Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A915B536/E4C88972EB7411EABA0A9E48C4F9AE02/5056827E1D1711EB9918046AC4F9AE02.roa
File: 5056827E1D1711EB9918046AC4F9AE02.roa (raw, json)
Hash identifier: QIJzT5GapeGSiWUEH6w75YrO1W7X/FkG1tF+eQj92Fk=
Subject key identifier: 3B:7F:C8:FA:19:95:B5:CF:1C:3E:E3:CB:15:15:D8:C3:AA:00:E6:0D
Certificate issuer: /CN=A915B536/serialNumber=8210D43756654B10705D5AB3F37BF01A78B78C47
Certificate serial: 0818
Authority key identifier: 82:10:D4:37:56:65:4B:10:70:5D:5A:B3:F3:7B:F0:1A:78:B7:8C:47
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ghDUN1ZlSxBwXVqz83vwGni3jEc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915B536/E4C88972EB7411EABA0A9E48C4F9AE02/5056827E1D1711EB9918046AC4F9AE02.roa
Signing time: Fri 04 Apr 2025 21:34:34 +0000
ROA not before: Fri 04 Apr 2025 21:34:34 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 30133
IP address blocks: 103.11.221.0/24 maxlen: 24
202.41.140.0/24 maxlen: 24
202.41.142.0/24 maxlen: 24
202.41.143.0/24 maxlen: 24
202.41.144.0/24 maxlen: 24
202.41.146.0/24 maxlen: 24
203.119.16.0/24 maxlen: 24
203.119.17.0/24 maxlen: 24
203.119.19.0/24 maxlen: 24
203.119.20.0/24 maxlen: 24
203.119.51.0/24 maxlen: 24
203.119.57.0/24 maxlen: 24
203.119.79.0/24 maxlen: 24
2001:dd8:13::/48 maxlen: 48
2001:dd8:14::/48 maxlen: 48
2001:dd8:15::/48 maxlen: 48
2001:dd8:17::/48 maxlen: 48
2001:dd8:18::/48 maxlen: 48
2001:dd8:19::/48 maxlen: 48
2001:dd8:1a::/48 maxlen: 48
2001:dd8:1c::/48 maxlen: 48
2001:dd8:1d::/48 maxlen: 48
2001:dd8:1e::/48 maxlen: 48
2001:dd8:22::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A915B536/E4C88972EB7411EABA0A9E48C4F9AE02/ghDUN1ZlSxBwXVqz83vwGni3jEc.crl
rsync://rpki.apnic.net/member_repository/A915B536/E4C88972EB7411EABA0A9E48C4F9AE02/ghDUN1ZlSxBwXVqz83vwGni3jEc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ghDUN1ZlSxBwXVqz83vwGni3jEc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 11 Apr 2025 21:34:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2072 (0x818)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915B536
Validity
Not Before: Apr 4 21:34:34 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=67f0506a-9c10
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:89:ee:ad:4f:53:7c:af:96:a1:69:c5:56:27:
df:2f:fe:df:40:13:01:ec:fa:b3:fa:af:1c:ca:9c:
33:e1:cf:a1:73:1e:ca:2d:46:96:89:ef:a9:92:8d:
c9:27:d8:71:48:06:4f:ae:b1:50:d8:cc:c3:68:25:
8d:53:fc:49:51:d4:8b:8c:df:08:73:78:21:5a:1e:
96:3e:af:6c:ff:7c:d5:f8:31:d2:e4:fb:7f:79:8d:
fb:5a:6b:ea:e0:bb:8a:49:80:31:b0:fe:91:1a:bf:
c0:9e:9e:99:81:f2:d4:1d:1e:de:19:ab:2e:2e:f1:
e7:24:b6:78:0d:60:fa:40:8e:0f:9b:fb:b0:94:ed:
bf:e3:1f:83:8f:c7:ae:c6:7e:e8:ee:ef:10:c1:c1:
7f:23:f7:49:ce:08:7f:f0:56:10:85:be:8b:7f:ad:
63:f8:62:45:fd:22:ce:75:a0:f1:f5:9f:5e:54:a9:
d5:3f:fc:41:0c:18:20:b7:ec:d2:9a:c6:c5:a5:eb:
fa:40:ba:28:93:a8:96:19:72:8e:52:b2:53:5b:23:
b4:a3:ed:3b:05:b4:1a:70:6e:e0:1f:32:3c:e9:d4:
86:fa:81:c4:ec:5a:86:37:4d:4c:02:b9:57:26:aa:
dd:ce:dc:48:25:9c:da:c0:04:02:77:68:57:60:75:
08:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:7F:C8:FA:19:95:B5:CF:1C:3E:E3:CB:15:15:D8:C3:AA:00:E6:0D
X509v3 Authority Key Identifier:
keyid:82:10:D4:37:56:65:4B:10:70:5D:5A:B3:F3:7B:F0:1A:78:B7:8C:47
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915B536/E4C88972EB7411EABA0A9E48C4F9AE02/ghDUN1ZlSxBwXVqz83vwGni3jEc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ghDUN1ZlSxBwXVqz83vwGni3jEc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915B536/E4C88972EB7411EABA0A9E48C4F9AE02/5056827E1D1711EB9918046AC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.11.221.0/24
202.41.140.0/24
202.41.142.0-202.41.144.255
202.41.146.0/24
203.119.16.0/23
203.119.19.0-203.119.20.255
203.119.51.0/24
203.119.57.0/24
203.119.79.0/24
IPv6:
2001:dd8:13::-2001:dd8:15:ffff:ffff:ffff:ffff:ffff
2001:dd8:17::-2001:dd8:1a:ffff:ffff:ffff:ffff:ffff
2001:dd8:1c::-2001:dd8:1e:ffff:ffff:ffff:ffff:ffff
2001:dd8:22::/48
Signature Algorithm: sha256WithRSAEncryption
3a:1e:c7:73:60:c8:b6:f3:60:6e:36:04:11:b4:8c:79:76:bf:
c0:c5:8f:30:31:c5:ab:8c:fc:e6:80:f1:21:a7:26:56:99:60:
d8:68:46:ee:a7:88:4a:30:18:3b:74:36:1b:2b:75:04:52:be:
b5:0b:46:ab:a3:5c:8c:78:cf:19:40:99:69:01:80:0c:10:1f:
45:48:e8:b1:b5:87:91:b3:a9:74:47:12:9b:b1:5e:b4:56:b4:
7e:cb:39:29:b3:db:67:d3:1e:45:4c:06:50:92:e6:bb:23:28:
cd:8e:9c:83:68:89:8b:c2:8c:43:7c:5e:dc:47:4b:8f:c6:2c:
d3:db:64:c6:7c:c8:94:db:92:91:78:1f:3d:f9:b6:63:e0:df:
49:74:f5:4d:b2:5d:d8:5b:44:ee:69:f9:b9:97:7e:35:2f:30:
b8:6f:bf:7c:c6:db:3b:e5:40:1f:3b:cf:c1:84:1d:a6:aa:bc:
4d:39:17:1c:54:1d:5a:1c:3f:65:71:50:94:2b:48:22:97:6f:
4b:4c:ed:2e:f6:50:61:74:da:78:6f:98:7f:f3:aa:c2:78:56:
c3:5b:53:f7:99:5d:e0:9b:2d:1f:9f:38:bb:c1:2b:85:8f:b5:
8e:34:ed:54:b7:61:f1:db:32:0b:55:e7:15:00:e3:f1:19:b1:
eb:71:53:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 03:36:44 2025 by rpki-client