Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91FA6FF/D281E7302E2911EFBAED6A1AC4F9AE02/12032AE02EAC11EFB73C0767C4F9AE02.roa
File: 12032AE02EAC11EFB73C0767C4F9AE02.roa (raw, json)
Hash identifier: NplfmjfBvEPVo22TXfl7ysU80/2MVRwwQvZxXy7GRR8=
Subject key identifier: B8:F1:3C:81:08:E2:16:25:9B:23:8F:9C:C2:34:55:D6:5E:2D:3F:70
Certificate issuer: /CN=A91FA6FF/serialNumber=CAE3DB8ADEE7A16AB6CA537F2347B0205BDF4F76
Certificate serial: A4
Authority key identifier: CA:E3:DB:8A:DE:E7:A1:6A:B6:CA:53:7F:23:47:B0:20:5B:DF:4F:76
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yuPbit7noWq2ylN_I0ewIFvfT3Y.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91FA6FF/D281E7302E2911EFBAED6A1AC4F9AE02/12032AE02EAC11EFB73C0767C4F9AE02.roa
Signing time: Wed 09 Apr 2025 05:12:38 +0000
ROA not before: Wed 09 Apr 2025 05:12:37 +0000
ROA not after: Thu 28 May 2026 00:00:00 +0000
asID: 15830
IP address blocks: 2401:9f20::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91FA6FF/D281E7302E2911EFBAED6A1AC4F9AE02/yuPbit7noWq2ylN_I0ewIFvfT3Y.crl
rsync://rpki.apnic.net/member_repository/A91FA6FF/D281E7302E2911EFBAED6A1AC4F9AE02/yuPbit7noWq2ylN_I0ewIFvfT3Y.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yuPbit7noWq2ylN_I0ewIFvfT3Y.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 16 Apr 2025 05:12:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 164 (0xa4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91FA6FF
Validity
Not Before: Apr 9 05:12:37 2025 GMT
Not After : May 28 00:00:00 2026 GMT
Subject: CN=67f601c5-d6c8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:03:dd:9c:86:93:91:f3:37:34:23:45:14:d8:
74:e9:cb:1e:4b:b5:68:fd:23:e8:73:5b:a2:22:bd:
79:7b:9b:6a:3a:f2:49:de:27:ca:3c:9b:f5:a8:ef:
7d:b7:28:1b:9b:1c:77:a4:f4:e8:24:6e:d9:6f:a0:
34:9c:5c:07:8c:2e:a3:7b:5b:dd:c2:65:68:91:20:
6f:87:b9:54:c9:78:c2:d5:4f:f4:b5:99:5a:2c:4f:
d9:09:1b:23:63:c4:15:42:20:d5:70:c1:65:d5:5b:
a1:cf:5f:1c:a3:a9:90:da:d6:84:ef:13:0e:80:89:
d1:4a:0d:5e:2b:cc:b4:f5:26:8d:09:d2:d6:c5:22:
8a:89:f0:54:db:00:c5:21:bf:8d:f9:7c:1f:e8:ff:
58:ea:9b:7e:a8:49:00:16:c2:72:e8:15:bc:fd:54:
56:32:1d:50:99:fc:94:52:f6:8e:ba:48:2b:b7:b7:
85:04:53:cf:0e:3a:c6:6c:17:e7:3a:c5:ac:49:ec:
01:42:ce:b9:b6:d7:7b:90:de:c0:89:f4:1f:df:1d:
fa:12:fe:83:78:f4:03:33:93:c0:3d:c7:a0:60:3c:
f4:8a:7b:ed:cb:01:6a:c6:ae:75:28:fe:b3:fc:a4:
a1:3c:19:77:16:00:f9:86:be:3f:02:4f:19:1c:38:
15:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:F1:3C:81:08:E2:16:25:9B:23:8F:9C:C2:34:55:D6:5E:2D:3F:70
X509v3 Authority Key Identifier:
keyid:CA:E3:DB:8A:DE:E7:A1:6A:B6:CA:53:7F:23:47:B0:20:5B:DF:4F:76
