Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A915FBEA/AA7E391A6C6B11EB8FEF194BC4F9AE02/DD3109D66C6C11EB92CE744BC4F9AE02.roa
File: DD3109D66C6C11EB92CE744BC4F9AE02.roa (raw, json)
Hash identifier: Q6KB/kezFn+0maPMaSXmf71FjW9THCnG/ycviixRgRs=
Subject key identifier: 87:5D:DB:E6:F7:FB:04:4A:33:11:08:B4:F5:1F:12:47:88:68:D4:8D
Certificate issuer: /CN=A915FBEA/serialNumber=DF515B5915E833EEDB444D19C30A00F097815A35
Certificate serial: 0652
Authority key identifier: DF:51:5B:59:15:E8:33:EE:DB:44:4D:19:C3:0A:00:F0:97:81:5A:35
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/31FbWRXoM-7bRE0ZwwoA8JeBWjU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915FBEA/AA7E391A6C6B11EB8FEF194BC4F9AE02/DD3109D66C6C11EB92CE744BC4F9AE02.roa
Signing time: Sun 22 Dec 2024 22:10:46 +0000
ROA not before: Sun 22 Dec 2024 22:10:46 +0000
ROA not after: Mon 02 Mar 2026 00:00:00 +0000
asID: 133173
IP address blocks: 103.254.50.0/24 maxlen: 24
2001:df0:c800::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A915FBEA/AA7E391A6C6B11EB8FEF194BC4F9AE02/31FbWRXoM-7bRE0ZwwoA8JeBWjU.crl
rsync://rpki.apnic.net/member_repository/A915FBEA/AA7E391A6C6B11EB8FEF194BC4F9AE02/31FbWRXoM-7bRE0ZwwoA8JeBWjU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/31FbWRXoM-7bRE0ZwwoA8JeBWjU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 15 Apr 2025 22:02:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1618 (0x652)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915FBEA
Validity
Not Before: Dec 22 22:10:46 2024 GMT
Not After : Mar 2 00:00:00 2026 GMT
Subject: CN=67688e66-c722
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:4d:b9:de:b6:0b:ee:e2:28:ea:42:7b:90:b6:
2c:5c:b7:a0:3c:2e:46:e5:f6:6d:e1:0e:e1:16:e8:
13:3c:c9:32:d6:1c:2c:93:dd:f6:16:84:b6:92:91:
6b:37:91:10:05:54:23:9a:03:be:59:57:7f:c9:eb:
08:37:4a:a8:98:ff:ba:16:50:32:35:23:35:b4:fa:
10:95:ad:51:a7:8f:d4:6a:d0:4f:64:2f:ed:da:5b:
29:8a:54:eb:3f:f7:1a:39:ba:be:98:be:da:8a:cd:
d8:46:b5:8c:52:0d:76:7d:6c:76:b6:ca:f6:e2:f0:
51:c5:4f:5f:8e:db:e3:77:de:86:28:29:75:42:dc:
ff:62:e3:63:f7:5d:84:8f:eb:5d:ec:d8:7b:ff:8b:
32:96:f1:fa:fa:b2:3f:c8:41:7d:fc:11:b0:32:55:
5b:10:ce:eb:5a:3e:f7:f9:d5:eb:30:89:2c:b4:48:
08:36:f3:1f:a7:13:80:3e:e4:56:29:34:1c:ee:63:
00:21:b1:db:dc:c0:2f:32:35:5b:ed:88:44:bd:eb:
78:b0:7f:0f:49:14:2d:e4:7a:65:dd:88:fc:ad:6c:
98:b4:0c:a5:8c:30:8e:75:f0:ae:bf:0f:37:58:97:
8c:64:3f:02:ae:b5:95:e2:a5:10:93:3a:96:67:92:
53:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:5D:DB:E6:F7:FB:04:4A:33:11:08:B4:F5:1F:12:47:88:68:D4:8D
X509v3 Authority Key Identifier:
keyid:DF:51:5B:59:15:E8:33:EE:DB:44:4D:19:C3:0A:00:F0:97:81:5A:35
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915FBEA/AA7E391A6C6B11EB8FEF194BC4F9AE02/31FbWRXoM-7bRE0ZwwoA8JeBWjU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/31FbWRXoM-7bRE0ZwwoA8JeBWjU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915FBEA/AA7E391A6C6B11EB8FEF194BC4F9AE02/DD3109D66C6C11EB92CE744BC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.254.50.0/24
IPv6:
2001:df0:c800::/48
Signature Algorithm: sha256WithRSAEncryption
9f:3a:fb:9d:c8:b0:43:db:a7:aa:4e:48:3e:61:9c:00:8f:ca:
be:7b:b2:b6:3f:83:4d:94:aa:ef:8b:73:e5:c5:36:1c:6a:be:
ed:fe:a6:5f:a2:da:06:c5:66:2e:57:91:b8:6f:a3:df:59:73:
fd:1a:cc:e4:b1:b1:9f:23:97:dd:bb:ce:ba:5f:f7:18:13:4b:
0a:3f:b9:5b:b4:a2:94:4f:07:3b:a3:aa:c9:4b:ae:93:e4:f8:
df:9f:34:8e:18:c4:b6:ed:8b:6f:a1:f1:53:68:d3:7c:25:0d:
ae:f9:6b:77:db:2c:4a:9e:c6:f8:ff:16:03:40:55:d3:01:aa:
93:47:e1:5d:81:31:6f:c7:f2:a2:3b:4d:6e:b0:7c:1d:31:e7:
6c:60:4f:49:42:cc:10:33:ad:37:13:63:55:45:da:f0:95:e8:
93:a2:9e:4e:48:14:e2:8b:cc:7b:23:8d:a8:08:b2:03:db:28:
dd:40:6e:f9:18:28:ea:9d:fb:a0:dd:95:57:b9:7c:49:21:9b:
8a:21:78:f0:4f:22:30:12:29:1a:68:46:32:7b:59:29:4f:fd:
fc:2d:eb:52:73:c6:05:c3:56:8d:e7:a7:76:fe:c8:8f:76:95:
8c:31:25:6a:b4:d2:b9:4e:ae:db:f6:d5:12:d1:da:42:6b:aa:
56:18:9f:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 04:46:07 2025 by rpki-client