
Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A9D0F/74BE38D680CF11E9ACD71B50C4F9AE02/13C1EDA8767911EE9A957930C4F9AE02.roa
File: 13C1EDA8767911EE9A957930C4F9AE02.roa (raw, json)
Hash identifier: rMgdKojSnMQn5zP9ArOeE344pCaixcohoQsewhOoy54=
Subject key identifier: 5E:BA:90:D3:A2:7F:27:92:62:7B:77:68:1B:F5:5B:AE:A6:F0:D8:A3
Certificate issuer: /CN=A91A9D0F/serialNumber=88E7B541F42298D6E9B5165D965246CC1CC1F5A2
Certificate serial: 0F33
Authority key identifier: 88:E7:B5:41:F4:22:98:D6:E9:B5:16:5D:96:52:46:CC:1C:C1:F5:A2
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iOe1QfQimNbptRZdllJGzBzB9aI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A9D0F/74BE38D680CF11E9ACD71B50C4F9AE02/13C1EDA8767911EE9A957930C4F9AE02.roa
Signing time: Fri 28 Feb 2025 18:57:39 +0000
ROA not before: Fri 28 Feb 2025 18:57:39 +0000
ROA not after: Fri 01 May 2026 00:00:00 +0000
asID: 138575
IP address blocks: 103.133.140.0/24 maxlen: 24
103.133.141.0/24 maxlen: 24
103.133.142.0/24 maxlen: 24
103.133.143.0/24 maxlen: 24
2404:4d40::/32 maxlen: 32
2404:4d40:1000::/36 maxlen: 36
2404:4d40:1000::/40 maxlen: 40
2404:4d40:1001::/48 maxlen: 48
2404:4d40:1002::/48 maxlen: 48
2404:4d40:1003::/48 maxlen: 48
2404:4d40:1004::/48 maxlen: 48
2404:4d40:1005::/48 maxlen: 48
2404:4d40:1006::/48 maxlen: 48
2404:4d40:1007::/48 maxlen: 48
2404:4d40:1008::/48 maxlen: 48
2404:4d40:1009::/48 maxlen: 48
2404:4d40:100a::/48 maxlen: 48
2404:4d40:100b::/48 maxlen: 48
2404:4d40:100c::/48 maxlen: 48
2404:4d40:100d::/48 maxlen: 48
2404:4d40:100e::/48 maxlen: 48
2404:4d40:100f::/48 maxlen: 48
2404:4d40:1010::/48 maxlen: 48
2404:4d40:1011::/48 maxlen: 48
2404:4d40:1012::/48 maxlen: 48
2404:4d40:1013::/48 maxlen: 48
2404:4d40:1014::/48 maxlen: 48
2404:4d40:1015::/48 maxlen: 48
2404:4d40:1016::/48 maxlen: 48
2404:4d40:1017::/48 maxlen: 48
2404:4d40:1018::/48 maxlen: 48
2404:4d40:1019::/48 maxlen: 48
2404:4d40:101a::/48 maxlen: 48
2404:4d40:101b::/48 maxlen: 48
2404:4d40:101c::/48 maxlen: 48
2404:4d40:101d::/48 maxlen: 48
2404:4d40:101e::/48 maxlen: 48
2404:4d40:101f::/48 maxlen: 48
2404:4d40:1020::/48 maxlen: 48
2404:4d40:1021::/48 maxlen: 48
2404:4d40:1022::/48 maxlen: 48
2404:4d40:1100::/40 maxlen: 40
2404:4d40:1100::/48 maxlen: 48
2404:4d40:1101::/48 maxlen: 48
2404:4d40:1102::/48 maxlen: 48
2404:4d40:1103::/48 maxlen: 48
2404:4d40:1104::/46 maxlen: 46
2404:4d40:1104::/48 maxlen: 48
2404:4d40:1105::/48 maxlen: 48
2404:4d40:1106::/48 maxlen: 48
2404:4d40:1107::/48 maxlen: 48
