Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91DEA56/684667F4BF3A11EA94AE4E7CC4F9AE02/65877060BF3C11EAAF328582C4F9AE02.roa
File: 65877060BF3C11EAAF328582C4F9AE02.roa (raw, json)
Hash identifier: 8Ve/Cl0hRolwdHsLuG0VDkNM1FdRmkmQ9YowmP0sm+M=
Subject key identifier: 51:E1:87:F5:DC:0B:1A:B9:14:9D:25:6D:34:1B:5A:29:B7:D4:27:08
Certificate issuer: /CN=A91DEA56/serialNumber=BBE49FCB41F5026A35BF6C93B91FDFF3C88C736E
Certificate serial: 0850
Authority key identifier: BB:E4:9F:CB:41:F5:02:6A:35:BF:6C:93:B9:1F:DF:F3:C8:8C:73:6E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u-Sfy0H1Amo1v2yTuR_f88iMc24.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91DEA56/684667F4BF3A11EA94AE4E7CC4F9AE02/65877060BF3C11EAAF328582C4F9AE02.roa
Signing time: Sat 04 Jan 2025 20:29:19 +0000
ROA not before: Sat 04 Jan 2025 20:29:19 +0000
ROA not after: Tue 31 Mar 2026 00:00:00 +0000
asID: 132827
IP address blocks: 43.248.40.0/22 maxlen: 22
103.16.36.0/22 maxlen: 22
103.23.220.0/24 maxlen: 24
103.23.223.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91DEA56/684667F4BF3A11EA94AE4E7CC4F9AE02/u-Sfy0H1Amo1v2yTuR_f88iMc24.crl
rsync://rpki.apnic.net/member_repository/A91DEA56/684667F4BF3A11EA94AE4E7CC4F9AE02/u-Sfy0H1Amo1v2yTuR_f88iMc24.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u-Sfy0H1Amo1v2yTuR_f88iMc24.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 19 Apr 2025 20:24:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2128 (0x850)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91DEA56, serialNumber=BBE49FCB41F5026A35BF6C93B91FDFF3C88C736E
Validity
Not Before: Jan 4 20:29:19 2025 GMT
Not After : Mar 31 00:00:00 2026 GMT
Subject: CN=67799a1f-10a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:94:71:fc:5d:dc:2f:9d:35:1c:73:b0:da:08:
88:d7:03:01:b4:0b:14:70:3c:93:bf:7b:46:a5:45:
a2:0c:ef:e9:1f:24:fb:74:41:3b:cd:b1:ef:ee:5f:
43:7a:8f:f1:82:bf:ed:f1:75:4b:dd:8e:a6:e0:f1:
7f:6e:7c:22:2d:57:17:87:4f:e5:c4:d3:74:b9:0d:
a0:77:b1:77:1d:47:8b:76:44:61:36:c9:13:20:2e:
77:1e:7c:b0:c0:d4:db:c5:3a:77:5b:63:99:fb:c5:
e3:df:00:81:ba:dd:eb:2a:e8:71:07:94:93:14:16:
57:ae:c1:15:0a:17:10:a2:53:50:3e:1e:ef:87:a2:
2d:dc:c8:a4:85:cc:25:fa:be:21:ba:cc:d8:79:b5:
d0:fa:a0:ab:41:4a:cd:b1:ec:cb:3e:9f:21:fa:41:
46:ed:57:ae:c6:b3:fe:bc:ec:6d:41:a1:63:00:c8:
92:98:ee:be:cf:cd:5a:17:2a:cc:41:14:ed:4c:6e:
cf:88:61:e0:0d:78:19:a1:5f:0b:12:30:db:ec:cf:
14:14:be:ef:15:f0:dd:2a:34:cf:15:46:e9:4e:3e:
a3:49:0c:3e:39:0d:45:35:5b:94:72:43:bc:c7:06:
9d:fc:ad:cd:49:6e:5a:4e:5a:79:b7:a7:54:33:5d:
e8:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:E1:87:F5:DC:0B:1A:B9:14:9D:25:6D:34:1B:5A:29:B7:D4:27:08
X509v3 Authority Key Identifier:
keyid:BB:E4:9F:CB:41:F5:02:6A:35:BF:6C:93:B9:1F:DF:F3:C8:8C:73:6E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91DEA56/684667F4BF3A11EA94AE4E7CC4F9AE02/u-Sfy0H1Amo1v2yTuR_f88iMc24.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u-Sfy0H1Amo1v2yTuR_f88iMc24.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DEA56/684667F4BF3A11EA94AE4E7CC4F9AE02/65877060BF3C11EAAF328582C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
43.248.40.0/22
103.16.36.0/22
103.23.220.0/24
103.23.223.0/24
Signature Algorithm: sha256WithRSAEncryption
98:cd:88:75:20:43:59:d9:1a:33:2b:67:dc:ff:ae:54:03:76:
ed:ae:7e:1b:ab:22:5c:8f:8a:7e:fe:dd:03:30:b4:cc:c9:50:
a2:57:38:44:0a:59:08:f8:b8:14:09:33:d2:8e:61:ff:71:0a:
db:9a:07:07:06:19:d4:d5:6a:e0:f4:e1:88:4a:b2:1f:24:9a:
a2:0e:8d:93:ab:7d:f4:c7:4c:e7:12:5b:11:7f:d4:a4:ed:5d:
bf:6a:ff:1f:2e:08:4b:88:6b:c7:20:ab:ed:20:b5:a8:ee:af:
1f:a1:26:73:be:86:99:08:cc:31:e8:66:ea:77:84:49:18:ae:
0e:b5:b9:16:db:43:c4:63:c8:e3:ae:2e:0a:af:9e:a2:db:5c:
39:ba:04:33:3f:e9:61:f8:26:5e:cc:37:17:31:b1:09:a4:17:
39:80:7b:4d:9b:52:e7:9e:e3:b9:41:2b:8a:99:7d:d6:01:c2:
ee:63:55:11:b5:53:d8:5a:a7:bb:f8:95:72:27:3f:87:90:f6:
17:31:f2:a5:c8:d9:91:61:4c:3a:77:39:f5:ba:c2:d4:9b:21:
03:ba:b5:92:c8:14:5c:8e:f6:a3:2c:f5:d6:2a:e3:10:63:60:
20:20:6a:c7:e5:f9:b5:e2:31:33:09:2e:8d:06:79:fc:2e:81:
7e:e6:18:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 00:38:45 2025 by rpki-client