Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6134/57B3E0BCC2A811EAA7918A2EC4F9AE02/90DB928C154011F0801A9022C4F9AE02.roa
File: 90DB928C154011F0801A9022C4F9AE02.roa (raw, json)
Hash identifier: FQ0iPvWs/wqIXkv7MYIyJV1KxELqYVLRx1j45Fb3EzA=
Subject key identifier: 3A:5E:47:2D:49:35:C2:C4:15:4F:D7:04:30:B1:EE:54:AC:73:4F:5B
Certificate issuer: /CN=A91E6134/serialNumber=9A73F1A919FBF46C872E38805B1650B5F88276D3
Certificate serial: 1006
Authority key identifier: 9A:73:F1:A9:19:FB:F4:6C:87:2E:38:80:5B:16:50:B5:F8:82:76:D3
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/mnPxqRn79GyHLjiAWxZQtfiCdtM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E6134/57B3E0BCC2A811EAA7918A2EC4F9AE02/90DB928C154011F0801A9022C4F9AE02.roa
Signing time: Thu 10 Apr 2025 12:08:18 +0000
ROA not before: Thu 10 Apr 2025 12:08:18 +0000
ROA not after: Wed 30 Jul 2025 00:00:00 +0000
asID: 138241
IP address blocks: 139.190.8.0/24 maxlen: 24
139.190.10.0/24 maxlen: 24
139.190.11.0/24 maxlen: 24
139.190.12.0/24 maxlen: 24
139.190.13.0/24 maxlen: 24
139.190.14.0/24 maxlen: 24
139.190.15.0/24 maxlen: 24
139.190.17.0/24 maxlen: 24
139.190.19.0/24 maxlen: 24
139.190.20.0/24 maxlen: 24
139.190.21.0/24 maxlen: 24
139.190.22.0/24 maxlen: 24
139.190.23.0/24 maxlen: 24
139.190.24.0/22 maxlen: 22
139.190.28.0/24 maxlen: 24
139.190.29.0/24 maxlen: 24
139.190.30.0/24 maxlen: 24
139.190.31.0/24 maxlen: 24
139.190.32.0/24 maxlen: 24
139.190.33.0/24 maxlen: 24
139.190.34.0/24 maxlen: 24
139.190.36.0/22 maxlen: 24
139.190.48.0/24 maxlen: 24
139.190.49.0/24 maxlen: 24
139.190.50.0/24 maxlen: 24
139.190.51.0/24 maxlen: 24
139.190.52.0/24 maxlen: 24
139.190.53.0/24 maxlen: 24
139.190.54.0/24 maxlen: 24
139.190.68.0/24 maxlen: 24
139.190.69.0/24 maxlen: 24
139.190.70.0/24 maxlen: 24
139.190.71.0/24 maxlen: 24
139.190.88.0/21 maxlen: 21
139.190.124.0/22 maxlen: 22
139.190.239.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E6134/57B3E0BCC2A811EAA7918A2EC4F9AE02/mnPxqRn79GyHLjiAWxZQtfiCdtM.crl
rsync://rpki.apnic.net/member_repository/A91E6134/57B3E0BCC2A811EAA7918A2EC4F9AE02/mnPxqRn79GyHLjiAWxZQtfiCdtM.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/mnPxqRn79GyHLjiAWxZQtfiCdtM.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 21 Apr 2025 20:32:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4102 (0x1006)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E6134, serialNumber=9A73F1A919FBF46C872E38805B1650B5F88276D3
Validity
Not Before: Apr 10 12:08:18 2025 GMT
Not After : Jul 30 00:00:00 2025 GMT
