Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9166646/7B16AC28B13C11EB8179FA29C4F9AE02/5AA0DC6EB13E11EBA7704F2CC4F9AE02.roa
File: 5AA0DC6EB13E11EBA7704F2CC4F9AE02.roa (raw, json)
Hash identifier: /w5fG5I8SVvb6KU0qV88HCDiJhOJmaZaXcIt+zZPytA=
Subject key identifier: 11:1B:D0:B8:2A:0E:49:62:0D:D5:DC:BB:A0:E1:58:BE:5E:BA:13:B3
Certificate issuer: /CN=A9166646/serialNumber=E03F58007B97290BA52343597917B2B6AB5DD2E9
Certificate serial: 0569
Authority key identifier: E0:3F:58:00:7B:97:29:0B:A5:23:43:59:79:17:B2:B6:AB:5D:D2:E9
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4D9YAHuXKQulI0NZeReytqtd0uk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9166646/7B16AC28B13C11EB8179FA29C4F9AE02/5AA0DC6EB13E11EBA7704F2CC4F9AE02.roa
Signing time: Wed 11 Sep 2024 01:33:01 +0000
ROA not before: Wed 11 Sep 2024 01:33:01 +0000
ROA not after: Mon 01 Dec 2025 00:00:00 +0000
asID: 141036
IP address blocks: 103.155.38.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9166646/7B16AC28B13C11EB8179FA29C4F9AE02/4D9YAHuXKQulI0NZeReytqtd0uk.crl
rsync://rpki.apnic.net/member_repository/A9166646/7B16AC28B13C11EB8179FA29C4F9AE02/4D9YAHuXKQulI0NZeReytqtd0uk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4D9YAHuXKQulI0NZeReytqtd0uk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 15 Apr 2025 22:45:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1385 (0x569)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9166646
Validity
Not Before: Sep 11 01:33:01 2024 GMT
Not After : Dec 1 00:00:00 2025 GMT
Subject: CN=66e0f34d-58e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:e1:e9:e1:b8:54:32:d1:a7:88:39:5a:f0:6d:
81:e9:e7:be:98:e7:9c:2e:dc:68:ec:f0:ba:59:06:
81:be:b2:1b:ff:0f:a2:87:ff:1e:09:b4:ab:f6:6c:
eb:3b:7b:c7:da:fa:d1:f5:ed:3a:04:38:fa:85:0b:
fd:a5:ad:6b:ff:b6:41:f4:3e:a6:5e:83:39:2a:d1:
92:a1:5a:f6:0c:3e:a7:7d:43:74:eb:25:11:b9:2b:
6c:ef:ea:8b:62:be:81:62:7a:53:20:89:36:bf:c3:
47:21:55:c0:97:25:72:c9:d6:a5:68:fa:59:de:e7:
fd:df:97:33:3e:a0:ec:7b:f0:19:f1:22:ec:92:4f:
bd:38:bd:44:a3:de:22:fd:25:3f:df:30:27:ce:04:
b4:f0:6b:a8:10:58:06:f5:5d:c5:67:d4:a9:e2:c1:
59:6e:d7:15:9c:2d:c7:71:0e:ed:36:82:9a:7c:67:
7a:61:e3:ee:37:48:d8:c2:ff:d5:04:c6:af:5f:2f:
32:a3:fa:e3:a8:61:89:e9:fa:81:49:e6:9f:b0:4a:
10:50:52:78:48:c4:40:00:3a:47:a4:af:35:4b:df:
4b:e9:dc:22:93:24:0c:62:be:9a:78:68:15:4b:5f:
09:55:5b:f4:01:c6:bd:93:6f:f3:f9:83:53:ce:0a:
09:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:1B:D0:B8:2A:0E:49:62:0D:D5:DC:BB:A0:E1:58:BE:5E:BA:13:B3
X509v3 Authority Key Identifier:
keyid:E0:3F:58:00:7B:97:29:0B:A5:23:43:59:79:17:B2:B6:AB:5D:D2:E9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9166646/7B16AC28B13C11EB8179FA29C4F9AE02/4D9YAHuXKQulI0NZeReytqtd0uk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4D9YAHuXKQulI0NZeReytqtd0uk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9166646/7B16AC28B13C11EB8179FA29C4F9AE02/5AA0DC6EB13E11EBA7704F2CC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.155.38.0/23
Signature Algorithm: sha256WithRSAEncryption
5e:fd:8c:17:55:20:d0:0a:22:bd:8e:31:cd:54:af:84:5a:e8:
de:04:b4:8b:a0:c8:4f:dd:f2:41:b2:94:75:4c:3c:e0:77:35:
ff:42:62:d3:f0:9b:8b:60:cd:86:a6:c2:d1:14:b5:cc:f0:72:
fa:52:a0:b6:fe:c1:05:9d:a3:8c:23:0e:c6:a0:19:87:69:75:
49:c0:2b:49:5e:1f:23:da:44:f3:40:e1:b8:1d:19:6b:26:d9:
5d:2d:f3:ab:48:50:76:92:76:ae:69:a4:50:82:81:ac:63:b2:
7d:31:f6:fe:9f:af:75:14:f8:aa:94:af:46:4f:31:ce:a8:d9:
12:48:ea:a6:09:c8:e2:29:b8:00:b5:25:4e:d6:99:af:d7:82:
20:cb:80:3a:20:88:28:9a:58:2e:2e:3a:f9:c6:9d:62:62:83:
8d:35:e2:39:a6:6a:04:1a:f0:13:2c:2c:7a:05:5d:2d:4c:e3:
91:9f:b9:b5:4a:f1:37:5d:0f:4a:57:ad:91:4d:70:c9:dd:11:
5b:38:fe:1a:85:ad:48:57:33:a1:5f:b9:b1:bf:57:7b:1f:d2:
b6:6a:be:bc:df:db:ff:4f:3b:19:80:bb:87:2e:43:ba:f5:39:
d3:8e:0e:5f:ff:25:b7:c7:39:a5:7c:79:c9:a5:62:36:45:72:
16:e4:3d:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 19:52:21 2025 by rpki-client