Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A91CB/650E600AEA5A11EFB84AE468C4F9AE02/0EB302DCEA5B11EFABB07C6DC4F9AE02.roa
File: 0EB302DCEA5B11EFABB07C6DC4F9AE02.roa (raw, json)
Hash identifier: gvmSDCYZSC63LrY5JrPQoisd5tgDkXkEX0SCy3pFzuY=
Subject key identifier: 09:CF:73:05:AD:1F:F2:DC:0E:50:D5:40:C4:AC:CC:D1:7E:6C:AE:99
Certificate issuer: /CN=A91A91CB/serialNumber=8966423EE2A415631F7AF314E4D884007A8468B6
Certificate serial: 02
Authority key identifier: 89:66:42:3E:E2:A4:15:63:1F:7A:F3:14:E4:D8:84:00:7A:84:68:B6
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iWZCPuKkFWMfevMU5NiEAHqEaLY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A91CB/650E600AEA5A11EFB84AE468C4F9AE02/0EB302DCEA5B11EFABB07C6DC4F9AE02.roa
Signing time: Thu 13 Feb 2025 22:37:08 +0000
ROA not before: Thu 13 Feb 2025 22:37:08 +0000
ROA not after: Tue 31 Mar 2026 00:00:00 +0000
asID: 7575
IP address blocks: 2001:df4:c7c0::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A91CB/650E600AEA5A11EFB84AE468C4F9AE02/iWZCPuKkFWMfevMU5NiEAHqEaLY.crl
rsync://rpki.apnic.net/member_repository/A91A91CB/650E600AEA5A11EFB84AE468C4F9AE02/iWZCPuKkFWMfevMU5NiEAHqEaLY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iWZCPuKkFWMfevMU5NiEAHqEaLY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 20 Apr 2025 06:36:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2 (0x2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A91CB, serialNumber=8966423EE2A415631F7AF314E4D884007A8468B6
Validity
Not Before: Feb 13 22:37:08 2025 GMT
Not After : Mar 31 00:00:00 2026 GMT
Subject: CN=67ae7414-4673
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:02:52:66:29:19:fb:c8:7e:61:f4:a4:0b:68:
3b:29:d2:fe:de:32:3e:ab:70:c8:b2:36:8b:bd:cc:
bd:42:6f:82:0b:91:8f:59:a4:a7:a8:d8:e8:f1:46:
06:3d:5b:68:14:e1:13:a1:54:08:87:85:89:e7:2e:
48:2c:d8:f6:c6:30:70:0d:81:34:a5:b0:76:d3:4d:
ac:05:fb:a1:39:f0:e5:b9:e2:84:74:5e:cb:e0:4c:
c1:5d:43:79:9c:89:02:4e:8c:7b:80:35:ca:f9:2d:
95:64:2b:65:d5:34:50:dc:61:0f:14:35:e1:aa:42:
97:02:18:76:6b:56:7a:77:53:48:43:49:e7:89:d3:
1d:5d:08:b4:e0:92:f3:bb:9f:71:72:4a:e4:75:93:
af:a3:5e:1e:41:ed:8a:18:a4:b6:40:84:e8:02:bd:
02:77:fb:c4:dc:da:0b:49:57:d7:9d:a8:63:bb:51:
53:1a:0f:a9:01:37:df:65:c2:b5:ab:a6:c2:5b:1c:
8e:2b:ce:ad:79:a9:84:9f:bd:e0:b8:4e:79:6e:84:
c0:c0:69:8b:b4:cc:fa:cc:32:17:3e:52:82:ac:52:
3a:0f:01:4f:b4:d8:4d:a6:ad:fa:1d:c1:54:56:4e:
f0:5e:2e:b4:db:0c:3d:f6:6e:30:6c:4a:24:27:47:
1c:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:CF:73:05:AD:1F:F2:DC:0E:50:D5:40:C4:AC:CC:D1:7E:6C:AE:99
X509v3 Authority Key Identifier:
keyid:89:66:42:3E:E2:A4:15:63:1F:7A:F3:14:E4:D8:84:00:7A:84:68:B6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A91CB/650E600AEA5A11EFB84AE468C4F9AE02/iWZCPuKkFWMfevMU5NiEAHqEaLY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iWZCPuKkFWMfevMU5NiEAHqEaLY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A91CB/650E600AEA5A11EFB84AE468C4F9AE02/0EB302DCEA5B11EFABB07C6DC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv6:
2001:df4:c7c0::/48
Signature Algorithm: sha256WithRSAEncryption
09:8c:4f:e3:c9:f7:33:0c:b5:0b:e7:d5:39:c3:eb:61:94:0b:
41:51:cb:cb:73:76:f0:59:17:23:a4:19:dc:46:42:04:19:86:
d1:9d:31:98:d4:27:67:88:23:53:c3:b9:8c:50:04:61:8f:58:
96:9f:e9:ef:83:ec:4c:36:13:63:75:14:04:f5:cb:ff:2e:60:
99:49:5e:9d:9a:e5:d2:54:25:87:d4:b9:a0:a1:2b:cc:67:dc:
47:95:1d:fa:86:cd:84:ce:4a:56:f1:22:eb:6f:ca:43:ca:30:
ab:0c:35:be:0b:c7:32:68:e2:89:15:cf:7c:ef:a7:f0:f7:18:
2d:9f:bf:56:0b:d5:ea:43:f4:69:03:ec:44:50:0a:47:63:e2:
c9:02:18:b9:e0:07:58:c3:dc:68:0f:81:ef:0f:d2:3c:44:5d:
5e:66:32:8a:96:92:31:27:62:fc:da:76:08:ac:53:ef:6f:d7:
1f:34:61:28:dd:04:a6:0a:9d:bf:b3:c7:b2:e5:0d:71:11:20:
54:47:87:a3:98:2e:f4:c8:c0:a3:fa:32:0c:66:46:9a:f5:02:
48:cc:a3:5a:aa:a6:ae:40:20:68:70:ed:bf:27:b5:7b:db:7b:
12:5f:03:e1:5b:61:ad:4a:b4:df:dc:ad:52:1a:c3:9f:3d:39:
64:2f:80:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 11:27:38 2025 by rpki-client