Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91EAF4B/84858F6A471911EA90863072C4F9AE02/58EC5A1A8F3E11EF9B5DE37CC4F9AE02.roa
File: 58EC5A1A8F3E11EF9B5DE37CC4F9AE02.roa (raw, json)
Hash identifier: fNb48r4M+gfLXajaKFGp8VWXxugH32v0si+d8iboCho=
Subject key identifier: 61:5D:6F:7E:24:EA:04:77:EB:A8:E0:6F:50:66:44:C9:14:C9:B8:4F
Certificate issuer: /CN=A91EAF4B/serialNumber=AD71DEC1389B14A012001076991F59ABE2CAB1E6
Certificate serial: F0
Authority key identifier: AD:71:DE:C1:38:9B:14:A0:12:00:10:76:99:1F:59:AB:E2:CA:B1:E6
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rXHewTibFKASABB2mR9Zq-LKseY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91EAF4B/84858F6A471911EA90863072C4F9AE02/58EC5A1A8F3E11EF9B5DE37CC4F9AE02.roa
Signing time: Tue 18 Mar 2025 19:39:22 +0000
ROA not before: Tue 18 Mar 2025 19:39:22 +0000
ROA not after: Fri 01 May 2026 00:00:00 +0000
asID: 140077
IP address blocks: 103.148.50.0/24 maxlen: 24
103.148.51.0/24 maxlen: 24
2405:cbc0::/48 maxlen: 48
2405:cbc0:1::/48 maxlen: 48
2405:cbc0:2::/48 maxlen: 48
2405:cbc0:3::/48 maxlen: 48
2405:cbc0:4::/48 maxlen: 48
2405:cbc0:5::/48 maxlen: 48
2405:cbc0:6::/48 maxlen: 48
2405:cbc0:7::/48 maxlen: 48
2405:cbc0:8::/48 maxlen: 48
2405:cbc0:9::/48 maxlen: 48
2405:cbc0:10::/48 maxlen: 48
2405:cbc0:11::/48 maxlen: 48
2405:cbc0:12::/48 maxlen: 48
2405:cbc0:13::/48 maxlen: 48
2405:cbc0:14::/48 maxlen: 48
2405:cbc0:15::/48 maxlen: 48
2405:cbc0:16::/48 maxlen: 48
2405:cbc0:17::/48 maxlen: 48
2405:cbc0:18::/48 maxlen: 48
2405:cbc0:19::/48 maxlen: 48
2405:cbc0:20::/48 maxlen: 48
2405:cbc0:21::/48 maxlen: 48
2405:cbc0:22::/48 maxlen: 48
2405:cbc0:23::/48 maxlen: 48
2405:cbc0:24::/48 maxlen: 48
2405:cbc0:25::/48 maxlen: 48
2405:cbc0:26::/48 maxlen: 48
2405:cbc0:27::/48 maxlen: 48
2405:cbc0:28::/48 maxlen: 48
2405:cbc0:29::/48 maxlen: 48
2405:cbc0:8000::/35 maxlen: 35
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91EAF4B/84858F6A471911EA90863072C4F9AE02/rXHewTibFKASABB2mR9Zq-LKseY.crl
rsync://rpki.apnic.net/member_repository/A91EAF4B/84858F6A471911EA90863072C4F9AE02/rXHewTibFKASABB2mR9Zq-LKseY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rXHewTibFKASABB2mR9Zq-LKseY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 11 Apr 2025 19:33:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 240 (0xf0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91EAF4B
Validity
Not Before: Mar 18 19:39:22 2025 GMT
Not After : May 1 00:00:00 2026 GMT
