Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A918D6BF/E361BA20A5A111E7B3A3127DC4F9AE02/974F9BA0A87011EFB3944C13C4F9AE02.roa
File: 974F9BA0A87011EFB3944C13C4F9AE02.roa (raw, json)
Hash identifier: UBVGTVi8DQjYIi/j+YuZMsK+pLOACWwJVo+1Y6lmEKk=
Subject key identifier: A6:7D:1A:36:94:32:9F:C1:F0:18:8A:69:DC:02:6A:70:03:A1:1B:0F
Certificate issuer: /CN=A918D6BF/serialNumber=4E01F4FCA76DBF9295DEC61C1B32A4EE68ADFD23
Certificate serial: 18AD
Authority key identifier: 4E:01:F4:FC:A7:6D:BF:92:95:DE:C6:1C:1B:32:A4:EE:68:AD:FD:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TgH0_Kdtv5KV3sYcGzKk7mit_SM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918D6BF/E361BA20A5A111E7B3A3127DC4F9AE02/974F9BA0A87011EFB3944C13C4F9AE02.roa
Signing time: Mon 24 Mar 2025 16:54:46 +0000
ROA not before: Mon 24 Mar 2025 16:54:46 +0000
ROA not after: Wed 30 Jul 2025 00:00:00 +0000
asID: 59256
IP address blocks: 103.39.238.0/24 maxlen: 24
103.39.239.0/24 maxlen: 24
103.39.248.0/24 maxlen: 24
2001:df6:9000::/48 maxlen: 48
2401:9cc0:200::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918D6BF/E361BA20A5A111E7B3A3127DC4F9AE02/TgH0_Kdtv5KV3sYcGzKk7mit_SM.crl
rsync://rpki.apnic.net/member_repository/A918D6BF/E361BA20A5A111E7B3A3127DC4F9AE02/TgH0_Kdtv5KV3sYcGzKk7mit_SM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TgH0_Kdtv5KV3sYcGzKk7mit_SM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 19 Apr 2025 16:27:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6317 (0x18ad)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918D6BF, serialNumber=4E01F4FCA76DBF9295DEC61C1B32A4EE68ADFD23
Validity
Not Before: Mar 24 16:54:46 2025 GMT
Not After : Jul 30 00:00:00 2025 GMT
Subject: CN=67e18e56-dea0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:6f:05:6c:9b:e1:91:5b:37:1d:74:80:5f:cc:
7a:2f:48:92:57:f6:d7:a8:ac:5c:5c:ed:b2:d5:a5:
a7:bd:9a:7a:3e:d6:2b:c4:e9:56:b9:35:93:d0:07:
b7:39:db:dc:97:9c:77:3f:39:bd:fe:72:33:c4:4d:
9d:a3:dd:79:92:ab:80:71:16:85:e1:64:4b:93:f2:
4e:e1:a9:c4:50:d8:01:a8:cf:f0:70:76:82:34:85:
2f:8b:13:4c:56:bc:4e:60:8c:a2:e5:ab:a4:e2:1a:
d5:8e:c5:52:bb:98:23:61:c2:a7:03:b3:37:9b:72:
77:1e:3c:07:cd:03:3b:a0:ea:55:51:c0:6a:d6:83:
61:80:d1:89:b0:4d:fb:b5:3f:5a:2a:1d:5b:8a:4d:
c2:ae:01:e8:f3:d8:e1:75:b3:3e:c2:92:f5:5b:44:
9f:8b:e3:83:7e:46:c8:04:c2:b7:ff:a8:2d:05:f7:
2e:51:34:e9:4b:03:09:9f:c5:91:83:4a:56:f1:64:
c3:bf:cc:bf:2b:4b:7f:e0:5f:a9:b3:11:11:00:cd:
81:54:87:77:43:66:e0:94:7f:16:38:76:24:1f:fd:
06:d6:76:88:75:d0:71:d4:8d:98:96:dc:55:76:d4:
80:10:cb:0e:77:24:54:35:c5:e1:c9:04:e5:ce:02:
a4:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:7D:1A:36:94:32:9F:C1:F0:18:8A:69:DC:02:6A:70:03:A1:1B:0F
X509v3 Authority Key Identifier:
keyid:4E:01:F4:FC:A7:6D:BF:92:95:DE:C6:1C:1B:32:A4:EE:68:AD:FD:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918D6BF/E361BA20A5A111E7B3A3127DC4F9AE02/TgH0_Kdtv5KV3sYcGzKk7mit_SM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TgH0_Kdtv5KV3sYcGzKk7mit_SM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918D6BF/E361BA20A5A111E7B3A3127DC4F9AE02/974F9BA0A87011EFB3944C13C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.39.238.0/23
103.39.248.0/24
IPv6:
2001:df6:9000::/48
2401:9cc0:200::/48
Signature Algorithm: sha256WithRSAEncryption
9f:73:12:4a:e6:f8:29:2f:73:9b:97:5e:cb:68:52:e6:08:7e:
94:0c:2b:cc:36:5d:9e:59:c6:16:9c:a8:07:f6:b0:ba:f2:76:
dc:6b:35:71:b0:cd:f3:fb:81:75:64:2b:05:d0:e8:0b:8f:85:
e0:ba:db:71:41:42:50:01:5a:e9:30:52:63:db:67:9a:c2:0b:
c0:e1:74:ac:2b:73:80:8d:c4:02:08:65:f2:64:74:bc:37:9f:
b2:6f:6f:b7:c7:ba:00:95:44:1b:a8:40:5d:52:5a:9d:06:79:
9c:a7:94:c9:0f:9c:a5:ad:bc:2a:9e:49:af:d9:01:a8:9c:bf:
aa:f9:a8:fa:35:a9:ec:7f:0a:bb:4d:e2:28:0e:3e:83:77:a3:
ee:12:5d:11:f8:2f:da:e4:8b:78:ea:95:07:e4:ed:b9:b7:c5:
d7:ef:9f:42:58:1a:29:9e:fa:57:a5:c1:f4:eb:59:a4:78:70:
45:b9:8c:c0:ac:e7:b1:38:77:15:c7:f2:dd:f0:b2:37:ad:71:
35:f7:32:45:7f:88:5c:67:ab:26:e7:3b:17:de:69:bb:95:2e:
c0:97:b1:5a:90:d1:c4:06:9c:d1:9f:13:00:05:73:ba:04:04:
50:1b:1c:b5:c2:60:dc:fe:71:8b:a2:b8:27:ae:ca:ca:80:da:
15:83:17:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 08:59:23 2025 by rpki-client