Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/5B1D04E600A011F085463453C4F9AE02.roa
File: 5B1D04E600A011F085463453C4F9AE02.roa (raw, json)
Hash identifier: VsYQvsLsJz1G3txhCSJIbxLGgCMg5LNsMDoXp7eVwUE=
Subject key identifier: 56:FC:07:E3:1A:AF:69:37:89:C0:3F:75:BC:B4:B1:55:B2:44:23:E9
Certificate issuer: /CN=A91A560A/serialNumber=167C3B221775FEC05039468150CE814756AC6F0A
Certificate serial: 4A16
Authority key identifier: 16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/5B1D04E600A011F085463453C4F9AE02.roa
Signing time: Fri 14 Mar 2025 06:48:37 +0000
ROA not before: Fri 14 Mar 2025 06:48:37 +0000
ROA not after: Fri 31 Oct 2025 00:00:00 +0000
asID: 140815
IP address blocks: 103.6.248.0/23 maxlen: 24
103.10.68.0/23 maxlen: 24
103.16.160.0/23 maxlen: 24
103.16.214.0/23 maxlen: 24
103.16.224.0/23 maxlen: 24
103.29.0.0/23 maxlen: 24
103.29.2.0/23 maxlen: 24
103.131.56.0/23 maxlen: 24
103.170.120.0/23 maxlen: 24
103.182.16.0/23 maxlen: 24
103.184.96.0/23 maxlen: 24
103.186.148.0/23 maxlen: 24
103.189.202.0/23 maxlen: 24
103.190.36.0/23 maxlen: 24
103.190.106.0/23 maxlen: 24
103.196.144.0/23 maxlen: 24
103.250.78.0/23 maxlen: 24
103.253.16.0/23 maxlen: 24
113.192.8.0/23 maxlen: 24
163.61.180.0/23 maxlen: 24
203.145.44.0/23 maxlen: 24
2001:df0:5bc0::/48 maxlen: 48
2001:df0:aac0::/48 maxlen: 48
2001:df0:d9c0::/48 maxlen: 48
2001:df0:e3c0::/48 maxlen: 48
2001:df0:eac0::/48 maxlen: 48
2001:df3:41c0::/48 maxlen: 48
2001:df3:b640::/48 maxlen: 48
2001:df3:edc0::/48 maxlen: 48
2001:df4:540::/48 maxlen: 48
2001:df4:5c0::/48 maxlen: 48
2001:df4:11c0::/48 maxlen: 48
2001:df4:7040::/48 maxlen: 48
2001:df4:8240::/48 maxlen: 48
2001:df4:aa40::/48 maxlen: 48
2001:df5:1ac0::/48 maxlen: 48
2401:4b20::/48 maxlen: 48
2401:4ba0::/48 maxlen: 48
2401:50e0::/48 maxlen: 48
2401:7420::/48 maxlen: 48
2401:7560::/48 maxlen: 48
2401:7620::/48 maxlen: 48
2401:8aa0::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl
rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 11 Apr 2025 14:33:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 18966 (0x4a16)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A560A
Validity
Not Before: Mar 14 06:48:37 2025 GMT
Not After : Oct 31 00:00:00 2025 GMT
Subject: CN=67d3d145-6b68
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:1e:7d:cc:77:0e:7d:88:cd:12:21:b6:e1:95:
57:b8:8b:f3:b9:23:ee:2e:a0:ff:2e:5d:99:7c:f9:
7b:9d:41:1f:52:e4:b1:c1:15:1f:90:6e:7f:6c:ed:
73:66:fb:c9:1d:a5:20:2a:2b:dc:7c:2e:3b:98:78:
