Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A913F721/6442437A53AC11EA9AD54B2FC4F9AE02/0798B4E4B7BE11EF81216809C4F9AE02.roa
File: 0798B4E4B7BE11EF81216809C4F9AE02.roa (raw, json)
Hash identifier: KHSXWBZmz8LdWRiwOy7XOGBbtsx76HJLZ60RGtbONSY=
Subject key identifier: 2F:7B:77:BF:BA:B5:C6:E8:3B:8D:63:58:D2:0F:9C:F9:72:B7:2A:B1
Certificate issuer: /CN=A913F721/serialNumber=1DD717B229936190CEB667C7CE1CA9F9BFB5FAC4
Certificate serial: 0AB6
Authority key identifier: 1D:D7:17:B2:29:93:61:90:CE:B6:67:C7:CE:1C:A9:F9:BF:B5:FA:C4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HdcXsimTYZDOtmfHzhyp-b-1-sQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A913F721/6442437A53AC11EA9AD54B2FC4F9AE02/0798B4E4B7BE11EF81216809C4F9AE02.roa
Signing time: Wed 11 Dec 2024 12:47:07 +0000
ROA not before: Wed 11 Dec 2024 12:47:07 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 139875
IP address blocks: 103.113.192.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A913F721/6442437A53AC11EA9AD54B2FC4F9AE02/HdcXsimTYZDOtmfHzhyp-b-1-sQ.crl
rsync://rpki.apnic.net/member_repository/A913F721/6442437A53AC11EA9AD54B2FC4F9AE02/HdcXsimTYZDOtmfHzhyp-b-1-sQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HdcXsimTYZDOtmfHzhyp-b-1-sQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 19 Apr 2025 19:21:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2742 (0xab6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A913F721, serialNumber=1DD717B229936190CEB667C7CE1CA9F9BFB5FAC4
Validity
Not Before: Dec 11 12:47:07 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=675989cb-9f1a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:dc:c4:e5:db:3b:82:0c:b8:d3:0c:9e:2b:4a:
20:f9:dc:66:e9:7e:05:fa:f1:ef:dc:9e:5a:b1:6a:
1c:ad:00:85:92:7b:03:b7:24:e6:e5:6f:56:71:91:
6a:12:50:c7:f3:3b:2c:52:8e:e1:48:07:20:dc:d7:
b6:c6:bf:cb:51:6b:e2:eb:54:83:dc:f2:ce:1f:b1:
13:23:88:e9:86:a4:47:0b:97:fb:08:13:04:cb:c7:
cf:cb:5e:ee:aa:25:92:7a:0f:b1:4f:4d:5f:63:37:
71:4f:d1:fb:1d:b2:c8:9e:5c:e7:56:97:a5:06:de:
7c:62:a1:f7:04:5c:f9:25:57:71:c7:e2:ec:3b:53:
d0:2e:9c:a7:31:65:f3:ed:d3:0c:ad:26:3e:87:10:
f6:2a:b6:a9:a9:0d:47:5f:43:0d:96:08:d9:13:98:
d8:7c:60:b8:56:7a:04:a0:92:43:ec:aa:17:0b:5c:
5a:a8:bb:2c:ca:08:5d:0c:39:91:43:c3:58:6a:34:
0d:70:54:bb:a7:a5:b7:a8:4e:57:55:db:d3:a0:84:
c5:00:70:fd:0d:f0:db:68:e2:b5:93:78:35:8c:df:
95:f5:29:99:0c:34:28:99:45:bb:fe:92:89:b3:63:
53:76:1d:88:e9:6b:5c:6a:1c:21:fb:19:3b:df:a0:
6e:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:7B:77:BF:BA:B5:C6:E8:3B:8D:63:58:D2:0F:9C:F9:72:B7:2A:B1
X509v3 Authority Key Identifier:
keyid:1D:D7:17:B2:29:93:61:90:CE:B6:67:C7:CE:1C:A9:F9:BF:B5:FA:C4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A913F721/6442437A53AC11EA9AD54B2FC4F9AE02/HdcXsimTYZDOtmfHzhyp-b-1-sQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HdcXsimTYZDOtmfHzhyp-b-1-sQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913F721/6442437A53AC11EA9AD54B2FC4F9AE02/0798B4E4B7BE11EF81216809C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.113.192.0/22
Signature Algorithm: sha256WithRSAEncryption
33:dd:da:26:fd:bb:9d:2d:8f:c7:c1:e7:56:7d:e1:c1:f7:81:
53:b3:d0:a7:5e:61:f8:e3:a6:48:95:1a:56:74:36:d1:ef:1c:
17:8e:44:de:51:aa:e8:de:1a:c4:dd:75:29:1b:be:01:e5:c4:
5f:4f:a4:c7:07:e9:e0:09:54:a5:86:43:ad:6d:72:34:f2:85:
3e:d0:b5:35:af:6f:db:6a:71:ef:44:d9:f7:cd:1c:71:f1:99:
5c:ac:dd:72:87:35:96:e9:51:76:80:30:53:83:52:0f:8b:8d:
15:9a:07:21:ed:21:28:28:ae:fe:53:0f:52:c7:fd:86:50:00:
b8:56:a5:d3:23:da:08:4b:7b:94:57:14:e8:75:10:64:a2:34:
f5:d8:85:0d:4b:56:57:c3:18:0c:61:64:33:21:96:22:28:e0:
cf:49:a8:6e:74:8b:12:92:0d:06:0a:b6:47:da:7c:74:b6:f1:
ae:9a:c9:31:60:a8:d7:69:42:46:3d:ee:0a:0a:d1:2b:30:a7:
70:55:11:68:4d:a5:98:5c:5e:05:6e:41:b1:0c:27:c3:62:9c:
ff:77:c0:fd:ee:98:df:dc:9e:da:0b:9a:91:c2:ed:65:06:4b:
ff:4b:6d:97:bd:5e:56:40:7c:4e:a2:b2:c1:f2:d0:77:a3:00:
4a:ab:7c:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 13 23:11:48 2025 by rpki-client