Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9130F4B/5772AA3054E411E98536F659C4F9AE02/B38547B48C1811ED95522F3EC4F9AE02.roa
File: B38547B48C1811ED95522F3EC4F9AE02.roa (raw, json)
Hash identifier: HXSaiv/+h3LslBJCo/sEGl2BDqm+Kqjgd7hBF3MDYrc=
Subject key identifier: AA:9F:E7:DC:96:5E:BB:56:8B:48:1B:0D:E9:31:91:7B:B3:62:FB:C0
Certificate issuer: /CN=A9130F4B/serialNumber=9930D0FFEB870701B4E8EB4DB3C0866233FC5B50
Certificate serial: 0F73
Authority key identifier: 99:30:D0:FF:EB:87:07:01:B4:E8:EB:4D:B3:C0:86:62:33:FC:5B:50
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mTDQ_-uHBwG06OtNs8CGYjP8W1A.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9130F4B/5772AA3054E411E98536F659C4F9AE02/B38547B48C1811ED95522F3EC4F9AE02.roa
Signing time: Thu 30 May 2024 18:52:06 +0000
ROA not before: Thu 30 May 2024 18:52:06 +0000
ROA not after: Wed 30 Jul 2025 00:00:00 +0000
asID: 24511
IP address blocks: 103.138.130.0/23 maxlen: 24
2405:e40::/32 maxlen: 32
2405:e40:8::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9130F4B/5772AA3054E411E98536F659C4F9AE02/mTDQ_-uHBwG06OtNs8CGYjP8W1A.crl
rsync://rpki.apnic.net/member_repository/A9130F4B/5772AA3054E411E98536F659C4F9AE02/mTDQ_-uHBwG06OtNs8CGYjP8W1A.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mTDQ_-uHBwG06OtNs8CGYjP8W1A.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 19 Apr 2025 17:26:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3955 (0xf73)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9130F4B, serialNumber=9930D0FFEB870701B4E8EB4DB3C0866233FC5B50
Validity
Not Before: May 30 18:52:06 2024 GMT
Not After : Jul 30 00:00:00 2025 GMT
Subject: CN=6658cad6-cb5d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:fc:1f:a6:2c:e6:ab:fa:fa:83:08:ee:13:50:
b5:11:32:b8:1d:a6:79:6a:b7:25:f4:8c:9f:65:0f:
88:e1:3f:54:8c:22:98:d9:18:90:05:0d:dd:96:8b:
3b:da:6f:70:8e:bb:54:43:3d:40:ef:4d:af:94:99:
cd:8c:b8:73:8d:7a:16:ff:c3:45:c0:e0:3e:16:a3:
59:51:a5:e8:31:00:38:aa:96:cd:fd:8b:0a:03:d6:
7b:78:40:d4:ab:b8:71:19:df:b8:b3:66:85:9b:d6:
2e:be:6f:7e:b7:0d:2a:a3:cc:d9:dd:f0:20:ab:46:
b2:8b:95:12:94:88:61:fc:a5:51:9f:33:38:b7:32:
5b:cd:bd:38:fa:2c:69:7a:46:f6:23:25:ed:3b:80:
54:84:e9:46:96:36:e0:45:fc:12:9c:b2:d2:94:21:
fc:af:8c:9f:fa:14:89:bb:97:79:d2:dd:1c:d5:2a:
a7:57:c3:15:aa:f6:09:46:5b:da:f6:36:12:f6:1f:
26:3e:27:05:5e:dc:70:1e:5e:43:10:e1:8e:0f:1b:
9e:e3:af:57:f8:e6:48:98:e5:52:80:c6:c0:9b:9b:
e1:89:e2:59:80:b9:3e:fa:d2:7b:3a:42:33:86:fd:
37:aa:bf:00:a5:3a:29:2a:b3:51:c2:ba:7d:64:5d:
21:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:9F:E7:DC:96:5E:BB:56:8B:48:1B:0D:E9:31:91:7B:B3:62:FB:C0
X509v3 Authority Key Identifier:
keyid:99:30:D0:FF:EB:87:07:01:B4:E8:EB:4D:B3:C0:86:62:33:FC:5B:50
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9130F4B/5772AA3054E411E98536F659C4F9AE02/mTDQ_-uHBwG06OtNs8CGYjP8W1A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mTDQ_-uHBwG06OtNs8CGYjP8W1A.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9130F4B/5772AA3054E411E98536F659C4F9AE02/B38547B48C1811ED95522F3EC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.138.130.0/23
IPv6:
2405:e40::/32
Signature Algorithm: sha256WithRSAEncryption
c3:9a:47:8d:12:c7:b1:6a:f9:8c:87:a3:7e:c4:1e:e5:3f:19:
5d:52:c5:62:32:b6:62:a4:93:00:f2:2c:04:ab:34:b5:b7:61:
27:ae:e1:b8:96:47:de:7d:72:4b:4e:a0:75:dc:31:38:90:f4:
79:f9:4b:91:a0:8b:ce:9c:f1:5b:ef:26:7d:75:79:80:0a:b7:
65:33:31:6a:ff:64:46:8b:87:3f:b9:07:f6:9e:e3:c2:92:a0:
91:14:22:cc:00:64:3e:c4:6b:95:23:3a:05:15:1b:2d:24:9f:
a8:ad:d9:31:a2:5b:6b:1c:96:62:78:a2:0f:88:5f:db:18:4e:
9c:b7:98:e5:3b:3c:1a:79:97:61:b5:e7:ba:12:b7:6a:f9:23:
29:8a:b1:35:23:49:04:8e:ab:a1:af:93:76:f1:6e:60:de:53:
ff:ef:bb:10:cb:1c:f3:6a:51:56:4e:20:d8:91:db:56:4b:c5:
e6:45:9d:c8:d5:47:1d:92:fc:f7:34:6e:30:65:76:83:ca:e7:
95:04:eb:57:2b:da:f8:23:00:12:dc:e8:1c:81:f4:d2:89:d7:
bb:93:f4:6c:54:da:c4:05:66:37:9b:75:66:9f:9e:93:b0:1b:
fa:3f:14:53:f6:c3:4d:29:13:ad:70:1c:c7:13:2e:63:8b:79:
5a:a0:e8:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 02:47:11 2025 by rpki-client