Subject: CN=67f7b4b1-6995
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:40:bb:5b:b5:3a:ca:2e:a7:17:34:11:90:66:
e3:51:67:34:35:93:ee:26:74:8e:99:e9:4d:1d:69:
98:f2:bb:07:90:ef:7e:03:1a:8f:4f:aa:53:c9:aa:
3e:d2:86:26:de:c1:c6:49:17:1e:bf:3f:cf:83:bd:
55:54:9c:11:57:8f:26:ae:a5:0b:0f:13:a9:fb:92:
5e:52:3c:27:1e:f6:54:ff:3b:3e:6f:4a:d6:c3:de:
6b:ec:66:16:88:c3:31:d6:1d:a5:ec:f4:5b:3b:3c:
b5:5a:4c:5c:0e:25:8a:49:d4:fb:59:a4:bd:12:f3:
0f:17:61:72:e6:c4:67:d7:ff:6d:76:11:e7:90:94:
3b:60:68:c2:e1:8e:73:85:08:23:09:03:20:aa:7a:
f3:6c:b1:08:62:9d:74:a4:51:ce:95:c0:93:e1:84:
4a:b9:dc:4b:e6:b3:9b:1c:9a:76:64:5c:ef:70:09:
f5:b0:15:d4:fb:42:11:37:fa:c7:c5:0e:b4:a0:0f:
2d:c6:d3:c5:7d:8f:3c:eb:45:bd:18:66:0e:ff:3a:
c8:6b:2b:5c:38:f8:61:25:4f:ee:f9:d4:59:07:e7:
7f:63:d5:f8:e4:3d:77:6a:5a:f7:b8:2f:48:05:3f:
39:40:50:0b:16:86:59:dd:15:5a:d4:34:9e:94:4e:
7e:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:5E:47:2D:49:35:C2:C4:15:4F:D7:04:30:B1:EE:54:AC:73:4F:5B
X509v3 Authority Key Identifier:
keyid:9A:73:F1:A9:19:FB:F4:6C:87:2E:38:80:5B:16:50:B5:F8:82:76:D3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E6134/57B3E0BCC2A811EAA7918A2EC4F9AE02/mnPxqRn79GyHLjiAWxZQtfiCdtM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/mnPxqRn79GyHLjiAWxZQtfiCdtM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6134/57B3E0BCC2A811EAA7918A2EC4F9AE02/90DB928C154011F0801A9022C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
139.190.8.0/24
139.190.10.0-139.190.15.255
139.190.17.0/24
139.190.19.0-139.190.34.255
139.190.36.0/22
139.190.48.0-139.190.54.255
139.190.68.0/22
139.190.88.0/21
139.190.124.0/22
139.190.239.0/24
Signature Algorithm: sha256WithRSAEncryption
ab:3e:53:ce:8f:91:60:10:16:d8:47:bc:64:66:4c:ad:40:cd:
ee:98:62:c5:9e:97:3b:f4:09:9c:be:fa:48:2e:eb:b1:53:94:
fc:2b:cd:06:05:5d:bc:fc:c6:bf:d6:ad:0f:1d:32:a1:80:08:
73:86:90:7f:37:d6:0f:e8:cf:ba:9f:13:7f:3d:78:94:8a:7b:
4a:0e:65:a9:33:79:a8:03:fe:01:bc:63:82:97:21:af:06:42:
a9:9e:21:29:e3:34:32:c4:3e:6d:95:9b:b0:d9:7e:62:ad:36:
cd:7e:c9:d2:c3:1c:4d:57:70:d4:a7:03:29:ad:ce:ee:e5:4e:
c7:5d:05:2c:c2:19:15:59:b7:5f:17:fe:3e:09:a9:59:77:ac:
60:65:6f:e8:10:f1:7c:37:87:28:18:67:70:22:96:54:55:5d:
00:29:5b:b3:57:93:69:75:c9:af:1f:12:1f:49:22:6c:23:34:
9d:09:c3:7e:a4:ad:22:7c:7a:52:5b:93:0c:a5:ea:68:d8:2b:
33:03:e9:8d:c3:a0:12:48:c5:c3:81:47:93:08:e7:38:5b:c7:
43:e8:fe:2b:0a:b0:16:21:d5:4d:11:e8:af:6e:ac:09:d5:73:
bf:91:68:9b:0d:3c:1f:1b:8b:65:7e:48:c5:31:0b:0f:94:25:
e6:77:b5:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 08:25:29 2025 by rpki-client