Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/2946FAF4F8E811EF8461DE51C4F9AE02.roa
File: 2946FAF4F8E811EF8461DE51C4F9AE02.roa (raw, json)
Hash identifier: vjCP7G9GIETTP7WGj10JivfjZoKoOR4BijxGDbJJgQw=
Subject key identifier: 7F:3B:B7:F2:92:16:84:9F:C2:D6:6B:F8:9A:AE:AF:A4:36:AF:2A:6E
Certificate issuer: /CN=A91A560A/serialNumber=167C3B221775FEC05039468150CE814756AC6F0A
Certificate serial: 49F5
Authority key identifier: 16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/2946FAF4F8E811EF8461DE51C4F9AE02.roa
Signing time: Tue 04 Mar 2025 11:02:28 +0000
ROA not before: Tue 04 Mar 2025 11:02:28 +0000
ROA not after: Fri 31 Oct 2025 00:00:00 +0000
asID: 135967
IP address blocks: 42.96.4.0/23 maxlen: 23
42.96.12.0/22 maxlen: 22
45.124.84.0/24 maxlen: 24
103.3.244.0/22 maxlen: 22
103.3.244.0/24 maxlen: 24
103.3.245.0/24 maxlen: 24
103.3.246.0/24 maxlen: 24
103.3.247.0/24 maxlen: 24
103.74.120.0/23 maxlen: 23
103.74.122.0/23 maxlen: 23
103.121.88.0/23 maxlen: 23
103.121.90.0/23 maxlen: 23
103.147.126.0/23 maxlen: 23
103.161.16.0/23 maxlen: 23
103.161.170.0/23 maxlen: 24
103.162.30.0/23 maxlen: 23
103.163.216.0/23 maxlen: 23
103.176.22.0/23 maxlen: 23
103.176.250.0/23 maxlen: 23
103.180.138.0/23 maxlen: 23
103.187.168.0/23 maxlen: 23
103.188.242.0/23 maxlen: 23
2001:df4:2540::/48 maxlen: 48
2403:6a40::/48 maxlen: 48
2403:6a40:2::/48 maxlen: 48
2403:6a40:1000::/36 maxlen: 36
2403:6a40:2000::/36 maxlen: 36
2403:6a40:3000::/36 maxlen: 36
2403:6a40:4000::/36 maxlen: 36
2403:6a40:5000::/36 maxlen: 36
2403:6a40:e000::/36 maxlen: 36
2403:6a40:f000::/36 maxlen: 36
2407:2ec0::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl
rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 19 Apr 2025 14:32:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 18933 (0x49f5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A560A, serialNumber=167C3B221775FEC05039468150CE814756AC6F0A
Validity
Not Before: Mar 4 11:02:28 2025 GMT
Not After : Oct 31 00:00:00 2025 GMT
Subject: CN=67c6ddc4-4632
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:21:e3:9f:dd:a8:9e:a8:3a:f7:42:d1:55:02:
fc:11:7e:b1:b0:a9:51:6b:33:dc:ff:ac:f9:ee:94:
de:20:91:b8:3e:53:89:cc:9e:25:b2:7e:79:d2:ea:
e9:00:61:64:c0:bc:34:b4:aa:de:2e:f7:6e:de:34:
92:ae:83:bd:b3:35:90:5a:e3:b8:2f:67:75:90:71:
53:5b:d8:67:f3:f0:14:37:0d:56:47:e8:9a:57:44:
0c:a0:34:ac:17:7e:49:50:99:16:3b:39:97:ef:3c:
ce:17:0c:a2:e6:ef:8f:b9:76:58:d9:80:7e:9e:a6:
e1:8a:1f:a7:f5:33:53:9b:96:58:b4:f9:db:29:35:
8f:aa:10:21:96:94:5e:d6:03:c6:0d:b0:88:c1:64:
9c:af:5a:5c:4d:3c:ab:15:60:ba:ff:b4:91:dd:46:
0d:3c:df:31:ef:49:1b:80:d4:86:0a:2f:d1:1f:84:
59:a7:f4:64:c9:66:bf:3f:59:b3:05:79:d9:2c:47:
04:75:19:d5:f1:f5:35:9f:fd:78:e6:23:13:aa:18:
1a:53:f7:29:d1:93:a1:7b:d7:10:47:bf:e2:a0:e5:
b8:bb:73:84:a1:44:9e:c7:26:aa:9c:07:fe:bd:10:
4d:a5:f3:52:c4:2e:1e:4b:ac:1b:13:06:69:7e:82:
bb:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:3B:B7:F2:92:16:84:9F:C2:D6:6B:F8:9A:AE:AF:A4:36:AF:2A:6E
X509v3 Authority Key Identifier:
keyid:16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/2946FAF4F8E811EF8461DE51C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
42.96.4.0/23
