Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9196E6C/426E3DBA1D8D11E293C4DAEA08B02CD2/DD5C8412E84511EB87AD6B49C4F9AE02.roa
File: DD5C8412E84511EB87AD6B49C4F9AE02.roa (raw, json)
Hash identifier: w01HF0PHmMW2vTDKfsoG7zjIAasNEiHabBJ66OnCaSM=
Subject key identifier: E8:41:7E:65:B7:4F:51:DD:F1:42:62:67:FC:7A:36:A8:53:AC:EA:1D
Certificate issuer: /CN=A9196E6C/serialNumber=8F31602F4EBE455E099C0049BB7B0066558B9D89
Certificate serial: 348B
Authority key identifier: 8F:31:60:2F:4E:BE:45:5E:09:9C:00:49:BB:7B:00:66:55:8B:9D:89
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jzFgL06-RV4JnABJu3sAZlWLnYk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9196E6C/426E3DBA1D8D11E293C4DAEA08B02CD2/DD5C8412E84511EB87AD6B49C4F9AE02.roa
Signing time: Wed 02 Apr 2025 14:40:59 +0000
ROA not before: Wed 02 Apr 2025 14:40:59 +0000
ROA not after: Thu 28 May 2026 00:00:00 +0000
asID: 24028
IP address blocks: 43.251.136.0/22 maxlen: 22
43.251.136.0/23 maxlen: 24
43.251.139.0/24 maxlen: 24
103.21.152.0/22 maxlen: 24
182.54.192.0/19 maxlen: 23
182.54.192.0/20 maxlen: 24
182.54.208.0/21 maxlen: 24
182.54.217.0/24 maxlen: 24
182.54.218.0/23 maxlen: 24
182.54.220.0/22 maxlen: 24
202.46.112.0/20 maxlen: 24
203.142.32.0/19 maxlen: 24
2405:7c00:1000::/36 maxlen: 36
2405:7c00:2000::/36 maxlen: 36
2405:7c00:3000::/36 maxlen: 36
2405:7c00:4000::/36 maxlen: 36
2405:7c00:5000::/36 maxlen: 36
2405:7c00:6000::/36 maxlen: 36
2405:7c00:7000::/36 maxlen: 36
2405:7c00:8000::/36 maxlen: 36
2405:7c00:9000::/36 maxlen: 36
2405:7c00:b000::/36 maxlen: 36
2405:7c00:c000::/36 maxlen: 36
2405:7c00:d000::/36 maxlen: 36
2405:7c00:e000::/36 maxlen: 36
2405:7c00:f000::/36 maxlen: 36
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9196E6C/426E3DBA1D8D11E293C4DAEA08B02CD2/jzFgL06-RV4JnABJu3sAZlWLnYk.crl
rsync://rpki.apnic.net/member_repository/A9196E6C/426E3DBA1D8D11E293C4DAEA08B02CD2/jzFgL06-RV4JnABJu3sAZlWLnYk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jzFgL06-RV4JnABJu3sAZlWLnYk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 11 Apr 2025 14:37:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13451 (0x348b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9196E6C
Validity
Not Before: Apr 2 14:40:59 2025 GMT
Not After : May 28 00:00:00 2026 GMT
Subject: CN=67ed4c7b-0448
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:20:47:72:cc:4a:b4:4b:f6:12:f4:85:66:e8:
03:3e:3c:9e:ee:56:63:8e:43:f4:46:a3:85:b0:8b:
6d:a6:a9:38:2b:4b:6e:08:2c:41:23:3a:70:11:5e:
a9:5b:d2:d9:04:42:dd:6e:01:f7:d4:98:82:9c:97:
4c:c8:1a:b3:ed:56:d0:79:d6:d0:03:71:9d:92:4b:
20:de:64:80:11:7c:58:6f:fb:7b:45:0b:d0:28:ba:
95:d4:ba:e2:e9:1e:6b:11:59:d4:4a:99:ac:2f:1c:
4d:43:01:85:98:67:dc:aa:07:39:bb:bd:40:8d:ca:
59:92:46:27:ea:af:55:46:30:b8:5d:1e:9e:d3:ff:
27:74:b0:f7:08:f2:d4:a6:c5:75:d3:2a:3b:88:80:
44:d1:b2:47:77:04:d3:25:f5:f5:eb:3d:5b:15:01:
9a:8e:94:62:df:8a:22:83:b3:97:3d:eb:82:1c:ee:
62:e9:47:d3:0e:78:aa:9c:ee:bf:35:2d:ce:5d:f1:
a4:db:52:f7:09:70:1f:67:15:57:30:30:9f:7c:5b:
48:a5:f4:7f:b2:bb:02:e5:4e:ec:88:58:c8:48:6d:
21:f2:00:07:05:23:31:52:90:e6:eb:55:f3:20:ba:
7c:8b:80:64:9d:6d:29:30:e4:f8:cd:47:4a:a3:67:
03:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:41:7E:65:B7:4F:51:DD:F1:42:62:67:FC:7A:36:A8:53:AC:EA:1D
X509v3 Authority Key Identifier:
keyid:8F:31:60:2F:4E:BE:45:5E:09:9C:00:49:BB:7B:00:66:55:8B:9D:89
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9196E6C/426E3DBA1D8D11E293C4DAEA08B02CD2/jzFgL06-RV4JnABJu3sAZlWLnYk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jzFgL06-RV4JnABJu3sAZlWLnYk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9196E6C/426E3DBA1D8D11E293C4DAEA08B02CD2/DD5C8412E84511EB87AD6B49C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
43.251.136.0/22
103.21.152.0/22
182.54.192.0/19
202.46.112.0/20
203.142.32.0/19
IPv6:
2405:7c00:1000::-2405:7c00:9fff:ffff:ffff:ffff:ffff:ffff
2405:7c00:b000::-2405:7c00:ffff:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
a7:76:59:2b:29:0b:bb:38:37:28:28:c2:b8:05:dc:a0:53:82:
08:81:c4:1d:c5:f6:2a:fb:c2:9b:c1:85:3c:f6:08:21:91:c2:
10:07:59:53:c7:c2:02:0b:81:10:4b:f9:3c:6d:61:74:c6:4c:
d5:ff:55:99:40:cd:bf:0f:21:22:35:c1:b3:f8:a5:40:bd:0a:
cb:fb:43:dd:2a:0b:8e:47:c4:b8:f1:4f:4b:fe:b9:4a:47:44:
ab:6d:31:f3:36:cd:8e:af:21:40:e5:17:2d:e1:db:95:3e:11:
5c:47:c3:86:ff:eb:83:09:08:94:4b:01:53:7c:0f:99:4f:61:
31:d8:18:6e:74:35:f3:f3:c7:d6:9b:e5:fa:57:74:91:08:23:
d6:bb:7a:3b:1b:e5:9c:f3:4e:43:18:a5:35:4b:4b:65:f5:1a:
db:6a:fa:88:56:2d:35:28:63:f9:e7:a3:b8:a1:d6:4d:00:5e:
39:0c:d9:d8:df:1e:e9:e9:e8:23:df:76:ab:73:67:25:f8:36:
33:72:dd:97:6b:a6:78:2e:ff:a8:99:01:6d:96:7b:79:98:4e:
f0:f7:d4:96:8c:52:f9:ec:2e:d6:e1:14:4e:e5:b4:3e:8a:2a:
4f:a6:e1:6b:74:f2:d2:ab:8d:31:4b:d9:f4:da:25:52:33:fa:
ed:51:7d:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 19:19:32 2025 by rpki-client