1:15:9B:59:EC:D5:E3:99:3E:98:26:54:FE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911FDBA/077851A41D9D11E2987CEE8B08B02CD2/_vkUOxYWzaEVm1ns1eOZPpgmVP4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_vkUOxYWzaEVm1ns1eOZPpgmVP4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911FDBA/077851A41D9D11E2987CEE8B08B02CD2/800275E63FF911EB9BC3F51FC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
202.60.90.0/23
202.131.92.0/24
IPv6:
2400:d400:9280::/48
Signature Algorithm: sha256WithRSAEncryption
68:37:0a:0d:0f:a9:af:d5:f6:83:c5:88:97:9f:d4:3d:3b:a3:
d4:18:be:17:72:fe:38:72:e0:45:10:a6:c6:c5:51:5f:66:c2:
26:50:3c:ae:00:99:2e:53:7d:60:e0:9e:0f:f0:87:c6:1d:8b:
ff:0c:de:24:d1:fb:e6:1d:f4:8d:56:14:79:b3:e1:c6:ed:44:
01:d4:68:02:ae:ec:0c:84:26:a4:5f:61:d2:26:62:91:04:11:
57:86:dd:a5:3c:08:b1:32:47:b9:db:9c:eb:e4:f8:40:da:17:
21:bb:41:25:3c:f4:f3:15:ea:53:f7:17:fc:37:17:70:4e:92:
de:4a:6f:05:83:4e:e4:e7:1b:5e:cc:f9:47:d9:63:67:d4:67:
b2:1f:d4:9c:fe:d4:4a:13:55:d4:13:33:06:28:6c:4c:eb:f9:
ad:09:91:ea:8c:2c:12:1c:fc:bd:67:86:1c:c0:8f:fb:53:a7:
55:d7:f7:c7:8d:f4:27:42:21:cb:1d:b6:44:43:a7:1d:2f:82:
28:ed:3c:88:e8:8b:f2:12:cc:37:8d:54:c3:eb:d4:c3:b3:fb:
e6:1b:30:56:3e:b1:ee:db:0d:3f:ce:85:ad:9b:43:36:65:ad:
b2:d0:10:3d:a7:9c:12:8a:e8:03:36:67:f9:e6:c4:9b:a5:35:
4e:75:e5:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 05:59:25 2025 by rpki-client