Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A546E/0CD41DA8B76A11EA814F5084C4F9AE02/CCBF0CF6B55911EC9256FE19C4F9AE02.roa
File: CCBF0CF6B55911EC9256FE19C4F9AE02.roa (raw, json)
Hash identifier: J9pnyjCXshJdQFSggqWmHXW0nySYEfDGHTCaX/EZOYk=
Subject key identifier: 11:FB:86:E4:72:56:06:FC:78:B7:10:49:DB:83:56:CD:29:A5:D3:08
Certificate issuer: /CN=A91A546E/serialNumber=6C5A589F924CE9BED1FD89F5AFF630C927574420
Certificate serial: 08BF
Authority key identifier: 6C:5A:58:9F:92:4C:E9:BE:D1:FD:89:F5:AF:F6:30:C9:27:57:44:20
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bFpYn5JM6b7R_Yn1r_YwySdXRCA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A546E/0CD41DA8B76A11EA814F5084C4F9AE02/CCBF0CF6B55911EC9256FE19C4F9AE02.roa
Signing time: Sun 22 Dec 2024 20:28:36 +0000
ROA not before: Sun 22 Dec 2024 20:28:36 +0000
ROA not after: Mon 02 Mar 2026 00:00:00 +0000
asID: 133934
IP address blocks: 101.234.128.0/18 maxlen: 24
111.125.160.0/20 maxlen: 24
114.111.128.0/20 maxlen: 24
114.111.144.0/20 maxlen: 24
122.100.0.0/21 maxlen: 24
122.100.8.0/21 maxlen: 24
2406:5800::/32 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A546E/0CD41DA8B76A11EA814F5084C4F9AE02/bFpYn5JM6b7R_Yn1r_YwySdXRCA.crl
rsync://rpki.apnic.net/member_repository/A91A546E/0CD41DA8B76A11EA814F5084C4F9AE02/bFpYn5JM6b7R_Yn1r_YwySdXRCA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bFpYn5JM6b7R_Yn1r_YwySdXRCA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 15 Apr 2025 20:25:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2239 (0x8bf)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A546E
Validity
Not Before: Dec 22 20:28:36 2024 GMT
Not After : Mar 2 00:00:00 2026 GMT
Subject: CN=67687674-1ca8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:2c:29:dd:5b:91:84:9c:fe:c4:91:68:69:35:
1d:22:6f:d9:b4:b4:7f:cd:4a:b0:2e:0c:5f:7a:5e:
c5:55:2f:57:fb:42:8e:a1:ef:fa:fd:ce:f5:e4:94:
a5:cb:14:88:85:ad:bb:b5:2b:81:95:e3:90:38:82:
17:a9:fb:ef:fd:ba:87:9c:30:3d:b6:96:72:7d:86:
0c:4c:34:e8:93:44:ae:f4:7e:3a:e0:06:73:e3:52:
a7:fd:f6:37:b8:e1:f1:9e:69:bc:bf:6c:89:6e:d5:
40:c0:ba:a4:1d:a0:d8:ed:b1:ff:08:7f:26:d8:ea:
f9:47:1e:6b:d9:06:e3:dc:e4:32:1b:55:8f:0b:d9:
8a:ea:6b:fe:01:ff:ea:de:d2:62:4f:14:b2:31:4f:
51:86:c4:aa:ee:3a:28:d2:bf:92:a2:c0:c4:fc:38:
88:d8:c8:a8:38:b6:b3:57:14:de:3d:12:aa:f4:44:
d0:9f:54:da:1c:5e:56:15:38:e4:e6:12:7c:4b:57:
86:2b:c5:1b:8c:1c:a2:79:51:d3:9b:31:97:3f:8c:
dd:10:37:f8:d4:f4:ba:e9:a0:88:f0:f3:f9:49:35:
7c:13:5d:89:90:49:7f:55:a0:4f:bf:be:1f:fc:57:
44:b4:52:22:48:0f:36:46:aa:3b:aa:4d:50:37:e2:
ce:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:FB:86:E4:72:56:06:FC:78:B7:10:49:DB:83:56:CD:29:A5:D3:08
X509v3 Authority Key Identifier:
keyid:6C:5A:58:9F:92:4C:E9:BE:D1:FD:89:F5:AF:F6:30:C9:27:57:44:20
