Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9139B49/0780B990C9F811E79EF12009C4F9AE02/0BC405C092CD11EFB1C8E669C4F9AE02.roa
File: 0BC405C092CD11EFB1C8E669C4F9AE02.roa (raw, json)
Hash identifier: pLQhbQ0mTRBssMztKv86DK/TOvY561i4aTIXdGlEvzU=
Subject key identifier: 08:09:56:66:5E:1E:E4:EE:FE:B9:86:CB:AE:90:F5:F7:BA:D1:9B:CC
Certificate issuer: /CN=A9139B49/serialNumber=4EE540A48AD973FBD831ABD02603B5FB0FB945BE
Certificate serial: 1843
Authority key identifier: 4E:E5:40:A4:8A:D9:73:FB:D8:31:AB:D0:26:03:B5:FB:0F:B9:45:BE
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TuVApIrZc_vYMavQJgO1-w-5Rb4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9139B49/0780B990C9F811E79EF12009C4F9AE02/0BC405C092CD11EFB1C8E669C4F9AE02.roa
Signing time: Wed 12 Feb 2025 17:24:27 +0000
ROA not before: Wed 12 Feb 2025 17:24:27 +0000
ROA not after: Tue 31 Mar 2026 00:00:00 +0000
asID: 59254
IP address blocks: 103.224.12.0/24 maxlen: 24
103.224.13.0/24 maxlen: 24
103.224.14.0/24 maxlen: 24
103.224.15.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9139B49/0780B990C9F811E79EF12009C4F9AE02/TuVApIrZc_vYMavQJgO1-w-5Rb4.crl
rsync://rpki.apnic.net/member_repository/A9139B49/0780B990C9F811E79EF12009C4F9AE02/TuVApIrZc_vYMavQJgO1-w-5Rb4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TuVApIrZc_vYMavQJgO1-w-5Rb4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 19 Apr 2025 16:31:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6211 (0x1843)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9139B49, serialNumber=4EE540A48AD973FBD831ABD02603B5FB0FB945BE
Validity
Not Before: Feb 12 17:24:27 2025 GMT
Not After : Mar 31 00:00:00 2026 GMT
Subject: CN=67acd94b-9f88
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:9c:40:b8:90:52:df:d9:dd:9b:95:5f:f7:c0:
83:c5:1b:9a:43:8c:fa:56:e3:79:d2:fb:2f:19:d0:
62:0f:06:54:1f:1a:55:27:7d:59:37:41:e4:9e:c0:
b4:96:eb:88:74:eb:af:c2:21:5b:d8:b9:c6:46:5a:
dc:e8:a5:1d:ba:9d:58:5d:43:a5:df:41:c1:1e:ce:
55:a8:f9:19:e1:b3:83:8f:3c:89:03:47:9d:f1:ef:
38:4f:97:21:21:4a:9c:6f:2b:e1:34:18:bf:24:49:
ab:f7:9f:d4:c5:56:8e:94:ce:5d:52:25:48:88:93:
fe:4c:cd:59:88:50:e7:ad:52:85:1a:44:b6:50:99:
92:62:22:04:63:3b:f8:4b:22:a3:ff:f6:2c:34:0f:
d8:16:20:f9:cc:23:eb:fd:f2:23:da:f1:43:bb:13:
84:d0:a1:cf:a0:9c:0e:1c:c1:69:a2:68:bc:6a:15:
7a:6f:77:f0:ad:83:75:3d:d7:f6:d6:d9:31:ff:b1:
94:be:0f:c1:7a:bd:45:30:5f:42:01:35:42:00:71:
39:dc:22:fc:ec:4b:7b:06:a8:bf:0f:62:84:3d:38:
d8:7d:40:8a:59:4f:14:d0:e0:64:f1:20:eb:2f:d0:
35:5e:38:a5:70:d5:ef:43:2a:45:65:d3:73:ff:d8:
56:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:09:56:66:5E:1E:E4:EE:FE:B9:86:CB:AE:90:F5:F7:BA:D1:9B:CC
X509v3 Authority Key Identifier:
