Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A914E0B6/5FBE43B4BF3011EEBE4F3C1EC4F9AE02/36FC37FABF3111EE886C313CC4F9AE02.roa
File: 36FC37FABF3111EE886C313CC4F9AE02.roa (raw, json)
Hash identifier: yT3Pw8KgyLGtb1vkHoOYSitDAsAc7QcaGePhN0Bj1+M=
Subject key identifier: 0B:08:8A:FD:A0:2B:7A:66:75:31:AB:DD:96:1B:14:72:F4:B0:F6:DE
Certificate issuer: /CN=A914E0B6/serialNumber=3EC4F75E64B72A88786AF4B97C98486CBD6D2F56
Certificate serial: BE
Authority key identifier: 3E:C4:F7:5E:64:B7:2A:88:78:6A:F4:B9:7C:98:48:6C:BD:6D:2F:56
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/PsT3XmS3Koh4avS5fJhIbL1tL1Y.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914E0B6/5FBE43B4BF3011EEBE4F3C1EC4F9AE02/36FC37FABF3111EE886C313CC4F9AE02.roa
Signing time: Wed 29 Jan 2025 04:18:19 +0000
ROA not before: Wed 29 Jan 2025 04:18:19 +0000
ROA not after: Fri 01 May 2026 00:00:00 +0000
asID: 152449
IP address blocks: 157.15.60.0/24 maxlen: 24
157.15.61.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A914E0B6/5FBE43B4BF3011EEBE4F3C1EC4F9AE02/PsT3XmS3Koh4avS5fJhIbL1tL1Y.crl
rsync://rpki.apnic.net/member_repository/A914E0B6/5FBE43B4BF3011EEBE4F3C1EC4F9AE02/PsT3XmS3Koh4avS5fJhIbL1tL1Y.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/PsT3XmS3Koh4avS5fJhIbL1tL1Y.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 20 Apr 2025 04:17:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 190 (0xbe)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914E0B6, serialNumber=3EC4F75E64B72A88786AF4B97C98486CBD6D2F56
Validity
Not Before: Jan 29 04:18:19 2025 GMT
Not After : May 1 00:00:00 2026 GMT
Subject: CN=6799ac0b-8569
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f7:99:81:7e:c4:21:62:d6:8f:71:0b:6d:53:a1:
0f:ae:fb:a0:22:c3:1f:d3:72:b9:91:e9:2c:3f:58:
25:a6:c7:b4:1b:47:20:eb:0a:0c:ca:69:77:59:1d:
9b:45:c5:fb:69:68:05:35:e0:26:1f:7b:a5:ac:d7:
d3:d4:7f:7e:17:d1:e0:02:47:ce:69:da:48:01:49:
4d:ac:0a:07:d9:ac:76:d5:c0:3d:4c:6c:b5:a3:fa:
ac:53:9b:af:56:63:26:5c:b6:58:7b:eb:8f:f0:10:
5c:06:11:48:6c:10:e0:e8:8d:3c:e4:95:47:d2:10:
90:7a:68:82:4a:4a:9b:71:f8:2d:a6:ac:f8:15:82:
07:eb:1a:32:70:b8:67:28:3e:3b:63:79:e8:34:3f:
bf:e7:43:a0:91:d4:83:ee:2e:47:a9:1a:63:8b:36:
9a:d0:db:6e:ac:29:6b:62:6f:a6:09:0b:e8:ae:0e:
0c:3b:d3:93:89:3f:75:89:0b:e2:d3:c9:1f:70:0a:
a4:85:eb:41:11:f1:db:c8:cb:50:46:09:dc:0d:16:
ce:35:ba:75:10:45:33:1d:79:5f:0b:01:9d:92:08:
99:be:43:c2:5f:fe:16:f0:2b:d6:39:9e:d1:96:cb:
1a:ac:0d:58:a4:64:15:3e:d6:c2:a9:df:a6:e1:a9:
03:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:08:8A:FD:A0:2B:7A:66:75:31:AB:DD:96:1B:14:72:F4:B0:F6:DE
X509v3 Authority Key Identifier:
keyid:3E:C4:F7:5E:64:B7:2A:88:78:6A:F4:B9:7C:98:48:6C:BD:6D:2F:56
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914E0B6/5FBE43B4BF3011EEBE4F3C1EC4F9AE02/PsT3XmS3Koh4avS5fJhIbL1tL1Y.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/PsT3XmS3Koh4avS5fJhIbL1tL1Y.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914E0B6/5FBE43B4BF3011EEBE4F3C1EC4F9AE02/36FC37FABF3111EE886C313CC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
157.15.60.0/23
Signature Algorithm: sha256WithRSAEncryption
5c:c2:61:e8:91:e5:cd:69:48:94:17:c7:1c:d5:0f:0c:6d:e5:
c1:7c:e4:e1:f1:72:46:0c:3b:56:10:70:5a:f7:2d:23:20:18:
75:c8:e2:37:25:04:85:3d:80:a5:ac:02:b7:da:9f:ae:4c:29:
24:80:66:65:7d:1f:2c:2a:0a:70:9d:6a:cd:d1:23:e6:1f:1d:
8d:fa:03:6b:d9:86:96:c2:9f:f2:09:cd:d3:b9:c0:f2:5f:47:
2c:67:09:02:b2:5f:46:99:e5:af:9d:de:be:c5:1d:b4:ba:69:
1e:58:d1:9e:1b:30:9d:5b:99:80:41:9b:c6:05:d4:c7:b1:92:
b4:91:fc:d5:0f:34:db:ae:cf:eb:09:5b:7d:54:0e:c4:11:19:
a3:ba:ed:cf:54:50:e9:63:c5:76:51:23:1c:cd:62:f1:10:b2:
fd:a1:e3:45:61:66:67:ee:67:d7:51:b2:51:1a:aa:87:4c:94:
49:55:4b:db:97:92:a0:6e:48:25:0c:2e:1f:7c:24:52:1a:48:
87:27:08:ef:a5:48:1e:d0:c7:ed:ed:a7:e6:b5:b9:43:6d:7d:
a7:e7:f7:b0:bb:2c:c2:c2:b1:17:2b:76:19:6c:e3:e9:14:eb:
e0:35:58:6d:cc:0e:b1:87:ba:f1:b2:59:42:91:12:cc:84:a0:
36:c0:bd:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 03:29:12 2025 by rpki-client