42.96.12.0/22
45.124.84.0/24
103.3.244.0/22
103.74.120.0/22
103.121.88.0/22
103.147.126.0/23
103.161.16.0/23
103.161.170.0/23
103.162.30.0/23
103.163.216.0/23
103.176.22.0/23
103.176.250.0/23
103.180.138.0/23
103.187.168.0/23
103.188.242.0/23
IPv6:
2001:df4:2540::/48
2403:6a40::/48
2403:6a40:2::/48
2403:6a40:1000::-2403:6a40:5fff:ffff:ffff:ffff:ffff:ffff
2403:6a40:e000::/35
2407:2ec0::/48
Signature Algorithm: sha256WithRSAEncryption
52:d1:04:86:ca:f8:ef:72:20:78:42:ef:40:90:fc:b1:f8:be:
eb:58:ce:5d:46:3a:04:52:13:03:c1:27:6a:a1:b8:34:5a:f4:
8a:ee:02:3a:97:03:4e:4e:80:65:49:2f:16:8f:56:b9:71:c1:
36:34:be:c9:14:48:31:12:44:1d:f2:c0:4e:9e:a9:0e:51:e5:
e0:10:4f:2e:be:5d:0e:00:0a:ed:9d:99:95:52:6d:c3:87:50:
ef:b9:72:66:b3:76:2e:ff:4c:ce:07:df:53:6b:89:a5:d6:52:
da:0a:47:8d:78:9d:92:e7:4a:c7:6f:2f:9d:86:cc:56:46:1e:
52:10:bb:73:9e:ab:43:79:d8:d5:78:b7:b1:b8:a8:ef:c8:67:
44:2e:22:92:0f:df:70:e1:9f:5e:f7:1f:db:7b:47:21:18:dc:
a1:e3:49:3d:16:30:0c:4f:a7:f2:35:e4:f0:98:82:52:89:04:
b1:ae:30:e7:e0:fd:47:c9:96:62:07:ea:67:c9:14:7a:4c:a8:
08:02:94:64:3f:9d:44:03:d2:4a:2e:49:ce:c2:f0:e7:42:94:
33:ab:83:f2:7d:81:27:cc:c5:ae:39:81:11:db:f8:3b:da:02:
59:29:97:ed:cb:84:04:65:a8:f6:12:36:f2:98:b3:7a:33:bc:
ef:ce:00:55
-----BEGIN CERTIFICATE-----
MIIGFDCCBPygAwIBAgICSfUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QTU2MEExMTAvBgNVBAUTKDE2N0MzQjIyMTc3NUZFQzA1MDM5NDY4MTUwQ0U4MTQ3
NTZBQzZGMEEwHhcNMjUwMzA0MTEwMjI4WhcNMjUxMDMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02N2M2ZGRjNC00NjMyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAxCHjn92onqg690LRVQL8EX6xsKlRazPc/6z57pTeIJG4PlOJzJ4lsn550urp
AGFkwLw0tKreLvdu3jSSroO9szWQWuO4L2d1kHFTW9hn8/AUNw1WR+iaV0QMoDSs
F35JUJkWOzmX7zzOFwyi5u+PuXZY2YB+nqbhih+n9TNTm5ZYtPnbKTWPqhAhlpRe
1gPGDbCIwWScr1pcTTyrFWC6/7SR3UYNPN8x70kbgNSGCi/RH4RZp/RkyWa/P1mz
BXnZLEcEdRnV8fU1n/145iMTqhgaU/cp0ZOhe9cQR7/ioOW4u3OEoUSexyaqnAf+
vRBNpfNSxC4eS6wbEwZpfoK79wIDAQABo4IDODCCAzQwHQYDVR0OBBYEFH87t/KS
FoSfwtZr+Jqur6Q2rypuMB8GA1UdIwQYMBaAFBZ8OyIXdf7AUDlGgVDOgUdWrG8K
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNTYwQS9BQUVCMTkxQTFE
OEExMUUyQTM4N0QwRTQwOEIwMkNEMi9Gbnc3SWhkMV9zQlFPVWFCVU02QlIxYXNi
d28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0ZudzdJaGQxX3NCUU9VYUJVTTZCUjFhc2J3by5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
QTU2MEEvQUFFQjE5MUExRDhBMTFFMkEzODdEMEU0MDhCMDJDRDIvMjk0NkZBRjRG
OEU4MTFFRjg0NjFERTUxQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwgcEGCCsGAQUFBwEHAQH/
BIGxMIGuMGYEAgABMGADBAEqYAQDBAIqYAwDBAAtfFQDBAJnA/QDBAJnSngDBAJn
eVgDBAFnk34DBAFnoRADBAFnoaoDBAFnoh4DBAFno9gDBAFnsBYDBAFnsPoDBAFn
tIoDBAFnu6gDBAFnvPIwRAQCAAIwPgMHACABDfQlQAMHACQDakAAAAMHACQDakAA
AjAQAwYEJANqQBADBgUkA2pAQAMGBSQDakDgAwcAJAcuwAAAMA0GCSqGSIb3DQEB
CwUAA4IBAQBS0QSGyvjvciB4Qu9AkPyx+L7rWM5dRjoEUhMDwSdqobg0WvSK7gI6
lwNOToBlSS8Wj1a5ccE2NL7JFEgxEkQd8sBOnqkOUeXgEE8uvl0OAArtnZmVUm3D
h1DvuXJms3Yu/0zOB99Ta4ml1lLaCkeNeJ2S50rHby+dhsxWRh5SELtznqtDedjV
eLexuKjvyGdELiKSD99w4Z9e9x/be0chGNyh40k9FjAMT6fyNeTwmIJSiQSxrjDn
4P1HyZZiB+pnyRR6TKgIApRkP51EA9JKLknOwvDnQpQzq4PyfYEnzMWuOYER2/g7
2gJZKZfty4QEZaj2EjbymLN6M7zvzgBV
-----END CERTIFICATE-----
Generated at Mon Apr 14 03:29:20 2025 by rpki-client