Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9170F5D/9D54C17C88BD11EC91B86949C4F9AE02/2839F45288C211ECBEA38C0BC4F9AE02.roa
File: 2839F45288C211ECBEA38C0BC4F9AE02.roa (raw, json)
Hash identifier: UBb2Bwu9CWJzw7Q0GrMqv9wsr+f8RiKeX0Zws7JMDOw=
Subject key identifier: 5D:11:BE:D2:62:7F:3B:C3:C1:04:5B:A3:02:08:F0:85:52:ED:3E:31
Certificate issuer: /CN=A9170F5D/serialNumber=15ECBEB85B693F1258A903667AF02C627F69ADC9
Certificate serial: 03AA
Authority key identifier: 15:EC:BE:B8:5B:69:3F:12:58:A9:03:66:7A:F0:2C:62:7F:69:AD:C9
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fey-uFtpPxJYqQNmevAsYn9prck.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9170F5D/9D54C17C88BD11EC91B86949C4F9AE02/2839F45288C211ECBEA38C0BC4F9AE02.roa
Signing time: Tue 25 Feb 2025 02:13:58 +0000
ROA not before: Tue 25 Feb 2025 02:13:58 +0000
ROA not after: Tue 31 Mar 2026 00:00:00 +0000
asID: 17557
IP address blocks: 103.178.120.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9170F5D/9D54C17C88BD11EC91B86949C4F9AE02/Fey-uFtpPxJYqQNmevAsYn9prck.crl
rsync://rpki.apnic.net/member_repository/A9170F5D/9D54C17C88BD11EC91B86949C4F9AE02/Fey-uFtpPxJYqQNmevAsYn9prck.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fey-uFtpPxJYqQNmevAsYn9prck.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 20 Apr 2025 00:19:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 938 (0x3aa)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9170F5D, serialNumber=15ECBEB85B693F1258A903667AF02C627F69ADC9
Validity
Not Before: Feb 25 02:13:58 2025 GMT
Not After : Mar 31 00:00:00 2026 GMT
Subject: CN=67bd2766-f085
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:bb:60:f1:2b:83:30:28:26:1e:db:76:e7:d2:
df:18:97:78:60:d2:2f:54:9e:da:df:e0:f6:7c:25:
df:22:51:af:86:06:e5:60:12:c6:b1:77:55:28:a3:
b0:99:6d:ba:51:a0:52:17:c5:71:5a:d1:ab:b6:60:
69:fc:4d:89:97:8d:63:f1:4e:d1:46:19:39:b2:d1:
36:3e:b5:f1:cd:2e:44:b3:d6:19:64:30:2d:f8:74:
d4:64:12:f8:f3:92:83:05:17:4f:26:62:ea:4e:3f:
b7:40:a5:04:6f:99:67:9f:65:b7:e9:94:4f:46:03:
8c:87:49:bc:fb:16:32:48:6f:3b:6d:1f:e2:bc:5f:
d1:04:b4:ee:65:db:48:39:0e:c9:34:52:5a:79:b5:
6b:56:9f:84:d7:74:dd:e5:b2:1f:ac:ce:f7:e0:11:
0d:f8:99:42:f4:66:db:04:40:e9:97:0d:d6:ca:67:
e7:36:bc:02:bd:4c:55:db:2a:ea:1c:6a:74:27:db:
25:1e:63:73:b3:bd:ea:79:88:00:c7:78:71:95:06:
21:92:d2:db:30:c5:91:78:0d:25:ba:ec:b8:c7:17:
93:a1:ce:fc:9f:12:08:09:5b:4b:cb:f5:cc:89:94:
a0:b6:39:ac:06:43:bd:d4:b1:e2:a4:10:c8:28:0d:
62:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:11:BE:D2:62:7F:3B:C3:C1:04:5B:A3:02:08:F0:85:52:ED:3E:31
X509v3 Authority Key Identifier:
keyid:15:EC:BE:B8:5B:69:3F:12:58:A9:03:66:7A:F0:2C:62:7F:69:AD:C9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9170F5D/9D54C17C88BD11EC91B86949C4F9AE02/Fey-uFtpPxJYqQNmevAsYn9prck.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fey-uFtpPxJYqQNmevAsYn9prck.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9170F5D/9D54C17C88BD11EC91B86949C4F9AE02/2839F45288C211ECBEA38C0BC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.178.120.0/24
Signature Algorithm: sha256WithRSAEncryption
d5:1f:fa:c2:42:d6:f8:15:6b:c5:6d:d1:99:42:15:d6:58:4f:
e5:4e:96:2f:8d:54:2f:1e:5e:0f:c5:a4:4b:ee:28:ba:a6:38:
68:f0:96:91:da:eb:ac:7e:1a:a5:e8:1a:9f:09:6d:a7:c6:94:
a4:8b:13:73:9c:3d:20:36:a7:e9:3e:6b:d8:f4:a5:75:0c:ae:
84:04:c8:6f:89:a9:f3:b7:b7:fc:19:e5:aa:e5:64:aa:2c:fc:
e8:96:b8:f0:e4:c4:75:4c:7e:d8:bf:ad:3d:87:3e:e3:ef:b4:
21:86:20:73:a8:f0:2d:4a:8c:6b:0b:03:96:09:5d:bb:aa:5d:
31:6a:71:ea:0a:37:9c:c2:b9:86:bc:95:f3:0f:4c:d0:3a:1b:
54:82:b5:57:25:7c:b9:b5:9d:66:c1:3b:f8:c1:1a:b1:34:c4:
a6:96:57:a7:64:b8:22:d5:31:10:05:b7:c1:a1:9a:e7:0d:04:
49:86:43:c2:22:75:17:81:55:aa:d5:c0:ae:03:98:55:fb:e6:
2d:c7:f3:2f:07:06:30:4e:46:7b:fc:be:ff:be:2c:ab:ef:72:
ec:ed:e8:b9:15:fa:9b:ac:62:93:29:4e:a9:48:e6:fc:86:b7:
12:83:0b:e1:c2:93:71:4d:0a:16:87:cf:a5:c6:66:0f:a8:ea:
60:81:70:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 13 17:08:22 2025 by rpki-client