2404:4d40:1108::/48 maxlen: 48
2404:4d40:1109::/48 maxlen: 48
2404:4d40:110a::/48 maxlen: 48
2404:4d40:110b::/48 maxlen: 48
2404:4d40:110c::/48 maxlen: 48
2404:4d40:110d::/48 maxlen: 48
2404:4d40:110e::/48 maxlen: 48
2404:4d40:110f::/48 maxlen: 48
2404:4d40:1110::/48 maxlen: 48
2404:4d40:1111::/48 maxlen: 48
2404:4d40:1112::/47 maxlen: 48
2404:4d40:1114::/46 maxlen: 48
2404:4d40:1118::/45 maxlen: 48
2404:4d40:1120::/43 maxlen: 48
2404:4d40:1140::/42 maxlen: 48
2404:4d40:1180::/41 maxlen: 48
2404:4d40:1200::/40 maxlen: 48
2404:4d40:1300::/40 maxlen: 48
2404:4d40:1400::/40 maxlen: 40
2404:4d40:1500::/40 maxlen: 40
2404:4d40:1600::/40 maxlen: 40
2404:4d40:1700::/40 maxlen: 40
2404:4d40:1800::/40 maxlen: 40
2404:4d40:1900::/40 maxlen: 40
2404:4d40:1a00::/40 maxlen: 40
2404:4d40:1b00::/40 maxlen: 40
2404:4d40:1c00::/40 maxlen: 40
2404:4d40:1d00::/40 maxlen: 40
2404:4d40:1e00::/40 maxlen: 40
2404:4d40:1f00::/40 maxlen: 40
2404:4d40:2000::/36 maxlen: 36
2404:4d40:2000::/40 maxlen: 40
2404:4d40:2100::/40 maxlen: 40
2404:4d40:2200::/40 maxlen: 40
2404:4d40:2300::/40 maxlen: 40
2404:4d40:2400::/40 maxlen: 40
2404:4d40:2500::/40 maxlen: 40
2404:4d40:2600::/40 maxlen: 40
2404:4d40:2700::/40 maxlen: 40
2404:4d40:2800::/40 maxlen: 40
2404:4d40:2900::/40 maxlen: 40
2404:4d40:2a00::/40 maxlen: 40
2404:4d40:2b00::/40 maxlen: 40
2404:4d40:2c00::/40 maxlen: 40
2404:4d40:2d00::/40 maxlen: 40
2404:4d40:2e00::/40 maxlen: 40
2404:4d40:2f00::/40 maxlen: 40
2404:4d40:3000::/36 maxlen: 36
2404:4d40:4000::/36 maxlen: 36
2404:4d40:4000::/40 maxlen: 40
2404:4d40:5000::/36 maxlen: 36
2404:4d40:6000::/36 maxlen: 36
2404:4d40:7000::/36 maxlen: 36
2404:4d40:8000::/36 maxlen: 36
2404:4d40:9000::/36 maxlen: 36
2404:4d40:a000::/36 maxlen: 36
2404:4d40:b000::/36 maxlen: 36
2404:4d40:c000::/36 maxlen: 36
2404:4d40:d000::/36 maxlen: 36
2404:4d40:e000::/36 maxlen: 36
2404:4d40:f000::/36 maxlen: 36
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A9D0F/74BE38D680CF11E9ACD71B50C4F9AE02/iOe1QfQimNbptRZdllJGzBzB9aI.crl
rsync://rpki.apnic.net/member_repository/A91A9D0F/74BE38D680CF11E9ACD71B50C4F9AE02/iOe1QfQimNbptRZdllJGzBzB9aI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iOe1QfQimNbptRZdllJGzBzB9aI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 27 Apr 2025 17:33:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3891 (0xf33)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A9D0F, serialNumber=88E7B541F42298D6E9B5165D965246CC1CC1F5A2
