Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B4DC7/F3F1020EBB1011ECB675EF51C4F9AE02/9ABED502176711EFA0260C6DC4F9AE02.roa
File: 9ABED502176711EFA0260C6DC4F9AE02.roa (raw, json)
Hash identifier: vsntEPAhq1q52SAuxi87DOT8T6ZFM5p3hlzlxYIzgx0=
Subject key identifier: 29:EC:40:3E:22:E0:88:A4:E3:4B:78:3D:3D:2A:59:FB:8C:D6:44:35
Certificate issuer: /CN=A91B4DC7/serialNumber=B88911178068D575DFDDF84940CABEAF451C8C2B
Certificate serial: 031A
Authority key identifier: B8:89:11:17:80:68:D5:75:DF:DD:F8:49:40:CA:BE:AF:45:1C:8C:2B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uIkRF4Bo1XXf3fhJQMq-r0UcjCs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B4DC7/F3F1020EBB1011ECB675EF51C4F9AE02/9ABED502176711EFA0260C6DC4F9AE02.roa
Signing time: Wed 15 Jan 2025 00:53:58 +0000
ROA not before: Wed 15 Jan 2025 00:53:58 +0000
ROA not after: Mon 02 Mar 2026 00:00:00 +0000
asID: 135341
IP address blocks: 103.177.138.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B4DC7/F3F1020EBB1011ECB675EF51C4F9AE02/uIkRF4Bo1XXf3fhJQMq-r0UcjCs.crl
rsync://rpki.apnic.net/member_repository/A91B4DC7/F3F1020EBB1011ECB675EF51C4F9AE02/uIkRF4Bo1XXf3fhJQMq-r0UcjCs.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uIkRF4Bo1XXf3fhJQMq-r0UcjCs.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 16 Apr 2025 00:47:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 794 (0x31a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B4DC7
Validity
Not Before: Jan 15 00:53:58 2025 GMT
Not After : Mar 2 00:00:00 2026 GMT
Subject: CN=67870726-4c4c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:3c:c0:f7:bc:60:88:d8:b4:ae:0d:eb:46:ec:
39:e7:a8:da:d3:7c:88:2a:9b:37:6d:c0:b0:dc:b8:
37:a9:1a:12:b3:4c:71:42:71:0e:1e:37:53:48:96:
61:14:1e:01:b0:9d:83:0b:f8:7a:08:51:09:18:23:
62:38:04:32:6e:8d:73:e7:03:1c:7a:35:13:b2:50:
46:27:02:ed:4d:2e:7f:98:55:62:bc:39:7b:8c:35:
72:d0:00:2a:07:18:a2:40:ad:06:60:27:d6:c7:5b:
2f:84:dd:63:43:79:fb:de:d8:97:b7:a4:39:b1:a9:
d7:d6:11:06:8c:67:7b:0c:ea:94:8c:db:50:20:6d:
7d:f0:f4:de:aa:61:61:11:9a:e5:c2:b7:1f:7d:29:
ee:00:31:d0:3f:ad:66:e4:12:7d:e1:5d:73:1f:c0:
c8:2e:7d:3f:52:dd:36:65:a0:c5:58:ad:5f:9b:75:
9f:fe:83:3a:b9:a9:db:43:56:28:0e:1e:1f:76:8a:
11:85:fa:5a:fe:f7:14:44:a4:b8:fd:76:1b:60:2f:
ac:a9:87:b5:04:f4:5c:15:0f:41:4a:af:9d:61:95:
06:4d:fe:67:8a:2c:83:9e:60:60:62:6e:92:6d:7e:
d7:be:86:e3:e3:99:8e:22:5f:5d:90:51:b7:51:0d:
c1:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:EC:40:3E:22:E0:88:A4:E3:4B:78:3D:3D:2A:59:FB:8C:D6:44:35
X509v3 Authority Key Identifier:
keyid:B8:89:11:17:80:68:D5:75:DF:DD:F8:49:40:CA:BE:AF:45:1C:8C:2B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B4DC7/F3F1020EBB1011ECB675EF51C4F9AE02/uIkRF4Bo1XXf3fhJQMq-r0UcjCs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uIkRF4Bo1XXf3fhJQMq-r0UcjCs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B4DC7/F3F1020EBB1011ECB675EF51C4F9AE02/9ABED502176711EFA0260C6DC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.177.138.0/24
Signature Algorithm: sha256WithRSAEncryption
51:fa:cc:47:74:58:d8:44:5e:9f:50:b6:6e:04:6b:af:38:2c:
53:d3:56:37:48:e9:25:6b:96:42:e5:4b:a0:16:e5:70:ae:ff:
9a:e4:0f:83:72:b7:94:fe:75:24:ea:6e:e8:f8:5e:d3:1d:4d:
db:04:8e:54:13:39:82:a4:b6:2c:c1:73:07:a0:61:f1:6a:43:
72:31:8d:d1:d0:80:85:0a:01:5f:b6:1b:eb:88:ce:cb:34:f1:
c8:3b:8b:71:cb:9e:6c:0e:36:c9:d9:83:6c:ae:a2:22:ad:fb:
e9:2f:47:a7:0f:38:60:a3:cc:c3:51:e1:47:c7:8a:53:91:f3:
95:3b:0d:f7:da:db:98:b5:fe:af:02:a1:3e:f5:27:77:46:bc:
07:28:79:0e:fa:b3:30:a4:f0:ab:bd:6e:2e:81:32:c0:e5:2a:
c4:a0:26:c7:54:ac:50:21:20:e5:2f:aa:eb:11:ef:0c:18:86:
69:3e:fa:b5:0d:89:c1:94:6b:4d:2f:94:ad:c0:8e:a8:46:07:
a3:6e:53:13:cb:b3:1c:32:bd:c4:de:13:a3:8d:99:3b:30:ac:
33:99:de:9b:c4:29:e7:19:20:9d:ba:f3:ac:83:c2:66:a3:c2:
94:6d:53:90:61:c1:c9:d0:83:7b:75:e0:c4:94:ae:00:1d:74:
70:30:4a:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 13:59:11 2025 by rpki-client