Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9157DAE/5B4C4E36596911EC94A3E770C4F9AE02/F5A921B85BE911EF8624AA20C4F9AE02.roa
File: F5A921B85BE911EF8624AA20C4F9AE02.roa (raw, json)
Hash identifier: HMDK7qPjAO3ncQEJzX6SKnODDt4e7glxidti8sfhV1k=
Subject key identifier: 4A:DB:9B:20:61:74:46:10:FD:A7:E8:20:62:34:CB:84:E4:E5:BA:37
Certificate issuer: /CN=A9157DAE/serialNumber=760E6A7F08B72FF80EB56F6750323B164A70DA1D
Certificate serial: 0406
Authority key identifier: 76:0E:6A:7F:08:B7:2F:F8:0E:B5:6F:67:50:32:3B:16:4A:70:DA:1D
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dg5qfwi3L_gOtW9nUDI7Fkpw2h0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9157DAE/5B4C4E36596911EC94A3E770C4F9AE02/F5A921B85BE911EF8624AA20C4F9AE02.roa
Signing time: Wed 04 Dec 2024 17:25:17 +0000
ROA not before: Wed 04 Dec 2024 17:25:17 +0000
ROA not after: Sat 31 Jan 2026 00:00:00 +0000
asID: 58867
IP address blocks: 45.129.229.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9157DAE/5B4C4E36596911EC94A3E770C4F9AE02/dg5qfwi3L_gOtW9nUDI7Fkpw2h0.crl
rsync://rpki.apnic.net/member_repository/A9157DAE/5B4C4E36596911EC94A3E770C4F9AE02/dg5qfwi3L_gOtW9nUDI7Fkpw2h0.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dg5qfwi3L_gOtW9nUDI7Fkpw2h0.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 19 Apr 2025 17:03:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1030 (0x406)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9157DAE, serialNumber=760E6A7F08B72FF80EB56F6750323B164A70DA1D
Validity
Not Before: Dec 4 17:25:17 2024 GMT
Not After : Jan 31 00:00:00 2026 GMT
Subject: CN=6750907d-d227
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:08:1f:83:39:6d:45:5c:b3:ab:6a:10:2e:11:
78:fc:75:22:cb:70:20:0d:db:eb:90:80:fa:9d:45:
d9:ca:54:d0:19:96:75:fb:ee:ac:77:84:6a:90:18:
0a:cc:33:07:0c:12:d2:8e:fc:fd:a7:4b:76:3b:c2:
74:c9:29:3b:ad:33:9d:ac:70:9e:6a:77:dd:13:ca:
a0:e2:2c:9c:14:37:9c:c4:cc:dc:65:28:40:07:9e:
77:d8:3d:e8:8e:0b:a4:75:b0:cf:9c:e2:24:4d:e9:
1b:e4:c8:c0:83:1f:48:d1:a6:40:50:e7:cc:21:21:
cb:96:df:70:7f:7b:4d:03:ef:b0:41:a9:25:45:02:
9d:6a:7e:a7:13:60:66:2d:94:a9:1d:06:ce:9a:03:
0e:3b:cf:3f:2a:b2:0a:d8:b8:98:20:cd:0d:f1:1f:
6a:ed:65:b2:ff:37:14:65:b4:07:87:a8:de:35:9b:
09:27:63:8f:e1:e2:da:52:6a:88:bf:4d:60:5d:c6:
aa:c3:7a:43:01:7e:c7:43:3e:3e:de:04:49:89:a1:
c8:4d:51:5f:eb:0e:1d:34:e8:12:55:9e:39:fd:b6:
66:c3:7e:92:81:1a:5c:41:b3:53:47:0c:8b:e7:0c:
84:90:a9:ae:10:d4:9c:27:4f:ab:76:3e:f0:6f:5d:
5e:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:DB:9B:20:61:74:46:10:FD:A7:E8:20:62:34:CB:84:E4:E5:BA:37
X509v3 Authority Key Identifier:
keyid:76:0E:6A:7F:08:B7:2F:F8:0E:B5:6F:67:50:32:3B:16:4A:70:DA:1D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9157DAE/5B4C4E36596911EC94A3E770C4F9AE02/dg5qfwi3L_gOtW9nUDI7Fkpw2h0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dg5qfwi3L_gOtW9nUDI7Fkpw2h0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9157DAE/5B4C4E36596911EC94A3E770C4F9AE02/F5A921B85BE911EF8624AA20C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.129.229.0/24
Signature Algorithm: sha256WithRSAEncryption
6b:5c:62:d7:92:b9:c3:b6:14:6b:00:7e:a2:3c:64:8c:42:17:
3e:0f:6b:99:06:b3:38:d8:ab:bd:b1:e0:f3:82:33:a5:d1:51:
50:19:ae:14:c9:7a:b9:6f:41:20:1f:11:d4:a7:a2:32:db:db:
57:37:33:be:26:09:97:db:2a:79:15:5d:53:0d:da:8e:a2:7a:
94:63:1d:5a:bf:78:a1:1f:11:29:05:2a:3b:c5:00:31:db:f1:
1e:c7:0a:ba:77:0e:10:46:0c:b5:8c:69:2e:b8:f2:89:75:12:
e0:4d:1c:ff:cc:03:5f:9c:41:86:c8:5b:ed:0a:d8:db:19:ce:
6a:45:04:be:cd:75:e3:b0:3c:3a:3e:37:77:0b:b4:1b:79:b2:
dd:b2:2a:61:0a:8a:b9:78:22:7a:98:27:e2:41:f4:c7:43:91:
43:0f:01:59:57:96:74:0d:d3:39:b5:34:34:a3:38:3c:31:ff:
e9:7a:98:16:bc:7d:d1:e8:a2:df:81:56:f5:a3:a6:19:3c:d5:
01:72:6d:d3:9c:3a:47:b7:c6:fa:0c:9d:48:f0:c5:7d:f6:7d:
96:3e:8f:bd:e8:44:a3:a8:57:d6:e3:a9:bd:7b:3d:ce:72:3c:
cb:4b:66:0f:d0:ed:39:98:e3:68:43:38:b5:a8:20:17:d2:4c:
5b:c2:7e:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 03:52:53 2025 by rpki-client