Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C05E4/78A4D446054611EE95ED7A83C4F9AE02/91BD6980054A11EEAC0B1484C4F9AE02.roa
File: 91BD6980054A11EEAC0B1484C4F9AE02.roa (raw, json)
Hash identifier: HWAIluxxCPjUFF387lhsldxyFYHcPlPFrZn5pFrYP+8=
Subject key identifier: DA:7A:16:38:8F:4E:CC:5B:DB:C1:27:AE:82:C7:16:21:69:CE:87:EA
Certificate issuer: /CN=A91C05E4/serialNumber=4D406D4EB184D66A4E2DE900FD4C7AEA5C9C7159
Certificate serial: 0126
Authority key identifier: 4D:40:6D:4E:B1:84:D6:6A:4E:2D:E9:00:FD:4C:7A:EA:5C:9C:71:59
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TUBtTrGE1mpOLekA_Ux66lyccVk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C05E4/78A4D446054611EE95ED7A83C4F9AE02/91BD6980054A11EEAC0B1484C4F9AE02.roa
Signing time: Fri 27 Dec 2024 03:16:43 +0000
ROA not before: Fri 27 Dec 2024 03:16:43 +0000
ROA not after: Sat 31 Jan 2026 00:00:00 +0000
asID: 141361
IP address blocks: 103.157.154.0/24 maxlen: 24
103.157.155.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C05E4/78A4D446054611EE95ED7A83C4F9AE02/TUBtTrGE1mpOLekA_Ux66lyccVk.crl
rsync://rpki.apnic.net/member_repository/A91C05E4/78A4D446054611EE95ED7A83C4F9AE02/TUBtTrGE1mpOLekA_Ux66lyccVk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TUBtTrGE1mpOLekA_Ux66lyccVk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 02 May 2025 03:05:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 294 (0x126)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C05E4, serialNumber=4D406D4EB184D66A4E2DE900FD4C7AEA5C9C7159
Validity
Not Before: Dec 27 03:16:43 2024 GMT
Not After : Jan 31 00:00:00 2026 GMT
Subject: CN=676e1c1b-72c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:11:29:59:e1:dd:c3:5f:71:27:e7:95:6a:ea:
ce:67:d1:b6:d9:cf:2a:c2:95:33:e1:e1:8c:d3:02:
92:c6:7a:61:7b:54:7a:01:c7:09:37:d9:9e:44:20:
2c:89:cd:3a:71:01:1b:0d:b7:64:ec:b8:ef:43:bb:
b8:5e:6c:98:ff:30:9e:e5:1c:48:81:5d:01:23:08:
12:bb:42:9f:69:8d:57:d5:47:9e:25:93:cd:c1:b2:
aa:38:27:0d:e8:5b:15:e0:50:cb:8a:b1:62:ac:21:
72:ec:a4:81:25:68:e2:f0:67:8c:ef:a6:51:e6:7d:
13:a2:0c:df:5b:52:99:48:c4:67:a2:30:d2:f9:bc:
b3:9f:fb:d8:dc:2a:47:c2:f7:b0:52:c6:85:7f:45:
ee:71:77:49:b7:4c:22:e1:3b:24:86:61:ec:6d:d2:
a2:4f:32:44:bf:fc:c4:8c:58:a0:63:59:81:96:cf:
78:d5:f9:6c:ed:5f:27:cf:d4:34:55:de:c2:e2:ba:
8d:5f:8c:f9:41:f9:7b:5e:34:d0:4a:13:28:88:2e:
d7:0e:23:2a:ed:f0:e7:4d:18:69:f8:fc:db:c5:9d:
e4:45:73:11:37:9e:b3:1b:bd:46:08:f3:69:de:f5:
5d:72:6f:4a:14:dc:6d:fa:f4:bc:39:dd:9e:13:c9:
b3:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:7A:16:38:8F:4E:CC:5B:DB:C1:27:AE:82:C7:16:21:69:CE:87:EA
X509v3 Authority Key Identifier:
keyid:4D:40:6D:4E:B1:84:D6:6A:4E:2D:E9:00:FD:4C:7A:EA:5C:9C:71:59
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C05E4/78A4D446054611EE95ED7A83C4F9AE02/TUBtTrGE1mpOLekA_Ux66lyccVk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TUBtTrGE1mpOLekA_Ux66lyccVk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C05E4/78A4D446054611EE95ED7A83C4F9AE02/91BD6980054A11EEAC0B1484C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.157.154.0/23
Signature Algorithm: sha256WithRSAEncryption
1f:e0:88:8a:25:29:24:6d:b1:f7:4a:1e:be:7d:c2:30:2b:39:
4c:d9:6f:f2:83:bd:7c:98:03:86:b0:90:3e:36:8b:0e:44:27:
92:a4:14:5c:82:c7:b9:11:e8:c5:16:dc:37:ac:69:a7:65:b0:
a8:37:41:79:34:75:d7:2b:36:32:9b:8f:c2:07:66:5a:81:9d:
81:a8:79:40:33:b6:66:c6:d1:18:d9:6b:38:ba:bd:23:f6:61:
bd:15:92:02:c5:5e:c0:b7:f8:c3:c9:01:76:6f:7c:fe:8d:ad:
89:17:67:fc:51:11:35:40:65:36:df:c4:6e:71:3b:5e:5c:b4:
51:df:d4:e0:db:e8:c4:6c:84:4b:87:95:05:d3:ad:40:69:a5:
de:7e:0b:16:0d:55:38:ed:01:05:6f:8a:2b:07:0c:b9:97:85:
ad:b1:bc:d0:74:dd:7f:df:26:37:2f:25:26:b7:1b:e7:e3:39:
4f:cf:af:07:62:7d:40:24:85:e2:32:ca:14:00:0f:c9:ca:15:
ab:9d:39:25:5f:a2:25:78:57:fb:2e:53:e9:fc:50:7f:1f:92:
57:80:d5:51:85:ab:68:e8:5b:7c:a4:bb:c7:4b:4d:fe:f0:fe:
44:39:13:75:ee:0c:ce:ef:c6:7f:4a:af:dd:7c:f9:52:c3:03:
ef:5a:b0:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 21:12:26 2025 by rpki-client