Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9144717/3988900083E811EAB7700513C4F9AE02/F38DEBFC83E911EA993D9515C4F9AE02.roa
File: F38DEBFC83E911EA993D9515C4F9AE02.roa (raw, json)
Hash identifier: jObq5WAnKWNNe1xvn+i1p17e0KpzbzVrnmTwIgH5Dh0=
Subject key identifier: 14:24:A8:B3:2E:00:4F:67:AF:35:28:43:94:18:4C:F9:48:73:85:11
Certificate issuer: /CN=A9144717/serialNumber=DA503F972CBC93A8C81DF95F54A2CB2A38F13C77
Certificate serial: 08F6
Authority key identifier: DA:50:3F:97:2C:BC:93:A8:C8:1D:F9:5F:54:A2:CB:2A:38:F1:3C:77
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2lA_lyy8k6jIHflfVKLLKjjxPHc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9144717/3988900083E811EAB7700513C4F9AE02/F38DEBFC83E911EA993D9515C4F9AE02.roa
Signing time: Thu 02 May 2024 21:40:28 +0000
ROA not before: Thu 02 May 2024 21:40:28 +0000
ROA not after: Wed 30 Jul 2025 00:00:00 +0000
asID: 139605
IP address blocks: 103.150.156.0/23 maxlen: 23
103.150.156.0/24 maxlen: 24
103.150.157.0/24 maxlen: 24
2001:df3:7b80::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9144717/3988900083E811EAB7700513C4F9AE02/2lA_lyy8k6jIHflfVKLLKjjxPHc.crl
rsync://rpki.apnic.net/member_repository/A9144717/3988900083E811EAB7700513C4F9AE02/2lA_lyy8k6jIHflfVKLLKjjxPHc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2lA_lyy8k6jIHflfVKLLKjjxPHc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 19 Apr 2025 19:50:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2294 (0x8f6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9144717, serialNumber=DA503F972CBC93A8C81DF95F54A2CB2A38F13C77
Validity
Not Before: May 2 21:40:28 2024 GMT
Not After : Jul 30 00:00:00 2025 GMT
Subject: CN=6634084c-1b91
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:2d:f0:b3:23:6c:eb:81:2a:10:46:6b:f1:0a:
f8:24:45:75:62:66:68:89:8c:23:eb:b9:8b:1f:50:
cc:16:62:e2:13:ce:98:87:55:85:65:7e:78:d9:bf:
a9:c3:6c:af:52:71:53:14:5a:28:32:6d:89:ec:7f:
e4:cc:d0:64:80:da:7d:67:34:22:c5:0e:45:03:9e:
fb:04:44:89:b8:5a:9f:d7:dc:d5:13:67:d0:57:a5:
8a:a5:eb:06:11:4a:10:c0:d3:33:b8:00:6e:0a:ad:
be:f1:0d:62:52:ba:d5:b4:7c:71:d1:d2:e2:7b:c1:
9c:aa:15:3a:c3:a2:fe:c7:2b:79:04:79:39:34:f6:
03:fd:33:82:c1:bd:07:9d:62:2a:e1:39:63:79:37:
8b:84:29:6e:92:f6:0c:99:15:a5:84:6e:a0:9a:97:
5d:42:1e:d8:43:bf:b5:84:42:67:e4:a0:25:05:da:
8e:2b:0b:29:ac:8a:b1:95:d9:26:b1:2d:89:aa:6c:
f3:01:9c:b3:5b:8d:6d:03:65:c5:5f:7d:4f:5a:ef:
d0:df:80:fd:85:d6:f2:6d:e6:0e:64:06:0a:68:3f:
d0:87:28:01:de:73:9c:a6:5b:22:71:3f:fc:a0:0f:
62:dd:4c:05:0b:ef:2a:f9:50:dc:a3:6c:14:7f:25:
80:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:24:A8:B3:2E:00:4F:67:AF:35:28:43:94:18:4C:F9:48:73:85:11
X509v3 Authority Key Identifier:
keyid:DA:50:3F:97:2C:BC:93:A8:C8:1D:F9:5F:54:A2:CB:2A:38:F1:3C:77
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9144717/3988900083E811EAB7700513C4F9AE02/2lA_lyy8k6jIHflfVKLLKjjxPHc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2lA_lyy8k6jIHflfVKLLKjjxPHc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9144717/3988900083E811EAB7700513C4F9AE02/F38DEBFC83E911EA993D9515C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.150.156.0/23
IPv6:
2001:df3:7b80::/48
Signature Algorithm: sha256WithRSAEncryption
50:60:31:08:dd:88:64:67:45:07:aa:17:14:c8:7d:31:9c:7f:
9d:04:f9:1a:e0:21:94:6f:c3:56:6b:09:56:30:d0:90:9f:e4:
30:58:ea:ed:dc:7b:82:45:81:1a:25:39:5e:4c:0e:c0:9f:a7:
64:b8:80:5c:16:9d:d1:20:c1:2a:94:7b:1e:87:59:02:2d:aa:
30:1c:39:10:c8:20:de:c3:38:ad:75:83:0d:26:14:c0:b8:41:
a6:6d:17:33:af:72:f3:9b:de:33:d5:29:dc:88:0e:c9:8d:91:
fa:14:30:31:be:87:88:b1:fd:1f:3f:c3:29:ba:95:d0:78:c6:
8c:ab:ff:47:d6:d6:82:6e:96:70:0f:0c:8e:fc:50:a7:0b:df:
30:38:b1:50:c8:ee:02:59:9d:ed:86:8b:9e:08:62:0d:74:b1:
40:27:f9:93:55:0c:79:86:78:cf:eb:05:56:46:fe:55:71:07:
bd:13:d4:a0:b2:1f:6c:be:5b:2d:25:6a:4c:5c:2e:fb:ba:87:
8f:7b:78:03:d1:aa:97:ca:03:db:b2:55:05:48:73:42:4f:e8:
7c:25:7f:fd:d3:ca:07:eb:b0:46:c4:fd:83:2d:2a:c8:2f:10:
98:26:9f:31:46:0e:81:5f:ff:66:93:00:8c:fa:9f:02:e1:bd:
5d:75:ae:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 09:54:40 2025 by rpki-client