Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/960C5D5EE35111EDB7F6B44EC4F9AE02.roa
File: 960C5D5EE35111EDB7F6B44EC4F9AE02.roa (raw, json)
Hash identifier: 6LzZ+xeZymck+SE0eQg10+DKxmmiMjQPanK9mF0WRfc=
Subject key identifier: 76:4B:12:59:A5:AB:50:79:9A:22:22:1B:F4:9B:E9:65:41:B6:EE:C2
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: ABD6
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/960C5D5EE35111EDB7F6B44EC4F9AE02.roa
Signing time: Fri 21 Mar 2025 06:57:07 +0000
ROA not before: Fri 21 Mar 2025 06:57:07 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 137655
IP address blocks: 103.121.174.0/24 maxlen: 24
103.140.2.0/24 maxlen: 24
103.141.133.0/24 maxlen: 24
103.148.43.0/24 maxlen: 24
103.152.134.0/24 maxlen: 24
103.154.105.0/24 maxlen: 24
103.164.198.0/23 maxlen: 24
103.171.193.0/24 maxlen: 24
103.176.214.0/24 maxlen: 24
103.189.182.0/23 maxlen: 24
103.214.2.0/24 maxlen: 24
163.223.136.0/24 maxlen: 24
2001:df1:a180::/48 maxlen: 48
2001:df2:8c80::/48 maxlen: 48
2001:df6:5080::/48 maxlen: 48
2001:df6:d880::/48 maxlen: 48
2001:df7:5080::/48 maxlen: 48
2401:7a0::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 11 Apr 2025 07:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 43990 (0xabd6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2
Validity
Not Before: Mar 21 06:57:07 2025 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=67dd0dc3-fd01
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:c7:d5:b6:71:03:a2:b0:5a:bd:1b:ac:d4:76:
30:44:01:dd:94:d7:73:8a:98:89:4a:c4:72:93:e9:
b5:ef:09:0d:50:ef:cb:aa:56:c0:9e:94:81:8f:5c:
08:f2:31:ff:fa:a1:22:81:8d:c7:35:5b:11:f4:d7:
fd:c5:5c:98:f7:31:eb:6b:02:38:41:16:24:95:2f:
62:57:62:6f:04:a3:19:2a:a9:72:23:40:fe:cc:b5:
04:32:2d:74:d6:33:24:b0:6a:87:93:0c:17:ab:37:
be:c3:08:ba:ec:65:da:b4:23:29:f0:fe:cb:c1:ff:
9b:bc:e0:99:3f:e9:c2:d5:c4:34:f6:a2:ed:41:43:
aa:6c:54:49:24:a3:f6:9d:0f:b7:ee:71:66:89:80:
55:b4:e1:b8:94:49:62:9c:da:c5:9f:79:09:4d:62:
2a:35:5a:a1:a8:20:45:36:f4:81:8b:16:cf:b7:89:
d3:73:36:bd:81:22:60:0d:4d:1c:81:62:d7:8a:ee:
72:e6:52:3a:9d:37:b6:34:91:22:c9:03:01:5e:8a:
62:38:9f:55:6e:ec:33:7f:71:38:24:6f:ef:da:33:
88:4a:00:41:4e:02:5b:9f:bf:49:54:74:18:1f:f8:
2a:2c:d3:8e:ad:aa:e8:36:ca:c4:b0:b7:75:7d:70:
1d:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:4B:12:59:A5:AB:50:79:9A:22:22:1B:F4:9B:E9:65:41:B6:EE:C2
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/960C5D5EE35111EDB7F6B44EC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.121.174.0/24
103.140.2.0/24
103.141.133.0/24
103.148.43.0/24
103.152.134.0/24
103.154.105.0/24
103.164.198.0/23
103.171.193.0/24
103.176.214.0/24
103.189.182.0/23
103.214.2.0/24
163.223.136.0/24
IPv6:
2001:df1:a180::/48
2001:df2:8c80::/48
2001:df6:5080::/48
2001:df6:d880::/48
2001:df7:5080::/48
2401:7a0::/32
Signature Algorithm: sha256WithRSAEncryption
74:88:c7:a1:69:f7:7b:12:a2:95:a4:44:49:6b:84:f7:64:ba:
ed:f9:15:df:d9:f4:4b:8f:ee:c4:47:fd:a2:29:92:5f:26:0e:
47:ad:bd:72:b5:04:e6:3b:1f:87:1f:d5:59:b2:b7:27:c3:e4:
c9:3d:82:66:f0:db:14:e4:71:17:a9:03:d5:1e:74:87:85:7e:
4e:65:7f:0c:ac:1a:96:73:e5:35:ed:a9:ab:15:75:85:26:ba:
fe:17:b2:24:14:11:53:79:39:9e:2d:4c:ca:b9:f7:c5:35:3f:
f9:3e:31:a4:3f:0e:61:fe:4a:92:7c:76:8f:64:85:0b:c2:43:
0f:e2:d0:d9:9d:02:27:0f:24:fa:7a:f2:6e:a5:a4:0d:4f:72:
93:bf:67:0e:3c:cc:75:10:bb:14:31:30:ee:1b:70:65:88:fa:
4d:7e:f0:7e:22:f6:2b:83:4c:25:36:53:f1:90:67:04:07:6b:
c2:8b:74:3a:d9:57:b1:1e:76:69:96:be:eb:e5:c4:da:45:5b:
d1:6a:ef:5b:3f:ae:a5:e3:b4:e6:d6:af:9a:35:5d:71:92:60:
13:c3:3c:9c:db:4f:75:56:74:f0:2b:6b:77:5f:3e:05:34:39:
8e:87:01:61:25:23:82:a5:d8:8f:c0:17:ed:93:b5:72:cd:1a:
68:8d:ef:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 10:50:31 2025 by rpki-client