Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C6550/8400954ACEC411ED8A83FB11C4F9AE02/005C56227B2411EEBB6FC444C4F9AE02.roa
File: 005C56227B2411EEBB6FC444C4F9AE02.roa (raw, json)
Hash identifier: T0JzURgbPQAyxXByhNfsj9TRUNcqqPprlp5/NvrciCE=
Subject key identifier: F5:CF:E0:58:E5:C0:0F:21:21:14:A3:7B:B0:39:B3:03:CD:95:58:D8
Certificate issuer: /CN=A91C6550/serialNumber=456EEA0692C6A4F26F53D2D237D1CB4DCD783305
Certificate serial: 0149
Authority key identifier: 45:6E:EA:06:92:C6:A4:F2:6F:53:D2:D2:37:D1:CB:4D:CD:78:33:05
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RW7qBpLGpPJvU9LSN9HLTc14MwU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C6550/8400954ACEC411ED8A83FB11C4F9AE02/005C56227B2411EEBB6FC444C4F9AE02.roa
Signing time: Mon 03 Jun 2024 06:55:25 +0000
ROA not before: Mon 03 Jun 2024 06:55:25 +0000
ROA not after: Wed 30 Jul 2025 00:00:00 +0000
asID: 399641
IP address blocks: 125.62.78.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C6550/8400954ACEC411ED8A83FB11C4F9AE02/RW7qBpLGpPJvU9LSN9HLTc14MwU.crl
rsync://rpki.apnic.net/member_repository/A91C6550/8400954ACEC411ED8A83FB11C4F9AE02/RW7qBpLGpPJvU9LSN9HLTc14MwU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RW7qBpLGpPJvU9LSN9HLTc14MwU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 20 Apr 2025 02:38:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 329 (0x149)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C6550, serialNumber=456EEA0692C6A4F26F53D2D237D1CB4DCD783305
Validity
Not Before: Jun 3 06:55:25 2024 GMT
Not After : Jul 30 00:00:00 2025 GMT
Subject: CN=665d68dd-797c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:41:3d:c2:98:cb:65:60:1b:90:9b:2d:0d:21:
89:a9:9b:5a:1b:2e:47:1d:82:3c:6b:a7:b6:68:c7:
8f:bb:f9:b1:61:a3:38:d2:26:eb:a8:ca:76:ea:61:
eb:4d:bd:24:c6:57:c3:39:76:06:6f:05:c2:23:85:
da:2e:fa:8e:31:44:f4:59:ef:a9:c1:82:60:2e:11:
6d:62:58:9f:05:45:c3:24:33:f7:4f:34:72:af:53:
08:e0:8d:14:f5:50:96:5d:1e:75:03:7d:21:c1:e0:
e7:28:25:00:33:5f:89:cb:91:c9:72:6c:dd:a5:94:
15:3c:21:3b:85:d6:71:fa:fe:22:33:af:a2:d5:4b:
93:d7:15:2f:30:5f:14:81:49:15:7d:7c:6e:11:bd:
62:f7:b2:7b:f0:78:8f:1b:6a:bf:a2:4e:f3:32:e0:
ca:9a:bf:0c:80:41:bc:2f:80:ed:15:4b:73:ce:ed:
80:49:b5:e2:a7:12:81:92:75:67:0c:b3:78:67:b6:
1f:a9:de:b7:fe:cc:80:09:38:04:6a:b9:67:62:56:
c8:fd:c4:25:e6:88:9f:fe:87:48:cd:cf:b1:a3:18:
c7:28:4a:9a:54:4d:22:ad:73:34:b1:03:cb:ea:b8:
bc:33:e1:c5:9c:21:0e:a6:bf:59:54:3e:99:be:41:
c2:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:CF:E0:58:E5:C0:0F:21:21:14:A3:7B:B0:39:B3:03:CD:95:58:D8
X509v3 Authority Key Identifier:
keyid:45:6E:EA:06:92:C6:A4:F2:6F:53:D2:D2:37:D1:CB:4D:CD:78:33:05
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C6550/8400954ACEC411ED8A83FB11C4F9AE02/RW7qBpLGpPJvU9LSN9HLTc14MwU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RW7qBpLGpPJvU9LSN9HLTc14MwU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C6550/8400954ACEC411ED8A83FB11C4F9AE02/005C56227B2411EEBB6FC444C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
125.62.78.0/24
Signature Algorithm: sha256WithRSAEncryption
24:d6:fe:32:8b:6f:3b:ee:4f:21:98:f1:40:02:40:7a:2e:4c:
10:19:f9:c0:46:cd:b2:67:63:a2:34:5a:c1:5a:84:8f:3c:7d:
b9:22:b2:4c:9a:0a:b3:8e:01:2d:77:98:6b:38:9b:df:5d:52:
1b:58:0e:4a:13:98:77:70:41:d5:88:f3:a0:89:4b:61:d2:0b:
9e:4f:34:86:02:b4:82:56:44:3d:ef:db:3b:ed:00:bb:33:af:
7d:8c:55:19:1d:12:31:37:2a:cd:2f:11:aa:a9:52:29:0b:2d:
9d:92:2c:e6:29:c1:40:bf:29:e0:7f:a1:21:a1:d2:65:7b:4b:
0a:15:4d:eb:06:06:d5:0a:88:d5:26:79:89:6a:b1:a1:af:3d:
6d:72:49:73:49:f9:94:f1:da:65:34:81:ed:8a:c2:f0:a4:83:
37:92:df:1b:e5:a4:af:fe:1f:4a:96:01:c1:a7:ea:b4:34:d4:
9f:6c:ad:ac:e3:bc:47:f6:45:c2:67:a7:b2:0e:fb:00:e2:5a:
74:d2:aa:77:e1:cc:18:17:9b:45:ba:be:fa:44:e0:d0:74:bc:
62:c1:25:85:0e:de:fd:3e:71:42:94:b9:51:e5:54:34:d5:e7:
90:af:98:18:43:e5:f1:55:72:d6:82:a0:54:e0:f0:9a:93:4b:
52:29:e4:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 09:54:38 2025 by rpki-client