Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91894BE/0B4D029C13C511ED9F5AF26AC4F9AE02/942BF3C013CA11ED983E350EC4F9AE02.roa
File: 942BF3C013CA11ED983E350EC4F9AE02.roa (raw, json)
Hash identifier: 7RgKIXJ+YIFOFiYNofYamgA+0eKHAOepqg8p2i4RVOc=
Subject key identifier: BF:48:D1:00:7A:01:99:52:17:0F:F1:81:41:2A:43:0D:EB:56:52:B1
Certificate issuer: /CN=A91894BE/serialNumber=ABE4A5C893F4FCAC72D964468ABE7ADF3E6FC8FE
Certificate serial: 021A
Authority key identifier: AB:E4:A5:C8:93:F4:FC:AC:72:D9:64:46:8A:BE:7A:DF:3E:6F:C8:FE
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q-SlyJP0_Kxy2WRGir563z5vyP4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91894BE/0B4D029C13C511ED9F5AF26AC4F9AE02/942BF3C013CA11ED983E350EC4F9AE02.roa
Signing time: Mon 23 Dec 2024 01:25:15 +0000
ROA not before: Mon 23 Dec 2024 01:25:15 +0000
ROA not after: Mon 02 Mar 2026 00:00:00 +0000
asID: 24313
IP address blocks: 153.107.0.0/16 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91894BE/0B4D029C13C511ED9F5AF26AC4F9AE02/q-SlyJP0_Kxy2WRGir563z5vyP4.crl
rsync://rpki.apnic.net/member_repository/A91894BE/0B4D029C13C511ED9F5AF26AC4F9AE02/q-SlyJP0_Kxy2WRGir563z5vyP4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q-SlyJP0_Kxy2WRGir563z5vyP4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 16 Apr 2025 01:29:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 538 (0x21a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91894BE
Validity
Not Before: Dec 23 01:25:15 2024 GMT
Not After : Mar 2 00:00:00 2026 GMT
Subject: CN=6768bbfb-5695
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:a4:16:ce:13:47:81:4c:68:a2:3d:62:c1:a6:
52:6b:be:fd:65:b2:ff:54:58:18:0a:85:db:37:08:
e1:ee:61:84:39:8a:43:9e:a7:fb:a7:4a:20:c5:54:
b5:2c:1a:40:59:56:54:4e:5d:bf:e4:ec:9c:6e:d5:
37:2e:5b:44:35:b1:0b:79:eb:f6:8e:11:6f:a9:e0:
84:c0:0c:f4:9f:dc:ea:e2:99:eb:e4:4a:c9:61:52:
e2:41:6d:7b:c8:3a:ad:34:54:4d:bf:03:75:e2:1c:
3b:ad:e1:d7:d4:bb:0c:27:66:c3:71:64:ff:b2:e6:
84:13:dd:6b:a6:99:bb:73:63:4f:45:0c:4e:64:ea:
79:0f:5c:aa:47:5f:1c:c9:55:42:ad:0e:37:53:b1:
ed:19:93:65:66:49:a3:79:43:59:76:c1:7d:db:8e:
48:81:b3:11:3a:31:f1:ad:ad:6b:0f:e1:c7:14:80:
b4:ed:96:de:93:72:a9:79:80:75:55:59:28:65:4a:
72:77:a8:bf:26:80:6e:c5:50:b7:3a:76:2a:e6:7c:
ec:26:74:19:45:4c:b7:d5:bc:de:96:99:8e:18:cc:
0c:99:fd:e3:1b:bf:96:cc:fb:af:f5:e7:36:73:27:
6b:a3:96:46:5f:46:73:33:c1:cf:c7:d4:21:9e:7f:
41:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:48:D1:00:7A:01:99:52:17:0F:F1:81:41:2A:43:0D:EB:56:52:B1
X509v3 Authority Key Identifier:
keyid:AB:E4:A5:C8:93:F4:FC:AC:72:D9:64:46:8A:BE:7A:DF:3E:6F:C8:FE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91894BE/0B4D029C13C511ED9F5AF26AC4F9AE02/q-SlyJP0_Kxy2WRGir563z5vyP4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q-SlyJP0_Kxy2WRGir563z5vyP4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91894BE/0B4D029C13C511ED9F5AF26AC4F9AE02/942BF3C013CA11ED983E350EC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
153.107.0.0/16
Signature Algorithm: sha256WithRSAEncryption
b5:96:79:6c:e5:49:27:19:ca:cc:65:68:63:5c:f0:16:88:1e:
0e:6f:42:70:37:97:09:7d:8c:c5:ec:a4:07:dc:c9:25:72:a0:
1b:fe:a3:e4:d3:f6:cb:51:33:cc:89:49:3d:5f:70:c3:b6:8e:
d0:62:3b:33:2d:06:a9:42:23:b0:bb:fb:14:ad:30:0e:c1:03:
b9:d3:f3:43:e6:01:10:75:a0:48:c1:54:29:10:67:1f:65:87:
a2:91:96:62:d9:1f:c2:e4:5f:19:74:d5:f5:89:33:bd:c1:16:
af:6a:6e:63:33:21:10:7c:45:de:1d:2c:12:eb:b5:51:b3:28:
48:bb:56:31:0a:3c:a0:ae:f0:e7:c1:91:4a:86:08:ff:43:a2:
ad:a1:6c:79:57:03:a7:af:8a:17:18:ed:90:66:f3:69:94:e2:
b9:45:51:07:72:01:ae:86:41:a8:0a:73:2d:64:52:d3:91:37:
94:60:55:ed:ca:1f:53:00:43:14:29:f0:7d:c9:1c:01:c7:7f:
e7:1d:62:78:7b:2d:98:63:1c:74:c0:35:cb:49:06:72:43:a3:
b7:43:e4:70:cd:61:46:7d:98:89:76:42:b2:13:bc:cb:28:7a:
62:0e:85:d2:61:0e:59:5b:b0:66:60:1f:13:8d:43:b0:cd:bd:
3d:92:c1:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 01:51:20 2025 by rpki-client