Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91CC711/C7D1B0541EE311EF90D21234C4F9AE02/A7FC5DEE8D0411EFBD7A0057C4F9AE02.roa
File: A7FC5DEE8D0411EFBD7A0057C4F9AE02.roa (raw, json)
Hash identifier: TGsIq74Qma+U6c7Ey8qeEz04VjG5STVU5SpvAS46Q6U=
Subject key identifier: 86:E7:A5:B4:7C:CC:C4:C2:56:34:85:36:DE:4A:8A:4F:36:03:AA:38
Certificate issuer: /CN=A91CC711/serialNumber=E429D429E66B797B3D8A1CBE2491577ADC38A48E
Certificate serial: 9D
Authority key identifier: E4:29:D4:29:E6:6B:79:7B:3D:8A:1C:BE:24:91:57:7A:DC:38:A4:8E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5CnUKeZreXs9ihy-JJFXetw4pI4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91CC711/C7D1B0541EE311EF90D21234C4F9AE02/A7FC5DEE8D0411EFBD7A0057C4F9AE02.roa
Signing time: Fri 29 Nov 2024 05:28:27 +0000
ROA not before: Fri 29 Nov 2024 05:28:27 +0000
ROA not after: Sat 31 Jan 2026 00:00:00 +0000
asID: 38456
IP address blocks: 103.11.160.0/24 maxlen: 24
103.11.161.0/24 maxlen: 24
103.11.162.0/24 maxlen: 24
103.11.163.0/24 maxlen: 24
182.236.116.0/24 maxlen: 24
182.236.117.0/24 maxlen: 24
202.5.162.0/24 maxlen: 24
202.5.163.0/24 maxlen: 24
202.5.164.0/24 maxlen: 24
202.5.168.0/24 maxlen: 24
202.5.169.0/24 maxlen: 24
202.5.177.0/24 maxlen: 24
202.5.190.0/24 maxlen: 24
203.86.208.0/24 maxlen: 24
203.86.209.0/24 maxlen: 24
203.86.210.0/24 maxlen: 24
203.86.211.0/24 maxlen: 24
203.86.212.0/24 maxlen: 24
203.86.213.0/24 maxlen: 24
203.86.214.0/24 maxlen: 24
203.86.215.0/24 maxlen: 24
203.86.219.0/24 maxlen: 24
203.86.220.0/24 maxlen: 24
203.86.221.0/24 maxlen: 24
203.86.222.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91CC711/C7D1B0541EE311EF90D21234C4F9AE02/5CnUKeZreXs9ihy-JJFXetw4pI4.crl
rsync://rpki.apnic.net/member_repository/A91CC711/C7D1B0541EE311EF90D21234C4F9AE02/5CnUKeZreXs9ihy-JJFXetw4pI4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5CnUKeZreXs9ihy-JJFXetw4pI4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 10 Apr 2025 05:30:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 157 (0x9d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91CC711
Validity
Not Before: Nov 29 05:28:27 2024 GMT
Not After : Jan 31 00:00:00 2026 GMT
Subject: CN=674950fb-d83f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:bf:59:98:9f:54:75:3c:1d:aa:07:f6:b5:25:
e1:54:df:e2:ac:06:2e:8a:c8:50:7e:68:fb:38:e2:
71:fd:be:5f:ae:69:86:c3:ab:07:47:71:a2:ac:db:
d3:8c:5f:67:5a:f0:8a:90:ce:df:e3:0f:12:88:be:
40:63:9f:a0:cc:e5:77:45:04:42:b1:1f:c5:e8:49:
ad:45:ae:10:01:2e:b8:f6:39:99:9b:46:c1:19:a4:
30:fb:c1:70:a7:a8:75:47:d4:1c:e2:46:d2:74:4f:
f4:de:72:18:60:89:13:19:24:d3:33:a2:7e:59:4b:
a8:7d:03:ef:6b:ad:d2:0d:9a:95:ca:19:20:23:2a:
84:8e:0e:23:3c:0e:99:53:ed:75:63:f4:06:a4:46:
58:7a:5c:84:fa:60:5e:d1:30:65:cc:37:ef:0d:13:
5b:a5:cf:49:7b:1f:95:50:e2:7c:15:0c:4f:60:30:
63:2e:fb:2c:de:9c:92:53:f0:c9:27:15:d8:13:63:
0c:a5:0b:2b:62:09:b2:69:a4:dd:25:e2:a0:42:95:
86:01:4c:ea:cc:ca:70:13:41:5c:58:d7:ac:82:4b:
42:9c:e6:ce:f9:a3:e4:07:b9:22:38:ff:df:7f:90:
05:39:6c:a7:76:ea:fa:fe:34:96:44:bd:f3:0f:37:
ad:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:E7:A5:B4:7C:CC:C4:C2:56:34:85:36:DE:4A:8A:4F:36:03:AA:38
X509v3 Authority Key Identifier:
keyid:E4:29:D4:29:E6:6B:79:7B:3D:8A:1C:BE:24:91:57:7A:DC:38:A4:8E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91CC711/C7D1B0541EE311EF90D21234C4F9AE02/5CnUKeZreXs9ihy-JJFXetw4pI4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5CnUKeZreXs9ihy-JJFXetw4pI4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CC711/C7D1B0541EE311EF90D21234C4F9AE02/A7FC5DEE8D0411EFBD7A0057C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.11.160.0/22
182.236.116.0/23
202.5.162.0-202.5.164.255
202.5.168.0/23
202.5.177.0/24
202.5.190.0/24
203.86.208.0/21
203.86.219.0-203.86.222.255
Signature Algorithm: sha256WithRSAEncryption
63:51:5c:66:d7:ff:a1:e6:30:50:8a:ef:27:8c:8b:bc:35:72:
0c:84:07:50:2b:fe:dd:ae:28:60:0c:c1:cb:ec:61:e3:56:a0:
0c:2e:fc:40:7c:63:d6:79:1a:22:c0:1e:ed:1d:95:18:c2:27:
14:5e:d5:98:0a:54:91:62:ce:66:2c:4c:f7:2b:c9:e1:56:61:
83:8e:6d:91:9a:1b:ae:66:ab:19:03:f8:65:2a:bf:3a:53:57:
b7:15:ec:92:73:15:af:76:3e:db:f8:85:79:db:5d:ff:2e:bd:
1a:59:34:db:a5:92:90:a1:29:06:aa:57:eb:50:00:f4:a2:c0:
ed:69:5c:4e:02:6e:0b:96:d1:fa:b6:ec:83:bb:6a:e1:67:5a:
7a:f8:58:4d:5e:18:40:b1:99:6d:bf:4f:f3:45:40:f3:3c:04:
fe:48:28:41:7a:d6:7c:35:63:ce:24:f8:36:98:76:22:e4:a1:
c4:fe:48:7a:d1:4f:a0:c5:bb:fe:ff:83:16:3c:3d:b2:32:e5:
f0:86:40:32:b8:00:5e:3d:f1:bb:87:94:0d:26:dd:8e:e5:97:
ab:a4:d7:50:d9:06:8a:e7:be:96:e5:0f:d7:fb:37:17:70:d8:
5f:b0:81:b7:0f:94:61:cc:94:ab:24:80:69:f2:51:2b:15:87:
52:33:7e:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 04:40:07 2025 by rpki-client