Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91ABA84/72C1045C051F11F0ABFDD53EC4F9AE02/78B92D76052E11F0A9CDFD7AC4F9AE02.roa
File: 78B92D76052E11F0A9CDFD7AC4F9AE02.roa (raw, json)
Hash identifier: ri7YInMAbSmSsjfWYal4W711k38R/upA65HcOLcK83k=
Subject key identifier: FB:65:19:63:61:37:6B:9D:2C:31:78:7B:4E:DF:22:98:0D:B4:D7:50
Certificate issuer: /CN=A91ABA84/serialNumber=F49496F95DF958881BF4B7E972E51B6F3CA59DFA
Certificate serial: 09
Authority key identifier: F4:94:96:F9:5D:F9:58:88:1B:F4:B7:E9:72:E5:1B:6F:3C:A5:9D:FA
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9JSW-V35WIgb9LfpcuUbbzylnfo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91ABA84/72C1045C051F11F0ABFDD53EC4F9AE02/78B92D76052E11F0A9CDFD7AC4F9AE02.roa
Signing time: Thu 20 Mar 2025 01:56:00 +0000
ROA not before: Thu 20 Mar 2025 01:56:00 +0000
ROA not after: Sat 31 Jan 2026 00:00:00 +0000
asID: 137411
IP address blocks: 203.23.57.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91ABA84/72C1045C051F11F0ABFDD53EC4F9AE02/9JSW-V35WIgb9LfpcuUbbzylnfo.crl
rsync://rpki.apnic.net/member_repository/A91ABA84/72C1045C051F11F0ABFDD53EC4F9AE02/9JSW-V35WIgb9LfpcuUbbzylnfo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9JSW-V35WIgb9LfpcuUbbzylnfo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 16 Apr 2025 06:55:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 9 (0x9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91ABA84
Validity
Not Before: Mar 20 01:56:00 2025 GMT
Not After : Jan 31 00:00:00 2026 GMT
Subject: CN=67db75b0-9694
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:79:ee:ca:3b:09:76:33:7b:f9:29:16:af:ee:
49:0f:db:4c:9b:c9:ff:c2:eb:5d:75:ab:57:5e:a2:
5a:cb:2f:03:88:20:19:87:e7:06:5d:2b:a2:58:14:
c4:19:53:65:d1:0b:1f:ea:ad:23:fd:84:a4:fe:6c:
e1:12:1b:0b:94:60:88:92:15:be:00:ff:8f:d5:49:
13:44:33:6b:54:92:a5:3f:f9:72:05:be:9e:f8:2d:
ae:fb:55:c9:34:22:df:db:83:46:65:be:0b:3c:d2:
5e:35:ea:a7:c1:3a:47:bd:33:a8:a0:36:4e:48:fe:
6b:d5:27:aa:91:2d:67:b9:85:09:bd:52:1d:82:2d:
ce:51:22:3c:ac:42:14:f8:c9:05:3b:87:4d:23:50:
5a:86:bc:d0:ff:3f:c1:c3:65:01:dd:d3:e6:90:ba:
97:71:31:10:48:7f:f7:20:31:fc:19:d9:0f:2a:9f:
93:a2:74:ac:e0:ec:ab:ab:cf:80:72:47:38:db:69:
e3:7a:0d:ab:a7:23:6e:3c:d9:58:8e:83:74:f5:c9:
db:b1:73:c7:32:23:02:d3:6b:c9:50:0e:42:0b:0b:
55:5e:ee:9b:c5:95:71:f8:0b:a5:c8:9b:ed:5b:a1:
81:9f:8b:6a:c0:7e:5c:b7:d6:35:d7:30:61:33:9f:
78:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:65:19:63:61:37:6B:9D:2C:31:78:7B:4E:DF:22:98:0D:B4:D7:50
X509v3 Authority Key Identifier:
keyid:F4:94:96:F9:5D:F9:58:88:1B:F4:B7:E9:72:E5:1B:6F:3C:A5:9D:FA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91ABA84/72C1045C051F11F0ABFDD53EC4F9AE02/9JSW-V35WIgb9LfpcuUbbzylnfo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9JSW-V35WIgb9LfpcuUbbzylnfo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91ABA84/72C1045C051F11F0ABFDD53EC4F9AE02/78B92D76052E11F0A9CDFD7AC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
