Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/42823846037411EEB6D5D751C4F9AE02.roa
File: 42823846037411EEB6D5D751C4F9AE02.roa (raw, json)
Hash identifier: FnOFiZa70/k2Gg7sWSyAD0MxmWDWw3sQofIOHOm2m/4=
Subject key identifier: 34:D5:8A:0D:5E:8A:CF:0D:A5:84:A7:37:13:D8:6A:C0:57:A3:B0:A1
Certificate issuer: /CN=A91A560A/serialNumber=167C3B221775FEC05039468150CE814756AC6F0A
Certificate serial: 474C
Authority key identifier: 16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/42823846037411EEB6D5D751C4F9AE02.roa
Signing time: Fri 11 Oct 2024 07:10:06 +0000
ROA not before: Fri 11 Oct 2024 07:10:06 +0000
ROA not after: Fri 31 Oct 2025 00:00:00 +0000
asID: 149105
IP address blocks: 103.145.2.0/23 maxlen: 24
103.188.80.0/23 maxlen: 24
2400:8160::/48 maxlen: 48
2405:73c0::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl
rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 17 Apr 2025 14:26:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 18252 (0x474c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A560A
Validity
Not Before: Oct 11 07:10:06 2024 GMT
Not After : Oct 31 00:00:00 2025 GMT
Subject: CN=6708cf4e-0284
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:d8:79:94:25:81:94:0c:6a:0c:e3:9a:a2:a7:
63:87:ec:df:66:9c:e1:1b:48:b5:5a:bd:9b:93:9e:
e6:32:8a:27:be:f4:86:72:9e:58:bc:d1:03:6b:5e:
fa:ec:2a:ec:9a:b4:13:c7:79:0b:a8:c9:c2:6d:c7:
01:d1:ad:b0:48:c3:b9:bd:11:5c:71:d5:cc:e1:87:
38:72:ae:4a:23:1c:64:47:d2:ed:df:d6:b9:cc:f7:
38:23:fa:bd:a0:4d:50:6f:8b:b2:d1:e3:ca:6d:a3:
b3:9e:df:16:7c:ac:62:fe:94:a3:84:a8:3c:b8:78:
61:ee:56:5b:32:fd:ab:4d:ab:d0:4c:52:1e:39:2e:
0f:7e:f3:98:fe:b6:02:82:7a:22:48:60:81:cf:0d:
a7:3c:06:cb:85:a5:32:08:be:17:0b:53:5c:d4:4d:
11:6d:d6:10:4b:07:73:22:f9:13:5b:86:da:25:a8:
33:6e:fb:65:05:bb:4f:bc:16:61:e0:25:90:10:c7:
e2:d3:66:ab:4b:24:69:f2:2c:cc:4b:a3:31:dd:74:
02:eb:47:1d:e1:6f:8e:12:f5:62:a0:38:cc:70:be:
74:12:08:60:0a:f6:1a:6c:36:86:68:a4:eb:6a:fe:
00:0f:85:70:b9:dd:3f:9d:f2:04:b9:7f:d8:49:24:
fa:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:D5:8A:0D:5E:8A:CF:0D:A5:84:A7:37:13:D8:6A:C0:57:A3:B0:A1
X509v3 Authority Key Identifier:
keyid:16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/42823846037411EEB6D5D751C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.145.2.0/23
103.188.80.0/23
IPv6:
2400:8160::/48
2405:73c0::/48
Signature Algorithm: sha256WithRSAEncryption
ba:c7:a9:ad:98:af:94:2f:8b:2c:b1:26:fd:03:c8:12:f2:49:
32:31:8a:5b:79:d2:b5:bd:25:60:f6:63:35:f0:e6:55:09:63:
9b:0d:1b:ee:58:8b:22:a3:b5:11:1a:ff:b5:cd:6c:61:2d:e9:
4e:c4:8c:80:a6:c2:55:b8:ca:da:9c:26:0b:22:bd:45:d7:b0:
c4:7a:4e:18:ba:e1:0c:ac:df:87:2f:60:5b:be:dd:05:ec:41:
b8:c9:ce:6d:bf:48:f5:03:e2:ce:82:22:1d:f6:66:65:1c:75:
b6:dc:06:43:ef:47:f9:da:3f:17:a6:b5:9e:1d:01:60:3b:cc:
ba:aa:70:d1:55:a3:ce:24:b2:a3:33:93:e5:3c:8a:2d:82:3a:
82:b6:34:a6:b9:f0:0f:09:0a:53:dd:5f:d5:c4:e0:29:90:41:
18:73:e0:ea:9b:a1:8c:05:06:84:6f:83:e7:46:24:a9:d8:93:
96:c7:b2:f7:5a:5a:8d:91:93:02:0b:65:e2:03:62:74:15:e7:
20:89:a4:87:05:f1:92:ac:df:bb:05:7f:98:bf:ae:e5:9b:ff:
dc:90:5a:d4:96:7d:0f:8b:b3:70:bd:66:b7:f9:ed:bc:d3:63:
bf:ec:8a:90:82:ec:a3:7f:ac:32:68:51:f5:9e:43:5b:4d:0a:
08:7f:1c:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 06:47:03 2025 by rpki-client