Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A912184B/136487FA8C8C11E6B0B7C528C4F9AE02/51D65180A2DC11E9B63C6C2BC4F9AE02.roa
File: 51D65180A2DC11E9B63C6C2BC4F9AE02.roa (raw, json)
Hash identifier: lziphfAQalP1g1qd41FgsGMuQq4aElhXOf7iBsezcaw=
Subject key identifier: 13:5C:2C:9D:8F:E5:E2:0D:62:66:D6:BA:DA:94:73:81:4B:33:96:0F
Certificate issuer: /CN=A912184B/serialNumber=7341F64EAB2517EA9938DDE4FB0A814E5CBB7E77
Certificate serial: 1DC6
Authority key identifier: 73:41:F6:4E:AB:25:17:EA:99:38:DD:E4:FB:0A:81:4E:5C:BB:7E:77
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c0H2TqslF-qZON3k-wqBTly7fnc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912184B/136487FA8C8C11E6B0B7C528C4F9AE02/51D65180A2DC11E9B63C6C2BC4F9AE02.roa
Signing time: Thu 02 Jan 2025 16:13:27 +0000
ROA not before: Thu 02 Jan 2025 16:13:27 +0000
ROA not after: Tue 30 Dec 2025 00:00:00 +0000
asID: 138466
IP address blocks: 103.76.40.0/22 maxlen: 24
2407:6180::/32 maxlen: 32
2407:6180::/48 maxlen: 48
2407:6180:1::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A912184B/136487FA8C8C11E6B0B7C528C4F9AE02/c0H2TqslF-qZON3k-wqBTly7fnc.crl
rsync://rpki.apnic.net/member_repository/A912184B/136487FA8C8C11E6B0B7C528C4F9AE02/c0H2TqslF-qZON3k-wqBTly7fnc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c0H2TqslF-qZON3k-wqBTly7fnc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 15 Apr 2025 16:07:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7622 (0x1dc6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912184B
Validity
Not Before: Jan 2 16:13:27 2025 GMT
Not After : Dec 30 00:00:00 2025 GMT
Subject: CN=6776bb26-00d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f5:28:63:ca:11:83:8c:fb:20:a0:64:ba:ea:5b:
99:88:e1:38:fa:70:be:05:24:ea:30:94:4d:8f:40:
34:4a:3a:63:53:4c:03:fc:42:c8:91:42:d6:0d:89:
2d:b4:db:eb:12:0f:38:70:88:cc:bb:c7:b3:cc:16:
f9:08:0c:b7:53:7f:6b:4e:e8:28:f2:d3:ee:10:c2:
f6:97:06:c6:f5:71:74:d0:90:0a:6d:73:5b:f4:61:
f7:1d:6f:b7:37:77:b4:51:eb:38:2c:6a:df:62:e5:
1b:a2:c6:b6:7a:c3:18:c3:4b:df:99:a1:6e:22:2e:
cc:44:b8:31:1b:3e:9f:cc:f5:3e:4c:07:fc:69:f5:
3b:4a:82:b4:67:e7:cc:64:d1:99:66:6c:ca:99:ac:
fa:a5:84:c7:7e:78:63:c5:99:8f:87:7c:c3:40:68:
aa:ad:90:d2:39:15:2f:ed:6e:33:e3:39:e4:e0:15:
c6:4d:8f:16:9a:14:9a:b6:58:ad:21:23:9b:11:78:
35:33:95:8f:a8:da:7b:8f:9e:1e:6b:1e:bd:cc:be:
93:ce:2f:8e:8a:51:97:3a:95:72:c6:fc:0e:8f:cc:
e4:8c:3f:77:30:04:d7:07:9e:40:a2:18:e1:3c:64:
c2:d1:23:39:dc:8e:56:22:fb:33:3a:79:fb:00:06:
56:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:5C:2C:9D:8F:E5:E2:0D:62:66:D6:BA:DA:94:73:81:4B:33:96:0F
X509v3 Authority Key Identifier:
keyid:73:41:F6:4E:AB:25:17:EA:99:38:DD:E4:FB:0A:81:4E:5C:BB:7E:77
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912184B/136487FA8C8C11E6B0B7C528C4F9AE02/c0H2TqslF-qZON3k-wqBTly7fnc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c0H2TqslF-qZON3k-wqBTly7fnc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912184B/136487FA8C8C11E6B0B7C528C4F9AE02/51D65180A2DC11E9B63C6C2BC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.76.40.0/22
IPv6:
2407:6180::/32
Signature Algorithm: sha256WithRSAEncryption
63:13:f8:f8:b8:c4:bb:ff:fb:c9:3a:89:e9:ea:5f:a6:fc:4d:
75:73:46:0d:42:f5:cf:bc:5d:98:8c:d3:47:7b:a6:92:a4:c3:
eb:51:7e:f4:a8:e6:5f:1f:9f:80:9c:3d:f4:2f:fd:a7:9e:af:
c1:0e:5c:1a:ee:4e:f0:eb:87:f7:a5:00:62:a4:d4:df:c0:ac:
48:ad:1a:4c:32:9d:fd:ef:d0:b5:be:f0:a0:c6:54:f1:5d:ba:
fd:29:00:02:e7:75:a6:9f:a2:54:c4:5f:c6:bc:6d:b0:20:f1:
ff:d6:21:8d:cb:85:42:97:26:45:34:ca:d2:24:af:f9:5e:e6:
ec:b8:28:f5:6a:63:d1:8c:0a:82:75:82:0d:b2:e1:e5:c4:72:
56:6b:1c:3a:1e:68:bf:bd:05:24:fc:fb:40:e9:68:8b:c7:24:
1b:31:a4:f7:2a:19:df:2a:b2:75:35:d4:2c:c9:a6:0e:f4:29:
a1:84:83:d5:4b:6d:9f:77:05:11:c3:63:8f:8b:17:89:8d:94:
f0:2f:b4:de:cf:c6:2f:3f:7f:48:da:a9:d0:5a:fa:71:a6:2a:
1f:ec:71:bc:d5:84:9a:bb:cd:bf:a2:9c:fc:63:e9:12:54:87:
8f:2d:f5:63:b2:7c:75:e2:a7:0d:6f:e4:34:53:31:ae:6c:44:
0b:08:44:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 12:17:19 2025 by rpki-client