Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A919D6BB/3AB0F76AFB6211E9A82B394AC4F9AE02/CA39F7F0FB6311E999847F4DC4F9AE02.roa
File: CA39F7F0FB6311E999847F4DC4F9AE02.roa (raw, json)
Hash identifier: vr09dbtEy2Fgutt0NtzNOJlZbFaSyEOb3HlcebNKKlM=
Subject key identifier: 2B:34:9F:BF:F5:45:D0:7D:39:7C:70:73:B6:86:1C:09:BF:76:F1:70
Certificate issuer: /CN=A919D6BB/serialNumber=3753728E54F09A48513DFFD2FA71804411FCDB20
Certificate serial: 0C41
Authority key identifier: 37:53:72:8E:54:F0:9A:48:51:3D:FF:D2:FA:71:80:44:11:FC:DB:20
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N1NyjlTwmkhRPf_S-nGARBH82yA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A919D6BB/3AB0F76AFB6211E9A82B394AC4F9AE02/CA39F7F0FB6311E999847F4DC4F9AE02.roa
Signing time: Sat 28 Dec 2024 18:06:40 +0000
ROA not before: Sat 28 Dec 2024 18:06:40 +0000
ROA not after: Sat 31 Jan 2026 00:00:00 +0000
asID: 45891
IP address blocks: 103.2.88.0/22 maxlen: 22
103.2.88.0/23 maxlen: 23
103.2.90.0/24 maxlen: 24
103.2.91.0/24 maxlen: 24
202.1.160.0/19 maxlen: 19
202.1.160.0/20 maxlen: 20
202.1.160.0/24 maxlen: 24
202.1.161.0/24 maxlen: 24
202.1.162.0/24 maxlen: 24
202.1.163.0/24 maxlen: 24
202.1.164.0/24 maxlen: 24
202.1.165.0/24 maxlen: 24
202.1.166.0/24 maxlen: 24
202.1.167.0/24 maxlen: 24
202.1.168.0/24 maxlen: 24
202.1.169.0/24 maxlen: 24
202.1.170.0/24 maxlen: 24
202.1.172.0/24 maxlen: 24
202.1.173.0/24 maxlen: 24
202.1.174.0/24 maxlen: 24
202.1.175.0/24 maxlen: 24
202.1.176.0/20 maxlen: 20
202.1.176.0/23 maxlen: 23
202.1.176.0/24 maxlen: 24
202.1.177.0/24 maxlen: 24
202.1.178.0/24 maxlen: 24
202.1.180.0/24 maxlen: 24
202.1.181.0/24 maxlen: 24
202.1.182.0/24 maxlen: 24
202.1.183.0/24 maxlen: 24
202.1.184.0/24 maxlen: 24
202.1.185.0/24 maxlen: 24
202.1.186.0/24 maxlen: 24
202.1.187.0/24 maxlen: 24
202.1.188.0/24 maxlen: 24
202.1.189.0/24 maxlen: 24
202.1.190.0/24 maxlen: 24
202.1.191.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A919D6BB/3AB0F76AFB6211E9A82B394AC4F9AE02/N1NyjlTwmkhRPf_S-nGARBH82yA.crl
rsync://rpki.apnic.net/member_repository/A919D6BB/3AB0F76AFB6211E9A82B394AC4F9AE02/N1NyjlTwmkhRPf_S-nGARBH82yA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N1NyjlTwmkhRPf_S-nGARBH82yA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 27 Apr 2025 18:08:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3137 (0xc41)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A919D6BB, serialNumber=3753728E54F09A48513DFFD2FA71804411FCDB20
