Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A5BCD/61D0C4867A3A11EABF8B5826C4F9AE02/5A3B7CECDDBC11EC8378E737C4F9AE02.roa
File: 5A3B7CECDDBC11EC8378E737C4F9AE02.roa (raw, json)
Hash identifier: lwmo/gkmzYuWybDmK+FVsOggd5dBx+ce2atYLFTNz2E=
Subject key identifier: 0F:20:E2:8E:85:AC:BA:36:FC:CD:E8:27:2B:0D:98:79:C1:E0:98:A0
Certificate issuer: /CN=A91A5BCD/serialNumber=859D184F41C34898B7298C991075CCCF51679AF1
Certificate serial: 09DD
Authority key identifier: 85:9D:18:4F:41:C3:48:98:B7:29:8C:99:10:75:CC:CF:51:67:9A:F1
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hZ0YT0HDSJi3KYyZEHXMz1FnmvE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A5BCD/61D0C4867A3A11EABF8B5826C4F9AE02/5A3B7CECDDBC11EC8378E737C4F9AE02.roa
Signing time: Sun 06 Apr 2025 20:00:14 +0000
ROA not before: Sun 06 Apr 2025 20:00:14 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 139009
IP address blocks: 103.150.64.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A5BCD/61D0C4867A3A11EABF8B5826C4F9AE02/hZ0YT0HDSJi3KYyZEHXMz1FnmvE.crl
rsync://rpki.apnic.net/member_repository/A91A5BCD/61D0C4867A3A11EABF8B5826C4F9AE02/hZ0YT0HDSJi3KYyZEHXMz1FnmvE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hZ0YT0HDSJi3KYyZEHXMz1FnmvE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 19 Apr 2025 19:43:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2525 (0x9dd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A5BCD, serialNumber=859D184F41C34898B7298C991075CCCF51679AF1
Validity
Not Before: Apr 6 20:00:14 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=67f2dd4e-779e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:c9:0e:0f:7a:dc:03:7f:72:df:9b:aa:9e:b2:
47:bd:84:56:8f:3f:10:b8:2b:ac:44:e0:34:d1:c9:
49:49:d2:57:81:fb:40:3b:f4:a4:cd:22:4d:49:fa:
f8:9c:cd:fa:d2:40:27:6a:80:8f:a4:0e:59:1d:5c:
8f:b2:9f:7c:37:48:e2:50:e1:61:22:8c:09:d6:52:
97:88:d7:40:bc:78:f9:24:54:df:f6:49:55:89:ad:
5f:82:77:2e:ca:d2:34:12:48:10:d0:c2:45:fb:94:
e9:42:a7:f5:fe:3a:2d:56:cc:20:4c:ff:f8:31:58:
0e:d1:a6:b6:ea:2b:73:db:82:8a:61:25:13:98:12:
b0:70:6b:fe:19:6b:6c:40:a2:62:98:20:40:48:f4:
48:2d:c4:a4:92:4c:58:92:f5:82:c7:a6:5a:ec:73:
a5:36:67:7d:3d:d1:98:17:30:2a:a1:31:39:fd:c2:
52:bf:2a:c0:ca:21:ff:af:a8:93:7f:04:c2:cb:9d:
fa:e2:cf:33:3d:16:fe:44:8c:d4:fd:11:d4:cb:d6:
84:2d:f8:a3:7b:25:c3:ac:80:1b:54:8d:b0:38:73:
63:2d:2d:05:0c:83:b8:a8:e6:9f:12:c7:cd:c6:dd:
e7:cd:4a:86:63:a7:cb:1b:04:69:13:07:ac:ef:cb:
1c:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:20:E2:8E:85:AC:BA:36:FC:CD:E8:27:2B:0D:98:79:C1:E0:98:A0
X509v3 Authority Key Identifier:
keyid:85:9D:18:4F:41:C3:48:98:B7:29:8C:99:10:75:CC:CF:51:67:9A:F1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A5BCD/61D0C4867A3A11EABF8B5826C4F9AE02/hZ0YT0HDSJi3KYyZEHXMz1FnmvE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hZ0YT0HDSJi3KYyZEHXMz1FnmvE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A5BCD/61D0C4867A3A11EABF8B5826C4F9AE02/5A3B7CECDDBC11EC8378E737C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.150.64.0/24
Signature Algorithm: sha256WithRSAEncryption
25:38:a1:96:7d:96:d0:3f:85:64:4e:39:78:61:db:70:22:88:
76:c4:1d:f0:46:bf:98:38:a0:ba:62:e1:54:ae:21:f7:70:57:
21:70:95:e3:00:fe:5d:5f:fe:8e:21:21:ea:62:4e:8a:3f:2f:
52:91:6d:ee:fd:6f:76:40:27:ac:d6:e9:37:dd:65:bc:da:56:
7d:c6:4f:3d:e3:d1:95:42:c9:c9:2c:ae:2c:5e:3c:86:00:8c:
f3:08:8e:7e:cc:25:7f:b5:f6:c6:29:8c:37:9f:c0:e0:22:68:
cd:b8:09:0c:a1:1a:58:99:95:7a:ab:df:32:f4:89:75:95:66:
c0:4a:e3:3f:6c:d5:e5:1d:3d:df:19:80:28:11:9f:24:92:e6:
19:a1:e3:94:f9:f7:60:b5:47:fa:2c:78:5f:6b:5d:d5:80:eb:
1d:d6:f7:52:11:0e:a5:50:f2:e3:0b:83:a8:3d:c1:79:c8:84:
36:cf:6b:63:79:eb:80:17:e1:42:30:56:43:84:8b:78:25:c8:
5b:c4:db:b6:59:8c:35:ec:63:de:69:5e:ab:7d:82:bd:da:83:
95:97:91:e4:01:a6:59:55:3f:14:01:f9:05:63:10:a7:b1:7e:
46:91:a5:d6:72:93:94:cb:c5:5d:76:8b:53:1a:34:44:c0:82:
f3:f1:41:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 04:27:22 2025 by rpki-client