Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91756B7/95EF7DBA967D11EBADD50D2CC4F9AE02/8A83E044AA5E11EF86EDC12AC4F9AE02.roa
File: 8A83E044AA5E11EF86EDC12AC4F9AE02.roa (raw, json)
Hash identifier: bTG0otEBv5pUF0uMZgR8QuZCzoXLSGz2eFHvXwQK5Yk=
Subject key identifier: 18:8D:BD:38:9D:04:64:14:7A:0A:25:3E:F2:5E:CF:3D:84:57:5B:5B
Certificate issuer: /CN=A91756B7/serialNumber=83D96F1DEA72A99D234B4456D6F6675DC7E6061E
Certificate serial: 06DC
Authority key identifier: 83:D9:6F:1D:EA:72:A9:9D:23:4B:44:56:D6:F6:67:5D:C7:E6:06:1E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/g9lvHepyqZ0jS0RW1vZnXcfmBh4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91756B7/95EF7DBA967D11EBADD50D2CC4F9AE02/8A83E044AA5E11EF86EDC12AC4F9AE02.roa
Signing time: Wed 08 Jan 2025 12:20:54 +0000
ROA not before: Wed 08 Jan 2025 12:20:54 +0000
ROA not after: Wed 30 Jul 2025 00:00:00 +0000
asID: 9825
IP address blocks: 103.165.158.0/24 maxlen: 24
202.94.165.0/24 maxlen: 24
2407:4ac0::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91756B7/95EF7DBA967D11EBADD50D2CC4F9AE02/g9lvHepyqZ0jS0RW1vZnXcfmBh4.crl
rsync://rpki.apnic.net/member_repository/A91756B7/95EF7DBA967D11EBADD50D2CC4F9AE02/g9lvHepyqZ0jS0RW1vZnXcfmBh4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/g9lvHepyqZ0jS0RW1vZnXcfmBh4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 15 Apr 2025 22:31:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1756 (0x6dc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91756B7
Validity
Not Before: Jan 8 12:20:54 2025 GMT
Not After : Jul 30 00:00:00 2025 GMT
Subject: CN=677e6da6-9b27
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:d8:83:93:eb:f7:13:bd:29:d6:b8:68:a3:54:
2f:60:af:3c:8c:e6:e3:cd:8d:b3:04:3c:f6:67:8b:
40:e5:d6:2b:41:60:94:13:56:49:60:62:0a:fe:23:
af:cb:f5:14:37:f7:71:dc:d3:ca:e0:58:91:09:08:
18:c6:f9:4e:86:e7:a9:ac:a1:d4:f2:ea:ac:af:8f:
77:19:2c:5d:b9:49:34:89:05:55:bd:39:91:90:22:
27:35:d4:b5:1e:e7:e8:ba:a9:1d:90:fa:eb:93:9d:
d2:d4:7e:e1:92:6f:80:35:83:14:59:2d:42:a6:df:
ea:0c:88:de:13:1e:fd:f9:a5:0e:7c:da:3e:d1:a9:
16:7c:df:cd:c9:be:fa:8d:82:06:1b:16:98:0d:b1:
d4:c4:09:b7:4e:1b:7a:98:f5:32:3f:da:ee:fd:db:
de:98:71:e2:23:8a:8d:4d:e0:5c:01:17:f2:95:48:
e3:7d:51:b7:2e:f1:43:14:c3:c4:36:e3:53:40:de:
cd:78:e3:cb:da:bf:99:30:87:3d:6c:27:5f:8e:9a:
dc:18:5e:b8:ed:53:8f:3b:39:30:de:71:fc:c1:30:
39:49:9c:85:bd:70:5c:f0:10:a1:49:b5:cc:ac:50:
4e:e0:00:a4:61:89:16:6e:c0:f5:46:96:f2:e7:2d:
ba:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:8D:BD:38:9D:04:64:14:7A:0A:25:3E:F2:5E:CF:3D:84:57:5B:5B
X509v3 Authority Key Identifier:
keyid:83:D9:6F:1D:EA:72:A9:9D:23:4B:44:56:D6:F6:67:5D:C7:E6:06:1E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91756B7/95EF7DBA967D11EBADD50D2CC4F9AE02/g9lvHepyqZ0jS0RW1vZnXcfmBh4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/g9lvHepyqZ0jS0RW1vZnXcfmBh4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91756B7/95EF7DBA967D11EBADD50D2CC4F9AE02/8A83E044AA5E11EF86EDC12AC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.165.158.0/24
