Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91EAE3D/97B6E0CE75DE11E8B704A246C4F9AE02/0351889A90C511EFBAE1BD70C4F9AE02.roa
File: 0351889A90C511EFBAE1BD70C4F9AE02.roa (raw, json)
Hash identifier: KkLYRb2fWAYBylaV1ZMgwdRHTaPjELImf+d59GtwC30=
Subject key identifier: A7:38:0B:D4:F5:C5:CF:BC:2A:17:FC:A6:4E:53:C4:03:EB:6F:7C:A0
Certificate issuer: /CN=A91EAE3D/serialNumber=C7269B124C420C55E29FB51D3C1B0D9D476CBD00
Certificate serial: 1895
Authority key identifier: C7:26:9B:12:4C:42:0C:55:E2:9F:B5:1D:3C:1B:0D:9D:47:6C:BD:00
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xyabEkxCDFXin7UdPBsNnUdsvQA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91EAE3D/97B6E0CE75DE11E8B704A246C4F9AE02/0351889A90C511EFBAE1BD70C4F9AE02.roa
Signing time: Tue 18 Feb 2025 17:35:30 +0000
ROA not before: Tue 18 Feb 2025 17:35:30 +0000
ROA not after: Fri 01 May 2026 00:00:00 +0000
asID: 38809
IP address blocks: 121.200.224.0/20 maxlen: 20
121.200.228.0/23 maxlen: 23
121.200.230.0/24 maxlen: 24
121.200.231.0/24 maxlen: 24
121.200.232.0/23 maxlen: 23
121.200.234.0/24 maxlen: 24
121.200.235.0/24 maxlen: 24
121.200.236.0/23 maxlen: 23
121.200.238.0/24 maxlen: 24
121.200.239.0/24 maxlen: 24
150.207.0.0/16 maxlen: 16
150.207.134.0/23 maxlen: 23
150.207.136.0/23 maxlen: 23
150.207.138.0/23 maxlen: 23
150.207.144.0/22 maxlen: 22
150.207.150.0/23 maxlen: 23
150.207.152.0/22 maxlen: 22
150.207.156.0/22 maxlen: 22
150.207.168.0/21 maxlen: 21
203.19.141.0/24 maxlen: 24
203.161.8.0/21 maxlen: 21
203.161.8.0/24 maxlen: 24
203.161.9.0/24 maxlen: 24
203.161.10.0/23 maxlen: 23
203.161.12.0/24 maxlen: 24
203.161.13.0/24 maxlen: 24
203.161.14.0/24 maxlen: 24
203.161.15.0/24 maxlen: 24
203.176.96.0/20 maxlen: 20
203.176.98.0/24 maxlen: 24
203.176.99.0/24 maxlen: 24
203.176.100.0/24 maxlen: 24
203.176.102.0/24 maxlen: 24
203.176.103.0/24 maxlen: 24
203.176.104.0/24 maxlen: 24
203.176.105.0/24 maxlen: 24
203.176.106.0/23 maxlen: 23
203.176.108.0/24 maxlen: 24
203.176.111.0/24 maxlen: 24
2401:1c00::/32 maxlen: 32
2401:1c00:2000::/40 maxlen: 40
2401:1c00:3000::/40 maxlen: 40
2401:1c00:4000::/40 maxlen: 40
2401:1c00:5000::/40 maxlen: 40
2401:1c00:6000::/40 maxlen: 40
2401:1c00:7000::/40 maxlen: 40
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91EAE3D/97B6E0CE75DE11E8B704A246C4F9AE02/xyabEkxCDFXin7UdPBsNnUdsvQA.crl
rsync://rpki.apnic.net/member_repository/A91EAE3D/97B6E0CE75DE11E8B704A246C4F9AE02/xyabEkxCDFXin7UdPBsNnUdsvQA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xyabEkxCDFXin7UdPBsNnUdsvQA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 11 Apr 2025 17:01:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6293 (0x1895)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91EAE3D
