Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91501CE/93BA853A97F011E5B920106AC4F9AE02/3CB9EF84BF9511EEAD184E59C4F9AE02.roa
File: 3CB9EF84BF9511EEAD184E59C4F9AE02.roa (raw, json)
Hash identifier: 0Iqemx1dc1/OwZ9PA1idZX5JXjFRFlbjjAbSGtap79o=
Subject key identifier: 3F:F3:44:1C:6E:59:A2:72:73:8A:95:4C:86:4E:1E:BC:44:1A:CF:96
Certificate issuer: /CN=A91501CE/serialNumber=C6BF897098AF4486A54E28BA3EFF535D45289411
Certificate serial: 22BE
Authority key identifier: C6:BF:89:70:98:AF:44:86:A5:4E:28:BA:3E:FF:53:5D:45:28:94:11
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xr-JcJivRIalTii6Pv9TXUUolBE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91501CE/93BA853A97F011E5B920106AC4F9AE02/3CB9EF84BF9511EEAD184E59C4F9AE02.roa
Signing time: Mon 02 Dec 2024 15:53:00 +0000
ROA not before: Mon 02 Dec 2024 15:53:00 +0000
ROA not after: Sat 31 Jan 2026 00:00:00 +0000
asID: 979
IP address blocks: 103.27.78.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91501CE/93BA853A97F011E5B920106AC4F9AE02/xr-JcJivRIalTii6Pv9TXUUolBE.crl
rsync://rpki.apnic.net/member_repository/A91501CE/93BA853A97F011E5B920106AC4F9AE02/xr-JcJivRIalTii6Pv9TXUUolBE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xr-JcJivRIalTii6Pv9TXUUolBE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 15 Apr 2025 15:52:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8894 (0x22be)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91501CE
Validity
Not Before: Dec 2 15:53:00 2024 GMT
Not After : Jan 31 00:00:00 2026 GMT
Subject: CN=674dd7dc-589f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:e8:fe:4b:b8:7a:c1:82:ea:f2:49:87:33:9d:
82:03:df:ce:22:4a:aa:76:95:e4:51:87:d3:ee:11:
8c:f1:f1:f9:74:14:99:57:56:bf:c7:62:ca:3b:90:
ff:6a:45:74:0e:c1:8a:52:9a:ec:97:d2:c2:61:5c:
8e:b0:75:e7:b1:27:22:23:66:c8:e8:45:33:94:3b:
36:d5:1e:34:2f:9f:54:b2:df:be:21:24:16:98:6a:
4b:e7:71:99:9a:c1:98:f0:d9:aa:34:87:64:c6:56:
da:0c:13:0d:c6:97:e5:7e:d4:bb:31:08:d5:9a:68:
2e:92:ab:d6:87:86:68:f1:ba:cf:70:d0:53:3f:6f:
dc:a3:0f:4f:2e:f8:5e:e5:cc:8d:ac:21:ad:a3:54:
e4:3c:c8:f7:f9:84:79:69:fb:17:a5:ae:f2:b4:82:
90:76:5b:60:0b:7c:97:06:51:78:4e:6f:5c:12:5e:
e8:18:81:47:ab:0b:67:5e:31:34:ab:7c:d3:c9:92:
67:92:d0:3f:e9:1a:7b:25:ca:0b:4d:fb:68:a4:db:
01:80:9a:e6:a3:77:06:ea:e1:f8:d3:43:59:73:f3:
e1:72:0c:ba:ff:ca:7f:b7:de:be:d6:f8:34:63:81:
9a:5a:f8:03:75:e0:c0:64:46:10:0c:4a:01:87:49:
83:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:F3:44:1C:6E:59:A2:72:73:8A:95:4C:86:4E:1E:BC:44:1A:CF:96
X509v3 Authority Key Identifier:
keyid:C6:BF:89:70:98:AF:44:86:A5:4E:28:BA:3E:FF:53:5D:45:28:94:11
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91501CE/93BA853A97F011E5B920106AC4F9AE02/xr-JcJivRIalTii6Pv9TXUUolBE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xr-JcJivRIalTii6Pv9TXUUolBE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91501CE/93BA853A97F011E5B920106AC4F9AE02/3CB9EF84BF9511EEAD184E59C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.27.78.0/23
Signature Algorithm: sha256WithRSAEncryption
85:53:4d:be:8d:2c:a8:97:8c:06:78:f3:c0:b8:b1:2e:17:fd:
9c:d0:6a:1e:f0:cb:0b:38:39:3a:3d:2c:b8:52:3d:61:37:ba:
ce:cb:63:95:1e:a2:26:f1:ee:58:af:5e:af:c1:30:54:74:a5:
f0:bf:ff:27:81:05:06:c3:d4:fc:00:47:36:d8:86:50:ea:37:
80:59:d4:dd:e7:48:d1:0d:12:21:78:43:57:55:ba:0e:b0:65:
1e:64:9f:41:a5:67:f3:e0:cb:f9:f4:47:70:36:bd:9d:40:ac:
a0:26:91:dd:23:b3:47:bf:e6:d4:66:3a:e2:12:3a:7f:6f:38:
9e:93:6e:dc:7a:53:b6:b0:d2:5c:4d:a9:c6:17:29:c9:f1:7c:
a2:45:30:d2:d6:47:32:e3:19:96:f8:c9:19:e4:54:95:68:22:
40:eb:92:b1:a1:f9:37:4a:43:bc:07:71:6e:c0:47:26:1c:8d:
48:a8:5c:d3:1a:62:99:03:b6:1c:cd:2d:ea:c5:9d:49:5c:df:
ca:d1:6c:58:a0:d6:7e:4c:40:41:0e:53:c3:71:c4:44:7f:56:
01:a2:20:1e:46:70:14:4f:2c:6c:7e:6e:6e:dd:75:e7:46:02:
cf:45:1f:ad:ef:20:67:8e:da:f9:8a:12:ad:f8:e8:d6:8f:98:
45:fe:3d:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 17:19:28 2025 by rpki-client