Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91EE735/E8E667CA94BE11EA984FAD58C4F9AE02/E7F141609E9911EBB4117632C4F9AE02.roa
File: E7F141609E9911EBB4117632C4F9AE02.roa (raw, json)
Hash identifier: bPG+JKz2c8qz67QLcdFAZ1OKHiVMuC03ojwfXNaj3R8=
Subject key identifier: 25:5C:36:3B:F1:60:A2:2A:1C:BA:44:B2:37:D8:F9:21:14:3E:C8:AB
Certificate issuer: /CN=A91EE735/serialNumber=AD73ADB914213862ED8E14D77069F474D83CC8F5
Certificate serial: 08B5
Authority key identifier: AD:73:AD:B9:14:21:38:62:ED:8E:14:D7:70:69:F4:74:D8:3C:C8:F5
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rXOtuRQhOGLtjhTXcGn0dNg8yPU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91EE735/E8E667CA94BE11EA984FAD58C4F9AE02/E7F141609E9911EBB4117632C4F9AE02.roa
Signing time: Thu 30 May 2024 22:19:00 +0000
ROA not before: Thu 30 May 2024 22:19:00 +0000
ROA not after: Wed 30 Jul 2025 00:00:00 +0000
asID: 17720
IP address blocks: 203.26.6.0/24 maxlen: 24
203.29.96.0/24 maxlen: 24
2001:df1:be00::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91EE735/E8E667CA94BE11EA984FAD58C4F9AE02/rXOtuRQhOGLtjhTXcGn0dNg8yPU.crl
rsync://rpki.apnic.net/member_repository/A91EE735/E8E667CA94BE11EA984FAD58C4F9AE02/rXOtuRQhOGLtjhTXcGn0dNg8yPU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rXOtuRQhOGLtjhTXcGn0dNg8yPU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 01 May 2025 20:06:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2229 (0x8b5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91EE735, serialNumber=AD73ADB914213862ED8E14D77069F474D83CC8F5
Validity
Not Before: May 30 22:19:00 2024 GMT
Not After : Jul 30 00:00:00 2025 GMT
Subject: CN=6658fb54-d754
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:c9:38:75:cd:2a:47:40:6a:bb:57:c3:76:18:
d7:fd:c0:23:6e:66:37:c0:6e:83:54:96:c5:2a:77:
07:e6:4b:e0:b4:53:48:0a:54:23:69:4c:e5:c9:68:
a2:00:20:a4:96:ab:fd:b9:7d:5b:a9:94:bd:a1:8b:
c9:20:55:3e:74:d1:d3:8c:af:e8:1d:79:dc:76:56:
b5:3c:95:51:15:04:7d:d8:c9:4d:44:95:f3:20:71:
7d:55:5a:d6:a6:4c:b8:89:58:00:eb:49:fb:32:b2:
fe:ce:8f:d4:97:41:90:3e:d5:85:03:06:ca:71:d2:
6f:7d:37:0b:e4:25:d4:00:73:85:82:01:b1:9c:d0:
01:0b:89:1f:f4:85:19:2a:24:ec:fa:06:50:89:54:
09:ed:46:8c:86:57:c0:e8:94:0a:71:df:be:fb:72:
61:ee:2d:6f:18:37:4c:09:0f:ba:c9:98:cb:85:17:
c1:e8:bd:ab:de:46:83:0d:52:fe:f0:fb:5e:ea:94:
a2:bb:b6:fa:95:a8:dc:4a:c1:65:f5:fb:da:ea:c3:
91:75:3b:b9:9f:96:a9:b5:27:53:4b:6a:35:ce:22:
c2:96:c9:f3:2f:81:f4:ac:8c:91:37:51:aa:2b:35:
eb:fb:e7:ff:02:31:87:f8:b8:42:88:4a:cd:b9:f9:
9d:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:5C:36:3B:F1:60:A2:2A:1C:BA:44:B2:37:D8:F9:21:14:3E:C8:AB
X509v3 Authority Key Identifier:
keyid:AD:73:AD:B9:14:21:38:62:ED:8E:14:D7:70:69:F4:74:D8:3C:C8:F5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91EE735/E8E667CA94BE11EA984FAD58C4F9AE02/rXOtuRQhOGLtjhTXcGn0dNg8yPU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rXOtuRQhOGLtjhTXcGn0dNg8yPU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EE735/E8E667CA94BE11EA984FAD58C4F9AE02/E7F141609E9911EBB4117632C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
203.26.6.0/24
203.29.96.0/24
IPv6:
2001:df1:be00::/48
Signature Algorithm: sha256WithRSAEncryption
a2:32:e6:ce:fc:93:46:d0:1e:7e:c9:3e:c4:72:90:ac:e3:52:
d6:d3:7f:47:da:e3:22:54:64:45:51:31:de:fe:c2:2a:12:26:
5a:a4:18:f5:17:3a:c4:18:92:17:04:4e:59:c1:14:25:d8:cb:
78:43:17:fc:a2:09:96:f4:9b:3c:d3:40:e4:f6:5f:db:b6:64:
59:ec:9c:56:55:db:46:31:56:04:90:0c:98:17:7d:9b:e8:6d:
db:30:72:a5:12:82:5b:db:71:43:43:b1:b3:eb:85:f4:7e:f8:
da:01:4e:d8:13:fe:b9:8c:71:73:ac:4b:bc:31:8e:97:6d:c1:
5f:8e:ba:42:7c:2b:95:e7:ce:51:dc:bd:01:d9:14:00:0f:69:
ad:f7:b8:0f:29:5a:e1:ef:d4:f9:b7:a6:08:d6:e4:56:35:f2:
b7:97:19:d8:32:df:25:30:e0:c2:2f:49:3a:bb:ff:e8:30:6f:
c3:ed:58:87:59:8f:93:f4:51:cb:d9:b9:18:7f:40:0d:27:a7:
4d:92:e3:6d:2e:15:b5:65:0b:a8:51:e2:88:2c:42:c5:9d:2d:
8c:8e:8c:85:c0:ad:d2:10:78:47:2a:a6:cf:37:f4:db:67:75:
55:34:5c:b5:da:11:f2:21:f6:6a:c1:aa:13:f5:57:bd:21:b3:
86:ff:37:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 10:30:45 2025 by rpki-client