Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91911EB/EDA972B269A211EFAE3AB35AC4F9AE02/9C594FD469A911EFBF66800FC4F9AE02.roa
File: 9C594FD469A911EFBF66800FC4F9AE02.roa (raw, json)
Hash identifier: LB+IcduN6puMn/RBrX77+95EeodFJyL3pQbIzRhkuAc=
Subject key identifier: B8:D6:0B:77:B2:98:6F:82:C0:F8:5A:BB:BF:CF:77:C1:61:2F:87:D0
Certificate issuer: /CN=A91911EB/serialNumber=BE3F813B202FFB0A382F737968EE166598E0E8AB
Certificate serial: 82
Authority key identifier: BE:3F:81:3B:20:2F:FB:0A:38:2F:73:79:68:EE:16:65:98:E0:E8:AB
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vj-BOyAv-wo4L3N5aO4WZZjg6Ks.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91911EB/EDA972B269A211EFAE3AB35AC4F9AE02/9C594FD469A911EFBF66800FC4F9AE02.roa
Signing time: Tue 25 Mar 2025 06:13:09 +0000
ROA not before: Tue 25 Mar 2025 06:13:09 +0000
ROA not after: Thu 28 May 2026 00:00:00 +0000
asID: 137546
IP address blocks: 203.158.118.0/24 maxlen: 24
203.158.244.0/22 maxlen: 22
203.158.244.0/24 maxlen: 24
203.158.245.0/24 maxlen: 24
203.158.246.0/23 maxlen: 23
203.158.246.0/24 maxlen: 24
203.158.247.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91911EB/EDA972B269A211EFAE3AB35AC4F9AE02/vj-BOyAv-wo4L3N5aO4WZZjg6Ks.crl
rsync://rpki.apnic.net/member_repository/A91911EB/EDA972B269A211EFAE3AB35AC4F9AE02/vj-BOyAv-wo4L3N5aO4WZZjg6Ks.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vj-BOyAv-wo4L3N5aO4WZZjg6Ks.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 16 Apr 2025 05:40:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 130 (0x82)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91911EB
Validity
Not Before: Mar 25 06:13:09 2025 GMT
Not After : May 28 00:00:00 2026 GMT
Subject: CN=67e24975-4760
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:7c:b5:44:43:aa:58:7d:ef:0a:58:11:a1:33:
7b:2d:e5:f0:3e:ed:02:8d:a8:03:e4:15:20:cb:96:
6e:5e:a0:7f:f4:6c:8d:bf:f3:44:19:03:00:80:a6:
6e:4c:28:cc:70:d5:34:70:8d:72:27:81:6e:f3:7d:
c3:b9:b2:1f:a6:30:53:e4:d0:87:06:ea:c2:0a:f3:
aa:e1:5c:3e:cd:b4:35:69:7b:e2:6c:ff:5f:62:1c:
71:7b:43:fb:81:c3:b9:65:49:6c:f5:47:01:62:69:
c3:80:4d:d6:6a:f9:69:06:31:97:66:ce:0c:f7:03:
f6:ba:ee:a6:cb:79:09:ad:be:e4:56:6e:f0:32:23:
6a:8a:f9:64:f8:93:c3:46:bd:83:20:c5:8e:5d:70:
08:5f:34:f0:8a:76:d6:4d:a5:3a:e7:7a:65:dc:89:
d1:a0:f0:c7:cf:69:a5:9e:c6:65:55:d6:43:b9:99:
39:d9:96:a8:94:70:8e:fd:bb:af:dd:15:5a:e9:18:
e8:d7:e8:96:f4:5a:92:03:33:8a:70:32:cd:f6:c6:
a9:bf:fc:18:77:0e:12:51:df:63:0b:a9:10:35:a4:
2f:b8:63:5b:e6:56:49:d4:a5:b7:74:d2:a7:b7:46:
7f:b9:7b:3b:fd:38:b8:87:09:31:42:d4:22:a2:22:
5d:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:D6:0B:77:B2:98:6F:82:C0:F8:5A:BB:BF:CF:77:C1:61:2F:87:D0
X509v3 Authority Key Identifier:
keyid:BE:3F:81:3B:20:2F:FB:0A:38:2F:73:79:68:EE:16:65:98:E0:E8:AB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91911EB/EDA972B269A211EFAE3AB35AC4F9AE02/vj-BOyAv-wo4L3N5aO4WZZjg6Ks.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vj-BOyAv-wo4L3N5aO4WZZjg6Ks.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91911EB/EDA972B269A211EFAE3AB35AC4F9AE02/9C594FD469A911EFBF66800FC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
203.158.118.0/24
203.158.244.0/22
Signature Algorithm: sha256WithRSAEncryption
53:a3:ce:68:58:89:8b:e0:69:bb:79:6a:4e:20:57:92:1b:3c:
19:66:bb:58:7c:eb:69:b5:58:21:a1:b0:4e:b4:b3:2e:03:35:
72:6b:34:34:6c:1e:7a:d3:7b:90:0c:0e:82:53:c2:3a:26:c4:
0c:9b:49:31:d6:6b:f7:7e:96:7f:e0:37:1d:9a:8f:bc:25:02:
78:0f:7e:d4:aa:d2:6c:25:73:18:46:c5:30:5d:17:4e:15:82:
3c:44:92:ef:e2:85:14:f3:92:88:0b:19:a1:24:d8:48:6a:f7:
1c:34:50:f9:74:74:3c:3d:c0:06:25:11:75:51:59:4f:2c:e8:
71:cb:28:0e:81:26:87:25:f9:73:8a:e9:37:04:41:32:b7:7e:
b9:c3:7a:23:b4:95:e1:37:16:05:06:dd:0e:9b:50:d8:d9:18:
8a:53:4e:fd:e8:3f:48:5f:8f:33:13:a7:e2:10:06:db:2f:92:
54:b0:bf:35:7c:b7:c4:46:53:1e:76:d1:91:87:ed:f1:8a:5c:
79:d0:35:19:21:d3:d3:f5:05:2d:35:20:ed:db:e5:43:50:55:
ce:61:43:aa:bb:4d:b6:aa:1a:9f:78:83:61:52:a6:a8:80:3d:
2c:9b:29:c3:4a:89:02:06:f2:df:13:df:74:6f:f7:9d:a9:4a:
cc:e2:f6:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 17:19:25 2025 by rpki-client