Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F9665/6D0D12B84BF511EBBD83B87BC4F9AE02/E1384D98FFE611EF88116248C4F9AE02.roa
File: E1384D98FFE611EF88116248C4F9AE02.roa (raw, json)
Hash identifier: mYujfSBZ+ixWNzysk6xSbiq6zROqCtO03RrJ0jOuR8g=
Subject key identifier: 6C:38:34:E7:5F:AF:7E:3F:DD:36:50:2E:83:9B:9B:0D:C0:BE:8F:C7
Certificate issuer: /CN=A91F9665/serialNumber=3058A469B67D03072C2D8A385E9F2AABBA134E2B
Certificate serial: 06FB
Authority key identifier: 30:58:A4:69:B6:7D:03:07:2C:2D:8A:38:5E:9F:2A:AB:BA:13:4E:2B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MFikabZ9AwcsLYo4Xp8qq7oTTis.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F9665/6D0D12B84BF511EBBD83B87BC4F9AE02/E1384D98FFE611EF88116248C4F9AE02.roa
Signing time: Thu 13 Mar 2025 08:40:56 +0000
ROA not before: Thu 13 Mar 2025 08:40:56 +0000
ROA not after: Thu 28 May 2026 00:00:00 +0000
asID: 9304
IP address blocks: 150.129.80.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F9665/6D0D12B84BF511EBBD83B87BC4F9AE02/MFikabZ9AwcsLYo4Xp8qq7oTTis.crl
rsync://rpki.apnic.net/member_repository/A91F9665/6D0D12B84BF511EBBD83B87BC4F9AE02/MFikabZ9AwcsLYo4Xp8qq7oTTis.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MFikabZ9AwcsLYo4Xp8qq7oTTis.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 15 Apr 2025 21:48:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1787 (0x6fb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F9665
Validity
Not Before: Mar 13 08:40:56 2025 GMT
Not After : May 28 00:00:00 2026 GMT
Subject: CN=67d29a18-8a58
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:59:75:73:6d:22:09:99:2b:c2:bd:ae:bd:58:
54:b3:91:bd:8d:7a:de:33:17:a5:4b:5c:e3:66:93:
04:7a:95:eb:56:22:13:c9:77:a0:b5:e2:a8:3e:3c:
c3:26:56:06:c0:34:7b:ad:1b:8b:11:fd:c7:b0:7f:
10:98:62:9a:b9:5d:26:de:50:ef:59:b4:b9:55:86:
e2:58:60:24:60:8d:7b:6a:7c:31:42:04:d5:3d:53:
af:d0:37:53:e3:f5:8e:d6:79:f1:cc:31:8d:82:6e:
d6:13:f8:2a:c2:21:b8:52:60:e3:c5:fd:8d:16:21:
e7:7e:c5:9c:97:68:f7:01:dc:a3:f4:e7:8c:e7:52:
a4:37:bc:a3:4c:87:5b:86:79:7c:26:3a:fe:19:f1:
30:d6:dd:61:00:82:c1:73:ab:2f:d5:e7:c5:39:ee:
ab:9b:30:95:f5:1a:b8:43:34:64:3b:0e:e2:e9:82:
d4:f1:34:f4:88:53:04:ff:f1:5c:52:0b:78:36:6b:
ef:e8:37:38:40:d7:71:fb:bb:6a:9e:d3:1e:e2:d1:
fd:fd:f2:d7:cd:c2:f4:72:64:23:91:c0:6f:20:39:
78:4a:a2:73:f2:19:2e:63:d3:a5:96:c9:c6:07:83:
7f:3b:83:ff:6b:50:32:56:f5:de:0a:1d:48:4f:64:
cf:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:38:34:E7:5F:AF:7E:3F:DD:36:50:2E:83:9B:9B:0D:C0:BE:8F:C7
X509v3 Authority Key Identifier:
keyid:30:58:A4:69:B6:7D:03:07:2C:2D:8A:38:5E:9F:2A:AB:BA:13:4E:2B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F9665/6D0D12B84BF511EBBD83B87BC4F9AE02/MFikabZ9AwcsLYo4Xp8qq7oTTis.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MFikabZ9AwcsLYo4Xp8qq7oTTis.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F9665/6D0D12B84BF511EBBD83B87BC4F9AE02/E1384D98FFE611EF88116248C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
150.129.80.0/24
Signature Algorithm: sha256WithRSAEncryption
4c:10:34:08:c6:b7:04:10:0c:c3:08:9b:d6:28:8e:dd:35:bd:
29:c2:b4:c1:7e:7a:9d:7d:c9:a8:f2:df:db:67:91:80:6c:e7:
26:45:b4:0d:4e:ce:60:9c:98:6d:08:e1:c8:d8:dd:88:45:08:
c3:ef:d2:57:3a:4d:7c:9f:d6:d3:11:ab:32:ef:fb:ab:4a:7a:
e8:3b:b7:d5:27:68:f9:bf:02:cd:f9:9d:cb:51:62:0f:4b:2c:
b0:64:db:d5:54:0f:0d:b2:26:67:84:05:36:bc:66:48:e8:72:
20:b2:e9:ad:75:04:12:c8:ed:d1:d0:75:cb:88:2b:bc:67:62:
cf:8c:15:f7:73:bf:8e:b9:e4:2f:34:30:44:43:65:02:93:82:
f8:1a:4e:61:e0:c0:35:9f:98:a7:a5:ae:40:74:f0:08:75:fa:
1c:fd:74:0d:b4:46:2a:27:c3:f8:f8:d3:48:2f:73:b8:ac:30:
ef:97:7f:96:f3:5e:35:cb:b8:7f:ae:d5:8c:f5:09:19:e5:e0:
07:27:f1:b6:ed:88:57:38:6e:02:85:de:72:f1:b2:fb:f2:51:
80:c8:93:20:bc:45:77:c8:47:e1:6d:ec:e3:ed:0e:a4:98:1d:
88:bd:f5:86:ed:a4:9a:c6:f5:70:1e:03:21:60:b8:af:d9:b9:
ab:42:1c:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 06:27:43 2025 by rpki-client