Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9186A4B/5DA5C2763EEA11E997B79831C4F9AE02/98783026EB5F11ECB4060F86C4F9AE02.roa
File: 98783026EB5F11ECB4060F86C4F9AE02.roa (raw, json)
Hash identifier: 4OlV59b2rslcN4y969OU4nFAAzSl+aCeFuF7xmQjSHU=
Subject key identifier: 09:31:E9:A6:C5:46:BB:CB:05:99:E7:FB:81:2B:26:3B:E3:DE:2C:AA
Certificate issuer: /CN=A9186A4B/serialNumber=1563CCE89C5BAC3C104DED362B39F3B2F259F010
Certificate serial: 102C
Authority key identifier: 15:63:CC:E8:9C:5B:AC:3C:10:4D:ED:36:2B:39:F3:B2:F2:59:F0:10
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FWPM6JxbrDwQTe02KznzsvJZ8BA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9186A4B/5DA5C2763EEA11E997B79831C4F9AE02/98783026EB5F11ECB4060F86C4F9AE02.roa
Signing time: Wed 02 Apr 2025 17:46:50 +0000
ROA not before: Wed 02 Apr 2025 17:46:50 +0000
ROA not after: Thu 28 May 2026 00:00:00 +0000
asID: 54574
IP address blocks: 103.135.248.0/22 maxlen: 24
2404:8840::/32 maxlen: 128
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9186A4B/5DA5C2763EEA11E997B79831C4F9AE02/FWPM6JxbrDwQTe02KznzsvJZ8BA.crl
rsync://rpki.apnic.net/member_repository/A9186A4B/5DA5C2763EEA11E997B79831C4F9AE02/FWPM6JxbrDwQTe02KznzsvJZ8BA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FWPM6JxbrDwQTe02KznzsvJZ8BA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 19 Apr 2025 17:21:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4140 (0x102c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9186A4B, serialNumber=1563CCE89C5BAC3C104DED362B39F3B2F259F010
Validity
Not Before: Apr 2 17:46:50 2025 GMT
Not After : May 28 00:00:00 2026 GMT
Subject: CN=67ed780a-d8c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:ad:cf:2f:f9:64:bd:fe:e8:d0:2e:0b:a0:34:
d5:36:50:60:e8:3f:65:f7:b9:39:c2:ba:6c:19:d4:
78:f5:95:c5:6e:8b:3d:75:0e:0d:92:84:ae:c2:7a:
68:e3:4d:e4:e7:7a:2c:3e:b6:8f:d7:6c:9b:e7:72:
0c:84:d9:d6:dc:88:a6:44:41:71:fe:47:be:ad:97:
dc:9f:12:78:06:19:29:86:71:a3:03:04:e4:e5:d5:
60:db:ee:06:3f:06:92:34:a8:78:57:c2:e9:f9:5f:
2f:bf:1d:9a:37:cc:a3:16:9b:89:ca:c8:3d:ad:6f:
75:e0:a7:ec:73:a9:b3:07:42:6f:f8:30:02:44:60:
79:ae:6b:cf:d5:c9:b8:a4:e8:e1:ed:35:08:02:3b:
32:41:c9:5b:6b:c0:7f:ea:da:7a:af:5d:95:2c:47:
de:6d:27:b8:63:ad:a0:ab:91:7e:a3:61:f1:19:80:
3f:0c:cd:5e:cd:c5:0c:c5:a8:47:b1:59:4e:96:d4:
33:1a:27:78:e9:2e:c4:b8:eb:7a:93:4a:a2:11:09:
3e:15:d9:78:c3:62:17:2e:30:f9:9d:06:e1:42:22:
b3:2f:85:df:fb:2d:30:48:da:05:0a:16:a7:5a:86:
7a:d3:43:21:a5:55:58:48:4f:91:57:11:13:b0:73:
9e:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:31:E9:A6:C5:46:BB:CB:05:99:E7:FB:81:2B:26:3B:E3:DE:2C:AA
X509v3 Authority Key Identifier:
keyid:15:63:CC:E8:9C:5B:AC:3C:10:4D:ED:36:2B:39:F3:B2:F2:59:F0:10
