Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A914410E/2F03298A108611F08AEA480CC4F9AE02/3057138E143F11F08A345E0AC4F9AE02.roa
File: 3057138E143F11F08A345E0AC4F9AE02.roa (raw, json)
Hash identifier: litZH04YNtCR4iuEOlm91tI8Ccgt0oYZlfR5gRznpNA=
Subject key identifier: 19:AF:91:14:37:A0:05:26:D2:82:A5:85:DB:44:05:5B:DF:93:79:A4
Certificate issuer: /CN=A914410E/serialNumber=489A6FCED7DC63B7AB3666E35BD509D9EA1575E0
Certificate serial: 09
Authority key identifier: 48:9A:6F:CE:D7:DC:63:B7:AB:36:66:E3:5B:D5:09:D9:EA:15:75:E0
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SJpvztfcY7erNmbjW9UJ2eoVdeA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914410E/2F03298A108611F08AEA480CC4F9AE02/3057138E143F11F08A345E0AC4F9AE02.roa
Signing time: Tue 08 Apr 2025 06:04:48 +0000
ROA not before: Tue 08 Apr 2025 06:04:48 +0000
ROA not after: Fri 01 May 2026 00:00:00 +0000
asID: 137552
IP address blocks: 163.61.102.0/24 maxlen: 24
163.61.103.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A914410E/2F03298A108611F08AEA480CC4F9AE02/SJpvztfcY7erNmbjW9UJ2eoVdeA.crl
rsync://rpki.apnic.net/member_repository/A914410E/2F03298A108611F08AEA480CC4F9AE02/SJpvztfcY7erNmbjW9UJ2eoVdeA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SJpvztfcY7erNmbjW9UJ2eoVdeA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 02 May 2025 07:05:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 9 (0x9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914410E, serialNumber=489A6FCED7DC63B7AB3666E35BD509D9EA1575E0
Validity
Not Before: Apr 8 06:04:48 2025 GMT
Not After : May 1 00:00:00 2026 GMT
Subject: CN=67f4bc80-d289
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:16:91:19:dd:47:b8:47:f6:08:a9:ee:51:7e:
b9:91:79:16:24:71:68:dd:c2:3b:46:07:c1:99:ad:
88:50:97:f6:ac:5e:23:38:98:61:4a:b1:60:e5:41:
6c:21:5e:2c:01:8c:2b:65:3f:3c:1e:11:ba:8d:80:
db:dc:d9:8c:4b:8e:f8:6e:dc:b8:0a:8c:6a:07:33:
ef:13:bb:3a:52:ef:c2:77:74:46:59:ad:3f:65:25:
76:55:36:7c:06:f0:04:90:ad:67:16:fc:94:45:52:
70:6f:ed:2c:cf:20:64:8c:ee:82:c6:81:ec:10:81:
62:40:7c:10:ff:4a:49:36:62:07:70:88:09:10:27:
1d:0a:ae:1d:4c:c5:6b:da:c9:95:0d:4d:ca:4e:d0:
0e:09:d0:7e:d2:b1:62:6d:c7:87:7f:e5:f5:80:d0:
ce:ed:16:a7:55:43:bd:9f:37:b4:c0:49:2d:70:28:
9a:75:33:7e:f5:2a:04:e9:24:08:e8:83:15:b0:da:
50:4b:21:18:2c:5f:b3:71:5a:61:7e:ff:2b:50:df:
f8:c5:77:23:18:75:7b:98:a8:2c:e5:16:49:c4:c3:
4a:4c:7c:db:c5:de:f0:a6:eb:20:ef:d0:76:12:b9:
b2:1b:df:2f:4a:1c:9a:00:88:16:d6:3f:b6:fd:dc:
94:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:AF:91:14:37:A0:05:26:D2:82:A5:85:DB:44:05:5B:DF:93:79:A4
X509v3 Authority Key Identifier:
keyid:48:9A:6F:CE:D7:DC:63:B7:AB:36:66:E3:5B:D5:09:D9:EA:15:75:E0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914410E/2F03298A108611F08AEA480CC4F9AE02/SJpvztfcY7erNmbjW9UJ2eoVdeA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SJpvztfcY7erNmbjW9UJ2eoVdeA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914410E/2F03298A108611F08AEA480CC4F9AE02/3057138E143F11F08A345E0AC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
163.61.102.0/23
Signature Algorithm: sha256WithRSAEncryption
38:4a:d1:40:df:cd:39:b0:21:23:3d:38:5f:74:67:fc:aa:5d:
19:22:73:5f:7e:15:e9:29:94:37:a8:20:6f:86:09:7a:41:a6:
11:c6:54:ea:b5:d4:8a:e6:d6:9f:ae:c2:b5:73:dd:bc:5e:4b:
51:6a:b6:ba:67:27:9c:40:bd:fc:c3:47:a3:1c:2d:16:a1:aa:
c6:86:03:5d:21:10:41:2d:91:4f:ce:79:a1:57:fc:69:7c:6c:
4d:48:2e:ad:cd:4d:f0:46:ed:81:0b:a1:10:a5:4c:1e:54:7c:
e1:19:6f:15:4d:6a:56:ed:57:6b:7d:04:9d:7c:1f:aa:14:df:
90:88:46:6c:af:ec:52:7b:c5:e7:9c:d3:3c:df:13:2f:7d:1a:
22:c9:c8:e6:6d:39:dd:98:fc:c7:78:00:23:f5:83:dc:1c:73:
55:b1:8f:37:0a:ba:ff:04:6d:07:f3:b6:bf:cc:c0:08:93:17:
af:6f:e7:f9:08:fa:55:9e:8d:ef:af:81:c8:1a:b2:fc:85:75:
7d:3c:c1:d8:cd:7a:35:1c:ae:04:38:16:bf:7f:41:0e:4d:41:
bc:5d:96:57:36:a1:1c:85:27:f5:93:4d:3f:79:5b:c9:b3:d4:
c6:f6:da:8a:fd:be:23:a2:cb:67:0f:b0:8d:ea:78:e6:fa:8a:
c8:c5:e9:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 07:49:59 2025 by rpki-client