Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91CFFA0/1D66D486D8CB11E9BAE24D21C4F9AE02/3949DB48056711F09B0C9329C4F9AE02.roa
File: 3949DB48056711F09B0C9329C4F9AE02.roa (raw, json)
Hash identifier: U4MBST0cKb6RFa7OBRmsAZWClvdETmVq86pgqwAZx3A=
Subject key identifier: 46:F9:B4:77:4B:AD:17:BB:F9:E7:50:28:6A:84:60:12:3E:77:74:A0
Certificate issuer: /CN=A91CFFA0/serialNumber=ADD9418F0F9B55F3B7376A093DB11DBAD3AEFEC8
Certificate serial: 0EE5
Authority key identifier: AD:D9:41:8F:0F:9B:55:F3:B7:37:6A:09:3D:B1:1D:BA:D3:AE:FE:C8
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rdlBjw-bVfO3N2oJPbEdutOu_sg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91CFFA0/1D66D486D8CB11E9BAE24D21C4F9AE02/3949DB48056711F09B0C9329C4F9AE02.roa
Signing time: Thu 20 Mar 2025 08:42:15 +0000
ROA not before: Thu 20 Mar 2025 08:42:15 +0000
ROA not after: Tue 31 Mar 2026 00:00:00 +0000
asID: 800
IP address blocks: 125.252.79.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91CFFA0/1D66D486D8CB11E9BAE24D21C4F9AE02/rdlBjw-bVfO3N2oJPbEdutOu_sg.crl
rsync://rpki.apnic.net/member_repository/A91CFFA0/1D66D486D8CB11E9BAE24D21C4F9AE02/rdlBjw-bVfO3N2oJPbEdutOu_sg.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rdlBjw-bVfO3N2oJPbEdutOu_sg.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 17 Apr 2025 00:57:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3813 (0xee5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91CFFA0
Validity
Not Before: Mar 20 08:42:15 2025 GMT
Not After : Mar 31 00:00:00 2026 GMT
Subject: CN=67dbd4e7-2548
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:e7:dc:7e:54:d4:44:8e:56:96:70:60:7b:2e:
ec:2a:1c:61:c3:b6:62:55:ef:5b:67:6a:99:49:59:
ff:7c:74:fb:2c:f2:66:55:f6:5b:80:ee:a7:50:3d:
19:02:60:4f:0e:31:74:16:76:22:8b:d3:40:49:6e:
d5:15:39:4d:22:18:eb:28:4d:3e:69:36:69:78:77:
df:68:29:7e:96:c8:2d:09:ab:3e:3d:27:8e:9e:19:
0c:33:d4:9d:16:59:a0:47:26:7d:4d:d4:0a:20:a6:
41:ba:d3:51:9e:12:4b:25:5c:2d:4a:c0:9b:f3:d1:
31:0b:3b:42:a0:a0:c7:c5:39:b5:b9:37:b3:6e:e6:
cd:9e:c1:cc:65:d0:bd:41:50:e1:4f:26:d9:d2:64:
f5:44:d1:c6:4b:89:bf:27:11:d8:bb:6a:bf:42:c5:
9c:ca:ba:57:ad:01:c8:25:f3:66:5f:4f:08:df:ad:
e9:38:d0:0e:14:6f:20:5a:6e:9c:ca:b7:5b:90:e1:
a9:44:a6:75:d8:8b:fd:c7:4e:81:cc:c1:73:4f:70:
4f:49:75:4f:10:2b:9a:0b:7c:ed:d7:c2:9a:eb:5f:
96:e0:3c:70:46:0f:5f:eb:0d:a0:be:cd:6e:23:c4:
ea:5f:f1:a0:8a:cc:3a:1c:63:5d:ca:ab:d8:02:ad:
a9:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:F9:B4:77:4B:AD:17:BB:F9:E7:50:28:6A:84:60:12:3E:77:74:A0
X509v3 Authority Key Identifier:
keyid:AD:D9:41:8F:0F:9B:55:F3:B7:37:6A:09:3D:B1:1D:BA:D3:AE:FE:C8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91CFFA0/1D66D486D8CB11E9BAE24D21C4F9AE02/rdlBjw-bVfO3N2oJPbEdutOu_sg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rdlBjw-bVfO3N2oJPbEdutOu_sg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CFFA0/1D66D486D8CB11E9BAE24D21C4F9AE02/3949DB48056711F09B0C9329C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
125.252.79.0/24
Signature Algorithm: sha256WithRSAEncryption
75:cf:0f:7a:f6:3a:7f:a6:a7:b4:99:27:ee:2f:c9:dd:e7:8c:
ad:38:58:bc:ee:f9:48:75:3d:89:1a:55:24:50:d0:f2:40:91:
0d:9b:1e:af:dd:16:6a:3e:b3:ef:ee:85:65:10:6b:21:87:fe:
85:fe:d9:d3:e7:03:87:a2:a6:21:8e:de:95:99:35:7e:6b:bb:
eb:20:23:39:29:aa:a2:9f:4a:bf:f9:4e:83:9b:91:85:34:ed:
3c:e8:31:88:bb:6c:33:1e:97:6a:7f:1b:05:58:ce:6b:b8:91:
0d:67:95:e0:9a:20:87:58:79:c4:91:b7:e0:0c:9f:52:e9:6f:
ab:0d:42:4b:3b:6d:58:9a:26:0c:bc:7d:b1:81:19:b7:d7:49:
c8:ab:7d:82:f2:5d:ae:68:6c:65:80:ed:e0:57:ff:f4:11:ed:
88:9d:a5:eb:42:09:f5:5a:56:26:e0:50:a4:a3:0f:94:3b:bd:
81:c5:af:cd:03:f8:d5:ba:c6:84:c4:49:80:c6:fc:f6:5c:60:
22:f0:18:c3:b6:7a:b2:8a:35:00:2a:2c:20:04:f9:f0:cf:04:
a3:a9:56:42:52:d8:8f:4d:fe:fb:d1:0e:92:d7:b1:5d:41:d7:
e9:c2:1d:b7:fb:06:d7:c6:7d:2e:82:81:a4:01:18:e3:5b:9b:
ce:ca:38:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 05:26:17 2025 by rpki-client