Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91EB002/E24F8234022E11EF856F5132C4F9AE02/5A65F048F19211EFA4D9CD34C4F9AE02.roa
File: 5A65F048F19211EFA4D9CD34C4F9AE02.roa (raw, json)
Hash identifier: 00Gxu/B4q0Oej8/UcNpQ1rIkErXZo9wae3oYgISIoHo=
Subject key identifier: 42:3D:3A:49:22:53:C7:8D:49:7B:5E:62:86:CD:59:2D:EE:58:D3:C3
Certificate issuer: /CN=A91EB002/serialNumber=9EF3E604A63F2CEF4BDDE37DCA890D0451967AEC
Certificate serial: A5
Authority key identifier: 9E:F3:E6:04:A6:3F:2C:EF:4B:DD:E3:7D:CA:89:0D:04:51:96:7A:EC
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nvPmBKY_LO9L3eN9yokNBFGWeuw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91EB002/E24F8234022E11EF856F5132C4F9AE02/5A65F048F19211EFA4D9CD34C4F9AE02.roa
Signing time: Sun 23 Feb 2025 03:00:36 +0000
ROA not before: Sun 23 Feb 2025 03:00:36 +0000
ROA not after: Wed 30 Jul 2025 00:00:00 +0000
asID: 133766
IP address blocks: 103.40.166.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91EB002/E24F8234022E11EF856F5132C4F9AE02/nvPmBKY_LO9L3eN9yokNBFGWeuw.crl
rsync://rpki.apnic.net/member_repository/A91EB002/E24F8234022E11EF856F5132C4F9AE02/nvPmBKY_LO9L3eN9yokNBFGWeuw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nvPmBKY_LO9L3eN9yokNBFGWeuw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 16 Apr 2025 04:51:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 165 (0xa5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91EB002
Validity
Not Before: Feb 23 03:00:36 2025 GMT
Not After : Jul 30 00:00:00 2025 GMT
Subject: CN=67ba8f53-93f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:93:d9:4b:4f:e3:39:00:01:4b:f0:d7:92:df:
a3:60:16:cd:89:9b:4f:ee:e0:fe:53:66:ec:e3:88:
ad:98:72:ad:07:28:5f:2e:c6:3c:87:f8:36:57:89:
61:87:90:20:32:5d:0e:14:6a:35:04:00:40:7a:3c:
be:2f:7e:9c:60:6b:ad:99:64:38:77:02:48:0d:cf:
a3:32:9b:b3:aa:b4:03:73:ff:52:c7:91:1f:fb:e7:
e3:f2:fd:e0:c8:89:0b:fb:a9:37:53:43:6a:e5:74:
06:a8:a0:9b:77:62:b0:ad:2e:46:ad:50:f9:67:ef:
2e:11:bd:0c:fe:1b:ea:49:f5:fe:7d:d4:87:6b:60:
94:9d:e4:5a:a1:ed:3b:71:cd:5a:3f:ba:70:43:ad:
b7:b2:e3:99:02:e4:6d:46:9f:dd:f5:40:c1:61:02:
a1:6b:26:e5:45:cd:b3:98:f0:9f:c5:32:57:78:f3:
1e:c3:f8:37:e0:1d:60:86:e8:e2:ee:9f:1f:eb:cf:
31:a8:a0:12:18:20:4f:13:9e:52:87:60:86:99:62:
f6:5c:2c:bf:cb:f9:cd:a1:38:16:67:92:87:5e:cd:
64:51:ed:10:d4:f9:3d:fb:73:55:2a:7a:09:96:3f:
f2:7c:84:ca:52:f9:a6:9f:70:b1:99:d4:69:8a:83:
51:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:3D:3A:49:22:53:C7:8D:49:7B:5E:62:86:CD:59:2D:EE:58:D3:C3
X509v3 Authority Key Identifier:
keyid:9E:F3:E6:04:A6:3F:2C:EF:4B:DD:E3:7D:CA:89:0D:04:51:96:7A:EC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91EB002/E24F8234022E11EF856F5132C4F9AE02/nvPmBKY_LO9L3eN9yokNBFGWeuw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nvPmBKY_LO9L3eN9yokNBFGWeuw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EB002/E24F8234022E11EF856F5132C4F9AE02/5A65F048F19211EFA4D9CD34C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.40.166.0/24
Signature Algorithm: sha256WithRSAEncryption
a0:46:f5:bd:0c:70:c0:76:42:df:24:b1:d9:a9:dd:73:9d:80:
68:87:4c:61:2e:24:08:8f:f0:0b:a7:0a:a4:f0:c5:c5:86:76:
2d:14:2e:a2:3a:43:44:d1:44:ca:1d:c5:d3:31:5f:e5:79:21:
1c:72:27:2c:1a:ed:52:73:77:ee:0e:6c:e5:fa:61:6c:85:29:
a8:2b:0c:fe:cd:48:b9:a4:af:1d:9d:5d:61:ef:eb:2a:fe:20:
3e:0a:ff:ce:fa:12:a1:d3:ab:31:4e:29:c7:5e:df:72:7e:4d:
4d:ca:71:f4:88:d4:2d:e4:9f:58:2a:a9:7d:a4:d4:b2:76:2a:
a0:06:53:f5:df:a2:22:72:e8:bc:fa:b3:6f:3d:d0:77:41:5c:
e6:6e:2b:df:2e:8c:c8:d5:57:84:e0:0e:47:27:d3:7c:b5:aa:
8b:be:e9:44:2e:94:d0:d3:0c:62:71:8e:44:c9:ff:c0:d5:36:
ab:d2:32:9a:a9:4a:be:ce:f3:63:17:ae:b6:e1:60:9a:9d:af:
3b:fc:80:28:77:30:9d:0b:ab:2a:30:9b:b8:3e:c6:52:3c:38:
8d:c8:49:da:99:89:25:8a:89:ed:4d:cb:00:11:04:4e:68:43:
d4:be:1e:c3:13:c4:82:18:c6:13:c5:57:d8:c0:2a:3c:31:50:
f0:ff:1e:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 00:52:52 2025 by rpki-client