Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9179EE2/02B27388F57211EA9A247917C4F9AE02/431106B2125611ED9FB5292EC4F9AE02.roa
File: 431106B2125611ED9FB5292EC4F9AE02.roa (raw, json)
Hash identifier: yYe2S/r+iFZmGGM++jOhHqDjwT0Z+vvfLaaWlIwsXLY=
Subject key identifier: D5:D1:C9:5F:34:0B:A8:88:6E:46:A8:22:70:7A:86:12:55:93:A5:77
Certificate issuer: /CN=A9179EE2/serialNumber=8218524F7A16B58C0D9B73940319397EE4FCA6FD
Certificate serial: 0790
Authority key identifier: 82:18:52:4F:7A:16:B5:8C:0D:9B:73:94:03:19:39:7E:E4:FC:A6:FD
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ghhST3oWtYwNm3OUAxk5fuT8pv0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9179EE2/02B27388F57211EA9A247917C4F9AE02/431106B2125611ED9FB5292EC4F9AE02.roa
Signing time: Tue 31 Dec 2024 21:10:02 +0000
ROA not before: Tue 31 Dec 2024 21:10:02 +0000
ROA not after: Mon 02 Mar 2026 00:00:00 +0000
asID: 997
IP address blocks: 103.145.58.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9179EE2/02B27388F57211EA9A247917C4F9AE02/ghhST3oWtYwNm3OUAxk5fuT8pv0.crl
rsync://rpki.apnic.net/member_repository/A9179EE2/02B27388F57211EA9A247917C4F9AE02/ghhST3oWtYwNm3OUAxk5fuT8pv0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ghhST3oWtYwNm3OUAxk5fuT8pv0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 19 Apr 2025 20:53:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1936 (0x790)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9179EE2, serialNumber=8218524F7A16B58C0D9B73940319397EE4FCA6FD
Validity
Not Before: Dec 31 21:10:02 2024 GMT
Not After : Mar 2 00:00:00 2026 GMT
Subject: CN=67745daa-e57d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:da:0a:6f:10:d2:f7:65:cb:92:62:b6:b8:61:
b0:49:15:b5:42:18:db:44:0b:b6:96:b4:75:f7:a2:
6d:b9:27:37:83:3c:fa:f6:07:86:92:30:be:cd:b8:
bb:93:2c:6b:03:db:62:57:7b:aa:15:25:57:10:b7:
3e:bb:a6:26:ae:74:6d:1f:31:53:fc:da:45:a3:57:
02:3f:77:0e:02:4b:e4:dd:f0:c1:dd:63:3b:11:26:
29:2b:61:d8:96:1c:b3:2f:8c:63:38:6f:94:e3:11:
a6:76:a0:a0:98:45:4b:ba:ea:37:a3:3d:ae:fe:e4:
9f:17:8e:78:90:b1:14:a2:6c:10:af:ee:6d:46:a3:
71:a6:9f:95:ab:fb:48:70:c8:17:c5:6b:3b:75:43:
a9:cf:ea:ff:7a:87:fc:4e:84:64:c6:e8:16:95:ec:
54:c7:20:73:b3:1a:ac:17:ad:4d:f5:5d:eb:bc:f0:
d7:db:6d:fa:6a:eb:e1:14:40:ab:4d:3c:7e:c5:b8:
d4:3f:6e:5f:35:a1:15:a2:5b:b4:4e:16:fb:2c:43:
89:9d:56:1e:ce:8b:3c:dc:29:c0:45:c1:82:36:c8:
29:8e:c2:54:d0:18:b9:3a:e8:a8:55:8e:83:b5:a0:
53:06:bc:dd:50:6f:5b:1c:da:c5:bf:48:1b:0a:7a:
be:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:D1:C9:5F:34:0B:A8:88:6E:46:A8:22:70:7A:86:12:55:93:A5:77
X509v3 Authority Key Identifier:
keyid:82:18:52:4F:7A:16:B5:8C:0D:9B:73:94:03:19:39:7E:E4:FC:A6:FD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9179EE2/02B27388F57211EA9A247917C4F9AE02/ghhST3oWtYwNm3OUAxk5fuT8pv0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ghhST3oWtYwNm3OUAxk5fuT8pv0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9179EE2/02B27388F57211EA9A247917C4F9AE02/431106B2125611ED9FB5292EC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.145.58.0/23
Signature Algorithm: sha256WithRSAEncryption
a8:86:d5:c5:07:d4:ac:85:36:44:39:ad:0f:88:32:3b:dd:64:
2e:9d:72:0a:ad:24:0b:16:79:8e:e0:e0:ac:fa:4f:8b:a5:a9:
98:45:fd:da:41:c0:ce:e2:92:fd:2b:10:da:72:e6:f9:43:d7:
d5:42:44:61:ed:80:48:ec:ff:03:7a:bc:93:75:2f:27:95:16:
ce:8d:e5:f7:ca:69:f1:0d:bf:8f:85:10:db:d3:f9:70:79:f5:
ca:26:cb:c6:e2:b6:20:92:87:60:64:df:a8:2a:af:8d:53:01:
8d:02:20:6d:60:90:d0:66:8e:68:13:9c:ec:cf:97:01:7f:45:
32:d5:98:d6:57:e8:82:5a:5d:64:da:1a:b4:74:fd:25:dc:41:
b9:5a:18:7f:15:c5:20:01:3b:af:37:53:b5:e3:ff:2c:fa:1d:
1b:f5:42:6a:9c:b7:4d:14:e6:9c:d8:58:33:a3:64:7d:df:92:
aa:06:99:dd:23:62:9c:a1:be:2d:ba:b5:ae:3c:34:e1:2d:45:
19:ec:bd:60:ce:9c:15:12:9b:2f:35:e4:d8:ef:f9:1f:08:65:
2a:91:d8:03:3a:76:13:02:ff:22:69:a0:48:d5:36:df:6b:ee:
1d:b9:7e:f8:38:aa:90:06:b6:e5:bc:b9:e4:16:93:a0:e6:06:
4f:69:d6:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 00:23:29 2025 by rpki-client