Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9186214/B7F81958331A11E4AF2AB37CC4F9AE02/B0D1C39A182511EABDE3E142C4F9AE02.roa
File: B0D1C39A182511EABDE3E142C4F9AE02.roa (raw, json)
Hash identifier: h6LaGc6kyZukCUqqYzIxqwzDNG7IrAkyoRHl1/dzGpU=
Subject key identifier: 63:36:98:61:4A:A1:4E:72:7A:79:30:3C:E9:F1:F8:D0:18:C6:8C:20
Certificate issuer: /CN=A9186214/serialNumber=3FB18D89FAF3188DCE590F7C489077961F82A957
Certificate serial: 2A6E
Authority key identifier: 3F:B1:8D:89:FA:F3:18:8D:CE:59:0F:7C:48:90:77:96:1F:82:A9:57
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/P7GNifrzGI3OWQ98SJB3lh-CqVc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9186214/B7F81958331A11E4AF2AB37CC4F9AE02/B0D1C39A182511EABDE3E142C4F9AE02.roa
Signing time: Fri 24 Jan 2025 16:02:10 +0000
ROA not before: Fri 24 Jan 2025 16:02:10 +0000
ROA not after: Sun 31 Aug 2025 00:00:00 +0000
asID: 17885
IP address blocks: 140.213.54.0/24 maxlen: 24
140.213.93.0/24 maxlen: 24
140.213.95.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9186214/B7F81958331A11E4AF2AB37CC4F9AE02/P7GNifrzGI3OWQ98SJB3lh-CqVc.crl
rsync://rpki.apnic.net/member_repository/A9186214/B7F81958331A11E4AF2AB37CC4F9AE02/P7GNifrzGI3OWQ98SJB3lh-CqVc.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/P7GNifrzGI3OWQ98SJB3lh-CqVc.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 15 Apr 2025 15:36:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 10862 (0x2a6e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9186214
Validity
Not Before: Jan 24 16:02:10 2025 GMT
Not After : Aug 31 00:00:00 2025 GMT
Subject: CN=6793b982-6473
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:9b:ed:63:8e:b9:8c:13:e5:78:1f:8f:57:5f:
9b:69:e4:cd:16:4b:49:2b:e2:9a:8f:17:0a:7e:f0:
3c:99:f9:50:35:37:7a:37:8d:1b:da:e8:f5:7d:c2:
42:f7:70:73:26:3d:ab:21:9c:e5:05:2a:54:c8:58:
b6:4f:c9:0e:2f:88:fa:d8:e2:35:60:e2:51:87:82:
b2:ae:da:63:79:0a:02:b8:42:08:f7:69:23:de:c9:
6e:fa:57:8b:3f:d9:fd:ea:4f:e0:d4:1f:36:bb:db:
fd:a3:a9:8b:f4:66:fa:16:cd:b5:a1:8e:42:43:65:
df:c0:57:1c:c3:07:1a:d8:33:80:72:18:e6:70:37:
45:5f:ff:b7:16:23:a2:e7:15:a7:d0:08:52:37:5f:
f2:de:87:2e:e5:a2:6b:24:6e:38:ba:b8:4a:35:98:
65:d5:9e:d6:ac:4d:01:36:a1:02:8a:5e:c8:02:d7:
f0:ce:87:87:c8:89:37:aa:8a:e6:c0:2a:29:07:83:
1c:42:26:73:d0:6a:55:63:76:32:1b:fe:8c:fe:3c:
6e:64:7e:8e:dd:04:c1:88:54:4b:b7:db:22:25:5e:
72:74:eb:ef:95:cb:da:a5:23:fd:4e:ad:0f:da:82:
36:36:ff:9c:8a:ba:a3:dd:10:4d:b6:9d:50:a8:c0:
0c:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:36:98:61:4A:A1:4E:72:7A:79:30:3C:E9:F1:F8:D0:18:C6:8C:20
X509v3 Authority Key Identifier:
keyid:3F:B1:8D:89:FA:F3:18:8D:CE:59:0F:7C:48:90:77:96:1F:82:A9:57
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9186214/B7F81958331A11E4AF2AB37CC4F9AE02/P7GNifrzGI3OWQ98SJB3lh-CqVc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/P7GNifrzGI3OWQ98SJB3lh-CqVc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9186214/B7F81958331A11E4AF2AB37CC4F9AE02/B0D1C39A182511EABDE3E142C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
140.213.54.0/24
140.213.93.0/24
140.213.95.0/24
Signature Algorithm: sha256WithRSAEncryption
6d:e9:43:74:57:9c:38:91:56:a7:26:b8:65:cf:93:4a:02:e0:
d3:28:48:9e:ed:36:12:91:d0:ad:50:1a:ef:c7:a7:28:ad:2e:
e7:3a:ff:f2:04:06:be:4b:80:c5:82:18:2c:6d:94:68:12:0e:
56:6e:4a:ec:bb:20:f3:66:3f:a8:f8:2c:c1:7f:08:08:8c:ae:
62:61:2c:04:9f:1c:17:b2:57:b5:48:46:4c:22:f3:9c:ef:f5:
9d:1c:99:91:89:e7:cd:c8:d3:17:d4:f2:0e:bb:30:bf:39:c8:
4e:90:12:c8:d3:50:39:f3:d4:fc:9e:7b:bf:30:27:39:43:d8:
2f:8e:4d:27:64:e4:f0:d1:42:55:86:a9:97:28:62:48:61:cf:
9c:12:40:07:84:57:8d:89:db:8a:71:0f:bc:bf:9a:81:d9:7f:
38:00:8d:3a:0d:c1:ef:1a:c8:87:e5:b2:45:02:58:f5:9d:96:
a6:68:e0:31:25:ce:bf:87:be:a9:bd:af:67:bf:69:88:9d:bc:
37:d1:c5:37:bf:b3:d8:7b:c9:48:2e:79:a2:8c:46:93:61:df:
63:59:9d:bb:a9:76:78:1a:7a:73:17:77:85:b7:0b:c1:c5:3d:
fb:fd:7f:09:06:b6:01:f6:80:02:dc:c1:67:e2:58:c7:59:02:
c0:f5:1d:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 00:52:58 2025 by rpki-client