Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C911D/7B13B3846C0311EB8844784BC4F9AE02/E36FB86EC09A11ECB9687037C4F9AE02.roa
File: E36FB86EC09A11ECB9687037C4F9AE02.roa (raw, json)
Hash identifier: cBDX19uQMFj0cdU0V9QHK5iyyiKM2aSeWWHKGqvh0Oo=
Subject key identifier: 76:E7:02:C7:3D:19:A2:94:39:3E:D9:66:3C:58:56:E6:48:6D:0E:31
Certificate issuer: /CN=A91C911D/serialNumber=475B62A5F233ED05AC72D8781234E109BF3A908C
Certificate serial: 06C7
Authority key identifier: 47:5B:62:A5:F2:33:ED:05:AC:72:D8:78:12:34:E1:09:BF:3A:90:8C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R1tipfIz7QWscth4EjThCb86kIw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C911D/7B13B3846C0311EB8844784BC4F9AE02/E36FB86EC09A11ECB9687037C4F9AE02.roa
Signing time: Wed 02 Apr 2025 22:23:57 +0000
ROA not before: Wed 02 Apr 2025 22:23:57 +0000
ROA not after: Sun 31 Aug 2025 00:00:00 +0000
asID: 133736
IP address blocks: 43.245.132.0/22 maxlen: 22
43.245.132.0/24 maxlen: 24
43.245.133.0/24 maxlen: 24
43.245.134.0/24 maxlen: 24
43.245.135.0/24 maxlen: 24
103.31.88.0/22 maxlen: 22
103.31.88.0/24 maxlen: 24
103.31.89.0/24 maxlen: 24
103.31.90.0/24 maxlen: 24
103.31.91.0/24 maxlen: 24
103.47.0.0/24 maxlen: 24
103.55.132.0/24 maxlen: 24
103.55.134.0/23 maxlen: 24
103.61.128.0/24 maxlen: 24
103.61.130.0/24 maxlen: 24
103.79.172.0/22 maxlen: 22
144.48.232.0/22 maxlen: 22
144.48.232.0/24 maxlen: 24
144.48.233.0/24 maxlen: 24
144.48.234.0/24 maxlen: 24
144.48.235.0/24 maxlen: 24
202.179.144.0/22 maxlen: 22
202.179.144.0/24 maxlen: 24
202.179.145.0/24 maxlen: 24
202.179.146.0/24 maxlen: 24
202.179.147.0/24 maxlen: 24
203.166.216.0/24 maxlen: 24
203.189.124.0/22 maxlen: 22
203.189.124.0/24 maxlen: 24
203.189.125.0/24 maxlen: 24
203.189.126.0/24 maxlen: 24
203.189.127.0/24 maxlen: 24
221.120.164.0/22 maxlen: 22
221.120.164.0/24 maxlen: 24
221.120.165.0/24 maxlen: 24
221.120.166.0/24 maxlen: 24
221.120.167.0/24 maxlen: 24
2401:8140::/32 maxlen: 32
2401:8140::/35 maxlen: 35
2401:8140:2000::/35 maxlen: 35
2401:8140:4000::/35 maxlen: 35
2401:8140:6000::/35 maxlen: 35
2401:8140:8000::/35 maxlen: 35
2401:8140:a000::/35 maxlen: 35
2401:8140:c000::/35 maxlen: 35
2401:8140:e000::/35 maxlen: 35
2402:4c80::/32 maxlen: 32
2402:4c80::/35 maxlen: 35
2402:4c80:2000::/35 maxlen: 35
2402:4c80:4000::/35 maxlen: 35
2402:4c80:6000::/35 maxlen: 35
2402:4c80:8000::/35 maxlen: 35
2402:4c80:a000::/35 maxlen: 35
2402:4c80:c000::/35 maxlen: 35
2402:4c80:e000::/35 maxlen: 35
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C911D/7B13B3846C0311EB8844784BC4F9AE02/R1tipfIz7QWscth4EjThCb86kIw.crl
rsync://rpki.apnic.net/member_repository/A91C911D/7B13B3846C0311EB8844784BC4F9AE02/R1tipfIz7QWscth4EjThCb86kIw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R1tipfIz7QWscth4EjThCb86kIw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 11 Apr 2025 22:25:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1735 (0x6c7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C911D
