Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A915D0AC/A29AA2D8152411EE9D70C968C4F9AE02/DD2A5994182F11EE82A0FC48C4F9AE02.roa
File: DD2A5994182F11EE82A0FC48C4F9AE02.roa (raw, json)
Hash identifier: Nc2DNs1eibu6K2aHjIt+L2SkvNewi7SdNMt96VyUl+w=
Subject key identifier: 67:0F:67:66:54:C1:6C:62:ED:A9:E8:5F:4B:84:04:CC:F6:5E:77:B4
Certificate issuer: /CN=A915D0AC/serialNumber=F7AED5875112CCFB208E718247B1E49BAAFFB865
Certificate serial: 015E
Authority key identifier: F7:AE:D5:87:51:12:CC:FB:20:8E:71:82:47:B1:E4:9B:AA:FF:B8:65
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/967Vh1ESzPsgjnGCR7Hkm6r_uGU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915D0AC/A29AA2D8152411EE9D70C968C4F9AE02/DD2A5994182F11EE82A0FC48C4F9AE02.roa
Signing time: Wed 09 Apr 2025 03:09:31 +0000
ROA not before: Wed 09 Apr 2025 03:09:31 +0000
ROA not after: Thu 28 May 2026 00:00:00 +0000
asID: 132481
IP address blocks: 103.148.236.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A915D0AC/A29AA2D8152411EE9D70C968C4F9AE02/967Vh1ESzPsgjnGCR7Hkm6r_uGU.crl
rsync://rpki.apnic.net/member_repository/A915D0AC/A29AA2D8152411EE9D70C968C4F9AE02/967Vh1ESzPsgjnGCR7Hkm6r_uGU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/967Vh1ESzPsgjnGCR7Hkm6r_uGU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 16 Apr 2025 03:09:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 350 (0x15e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915D0AC
Validity
Not Before: Apr 9 03:09:31 2025 GMT
Not After : May 28 00:00:00 2026 GMT
Subject: CN=67f5e4eb-378b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:aa:35:eb:d1:06:45:4b:ae:e9:b1:d3:27:1a:
d1:5a:b1:c6:30:bc:6e:27:b7:f4:4d:89:85:9f:b4:
5e:d4:fa:f6:f6:13:2e:49:64:05:2f:19:32:3b:82:
71:fc:87:c2:46:63:ae:27:d8:f7:6c:03:58:95:e8:
b7:59:91:e3:87:03:3c:ff:23:2a:f5:0f:54:e1:f5:
61:4a:84:34:65:77:28:82:04:fa:38:47:0a:2a:ab:
b8:97:e1:6f:6a:fb:e6:62:6a:ea:51:e8:6d:d5:3a:
c0:69:32:a6:9a:3d:21:b5:de:2b:7f:4d:55:cf:0a:
d5:b7:4b:78:a9:8e:58:bc:10:6e:6b:84:f9:7d:9f:
8c:b0:44:ca:16:bd:7c:eb:45:3e:c9:22:82:60:53:
6e:a3:36:62:dd:3e:22:6f:98:31:f8:7e:a7:49:ab:
11:51:d2:95:a0:ca:f6:dd:1d:18:4b:63:5f:6a:1c:
3f:cb:fd:91:af:1f:a5:c4:cf:fa:ff:31:0b:e7:88:
e3:7c:41:36:b4:1a:d3:75:6f:8d:e0:b8:75:b9:f2:
20:c8:3f:dd:3c:9a:1d:65:28:a0:4d:cd:b2:8f:7f:
7c:a0:7c:e1:20:97:36:36:bc:a6:44:6f:9c:9b:95:
55:05:20:2d:51:c0:a4:39:9d:eb:e2:f9:0e:6b:c6:
1b:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:0F:67:66:54:C1:6C:62:ED:A9:E8:5F:4B:84:04:CC:F6:5E:77:B4
X509v3 Authority Key Identifier:
keyid:F7:AE:D5:87:51:12:CC:FB:20:8E:71:82:47:B1:E4:9B:AA:FF:B8:65
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915D0AC/A29AA2D8152411EE9D70C968C4F9AE02/967Vh1ESzPsgjnGCR7Hkm6r_uGU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/967Vh1ESzPsgjnGCR7Hkm6r_uGU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915D0AC/A29AA2D8152411EE9D70C968C4F9AE02/DD2A5994182F11EE82A0FC48C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.148.236.0/23
Signature Algorithm: sha256WithRSAEncryption
d7:23:52:e5:5f:fb:5d:2b:99:56:1b:19:bd:39:65:27:15:74:
31:dd:6d:a2:68:d4:dc:ee:13:9d:62:94:d0:3a:06:b2:dc:40:
cc:8d:d9:39:d8:c3:e1:69:3e:1a:ab:7e:64:8a:7c:95:34:04:
25:af:df:20:7a:a1:8b:ed:bb:33:4f:43:b6:4b:4f:75:f5:0a:
32:f0:e0:37:a4:e2:00:a3:dc:2f:b6:6a:d0:57:8e:7c:e8:32:
1e:6e:7b:cb:7f:21:af:02:ec:4e:74:cd:98:17:28:fa:ff:c8:
18:89:9a:ed:f3:28:75:39:f3:e7:8f:d7:45:1f:ee:fa:1e:3e:
09:03:33:5d:e9:87:f8:69:a7:5c:42:40:d6:63:09:83:ab:fd:
cd:e2:ce:95:dc:f6:98:80:2a:02:27:54:0f:37:80:4a:72:e0:
50:59:3f:ad:26:04:04:1c:20:62:fb:0b:97:df:6e:52:e5:c5:
9d:a0:48:49:06:5b:37:f4:45:c5:be:9a:6a:c8:bd:59:90:61:
fa:fa:24:20:84:ac:0a:c5:2d:7f:fb:54:41:30:dd:36:2d:a6:
1a:39:58:f5:03:c2:ef:e5:89:58:27:cb:45:80:4b:fa:9a:56:
70:82:d5:c5:f0:64:58:c8:a2:e3:9a:5e:29:1a:5f:d4:dd:d5:
8b:13:a4:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 21:15:20 2025 by rpki-client