Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A918F1C9/6A57AB8C7F9511EAB0ED8537C4F9AE02/93E4B52CE43E11EF91571D16C4F9AE02.roa
File: 93E4B52CE43E11EF91571D16C4F9AE02.roa (raw, json)
Hash identifier: qbK0SRsjZmgPEhHCvpQ8WHXr9ovPv+iMo1ylb0vxYmI=
Subject key identifier: 7D:BB:B2:44:D3:49:9A:56:00:AE:E0:D3:64:51:2F:90:E4:E4:FD:78
Certificate issuer: /CN=A918F1C9/serialNumber=DE4CE960A3930AB4C227FCE8F857C084197F08D0
Certificate serial: 02
Authority key identifier: DE:4C:E9:60:A3:93:0A:B4:C2:27:FC:E8:F8:57:C0:84:19:7F:08:D0
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3kzpYKOTCrTCJ_zo-FfAhBl_CNA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918F1C9/6A57AB8C7F9511EAB0ED8537C4F9AE02/93E4B52CE43E11EF91571D16C4F9AE02.roa
Signing time: Thu 06 Feb 2025 03:58:10 +0000
ROA not before: Thu 06 Feb 2025 03:58:10 +0000
ROA not after: Mon 01 Dec 2025 00:00:00 +0000
asID: 138167
IP address blocks: 103.121.224.0/24 maxlen: 24
103.121.225.0/24 maxlen: 24
103.121.226.0/24 maxlen: 24
103.121.227.0/24 maxlen: 24
2403:72c0:a100::/40 maxlen: 40
2403:72c0:a200::/40 maxlen: 40
2403:72c0:a300::/40 maxlen: 40
2403:72c0:a400::/40 maxlen: 40
2403:72c0:a500::/40 maxlen: 40
2403:72c0:a600::/40 maxlen: 40
2403:72c0:a700::/40 maxlen: 40
2403:72c0:a800::/40 maxlen: 40
2403:72c0:a900::/40 maxlen: 40
2403:72c0:aa00::/40 maxlen: 40
2403:72c0:ab00::/40 maxlen: 40
2403:72c0:ac00::/40 maxlen: 40
2403:72c0:ad00::/40 maxlen: 40
2403:72c0:ae00::/40 maxlen: 40
2403:72c0:af00::/40 maxlen: 40
2403:72c0:b100::/40 maxlen: 40
2403:72c0:b200::/40 maxlen: 40
2403:72c0:b300::/40 maxlen: 40
2403:72c0:b400::/40 maxlen: 40
2403:72c0:b500::/40 maxlen: 40
2403:72c0:b600::/40 maxlen: 40
2403:72c0:b700::/40 maxlen: 40
2403:72c0:b800::/40 maxlen: 40
2403:72c0:b900::/40 maxlen: 40
2403:72c0:ba00::/40 maxlen: 40
2403:72c0:bb00::/40 maxlen: 40
2403:72c0:bc00::/40 maxlen: 40
2403:72c0:bd00::/40 maxlen: 40
2403:72c0:be00::/40 maxlen: 40
2403:72c0:bf00::/40 maxlen: 40
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918F1C9/6A57AB8C7F9511EAB0ED8537C4F9AE02/3kzpYKOTCrTCJ_zo-FfAhBl_CNA.crl
rsync://rpki.apnic.net/member_repository/A918F1C9/6A57AB8C7F9511EAB0ED8537C4F9AE02/3kzpYKOTCrTCJ_zo-FfAhBl_CNA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3kzpYKOTCrTCJ_zo-FfAhBl_CNA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 15 Apr 2025 19:51:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2 (0x2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918F1C9
Validity
Not Before: Feb 6 03:58:10 2025 GMT
