Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9172999/B1C1B0DA031E11ED96E25620C4F9AE02/9E760A10B83B11EFB3BA160AC4F9AE02.roa
File: 9E760A10B83B11EFB3BA160AC4F9AE02.roa (raw, json)
Hash identifier: +FhjATmcLMZKl9Iq67ZOqZNWkcnSddFmOwPj8XYYbcA=
Subject key identifier: 1D:BD:72:5D:37:9E:77:62:CB:CE:20:B1:80:60:EB:91:99:E5:32:0A
Certificate issuer: /CN=A9172999/serialNumber=2F533EA0E40819DF563E3F7FE3FE87428D52A0D5
Certificate serial: 0288
Authority key identifier: 2F:53:3E:A0:E4:08:19:DF:56:3E:3F:7F:E3:FE:87:42:8D:52:A0:D5
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L1M-oOQIGd9WPj9_4_6HQo1SoNU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9172999/B1C1B0DA031E11ED96E25620C4F9AE02/9E760A10B83B11EFB3BA160AC4F9AE02.roa
Signing time: Mon 17 Feb 2025 09:15:39 +0000
ROA not before: Mon 17 Feb 2025 09:15:39 +0000
ROA not after: Wed 28 May 2025 00:00:00 +0000
asID: 54801
IP address blocks: 103.40.8.0/22 maxlen: 22
103.40.8.0/23 maxlen: 23
103.40.8.0/24 maxlen: 24
103.180.160.0/23 maxlen: 23
103.180.160.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9172999/B1C1B0DA031E11ED96E25620C4F9AE02/L1M-oOQIGd9WPj9_4_6HQo1SoNU.crl
rsync://rpki.apnic.net/member_repository/A9172999/B1C1B0DA031E11ED96E25620C4F9AE02/L1M-oOQIGd9WPj9_4_6HQo1SoNU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L1M-oOQIGd9WPj9_4_6HQo1SoNU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 20 Apr 2025 01:16:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 648 (0x288)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9172999, serialNumber=2F533EA0E40819DF563E3F7FE3FE87428D52A0D5
Validity
Not Before: Feb 17 09:15:39 2025 GMT
Not After : May 28 00:00:00 2025 GMT
Subject: CN=67b2fe3a-73d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:9b:f5:44:91:cb:b4:8f:29:2b:3e:7f:3a:83:
d7:27:e4:5f:3b:a9:fa:40:fe:4a:9f:b3:f8:43:b4:
5a:59:91:99:36:37:6b:02:b8:69:3e:50:77:af:2c:
fa:96:27:5f:4f:98:4f:63:9e:72:70:f6:5b:3c:8c:
30:65:09:86:6c:ee:45:d3:b0:2e:04:22:4f:a1:41:
e6:98:02:e8:55:66:80:55:0e:e5:3b:c4:6d:3f:91:
b4:c6:04:fd:d8:73:56:8b:68:9d:dc:4c:93:4e:80:
d2:b5:c9:49:7f:69:5d:f7:d2:2b:e7:da:22:31:79:
02:b8:67:a6:26:08:3f:f2:04:3a:26:34:2a:ec:53:
a3:50:e2:d8:de:e4:0a:89:b2:b0:ce:37:56:f7:76:
80:2e:a3:27:ef:e9:7b:c3:9a:a1:bc:35:c5:0b:11:
ec:cf:de:ff:e1:e7:4e:be:c4:2c:6d:4a:97:28:d5:
18:0c:00:86:fa:d0:5a:7c:8a:24:34:b2:61:23:42:
62:3a:79:ab:f8:df:31:13:8f:a3:23:52:7d:0e:95:
a7:20:68:87:78:6a:db:70:81:f9:cf:6a:d3:00:2d:
e4:a4:28:e3:e3:4d:d1:86:1c:60:7c:75:01:db:38:
8d:75:9d:14:d6:ab:8f:e5:90:ff:ba:a7:23:2c:a6:
b9:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:BD:72:5D:37:9E:77:62:CB:CE:20:B1:80:60:EB:91:99:E5:32:0A
X509v3 Authority Key Identifier:
keyid:2F:53:3E:A0:E4:08:19:DF:56:3E:3F:7F:E3:FE:87:42:8D:52:A0:D5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9172999/B1C1B0DA031E11ED96E25620C4F9AE02/L1M-oOQIGd9WPj9_4_6HQo1SoNU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L1M-oOQIGd9WPj9_4_6HQo1SoNU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9172999/B1C1B0DA031E11ED96E25620C4F9AE02/9E760A10B83B11EFB3BA160AC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.40.8.0/22
103.180.160.0/23
Signature Algorithm: sha256WithRSAEncryption
18:cb:3f:6c:4e:23:5b:3f:b6:91:dd:77:0f:86:89:ce:26:f5:
b5:3e:5d:be:af:50:c6:cb:3a:a4:a2:a0:ea:ad:b0:b1:aa:0e:
39:87:9e:47:b0:d6:d8:42:33:fb:bc:40:b0:a4:95:21:a8:42:
ec:30:06:70:b2:bc:9a:7c:fe:a5:be:02:67:9f:9e:b9:73:e1:
6b:1e:d8:ec:a3:39:8c:a0:81:fb:03:07:3a:ee:be:72:c6:f5:
d8:1b:08:69:ea:ab:66:f5:b5:38:af:54:b9:13:4f:d7:5f:bf:
54:af:d8:3c:e3:e9:97:61:0a:96:58:0d:a3:c5:a5:fa:96:a8:
e9:46:f7:2c:30:02:3e:cf:35:90:6e:42:aa:0a:23:d4:f1:c9:
42:3c:c1:6f:25:17:33:32:fa:46:f0:2a:b8:62:76:a6:14:d9:
fc:29:96:aa:59:d0:78:68:0a:15:f0:6c:27:ba:3e:8c:dc:e5:
4d:be:f1:20:b4:23:06:c0:d5:d6:f5:e5:f9:fc:e7:82:fd:a6:
bb:1f:eb:1d:d8:ff:40:4e:1d:91:c0:e5:d3:17:b5:d5:61:08:
42:7f:ec:94:0f:6c:b0:d7:bb:49:a8:ac:bf:ec:3e:69:39:2e:
42:43:64:f2:7c:92:af:3c:cc:f7:4d:ba:18:ae:1a:21:5a:04:
c8:98:aa:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 11:42:24 2025 by rpki-client