203.23.57.0/24
Signature Algorithm: sha256WithRSAEncryption
24:14:b5:b5:91:57:0f:5a:ed:e9:22:b2:46:a7:df:38:80:93:
64:a2:d7:c3:77:77:eb:0b:01:44:df:3c:2a:fc:80:36:c5:1c:
54:04:f6:93:d5:3d:30:cf:3d:7e:19:64:07:52:99:b3:32:b0:
38:82:5d:45:7e:ce:fb:6e:e9:85:46:21:3e:68:80:dc:38:75:
0e:03:af:f6:98:47:ba:00:54:5a:28:85:c1:63:84:46:41:9f:
c9:25:30:4a:c5:93:25:04:62:5a:dc:34:f9:17:d0:55:6c:17:
b2:19:c5:45:b2:fc:7a:b7:2c:d4:d9:1a:4a:ef:e2:a9:2a:d0:
62:1e:07:86:5d:28:37:49:cd:7f:76:d3:8c:da:e9:37:10:f5:
bb:1c:42:81:55:bd:a5:7a:c0:b9:73:40:9b:51:d0:0b:54:d2:
93:55:4d:01:48:31:a9:12:87:56:b2:15:87:bd:b3:ea:9b:69:
78:5d:70:b6:c8:af:4f:0e:a9:3e:7e:08:43:c8:ce:78:be:e5:
2c:a6:f3:24:b1:51:c0:1e:f6:7b:a3:33:78:90:88:f6:33:96:
c4:c8:14:0e:46:e1:5e:9f:5b:bf:ab:f8:1a:cb:59:38:35:5b:
92:68:4f:c2:af:cd:d6:9b:44:eb:6f:57:08:a3:62:09:c1:14:
6e:9f:fc:61
-----BEGIN CERTIFICATE-----
MIIFcDCCBFigAwIBAgIBCTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFB
QkE4NDExMC8GA1UEBRMoRjQ5NDk2Rjk1REY5NTg4ODFCRjRCN0U5NzJFNTFCNkYz
Q0E1OURGQTAeFw0yNTAzMjAwMTU2MDBaFw0yNjAxMzEwMDAwMDBaMBgxFjAUBgNV
BAMTDTY3ZGI3NWIwLTk2OTQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQC5ee7KOwl2M3v5KRav7kkP20ybyf/C6111q1deolrLLwOIIBmH5wZdK6JYFMQZ
U2XRCx/qrSP9hKT+bOESGwuUYIiSFb4A/4/VSRNEM2tUkqU/+XIFvp74La77Vck0
It/bg0Zlvgs80l416qfBOke9M6igNk5I/mvVJ6qRLWe5hQm9Uh2CLc5RIjysQhT4
yQU7h00jUFqGvND/P8HDZQHd0+aQupdxMRBIf/cgMfwZ2Q8qn5OidKzg7Kurz4By
RzjbaeN6DaunI2482ViOg3T1yduxc8cyIwLTa8lQDkILC1Ve7pvFlXH4C6XIm+1b
oYGfi2rAfly31jXXMGEzn3jDAgMBAAGjggKVMIICkTAdBgNVHQ4EFgQU+2UZY2E3
a50sMXh7Tt8imA2011AwHwYDVR0jBBgwFoAU9JSW+V35WIgb9LfpcuUbbzylnfow
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUFCQTg0LzcyQzEwNDVDMDUx
RjExRjBBQkZERDUzRUM0RjlBRTAyLzlKU1ctVjM1V0lnYjlMZnBjdVViYnp5bG5m
by5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvOUpTVy1WMzVXSWdiOUxmcGN1VWJienlsbmZvLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw
C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB
QkE4NC83MkMxMDQ1QzA1MUYxMUYwQUJGREQ1M0VDNEY5QUUwMi83OEI5MkQ3NjA1
MkUxMUYwQTlDREZEN0FDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v
cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEAMsXOTANBgkqhkiG9w0BAQsFAAOCAQEAJBS1tZFXD1rt6SKy
RqffOICTZKLXw3d36wsBRN88KvyANsUcVAT2k9U9MM89fhlkB1KZszKwOIJdRX7O
+27phUYhPmiA3Dh1DgOv9phHugBUWiiFwWOERkGfySUwSsWTJQRiWtw0+RfQVWwX
shnFRbL8ercs1NkaSu/iqSrQYh4Hhl0oN0nNf3bTjNrpNxD1uxxCgVW9pXrAuXNA
m1HQC1TSk1VNAUgxqRKHVrIVh72z6ptpeF1wtsivTw6pPn4IQ8jOeL7lLKbzJLFR
wB72e6MzeJCI9jOWxMgUDkbhXp9bv6v4GstZODVbkmhPwq/N1ptE629XCKNiCcEU
bp/8YQ==
-----END CERTIFICATE-----
Generated at Fri Apr 11 06:00:57 2025 by rpki-client