da:7b:5a:27:3c:57:de:5a:cb:39:16:62:5f:40:61:
0a:74:c5:19:0d:51:d5:64:e2:d9:b6:8d:0b:33:61:
c6:64:3f:c8:ee:10:d5:c3:e9:dc:18:0e:8b:c6:41:
4a:f5:48:f6:ac:f6:d4:0f:21:13:f7:17:4f:7d:e6:
cc:3e:f9:98:a7:f8:70:6b:41:35:d2:dd:08:85:b7:
dc:1e:22:2d:a6:29:2c:72:48:fc:09:de:db:bc:b3:
b2:22:e3:91:31:2e:df:76:b7:b5:99:e5:c6:04:34:
6c:62:dd:e8:41:4d:b9:ad:11:4f:50:58:1e:3c:fb:
40:84:fd:51:b1:f1:ad:fb:79:be:91:aa:89:28:34:
53:0d:e9:91:b0:67:4a:97:1f:8a:2e:8e:86:ce:59:
61:8c:a8:86:ae:e2:63:c9:68:a7:0a:36:58:84:67:
4b:e6:c2:f7:bc:dd:7f:2a:14:42:fb:b1:ac:e9:53:
29:46:39:41:09:6d:df:f2:6a:9c:44:29:6f:65:9d:
47:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:FC:07:E3:1A:AF:69:37:89:C0:3F:75:BC:B4:B1:55:B2:44:23:E9
X509v3 Authority Key Identifier:
keyid:16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/5B1D04E600A011F085463453C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.6.248.0/23
103.10.68.0/23
103.16.160.0/23
103.16.214.0/23
103.16.224.0/23
103.29.0.0/22
103.131.56.0/23
103.170.120.0/23
103.182.16.0/23
103.184.96.0/23
103.186.148.0/23
103.189.202.0/23
103.190.36.0/23
103.190.106.0/23
103.196.144.0/23
103.250.78.0/23
103.253.16.0/23
113.192.8.0/23
163.61.180.0/23
203.145.44.0/23
IPv6:
2001:df0:5bc0::/48
2001:df0:aac0::/48
2001:df0:d9c0::/48
2001:df0:e3c0::/48
2001:df0:eac0::/48
2001:df3:41c0::/48
2001:df3:b640::/48
2001:df3:edc0::/48
2001:df4:540::/48
2001:df4:5c0::/48
2001:df4:11c0::/48
2001:df4:7040::/48
2001:df4:8240::/48
2001:df4:aa40::/48
2001:df5:1ac0::/48
2401:4b20::/48
2401:4ba0::/48
2401:50e0::/48
2401:7420::/48
2401:7560::/48
2401:7620::/48
2401:8aa0::/48
Signature Algorithm: sha256WithRSAEncryption
a0:68:16:31:73:76:be:86:a4:ed:aa:20:32:54:e1:c6:54:28:
5f:95:07:07:f9:ce:fc:b5:5c:b2:78:20:97:93:f1:e1:fd:13:
cc:ee:f0:a9:75:28:b1:c3:15:a5:08:50:90:69:73:e5:0f:a7:
47:7a:94:e6:b0:a7:f5:bb:be:5c:19:7b:f8:de:7a:6e:0c:ee:
fe:d8:9c:8b:95:f8:47:25:f1:b3:d2:93:bf:ca:7e:54:94:e3:
3e:a3:2b:1b:8a:83:b2:25:ba:42:8c:cd:87:1e:0d:d1:ef:a1:
d2:1f:93:f5:19:a6:81:8a:38:6b:41:2e:96:a5:78:98:ef:de:
32:6d:d1:35:a8:d6:51:e4:ba:c8:37:d4:49:bd:9c:62:73:6b:
f3:31:eb:d1:e6:f4:ab:a7:f1:4e:f7:f0:f0:b3:20:0a:1d:76:
ef:7c:b6:2a:31:3e:bf:c3:e6:e5:11:19:ae:cf:54:f4:ca:6d:
1f:ec:94:89:7f:7e:5c:df:a8:ae:cd:89:73:9c:f1:c9:bf:f3:
94:7d:eb:fa:be:ca:0c:0d:b2:a4:07:dc:d7:7c:7d:01:9f:95:
5b:03:7d:59:c7:b6:6c:8a:49:d0:e0:b7:d1:81:60:a2:46:6e:
24:ce:a3:21:cf:c2:c8:a0:04:bf:98:37:38:ec:dc:5f:53:9d:
39:6e:2a:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 14:41:16 2025 by rpki-client