Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9122EA2/15253414856311ED82FB102DC4F9AE02/C20F71E0992A11EEBDE4AF84C4F9AE02.roa
File: C20F71E0992A11EEBDE4AF84C4F9AE02.roa (raw, json)
Hash identifier: csl85VTomjs4iPv8bKOFHRUkLivByj84d/cWaa81y8A=
Subject key identifier: 16:00:5F:94:2D:31:7F:E3:AD:37:2E:40:A1:8B:F9:DE:B9:40:9B:B7
Certificate issuer: /CN=A9122EA2/serialNumber=092B54D2F9E96D3FCE1F0C0DBB31B1B82C8D2CE0
Certificate serial: 01A5
Authority key identifier: 09:2B:54:D2:F9:E9:6D:3F:CE:1F:0C:0D:BB:31:B1:B8:2C:8D:2C:E0
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CStU0vnpbT_OHwwNuzGxuCyNLOA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9122EA2/15253414856311ED82FB102DC4F9AE02/C20F71E0992A11EEBDE4AF84C4F9AE02.roa
Signing time: Fri 07 Feb 2025 02:15:47 +0000
ROA not before: Fri 07 Feb 2025 02:15:47 +0000
ROA not after: Tue 31 Mar 2026 00:00:00 +0000
asID: 132831
IP address blocks: 103.54.78.0/24 maxlen: 24
103.54.79.0/24 maxlen: 24
103.124.187.0/24 maxlen: 24
103.134.118.0/24 maxlen: 24
103.134.119.0/24 maxlen: 24
103.242.126.0/24 maxlen: 24
103.242.127.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9122EA2/15253414856311ED82FB102DC4F9AE02/CStU0vnpbT_OHwwNuzGxuCyNLOA.crl
rsync://rpki.apnic.net/member_repository/A9122EA2/15253414856311ED82FB102DC4F9AE02/CStU0vnpbT_OHwwNuzGxuCyNLOA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CStU0vnpbT_OHwwNuzGxuCyNLOA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 20 Apr 2025 02:10:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 421 (0x1a5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9122EA2, serialNumber=092B54D2F9E96D3FCE1F0C0DBB31B1B82C8D2CE0
Validity
Not Before: Feb 7 02:15:47 2025 GMT
Not After : Mar 31 00:00:00 2026 GMT
Subject: CN=67a56cd3-9e8b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:7e:39:b8:0f:da:5e:23:71:92:9c:91:6c:74:
08:ad:d5:c7:a3:3d:3b:4b:30:89:8d:ec:2a:a1:7a:
2d:3a:ea:8e:45:7c:64:f9:dc:94:b3:de:ec:5f:c6:
20:6d:c1:1a:c7:ab:39:8c:0e:81:79:92:bd:44:42:
0c:a3:18:c8:5e:b4:b4:e2:dd:e7:99:c6:e0:f9:0f:
0f:80:5c:4f:9e:9a:cd:d9:8b:a8:6f:67:17:ae:8d:
d2:e3:8e:38:50:42:70:02:4e:46:a0:0d:52:38:5a:
12:03:5c:a1:4b:10:01:2d:6f:71:0a:5b:82:67:24:
f5:19:71:c4:aa:88:16:a4:16:19:92:01:fa:61:d1:
9a:f6:f1:15:6f:c0:ca:e3:66:a7:7e:4e:88:ef:69:
d9:d0:8d:17:8d:f9:9a:6d:b1:a3:74:7d:98:dd:82:
be:f4:37:ce:08:f6:56:31:01:03:50:b4:ee:c7:78:
1e:61:9b:37:fc:f6:fa:2c:ac:95:c0:40:dc:07:7e:
1b:c2:96:30:ce:ac:48:7a:41:61:54:0d:0b:4e:e2:
72:9d:83:09:a3:f9:8d:03:44:16:3c:e1:40:1d:59:
f1:b3:27:0e:3b:51:c8:35:a3:b5:09:3c:65:b7:11:
88:5b:7f:78:01:68:07:fe:3d:a3:45:dc:0f:b1:e5:
e0:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:00:5F:94:2D:31:7F:E3:AD:37:2E:40:A1:8B:F9:DE:B9:40:9B:B7
X509v3 Authority Key Identifier:
