Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91CE959/AA4C77ECED7611EEAD871A11C4F9AE02/03BA6992ED7711EE9998FC11C4F9AE02.roa
File: 03BA6992ED7711EE9998FC11C4F9AE02.roa (raw, json)
Hash identifier: NecAjd+CZeOPqXXjjBIs9rEIjFJr1slo8jl+q1zHuq8=
Subject key identifier: D9:17:71:5E:5E:68:55:FF:1B:53:7E:56:AA:E7:9F:CD:0C:B9:79:7B
Certificate issuer: /CN=A91CE959/serialNumber=D6EC22A73A59D2AA955997470279C662D11088F2
Certificate serial: B8
Authority key identifier: D6:EC:22:A7:3A:59:D2:AA:95:59:97:47:02:79:C6:62:D1:10:88:F2
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1uwipzpZ0qqVWZdHAnnGYtEQiPI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91CE959/AA4C77ECED7611EEAD871A11C4F9AE02/03BA6992ED7711EE9998FC11C4F9AE02.roa
Signing time: Fri 07 Mar 2025 05:21:43 +0000
ROA not before: Fri 07 Mar 2025 05:21:43 +0000
ROA not after: Fri 01 May 2026 00:00:00 +0000
asID: 9311
IP address blocks: 202.58.20.0/24 maxlen: 24
202.58.22.0/24 maxlen: 24
202.58.26.0/24 maxlen: 24
202.58.27.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91CE959/AA4C77ECED7611EEAD871A11C4F9AE02/1uwipzpZ0qqVWZdHAnnGYtEQiPI.crl
rsync://rpki.apnic.net/member_repository/A91CE959/AA4C77ECED7611EEAD871A11C4F9AE02/1uwipzpZ0qqVWZdHAnnGYtEQiPI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1uwipzpZ0qqVWZdHAnnGYtEQiPI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 16 Apr 2025 04:43:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 184 (0xb8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91CE959
Validity
Not Before: Mar 7 05:21:43 2025 GMT
Not After : May 1 00:00:00 2026 GMT
Subject: CN=67ca8266-656b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:9a:d2:ca:b9:b7:bd:85:83:f9:24:f9:06:ee:
73:76:09:9c:8a:82:18:0a:38:f2:4c:99:86:b9:d9:
47:df:96:4a:55:b1:51:62:87:83:2b:1e:fb:72:d9:
9a:17:47:72:60:b8:ae:f8:4f:9b:9b:02:3e:47:57:
e7:dc:db:6f:fc:30:94:bd:31:30:68:17:76:c0:21:
6c:ad:7f:6f:61:70:28:99:33:d9:0b:11:60:0c:72:
e3:a3:82:aa:3c:b7:7b:5a:65:de:67:0b:49:3a:e4:
10:66:e7:e1:40:44:12:e6:0a:d6:a8:7f:26:91:9b:
bb:96:c3:82:e7:8e:8e:52:81:96:50:09:1d:6a:2e:
70:75:b0:ba:33:a4:27:40:84:7e:83:80:34:b3:7e:
82:99:62:36:a8:19:0b:27:2e:11:17:9f:23:7d:ae:
22:cd:48:5f:c0:64:17:fc:75:9d:8d:dd:21:91:30:
1c:c2:02:95:78:7e:93:60:db:12:76:5d:bc:df:05:
60:ee:ae:a1:44:90:fb:a9:64:97:36:36:bc:b0:1f:
34:21:2c:26:7c:33:ae:49:bc:89:04:30:e3:4d:21:
c2:03:26:11:5e:80:7a:38:0c:ca:44:69:0e:1b:99:
49:72:9c:2c:a0:c3:e9:1f:0a:84:30:83:aa:a3:8b:
10:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:17:71:5E:5E:68:55:FF:1B:53:7E:56:AA:E7:9F:CD:0C:B9:79:7B
X509v3 Authority Key Identifier:
keyid:D6:EC:22:A7:3A:59:D2:AA:95:59:97:47:02:79:C6:62:D1:10:88:F2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91CE959/AA4C77ECED7611EEAD871A11C4F9AE02/1uwipzpZ0qqVWZdHAnnGYtEQiPI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1uwipzpZ0qqVWZdHAnnGYtEQiPI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CE959/AA4C77ECED7611EEAD871A11C4F9AE02/03BA6992ED7711EE9998FC11C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
202.58.20.0/24
202.58.22.0/24
202.58.26.0/23
Signature Algorithm: sha256WithRSAEncryption
42:1b:bd:66:66:26:99:ea:84:bf:19:b7:4a:2b:6a:df:c3:0a:
d0:3c:0e:b7:7f:1d:75:6e:3a:e0:9a:cf:9a:68:62:05:3a:dc:
98:c7:fc:f7:7e:d0:09:a6:a1:71:7d:6c:6a:66:06:f4:49:30:
85:dc:b9:3a:ca:8d:cd:50:d6:87:82:cb:a4:9b:d9:16:20:51:
c2:72:60:c9:09:43:88:bb:11:b1:36:a2:9c:ad:ff:6d:d0:73:
f3:2c:26:8e:8b:6e:a7:78:47:ef:84:22:93:7a:51:ba:98:f6:
da:b6:df:09:06:4d:ef:8c:6c:a6:16:ba:c4:fb:de:3b:06:0c:
49:c8:ec:26:24:14:ea:d0:c2:82:46:6a:6d:37:eb:d8:b2:5a:
53:19:8c:61:64:cb:d0:3a:6e:14:6b:b3:ea:51:7a:a2:de:03:
2f:08:50:83:ff:79:0c:7b:62:47:93:45:b5:10:e8:0a:5e:0b:
cf:cf:f3:48:bd:2b:96:63:c6:f2:be:ef:22:f9:67:5b:f4:4e:
f9:43:35:8a:d2:e5:29:ac:5f:fa:42:33:6a:39:6e:31:77:a4:
df:a2:06:ec:ad:58:84:4d:11:6c:db:89:f2:ac:53:3a:ad:7a:
bf:56:25:d4:36:2d:0e:02:17:8f:1d:6e:fe:b2:f2:9e:07:9f:
fb:d0:a5:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 19:38:16 2025 by rpki-client