Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91602ED/167BC63C7C1B11EB9F3F3C65C4F9AE02/7883418E943A11EBB6706530C4F9AE02.roa
File: 7883418E943A11EBB6706530C4F9AE02.roa (raw, json)
Hash identifier: TnZM67noo4lbQHfXpAgCtw+JAFkneMpGmuhyQRw2ydg=
Subject key identifier: F5:31:27:D2:0F:9F:6C:71:0D:CC:A9:10:F0:85:3B:5D:E7:75:6E:76
Certificate issuer: /CN=A91602ED/serialNumber=287529DC20CA0ECE95A7A556E10BCDFD7237D8D8
Certificate serial: 062C
Authority key identifier: 28:75:29:DC:20:CA:0E:CE:95:A7:A5:56:E1:0B:CD:FD:72:37:D8:D8
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KHUp3CDKDs6Vp6VW4QvN_XI32Ng.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91602ED/167BC63C7C1B11EB9F3F3C65C4F9AE02/7883418E943A11EBB6706530C4F9AE02.roa
Signing time: Thu 02 Jan 2025 22:21:51 +0000
ROA not before: Thu 02 Jan 2025 22:21:51 +0000
ROA not after: Mon 02 Mar 2026 00:00:00 +0000
asID: 141427
IP address blocks: 103.158.248.0/23 maxlen: 23
103.158.248.0/24 maxlen: 24
103.158.249.0/24 maxlen: 24
2001:df5:6d80::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91602ED/167BC63C7C1B11EB9F3F3C65C4F9AE02/KHUp3CDKDs6Vp6VW4QvN_XI32Ng.crl
rsync://rpki.apnic.net/member_repository/A91602ED/167BC63C7C1B11EB9F3F3C65C4F9AE02/KHUp3CDKDs6Vp6VW4QvN_XI32Ng.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KHUp3CDKDs6Vp6VW4QvN_XI32Ng.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 15 Apr 2025 22:10:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1580 (0x62c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91602ED
Validity
Not Before: Jan 2 22:21:51 2025 GMT
Not After : Mar 2 00:00:00 2026 GMT
Subject: CN=6777117f-da2e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:4c:0f:70:f1:da:81:b1:cb:4e:86:f0:49:72:
18:34:5d:f9:dc:09:d1:7c:70:1a:36:19:b3:1c:9f:
06:2f:fd:69:86:32:3f:77:6c:fd:5f:b2:a7:cb:0d:
7b:d9:97:f8:5a:e3:f0:0a:f4:55:6e:0e:e1:32:05:
28:b7:a1:c2:b9:fd:87:c5:a2:11:9b:d3:b9:e7:97:
98:0d:b7:1c:3b:7e:8c:bf:64:a6:3b:0d:04:4f:df:
64:0a:86:fa:f4:67:de:5b:cb:1c:7a:80:4d:ce:ee:
03:ff:9c:03:2a:bf:3d:35:75:de:77:5d:e0:1d:33:
5a:69:f7:c1:73:9c:85:50:8f:b0:9a:e9:7e:73:96:
60:d4:a0:85:2b:dc:4b:09:d9:c2:ad:18:69:e8:76:
6a:34:1a:e9:8b:c2:0b:14:5a:a9:07:8a:a8:30:c0:
61:9c:e3:0a:f4:99:92:87:14:85:85:94:f4:9f:16:
5f:35:6d:d9:19:50:e8:c8:05:64:94:83:bb:26:35:
86:3d:70:61:cf:b2:a8:ef:5f:e8:25:14:7e:be:5d:
de:df:85:06:35:af:79:46:74:ab:a2:21:7e:a1:b9:
ef:10:cc:36:8e:ed:15:99:58:aa:3b:22:ec:9b:c0:
04:1c:97:7c:8d:21:99:a3:8c:de:44:04:a6:b5:45:
7a:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:31:27:D2:0F:9F:6C:71:0D:CC:A9:10:F0:85:3B:5D:E7:75:6E:76
X509v3 Authority Key Identifier:
keyid:28:75:29:DC:20:CA:0E:CE:95:A7:A5:56:E1:0B:CD:FD:72:37:D8:D8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91602ED/167BC63C7C1B11EB9F3F3C65C4F9AE02/KHUp3CDKDs6Vp6VW4QvN_XI32Ng.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KHUp3CDKDs6Vp6VW4QvN_XI32Ng.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91602ED/167BC63C7C1B11EB9F3F3C65C4F9AE02/7883418E943A11EBB6706530C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.158.248.0/23
IPv6:
2001:df5:6d80::/48
Signature Algorithm: sha256WithRSAEncryption
11:2b:18:38:af:a1:b6:f5:c6:25:e4:56:c1:c4:27:f3:62:6f:
d7:fd:57:d9:d7:c7:8b:cb:c7:17:31:97:37:1c:7e:e5:a6:87:
60:7a:b9:23:04:50:ce:17:f6:1d:4a:3a:e0:e3:76:ab:1c:1b:
de:04:86:49:a4:0b:c9:bd:bd:97:8b:f1:51:fd:fe:30:d8:7d:
1e:9b:f9:04:aa:42:bf:a7:6b:76:d2:78:24:4c:9d:2f:c3:4e:
05:d0:f5:9e:d9:ba:7a:c3:bd:67:0e:c6:70:17:fb:8b:a5:8a:
eb:b0:7d:e4:1c:75:0e:e8:91:f3:49:ed:38:76:07:d6:50:61:
ca:a7:49:e5:c2:bc:83:89:03:a7:b3:3f:aa:26:0b:7c:93:aa:
8f:c3:e7:ee:78:09:35:2e:77:f0:f1:32:ed:92:72:e6:48:fd:
e6:6f:8a:01:ce:06:5f:7a:00:d8:86:fd:e5:eb:89:17:22:83:
fe:17:ce:22:be:14:99:d3:72:5e:41:72:56:fc:9a:e9:e5:4a:
f6:14:0c:9b:82:2c:e3:a9:0d:3a:12:d0:e8:bb:46:3a:36:b1:
85:c1:d8:64:5d:0c:99:0e:6d:4d:db:45:de:81:76:53:1c:06:
8a:d8:81:31:6b:2f:17:bd:f5:64:33:b6:40:14:71:09:5c:d9:
38:63:b3:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 13:59:17 2025 by rpki-client