Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/493C56AEDE3C11EF979E6834C4F9AE02.roa
File: 493C56AEDE3C11EF979E6834C4F9AE02.roa (raw, json)
Hash identifier: pXtjBeCFb2E2tD9QLiAvGh6jWTLZsoi1S/WFBxXS0qM=
Subject key identifier: 75:82:31:E2:05:26:7B:6E:AD:D6:DC:D3:24:C4:D1:BC:F0:12:44:64
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: A426
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/493C56AEDE3C11EF979E6834C4F9AE02.roa
Signing time: Thu 30 Jan 2025 11:53:05 +0000
ROA not before: Thu 30 Jan 2025 11:53:05 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 132768
IP address blocks: 103.16.144.0/22 maxlen: 24
103.16.196.0/24 maxlen: 24
103.18.68.0/22 maxlen: 24
103.18.120.0/22 maxlen: 24
103.18.164.0/22 maxlen: 24
103.18.242.0/24 maxlen: 24
103.25.132.0/22 maxlen: 24
103.30.80.0/22 maxlen: 24
103.107.96.0/22 maxlen: 24
103.198.10.0/23 maxlen: 24
103.241.242.0/24 maxlen: 24
103.241.243.0/24 maxlen: 24
103.246.170.0/23 maxlen: 24
103.253.148.0/22 maxlen: 24
139.5.36.0/22 maxlen: 24
150.107.92.0/22 maxlen: 24
183.87.12.0/22 maxlen: 24
2405:ec0::/32 maxlen: 32
2405:ec0::/36 maxlen: 36
2405:ec0:1000::/36 maxlen: 36
2405:ec0:2000::/36 maxlen: 36
2407:a780:1000::/36 maxlen: 36
2407:a780:1000::/48 maxlen: 48
2407:a780:1001::/48 maxlen: 48
2407:a780:1002::/48 maxlen: 48
2407:a780:1003::/48 maxlen: 48
2407:a780:1004::/48 maxlen: 48
2407:a780:1005::/48 maxlen: 48
2407:a780:1006::/48 maxlen: 48
2407:a780:1007::/48 maxlen: 48
2407:a780:1008::/48 maxlen: 48
2407:a780:1009::/48 maxlen: 48
2407:a780:100a::/48 maxlen: 48
2407:a780:100b::/48 maxlen: 48
2407:a780:100c::/48 maxlen: 48
2407:a780:100d::/48 maxlen: 48
2407:a780:100e::/48 maxlen: 48
2407:a780:100f::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 11 Apr 2025 07:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 42022 (0xa426)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2
Validity
Not Before: Jan 30 11:53:05 2025 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=679b6821-698d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:a0:37:8d:b5:4d:87:3b:96:7d:84:7e:8f:34:
f2:e3:97:9f:93:1c:66:2f:37:dd:7a:18:89:58:05:
4f:c0:8c:ed:38:cc:69:40:d6:04:7a:cd:f4:84:de:
40:c3:79:bb:7c:70:53:51:8a:da:67:4b:26:d6:f0:
64:53:71:bd:7d:1c:6b:7e:69:30:cc:9d:a5:77:6f:
67:32:d1:b9:e9:7d:1c:ae:aa:70:90:7e:11:71:26:
3e:38:d5:31:76:1d:db:87:5f:5b:f6:cd:b3:c5:d1:
84:1d:e7:0c:61:02:06:f8:5f:02:16:3b:2b:d2:f3:
24:c1:dd:68:1d:d0:2b:28:53:a6:21:7f:f7:28:79:
3d:d4:ee:08:ba:8a:d8:d8:b9:5f:69:64:35:8a:5c:
8c:fd:24:57:de:28:27:ee:44:e6:02:d8:0a:76:80:
9c:85:e0:6e:df:12:33:fd:f0:e3:16:0e:21:17:76:
75:72:85:85:cd:00:9c:11:63:0f:58:4b:d9:ad:5a:
fe:90:95:3f:5c:0a:27:4a:f1:f6:69:a6:b5:a9:5a:
06:ce:db:f7:80:68:3e:6e:db:e7:23:e7:aa:6c:ae:
3e:38:f3:bb:a1:cc:7b:09:dc:4d:b6:49:89:b0:e4:
62:31:d9:5f:9a:15:e7:33:2c:54:a4:2c:a0:c9:cf:
78:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:82:31:E2:05:26:7B:6E:AD:D6:DC:D3:24:C4:D1:BC:F0:12:44:64
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/493C56AEDE3C11EF979E6834C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.16.144.0/22
103.16.196.0/24
103.18.68.0/22
103.18.120.0/22
103.18.164.0/22
103.18.242.0/24
103.25.132.0/22
103.30.80.0/22
103.107.96.0/22
103.198.10.0/23
103.241.242.0/23
103.246.170.0/23
103.253.148.0/22
139.5.36.0/22
150.107.92.0/22
183.87.12.0/22
IPv6:
2405:ec0::/32
2407:a780:1000::/36
Signature Algorithm: sha256WithRSAEncryption
8f:8d:83:0c:63:7c:7c:be:f5:18:fc:1e:3f:82:b2:17:ed:4c:
f7:14:33:ac:97:05:3c:22:53:c4:52:b2:5c:b7:0c:e5:8f:c8:
3d:69:0f:71:cb:05:83:d3:5b:ac:38:7e:2e:8f:fc:59:bb:00:
4e:d1:d8:df:63:db:53:53:69:eb:55:30:4b:31:d3:17:3d:17:
16:ba:c9:c5:f8:3b:9e:cc:d0:aa:8b:33:5d:70:38:07:d4:ce:
27:5a:3f:5b:e3:14:f9:7d:fe:03:d1:77:2a:c5:78:81:ca:49:
79:1c:04:fd:15:e8:b4:ad:eb:c8:7a:12:03:29:20:70:a4:a4:
0d:98:36:67:f4:ad:56:b7:bd:a5:de:1c:00:ce:9f:6a:09:4a:
0a:c6:fc:13:ee:82:38:de:8e:c4:5d:5e:5b:95:8a:eb:ed:a2:
fc:a4:c4:d4:dc:fc:7b:14:44:82:e6:5e:b5:9b:49:1a:e6:bc:
4b:65:e3:41:f7:cd:f1:5d:65:e5:4d:ac:cb:35:a2:8b:4f:05:
3e:70:ce:35:88:ef:1f:82:59:2f:a3:0c:06:e8:84:51:29:44:
1e:c5:bf:02:22:b5:af:82:ac:eb:37:7a:bd:70:b0:6f:d3:b8:
cd:60:5a:2b:cb:86:de:78:40:7b:4b:f8:ac:3e:53:58:9d:d8:
5f:58:b5:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 10:56:06 2025 by rpki-client