Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9165568/BD1A95D21D8711E29BE3E6DF08B02CD2/A310F2FC8AB811EA9F89B54EC4F9AE02.roa
File: A310F2FC8AB811EA9F89B54EC4F9AE02.roa (raw, json)
Hash identifier: kTpEYCAmunxJIp4Id6sV5egINJOtqBpQw2yNKgEwrR4=
Subject key identifier: FD:C5:44:C4:3F:54:0E:5F:C5:43:34:8A:FA:B2:75:BF:27:F1:68:8E
Certificate issuer: /CN=A9165568/serialNumber=67097E492F73D6DBD31FA016A2D5B5B86A9B3FD8
Certificate serial: 1C55
Authority key identifier: 67:09:7E:49:2F:73:D6:DB:D3:1F:A0:16:A2:D5:B5:B8:6A:9B:3F:D8
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Zwl-SS9z1tvTH6AWotW1uGqbP9g.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9165568/BD1A95D21D8711E29BE3E6DF08B02CD2/A310F2FC8AB811EA9F89B54EC4F9AE02.roa
Signing time: Mon 28 Oct 2024 14:40:35 +0000
ROA not before: Mon 28 Oct 2024 14:40:35 +0000
ROA not after: Sat 31 Jan 2026 00:00:00 +0000
asID: 132788
IP address blocks: 119.30.80.0/20 maxlen: 20
119.30.89.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9165568/BD1A95D21D8711E29BE3E6DF08B02CD2/Zwl-SS9z1tvTH6AWotW1uGqbP9g.crl
rsync://rpki.apnic.net/member_repository/A9165568/BD1A95D21D8711E29BE3E6DF08B02CD2/Zwl-SS9z1tvTH6AWotW1uGqbP9g.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Zwl-SS9z1tvTH6AWotW1uGqbP9g.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 15 Apr 2025 14:29:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7253 (0x1c55)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9165568
Validity
Not Before: Oct 28 14:40:35 2024 GMT
Not After : Jan 31 00:00:00 2026 GMT
Subject: CN=671fa263-75d9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:2e:20:77:da:14:41:26:70:da:ce:89:1b:65:
01:fd:fe:f3:eb:a7:ec:bc:32:b7:d1:2d:d1:5c:09:
97:5b:79:bf:55:b9:1b:44:be:49:e2:c8:e5:b3:40:
d5:48:82:33:c2:3e:64:e2:e7:83:5b:9b:37:0a:e6:
4d:e8:c9:7b:35:65:f9:f6:f5:6c:8b:fe:fb:27:96:
57:4b:1f:3c:45:85:a5:5c:bd:01:be:a8:d5:ae:b7:
ce:7c:c2:d3:d7:e2:e0:14:82:66:c7:84:40:43:20:
03:b1:08:8e:87:c8:a8:d3:cd:05:db:b4:7a:e1:d3:
b8:52:07:e6:43:78:c8:e6:4c:cd:53:be:3d:cb:23:
c1:78:8a:11:f3:f6:f1:ed:23:b2:a2:79:44:b5:6f:
7e:0a:6a:f6:59:6b:31:1b:cd:ea:d2:ad:f9:2b:f6:
fe:7c:9f:d5:aa:60:9e:81:86:b6:0e:de:54:2b:e7:
9e:bb:a5:5e:a6:4f:e5:5c:f0:7c:4a:98:2d:20:a3:
c0:77:51:5c:e4:06:1a:07:28:66:b4:99:b7:6e:3b:
1d:95:18:b9:b2:37:ea:bf:04:92:5d:0a:9c:d6:da:
28:e7:bf:70:23:b8:a1:00:41:6d:00:0d:4a:51:17:
77:20:36:1c:2d:34:18:6e:57:dd:41:f6:2c:5d:c3:
04:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:C5:44:C4:3F:54:0E:5F:C5:43:34:8A:FA:B2:75:BF:27:F1:68:8E
X509v3 Authority Key Identifier:
keyid:67:09:7E:49:2F:73:D6:DB:D3:1F:A0:16:A2:D5:B5:B8:6A:9B:3F:D8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9165568/BD1A95D21D8711E29BE3E6DF08B02CD2/Zwl-SS9z1tvTH6AWotW1uGqbP9g.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Zwl-SS9z1tvTH6AWotW1uGqbP9g.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9165568/BD1A95D21D8711E29BE3E6DF08B02CD2/A310F2FC8AB811EA9F89B54EC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
119.30.80.0/20
Signature Algorithm: sha256WithRSAEncryption
45:64:94:30:ac:8b:c2:b0:9d:82:c1:9f:50:01:ec:6f:4d:60:
91:f7:fc:ec:4c:be:17:13:41:92:37:02:ec:16:d5:24:0a:2c:
d2:05:f8:c3:f7:8f:a6:47:3e:ea:6c:34:91:12:08:22:98:c5:
5e:2e:8d:2f:e0:0d:6d:fc:0e:08:5d:2f:6f:97:f2:f0:aa:dd:
33:e2:56:c9:c2:f4:ca:0d:87:17:14:7b:46:cd:da:41:8d:34:
b6:64:ee:b9:d7:07:fa:8d:72:23:6a:7b:f3:fb:43:3d:32:10:
6c:a5:39:3c:4e:c3:97:c2:ff:ff:47:55:c9:00:03:5e:ef:7a:
a7:3c:4b:95:8d:2f:5b:d7:da:a6:81:e9:de:38:a8:ca:10:26:
7c:27:99:d7:ad:89:59:95:4c:0f:b3:98:08:1f:a1:36:dc:a1:
99:6b:6a:eb:02:4f:3d:cd:6c:85:50:5d:e6:a0:7d:61:98:1a:
4a:42:d8:4e:97:1a:90:b6:6f:85:16:57:db:c8:6b:0f:ee:9a:
f4:2f:54:a3:e6:a9:5b:71:03:27:41:90:cd:8f:d2:be:3c:3a:
af:50:f6:d8:b2:b4:12:26:55:53:56:72:92:d9:ec:1b:e5:88:
9d:77:82:2b:d5:86:37:d5:47:4a:be:05:17:3c:e8:68:22:a6:
7a:de:c7:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 01:04:47 2025 by rpki-client