Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91EA198/993F2090ABC411E6BD6BED14C4F9AE02/AB549D62125711EF94D14874C4F9AE02.roa
File: AB549D62125711EF94D14874C4F9AE02.roa (raw, json)
Hash identifier: Q15x41gulDIattvR5E6BjIkzM60ANGTWvCg3RJWxG8c=
Subject key identifier: 9B:C3:7D:63:B7:77:90:83:02:48:5F:13:83:37:E8:63:F2:49:65:FE
Certificate issuer: /CN=A91EA198/serialNumber=9E1C3531D0045EA389B68CFF9286A08FBCBBD8BD
Certificate serial: 1E86
Authority key identifier: 9E:1C:35:31:D0:04:5E:A3:89:B6:8C:FF:92:86:A0:8F:BC:BB:D8:BD
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nhw1MdAEXqOJtoz_koagj7y72L0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91EA198/993F2090ABC411E6BD6BED14C4F9AE02/AB549D62125711EF94D14874C4F9AE02.roa
Signing time: Wed 22 Jan 2025 08:09:24 +0000
ROA not before: Wed 22 Jan 2025 08:09:24 +0000
ROA not after: Mon 02 Mar 2026 00:00:00 +0000
asID: 45102
IP address blocks: 14.1.112.0/22 maxlen: 24
43.0.0.0/9 maxlen: 15
43.91.0.0/16 maxlen: 24
43.96.0.0/16 maxlen: 24
43.97.0.0/16 maxlen: 24
43.98.0.0/16 maxlen: 24
43.99.0.0/16 maxlen: 24
43.100.0.0/16 maxlen: 24
43.101.0.0/16 maxlen: 24
43.102.0.0/16 maxlen: 24
43.103.0.0/16 maxlen: 24
43.104.0.0/16 maxlen: 24
43.105.0.0/16 maxlen: 24
43.106.0.0/16 maxlen: 24
43.107.0.0/16 maxlen: 16
43.107.0.0/16 maxlen: 24
43.108.0.0/16 maxlen: 24
43.109.0.0/16 maxlen: 24
43.110.0.0/16 maxlen: 24
43.111.0.0/16 maxlen: 16
43.111.0.0/16 maxlen: 24
43.112.0.0/16 maxlen: 16
43.112.0.0/16 maxlen: 24
43.113.0.0/16 maxlen: 24
43.114.0.0/16 maxlen: 24
43.115.0.0/16 maxlen: 24
43.116.0.0/16 maxlen: 24
43.117.0.0/16 maxlen: 24
43.118.0.0/16 maxlen: 24
43.119.0.0/16 maxlen: 24
43.120.0.0/16 maxlen: 24
43.121.0.0/16 maxlen: 24
43.122.0.0/16 maxlen: 24
43.123.0.0/16 maxlen: 24
43.124.0.0/16 maxlen: 24
43.125.0.0/16 maxlen: 24
43.126.0.0/16 maxlen: 24
43.127.0.0/16 maxlen: 24
103.206.40.0/22 maxlen: 24
2404:2280::/32 maxlen: 48
240b:4000::/22 maxlen: 31
240b:4000::/32 maxlen: 40
240b:4001::/32 maxlen: 40
240b:4002::/32 maxlen: 48
240b:4003::/32 maxlen: 48
240b:4004::/32 maxlen: 48
240b:4005::/32 maxlen: 48
240b:4006::/32 maxlen: 48
240b:4007::/32 maxlen: 48
240b:4008::/32 maxlen: 48
240b:4009::/32 maxlen: 48
240b:400a::/32 maxlen: 48
240b:400b::/32 maxlen: 48
240b:400c::/32 maxlen: 48
240b:400d::/32 maxlen: 48
240b:400e::/32 maxlen: 48
240b:400f::/32 maxlen: 48
240b:4010::/32 maxlen: 48
240b:4011::/32 maxlen: 48
240b:4012::/32 maxlen: 48
240b:4013::/32 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91EA198/993F2090ABC411E6BD6BED14C4F9AE02/nhw1MdAEXqOJtoz_koagj7y72L0.crl
