Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F60A7/4E00FE9ABD1D11EB9AD85D45C4F9AE02/2E809260BFC511EBAD79ED25C4F9AE02.roa
File: 2E809260BFC511EBAD79ED25C4F9AE02.roa (raw, json)
Hash identifier: kP9B9Apke28RlHv6p4FMMVLBhFiruagPm8D1uCysx10=
Subject key identifier: B5:F3:68:F7:56:28:18:9C:39:31:04:D1:7F:F1:C0:DB:63:8A:1D:7B
Certificate issuer: /CN=A91F60A7/serialNumber=48F1327632D7DBEF331C0E2489EEE3F5BEFB8452
Certificate serial: 0536
Authority key identifier: 48:F1:32:76:32:D7:DB:EF:33:1C:0E:24:89:EE:E3:F5:BE:FB:84:52
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SPEydjLX2-8zHA4kie7j9b77hFI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F60A7/4E00FE9ABD1D11EB9AD85D45C4F9AE02/2E809260BFC511EBAD79ED25C4F9AE02.roa
Signing time: Fri 05 Jul 2024 00:22:46 +0000
ROA not before: Fri 05 Jul 2024 00:22:46 +0000
ROA not after: Sun 31 Aug 2025 00:00:00 +0000
asID: 135345
IP address blocks: 103.166.248.0/24 maxlen: 24
103.166.249.0/24 maxlen: 24
2407:5dc0::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F60A7/4E00FE9ABD1D11EB9AD85D45C4F9AE02/SPEydjLX2-8zHA4kie7j9b77hFI.crl
rsync://rpki.apnic.net/member_repository/A91F60A7/4E00FE9ABD1D11EB9AD85D45C4F9AE02/SPEydjLX2-8zHA4kie7j9b77hFI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SPEydjLX2-8zHA4kie7j9b77hFI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 15 Apr 2025 22:51:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1334 (0x536)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F60A7
Validity
Not Before: Jul 5 00:22:46 2024 GMT
Not After : Aug 31 00:00:00 2025 GMT
Subject: CN=66873cd6-c96f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:ff:0a:df:3b:62:b4:c8:d7:fb:c8:dc:16:a1:
03:bc:c4:69:55:b3:38:a1:1a:65:e8:8d:25:cc:20:
8d:31:bd:e3:e4:e0:6f:ec:f7:29:26:4a:da:4e:3b:
08:ff:6e:3f:35:37:31:ef:6f:6f:d4:5d:34:c9:d5:
95:fd:c5:f2:b3:5c:86:2b:b3:c6:61:05:63:0d:46:
88:b6:36:40:3c:71:a4:15:83:6a:b6:43:cb:6c:f0:
ce:9d:65:23:97:fc:7a:1a:ca:25:3c:c7:5d:8e:4b:
0c:10:09:3c:9e:2e:7a:87:be:9c:cf:f2:8f:ca:52:
3f:6a:88:9d:04:b8:94:a1:fe:9d:21:96:23:aa:ab:
47:99:b2:40:eb:6b:f1:d0:91:f3:ce:70:56:e0:60:
9f:a2:75:22:6e:16:25:d5:7c:ac:f1:37:d7:df:00:
4c:68:f0:cd:24:30:12:67:d6:58:f8:2d:60:fd:a6:
88:12:ba:0f:ef:52:33:e1:9e:e3:76:e9:5f:b7:fb:
a5:6a:52:7d:82:18:84:0e:1c:ad:86:83:93:0b:6f:
47:4b:4d:69:71:4f:a1:19:f4:67:8b:8d:2d:1e:53:
64:ff:12:3c:80:46:88:02:a9:46:d4:5b:1a:03:bc:
79:9c:a8:95:df:4d:40:b0:88:b3:86:a4:96:48:36:
58:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:F3:68:F7:56:28:18:9C:39:31:04:D1:7F:F1:C0:DB:63:8A:1D:7B
X509v3 Authority Key Identifier:
keyid:48:F1:32:76:32:D7:DB:EF:33:1C:0E:24:89:EE:E3:F5:BE:FB:84:52