keyid:09:2B:54:D2:F9:E9:6D:3F:CE:1F:0C:0D:BB:31:B1:B8:2C:8D:2C:E0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9122EA2/15253414856311ED82FB102DC4F9AE02/CStU0vnpbT_OHwwNuzGxuCyNLOA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CStU0vnpbT_OHwwNuzGxuCyNLOA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9122EA2/15253414856311ED82FB102DC4F9AE02/C20F71E0992A11EEBDE4AF84C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.54.78.0/23
103.124.187.0/24
103.134.118.0/23
103.242.126.0/23
Signature Algorithm: sha256WithRSAEncryption
35:2d:73:d1:a5:ce:59:7b:20:26:e9:fe:0b:33:e8:db:06:60:
6d:8a:40:69:20:dc:7b:c2:8a:72:3b:3c:c2:d6:36:d8:13:cc:
1c:4a:c8:15:a8:37:13:fc:87:b4:d8:05:42:4a:a7:1b:8c:3c:
59:a0:22:71:59:81:09:88:d6:18:3f:0a:71:21:34:44:73:0c:
c6:23:c1:0d:62:4a:ac:74:83:5b:e6:53:d1:7c:80:94:13:10:
7e:2a:28:ea:a5:1e:de:2a:6b:ad:f7:97:70:ea:55:c2:80:fa:
ce:35:46:37:04:2a:b5:c1:a4:12:ac:d6:6d:3a:e9:ee:67:fa:
df:24:25:18:b8:68:dc:b2:c4:44:d4:bb:ab:0f:77:e8:5d:4f:
95:b3:4a:66:17:e1:bd:76:99:9d:97:9d:f7:67:06:7e:69:54:
57:e7:e9:5f:25:bf:4b:c4:2d:f5:6f:8e:05:3d:b5:8a:0d:9c:
03:97:5c:d0:6a:83:77:fb:4f:e1:4b:a9:5c:76:52:b9:0f:75:
ea:0e:14:02:35:6d:81:56:b9:62:04:e2:e1:d1:c0:c1:5d:e5:
a0:4b:e8:3c:fb:35:e3:26:b9:5e:d2:82:79:c3:04:e3:ca:53:
dd:c5:98:8e:af:cc:d5:05:6b:ec:ce:9a:12:35:ef:83:db:90:
0f:d4:ed:67
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgICAaUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MjJFQTIxMTAvBgNVBAUTKDA5MkI1NEQyRjlFOTZEM0ZDRTFGMEMwREJCMzFCMUI4
MkM4RDJDRTAwHhcNMjUwMjA3MDIxNTQ3WhcNMjYwMzMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02N2E1NmNkMy05ZThiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAsH45uA/aXiNxkpyRbHQIrdXHoz07SzCJjewqoXotOuqORXxk+dyUs97sX8Yg
bcEax6s5jA6BeZK9REIMoxjIXrS04t3nmcbg+Q8PgFxPnprN2Yuob2cXro3S4444
UEJwAk5GoA1SOFoSA1yhSxABLW9xCluCZyT1GXHEqogWpBYZkgH6YdGa9vEVb8DK
42anfk6I72nZ0I0XjfmabbGjdH2Y3YK+9DfOCPZWMQEDULTux3geYZs3/Pb6LKyV
wEDcB34bwpYwzqxIekFhVA0LTuJynYMJo/mNA0QWPOFAHVnxsycOO1HINaO1CTxl
txGIW394AWgH/j2jRdwPseXgaQIDAQABo4ICpzCCAqMwHQYDVR0OBBYEFBYAX5Qt
MX/jrTcuQKGL+d65QJu3MB8GA1UdIwQYMBaAFAkrVNL56W0/zh8MDbsxsbgsjSzg
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMkVBMi8xNTI1MzQxNDg1
NjMxMUVEODJGQjEwMkRDNEY5QUUwMi9DU3RVMHZucGJUX09Id3dOdXpHeHVDeU5M
T0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0NTdFUwdm5wYlRfT0h3d051ekd4dUN5TkxPQS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
MjJFQTIvMTUyNTM0MTQ4NTYzMTFFRDgyRkIxMDJEQzRGOUFFMDIvQzIwRjcxRTA5
OTJBMTFFRUJERTRBRjg0QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwMQYIKwYBBQUHAQcBAf8E
IjAgMB4EAgABMBgDBAFnNk4DBABnfLsDBAFnhnYDBAFn8n4wDQYJKoZIhvcNAQEL
BQADggEBADUtc9Glzll7ICbp/gsz6NsGYG2KQGkg3HvCinI7PMLWNtgTzBxKyBWo
NxP8h7TYBUJKpxuMPFmgInFZgQmI1hg/CnEhNERzDMYjwQ1iSqx0g1vmU9F8gJQT
EH4qKOqlHt4qa633l3DqVcKA+s41RjcEKrXBpBKs1m066e5n+t8kJRi4aNyyxETU
u6sPd+hdT5WzSmYX4b12mZ2XnfdnBn5pVFfn6V8lv0vELfVvjgU9tYoNnAOXXNBq
g3f7T+FLqVx2UrkPdeoOFAI1bYFWuWIE4uHRwMFd5aBL6Dz7NeMmuV7SgnnDBOPK
U93FmI6vzNUFa+zOmhI174PbkA/U7Wc=
-----END CERTIFICATE-----
Generated at Mon Apr 14 05:52:47 2025 by rpki-client