Validity
Not Before: Feb 18 17:35:30 2025 GMT
Not After : May 1 00:00:00 2026 GMT
Subject: CN=67b4c4e1-e980
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:13:1e:a5:1a:91:de:e1:60:aa:6c:32:bd:ed:
f2:80:1d:74:93:67:3a:80:c9:06:9b:17:fb:a7:4e:
98:7e:a9:29:27:60:53:36:1a:b2:5d:53:41:29:75:
e3:b3:bb:e0:e4:a3:80:11:e5:df:d9:f4:12:eb:30:
a5:ed:cd:41:e9:91:14:e3:1d:a9:ca:79:8f:3f:bb:
62:af:7f:b1:08:08:e0:7b:2d:1b:2a:9d:14:ea:08:
8a:fc:de:af:51:3e:40:df:fb:2c:15:da:f0:fd:c6:
c9:d1:53:a2:e6:4a:f1:3f:1f:4a:89:45:66:53:06:
87:d8:ac:80:7d:d8:66:d2:f2:4a:e9:e6:95:50:19:
ff:bc:d4:fc:cb:5e:e1:9e:90:ab:2f:b4:26:7f:ca:
54:d5:ff:50:4c:d4:65:f6:17:7c:3e:06:84:01:bb:
36:11:24:5a:a8:06:e4:bc:f9:91:5a:70:70:cb:e2:
7e:cc:b4:78:61:ad:6d:0a:02:24:61:ef:70:a4:94:
43:d8:78:5a:08:64:c1:0d:50:ce:48:bf:83:e8:ce:
c5:ab:c5:ff:29:bd:cf:5e:cd:67:a8:fd:4f:27:67:
10:28:2d:20:f5:5c:3a:da:83:71:09:2b:3c:c9:54:
51:b9:6c:75:28:c9:37:0b:bc:66:39:41:58:c8:4f:
c1:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:38:0B:D4:F5:C5:CF:BC:2A:17:FC:A6:4E:53:C4:03:EB:6F:7C:A0
X509v3 Authority Key Identifier:
keyid:C7:26:9B:12:4C:42:0C:55:E2:9F:B5:1D:3C:1B:0D:9D:47:6C:BD:00
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91EAE3D/97B6E0CE75DE11E8B704A246C4F9AE02/xyabEkxCDFXin7UdPBsNnUdsvQA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xyabEkxCDFXin7UdPBsNnUdsvQA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EAE3D/97B6E0CE75DE11E8B704A246C4F9AE02/0351889A90C511EFBAE1BD70C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
121.200.224.0/20
150.207.0.0/16
203.19.141.0/24
203.161.8.0/21
203.176.96.0/20
IPv6:
2401:1c00::/32
Signature Algorithm: sha256WithRSAEncryption
93:0c:d6:04:95:58:cb:cb:ce:19:d2:84:02:4b:62:1b:b7:b1:
8f:11:f7:98:d8:c9:e6:99:34:02:38:1d:02:54:08:4f:d0:70:
46:2e:29:90:59:83:6d:3f:f6:21:c4:99:e5:bd:22:a7:1a:1b:
3d:33:04:ac:77:d2:e2:80:20:e9:86:4c:6f:9b:f4:f3:1a:90:
13:bc:e0:fa:d7:bf:23:40:0f:39:68:b4:1d:89:34:cd:34:f0:
b3:de:37:62:74:e0:45:3a:71:a1:47:87:a6:ad:23:47:5c:83:
5b:7d:00:32:ef:1d:98:bd:12:31:da:6a:3c:9a:91:c5:88:af:
f1:66:58:8c:7d:9e:45:a5:6a:43:01:66:d0:bd:f0:69:3b:11:
e1:e0:f1:15:32:6f:d7:d2:4a:eb:b0:db:01:3a:df:16:4b:06:
78:bb:2c:5b:80:73:8b:25:4f:32:bc:48:67:71:f7:9c:1e:2d:
1a:51:30:b8:83:99:e6:62:ba:9b:4c:e1:e6:d1:59:f6:b4:5a:
64:99:90:f7:54:51:e0:d7:ec:f5:75:f7:a4:a1:74:49:cc:73:
7a:95:02:d0:04:19:7f:18:0b:55:ea:40:d4:d9:70:7e:14:e3:
7d:50:7c:5b:52:e9:00:a2:7e:94:f9:f0:7a:dd:1a:81:d5:9d:
e6:94:9c:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 06:58:40 2025 by rpki-client