Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91FB5CE/B096C500C81A11EBB125A73EC4F9AE02/F189CB86C81D11EBA4C0E321C4F9AE02.roa
File: F189CB86C81D11EBA4C0E321C4F9AE02.roa (raw, json)
Hash identifier: bmMn0IWRpy37XK6k+WXVEF+nIujAMD8B3cc9TjWsaYg=
Subject key identifier: AF:2F:C4:9C:8A:4E:5B:37:F5:53:1C:12:57:37:4A:FC:73:EC:A2:5E
Certificate issuer: /CN=A91FB5CE/serialNumber=58E908D0C71A49F482A7C7D9552A33559CAE2643
Certificate serial: 054E
Authority key identifier: 58:E9:08:D0:C7:1A:49:F4:82:A7:C7:D9:55:2A:33:55:9C:AE:26:43
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WOkI0McaSfSCp8fZVSozVZyuJkM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91FB5CE/B096C500C81A11EBB125A73EC4F9AE02/F189CB86C81D11EBA4C0E321C4F9AE02.roa
Signing time: Fri 08 Nov 2024 23:01:54 +0000
ROA not before: Fri 08 Nov 2024 23:01:54 +0000
ROA not after: Sat 31 Jan 2026 00:00:00 +0000
asID: 137968
IP address blocks: 203.25.144.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91FB5CE/B096C500C81A11EBB125A73EC4F9AE02/WOkI0McaSfSCp8fZVSozVZyuJkM.crl
rsync://rpki.apnic.net/member_repository/A91FB5CE/B096C500C81A11EBB125A73EC4F9AE02/WOkI0McaSfSCp8fZVSozVZyuJkM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WOkI0McaSfSCp8fZVSozVZyuJkM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 23 Apr 2025 22:52:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1358 (0x54e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91FB5CE, serialNumber=58E908D0C71A49F482A7C7D9552A33559CAE2643
Validity
Not Before: Nov 8 23:01:54 2024 GMT
Not After : Jan 31 00:00:00 2026 GMT
Subject: CN=672e9861-ecd7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:8e:50:19:ad:95:67:29:19:a2:38:85:1d:1d:
7a:42:2b:9a:83:90:f7:1d:97:f8:84:0f:fe:f0:c2:
c2:db:74:d1:c4:df:36:b8:60:5d:b1:a5:10:75:81:
21:02:17:39:db:78:ea:55:0b:4d:c3:b3:c7:89:cc:
7a:a1:4b:7a:59:94:3b:19:6c:6d:db:9a:d2:da:4b:
a0:1d:fa:8b:87:c2:5c:85:71:59:98:e0:ac:d6:09:
74:a2:e2:fe:4e:fe:c8:2c:df:d5:d3:78:38:1a:7d:
ad:a8:f1:33:a2:22:e4:f4:9a:96:ba:72:59:07:c0:
94:a3:ae:4c:35:52:c2:74:62:69:9b:3c:6d:d7:e3:
58:79:db:13:89:ce:94:cf:4a:db:d1:8f:22:d4:33:
86:ba:1a:2d:f6:f7:48:be:28:9b:c2:61:04:87:6a:
bc:4f:a6:7a:e5:58:39:25:1d:26:e8:bf:fe:92:09:
a7:f2:15:d9:09:53:33:c4:fd:48:8a:2b:f4:95:b8:
41:ab:1d:96:c8:82:3b:ae:2e:b8:7e:e7:32:14:5e:
db:32:41:29:85:db:6c:fb:f2:08:09:ef:11:a5:dd:
21:f0:97:35:d6:30:3d:74:0b:03:9e:1f:fd:3c:41:
fc:ad:14:1d:c9:dd:c2:4f:32:51:1a:c0:8b:a4:13:
84:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:2F:C4:9C:8A:4E:5B:37:F5:53:1C:12:57:37:4A:FC:73:EC:A2:5E
X509v3 Authority Key Identifier:
keyid:58:E9:08:D0:C7:1A:49:F4:82:A7:C7:D9:55:2A:33:55:9C:AE:26:43
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91FB5CE/B096C500C81A11EBB125A73EC4F9AE02/WOkI0McaSfSCp8fZVSozVZyuJkM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WOkI0McaSfSCp8fZVSozVZyuJkM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FB5CE/B096C500C81A11EBB125A73EC4F9AE02/F189CB86C81D11EBA4C0E321C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
203.25.144.0/24
Signature Algorithm: sha256WithRSAEncryption
64:1c:0d:27:cd:dd:f9:7e:39:bd:6d:bb:a4:93:ef:f7:49:4d:
0f:4c:d5:8d:ee:bb:f8:f4:94:83:4c:c3:10:ec:4a:f8:4e:19:
aa:8e:d2:4f:cd:2a:97:ee:69:01:21:0e:b2:d1:45:70:36:8c:
c0:e1:0f:2d:0c:33:18:ff:ee:c6:7a:a5:b8:71:37:6d:b3:a8:
19:1d:cb:72:d5:5e:f0:c3:9c:fc:cf:90:2f:ef:68:8f:ae:a5:
63:26:9d:57:47:68:3d:20:33:f2:d8:4b:26:d0:1b:f0:56:20:
80:41:38:d1:b2:83:bb:b6:a8:85:db:c1:22:e8:a3:ef:58:98:
ba:cb:8b:fa:94:a7:e7:12:32:69:d7:f1:b3:d4:f3:e8:2a:a9:
d6:74:27:c3:a9:ff:05:78:8b:ca:87:52:3b:90:ad:ea:13:35:
6d:be:2a:2a:30:06:39:ca:cf:0b:b1:d8:31:75:30:57:09:cc:
9f:c9:e4:53:4a:52:2b:b2:38:21:18:8b:b3:25:78:48:34:4e:
9f:1d:ee:fd:84:1c:5e:88:e7:48:64:1b:c4:17:ce:35:5e:ef:
43:12:69:03:53:84:2f:fe:cc:0e:4f:d8:bf:48:80:3c:b4:8c:
ab:d2:82:e1:14:40:ec:f1:00:03:0d:24:a4:b9:58:52:51:b6:
18:af:24:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 09:17:25 2025 by rpki-client