Validity
Not Before: Feb 28 18:57:39 2025 GMT
Not After : May 1 00:00:00 2026 GMT
Subject: CN=67c20723-9314
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:9e:82:58:35:b9:d5:a1:c6:2a:b6:08:36:5c:
80:39:48:48:b7:8d:94:49:33:f5:d0:7d:72:29:6e:
c8:5e:48:40:4c:3f:5c:0d:b8:cb:7f:41:a4:27:9f:
40:4f:16:36:1e:e5:be:a1:a9:a4:b6:1d:6d:37:b1:
4d:9e:b4:d9:7f:df:4e:72:73:af:bd:1a:58:25:34:
f7:06:4d:63:fd:88:d2:73:37:85:9b:b5:e5:1d:3a:
1b:81:1f:96:9a:d2:26:33:0c:cb:3e:ea:a9:5e:52:
f4:8e:7f:06:ec:d6:0b:c3:cc:c9:90:b5:4d:24:c3:
fb:03:1c:d3:25:d2:20:b4:fc:c0:a5:6c:68:b1:c9:
4c:1d:e3:bc:6d:84:85:e7:e1:46:b6:e7:1a:3f:2d:
38:4c:88:91:54:58:12:58:92:e4:26:86:54:ab:0e:
83:7a:aa:70:2c:3e:a3:2f:0f:f8:9c:32:5f:74:05:
b3:ac:05:e2:ac:47:1b:14:aa:ae:12:b8:f1:95:dc:
10:91:f1:27:d3:34:39:5a:e2:60:4a:19:0e:7c:74:
19:be:ad:50:7e:66:4e:f1:05:a2:47:07:ed:f9:7e:
cb:12:12:cc:44:e5:63:d1:32:f8:e9:0c:ec:c1:68:
84:a8:95:43:ab:40:d3:44:cb:97:7d:d9:29:58:77:
81:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:BA:90:D3:A2:7F:27:92:62:7B:77:68:1B:F5:5B:AE:A6:F0:D8:A3
X509v3 Authority Key Identifier:
keyid:88:E7:B5:41:F4:22:98:D6:E9:B5:16:5D:96:52:46:CC:1C:C1:F5:A2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A9D0F/74BE38D680CF11E9ACD71B50C4F9AE02/iOe1QfQimNbptRZdllJGzBzB9aI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iOe1QfQimNbptRZdllJGzBzB9aI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A9D0F/74BE38D680CF11E9ACD71B50C4F9AE02/13C1EDA8767911EE9A957930C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.133.140.0/22
IPv6:
2404:4d40::/32
Signature Algorithm: sha256WithRSAEncryption
5f:be:55:04:06:61:b9:92:25:e3:d4:6d:26:c4:a9:4d:48:38:
2d:d6:bd:1e:fa:2c:d9:22:5b:74:dd:3d:b5:b2:92:6a:99:78:
88:ca:ce:44:0c:ad:e7:71:03:fa:6d:18:a9:a4:f1:72:35:4a:
ee:11:80:49:66:bb:3d:b0:ee:43:3b:cf:68:36:ca:60:8f:cb:
f4:e9:5b:b3:54:4c:9e:85:cc:24:a1:03:d7:ff:3a:52:36:b6:
9b:66:b0:0a:21:b4:2c:2f:9f:90:e2:d4:43:1d:e8:68:a7:b8:
f5:bb:17:5b:f8:79:6e:54:64:12:6c:98:39:38:e2:19:3b:84:
cf:b0:92:f3:80:38:de:9c:db:b3:24:6e:c0:39:2b:41:b6:7d:
2b:b5:6d:de:e6:43:ad:68:b5:e6:34:6d:9a:23:a8:69:d3:5a:
6c:24:05:a9:50:58:f7:f3:de:ff:a8:cb:b0:0b:3f:ea:a3:af:
98:5c:ac:b5:e9:7e:54:c1:59:99:38:3d:02:e0:87:7f:cd:19:
3d:4e:54:ba:e5:20:4a:e2:8d:e8:f9:62:56:59:22:2d:ba:88:
af:9e:30:34:86:05:a9:ca:7c:97:b8:ac:05:b3:27:f1:ae:6d:
6f:cc:90:31:2c:18:99:eb:1a:a8:f6:7e:ea:7e:3f:89:8f:dd:
b3:7c:f2:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 03:28:53 2025 by rpki-client