Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91FF19B/36488D80665B11EC8885A480C4F9AE02/0C023160C4C911EE9278E261C4F9AE02.roa
File: 0C023160C4C911EE9278E261C4F9AE02.roa (raw, json)
Hash identifier: RLzlmcW/oxo3+VUjO1sUrRUA07nzGadIHmec6ld3tSY=
Subject key identifier: 7B:5C:FE:7E:DF:FF:D4:99:AC:4D:D6:73:DD:AD:9C:C6:CE:23:D5:9E
Certificate issuer: /CN=A91FF19B/serialNumber=72B8B8CD10307B16324D879827DF32A4AA8D6AA1
Certificate serial: 03CC
Authority key identifier: 72:B8:B8:CD:10:30:7B:16:32:4D:87:98:27:DF:32:A4:AA:8D:6A:A1
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cri4zRAwexYyTYeYJ98ypKqNaqE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91FF19B/36488D80665B11EC8885A480C4F9AE02/0C023160C4C911EE9278E261C4F9AE02.roa
Signing time: Sun 17 Nov 2024 00:33:33 +0000
ROA not before: Sun 17 Nov 2024 00:33:33 +0000
ROA not after: Sat 31 Jan 2026 00:00:00 +0000
asID: 149016
IP address blocks: 103.176.81.0/24 maxlen: 24
2001:df0:b40::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91FF19B/36488D80665B11EC8885A480C4F9AE02/cri4zRAwexYyTYeYJ98ypKqNaqE.crl
rsync://rpki.apnic.net/member_repository/A91FF19B/36488D80665B11EC8885A480C4F9AE02/cri4zRAwexYyTYeYJ98ypKqNaqE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cri4zRAwexYyTYeYJ98ypKqNaqE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 20 Apr 2025 00:05:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 972 (0x3cc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91FF19B, serialNumber=72B8B8CD10307B16324D879827DF32A4AA8D6AA1
Validity
Not Before: Nov 17 00:33:33 2024 GMT
Not After : Jan 31 00:00:00 2026 GMT
Subject: CN=673939dd-38e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:c5:45:7a:50:b6:da:cb:22:75:01:51:1f:b0:
0b:76:1b:cc:a5:2f:2d:0b:d4:bd:5f:44:e5:dc:e1:
14:34:30:89:e4:a0:54:32:a1:24:92:3c:38:21:ad:
7a:6a:3d:7a:f4:d5:9b:95:38:89:c8:4f:c7:78:bc:
b5:63:9f:06:8c:48:4b:ee:4a:65:68:78:6f:5a:76:
61:92:8c:26:46:b6:d3:2a:c0:25:ea:3c:a6:c0:8c:
9f:d1:52:6d:e9:d4:87:29:23:b1:6f:b5:b2:0d:2f:
be:37:23:6b:77:bd:d0:f1:0e:9e:19:d9:9a:10:a8:
93:10:99:85:b2:db:36:34:e8:81:63:9d:8e:e1:80:
0a:64:21:47:f5:7d:a9:16:08:4d:9b:14:76:30:01:
53:4d:1b:4d:e8:5a:72:c7:49:bf:33:37:49:34:2d:
95:e0:b2:c4:6f:ac:8a:0e:a6:03:36:2d:a7:d1:b6:
e4:96:a4:17:fb:cc:1f:50:0a:9d:31:3d:20:5b:cb:
c3:b6:f3:41:43:10:9b:38:a2:9e:12:d9:0b:b2:32:
b6:92:f0:59:fe:50:c1:3e:5c:8c:f2:ef:80:71:51:
b5:d5:45:87:c4:b6:d9:da:58:18:0e:85:14:53:cd:
0c:a3:4f:f3:c5:05:75:c8:55:8f:3b:ad:5c:3f:ae:
c5:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:5C:FE:7E:DF:FF:D4:99:AC:4D:D6:73:DD:AD:9C:C6:CE:23:D5:9E
X509v3 Authority Key Identifier:
keyid:72:B8:B8:CD:10:30:7B:16:32:4D:87:98:27:DF:32:A4:AA:8D:6A:A1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91FF19B/36488D80665B11EC8885A480C4F9AE02/cri4zRAwexYyTYeYJ98ypKqNaqE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cri4zRAwexYyTYeYJ98ypKqNaqE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FF19B/36488D80665B11EC8885A480C4F9AE02/0C023160C4C911EE9278E261C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.176.81.0/24
IPv6:
2001:df0:b40::/48
Signature Algorithm: sha256WithRSAEncryption
1a:5f:6f:72:e5:8b:5d:e6:32:64:b9:44:21:38:f8:25:f1:f8:
ac:1d:65:0a:97:8d:42:e9:32:92:c0:3a:6e:33:6a:3c:bd:d7:
ec:35:54:ab:8d:c7:c4:86:f6:b9:76:b1:9d:b8:8a:63:65:27:
92:6d:26:13:ba:1d:f9:61:96:ea:b7:85:dc:b9:96:53:bc:79:
92:33:c3:f6:67:03:f3:21:2c:a5:63:81:14:fd:ba:0a:42:00:
52:34:e8:e1:7f:33:a8:3b:66:21:08:72:57:7e:a2:59:ee:ee:
37:a2:4b:09:ef:d8:61:38:82:e5:53:8b:a6:0a:92:94:14:ec:
06:51:14:dc:cb:1e:38:6a:fe:8c:e4:fc:cc:df:49:6c:33:b4:
e8:58:75:79:d6:a4:9f:28:36:ca:5e:a5:06:25:ac:94:98:83:
e0:eb:98:ad:ca:2d:0e:5c:64:35:5d:ac:e0:bd:4a:ab:44:43:
11:b1:58:d4:3b:4e:71:6f:90:c2:a7:46:a9:41:5a:43:a6:84:
4c:34:80:5f:17:3e:01:13:f0:c6:de:6a:94:a8:70:23:b1:9f:
ff:99:3f:5c:16:d6:1a:2f:90:00:e9:3e:a1:0f:9d:1f:b9:db:
56:7f:a3:6d:48:e3:ef:2e:2a:e5:91:64:84:57:80:fd:14:92:
01:1b:28:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 02:59:04 2025 by rpki-client