Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/B1C8D8F8173911EEBCA2DD3EC4F9AE02.roa
File: B1C8D8F8173911EEBCA2DD3EC4F9AE02.roa (raw, json)
Hash identifier: mebOXnUy3hugtElwCL6aNhS9pBD2rO43sGpr6ILP5bY=
Subject key identifier: 9B:47:8D:25:FE:C4:02:A5:40:B2:7A:23:E4:B6:6A:2A:77:07:33:3D
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: 8C49
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/B1C8D8F8173911EEBCA2DD3EC4F9AE02.roa
Signing time: Thu 30 May 2024 16:10:40 +0000
ROA not before: Thu 30 May 2024 16:10:40 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 138760
IP address blocks: 103.139.66.0/23 maxlen: 24
103.164.26.0/24 maxlen: 24
103.164.27.0/24 maxlen: 24
2001:df1:a780::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 16 Apr 2025 22:26:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 35913 (0x8c49)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2
Validity
Not Before: May 30 16:10:40 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6658a500-17bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:e1:84:17:21:46:fd:c3:d6:b0:02:e0:90:dd:
99:a3:2b:27:15:17:d8:ba:1e:69:69:70:18:9e:9d:
b8:5b:22:02:ef:da:fc:04:53:0f:79:a6:0a:16:25:
14:a9:cd:4d:af:0b:06:8b:57:ed:f2:1b:d8:30:72:
76:73:fc:45:0c:a4:ee:40:90:84:e7:00:43:5a:b3:
84:aa:e3:d6:a4:8b:08:a1:e4:3c:c4:67:cc:56:34:
86:79:89:93:22:93:1f:cb:90:1f:a1:20:aa:9c:88:
e6:e7:7b:14:84:1d:a9:47:b0:a4:36:40:dc:a5:81:
94:e2:5e:ed:13:d7:d4:e6:4a:8d:71:71:03:99:07:
20:47:a4:ea:02:b5:f8:4d:72:b8:ad:04:6c:0a:6c:
25:b0:f2:38:60:0a:93:78:60:45:3c:25:42:95:31:
bd:19:b1:c6:ca:79:c6:8c:b2:24:cb:d1:fc:d5:2e:
b0:20:6d:91:cf:62:0c:5b:ae:1e:fc:99:a5:8a:ac:
86:f3:9e:8b:dc:73:84:fe:4c:71:f3:57:82:55:61:
35:05:54:8e:b9:f5:9e:eb:9f:7b:cf:26:23:fb:d2:
af:9d:40:c3:f3:3d:94:69:0a:c0:91:db:00:d8:a4:
9c:f1:b2:c8:50:9f:35:ae:4f:5e:35:99:3c:bb:6a:
9e:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:47:8D:25:FE:C4:02:A5:40:B2:7A:23:E4:B6:6A:2A:77:07:33:3D
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/B1C8D8F8173911EEBCA2DD3EC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.139.66.0/23
103.164.26.0/23
IPv6:
2001:df1:a780::/48
Signature Algorithm: sha256WithRSAEncryption
b3:db:9a:a4:ca:3d:05:41:0e:e6:be:5a:9e:40:c3:1b:0d:d1:
15:da:8d:5b:e9:5b:51:5b:3d:8d:51:c1:f2:1b:98:76:b1:c8:
5e:73:c1:86:d5:60:b8:e0:f1:4f:4e:c6:8a:e2:26:24:68:4b:
06:bb:72:9a:78:31:fa:b0:5a:1f:0c:84:0c:5d:a5:9f:77:ad:
0a:7f:90:18:92:54:67:e3:de:42:75:7a:0f:81:77:99:d8:e5:
62:8d:ac:76:f9:20:a1:b2:12:1d:1d:8d:8e:f8:da:4b:07:f4:
be:ca:36:d9:43:04:d7:a5:40:e8:09:b6:7f:4c:3e:37:a9:77:
ec:7a:6c:75:de:35:dc:67:0c:ba:6e:d6:0b:b3:fb:30:c8:60:
ac:75:1c:95:01:cc:d6:c8:ee:32:df:89:7b:bf:4f:70:e1:d6:
32:3d:0d:1d:2f:08:bd:b9:31:29:87:83:46:9d:93:40:db:7f:
fd:66:68:63:3b:58:bf:97:d0:aa:ae:d9:ab:9e:28:80:1c:22:
a7:eb:af:ca:e6:32:e7:30:9c:1f:b5:63:35:af:6f:56:73:c6:
4a:b3:cd:11:4c:a6:7e:18:01:b3:12:b0:8d:17:7a:89:92:27:
0c:e3:00:d4:7d:d5:f9:e2:31:93:23:67:51:f6:56:dd:49:65:
75:08:26:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 20:51:44 2025 by rpki-client