Validity
Not Before: Dec 28 18:06:40 2024 GMT
Not After : Jan 31 00:00:00 2026 GMT
Subject: CN=67703e30-48ed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:86:3f:3a:98:7d:67:b7:2a:7a:e3:2c:ee:28:
ef:9a:b5:52:86:63:9d:26:94:2b:8f:7d:6d:c9:65:
8e:7f:e0:20:b8:b7:b2:a6:c3:7a:6b:ef:8e:a0:54:
53:a2:e8:75:8f:28:ed:e6:5e:4b:85:c3:66:73:0b:
78:1a:af:02:d8:f2:b2:cd:4c:e9:ff:f7:60:9d:39:
7d:b7:71:c5:59:8e:fa:df:01:91:79:eb:bb:38:cd:
04:17:b3:bc:14:b4:55:32:20:c5:0c:34:38:87:5e:
ec:fd:79:c7:e3:f0:47:4d:b3:6a:34:64:29:84:97:
45:d4:c0:c7:95:25:97:6e:13:47:50:cc:8e:6b:a5:
64:c9:ac:f2:9d:a7:78:89:b4:83:ad:e2:77:6f:e9:
e2:7f:03:bd:82:4c:9a:21:c6:ae:4a:51:aa:2b:31:
9c:f4:35:62:6f:f1:44:95:bc:3b:81:04:66:55:5c:
b6:b2:56:fb:97:fb:40:34:69:a3:e9:c1:4a:43:35:
8c:61:1c:ee:3e:7d:65:58:a6:ab:c4:30:f7:ca:18:
f2:82:b9:0d:07:45:78:37:40:fc:48:62:fc:9c:49:
d1:3d:63:58:63:a5:f6:41:87:ba:17:3f:63:e0:55:
0f:cd:cc:50:04:63:aa:b9:83:b5:28:16:1d:18:28:
53:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:34:9F:BF:F5:45:D0:7D:39:7C:70:73:B6:86:1C:09:BF:76:F1:70
X509v3 Authority Key Identifier:
keyid:37:53:72:8E:54:F0:9A:48:51:3D:FF:D2:FA:71:80:44:11:FC:DB:20
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A919D6BB/3AB0F76AFB6211E9A82B394AC4F9AE02/N1NyjlTwmkhRPf_S-nGARBH82yA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N1NyjlTwmkhRPf_S-nGARBH82yA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919D6BB/3AB0F76AFB6211E9A82B394AC4F9AE02/CA39F7F0FB6311E999847F4DC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.2.88.0/22
202.1.160.0/19
Signature Algorithm: sha256WithRSAEncryption
93:de:d0:e5:33:c1:90:65:22:e0:6f:f9:fe:16:fe:e4:bc:b1:
fa:42:7d:39:bb:d2:04:c8:15:f6:19:23:22:0f:a3:48:66:02:
f8:b8:8c:98:da:5e:64:c7:68:1b:f2:28:a6:fb:ab:60:85:0c:
42:70:6c:85:f7:dc:cc:6b:27:32:d1:28:c2:2c:bc:42:9f:21:
c6:83:e7:b8:e0:f1:a7:47:28:86:c8:2b:a2:9a:ea:f4:d5:b1:
0c:18:ba:9e:20:ca:80:07:e1:23:d7:02:0d:f4:f7:41:d4:43:
29:51:f8:cb:11:26:d2:31:28:a2:cb:26:4c:da:e1:f2:2a:33:
a7:8f:b7:f0:06:99:76:39:62:66:34:f6:d9:31:74:0e:6b:6d:
e3:68:a5:39:6e:16:72:c4:2d:5f:c8:fe:f2:c4:26:c4:93:77:
c6:71:27:fd:82:12:51:54:bc:a8:d1:f0:8a:cb:4d:75:b7:53:
8e:00:01:a3:5a:29:9d:14:4c:61:f4:bf:41:8f:70:15:ff:4d:
21:fc:95:61:d3:87:64:71:0e:cf:3d:97:04:c1:39:61:93:f6:
36:19:d0:ad:53:e5:07:4c:78:c6:dd:66:da:50:0c:86:bf:a8:
93:44:f4:a0:6e:c9:38:53:bf:0d:71:ef:ca:9d:7f:be:a2:25:
ab:7e:b2:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 06:13:16 2025 by rpki-client