Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A915C094/01F8EB92F68711E9A9FB9C55C4F9AE02/DF56C74C83A111EE8D40867CC4F9AE02.roa
File: DF56C74C83A111EE8D40867CC4F9AE02.roa (raw, json)
Hash identifier: h7HweR/FfeHA80OZjTVSE+4DMIspzsFe+SSvbL7FG+c=
Subject key identifier: 51:B0:BA:7A:E3:2A:82:E7:B7:70:AA:F5:32:C1:C2:91:75:E8:F0:50
Certificate issuer: /CN=A915C094/serialNumber=4CF2DD66DCA42FEAF60C38E7695B03B43E7E7ADB
Certificate serial: 0C7E
Authority key identifier: 4C:F2:DD:66:DC:A4:2F:EA:F6:0C:38:E7:69:5B:03:B4:3E:7E:7A:DB
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TPLdZtykL-r2DDjnaVsDtD5-ets.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915C094/01F8EB92F68711E9A9FB9C55C4F9AE02/DF56C74C83A111EE8D40867CC4F9AE02.roa
Signing time: Sat 22 Feb 2025 18:57:01 +0000
ROA not before: Sat 22 Feb 2025 18:57:01 +0000
ROA not after: Tue 31 Mar 2026 00:00:00 +0000
asID: 135341
IP address blocks: 103.127.94.0/24 maxlen: 24
103.127.95.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A915C094/01F8EB92F68711E9A9FB9C55C4F9AE02/TPLdZtykL-r2DDjnaVsDtD5-ets.crl
rsync://rpki.apnic.net/member_repository/A915C094/01F8EB92F68711E9A9FB9C55C4F9AE02/TPLdZtykL-r2DDjnaVsDtD5-ets.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TPLdZtykL-r2DDjnaVsDtD5-ets.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 23 Apr 2025 18:10:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3198 (0xc7e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915C094, serialNumber=4CF2DD66DCA42FEAF60C38E7695B03B43E7E7ADB
Validity
Not Before: Feb 22 18:57:01 2025 GMT
Not After : Mar 31 00:00:00 2026 GMT
Subject: CN=67ba1dfc-5c70
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:cd:22:24:ee:70:1b:1f:04:6e:5a:da:f5:0d:
99:57:9e:22:27:99:ca:f1:ab:23:4d:ba:00:66:d6:
89:5d:43:d1:2c:c4:2e:1f:44:0e:f3:37:4f:2a:d6:
c2:76:ad:af:c4:c7:7a:1f:80:b9:15:19:5c:f2:0a:
69:36:47:ec:f0:05:de:15:04:a0:c1:e8:21:12:0e:
21:b1:c3:bf:3d:6b:a4:40:d6:d9:1b:45:66:20:92:
e9:52:98:32:35:8e:79:34:5b:f8:81:dc:17:c5:c3:
6b:43:03:33:c6:c1:8c:53:27:51:21:20:cb:34:fb:
01:a8:ea:5d:bc:ab:92:08:14:12:4f:2e:d5:29:24:
5e:93:ba:95:a3:d3:46:fe:e1:46:a7:cc:d8:ed:4b:
42:1d:49:7f:f9:53:39:51:7c:94:96:09:07:cf:00:
34:1d:d2:bd:94:e0:28:dc:ee:8f:f5:1f:10:25:2c:
fa:4f:0a:ae:d3:0b:4b:e4:c6:56:95:ca:f9:b5:66:
58:fc:0d:8c:7f:38:20:77:67:11:ef:8f:03:5a:69:
67:b5:a6:7a:a7:bc:4f:39:2d:0b:5e:4e:61:99:a2:
a8:59:41:39:3b:44:d5:40:44:4f:60:b0:4f:80:c2:
32:cf:7c:eb:31:fd:8c:ed:37:2c:bb:76:a1:fb:46:
8b:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:B0:BA:7A:E3:2A:82:E7:B7:70:AA:F5:32:C1:C2:91:75:E8:F0:50
X509v3 Authority Key Identifier:
keyid:4C:F2:DD:66:DC:A4:2F:EA:F6:0C:38:E7:69:5B:03:B4:3E:7E:7A:DB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915C094/01F8EB92F68711E9A9FB9C55C4F9AE02/TPLdZtykL-r2DDjnaVsDtD5-ets.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TPLdZtykL-r2DDjnaVsDtD5-ets.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915C094/01F8EB92F68711E9A9FB9C55C4F9AE02/DF56C74C83A111EE8D40867CC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.127.94.0/23
Signature Algorithm: sha256WithRSAEncryption
c3:77:c6:77:5f:dc:84:c9:cc:65:25:c0:b6:90:c8:71:5c:cd:
e3:fd:f7:50:f3:53:77:e8:2d:06:8f:8b:dc:48:51:0c:34:ca:
af:76:28:b3:6a:12:73:bd:83:80:f8:6e:d2:65:ff:bb:1f:bf:
71:1c:cd:9d:7a:d1:4b:db:85:be:01:bd:a8:ad:bc:32:70:8d:
2c:70:86:02:33:5d:c0:d5:48:89:aa:bf:6e:2f:9f:16:90:29:
e7:81:e8:15:42:04:38:5d:c0:6c:45:0d:a8:d2:62:08:f3:06:
c9:08:b4:6a:7e:fe:a5:11:73:26:d3:61:6c:78:c3:5a:47:20:
c4:8d:d1:fd:a6:4d:89:83:95:f3:53:72:1c:25:f7:ba:54:71:
4a:6a:a0:e2:29:8d:aa:00:09:7a:ba:e0:bf:2d:20:e8:c2:33:
93:32:c8:c9:39:25:0b:d6:87:e7:03:f8:12:21:31:8c:f7:fa:
ad:86:79:85:bd:6a:b9:d3:dc:fb:f5:1f:f3:66:61:dd:65:ab:
ad:b4:68:3e:0e:2a:90:97:57:a7:e0:68:23:39:c8:30:8b:e4:
c9:f6:f9:3f:93:75:b9:7b:0d:17:b2:6a:f2:2e:f6:5e:08:36:
fd:7b:2e:c2:93:d1:76:ad:46:0a:f1:fc:5d:e1:3f:68:b0:87:
b6:18:88:17
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICDH4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NUMwOTQxMTAvBgNVBAUTKDRDRjJERDY2RENBNDJGRUFGNjBDMzhFNzY5NUIwM0I0
M0U3RTdBREIwHhcNMjUwMjIyMTg1NzAxWhcNMjYwMzMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02N2JhMWRmYy01YzcwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAoM0iJO5wGx8Eblra9Q2ZV54iJ5nK8asjTboAZtaJXUPRLMQuH0QO8zdPKtbC
dq2vxMd6H4C5FRlc8gppNkfs8AXeFQSgweghEg4hscO/PWukQNbZG0VmIJLpUpgy
NY55NFv4gdwXxcNrQwMzxsGMUydRISDLNPsBqOpdvKuSCBQSTy7VKSRek7qVo9NG
/uFGp8zY7UtCHUl/+VM5UXyUlgkHzwA0HdK9lOAo3O6P9R8QJSz6Twqu0wtL5MZW
lcr5tWZY/A2Mfzggd2cR748DWmlntaZ6p7xPOS0LXk5hmaKoWUE5O0TVQERPYLBP
gMIyz3zrMf2M7Tcsu3ah+0aLwwIDAQABo4IClTCCApEwHQYDVR0OBBYEFFGwunrj
KoLnt3Cq9TLBwpF16PBQMB8GA1UdIwQYMBaAFEzy3WbcpC/q9gw452lbA7Q+fnrb
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1QzA5NC8wMUY4RUI5MkY2
ODcxMUU5QTlGQjlDNTVDNEY5QUUwMi9UUExkWnR5a0wtcjJERGpuYVZzRHRENS1l
dHMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1RQTGRadHlrTC1yMkREam5hVnNEdEQ1LWV0cy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
NUMwOTQvMDFGOEVCOTJGNjg3MTFFOUE5RkI5QzU1QzRGOUFFMDIvREY1NkM3NEM4
M0ExMTFFRThENDA4NjdDQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBAFnf14wDQYJKoZIhvcNAQELBQADggEBAMN3xndf3ITJzGUl
wLaQyHFczeP991DzU3foLQaPi9xIUQw0yq92KLNqEnO9g4D4btJl/7sfv3EczZ16
0Uvbhb4BvaitvDJwjSxwhgIzXcDVSImqv24vnxaQKeeB6BVCBDhdwGxFDajSYgjz
BskItGp+/qURcybTYWx4w1pHIMSN0f2mTYmDlfNTchwl97pUcUpqoOIpjaoACXq6
4L8tIOjCM5MyyMk5JQvWh+cD+BIhMYz3+q2GeYW9arnT3Pv1H/NmYd1lq620aD4O
KpCXV6fgaCM5yDCL5Mn2+T+Tdbl7DReyavIu9l4INv17LsKT0XatRgrx/F3hP2iw
h7YYiBc=
-----END CERTIFICATE-----
Generated at Thu Apr 17 08:46:00 2025 by rpki-client