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A546E/0CD41DA8B76A11EA814F5084C4F9AE02/bFpYn5JM6b7R_Yn1r_YwySdXRCA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bFpYn5JM6b7R_Yn1r_YwySdXRCA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A546E/0CD41DA8B76A11EA814F5084C4F9AE02/CCBF0CF6B55911EC9256FE19C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
101.234.128.0/18
111.125.160.0/20
114.111.128.0/19
122.100.0.0/20
IPv6:
2406:5800::/32
Signature Algorithm: sha256WithRSAEncryption
34:a8:05:82:22:03:cf:28:47:bc:87:8d:d8:9d:f4:50:86:6a:
e4:dc:57:f9:6c:fb:ad:21:41:b1:ba:f9:30:1e:79:e5:92:20:
60:67:4d:1a:98:a8:33:2a:5d:91:10:5f:da:5c:a8:4c:10:14:
57:7e:c2:57:78:35:81:5d:93:b4:72:35:f3:2d:06:22:a3:e3:
e8:4a:29:b9:01:f2:b0:fe:6b:5e:23:5d:98:6c:98:1f:c9:d3:
32:aa:f7:78:3e:17:0c:3c:bf:17:af:ee:57:e2:9b:23:6e:f0:
e8:f7:24:cc:19:7b:0a:c2:9a:bd:34:85:34:ef:31:f7:0c:50:
fc:59:0f:25:0e:62:c5:50:e7:83:98:21:2b:01:8a:9a:b5:53:
6e:e1:7a:97:ec:fd:1e:66:7d:b5:66:20:32:1b:f0:0d:bc:db:
67:fb:f1:ac:e5:72:64:d6:f5:71:fd:88:32:ba:1e:3c:0a:07:
ec:a3:ed:fa:25:c2:f3:75:65:31:11:0b:b1:6f:96:bc:89:a5:
5e:f8:25:b8:97:38:63:29:82:a1:57:24:7c:e7:2d:aa:37:bf:
6f:2f:b8:bf:e8:fa:e0:47:5f:02:b0:36:3a:8a:7b:3b:65:0d:
9f:44:15:6c:32:5c:64:15:30:9a:d2:1f:c0:46:0c:53:a7:14:
a7:f0:8d:a0
-----BEGIN CERTIFICATE-----
MIIFkjCCBHqgAwIBAgICCL8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QTU0NkUxMTAvBgNVBAUTKDZDNUE1ODlGOTI0Q0U5QkVEMUZEODlGNUFGRjYzMEM5
Mjc1NzQ0MjAwHhcNMjQxMjIyMjAyODM2WhcNMjYwMzAyMDAwMDAwWjAYMRYwFAYD
VQQDEw02NzY4NzY3NC0xY2E4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA2Swp3VuRhJz+xJFoaTUdIm/ZtLR/zUqwLgxfel7FVS9X+0KOoe/6/c715JSl
yxSIha27tSuBleOQOIIXqfvv/bqHnDA9tpZyfYYMTDTok0Su9H464AZz41Kn/fY3
uOHxnmm8v2yJbtVAwLqkHaDY7bH/CH8m2Or5Rx5r2Qbj3OQyG1WPC9mK6mv+Af/q
3tJiTxSyMU9RhsSq7joo0r+SosDE/DiI2MioOLazVxTePRKq9ETQn1TaHF5WFTjk
5hJ8S1eGK8UbjByieVHTmzGXP4zdEDf41PS66aCI8PP5STV8E12JkEl/VaBPv74f
/FdEtFIiSA82Rqo7qk1QN+LO7QIDAQABo4ICtjCCArIwHQYDVR0OBBYEFBH7huRy
Vgb8eLcQSduDVs0ppdMIMB8GA1UdIwQYMBaAFGxaWJ+STOm+0f2J9a/2MMknV0Qg
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNTQ2RS8wQ0Q0MURBOEI3
NkExMUVBODE0RjUwODRDNEY5QUUwMi9iRnBZbjVKTTZiN1JfWW4xcl9Zd3lTZFhS
Q0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2JGcFluNUpNNmI3Ul9ZbjFyX1l3eVNkWFJDQS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
QTU0NkUvMENENDFEQThCNzZBMTFFQTgxNEY1MDg0QzRGOUFFMDIvQ0NCRjBDRjZC
NTU5MTFFQzkyNTZGRTE5QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwQAYIKwYBBQUHAQcBAf8E
MTAvMB4EAgABMBgDBAZl6oADBARvfaADBAVyb4ADBAR6ZAAwDQQCAAIwBwMFACQG
WAAwDQYJKoZIhvcNAQELBQADggEBADSoBYIiA88oR7yHjdid9FCGauTcV/ls+60h
QbG6+TAeeeWSIGBnTRqYqDMqXZEQX9pcqEwQFFd+wld4NYFdk7RyNfMtBiKj4+hK
KbkB8rD+a14jXZhsmB/J0zKq93g+Fww8vxev7lfimyNu8Oj3JMwZewrCmr00hTTv
MfcMUPxZDyUOYsVQ54OYISsBipq1U27hepfs/R5mfbVmIDIb8A2822f78azlcmTW
9XH9iDK6HjwKB+yj7folwvN1ZTERC7FvlryJpV74JbiXOGMpgqFXJHznLao3v28v
uL/o+uBHXwKwNjqKeztlDZ9EFWwyXGQVMJrSH8BGDFOnFKfwjaA=
-----END CERTIFICATE-----
Generated at Fri Apr 11 06:00:54 2025 by rpki-client