202.94.165.0/24
IPv6:
2407:4ac0::/32
Signature Algorithm: sha256WithRSAEncryption
91:8a:e0:48:f8:2f:d2:c1:3c:62:01:ac:6c:8a:ef:92:df:ff:
75:9f:b7:63:0b:ab:11:9a:16:23:be:96:dc:ab:09:d6:59:4a:
1f:97:6d:a8:9f:a2:bf:00:2f:15:9c:f5:3b:bf:a0:86:66:57:
9c:ae:bb:21:1f:6d:55:5c:f0:ec:1f:7b:e9:31:c9:15:83:b2:
84:29:cc:a0:16:ea:83:54:56:6a:d0:8f:1e:ce:ad:22:c0:6e:
02:54:a4:52:fa:2c:b9:f5:6e:43:05:f0:b5:cc:ea:90:b4:14:
da:5f:64:aa:ae:32:e3:a3:d8:ca:96:fd:27:2e:ab:77:f4:93:
97:32:a0:35:c1:53:bd:e1:c3:d5:17:fe:ca:b5:dc:d6:59:98:
b2:60:19:1b:9c:f7:84:36:eb:c4:f5:35:e2:fd:ca:f1:2c:c7:
52:6a:eb:eb:21:0a:e6:7e:64:b9:1f:6c:9d:54:41:dc:e3:54:
c4:ed:2b:cc:c3:eb:3e:65:8a:d8:40:9c:bc:6c:8f:ab:26:66:
f1:f1:da:b6:38:1c:46:73:80:c0:f8:5b:cd:dc:17:55:84:36:
79:ae:37:28:60:99:4f:84:f8:62:4c:93:11:23:99:15:c9:14:
00:d5:97:43:0c:da:09:91:42:44:62:c8:6d:cd:1f:d8:6a:b5:
21:d4:5c:2d
-----BEGIN CERTIFICATE-----
MIIFhjCCBG6gAwIBAgICBtwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NzU2QjcxMTAvBgNVBAUTKDgzRDk2RjFERUE3MkE5OUQyMzRCNDQ1NkQ2RjY2NzVE
QzdFNjA2MUUwHhcNMjUwMTA4MTIyMDU0WhcNMjUwNzMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02NzdlNmRhNi05YjI3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAxdiDk+v3E70p1rhoo1QvYK88jObjzY2zBDz2Z4tA5dYrQWCUE1ZJYGIK/iOv
y/UUN/dx3NPK4FiRCQgYxvlOhueprKHU8uqsr493GSxduUk0iQVVvTmRkCInNdS1
HufouqkdkPrrk53S1H7hkm+ANYMUWS1Cpt/qDIjeEx79+aUOfNo+0akWfN/Nyb76
jYIGGxaYDbHUxAm3Tht6mPUyP9ru/dvemHHiI4qNTeBcARfylUjjfVG3LvFDFMPE
NuNTQN7NeOPL2r+ZMIc9bCdfjprcGF647VOPOzkw3nH8wTA5SZyFvXBc8BChSbXM
rFBO4ACkYYkWbsD1Rpby5y265wIDAQABo4ICqjCCAqYwHQYDVR0OBBYEFBiNvTid
BGQUegolPvJezz2EV1tbMB8GA1UdIwQYMBaAFIPZbx3qcqmdI0tEVtb2Z13H5gYe
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NTZCNy85NUVGN0RCQTk2
N0QxMUVCQURENTBEMkNDNEY5QUUwMi9nOWx2SGVweXFaMGpTMFJXMXZablhjZm1C
aDQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2c5bHZIZXB5cVowalMwUlcxdlpuWGNmbUJoNC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
NzU2QjcvOTVFRjdEQkE5NjdEMTFFQkFERDUwRDJDQzRGOUFFMDIvOEE4M0UwNDRB
QTVFMTFFRjg2RURDMTJBQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwNAYIKwYBBQUHAQcBAf8E
JTAjMBIEAgABMAwDBABnpZ4DBADKXqUwDQQCAAIwBwMFACQHSsAwDQYJKoZIhvcN
AQELBQADggEBAJGK4Ej4L9LBPGIBrGyK75Lf/3Wft2MLqxGaFiO+ltyrCdZZSh+X
baifor8ALxWc9Tu/oIZmV5yuuyEfbVVc8Owfe+kxyRWDsoQpzKAW6oNUVmrQjx7O
rSLAbgJUpFL6LLn1bkMF8LXM6pC0FNpfZKquMuOj2MqW/Scuq3f0k5cyoDXBU73h
w9UX/sq13NZZmLJgGRuc94Q268T1NeL9yvEsx1Jq6+shCuZ+ZLkfbJ1UQdzjVMTt
K8zD6z5lithAnLxsj6smZvHx2rY4HEZzgMD4W83cF1WENnmuNyhgmU+E+GJMkxEj
mRXJFADVl0MM2gmRQkRiyG3NH9hqtSHUXC0=
-----END CERTIFICATE-----
Generated at Fri Apr 11 05:26:14 2025 by rpki-client