Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A915B8D0/41E2BE28EB6E11EE83E3AE51C4F9AE02/0B2E53E422B711EFB2B15160C4F9AE02.roa
File: 0B2E53E422B711EFB2B15160C4F9AE02.roa (raw, json)
Hash identifier: QOXN1nndvSK1AATByodPTKJLPtXr2Sr2FzfqtSOzir4=
Subject key identifier: 22:53:C5:90:7D:24:3F:EB:12:B3:05:AF:E5:6D:09:89:4E:96:6F:08
Certificate issuer: /CN=A915B8D0/serialNumber=254EAF6490754F507DB81CE90DDB629B622F4660
Certificate serial: 2E
Authority key identifier: 25:4E:AF:64:90:75:4F:50:7D:B8:1C:E9:0D:DB:62:9B:62:2F:46:60
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JU6vZJB1T1B9uBzpDdtim2IvRmA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915B8D0/41E2BE28EB6E11EE83E3AE51C4F9AE02/0B2E53E422B711EFB2B15160C4F9AE02.roa
Signing time: Tue 04 Jun 2024 21:11:43 +0000
ROA not before: Tue 04 Jun 2024 21:11:43 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 150142
IP address blocks: 203.26.151.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A915B8D0/41E2BE28EB6E11EE83E3AE51C4F9AE02/JU6vZJB1T1B9uBzpDdtim2IvRmA.crl
rsync://rpki.apnic.net/member_repository/A915B8D0/41E2BE28EB6E11EE83E3AE51C4F9AE02/JU6vZJB1T1B9uBzpDdtim2IvRmA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JU6vZJB1T1B9uBzpDdtim2IvRmA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 16 Apr 2025 04:42:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 46 (0x2e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915B8D0
Validity
Not Before: Jun 4 21:11:43 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=665f830f-fa79
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:00:7a:c9:cb:78:73:ca:dd:84:32:b7:40:d0:
6a:25:c9:25:da:e1:3c:3e:b8:7c:0a:8c:88:a1:80:
af:e7:c1:35:ee:3e:8c:35:dd:aa:51:9f:78:62:73:
61:ac:1b:2e:47:9b:0a:55:de:be:01:6e:be:a0:27:
fa:39:c7:0c:0f:5c:32:88:1f:25:56:85:ce:60:20:
44:62:7b:11:f2:98:46:3b:92:60:70:52:3e:bd:66:
fd:cc:fe:14:8e:42:3f:e7:c8:b0:04:b8:f8:1c:26:
79:a8:9e:9c:47:da:c8:dd:af:2b:af:9b:95:7a:3c:
ff:75:09:04:e2:66:5a:4c:fd:39:67:13:4e:70:9a:
a7:48:3b:70:37:2a:04:87:53:f5:e8:c3:52:da:fe:
e9:9f:14:09:03:db:c9:75:c5:a2:5f:44:83:0b:cd:
33:30:a0:6c:1f:01:db:b8:45:16:2c:01:d8:3e:4a:
82:00:2a:0a:f1:1f:33:89:50:05:0c:36:7c:f5:6a:
25:eb:60:de:93:c5:4d:2c:9c:f4:68:31:16:9b:91:
fc:c4:e3:00:3b:90:5f:b2:85:10:69:34:9e:d4:d1:
df:5d:92:10:25:28:83:6c:fa:db:61:b5:98:53:73:
64:8f:a0:f8:aa:82:0e:87:61:10:7d:9c:9e:76:b4:
85:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:53:C5:90:7D:24:3F:EB:12:B3:05:AF:E5:6D:09:89:4E:96:6F:08
X509v3 Authority Key Identifier:
keyid:25:4E:AF:64:90:75:4F:50:7D:B8:1C:E9:0D:DB:62:9B:62:2F:46:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915B8D0/41E2BE28EB6E11EE83E3AE51C4F9AE02/JU6vZJB1T1B9uBzpDdtim2IvRmA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JU6vZJB1T1B9uBzpDdtim2IvRmA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915B8D0/41E2BE28EB6E11EE83E3AE51C4F9AE02/0B2E53E422B711EFB2B15160C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
203.26.151.0/24
Signature Algorithm: sha256WithRSAEncryption
24:6c:b5:a7:39:9e:0f:42:73:00:84:4b:71:26:2c:af:d7:67:
e5:9d:a7:f4:86:ef:18:8a:8d:74:e0:4e:00:16:59:84:76:26:
0a:0f:9c:4a:66:ed:cc:3b:98:a1:64:d1:2b:1f:9e:85:f0:81:
f2:d8:89:14:be:d5:ee:64:9c:0f:ce:12:0c:ba:7c:56:fd:8e:
0c:5f:76:f4:f8:e2:10:c2:5f:33:09:0e:f1:78:63:c3:06:b0:
b4:df:63:18:da:31:88:92:e1:a3:21:84:8e:9a:3f:da:69:fa:
27:74:35:c5:c9:82:d1:0a:37:66:f1:a8:81:e2:0b:62:25:bd:
14:5c:aa:18:d2:c4:85:c1:f3:82:c1:9f:fc:b7:30:04:c2:ac:
49:dd:7b:e3:cd:83:8b:9e:3a:e4:3e:13:ec:08:25:f3:66:09:
70:d4:47:bd:a3:2b:4a:93:af:5e:43:49:6b:9c:68:75:fc:a2:
6d:62:c7:d8:89:8a:0b:a5:28:e8:8f:b0:f4:92:8f:2b:6c:7e:
64:5d:c4:97:f2:97:8f:06:20:52:f3:6c:3c:0f:4c:7d:8a:9d:
03:ac:68:0e:bf:78:00:ea:70:80:41:f3:cb:e0:29:00:e1:2d:
14:23:ff:ff:19:b5:2c:df:96:e6:c8:76:15:2d:c0:27:b0:1a:
8a:98:56:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 17:14:29 2025 by rpki-client