Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9134E35/0E7AB332277B11ED80A38328C4F9AE02/1B0B620C16C811EF93505027C4F9AE02.roa
File: 1B0B620C16C811EF93505027C4F9AE02.roa (raw, json)
Hash identifier: 2oEdY4ta3hN90rZpyN1SlR035NNb05Tx7U/Ur7N9XJo=
Subject key identifier: BA:F9:46:02:D5:E7:EC:C9:76:B2:5A:70:26:C1:F7:EC:0D:40:F2:03
Certificate issuer: /CN=A9134E35/serialNumber=F3F929FF5855ED244FC5833E25ECDF553A58FA67
Certificate serial: 022B
Authority key identifier: F3:F9:29:FF:58:55:ED:24:4F:C5:83:3E:25:EC:DF:55:3A:58:FA:67
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8_kp_1hV7SRPxYM-JezfVTpY-mc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9134E35/0E7AB332277B11ED80A38328C4F9AE02/1B0B620C16C811EF93505027C4F9AE02.roa
Signing time: Mon 07 Apr 2025 01:38:01 +0000
ROA not before: Mon 07 Apr 2025 01:38:01 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 150803
IP address blocks: 160.202.45.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9134E35/0E7AB332277B11ED80A38328C4F9AE02/8_kp_1hV7SRPxYM-JezfVTpY-mc.crl
rsync://rpki.apnic.net/member_repository/A9134E35/0E7AB332277B11ED80A38328C4F9AE02/8_kp_1hV7SRPxYM-JezfVTpY-mc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8_kp_1hV7SRPxYM-JezfVTpY-mc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 20 Apr 2025 01:35:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 555 (0x22b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9134E35, serialNumber=F3F929FF5855ED244FC5833E25ECDF553A58FA67
Validity
Not Before: Apr 7 01:38:01 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=67f32c79-7a16
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:b5:57:a9:a9:4f:53:6b:af:5f:59:fb:0d:67:
b8:36:6c:59:9e:fa:2d:e3:73:3b:84:c0:e4:1c:fb:
9d:f4:77:1f:68:b2:a1:d9:5c:5e:32:b3:c1:e1:a6:
00:82:54:60:14:6a:34:b1:37:a1:e8:27:bd:ce:7e:
5a:90:eb:da:00:65:86:6f:71:21:3d:d9:67:33:73:
3a:c6:44:9b:aa:09:a1:61:a1:57:dc:1e:aa:60:3c:
57:a1:0a:68:4f:0f:39:8a:cc:c3:ae:57:8e:45:00:
65:1d:9c:41:a1:bc:82:24:b7:80:a0:4a:02:2b:d6:
3f:e3:90:29:69:2c:e8:b0:57:81:99:48:35:de:59:
eb:e2:29:40:99:1f:16:a2:0d:46:7c:e0:7e:ea:e0:
e2:d7:b1:72:8d:43:ce:e2:33:cb:b4:07:73:3f:e8:
10:d3:30:35:a3:bc:a5:ef:e0:85:d4:d5:12:5a:58:
cf:a1:b1:4b:97:39:b3:28:7f:cf:10:1f:8d:0a:15:
87:0c:1d:45:aa:50:1d:07:39:4a:bf:7b:66:65:2d:
98:b8:ca:36:8f:0d:18:a7:26:e4:e6:be:68:ff:ac:
3b:22:b4:94:c6:4c:d7:6c:e5:e8:0f:b7:1b:aa:c8:
1a:ea:ab:48:96:3f:9a:8f:f1:af:2d:44:dc:33:5f:
6d:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:F9:46:02:D5:E7:EC:C9:76:B2:5A:70:26:C1:F7:EC:0D:40:F2:03
X509v3 Authority Key Identifier:
keyid:F3:F9:29:FF:58:55:ED:24:4F:C5:83:3E:25:EC:DF:55:3A:58:FA:67
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9134E35/0E7AB332277B11ED80A38328C4F9AE02/8_kp_1hV7SRPxYM-JezfVTpY-mc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8_kp_1hV7SRPxYM-JezfVTpY-mc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9134E35/0E7AB332277B11ED80A38328C4F9AE02/1B0B620C16C811EF93505027C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
160.202.45.0/24
Signature Algorithm: sha256WithRSAEncryption
23:01:61:5b:f9:9e:89:30:3b:93:4b:d1:76:7d:fb:d3:ed:16:
02:86:92:d6:67:cb:8f:c6:6a:e4:d4:81:9d:00:b0:c2:84:b2:
40:a9:b7:93:40:c3:c5:44:52:2e:c9:74:8b:df:04:db:d1:87:
9e:2e:14:ce:85:a9:2f:dd:c4:e8:45:3d:5c:c9:73:04:f6:b3:
24:8b:29:d6:ce:88:40:7b:f9:85:0c:90:e8:0f:81:40:64:7d:
53:32:43:05:b3:f6:c5:0f:d0:24:f8:9e:78:07:ca:a7:4e:64:
13:b7:fe:66:db:4e:84:6f:54:19:b3:0b:a8:ac:8f:b7:12:9f:
d4:4e:f0:ba:33:39:48:49:e0:f6:27:3d:6e:82:8c:43:01:cf:
9f:5e:4e:26:57:9c:2c:0e:74:d1:5b:d3:fb:4c:64:fc:51:d4:
36:1f:6a:6b:c9:46:09:5f:53:bd:b5:9f:e0:17:bd:e2:e4:a7:
63:c4:b8:97:39:e4:d5:12:2b:c1:dc:54:69:d5:70:9a:d4:3c:
b9:a7:c8:e9:38:cf:1e:15:ab:45:a5:d1:fc:a6:ac:35:2f:03:
85:96:3c:b7:f5:c4:cf:5f:9a:84:24:cf:d9:b9:27:24:95:ca:
86:28:8e:1e:e0:85:8a:48:6d:88:a7:2f:68:84:fc:91:f1:69:
b8:5f:65:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 01:57:06 2025 by rpki-client