Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A915B536/E4C88972EB7411EABA0A9E48C4F9AE02/5056827E1D1711EB9918046AC4F9AE02.roa
File: 5056827E1D1711EB9918046AC4F9AE02.roa (raw, json)
Hash identifier: /t87PANjNW6EpQXUSbODbYse7J1TpUCr6EqoPlENnyw=
Subject key identifier: 18:A9:98:EF:50:C0:45:26:08:3C:C2:74:45:8C:C0:8E:EF:FB:8E:BA
Certificate issuer: /CN=A915B536/serialNumber=8210D43756654B10705D5AB3F37BF01A78B78C47
Certificate serial: 0759
Authority key identifier: 82:10:D4:37:56:65:4B:10:70:5D:5A:B3:F3:7B:F0:1A:78:B7:8C:47
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ghDUN1ZlSxBwXVqz83vwGni3jEc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915B536/E4C88972EB7411EABA0A9E48C4F9AE02/5056827E1D1711EB9918046AC4F9AE02.roa
Signing time: Wed 10 Apr 2024 23:01:36 +0000
ROA not before: Wed 10 Apr 2024 23:01:36 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 30133
IP address blocks: 103.11.221.0/24 maxlen: 24
202.41.140.0/24 maxlen: 24
202.41.142.0/24 maxlen: 24
202.41.143.0/24 maxlen: 24
202.41.144.0/24 maxlen: 24
202.41.146.0/24 maxlen: 24
203.119.16.0/24 maxlen: 24
203.119.17.0/24 maxlen: 24
203.119.19.0/24 maxlen: 24
203.119.20.0/24 maxlen: 24
203.119.51.0/24 maxlen: 24
203.119.57.0/24 maxlen: 24
203.119.79.0/24 maxlen: 24
2001:dd8:13::/48 maxlen: 48
2001:dd8:14::/48 maxlen: 48
2001:dd8:15::/48 maxlen: 48
2001:dd8:17::/48 maxlen: 48
2001:dd8:18::/48 maxlen: 48
2001:dd8:19::/48 maxlen: 48
2001:dd8:1a::/48 maxlen: 48
2001:dd8:1c::/48 maxlen: 48
2001:dd8:1d::/48 maxlen: 48
2001:dd8:1e::/48 maxlen: 48
2001:dd8:22::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A915B536/E4C88972EB7411EABA0A9E48C4F9AE02/ghDUN1ZlSxBwXVqz83vwGni3jEc.crl
rsync://rpki.apnic.net/member_repository/A915B536/E4C88972EB7411EABA0A9E48C4F9AE02/ghDUN1ZlSxBwXVqz83vwGni3jEc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ghDUN1ZlSxBwXVqz83vwGni3jEc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 19 Mar 2025 20:46:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1881 (0x759)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915B536
Validity
Not Before: Apr 10 23:01:36 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=66171a50-be5b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f5:90:af:fa:e5:fb:58:87:4e:61:cf:47:b1:ff:
5a:e2:8a:fb:f0:06:ea:06:c3:19:88:80:df:8f:e8:
2c:ca:d6:2b:c8:c8:5d:22:a3:e3:26:d6:6d:2c:9b:
f3:0c:fe:64:d5:b2:57:d7:c2:39:b8:bb:33:10:63:
2b:91:00:c8:93:46:26:dc:72:d0:e6:21:16:d6:43:
16:46:a5:9d:3b:36:ff:8f:0b:bf:0e:34:91:ae:05:
7e:2e:c2:cf:9e:d3:04:ea:c1:af:d4:60:a6:57:b8:
d6:fd:1a:26:6f:09:72:1b:c5:2a:d8:75:f0:3a:95:
ef:06:a9:e5:d8:57:68:0b:63:67:00:02:23:51:08:
c0:80:a9:e4:b5:01:78:3f:89:06:f2:f0:24:6f:ff:
a1:98:0d:93:bd:3d:bd:d9:fe:91:8e:1f:01:c2:1d:
82:93:96:c4:69:69:de:52:08:9e:61:ed:f7:c6:e0:
85:36:5e:ae:44:f0:18:cb:aa:0f:e7:89:44:8b:22:
71:c8:5d:45:e0:57:a3:38:91:33:7c:49:a2:0b:5e:
b4:57:20:73:e8:92:c6:94:36:37:ae:2c:57:f8:d4:
9e:11:16:3d:61:9b:6b:63:f8:7e:b4:f6:ca:06:9b:
8f:3e:c3:da:5a:07:6d:b8:fe:f0:59:3b:3a:f4:14:
38:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:A9:98:EF:50:C0:45:26:08:3C:C2:74:45:8C:C0:8E:EF:FB:8E:BA
X509v3 Authority Key Identifier:
keyid:82:10:D4:37:56:65:4B:10:70:5D:5A:B3:F3:7B:F0:1A:78:B7:8C:47
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915B536/E4C88972EB7411EABA0A9E48C4F9AE02/ghDUN1ZlSxBwXVqz83vwGni3jEc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ghDUN1ZlSxBwXVqz83vwGni3jEc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915B536/E4C88972EB7411EABA0A9E48C4F9AE02/5056827E1D1711EB9918046AC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.11.221.0/24
202.41.140.0/24
202.41.142.0-202.41.144.255
202.41.146.0/24
203.119.16.0/23
203.119.19.0-203.119.20.255
203.119.51.0/24
203.119.57.0/24
203.119.79.0/24
IPv6:
2001:dd8:13::-2001:dd8:15:ffff:ffff:ffff:ffff:ffff
2001:dd8:17::-2001:dd8:1a:ffff:ffff:ffff:ffff:ffff
2001:dd8:1c::-2001:dd8:1e:ffff:ffff:ffff:ffff:ffff
2001:dd8:22::/48
Signature Algorithm: sha256WithRSAEncryption
34:0f:ab:82:00:34:b5:31:6e:b3:b0:1a:e3:c1:95:1d:06:10:
0a:00:70:4b:09:02:c2:9e:fd:1f:19:48:72:2f:c8:d5:d4:a5:
d8:12:b9:4f:a2:63:29:21:63:01:3e:03:a0:54:c0:bd:e4:76:
b8:19:e8:a9:9d:d5:de:5d:5a:68:ef:a6:fb:08:31:0f:fa:a0:
04:a0:9a:ab:be:b9:19:72:e1:dc:fb:5d:83:7b:72:a8:65:61:
4c:f7:1c:f7:fc:d2:57:0e:84:02:ae:bc:24:0f:43:f6:46:ab:
82:cf:97:14:40:00:fe:81:ea:57:93:cc:94:fe:1f:a7:f6:ec:
d2:b0:e1:c7:ae:bc:c8:46:03:85:61:f0:df:c7:e4:45:1b:ef:
ca:2c:b8:23:f9:80:28:5b:ad:27:42:2b:6f:de:60:61:e5:45:
39:a2:4f:d5:04:09:f2:0a:da:80:40:7c:68:cb:9e:ae:f3:cf:
c7:01:67:2e:ca:b7:b1:7a:eb:b5:5d:8a:a4:bf:37:76:81:fd:
ed:4b:08:6a:00:30:3c:45:a4:79:ad:aa:de:4a:d5:bb:a9:12:
4c:23:a1:db:c3:0c:5a:10:aa:39:1a:2a:69:f5:07:79:21:25:
f2:57:fc:38:b2:ba:ee:d0:c4:cc:07:6b:9b:57:25:7d:8c:7a:
fe:a2:43:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 21:56:53 2025 by rpki-client