Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A917E0BB/68431FA2E8E611EE9CABE06AC4F9AE02/2D08F32A110011EFBF50D06AC4F9AE02.roa
File: 2D08F32A110011EFBF50D06AC4F9AE02.roa (raw, json)
Hash identifier: nAAaBPNOT83reooBTbRysc5FUHQ0lj/e8r5J8CDIx/E=
Subject key identifier: EC:63:99:E5:32:89:CF:6B:19:86:9F:35:B1:5F:12:B6:34:94:49:4C
Certificate issuer: /CN=A917E0BB/serialNumber=11AB37DC654150C493C8AFC7E86D669C20AE5386
Certificate serial: 89
Authority key identifier: 11:AB:37:DC:65:41:50:C4:93:C8:AF:C7:E8:6D:66:9C:20:AE:53:86
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Eas33GVBUMSTyK_H6G1mnCCuU4Y.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917E0BB/68431FA2E8E611EE9CABE06AC4F9AE02/2D08F32A110011EFBF50D06AC4F9AE02.roa
Signing time: Tue 03 Dec 2024 05:09:34 +0000
ROA not before: Tue 03 Dec 2024 05:09:34 +0000
ROA not after: Mon 02 Mar 2026 00:00:00 +0000
asID: 140687
IP address blocks: 115.84.170.0/23 maxlen: 23
115.84.170.0/24 maxlen: 24
115.84.171.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A917E0BB/68431FA2E8E611EE9CABE06AC4F9AE02/Eas33GVBUMSTyK_H6G1mnCCuU4Y.crl
rsync://rpki.apnic.net/member_repository/A917E0BB/68431FA2E8E611EE9CABE06AC4F9AE02/Eas33GVBUMSTyK_H6G1mnCCuU4Y.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Eas33GVBUMSTyK_H6G1mnCCuU4Y.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 20 Apr 2025 04:35:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 137 (0x89)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917E0BB, serialNumber=11AB37DC654150C493C8AFC7E86D669C20AE5386
Validity
Not Before: Dec 3 05:09:34 2024 GMT
Not After : Mar 2 00:00:00 2026 GMT
Subject: CN=674e928e-19cf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:80:ba:c5:9d:a5:26:5a:7a:53:3b:e5:7a:17:
c3:01:2f:45:e6:46:a2:94:67:6c:42:dc:67:e4:3c:
60:26:6a:70:65:14:66:3a:e4:fe:14:57:e2:ee:22:
35:93:f5:67:ab:01:51:fe:3d:41:52:f1:ba:f2:6b:
a1:72:f2:8f:ee:62:60:93:62:54:b5:68:b7:35:7f:
96:f3:b2:df:22:ab:c3:60:4b:cb:9e:71:81:66:9f:
3c:e3:4c:74:5c:3e:64:2f:ee:97:2f:a6:7f:13:4b:
1a:fa:28:9f:ee:31:77:5c:ed:b2:e2:be:d4:e1:45:
f4:2f:84:9a:01:e3:09:ee:de:98:0b:ec:de:1d:26:
5b:1a:25:5e:2c:c3:b9:05:09:39:8b:b7:68:3f:08:
52:88:bd:e3:8d:e0:c0:7d:d6:81:76:8d:82:ba:6f:
f9:3b:1c:a6:53:51:36:f4:04:3d:b6:49:24:b1:20:
e5:82:80:2b:b0:0d:cd:65:a0:fe:68:f1:27:b6:e1:
13:8d:07:a0:d7:3a:cb:89:bf:8a:52:35:19:c9:7e:
88:b8:ee:85:54:de:87:5f:62:9c:81:65:57:4b:7f:
2d:cb:38:de:cb:de:d4:84:1d:06:03:f2:9f:5c:2c:
31:19:72:e9:1f:6a:e3:87:79:aa:74:0f:68:3b:60:
bf:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:63:99:E5:32:89:CF:6B:19:86:9F:35:B1:5F:12:B6:34:94:49:4C
X509v3 Authority Key Identifier:
keyid:11:AB:37:DC:65:41:50:C4:93:C8:AF:C7:E8:6D:66:9C:20:AE:53:86
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917E0BB/68431FA2E8E611EE9CABE06AC4F9AE02/Eas33GVBUMSTyK_H6G1mnCCuU4Y.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Eas33GVBUMSTyK_H6G1mnCCuU4Y.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917E0BB/68431FA2E8E611EE9CABE06AC4F9AE02/2D08F32A110011EFBF50D06AC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
115.84.170.0/23
Signature Algorithm: sha256WithRSAEncryption
4f:fd:3a:b5:17:d0:dd:d8:72:20:06:4e:cf:dc:24:36:68:d5:
2e:9e:06:0f:da:ca:26:4e:5e:13:cf:f2:e0:04:ea:05:c8:f9:
c3:c2:b6:12:f0:ba:8d:42:50:a6:e6:6f:7f:f3:70:f2:a1:30:
63:ac:0f:ab:fe:8b:50:83:d6:6a:d3:fb:30:f7:ab:85:f1:44:
a1:24:d3:dc:21:d9:ea:c9:2a:d5:52:e2:45:72:ec:64:83:1c:
d3:e1:90:15:b6:91:27:95:be:87:59:68:34:04:e7:f4:d3:8f:
cb:18:6f:4c:90:f7:78:e3:0e:df:b8:08:bf:fd:62:aa:69:52:
76:10:c2:b0:bc:e5:57:67:32:73:1e:43:39:0b:e6:19:ca:80:
7b:f9:e4:ba:ce:11:7c:06:75:55:d1:8d:31:ff:7d:99:be:86:
48:f1:aa:66:e3:41:3f:a5:c7:89:85:cd:3d:7d:1e:57:13:ab:
7a:ca:cc:0c:e9:a4:92:28:d4:49:14:12:80:58:2d:2e:6e:a5:
dc:1b:df:05:fd:d7:f1:d3:8e:50:b1:59:d8:58:aa:89:5a:d4:
86:e4:a8:9d:92:97:87:4b:8f:1d:f8:42:45:80:c8:28:f7:c3:
2f:c4:15:22:9c:f4:1f:b8:d5:eb:93:ba:c6:c8:f3:96:f1:e4:
c9:a2:89:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 12:38:30 2025 by rpki-client