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F60A7/4E00FE9ABD1D11EB9AD85D45C4F9AE02/SPEydjLX2-8zHA4kie7j9b77hFI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SPEydjLX2-8zHA4kie7j9b77hFI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F60A7/4E00FE9ABD1D11EB9AD85D45C4F9AE02/2E809260BFC511EBAD79ED25C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.166.248.0/23
IPv6:
2407:5dc0::/32
Signature Algorithm: sha256WithRSAEncryption
35:c3:e0:08:51:9d:a9:4f:e7:dd:31:8e:09:81:c4:b2:9b:29:
f1:06:e8:69:61:9c:f6:dc:15:e3:76:c9:03:a0:a1:08:0f:74:
da:f7:1c:3a:89:27:40:ef:a9:0d:de:83:a2:d3:0b:9e:e6:ce:
93:b2:ec:b1:1b:b3:04:cb:e0:24:26:8f:ac:04:a0:ac:a8:8a:
ef:da:7f:94:7b:07:1b:49:94:4a:6f:5f:a2:4c:33:b5:81:95:
44:d7:e3:f4:83:1e:56:67:01:31:4b:04:ab:25:fb:50:3f:14:
1a:1b:b6:f7:af:f4:39:c1:d2:67:dd:86:e1:7e:bf:67:92:8f:
b7:3e:d1:28:b2:7c:1b:17:a7:4b:2b:2b:d4:0c:40:9d:0b:78:
22:ba:10:4b:4b:84:d2:a2:c4:58:df:d3:33:d8:da:ba:2e:f1:
e6:48:e0:0a:2e:b1:e6:41:6d:3d:45:20:da:67:97:b3:a9:51:
86:31:1a:eb:f6:82:8a:02:54:9c:21:c4:0f:93:c1:98:bc:d3:
a5:6c:92:78:5a:6a:d6:8e:7a:dd:6b:9e:7d:ef:79:da:13:93:
9f:7d:04:0c:2b:c1:75:59:d9:81:ea:0c:51:4e:cd:e1:df:0a:
59:e7:66:d1:5b:1e:43:55:2f:bb:a7:98:7f:56:97:52:e9:f6:
dc:7c:11:24
-----BEGIN CERTIFICATE-----
MIIFgDCCBGigAwIBAgICBTYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RjYwQTcxMTAvBgNVBAUTKDQ4RjEzMjc2MzJEN0RCRUYzMzFDMEUyNDg5RUVFM0Y1
QkVGQjg0NTIwHhcNMjQwNzA1MDAyMjQ2WhcNMjUwODMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02Njg3M2NkNi1jOTZmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAuv8K3ztitMjX+8jcFqEDvMRpVbM4oRpl6I0lzCCNMb3j5OBv7PcpJkraTjsI
/24/NTcx729v1F00ydWV/cXys1yGK7PGYQVjDUaItjZAPHGkFYNqtkPLbPDOnWUj
l/x6GsolPMddjksMEAk8ni56h76cz/KPylI/aoidBLiUof6dIZYjqqtHmbJA62vx
0JHzznBW4GCfonUibhYl1Xys8TfX3wBMaPDNJDASZ9ZY+C1g/aaIEroP71Iz4Z7j
dulft/ulalJ9ghiEDhythoOTC29HS01pcU+hGfRni40tHlNk/xI8gEaIAqlG1Fsa
A7x5nKiV301AsIizhqSWSDZYiwIDAQABo4ICpDCCAqAwHQYDVR0OBBYEFLXzaPdW
KBicOTEE0X/xwNtjih17MB8GA1UdIwQYMBaAFEjxMnYy19vvMxwOJInu4/W++4RS
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNjBBNy80RTAwRkU5QUJE
MUQxMUVCOUFEODVENDVDNEY5QUUwMi9TUEV5ZGpMWDItOHpIQTRraWU3ajliNzdo
RkkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1NQRXlkakxYMi04ekhBNGtpZTdqOWI3N2hGSS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
RjYwQTcvNEUwMEZFOUFCRDFEMTFFQjlBRDg1RDQ1QzRGOUFFMDIvMkU4MDkyNjBC
RkM1MTFFQkFENzlFRDI1QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwLgYIKwYBBQUHAQcBAf8E
HzAdMAwEAgABMAYDBAFnpvgwDQQCAAIwBwMFACQHXcAwDQYJKoZIhvcNAQELBQAD
ggEBADXD4AhRnalP590xjgmBxLKbKfEG6GlhnPbcFeN2yQOgoQgPdNr3HDqJJ0Dv
qQ3eg6LTC57mzpOy7LEbswTL4CQmj6wEoKyoiu/af5R7BxtJlEpvX6JMM7WBlUTX
4/SDHlZnATFLBKsl+1A/FBobtvev9DnB0mfdhuF+v2eSj7c+0SiyfBsXp0srK9QM
QJ0LeCK6EEtLhNKixFjf0zPY2rou8eZI4AouseZBbT1FINpnl7OpUYYxGuv2gooC
VJwhxA+TwZi806VsknhaataOet1rnn3vedoTk599BAwrwXVZ2YHqDFFOzeHfClnn
ZtFbHkNVL7unmH9Wl1Lp9tx8ESQ=
-----END CERTIFICATE-----
Generated at Fri Apr 11 01:51:18 2025 by rpki-client