keyid:4E:E5:40:A4:8A:D9:73:FB:D8:31:AB:D0:26:03:B5:FB:0F:B9:45:BE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9139B49/0780B990C9F811E79EF12009C4F9AE02/TuVApIrZc_vYMavQJgO1-w-5Rb4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TuVApIrZc_vYMavQJgO1-w-5Rb4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9139B49/0780B990C9F811E79EF12009C4F9AE02/0BC405C092CD11EFB1C8E669C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.224.12.0/22
Signature Algorithm: sha256WithRSAEncryption
8c:85:f1:bf:97:57:e9:61:f2:fd:48:71:80:65:47:5a:68:97:
5e:29:c0:a1:4f:b7:4e:e6:fe:00:fa:88:5b:36:4f:63:8d:ae:
39:48:ca:83:8d:52:6d:3b:a0:8f:c0:8e:38:11:4c:7b:f2:10:
f6:d4:d1:eb:11:24:8a:07:c7:01:ac:51:87:ef:16:26:56:d8:
3b:3e:93:78:d7:1c:6d:60:ea:89:bb:83:2a:e3:00:a7:ce:94:
1a:2a:d5:dc:1d:65:6e:01:cf:2a:08:5d:95:a7:0f:14:19:85:
e5:13:d9:9c:ba:38:54:a3:3d:1a:26:d9:79:d5:20:52:81:31:
08:2f:bb:7a:4d:57:1d:6e:a0:63:6f:d2:bc:76:e5:79:9f:77:
1a:a3:c1:52:49:9b:84:1e:f1:7f:a7:6c:5b:53:7d:24:8a:09:
c3:e1:e6:c9:17:eb:c5:3b:81:56:64:f4:80:04:d0:10:b3:ab:
a1:79:12:71:1e:6e:f8:e1:3e:45:03:2a:b6:c4:bc:e0:f4:f7:
59:a9:b0:68:32:fd:88:07:0e:58:de:93:f1:fc:9a:f2:f3:94:
bb:3c:09:ca:75:33:54:16:61:17:4b:44:4d:18:5a:c1:39:4a:
06:f7:38:ce:f2:72:35:41:60:3b:99:ff:21:ea:af:33:1b:0e:
83:9d:94:eb
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICGEMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MzlCNDkxMTAvBgNVBAUTKDRFRTU0MEE0OEFEOTczRkJEODMxQUJEMDI2MDNCNUZC
MEZCOTQ1QkUwHhcNMjUwMjEyMTcyNDI3WhcNMjYwMzMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02N2FjZDk0Yi05Zjg4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA05xAuJBS39ndm5Vf98CDxRuaQ4z6VuN50vsvGdBiDwZUHxpVJ31ZN0HknsC0
luuIdOuvwiFb2LnGRlrc6KUdup1YXUOl30HBHs5VqPkZ4bODjzyJA0ed8e84T5ch
IUqcbyvhNBi/JEmr95/UxVaOlM5dUiVIiJP+TM1ZiFDnrVKFGkS2UJmSYiIEYzv4
SyKj//YsNA/YFiD5zCPr/fIj2vFDuxOE0KHPoJwOHMFpomi8ahV6b3fwrYN1Pdf2
1tkx/7GUvg/Ber1FMF9CATVCAHE53CL87Et7Bqi/D2KEPTjYfUCKWU8U0OBk8SDr
L9A1XjilcNXvQypFZdNz/9hWdQIDAQABo4IClTCCApEwHQYDVR0OBBYEFAgJVmZe
HuTu/rmGy66Q9fe60ZvMMB8GA1UdIwQYMBaAFE7lQKSK2XP72DGr0CYDtfsPuUW+
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzOUI0OS8wNzgwQjk5MEM5
RjgxMUU3OUVGMTIwMDlDNEY5QUUwMi9UdVZBcElyWmNfdllNYXZRSmdPMS13LTVS
YjQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1R1VkFwSXJaY192WU1hdlFKZ08xLXctNVJiNC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
MzlCNDkvMDc4MEI5OTBDOUY4MTFFNzlFRjEyMDA5QzRGOUFFMDIvMEJDNDA1QzA5
MkNEMTFFRkIxQzhFNjY5QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBAJn4AwwDQYJKoZIhvcNAQELBQADggEBAIyF8b+XV+lh8v1I
cYBlR1pol14pwKFPt07m/gD6iFs2T2ONrjlIyoONUm07oI/AjjgRTHvyEPbU0esR
JIoHxwGsUYfvFiZW2Ds+k3jXHG1g6om7gyrjAKfOlBoq1dwdZW4BzyoIXZWnDxQZ
heUT2Zy6OFSjPRom2XnVIFKBMQgvu3pNVx1uoGNv0rx25XmfdxqjwVJJm4Qe8X+n
bFtTfSSKCcPh5skX68U7gVZk9IAE0BCzq6F5EnEebvjhPkUDKrbEvOD091mpsGgy
/YgHDljek/H8mvLzlLs8Ccp1M1QWYRdLRE0YWsE5Sgb3OM7ycjVBYDuZ/yHqrzMb
DoOdlOs=
-----END CERTIFICATE-----
Generated at Mon Apr 14 05:10:48 2025 by rpki-client