Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91AD8CB/328ED1541D8B11E29049BCE508B02CD2/673DC29606B011EFA665703AC4F9AE02.roa
File: 673DC29606B011EFA665703AC4F9AE02.roa (raw, json)
Hash identifier: F5Zy7dXCYPL9clQFpPmuH37XP7Qhuqmf+NBAd1W/CM8=
Subject key identifier: 41:AB:50:19:1E:22:42:04:A2:15:55:1D:69:F7:D6:16:B2:E7:70:46
Certificate issuer: /CN=A91AD8CB/serialNumber=E02DC43AF8ADF8D1DB2E74E4A6C28EF96155BF15
Certificate serial: 3458
Authority key identifier: E0:2D:C4:3A:F8:AD:F8:D1:DB:2E:74:E4:A6:C2:8E:F9:61:55:BF:15
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4C3EOvit-NHbLnTkpsKO-WFVvxU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91AD8CB/328ED1541D8B11E29049BCE508B02CD2/673DC29606B011EFA665703AC4F9AE02.roa
Signing time: Wed 29 Jan 2025 08:53:23 +0000
ROA not before: Wed 29 Jan 2025 08:53:23 +0000
ROA not after: Tue 30 Dec 2025 00:00:00 +0000
asID: 17559
IP address blocks: 43.224.60.0/22 maxlen: 22
103.80.40.0/22 maxlen: 22
103.80.40.0/24 maxlen: 24
103.80.43.0/24 maxlen: 24
202.68.169.0/24 maxlen: 24
2406:7300::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91AD8CB/328ED1541D8B11E29049BCE508B02CD2/4C3EOvit-NHbLnTkpsKO-WFVvxU.crl
rsync://rpki.apnic.net/member_repository/A91AD8CB/328ED1541D8B11E29049BCE508B02CD2/4C3EOvit-NHbLnTkpsKO-WFVvxU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4C3EOvit-NHbLnTkpsKO-WFVvxU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 17 Apr 2025 14:26:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13400 (0x3458)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91AD8CB
Validity
Not Before: Jan 29 08:53:23 2025 GMT
Not After : Dec 30 00:00:00 2025 GMT
Subject: CN=6799ec83-4f0b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:c6:67:41:ca:b7:f8:f5:51:74:d8:8b:c4:95:
64:c0:86:40:aa:47:42:15:b8:02:a3:62:88:87:bf:
dd:f3:56:f5:f4:a7:7a:b5:95:d9:24:88:66:4c:f9:
04:78:7d:84:00:f0:e0:f7:1a:b5:4d:10:9e:dc:dc:
99:26:1d:a2:47:bf:84:63:c1:a2:ca:d6:04:93:f7:
d7:8d:dc:3d:8f:03:d3:ae:2d:3d:8b:71:c3:5f:3c:
72:c4:79:f7:5e:ae:c3:3d:39:fb:ca:96:4f:2e:54:
c5:93:da:ba:09:aa:1c:0c:30:65:3d:67:15:1f:b0:
ea:80:e8:41:cb:10:b6:47:34:18:d0:33:bd:f8:3d:
9e:f4:0a:20:56:b9:25:ba:74:17:ee:b6:e2:89:84:
ee:de:15:12:c0:28:23:c7:c3:10:b4:1f:14:cb:0e:
ad:69:09:28:0d:fb:44:3c:6b:3b:70:e1:c4:53:45:
44:7a:33:e3:6c:39:6d:bf:f8:97:8c:03:96:09:03:
02:cd:1d:46:5b:d9:53:7c:d8:df:a8:83:2f:06:f5:
e8:17:48:cd:2d:d1:93:77:52:74:8f:18:a4:6f:65:
46:88:1f:78:06:e2:80:37:df:ea:1c:34:5d:28:33:
b4:00:c0:64:0f:26:e0:b2:64:ee:db:42:d6:b8:5f:
fc:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:AB:50:19:1E:22:42:04:A2:15:55:1D:69:F7:D6:16:B2:E7:70:46
X509v3 Authority Key Identifier:
keyid:E0:2D:C4:3A:F8:AD:F8:D1:DB:2E:74:E4:A6:C2:8E:F9:61:55:BF:15
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91AD8CB/328ED1541D8B11E29049BCE508B02CD2/4C3EOvit-NHbLnTkpsKO-WFVvxU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4C3EOvit-NHbLnTkpsKO-WFVvxU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AD8CB/328ED1541D8B11E29049BCE508B02CD2/673DC29606B011EFA665703AC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
43.224.60.0/22
103.80.40.0/22
202.68.169.0/24
IPv6:
2406:7300::/32
Signature Algorithm: sha256WithRSAEncryption
56:e0:06:f5:63:7b:cf:d1:d1:99:65:e1:3a:b7:7a:9d:d0:84:
8f:f0:de:5e:23:79:41:79:e5:cd:b2:35:29:b5:82:86:f9:c8:
07:3a:66:57:39:19:4f:8c:6f:43:fe:d4:a6:86:72:12:5a:4c:
ad:0e:81:28:4c:5a:40:51:17:13:43:6d:fc:58:22:78:d0:0f:
21:2e:18:fc:e0:90:33:dc:2d:95:a1:d1:35:4d:5f:07:be:f2:
36:8b:35:5a:3b:6f:d7:10:cd:a8:dc:d8:66:11:94:94:29:d5:
6c:d4:05:3c:3b:9d:ed:ba:4b:f3:69:75:be:ac:e1:ca:60:fb:
ce:83:72:ad:fb:c2:cd:3a:66:79:c5:a5:6a:c1:8b:b3:c6:1c:
59:be:0d:c9:42:7c:71:6f:cc:a5:53:7a:0e:b8:9f:fe:be:7e:
46:29:5b:e8:bf:35:57:37:ca:a9:41:01:35:ea:44:fd:2d:d2:
6a:32:cc:24:3a:d4:f9:1d:ff:22:e3:58:6f:b6:51:97:fe:25:
f0:82:e7:f5:14:f0:17:35:b9:b3:21:c1:da:2e:bc:32:57:09:
95:d8:bc:1b:aa:cc:84:bb:74:08:a3:b4:6c:15:fb:63:52:ac:
05:a1:08:95:b7:36:90:a9:66:29:a2:60:a9:47:84:b5:bb:1d:
97:b0:c8:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 22:56:15 2025 by rpki-client