Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E7561/A26E06E0054C11ECBDB4FE46C4F9AE02/52564FC4836B11EE960BCA6FC4F9AE02.roa
File: 52564FC4836B11EE960BCA6FC4F9AE02.roa (raw, json)
Hash identifier: 1VJie0nCCZ3IBg900OIXPZucge83OX3RKmMvS9NKEBI=
Subject key identifier: 74:44:60:2D:86:18:48:2C:3E:5C:59:43:01:EB:F7:50:8A:33:8F:38
Certificate issuer: /CN=A91E7561/serialNumber=25BC7D4DE77BD01B3D191587696E5AFDD8CECD04
Certificate serial: 0556
Authority key identifier: 25:BC:7D:4D:E7:7B:D0:1B:3D:19:15:87:69:6E:5A:FD:D8:CE:CD:04
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Jbx9Ted70Bs9GRWHaW5a_djOzQQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E7561/A26E06E0054C11ECBDB4FE46C4F9AE02/52564FC4836B11EE960BCA6FC4F9AE02.roa
Signing time: Tue 03 Sep 2024 01:15:33 +0000
ROA not before: Tue 03 Sep 2024 01:15:33 +0000
ROA not after: Fri 31 Oct 2025 00:00:00 +0000
asID: 55451
IP address blocks: 110.164.167.0/24 maxlen: 24
2403:6200:792c::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E7561/A26E06E0054C11ECBDB4FE46C4F9AE02/Jbx9Ted70Bs9GRWHaW5a_djOzQQ.crl
rsync://rpki.apnic.net/member_repository/A91E7561/A26E06E0054C11ECBDB4FE46C4F9AE02/Jbx9Ted70Bs9GRWHaW5a_djOzQQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Jbx9Ted70Bs9GRWHaW5a_djOzQQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 15 Apr 2025 23:24:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1366 (0x556)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E7561
Validity
Not Before: Sep 3 01:15:33 2024 GMT
Not After : Oct 31 00:00:00 2025 GMT
Subject: CN=66d66335-e61f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:7f:95:1d:81:0f:eb:e5:d2:22:32:b1:59:12:
5f:37:32:a4:32:08:04:10:a6:6f:de:10:0f:d5:74:
de:10:d3:23:a8:09:75:1a:57:dc:17:fe:23:95:e7:
71:d4:66:4e:33:cd:07:37:a9:4d:a5:8f:df:1f:8d:
4a:56:27:f0:64:ae:1a:af:f5:57:48:7b:67:a3:84:
92:43:ef:61:0e:db:92:be:1e:82:00:32:fe:93:00:
2c:02:64:52:a2:2d:1f:fd:7a:84:72:79:58:be:b8:
2b:29:14:68:c8:cb:16:33:71:f0:39:bb:17:19:e9:
3d:7b:e5:9e:1a:83:ce:9b:79:c6:e4:ff:71:61:c6:
3b:c2:60:01:0e:e0:0d:0a:dc:a8:72:84:5b:e7:e7:
01:c7:b9:84:60:b7:82:24:b9:bb:4d:29:bf:a6:b7:
af:15:60:5b:70:d0:b5:06:96:ef:05:77:41:ec:d8:
18:3d:81:de:96:65:d5:ad:a4:12:16:4a:f0:12:4e:
7d:94:9e:2a:87:7e:e3:5c:0e:2f:ca:67:8f:a0:d7:
fe:e7:3a:90:7e:ab:fb:1f:c0:ce:10:47:40:b9:cc:
f8:91:aa:4a:a3:19:ae:6c:55:12:1f:78:42:a4:23:
bd:f7:28:e8:ef:b5:74:5f:d2:ee:b0:02:aa:94:1e:
d5:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:44:60:2D:86:18:48:2C:3E:5C:59:43:01:EB:F7:50:8A:33:8F:38
X509v3 Authority Key Identifier:
keyid:25:BC:7D:4D:E7:7B:D0:1B:3D:19:15:87:69:6E:5A:FD:D8:CE:CD:04
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E7561/A26E06E0054C11ECBDB4FE46C4F9AE02/Jbx9Ted70Bs9GRWHaW5a_djOzQQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Jbx9Ted70Bs9GRWHaW5a_djOzQQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E7561/A26E06E0054C11ECBDB4FE46C4F9AE02/52564FC4836B11EE960BCA6FC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
110.164.167.0/24
IPv6:
2403:6200:792c::/48
Signature Algorithm: sha256WithRSAEncryption
16:00:e3:7c:f8:c3:47:86:69:08:59:ad:2f:37:8b:d8:bf:64:
90:2a:40:b3:08:5c:2a:e9:8d:13:9f:73:1c:e6:49:d1:43:f0:
6b:f3:1d:8f:b6:f4:5e:37:83:10:97:e4:ab:35:d0:e9:37:7c:
37:b1:7a:db:a4:3e:32:9b:d9:3d:3b:62:37:39:60:c7:8d:e4:
38:71:1f:52:1f:16:37:2e:33:5c:68:8d:0f:ff:e7:53:e9:b8:
1f:66:40:3b:a2:68:ab:ac:26:f8:fa:d0:15:d9:d7:21:9a:02:
d1:0e:00:48:61:3f:75:b0:78:f1:aa:96:c1:9a:08:2d:28:99:
87:e8:b8:df:ae:74:e3:12:60:79:16:12:f7:bb:7b:73:99:a0:
36:cb:f1:41:dd:b9:2a:e7:a1:33:c2:1c:e5:d1:b1:d9:e0:9e:
aa:38:0e:31:b6:ff:bc:5e:00:cd:aa:67:2b:1e:a8:97:07:c2:
6d:1c:c0:8f:a4:c6:eb:78:b0:ce:65:e2:6d:12:c4:25:94:ea:
2b:bd:04:ff:47:24:52:f7:49:ba:67:93:4b:b3:37:67:ed:c8:
ea:cc:05:ed:a5:ff:89:31:8f:01:e8:c8:a9:c9:7d:48:39:9e:
72:62:07:8d:f8:19:a6:5f:07:c9:6c:10:0d:eb:61:24:d9:b0:
2e:3a:cd:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 12:17:12 2025 by rpki-client