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9186A4B/5DA5C2763EEA11E997B79831C4F9AE02/FWPM6JxbrDwQTe02KznzsvJZ8BA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FWPM6JxbrDwQTe02KznzsvJZ8BA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9186A4B/5DA5C2763EEA11E997B79831C4F9AE02/98783026EB5F11ECB4060F86C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.135.248.0/22
IPv6:
2404:8840::/32
Signature Algorithm: sha256WithRSAEncryption
31:b7:5e:10:e2:d0:df:bb:a6:53:c8:40:4a:54:73:de:51:07:
d3:83:61:65:92:fe:03:40:4e:bb:a6:61:93:78:dc:fe:d6:03:
8c:e8:6d:de:8d:1d:7f:ba:17:48:7e:39:cf:18:c3:54:9a:7a:
f5:62:45:a7:a6:8c:c2:28:03:63:fa:fa:91:7b:c8:34:63:85:
65:23:ea:63:c6:7a:f8:65:38:80:c4:d4:6a:eb:88:29:15:b0:
6a:ec:92:ef:2b:69:7b:d0:24:2f:06:34:1b:ff:9e:9a:d8:ff:
35:56:ab:28:dd:71:8f:be:c3:e4:6f:9c:bc:2f:6c:d0:62:08:
9e:39:49:7c:de:fb:c7:f5:21:87:d6:6b:8a:f5:87:81:2f:b8:
15:4a:80:0d:e0:89:dc:61:db:ad:63:e3:24:fe:b6:ac:25:84:
52:b3:a3:f4:65:23:f5:4e:91:1a:92:f1:b4:b3:5d:02:01:ad:
a9:c6:31:fb:31:07:55:3c:39:e5:d5:50:0b:cd:9f:2b:09:3f:
89:47:ce:f6:c4:53:97:62:33:79:11:7c:68:44:71:df:d4:5f:
02:c2:c3:98:38:02:1a:55:dc:58:4b:fd:8f:40:4b:8d:80:cb:
c0:3f:79:28:e3:df:f9:d3:bf:a9:4a:7e:07:99:da:36:cf:86:
82:a8:c8:b4
-----BEGIN CERTIFICATE-----
MIIFgDCCBGigAwIBAgICECwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
ODZBNEIxMTAvBgNVBAUTKDE1NjNDQ0U4OUM1QkFDM0MxMDRERUQzNjJCMzlGM0Iy
RjI1OUYwMTAwHhcNMjUwNDAyMTc0NjUwWhcNMjYwNTI4MDAwMDAwWjAYMRYwFAYD
VQQDEw02N2VkNzgwYS1kOGM3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA4K3PL/lkvf7o0C4LoDTVNlBg6D9l97k5wrpsGdR49ZXFbos9dQ4NkoSuwnpo
403k53osPraP12yb53IMhNnW3IimREFx/ke+rZfcnxJ4BhkphnGjAwTk5dVg2+4G
PwaSNKh4V8Lp+V8vvx2aN8yjFpuJysg9rW914Kfsc6mzB0Jv+DACRGB5rmvP1cm4
pOjh7TUIAjsyQclba8B/6tp6r12VLEfebSe4Y62gq5F+o2HxGYA/DM1ezcUMxahH
sVlOltQzGid46S7EuOt6k0qiEQk+Fdl4w2IXLjD5nQbhQiKzL4Xf+y0wSNoFChan
WoZ600MhpVVYSE+RVxETsHOevQIDAQABo4ICpDCCAqAwHQYDVR0OBBYEFAkx6abF
RrvLBZnn+4ErJjvj3iyqMB8GA1UdIwQYMBaAFBVjzOicW6w8EE3tNis587LyWfAQ
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NkE0Qi81REE1QzI3NjNF
RUExMUU5OTdCNzk4MzFDNEY5QUUwMi9GV1BNNkp4YnJEd1FUZTAyS3puenN2Slo4
QkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0ZXUE02SnhickR3UVRlMDJLem56c3ZKWjhCQS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
ODZBNEIvNURBNUMyNzYzRUVBMTFFOTk3Qjc5ODMxQzRGOUFFMDIvOTg3ODMwMjZF
QjVGMTFFQ0I0MDYwRjg2QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwLgYIKwYBBQUHAQcBAf8E
HzAdMAwEAgABMAYDBAJnh/gwDQQCAAIwBwMFACQEiEAwDQYJKoZIhvcNAQELBQAD
ggEBADG3XhDi0N+7plPIQEpUc95RB9ODYWWS/gNATrumYZN43P7WA4zobd6NHX+6
F0h+Oc8Yw1SaevViRaemjMIoA2P6+pF7yDRjhWUj6mPGevhlOIDE1GrriCkVsGrs
ku8raXvQJC8GNBv/nprY/zVWqyjdcY++w+RvnLwvbNBiCJ45SXze+8f1IYfWa4r1
h4EvuBVKgA3gidxh261j4yT+tqwlhFKzo/RlI/VOkRqS8bSzXQIBranGMfsxB1U8
OeXVUAvNnysJP4lHzvbEU5diM3kRfGhEcd/UXwLCw5g4AhpV3FhL/Y9AS42Ay8A/
eSjj3/nTv6lKfgeZ2jbPhoKoyLQ=
-----END CERTIFICATE-----
Generated at Mon Apr 14 06:22:32 2025 by rpki-client