Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/2B1F397E08A911F0AF0D472BC4F9AE02.roa
File: 2B1F397E08A911F0AF0D472BC4F9AE02.roa (raw, json)
Hash identifier: 2iHR97uwiYNra/naAdPQUw6P/y4aODGRXLZyYBiW7/k=
Subject key identifier: BF:6B:00:E4:61:C6:D8:39:E4:B9:6E:9D:7D:50:78:77:84:F5:E7:7F
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: AC5C
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/2B1F397E08A911F0AF0D472BC4F9AE02.roa
Signing time: Tue 25 Mar 2025 10:13:17 +0000
ROA not before: Tue 25 Mar 2025 10:13:17 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 134316
IP address blocks: 14.102.188.0/24 maxlen: 24
14.102.190.0/24 maxlen: 24
14.102.191.0/24 maxlen: 24
45.115.177.0/24 maxlen: 24
45.115.178.0/24 maxlen: 24
45.115.179.0/24 maxlen: 24
103.46.236.0/24 maxlen: 24
103.46.237.0/24 maxlen: 24
103.46.238.0/24 maxlen: 24
103.46.239.0/24 maxlen: 24
103.90.207.0/24 maxlen: 24
103.116.84.0/24 maxlen: 24
103.116.85.0/24 maxlen: 24
103.116.87.0/24 maxlen: 24
103.119.164.0/22 maxlen: 22
103.119.164.0/24 maxlen: 24
103.119.165.0/24 maxlen: 24
103.119.166.0/24 maxlen: 24
103.119.167.0/24 maxlen: 24
103.199.112.0/24 maxlen: 24
103.199.113.0/24 maxlen: 24
103.199.114.0/24 maxlen: 24
103.199.115.0/24 maxlen: 24
103.201.140.0/22 maxlen: 24
103.212.130.0/24 maxlen: 24
103.219.140.0/22 maxlen: 24
139.5.222.0/23 maxlen: 24
157.119.212.0/24 maxlen: 24
157.119.213.0/24 maxlen: 24
157.119.214.0/24 maxlen: 24
157.119.215.0/24 maxlen: 24
202.9.121.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 04 Apr 2025 15:28:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 44124 (0xac5c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2
Validity
Not Before: Mar 25 10:13:17 2025 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=67e281bd-8fec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:97:37:22:de:9f:9a:94:cb:98:59:50:f0:8d:
91:7d:04:e8:7d:30:f7:fc:06:68:e8:4d:5d:b2:06:
47:1e:1c:a6:8c:b0:f9:12:ab:b6:10:ae:d2:36:ef:
4f:41:2e:0a:f1:10:75:c1:03:04:b2:48:9f:a3:8e:
a1:5e:3f:3c:44:b2:d7:f9:c4:96:a6:3c:7a:1b:4f:
c7:1f:dd:68:8e:84:cc:70:3b:57:b9:f6:ad:22:15:
71:9d:9b:e9:62:61:d3:b9:0b:1c:fd:2f:45:82:da:
73:81:c6:6a:53:08:37:d5:b2:8d:a5:4b:fa:30:f5:
28:18:d8:57:12:91:05:99:70:69:bc:ca:75:b7:bd:
a3:ce:2f:6a:7c:40:7b:ef:06:cf:0d:8b:96:cd:89:
f2:28:79:29:bb:02:8b:35:9b:f0:b8:8c:0a:05:92:
f5:4e:d9:a8:f3:57:8e:b4:01:d4:de:6f:fe:78:a3:
3e:f5:e2:a7:48:a7:41:d1:9b:9d:15:c5:8a:d3:12:
a2:7c:d3:7f:94:c4:23:83:51:18:a6:62:af:18:0b:
4e:a3:31:e2:cf:65:ff:bb:6b:af:b0:90:9d:62:24:
6c:fa:d5:a2:6a:20:aa:07:04:e5:f1:e0:b2:7f:8f:
09:1b:f6:5c:2c:d3:d7:ac:0c:ea:75:cd:a3:a3:2b:
d1:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:6B:00:E4:61:C6:D8:39:E4:B9:6E:9D:7D:50:78:77:84:F5:E7:7F
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/2B1F397E08A911F0AF0D472BC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
14.102.188.0/24
14.102.190.0/23
45.115.177.0-45.115.179.255
103.46.236.0/22
103.90.207.0/24
103.116.84.0/23
103.116.87.0/24
103.119.164.0/22
103.199.112.0/22
103.201.140.0/22
103.212.130.0/24
103.219.140.0/22
139.5.222.0/23
157.119.212.0/22
202.9.121.0/24
Signature Algorithm: sha256WithRSAEncryption
6b:e5:53:cd:9c:a8:71:6f:cd:b4:77:9a:cc:e6:16:e9:80:60:
7a:e6:75:5e:73:3f:5f:30:79:59:47:19:14:86:ba:be:21:2d:
c9:97:38:ae:f9:fa:37:60:29:7a:35:bc:2e:85:2b:1a:d6:90:
f7:a9:50:8f:66:7c:58:d4:55:af:11:c5:d4:82:16:e9:d5:ad:
84:ba:20:d1:78:ee:c2:c8:38:88:47:6d:cc:78:39:c0:39:8b:
3f:e8:bd:51:00:63:72:b5:56:e4:0e:b1:22:a9:cc:ea:22:c0:
d0:9a:48:35:97:ad:a4:b6:b1:a4:a9:9a:f0:ee:b1:6c:3c:f4:
ad:d0:91:15:30:17:4a:cd:8a:41:42:a7:a8:2e:06:91:20:4f:
ce:26:44:a1:d7:c0:84:d3:67:35:95:f4:83:8b:aa:93:41:6a:
0d:43:75:59:6e:e1:89:9d:13:23:f7:f0:f7:62:41:34:e1:19:
5f:d3:be:ad:23:4f:48:4e:de:e4:44:02:63:b0:88:3c:09:39:
3a:6a:19:c7:27:3b:e3:30:3a:ba:f8:2a:5c:b5:a3:bd:e5:5f:
bb:5b:88:a1:a2:53:ff:51:d2:00:de:c0:43:38:4d:d2:fe:cc:
8b:05:55:c5:a2:a6:5b:89:6c:37:ce:63:78:8c:99:22:d2:fc:
d6:a6:02:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 10:52:32 2025 by rpki-client