Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91ADA19/013CD7D0ED4F11EA93C8143DC4F9AE02/F95379BE124411EB9E551E38C4F9AE02.roa
File: F95379BE124411EB9E551E38C4F9AE02.roa (raw, json)
Hash identifier: 8/9NmjJSzWwLgBSh9ZIA8mU7QUTPCv3Je8e4MkPOAoc=
Subject key identifier: 65:4F:9E:88:A7:7E:22:59:B8:42:D6:BC:1F:70:79:7C:46:F0:BD:35
Certificate issuer: /CN=A91ADA19/serialNumber=E80F57816EB806885DC5EB1EC2E1AD54A2F9F2DF
Certificate serial: 0732
Authority key identifier: E8:0F:57:81:6E:B8:06:88:5D:C5:EB:1E:C2:E1:AD:54:A2:F9:F2:DF
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6A9XgW64BohdxesewuGtVKL58t8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91ADA19/013CD7D0ED4F11EA93C8143DC4F9AE02/F95379BE124411EB9E551E38C4F9AE02.roa
Signing time: Tue 14 May 2024 23:02:27 +0000
ROA not before: Tue 14 May 2024 23:02:27 +0000
ROA not after: Wed 28 May 2025 00:00:00 +0000
asID: 140103
IP address blocks: 103.148.148.0/24 maxlen: 24
103.148.149.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91ADA19/013CD7D0ED4F11EA93C8143DC4F9AE02/6A9XgW64BohdxesewuGtVKL58t8.crl
rsync://rpki.apnic.net/member_repository/A91ADA19/013CD7D0ED4F11EA93C8143DC4F9AE02/6A9XgW64BohdxesewuGtVKL58t8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6A9XgW64BohdxesewuGtVKL58t8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 15 Apr 2025 20:52:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1842 (0x732)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91ADA19
Validity
Not Before: May 14 23:02:27 2024 GMT
Not After : May 28 00:00:00 2025 GMT
Subject: CN=6643ed83-2a77
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:47:5b:1a:3e:c5:be:5a:65:82:34:78:0a:d6:
cd:5f:86:31:96:46:b2:dc:e2:d0:74:ac:51:5b:80:
e2:51:92:04:70:37:49:57:65:08:16:21:a9:02:de:
f6:02:5a:de:a8:b8:cc:87:f2:f2:6d:23:15:f0:73:
d6:bf:ff:ef:d4:5e:85:cd:a0:fb:95:42:ff:05:5a:
92:38:3c:0b:ae:bc:b9:ed:f4:38:a4:fd:ab:6d:c5:
7d:06:6d:80:a3:d1:c5:53:3f:56:84:07:6a:91:05:
41:91:06:b8:37:df:22:15:24:16:10:13:20:a6:79:
8d:29:c9:e6:7f:fa:c7:22:a5:ba:70:a2:30:f7:d2:
c8:94:3a:d9:86:77:b4:37:e0:71:29:03:af:37:e2:
c6:24:1d:40:85:71:06:a9:fc:0a:7c:71:e0:d2:1d:
df:7c:30:c3:1c:8b:42:34:b8:19:b4:7f:96:14:79:
a3:91:cc:41:37:22:f6:51:c4:5b:d5:18:bd:f4:c7:
22:f4:bb:67:f9:ef:25:0d:38:3f:50:a4:48:a9:63:
8f:55:01:ee:b8:87:26:fc:d6:e5:67:77:64:df:4f:
c7:fa:da:2f:0f:4c:b5:ad:31:99:cc:c5:15:4d:ff:
a5:95:e4:b8:4c:2e:84:d2:2c:3b:4f:c3:2c:4f:c9:
d7:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:4F:9E:88:A7:7E:22:59:B8:42:D6:BC:1F:70:79:7C:46:F0:BD:35
X509v3 Authority Key Identifier:
keyid:E8:0F:57:81:6E:B8:06:88:5D:C5:EB:1E:C2:E1:AD:54:A2:F9:F2:DF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91ADA19/013CD7D0ED4F11EA93C8143DC4F9AE02/6A9XgW64BohdxesewuGtVKL58t8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6A9XgW64BohdxesewuGtVKL58t8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91ADA19/013CD7D0ED4F11EA93C8143DC4F9AE02/F95379BE124411EB9E551E38C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.148.148.0/23
Signature Algorithm: sha256WithRSAEncryption
cd:88:7d:dc:4a:4b:5c:4e:0b:5f:ca:e1:c8:2c:0f:31:6e:60:
ba:66:7d:c7:3d:c5:9e:2c:97:fe:17:96:d7:65:06:3d:72:9e:
51:4d:f3:2b:a3:fe:22:5c:4f:f5:39:25:5e:03:61:af:5a:68:
12:af:db:5d:06:df:5c:e9:4e:ca:13:e4:e6:af:b4:66:75:94:
8a:a3:67:9e:12:42:4e:41:82:a7:eb:bc:e4:b5:91:e1:03:1c:
c5:c1:d1:ff:85:81:3a:71:c4:b2:db:9b:41:6a:ea:89:45:52:
19:60:17:0b:cc:94:fb:59:a2:5c:23:57:d9:a8:0b:59:d4:e4:
45:14:32:66:06:73:79:b1:6b:41:1b:dc:22:ed:ac:d8:51:1f:
73:21:51:ca:29:6a:3c:aa:0c:c8:72:03:ea:d7:9a:0f:e1:db:
99:b3:f0:0c:52:24:a6:5c:92:8e:2e:8c:ce:07:c3:a3:62:f6:
c4:8b:a6:de:58:37:db:02:b3:c3:8e:ce:1b:d6:38:9f:9a:09:
0c:21:05:cf:f8:3b:01:e8:c5:aa:a5:7a:3d:60:60:c8:f5:e4:
41:dc:a5:99:bf:0c:5e:5a:d9:5d:d3:c8:34:f6:8b:07:c7:92:
0a:28:74:61:73:c8:86:2a:66:3e:e3:36:25:26:45:9d:93:48:
ac:3c:0b:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 10:27:22 2025 by rpki-client