Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A918D7A4/63ED4010198611EF89087E30C4F9AE02/8D61B05219AE11EFB41EAC2CC4F9AE02.roa
File: 8D61B05219AE11EFB41EAC2CC4F9AE02.roa (raw, json)
Hash identifier: LydTto/QF734TxXbjD+YOeOmtAZVNFAjvOAnRG1pnYY=
Subject key identifier: F6:54:1B:18:B6:68:8A:4C:44:04:8D:90:76:30:B5:A1:8E:9C:1D:9E
Certificate issuer: /CN=A918D7A4/serialNumber=A394CACBDBD8C4CDF54AF167E26D5624A524E2EE
Certificate serial: 03
Authority key identifier: A3:94:CA:CB:DB:D8:C4:CD:F5:4A:F1:67:E2:6D:56:24:A5:24:E2:EE
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o5TKy9vYxM31SvFn4m1WJKUk4u4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918D7A4/63ED4010198611EF89087E30C4F9AE02/8D61B05219AE11EFB41EAC2CC4F9AE02.roa
Signing time: Fri 24 May 2024 09:18:16 +0000
ROA not before: Fri 24 May 2024 09:18:16 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 64006
IP address blocks: 43.225.12.0/22 maxlen: 22
43.225.13.0/24 maxlen: 24
43.225.14.0/24 maxlen: 24
103.19.216.0/24 maxlen: 24
103.43.253.0/24 maxlen: 24
103.43.254.0/23 maxlen: 23
103.43.255.0/24 maxlen: 24
2401:e980::/32 maxlen: 32
2401:e980:b0::/44 maxlen: 44
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918D7A4/63ED4010198611EF89087E30C4F9AE02/o5TKy9vYxM31SvFn4m1WJKUk4u4.crl
rsync://rpki.apnic.net/member_repository/A918D7A4/63ED4010198611EF89087E30C4F9AE02/o5TKy9vYxM31SvFn4m1WJKUk4u4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o5TKy9vYxM31SvFn4m1WJKUk4u4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 16 Apr 2025 05:00:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3 (0x3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918D7A4
Validity
Not Before: May 24 09:18:16 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=66505b58-be1a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:f2:81:70:1e:b8:f5:bb:78:c5:2a:93:4b:76:
1c:7e:be:2d:7f:e8:44:e8:ea:c2:3d:8b:a1:9b:f4:
90:46:cd:d2:e7:b8:b7:62:8b:16:72:32:2e:d4:fc:
94:82:a6:8c:49:7e:88:c6:ec:23:dc:2b:02:92:57:
f6:84:37:c7:a9:7d:27:32:6e:a1:9e:20:fb:53:b9:
82:32:6b:a7:48:d3:b3:92:bc:82:b5:64:b1:9a:80:
03:f5:ef:dc:74:a5:9c:d2:8a:b4:d4:aa:13:5e:0c:
0f:7c:52:95:9d:38:52:03:49:9e:70:e7:7a:d7:f2:
9c:93:f4:a3:a9:69:4e:74:01:83:b7:98:4f:cb:0b:
c0:fc:a3:a9:1a:8f:22:b2:58:fc:50:01:fd:c0:2c:
a5:da:04:8f:b8:14:36:6a:04:36:96:1e:d9:fd:12:
0e:7d:4e:c3:9e:a4:b6:14:33:4c:08:fe:76:da:fd:
9b:8f:9b:05:2c:74:22:d7:9d:e3:64:cd:a5:51:4a:
91:f4:46:3d:48:a7:1f:64:55:5d:62:77:6a:39:19:
8f:b8:05:49:0d:43:86:0d:3c:59:44:f1:dd:c5:40:
66:00:04:6a:42:a6:a9:7b:7c:f2:d7:a1:cc:2e:1d:
e7:85:b4:98:85:37:f1:8f:db:ed:01:cd:35:4b:79:
54:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:54:1B:18:B6:68:8A:4C:44:04:8D:90:76:30:B5:A1:8E:9C:1D:9E
X509v3 Authority Key Identifier:
keyid:A3:94:CA:CB:DB:D8:C4:CD:F5:4A:F1:67:E2:6D:56:24:A5:24:E2:EE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918D7A4/63ED4010198611EF89087E30C4F9AE02/o5TKy9vYxM31SvFn4m1WJKUk4u4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o5TKy9vYxM31SvFn4m1WJKUk4u4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918D7A4/63ED4010198611EF89087E30C4F9AE02/8D61B05219AE11EFB41EAC2CC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
43.225.12.0/22
103.19.216.0/24
103.43.253.0-103.43.255.255
IPv6:
2401:e980::/32
Signature Algorithm: sha256WithRSAEncryption
08:21:b2:ad:b5:76:42:0a:d0:d2:4c:d0:25:b0:49:24:be:0f:
bf:8b:99:f5:34:2b:e9:75:c9:35:da:11:7e:6d:46:b0:e1:6f:
53:c7:3d:25:b8:72:7e:18:88:32:3e:fb:60:93:df:17:dc:b8:
73:1e:56:cb:86:ab:33:18:8d:47:70:d8:ec:09:45:74:2f:aa:
df:30:64:7a:f7:e7:9f:fe:14:aa:c1:84:b5:e4:a2:b6:93:6c:
d9:d4:c1:39:da:cd:fd:a8:fe:8e:4d:fb:6f:1c:ac:09:64:df:
aa:88:d8:64:df:7c:8e:fb:5f:50:e2:f1:9d:dd:cb:8a:03:ac:
fc:4b:ae:b9:fa:4e:95:60:30:3c:2e:71:81:bd:14:0a:89:87:
9e:f3:fa:7b:3d:00:bf:c8:73:7a:82:c9:59:7f:b5:e4:81:e6:
c4:65:2e:3c:51:6c:92:9d:30:4a:ae:b0:99:2a:ee:66:a0:9b:
24:3c:8d:1e:ac:ec:df:78:72:77:c6:9c:ea:da:19:ef:78:4e:
3c:b7:56:f0:4c:09:42:c3:09:30:37:f6:d4:fd:e5:7d:84:56:
33:5c:4c:16:24:0b:7a:74:d8:8a:3b:3a:26:6a:f6:e9:5d:03:
1a:ed:b9:e4:d1:40:fb:90:bc:52:09:4a:89:3c:e7:67:65:33:
96:8f:be:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 06:27:30 2025 by rpki-client