Subject: CN=67d9cbea-de4e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:70:84:ae:3b:34:6f:1c:59:e0:db:d2:f2:46:
5d:80:a7:1b:66:1e:1a:43:06:4e:4a:f1:eb:13:21:
7c:67:97:56:bb:bd:b6:27:81:38:8a:4c:af:bb:49:
84:08:6d:2b:85:ca:68:65:7e:4b:ac:3e:b6:f6:02:
09:25:93:a7:b2:12:97:e2:e6:2d:c4:71:9b:0c:f0:
b3:e6:1e:e8:85:17:69:08:bb:a1:72:c1:d1:2a:56:
0f:93:c8:1d:32:77:ef:9c:4d:a7:00:39:9b:da:a8:
44:d5:30:bb:9d:fc:83:da:4c:e2:d5:02:4c:c1:5a:
4f:88:55:f1:5c:32:d8:71:27:dc:da:de:70:bf:c7:
ca:0d:62:74:ca:48:48:48:30:79:2a:3f:62:ce:78:
d8:ee:97:c1:a9:3a:7d:48:8c:9b:41:f5:cf:2b:62:
d4:1f:b5:23:66:ef:51:31:3a:8c:67:f6:1e:30:6c:
f4:a6:be:7f:dc:64:4d:93:ae:2f:12:a5:17:33:41:
98:bc:86:00:64:90:22:0b:ea:67:02:8d:fe:03:9b:
ea:63:12:db:a7:a9:4a:35:7f:1f:e5:5c:4f:2f:b9:
ec:7b:20:1a:2e:74:28:c2:80:55:5d:6d:c3:69:da:
0f:1a:d6:e1:c6:5d:3c:0a:a9:1c:c3:38:ad:27:54:
56:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:5D:6F:7E:24:EA:04:77:EB:A8:E0:6F:50:66:44:C9:14:C9:B8:4F
X509v3 Authority Key Identifier:
keyid:AD:71:DE:C1:38:9B:14:A0:12:00:10:76:99:1F:59:AB:E2:CA:B1:E6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91EAF4B/84858F6A471911EA90863072C4F9AE02/rXHewTibFKASABB2mR9Zq-LKseY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rXHewTibFKASABB2mR9Zq-LKseY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EAF4B/84858F6A471911EA90863072C4F9AE02/58EC5A1A8F3E11EF9B5DE37CC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.148.50.0/23
IPv6:
2405:cbc0::-2405:cbc0:9:ffff:ffff:ffff:ffff:ffff
2405:cbc0:10::-2405:cbc0:19:ffff:ffff:ffff:ffff:ffff
2405:cbc0:20::-2405:cbc0:29:ffff:ffff:ffff:ffff:ffff
2405:cbc0:8000::/35
Signature Algorithm: sha256WithRSAEncryption
4e:63:6a:50:a6:dc:c8:7d:7a:bd:b3:ad:53:17:93:af:6a:e0:
d1:c5:56:ac:9d:52:68:92:a5:bf:be:f8:d7:9a:93:f8:64:43:
e1:f4:85:0c:be:ba:8c:b9:08:93:9f:f6:67:6f:6e:5d:77:b3:
12:a3:2f:22:fb:40:d6:e9:68:a6:44:b7:a9:91:56:e7:f2:f6:
62:ed:d5:30:86:52:5d:cc:7a:72:59:6d:a6:b3:7a:25:a5:d2:
e7:35:89:73:86:cc:8e:a9:38:c3:3c:70:b8:99:b9:7a:16:cf:
08:b8:55:4f:88:d8:ff:09:3a:cf:7a:4a:b2:7c:15:69:5c:03:
da:ce:6e:7a:7f:ef:14:88:4b:4e:83:93:d5:06:63:42:a5:6b:
9c:da:f2:58:43:24:59:d9:9a:b6:06:f9:fb:77:70:8f:80:00:
3b:9c:d3:c6:6d:7e:5d:1c:22:be:68:d2:d1:d4:4f:f7:4d:a3:
8f:ff:cf:70:ad:26:df:c4:5b:31:93:31:f5:4e:70:7c:2e:9b:
e1:28:fd:2b:d6:f2:0f:6c:93:ab:4e:7f:6e:17:d2:08:ea:77:
24:b1:90:d1:ec:b0:cc:ee:0f:1b:03:71:ed:d0:2c:de:27:cf:
97:77:9f:00:f1:f5:f2:aa:d4:50:d7:e9:28:7e:f8:b0:6b:95:
fa:7f:1a:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 19:27:39 2025 by rpki-client