Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91AB34A/8A30F7348A8611ED9116D73FC4F9AE02/9C43FA268A8A11ED9DF2425AC4F9AE02.roa
File: 9C43FA268A8A11ED9DF2425AC4F9AE02.roa (raw, json)
Hash identifier: XU2Kl+wDT9+IdgtwYqn/7pHHpGdYj1vHxZuNd0BPYVQ=
Subject key identifier: 77:9F:B1:BA:62:BA:69:6F:A3:0E:06:2E:A6:B2:DF:2F:49:76:83:F8
Certificate issuer: /CN=A91AB34A/serialNumber=5885CA6E0CC7B5E5320FA72473EE739633F5EC26
Certificate serial: 0168
Authority key identifier: 58:85:CA:6E:0C:C7:B5:E5:32:0F:A7:24:73:EE:73:96:33:F5:EC:26
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WIXKbgzHteUyD6ckc-5zljP17CY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91AB34A/8A30F7348A8611ED9116D73FC4F9AE02/9C43FA268A8A11ED9DF2425AC4F9AE02.roa
Signing time: Fri 29 Nov 2024 02:36:13 +0000
ROA not before: Fri 29 Nov 2024 02:36:13 +0000
ROA not after: Sat 31 Jan 2026 00:00:00 +0000
asID: 150418
IP address blocks: 103.37.186.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91AB34A/8A30F7348A8611ED9116D73FC4F9AE02/WIXKbgzHteUyD6ckc-5zljP17CY.crl
rsync://rpki.apnic.net/member_repository/A91AB34A/8A30F7348A8611ED9116D73FC4F9AE02/WIXKbgzHteUyD6ckc-5zljP17CY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WIXKbgzHteUyD6ckc-5zljP17CY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 16 Apr 2025 02:15:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 360 (0x168)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91AB34A
Validity
Not Before: Nov 29 02:36:13 2024 GMT
Not After : Jan 31 00:00:00 2026 GMT
Subject: CN=6749289d-70dd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:c2:fb:d5:fe:45:ee:21:27:32:df:cf:dd:3b:
99:a3:55:57:5d:5f:b1:09:49:2d:3e:77:ce:6a:70:
4f:e9:07:83:9b:fd:b9:9b:26:7d:9d:24:dc:93:f3:
00:96:8c:1a:a0:5f:d8:69:e3:7b:d0:43:b5:14:3f:
8a:ce:e1:98:f8:5e:27:78:4d:ed:0b:9a:35:97:7e:
3a:0b:2e:2a:50:ce:ab:69:9b:68:6a:09:9c:4d:a6:
8a:93:da:4c:c0:c6:e6:15:fd:24:93:02:c6:a8:e8:
e2:25:44:2b:45:2f:1f:6b:c2:c0:0f:97:18:59:f1:
7d:e7:27:b3:3c:e4:ce:bf:19:b9:1c:ef:8c:11:ac:
02:98:91:88:ef:85:67:a9:46:8d:2d:4d:0c:74:23:
c5:38:55:8d:5d:10:a8:63:47:73:ff:71:00:60:24:
03:b8:f9:a7:9c:65:13:1e:65:8f:9e:27:dc:98:f0:
57:68:c8:14:3f:f9:c9:90:2b:ad:b1:b0:62:4a:bb:
a6:4c:59:d3:19:9f:23:73:85:5c:d3:4f:af:fb:69:
55:b1:89:e7:cd:c7:14:60:df:e1:f9:96:4c:da:93:
b9:13:c1:ec:c0:e1:4b:9a:40:41:2f:d3:58:5c:97:
2b:b5:9d:d2:a8:29:d1:d6:4b:85:d4:55:55:cd:25:
87:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:9F:B1:BA:62:BA:69:6F:A3:0E:06:2E:A6:B2:DF:2F:49:76:83:F8
X509v3 Authority Key Identifier:
keyid:58:85:CA:6E:0C:C7:B5:E5:32:0F:A7:24:73:EE:73:96:33:F5:EC:26
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91AB34A/8A30F7348A8611ED9116D73FC4F9AE02/WIXKbgzHteUyD6ckc-5zljP17CY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WIXKbgzHteUyD6ckc-5zljP17CY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AB34A/8A30F7348A8611ED9116D73FC4F9AE02/9C43FA268A8A11ED9DF2425AC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.37.186.0/23
Signature Algorithm: sha256WithRSAEncryption
0d:d3:b8:89:54:b0:dc:c2:e3:a2:97:93:93:85:61:d3:5f:0b:
47:ce:40:e7:67:ec:e5:75:17:0a:9d:ea:99:83:9e:a7:ee:14:
ad:a0:51:77:1d:cb:8e:8c:41:12:97:b4:d4:35:6f:78:3c:0d:
96:3d:49:a3:8c:04:89:cf:5b:74:ca:66:d4:76:02:73:45:f0:
68:b9:4f:90:d3:9c:5f:e9:1a:2b:3c:ef:5b:a5:2b:ff:f4:e0:
85:95:ca:03:6d:35:fc:6c:df:80:52:c8:44:d0:91:e9:ef:f5:
a8:6b:5c:c2:8b:c9:fe:da:a8:b7:88:7c:e5:01:5b:02:06:63:
ef:05:0b:cc:aa:ef:bc:f3:f8:23:06:4d:da:f5:a6:e4:cd:b9:
b9:94:86:75:59:4f:55:e1:77:05:10:a8:82:91:60:32:34:cc:
25:f4:91:fd:5b:68:8a:3b:93:24:de:70:6e:9e:5e:39:a2:0b:
58:56:7e:c7:e1:fb:ec:6f:5f:2b:96:95:a9:c4:25:4d:7b:6c:
9f:6d:9f:72:42:b2:c9:09:ef:b4:16:4f:7a:7c:59:41:97:e1:
89:cd:e2:1f:69:c3:30:17:30:0a:4b:51:15:22:7c:1e:2f:65:
4d:50:42:27:2b:62:e3:9e:61:38:90:df:d8:ac:c3:38:56:fd:
7c:fa:78:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 08:45:05 2025 by rpki-client