Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A917C933/FD9521B2DC5711EA83E8EC67C4F9AE02/B2E74042602811EF90548827C4F9AE02.roa
File: B2E74042602811EF90548827C4F9AE02.roa (raw, json)
Hash identifier: 5CfU6Ey+EqR6j3v3qr6f+yrfJbdI9IE9e5KRkCXxOtY=
Subject key identifier: 65:B0:BD:35:17:02:75:09:B1:FA:F8:3C:F2:1B:E0:2F:BC:6A:A8:62
Certificate issuer: /CN=A917C933/serialNumber=1A1A2DB6227049860D1CB6FB381D035F7CDDFE79
Certificate serial: 079A
Authority key identifier: 1A:1A:2D:B6:22:70:49:86:0D:1C:B6:FB:38:1D:03:5F:7C:DD:FE:79
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GhottiJwSYYNHLb7OB0DX3zd_nk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917C933/FD9521B2DC5711EA83E8EC67C4F9AE02/B2E74042602811EF90548827C4F9AE02.roa
Signing time: Wed 04 Sep 2024 21:49:35 +0000
ROA not before: Wed 04 Sep 2024 21:49:35 +0000
ROA not after: Mon 01 Dec 2025 00:00:00 +0000
asID: 141002
IP address blocks: 103.154.29.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A917C933/FD9521B2DC5711EA83E8EC67C4F9AE02/GhottiJwSYYNHLb7OB0DX3zd_nk.crl
rsync://rpki.apnic.net/member_repository/A917C933/FD9521B2DC5711EA83E8EC67C4F9AE02/GhottiJwSYYNHLb7OB0DX3zd_nk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GhottiJwSYYNHLb7OB0DX3zd_nk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 19 Apr 2025 20:40:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1946 (0x79a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917C933, serialNumber=1A1A2DB6227049860D1CB6FB381D035F7CDDFE79
Validity
Not Before: Sep 4 21:49:35 2024 GMT
Not After : Dec 1 00:00:00 2025 GMT
Subject: CN=66d8d5ee-ee7d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:84:e5:9c:c8:68:5a:c8:20:e8:3c:0a:69:d8:
7a:d4:8a:5a:95:3b:d5:57:a2:2e:e2:c5:34:c3:3b:
93:f0:26:36:8a:da:36:7c:2e:a2:4e:d0:9f:c4:48:
ad:d5:7e:27:80:d5:72:d9:83:6d:6e:30:9e:76:dd:
a1:a3:d7:72:fd:31:a5:c0:54:03:74:d8:31:5a:fe:
18:f8:a3:6f:36:5e:1a:95:d3:7d:a0:c4:e8:6e:39:
5f:8c:50:60:3e:20:37:85:ca:91:cf:70:c7:e8:d8:
cd:f4:0b:2c:8a:0b:3c:07:b9:e0:98:79:c6:53:15:
4f:23:d1:a6:03:ab:16:96:7a:4a:b3:2e:d5:e8:99:
b6:17:44:86:12:df:30:ec:5e:74:d2:c0:8a:bd:ff:
8d:be:c8:b9:38:54:a8:c8:62:d6:7e:3b:c7:c0:d5:
e3:8c:05:80:f3:f6:38:9f:b2:c7:05:4e:f1:83:b4:
7d:7d:e8:44:8a:94:ef:d1:65:6c:44:51:81:87:28:
f6:42:70:1b:a0:9c:93:4a:91:12:21:83:86:0c:30:
d7:8b:2e:f7:c7:f4:ac:ba:f9:12:68:f9:17:38:38:
32:4a:d1:78:04:9e:a2:bc:39:3e:bb:ec:9b:bc:9c:
ca:f3:4d:16:56:78:b2:b1:88:d7:6a:70:ec:1f:9d:
cb:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:B0:BD:35:17:02:75:09:B1:FA:F8:3C:F2:1B:E0:2F:BC:6A:A8:62
X509v3 Authority Key Identifier:
keyid:1A:1A:2D:B6:22:70:49:86:0D:1C:B6:FB:38:1D:03:5F:7C:DD:FE:79
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917C933/FD9521B2DC5711EA83E8EC67C4F9AE02/GhottiJwSYYNHLb7OB0DX3zd_nk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GhottiJwSYYNHLb7OB0DX3zd_nk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917C933/FD9521B2DC5711EA83E8EC67C4F9AE02/B2E74042602811EF90548827C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.154.29.0/24
Signature Algorithm: sha256WithRSAEncryption
7c:01:df:3b:11:72:14:2d:1c:81:8e:44:e2:ca:08:26:52:0f:
5a:10:3a:34:b1:cc:06:d3:c2:c3:81:e2:ab:37:12:11:86:97:
aa:a9:e2:5c:33:c8:c2:69:7c:9b:dd:e5:ca:5e:44:e2:1b:5e:
e6:fc:56:9b:56:3a:dd:0b:e2:49:11:0f:7c:a1:44:f8:61:e9:
6f:21:4e:f3:2b:41:57:2b:a7:0f:f1:f3:c3:ee:57:bc:05:4c:
05:ca:60:83:02:c7:1e:eb:e3:92:76:99:07:b4:91:dd:a5:70:
75:58:a9:4c:f4:98:cf:68:97:dc:8e:75:b8:f6:11:17:61:85:
5a:dd:3c:11:8c:03:9c:81:8b:0b:1d:6a:59:81:a9:79:45:7f:
9f:68:54:d3:98:de:77:c0:74:55:28:69:42:45:bc:51:78:07:
95:94:ff:0c:8e:08:e9:1f:8f:8e:eb:2d:5f:cd:d1:af:cd:aa:
66:74:1a:af:ab:90:a7:45:23:53:2f:14:31:c7:30:f3:3c:df:
28:e0:52:57:1f:43:1d:14:18:a1:df:a7:20:18:7c:2a:74:96:
73:fc:cd:f2:c9:8a:a2:ce:16:c9:f7:13:a7:bb:1f:d3:ba:c0:
3b:f6:3a:e5:14:c9:f2:6f:35:d2:27:e8:fc:53:bf:83:29:26:
80:29:ac:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 00:07:20 2025 by rpki-client