Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9164D60/9E0DE392B45F11EBB61B760CC4F9AE02/5D81DB7C51B611ECA674F080C4F9AE02.roa
File: 5D81DB7C51B611ECA674F080C4F9AE02.roa (raw, json)
Hash identifier: Wj9VGGJ6joH5JctKZSMF6/1uGPocxQOWRALuCrLB1RI=
Subject key identifier: 65:6F:3F:DC:20:15:82:54:3A:6A:46:D3:6E:93:6E:B8:F2:BA:F2:25
Certificate issuer: /CN=A9164D60/serialNumber=E0BA228EAF9812F067D2FF3BF806895698C93977
Certificate serial: 05F1
Authority key identifier: E0:BA:22:8E:AF:98:12:F0:67:D2:FF:3B:F8:06:89:56:98:C9:39:77
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4Loijq-YEvBn0v87-AaJVpjJOXc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9164D60/9E0DE392B45F11EBB61B760CC4F9AE02/5D81DB7C51B611ECA674F080C4F9AE02.roa
Signing time: Fri 05 Jul 2024 00:22:25 +0000
ROA not before: Fri 05 Jul 2024 00:22:25 +0000
ROA not after: Tue 30 Sep 2025 00:00:00 +0000
asID: 55331
IP address blocks: 115.126.23.0/24 maxlen: 24
118.99.12.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9164D60/9E0DE392B45F11EBB61B760CC4F9AE02/4Loijq-YEvBn0v87-AaJVpjJOXc.crl
rsync://rpki.apnic.net/member_repository/A9164D60/9E0DE392B45F11EBB61B760CC4F9AE02/4Loijq-YEvBn0v87-AaJVpjJOXc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4Loijq-YEvBn0v87-AaJVpjJOXc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 19 Apr 2025 22:40:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1521 (0x5f1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9164D60, serialNumber=E0BA228EAF9812F067D2FF3BF806895698C93977
Validity
Not Before: Jul 5 00:22:25 2024 GMT
Not After : Sep 30 00:00:00 2025 GMT
Subject: CN=66873cc1-3d13
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:7d:c3:dd:25:6c:72:b4:11:8e:d6:56:2c:01:
c0:0b:95:2d:3c:82:1c:81:0f:86:90:9c:ee:fd:89:
06:1c:a5:71:f4:98:05:95:b2:9e:91:45:bc:0c:85:
39:9d:85:df:97:c6:c6:7c:bf:7d:4b:7b:44:cf:f7:
ce:cd:7b:1c:a3:22:9f:90:09:fd:c7:a8:4f:5e:71:
02:0e:79:f4:66:c1:fd:2f:14:44:b7:bf:5f:ec:e6:
16:ae:4c:5a:3c:90:14:8b:25:df:71:a8:f7:4e:5c:
85:af:a0:4a:9e:7d:01:c8:80:75:88:54:c9:a4:cc:
bc:51:6f:d8:aa:33:fc:2f:82:b7:d1:d6:fd:d9:87:
08:68:43:3a:ee:f1:e8:95:7f:87:59:f5:04:a4:ea:
7b:44:24:e1:d9:e1:4f:c2:cd:87:29:09:14:65:60:
d7:52:01:dc:1c:38:0f:b7:c6:46:83:f3:1f:b3:c7:
1f:c7:97:54:f7:1c:f2:62:89:92:27:96:16:ef:fa:
8c:b5:4b:e6:73:4b:25:25:01:ff:72:89:89:23:1a:
71:b7:3c:50:22:e4:5d:b7:7b:6d:4d:fa:02:88:2a:
bd:a4:52:e7:32:21:63:5f:f0:e9:3e:21:0f:e6:34:
86:80:bf:d4:94:0b:f7:d3:46:f1:7c:31:4a:7d:c8:
ca:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:6F:3F:DC:20:15:82:54:3A:6A:46:D3:6E:93:6E:B8:F2:BA:F2:25
X509v3 Authority Key Identifier:
keyid:E0:BA:22:8E:AF:98:12:F0:67:D2:FF:3B:F8:06:89:56:98:C9:39:77
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9164D60/9E0DE392B45F11EBB61B760CC4F9AE02/4Loijq-YEvBn0v87-AaJVpjJOXc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4Loijq-YEvBn0v87-AaJVpjJOXc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9164D60/9E0DE392B45F11EBB61B760CC4F9AE02/5D81DB7C51B611ECA674F080C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
115.126.23.0/24
118.99.12.0/24
Signature Algorithm: sha256WithRSAEncryption
51:81:14:ac:f2:f3:23:1f:ed:34:0f:0e:65:c9:7c:4d:5c:9e:
45:7c:18:6c:1c:f6:55:f9:1e:b6:ad:c3:39:81:f7:fb:ea:4b:
ad:a8:85:c9:76:01:fe:eb:72:61:68:88:e8:3e:3e:7c:3b:74:
5d:a9:41:b6:2e:24:92:d4:9f:ad:17:bf:58:3b:8e:f8:4d:fe:
92:d2:90:bc:6a:88:29:53:ee:91:a6:ef:ab:0e:fe:da:d6:db:
6f:01:b4:e1:4e:1e:b6:d9:58:08:19:b8:96:fb:c7:2b:73:e5:
20:21:05:d5:3a:c5:87:75:1e:f1:da:60:7f:fd:a4:67:79:8b:
02:98:a3:4d:b2:56:59:39:90:d8:01:6d:5f:ce:19:03:c1:9e:
3e:4c:da:b9:8f:90:3b:05:c4:8f:21:3f:6e:95:3f:9a:e9:0b:
ea:df:46:53:d6:34:d9:8a:3f:80:01:7f:03:91:83:b1:64:8f:
a0:8b:8b:78:51:f5:01:a3:79:4e:53:c8:c8:8d:76:cd:33:04:
74:fe:19:38:b5:84:b4:62:37:70:9e:de:b4:72:a1:32:38:9b:
63:26:6c:19:b0:cb:01:5b:ca:78:6c:05:18:3b:f5:7e:e0:46:
17:52:e5:07:ba:61:93:26:0b:09:57:dd:c8:4c:c6:52:32:50:
6f:fc:f4:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 13:30:12 2025 by rpki-client