Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91364F5/3A3A210ED9E211EE9BAE372EC4F9AE02/654E27420CA311F0A866C650C4F9AE02.roa
File: 654E27420CA311F0A866C650C4F9AE02.roa (raw, json)
Hash identifier: tN4x9sv/6uNcQecpvfPEKROlYAyEzXXPm2NgvsfUw14=
Subject key identifier: F8:28:5A:5C:38:CB:E6:F4:81:99:7C:50:41:C3:73:2D:29:68:D9:06
Certificate issuer: /CN=A91364F5/serialNumber=CCB8E08F9990A75531E936ADB06DBACAA731B552
Certificate serial: DC
Authority key identifier: CC:B8:E0:8F:99:90:A7:55:31:E9:36:AD:B0:6D:BA:CA:A7:31:B5:52
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zLjgj5mQp1Ux6TatsG26yqcxtVI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91364F5/3A3A210ED9E211EE9BAE372EC4F9AE02/654E27420CA311F0A866C650C4F9AE02.roa
Signing time: Tue 01 Apr 2025 05:31:05 +0000
ROA not before: Tue 01 Apr 2025 05:31:05 +0000
ROA not after: Thu 28 May 2026 00:00:00 +0000
asID: 152606
IP address blocks: 2001:df5:4bc0::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91364F5/3A3A210ED9E211EE9BAE372EC4F9AE02/zLjgj5mQp1Ux6TatsG26yqcxtVI.crl
rsync://rpki.apnic.net/member_repository/A91364F5/3A3A210ED9E211EE9BAE372EC4F9AE02/zLjgj5mQp1Ux6TatsG26yqcxtVI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zLjgj5mQp1Ux6TatsG26yqcxtVI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 16 Apr 2025 04:34:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 220 (0xdc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91364F5
Validity
Not Before: Apr 1 05:31:05 2025 GMT
Not After : May 28 00:00:00 2026 GMT
Subject: CN=67eb7a18-144a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:a0:ec:9a:76:e0:4d:7e:a5:06:a1:e5:6f:fb:
47:3f:70:2f:59:20:50:bd:2f:7e:c3:39:b2:ce:28:
53:62:80:d2:51:7e:85:f1:ac:ad:ee:26:66:f2:7d:
c8:5e:de:0c:cb:61:32:3d:4b:aa:67:33:df:84:ed:
8b:98:a6:a2:00:a7:f4:74:4e:a1:1d:03:55:d0:8b:
0d:51:9f:59:c3:95:91:b7:d0:f6:79:36:60:f0:dd:
12:ed:10:df:36:c8:d5:8a:fb:8b:5e:9e:4e:95:f9:
4a:97:76:2a:47:dd:71:0f:b1:36:a2:49:e5:71:7b:
4a:98:df:df:39:6a:49:3d:65:86:61:06:93:6f:3e:
34:fc:e7:08:36:94:ee:f4:6b:40:e6:f1:a9:7f:c1:
e4:46:a5:39:12:47:f2:b7:33:f2:fb:85:8c:f3:6e:
48:0a:3e:ab:17:09:cd:00:a8:ae:23:0d:b5:94:82:
6a:d8:f7:d5:28:c5:55:cb:64:0c:dc:4a:34:31:b2:
dd:8e:3e:d9:20:d1:03:7b:45:80:84:b7:59:fd:f3:
02:72:21:1c:5b:d9:72:0b:07:b8:2a:9d:cb:39:43:
0f:3c:3e:3c:38:50:ad:d8:70:2d:e0:72:7a:ed:e8:
50:8f:af:f2:ba:67:c7:c0:c7:10:ca:78:44:fd:bc:
8f:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:28:5A:5C:38:CB:E6:F4:81:99:7C:50:41:C3:73:2D:29:68:D9:06
X509v3 Authority Key Identifier:
keyid:CC:B8:E0:8F:99:90:A7:55:31:E9:36:AD:B0:6D:BA:CA:A7:31:B5:52
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91364F5/3A3A210ED9E211EE9BAE372EC4F9AE02/zLjgj5mQp1Ux6TatsG26yqcxtVI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zLjgj5mQp1Ux6TatsG26yqcxtVI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91364F5/3A3A210ED9E211EE9BAE372EC4F9AE02/654E27420CA311F0A866C650C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv6:
2001:df5:4bc0::/48
Signature Algorithm: sha256WithRSAEncryption
79:70:c0:0e:c9:2b:d2:98:ad:60:11:c8:b0:3b:75:74:b0:5c:
06:a0:21:19:75:f3:75:35:ca:e1:5b:64:19:da:07:3d:2b:ea:
99:7a:ec:65:6b:9d:19:25:72:fb:09:37:38:8f:96:6c:5b:c4:
ba:97:8d:fb:65:93:d8:29:62:85:00:59:36:57:ee:f8:3d:bd:
3c:6a:df:9e:a8:f0:84:91:44:1f:92:34:9d:43:1d:9f:a1:5b:
c5:45:95:52:54:0f:32:32:a6:98:3d:22:a4:2a:33:a8:da:01:
56:bc:2e:10:43:31:8b:68:6c:0c:69:03:c7:10:fc:b3:17:c4:
4b:16:b4:55:91:70:2f:c5:58:3a:62:e9:a3:79:a4:53:70:64:
11:89:67:29:ee:fa:02:e6:74:77:56:85:93:a5:7c:c1:95:8a:
6b:9e:94:db:75:dc:84:41:2e:0c:95:65:08:1e:43:7f:1d:98:
1a:6b:12:07:d8:a4:27:bd:b0:cd:3b:4e:86:d6:86:a7:58:b8:
06:4f:84:7b:f7:f0:6e:7e:86:5d:3c:d3:1b:af:53:b9:cb:49:
85:23:4e:a8:65:3c:dc:77:7e:97:1f:2f:7d:7b:8f:2f:5a:71:
e3:f4:b9:7f:f4:bf:cb:bc:5e:d0:b3:6e:33:55:ea:51:ff:4f:
d0:0e:fd:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 22:20:05 2025 by rpki-client