Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91EAE3D/97B6E0CE75DE11E8B704A246C4F9AE02/EE744ACAD55C11EAA224E026C4F9AE02.roa
File: EE744ACAD55C11EAA224E026C4F9AE02.roa (raw, json)
Hash identifier: GaCuLP6+h11nA82tyoCLeH9ngZZwhyimBkdAe/FCr0Q=
Subject key identifier: 2E:D5:D3:EF:9B:87:BB:76:DF:5C:A7:CE:93:5F:B5:9A:90:18:39:6B
Certificate issuer: /CN=A91EAE3D/serialNumber=C7269B124C420C55E29FB51D3C1B0D9D476CBD00
Certificate serial: 1897
Authority key identifier: C7:26:9B:12:4C:42:0C:55:E2:9F:B5:1D:3C:1B:0D:9D:47:6C:BD:00
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xyabEkxCDFXin7UdPBsNnUdsvQA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91EAE3D/97B6E0CE75DE11E8B704A246C4F9AE02/EE744ACAD55C11EAA224E026C4F9AE02.roa
Signing time: Tue 18 Feb 2025 17:35:31 +0000
ROA not before: Tue 18 Feb 2025 17:35:31 +0000
ROA not after: Fri 01 May 2026 00:00:00 +0000
asID: 45186
IP address blocks: 49.255.255.0/24 maxlen: 24
2402:4600::/40 maxlen: 40
2407:5600::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91EAE3D/97B6E0CE75DE11E8B704A246C4F9AE02/xyabEkxCDFXin7UdPBsNnUdsvQA.crl
rsync://rpki.apnic.net/member_repository/A91EAE3D/97B6E0CE75DE11E8B704A246C4F9AE02/xyabEkxCDFXin7UdPBsNnUdsvQA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xyabEkxCDFXin7UdPBsNnUdsvQA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 19 Apr 2025 16:52:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6295 (0x1897)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91EAE3D, serialNumber=C7269B124C420C55E29FB51D3C1B0D9D476CBD00
Validity
Not Before: Feb 18 17:35:31 2025 GMT
Not After : May 1 00:00:00 2026 GMT
Subject: CN=67b4c4e3-4880
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:89:7a:5a:b6:73:d7:3a:8a:b3:38:ae:06:90:
ba:8f:82:d3:d5:79:86:77:f3:d6:91:2b:4c:73:99:
ec:4f:cb:64:51:5b:1a:d6:fb:c5:2b:40:c3:d8:91:
aa:e4:75:b2:12:e6:5a:b1:d1:24:86:1f:11:81:75:
63:c0:50:6c:8a:78:00:b6:de:bc:ab:e3:a3:38:0b:
25:d3:b4:72:b1:b0:65:e7:82:9e:81:16:29:63:50:
22:8e:13:bb:c4:37:7b:f6:cc:4e:95:4a:01:b3:aa:
c3:30:83:23:a1:64:56:63:5c:e1:b9:64:e0:db:1e:
48:5e:e5:a7:67:ee:f7:23:aa:ba:e2:99:0e:9d:c0:
d4:c0:38:3e:9d:dd:70:26:89:29:e9:c2:af:2e:9f:
43:55:50:6a:1b:31:54:2f:9c:e6:18:14:f4:10:b0:
dd:22:e9:ad:c1:f5:96:4c:e2:a4:5d:8c:fc:f4:59:
13:36:d8:bc:88:ee:7b:83:c5:a0:70:d0:e4:43:23:
72:67:78:a1:5d:d3:6b:54:4f:cb:e7:b4:fe:de:d5:
0f:f1:ca:f7:84:72:9b:6d:94:17:5d:e9:cd:8b:c2:
ff:77:66:7e:52:f3:a6:94:5a:54:df:d8:f0:fc:bf:
fa:91:cb:b4:4c:5b:11:77:85:d6:be:db:fe:e8:08:
2e:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:D5:D3:EF:9B:87:BB:76:DF:5C:A7:CE:93:5F:B5:9A:90:18:39:6B
X509v3 Authority Key Identifier:
keyid:C7:26:9B:12:4C:42:0C:55:E2:9F:B5:1D:3C:1B:0D:9D:47:6C:BD:00
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91EAE3D/97B6E0CE75DE11E8B704A246C4F9AE02/xyabEkxCDFXin7UdPBsNnUdsvQA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xyabEkxCDFXin7UdPBsNnUdsvQA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EAE3D/97B6E0CE75DE11E8B704A246C4F9AE02/EE744ACAD55C11EAA224E026C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
49.255.255.0/24
IPv6:
2402:4600::/40
2407:5600::/32
Signature Algorithm: sha256WithRSAEncryption
3f:7d:9e:65:4d:07:88:46:8d:e7:f7:93:ef:83:e8:b9:81:e8:
52:f5:36:cd:e5:c2:20:31:0c:f7:47:fb:c5:66:bd:8d:8a:f6:
fd:e6:d4:13:23:53:5d:80:78:84:91:ce:e2:01:00:ee:f4:d2:
a3:4a:6f:e8:0d:cd:8b:ff:55:dd:88:ca:eb:f5:5e:49:c3:e4:
e9:52:f8:51:9b:a6:bb:dc:d7:fe:35:eb:94:34:5a:11:5e:24:
5b:1e:b4:15:70:17:53:1c:5a:72:b2:83:5d:e9:f5:23:62:d0:
b0:b2:ef:20:22:2c:91:37:c8:c4:50:af:fa:12:8c:bc:ee:06:
8e:e5:7d:bd:08:aa:f3:15:30:6a:57:61:f9:de:49:4c:80:18:
13:1c:cd:35:22:a9:0f:3a:36:bf:6f:b0:33:8c:0e:5f:0d:fe:
84:c9:97:bf:bb:6e:aa:6b:f8:ce:cd:af:7c:f4:2d:b6:99:5a:
30:e6:13:a5:ac:ca:cb:66:cb:8f:2c:94:da:d6:53:88:71:df:
29:97:22:c2:2d:bb:13:b9:d0:78:54:09:45:a9:e1:87:0f:c9:
62:cf:8f:92:cd:2a:c3:5e:0c:7c:82:01:da:6d:f2:a3:1d:a5:
36:b6:a5:3a:bb:a2:d9:45:aa:a2:0d:2d:fc:4e:96:4b:22:cd:
13:43:90:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 11:09:03 2025 by rpki-client