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91FA6FF/D281E7302E2911EFBAED6A1AC4F9AE02/yuPbit7noWq2ylN_I0ewIFvfT3Y.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yuPbit7noWq2ylN_I0ewIFvfT3Y.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FA6FF/D281E7302E2911EFBAED6A1AC4F9AE02/12032AE02EAC11EFB73C0767C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv6:
2401:9f20::/32
Signature Algorithm: sha256WithRSAEncryption
a6:09:2e:03:26:0f:3f:a7:43:72:16:40:d9:17:6e:0b:da:4f:
61:a2:63:3a:92:99:52:c7:41:5f:e8:fe:3b:46:f3:97:55:38:
a3:1d:22:17:da:96:73:de:f3:4d:44:ee:31:0a:e5:bf:cf:6d:
2d:78:cd:f7:6f:31:14:52:f5:78:28:ce:da:ed:ae:c6:0d:24:
5c:18:73:d6:b9:51:02:6a:99:dd:38:71:6a:89:9a:ad:14:ad:
c7:3c:14:e4:db:4b:3f:fe:23:53:6c:56:2e:47:5c:16:ac:a6:
83:05:6f:8b:3c:da:49:c2:86:e4:26:eb:4d:0e:fe:e5:30:d5:
7b:d0:8a:72:64:44:0b:61:95:76:53:c9:8d:5f:5f:f8:71:b5:
7e:55:5e:28:b3:3a:ed:03:f5:bf:89:09:b1:3a:83:3b:e3:f9:
1d:5f:70:1e:f0:d4:da:3d:20:38:cb:b4:05:cc:67:90:6b:45:
c9:ba:e3:92:6b:06:c3:4a:ba:3b:91:c3:6e:80:fd:3c:12:73:
20:c9:d5:1c:10:f6:67:5f:71:ab:d3:8e:c5:56:33:91:d8:dc:
65:7d:b7:2f:ee:ef:06:f3:33:9f:01:a7:d3:71:f4:2a:d6:9e:
db:89:43:32:f0:a5:89:f4:41:1b:45:a7:43:3e:d0:fa:80:e5:
bf:d8:96:22
-----BEGIN CERTIFICATE-----
MIIFcjCCBFqgAwIBAgICAKQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RkE2RkYxMTAvBgNVBAUTKENBRTNEQjhBREVFN0ExNkFCNkNBNTM3RjIzNDdCMDIw
NUJERjRGNzYwHhcNMjUwNDA5MDUxMjM3WhcNMjYwNTI4MDAwMDAwWjAYMRYwFAYD
VQQDEw02N2Y2MDFjNS1kNmM4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAvQPdnIaTkfM3NCNFFNh06cseS7Vo/SPoc1uiIr15e5tqOvJJ3ifKPJv1qO99
tygbmxx3pPToJG7Zb6A0nFwHjC6je1vdwmVokSBvh7lUyXjC1U/0tZlaLE/ZCRsj
Y8QVQiDVcMFl1Vuhz18co6mQ2taE7xMOgInRSg1eK8y09SaNCdLWxSKKifBU2wDF
Ib+N+Xwf6P9Y6pt+qEkAFsJy6BW8/VRWMh1QmfyUUvaOukgrt7eFBFPPDjrGbBfn
OsWsSewBQs65ttd7kN7AifQf3x36Ev6DePQDM5PAPcegYDz0invtywFqxq51KP6z
/KShPBl3FgD5hr4/Ak8ZHDgVKwIDAQABo4ICljCCApIwHQYDVR0OBBYEFLjxPIEI
4hYlmyOPnMI0VdZeLT9wMB8GA1UdIwQYMBaAFMrj24re56FqtspTfyNHsCBb3092
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGQTZGRi9EMjgxRTczMDJF
MjkxMUVGQkFFRDZBMUFDNEY5QUUwMi95dVBiaXQ3bm9XcTJ5bE5fSTBld0lGdmZU
M1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3l1UGJpdDdub1dxMnlsTl9JMGV3SUZ2ZlQzWS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
RkE2RkYvRDI4MUU3MzAyRTI5MTFFRkJBRUQ2QTFBQzRGOUFFMDIvMTIwMzJBRTAy
RUFDMTFFRkI3M0MwNzY3QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwIAYIKwYBBQUHAQcBAf8E
ETAPMA0EAgACMAcDBQAkAZ8gMA0GCSqGSIb3DQEBCwUAA4IBAQCmCS4DJg8/p0Ny
FkDZF24L2k9homM6kplSx0Ff6P47RvOXVTijHSIX2pZz3vNNRO4xCuW/z20teM33
bzEUUvV4KM7a7a7GDSRcGHPWuVECapndOHFqiZqtFK3HPBTk20s//iNTbFYuR1wW
rKaDBW+LPNpJwobkJutNDv7lMNV70IpyZEQLYZV2U8mNX1/4cbV+VV4oszrtA/W/
iQmxOoM74/kdX3Ae8NTaPSA4y7QFzGeQa0XJuuOSawbDSro7kcNugP08EnMgydUc
EPZnX3Gr047FVjOR2Nxlfbcv7u8G8zOfAafTcfQq1p7biUMy8KWJ9EEbRadDPtD6
gOW/2JYi
-----END CERTIFICATE-----
Generated at Thu Apr 10 15:37:14 2025 by rpki-client