Validity
Not Before: Apr 2 22:23:57 2025 GMT
Not After : Aug 31 00:00:00 2025 GMT
Subject: CN=67edb8fc-9b4a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:a9:ae:2a:9f:82:42:8d:88:a5:fd:f6:e7:3e:
a8:d4:b8:3f:c0:66:b5:85:cf:4e:5f:40:0d:5f:19:
d7:df:9b:b0:4b:0f:49:bb:48:eb:62:2e:56:2a:ef:
84:b9:5c:13:e4:9c:e0:e5:b2:c6:24:4c:f4:7c:14:
bf:a6:fd:3a:b2:30:63:5e:79:d7:65:6c:a6:3d:1b:
28:98:60:98:67:42:27:c1:7e:38:30:0e:8c:02:c9:
b7:3c:e8:ca:ff:6c:dc:61:65:1b:43:0c:81:95:1f:
19:95:77:f0:0c:e6:9c:a5:db:69:e8:95:f4:ae:2c:
23:e8:87:05:59:29:85:3b:16:fd:96:11:2d:6b:d9:
67:27:c8:fa:be:fc:3d:ce:70:f0:21:e3:ba:bd:d7:
ea:a6:b9:52:4e:8f:8f:3d:08:87:33:42:4b:1e:b0:
28:e1:b3:73:10:7a:33:8f:ba:1d:af:d3:54:9a:52:
7b:9b:48:b1:73:af:36:2f:ae:28:f5:cb:fb:f6:87:
58:3e:14:46:a9:14:71:08:5d:63:89:98:87:ed:da:
24:8a:06:77:63:9e:5b:54:cd:a9:6f:80:70:83:25:
58:3f:25:13:a0:28:ad:e6:0e:1b:40:e5:aa:c7:4b:
0e:25:aa:1b:85:f8:19:40:de:0b:45:03:91:35:6e:
c9:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:E7:02:C7:3D:19:A2:94:39:3E:D9:66:3C:58:56:E6:48:6D:0E:31
X509v3 Authority Key Identifier:
keyid:47:5B:62:A5:F2:33:ED:05:AC:72:D8:78:12:34:E1:09:BF:3A:90:8C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C911D/7B13B3846C0311EB8844784BC4F9AE02/R1tipfIz7QWscth4EjThCb86kIw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R1tipfIz7QWscth4EjThCb86kIw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C911D/7B13B3846C0311EB8844784BC4F9AE02/E36FB86EC09A11ECB9687037C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
43.245.132.0/22
103.31.88.0/22
103.47.0.0/24
103.55.132.0/24
103.55.134.0/23
103.61.128.0/24
103.61.130.0/24
103.79.172.0/22
144.48.232.0/22
202.179.144.0/22
203.166.216.0/24
203.189.124.0/22
221.120.164.0/22
IPv6:
2401:8140::/32
2402:4c80::/32
Signature Algorithm: sha256WithRSAEncryption
5b:5d:a1:63:c8:bd:01:de:50:76:e9:65:6a:5f:28:c0:9f:37:
e2:a0:39:70:95:98:9e:82:94:dd:75:b1:e4:c0:df:a1:20:d8:
2f:77:9d:bb:27:7f:1b:e1:25:bd:96:ee:ce:9e:87:7f:8a:06:
16:16:a4:07:ed:b9:b2:e2:e7:fb:4b:a1:c7:60:88:d6:69:64:
2a:c0:ea:d7:76:de:11:86:f3:f4:9f:ff:ad:65:af:c6:a0:96:
c1:6f:15:84:ac:f7:8f:03:da:0b:ba:c0:2b:ad:ca:5c:17:ca:
16:35:2a:8e:c4:79:c1:5b:51:a5:81:51:81:d0:f0:18:ab:1c:
cf:be:1b:34:73:35:e9:f6:9e:f8:92:b7:d2:28:7a:5d:b8:cf:
e8:63:73:34:4e:81:e4:e3:9f:52:0d:0a:6c:30:6d:c8:e2:7d:
68:d9:5a:88:5f:e5:f6:52:21:2a:80:5b:45:16:2c:6e:73:0d:
c6:eb:6d:6e:36:ab:aa:b7:0f:85:2e:81:54:05:f7:75:6a:3a:
ec:9d:1b:fb:9c:6a:a8:15:e2:e5:5e:a9:89:d3:2c:a9:f3:ac:
af:30:45:5d:8a:c4:f3:b3:86:92:5d:04:2b:08:b7:0f:2f:b4:
e3:53:9c:90:01:a9:03:4f:dd:e8:49:c7:cf:72:cb:c5:31:2d:
f6:fe:63:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 12:47:32 2025 by rpki-client