Not After : Dec 1 00:00:00 2025 GMT
Subject: CN=67a43351-a87f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:30:3c:18:17:9d:aa:31:c8:86:56:2d:46:4d:
1b:e8:f7:70:9b:36:5b:e5:39:71:7b:69:79:46:bb:
a5:79:49:69:e1:78:05:49:a5:30:2e:6c:e1:97:ef:
c1:a3:c4:50:39:71:f5:19:af:7a:12:e0:f0:3f:ba:
5b:8f:23:84:cc:82:35:ae:6d:64:65:23:bc:e9:c8:
36:97:94:de:55:d2:99:03:63:32:47:cd:00:ac:33:
bc:86:19:2c:9e:69:9b:aa:bc:79:16:ba:4c:f8:ea:
a0:d6:99:44:c7:88:cb:34:50:b7:47:ed:30:15:fa:
61:dd:34:30:14:f7:e8:43:c9:6b:56:46:45:46:01:
a3:8a:1f:65:d0:8f:79:ff:84:f4:92:37:0f:84:c4:
83:d3:06:4e:fd:20:33:39:5c:1e:07:60:4e:39:7e:
8b:dc:4c:56:20:c3:e9:17:58:95:3e:e0:b3:82:f0:
5b:44:f2:5c:20:97:d5:5e:d1:c4:6c:f7:f9:f4:fd:
3f:c0:b8:33:e9:ff:0b:6e:63:0a:c5:15:f9:8e:0a:
0e:72:9d:6f:cf:25:50:db:19:98:82:40:19:3a:38:
35:07:47:0a:32:7f:c4:78:b3:05:54:49:1c:78:98:
c1:6c:14:6d:94:28:61:9a:22:d1:27:d6:10:fe:22:
cc:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:BB:B2:44:D3:49:9A:56:00:AE:E0:D3:64:51:2F:90:E4:E4:FD:78
X509v3 Authority Key Identifier:
keyid:DE:4C:E9:60:A3:93:0A:B4:C2:27:FC:E8:F8:57:C0:84:19:7F:08:D0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918F1C9/6A57AB8C7F9511EAB0ED8537C4F9AE02/3kzpYKOTCrTCJ_zo-FfAhBl_CNA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3kzpYKOTCrTCJ_zo-FfAhBl_CNA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918F1C9/6A57AB8C7F9511EAB0ED8537C4F9AE02/93E4B52CE43E11EF91571D16C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.121.224.0/22
IPv6:
2403:72c0:a100::-2403:72c0:afff:ffff:ffff:ffff:ffff:ffff
2403:72c0:b100::-2403:72c0:bfff:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
a8:5a:ee:16:fe:f3:e2:28:7c:60:0d:cc:80:69:44:88:e3:0b:
83:f6:af:c6:11:04:9a:f1:a4:e2:24:13:a5:74:0e:e1:5a:ec:
af:b9:aa:ac:78:52:fc:7c:a5:81:67:b2:35:21:54:8e:22:4d:
ab:3d:f0:0a:32:3c:1b:87:0a:fd:16:ed:c2:8b:0a:f6:61:4d:
bb:03:e7:4a:2c:f4:56:a7:4f:4a:59:9c:5d:58:16:3c:04:45:
40:da:be:1c:01:ea:a6:b7:c6:d8:a9:43:fc:56:9d:c1:68:85:
bc:b1:88:14:61:b6:29:f9:e3:1e:6f:5d:cd:67:be:61:45:aa:
0a:c9:e0:77:d5:90:8b:0e:fa:47:6d:f8:8b:36:5d:b0:b5:31:
0a:fb:95:c6:5b:e5:af:b0:15:1d:79:43:ae:70:6f:91:ee:49:
32:6b:1a:24:a3:e6:62:30:a8:11:6d:c9:13:04:a9:8c:82:3a:
d5:d9:34:c0:2b:d1:7a:17:34:9e:3e:94:be:15:48:93:3c:8d:
54:06:0e:5d:6f:33:6d:c3:6e:70:aa:f0:9d:cc:ea:d5:4b:80:
a4:49:ee:3f:20:d9:81:63:e8:ba:61:b3:e5:80:11:2c:a4:3e:
69:70:01:ec:6d:ed:08:ad:c5:05:19:93:0a:eb:0a:82:bd:b5:
01:70:37:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 20:46:54 2025 by rpki-client