rsync://rpki.apnic.net/member_repository/A91EA198/993F2090ABC411E6BD6BED14C4F9AE02/nhw1MdAEXqOJtoz_koagj7y72L0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nhw1MdAEXqOJtoz_koagj7y72L0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 19 Apr 2025 16:05:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7814 (0x1e86)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91EA198, serialNumber=9E1C3531D0045EA389B68CFF9286A08FBCBBD8BD
Validity
Not Before: Jan 22 08:09:24 2025 GMT
Not After : Mar 2 00:00:00 2026 GMT
Subject: CN=6790a7b3-c6d4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:18:94:ad:61:ed:d4:a1:18:6e:03:16:66:59:
59:1d:41:2a:6c:7d:8a:bb:42:17:3c:3f:07:4d:0b:
20:fd:8c:be:c2:15:3f:31:3f:c9:6a:ff:ca:b3:b0:
9d:a5:97:ff:8e:0f:e4:97:16:1e:8c:bf:f4:ba:d2:
77:d8:34:ee:3b:08:ca:74:71:45:48:9a:87:ae:83:
bd:41:04:dc:82:96:8b:a5:6b:04:7f:6f:67:76:26:
5e:c2:0f:75:07:49:01:7c:81:5b:34:86:b7:a9:fe:
0e:ba:35:b4:54:03:ed:9f:34:16:7b:fa:dc:4b:b0:
36:78:80:93:d6:f8:82:cb:1b:5c:d1:59:ad:4d:0b:
2c:e3:8a:fa:ba:ae:58:5a:f3:ef:79:86:a3:d5:91:
88:31:41:81:2a:64:3d:4a:5a:de:ef:09:31:6b:e0:
87:15:7f:9d:da:22:c7:be:3f:f6:4b:86:d3:03:56:
89:18:e4:fd:d6:ef:da:f6:3f:9b:3e:3f:10:36:27:
5c:83:ac:fd:8c:6c:17:a3:59:c5:38:fc:ec:8f:c9:
5c:43:28:9d:8e:80:68:ac:e9:ec:b9:e6:6d:cb:17:
f8:e9:c7:d5:29:37:03:b2:66:84:23:f1:8b:02:53:
11:99:03:19:39:18:53:a0:90:7f:71:df:d8:48:5c:
38:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:C3:7D:63:B7:77:90:83:02:48:5F:13:83:37:E8:63:F2:49:65:FE
X509v3 Authority Key Identifier:
keyid:9E:1C:35:31:D0:04:5E:A3:89:B6:8C:FF:92:86:A0:8F:BC:BB:D8:BD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91EA198/993F2090ABC411E6BD6BED14C4F9AE02/nhw1MdAEXqOJtoz_koagj7y72L0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nhw1MdAEXqOJtoz_koagj7y72L0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EA198/993F2090ABC411E6BD6BED14C4F9AE02/AB549D62125711EF94D14874C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
14.1.112.0/22
43.0.0.0/9
103.206.40.0/22
IPv6:
2404:2280::/32
240b:4000::/22
Signature Algorithm: sha256WithRSAEncryption
6b:8e:b2:4b:19:cb:87:ad:58:b0:ca:86:72:f2:ca:0c:07:c7:
d7:b0:bd:54:73:bd:bf:9a:23:8a:76:db:c5:62:41:cc:fa:de:
05:ed:b9:79:83:cf:ae:95:72:85:80:55:36:d4:f3:09:cd:33:
54:a5:b1:72:12:ae:c0:51:49:ac:22:7a:c3:72:86:00:35:f9:
a9:64:91:13:99:a4:da:54:68:a5:47:9d:63:a5:a6:3f:8e:ff:
c8:6e:b4:ec:50:33:3c:1d:27:63:7e:d5:1f:04:41:86:db:4c:
74:e5:64:2f:8d:4c:32:47:12:fe:b3:8f:94:72:f1:84:c2:7c:
cb:60:0d:cc:7c:b9:9f:48:54:ea:f6:99:35:01:1f:34:0f:d0:
e9:a5:a1:af:f2:50:67:04:77:19:63:c8:79:cc:ed:bc:a5:2e:
90:34:a9:6e:ce:04:9a:db:8c:fd:63:b4:9a:c3:4a:24:19:db:
fc:7b:72:47:85:bf:5c:40:46:d3:d9:83:8e:95:99:aa:ff:69:
63:84:85:7e:4a:89:9f:b6:69:06:f4:d5:97:5f:8d:d2:e0:f2:
70:e1:ca:10:fd:65:a5:26:15:3f:ce:9c:ce:8f:95:5f:b6:03:
e1:cb:88:fb:83:a6:87:ff:05:cc:2e:ec:3f:65:f7:32:58:c9:
f0:da:34:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 05:10:50 2025 by rpki-client