Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9127523/12B997E89AE311E3A5A257A75911EA32/4221CE240EC211EB9F6B1914C4F9AE02.roa
File: 4221CE240EC211EB9F6B1914C4F9AE02.roa (raw, json)
Hash identifier: HY2nmG/jdk+xVkoZB1FIUxrLCVauPkm46TZFTVY7BD4=
Subject key identifier: D7:72:A8:AB:03:65:11:67:82:22:8F:BD:D2:19:2C:88:5F:06:3A:DD
Certificate issuer: /CN=A9127523/serialNumber=8A681DD0C43731D0F4763A4DBDD5D4CC01FD64C2
Certificate serial: 2D64
Authority key identifier: 8A:68:1D:D0:C4:37:31:D0:F4:76:3A:4D:BD:D5:D4:CC:01:FD:64:C2
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/imgd0MQ3MdD0djpNvdXUzAH9ZMI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9127523/12B997E89AE311E3A5A257A75911EA32/4221CE240EC211EB9F6B1914C4F9AE02.roa
Signing time: Thu 13 Mar 2025 04:59:00 +0000
ROA not before: Thu 13 Mar 2025 04:59:00 +0000
ROA not after: Fri 31 Oct 2025 00:00:00 +0000
asID: 58656
IP address blocks: 103.12.176.0/22 maxlen: 24
118.179.8.0/21 maxlen: 21
118.179.9.0/24 maxlen: 24
118.179.12.0/24 maxlen: 24
118.179.14.0/24 maxlen: 24
118.179.15.0/24 maxlen: 24
118.179.16.0/20 maxlen: 20
118.179.16.0/24 maxlen: 24
118.179.17.0/24 maxlen: 24
118.179.18.0/24 maxlen: 24
118.179.19.0/24 maxlen: 24
118.179.20.0/23 maxlen: 24
118.179.22.0/24 maxlen: 24
118.179.23.0/24 maxlen: 24
118.179.24.0/23 maxlen: 23
118.179.24.0/24 maxlen: 24
118.179.25.0/24 maxlen: 24
118.179.26.0/24 maxlen: 24
118.179.27.0/24 maxlen: 24
118.179.28.0/24 maxlen: 24
118.179.29.0/24 maxlen: 24
118.179.30.0/23 maxlen: 23
118.179.30.0/24 maxlen: 24
118.179.31.0/24 maxlen: 24
2404:d900::/32 maxlen: 32
2404:d900::/48 maxlen: 48
2404:d900:50::/48 maxlen: 48
2404:d900:1000::/48 maxlen: 48
2404:d900:2000::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9127523/12B997E89AE311E3A5A257A75911EA32/imgd0MQ3MdD0djpNvdXUzAH9ZMI.crl
rsync://rpki.apnic.net/member_repository/A9127523/12B997E89AE311E3A5A257A75911EA32/imgd0MQ3MdD0djpNvdXUzAH9ZMI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/imgd0MQ3MdD0djpNvdXUzAH9ZMI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 21 Apr 2025 15:32:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 11620 (0x2d64)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9127523, serialNumber=8A681DD0C43731D0F4763A4DBDD5D4CC01FD64C2
Validity
Not Before: Mar 13 04:59:00 2025 GMT
Not After : Oct 31 00:00:00 2025 GMT
Subject: CN=67d26614-8319
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:db:6b:f0:ce:4e:3a:35:00:bd:62:3f:31:33:
1b:62:b5:71:97:b8:c4:4f:df:a5:d4:f0:7b:6e:7b:
50:cc:04:5e:29:2d:dd:2b:f0:83:62:04:02:98:db:
41:c2:e3:72:56:67:c7:93:c9:65:91:c5:b0:ea:4a:
51:de:e5:be:dc:9a:a7:3b:53:71:47:eb:c0:37:e8:
76:eb:e5:01:2f:fc:87:4f:b7:b0:e5:76:77:28:00:
48:fb:1c:74:b2:aa:42:f5:19:5b:27:bc:27:6e:7e:
eb:31:b2:4a:18:89:7e:88:23:d9:61:de:57:9f:13:
2c:2a:ae:4d:41:60:85:7e:2b:f0:a2:ca:d4:39:64:
0a:fb:30:eb:c7:44:af:4d:67:0f:32:b4:e0:26:29:
60:65:42:df:3e:60:b2:63:8b:cc:74:46:a8:0e:2a:
3e:da:08:cf:ed:b7:f9:e1:0f:24:bf:0d:e4:cc:65:
3c:da:9d:04:1a:05:a5:0b:4b:0d:cd:68:de:63:36:
bf:d5:f3:eb:c3:bb:5f:bf:2a:ac:00:eb:4b:9c:2f:
78:13:ba:4b:9e:dc:0e:87:e2:1d:33:55:fd:dd:0d:
01:e7:e2:d5:ff:bb:7f:84:a2:23:5d:2f:65:02:bf:
da:78:f1:af:a9:27:92:1a:67:aa:d4:77:a7:ab:14:
53:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:72:A8:AB:03:65:11:67:82:22:8F:BD:D2:19:2C:88:5F:06:3A:DD
X509v3 Authority Key Identifier:
keyid:8A:68:1D:D0:C4:37:31:D0:F4:76:3A:4D:BD:D5:D4:CC:01:FD:64:C2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9127523/12B997E89AE311E3A5A257A75911EA32/imgd0MQ3MdD0djpNvdXUzAH9ZMI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/imgd0MQ3MdD0djpNvdXUzAH9ZMI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9127523/12B997E89AE311E3A5A257A75911EA32/4221CE240EC211EB9F6B1914C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.12.176.0/22
118.179.8.0-118.179.31.255
IPv6:
2404:d900::/32
Signature Algorithm: sha256WithRSAEncryption
7c:ee:c0:02:41:e9:b5:0f:0f:3e:79:a3:d9:4c:c3:95:de:1c:
1a:bc:14:8a:62:c6:41:6e:e3:ff:6b:84:88:8f:9f:1b:fd:c8:
82:5c:fb:b4:97:b8:64:1b:fb:3a:81:16:7a:92:d0:78:d3:f5:
2b:4a:7c:59:8a:4e:3f:1a:11:25:5e:f6:fd:cb:bb:8a:b3:2d:
fa:ee:d8:cb:71:e1:c8:4c:25:a5:5f:dc:61:45:2e:aa:92:2f:
f8:dc:60:00:9d:d6:a7:2d:2d:ec:0c:b9:76:34:fb:37:5d:cf:
5f:e8:f9:54:1b:c5:99:e2:e8:15:2f:74:99:54:0c:71:19:0c:
66:18:a2:eb:14:90:7d:ca:1e:73:ca:53:a9:37:3e:5f:9d:c9:
c3:82:7b:6c:d0:80:dc:a4:74:35:6f:61:9c:2f:cd:28:e1:8f:
fa:74:02:ae:39:24:97:21:9b:d1:c6:6a:37:06:22:2b:0c:09:
ed:f4:c8:30:04:87:75:2c:eb:91:36:80:61:9e:63:b2:fa:76:
44:4a:a7:12:a2:f4:4a:02:8b:d0:bc:b4:4d:8c:47:f2:e4:40:
f0:a7:f4:a6:8b:5e:52:b5:8c:80:6f:aa:aa:a9:18:a6:92:0e:
3c:ba:43:f0:c4:a0:07:19:1c:cc:ba:5d:cb:8d:14:17:f8:fd:
b3:36:c2:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 14:14:43 2025 by rpki-client