Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/1703348238F611EFAE53A822C4F9AE02.roa
File: 1703348238F611EFAE53A822C4F9AE02.roa (raw, json)
Hash identifier: 9PbBml0/E97tyIZ6LCJAYyx/+6Li47fLfQEcz5pzevQ=
Subject key identifier: 1F:F9:96:40:1C:5D:7A:E2:F7:E4:00:4D:A1:A3:2A:9E:13:A8:73:0A
Certificate issuer: /CN=A9137ABC/serialNumber=61BF3ED4C3BFBC0916EF9480AAFF222A437AF02C
Certificate serial: 3899
Authority key identifier: 61:BF:3E:D4:C3:BF:BC:09:16:EF:94:80:AA:FF:22:2A:43:7A:F0:2C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/1703348238F611EFAE53A822C4F9AE02.roa
Signing time: Tue 16 Jul 2024 14:30:50 +0000
ROA not before: Tue 16 Jul 2024 14:30:50 +0000
ROA not after: Tue 30 Sep 2025 00:00:00 +0000
asID: 152915
IP address blocks: 61.91.255.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.crl
rsync://rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 19 Apr 2025 14:20:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 14489 (0x3899)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9137ABC, serialNumber=61BF3ED4C3BFBC0916EF9480AAFF222A437AF02C
Validity
Not Before: Jul 16 14:30:50 2024 GMT
Not After : Sep 30 00:00:00 2025 GMT
Subject: CN=66968419-bcaa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:71:a8:2a:ae:29:6a:e5:fc:d4:b0:7b:e5:06:
4d:59:c1:5c:2a:76:9b:8d:30:4a:ec:09:bd:4b:10:
8f:5e:1d:a3:38:ac:ff:47:e4:8c:d1:0a:f3:40:81:
43:50:df:c4:5e:11:13:a6:c3:30:20:63:6d:67:a5:
bc:96:14:34:02:ac:a4:cc:07:31:dc:f4:13:a3:bf:
d4:32:cb:38:a6:34:77:d7:f3:41:df:7c:da:35:72:
1a:f1:22:e4:c1:89:dc:aa:7c:9f:a4:1d:80:17:47:
0f:46:d7:0a:cf:3f:b3:06:8f:14:ad:ad:bb:81:ad:
ab:89:2c:2b:e9:ca:98:5c:38:7e:4a:b4:47:4b:62:
02:6d:e0:53:cb:b5:90:d1:bc:d5:af:c7:52:c3:5e:
a9:f2:3a:bd:f8:f9:82:ea:46:84:f4:60:39:9c:71:
98:a6:ee:31:7e:43:4b:2f:0f:f2:c7:8f:77:3d:98:
d1:0f:fa:72:af:32:cb:d7:3d:50:81:8c:e1:3e:49:
42:a8:ab:a5:29:89:aa:02:a0:0d:dd:6e:82:7a:58:
89:bb:49:51:5c:25:5b:d5:d8:0c:ca:31:9f:8e:08:
a0:e1:01:db:12:fc:8f:20:58:d2:94:d4:0e:22:b9:
ed:32:dc:ed:d4:6e:36:4f:1e:65:05:b4:c2:d3:a4:
25:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:F9:96:40:1C:5D:7A:E2:F7:E4:00:4D:A1:A3:2A:9E:13:A8:73:0A
X509v3 Authority Key Identifier:
keyid:61:BF:3E:D4:C3:BF:BC:09:16:EF:94:80:AA:FF:22:2A:43:7A:F0:2C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/1703348238F611EFAE53A822C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
61.91.255.0/24
Signature Algorithm: sha256WithRSAEncryption
93:cd:ce:c0:7e:da:2a:41:07:33:10:e1:35:4c:66:59:44:96:
53:72:06:69:ab:1b:b6:46:ed:72:93:c2:22:74:42:90:d6:5b:
22:4a:d0:71:50:c5:48:c7:7a:74:c4:4c:dd:a6:26:2e:0f:68:
03:94:f1:3e:5e:6e:b3:0b:08:2c:47:d9:44:8d:e8:ea:87:8e:
3e:3e:20:f4:2f:cb:33:0e:2f:4a:5d:74:4d:fa:c7:98:50:45:
3b:59:81:1a:8c:af:66:f7:73:e2:42:31:ac:cb:0e:7d:1b:8e:
6f:af:ee:07:f5:1e:82:16:7f:c3:9d:67:bb:5c:d7:66:3f:2c:
72:30:12:64:9d:9a:a4:d1:87:a9:ca:7f:c5:3a:89:d5:28:47:
6e:19:6e:dd:07:02:a0:bf:2d:01:a0:c0:ce:de:e7:0e:25:80:
fe:92:2f:db:46:51:07:54:b5:cc:4d:b3:05:4d:81:38:05:18:
33:30:e1:44:04:95:4f:48:f1:60:6f:3e:72:96:76:a7:2b:1a:
d2:d5:2b:4b:cd:40:59:b1:77:0a:ef:0e:9c:02:02:4c:76:5c:
a7:ce:08:a9:57:43:c0:6a:d7:30:fc:57:18:c8:48:4e:5a:84:
f1:4d:e6:0b:e2:48:39:69:50:9e:d8:d6:c7:eb:00:31:c8:e2:
34:e7:36:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 13 14:30:38 2025 by rpki-client