Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/367647BCC10111EFA021DB2EC4F9AE02.roa
File: 367647BCC10111EFA021DB2EC4F9AE02.roa (raw, json)
Hash identifier: 805zCz/vxVW5QT9vZtvQ6r5QayiU2P0gShlSEPKNCcc=
Subject key identifier: 07:0C:10:E7:67:17:D2:DE:31:CB:AE:F7:E0:17:5F:3C:DB:91:B0:EB
Certificate issuer: /CN=A91A560A/serialNumber=167C3B221775FEC05039468150CE814756AC6F0A
Certificate serial: 4B4D
Authority key identifier: 16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/367647BCC10111EFA021DB2EC4F9AE02.roa
Signing time: Fri 23 May 2025 02:09:50 +0000
ROA not before: Fri 23 May 2025 02:09:50 +0000
ROA not after: Fri 31 Oct 2025 00:00:00 +0000
asID: 38732
IP address blocks: 42.96.32.0/24 maxlen: 24
42.96.34.0/23 maxlen: 24
45.122.253.0/24 maxlen: 24
101.99.3.0/24 maxlen: 24
103.21.148.0/22 maxlen: 24
103.63.108.0/23 maxlen: 24
103.152.164.0/23 maxlen: 24
103.173.66.0/23 maxlen: 24
103.252.0.0/22 maxlen: 24
115.146.120.0/21 maxlen: 24
124.158.0.0/21 maxlen: 24
163.227.126.0/23 maxlen: 23
183.91.14.0/24 maxlen: 24
203.205.8.0/24 maxlen: 24
2001:df5:67c0::/48 maxlen: 48
2402:5300:407::/48 maxlen: 48
2402:5300:7000::/40 maxlen: 48
2402:5300:7200::/40 maxlen: 48
2402:5300:7300::/40 maxlen: 48
2402:5300:7400::/40 maxlen: 48
2402:5300:7500::/40 maxlen: 48
2402:5300:7600::/40 maxlen: 48
2402:5300:7700::/40 maxlen: 48
2402:5300:7800::/40 maxlen: 48
2402:5300:7900::/40 maxlen: 48
2402:5300:7a00::/40 maxlen: 48
2402:5300:7b00::/40 maxlen: 48
2406:30c0::/48 maxlen: 48
2407:e3c0::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl
rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Jun 2025 14:35:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 19277 (0x4b4d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A560A, serialNumber=167C3B221775FEC05039468150CE814756AC6F0A
Validity
Not Before: May 23 02:09:50 2025 GMT
Not After : Oct 31 00:00:00 2025 GMT
Subject: CN=682fd8ed-dcd7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:fb:67:ba:4f:84:f0:e8:8b:07:22:29:27:64:
7a:4e:f0:d5:60:81:5c:8b:c8:85:70:ac:f5:55:ee:
e5:dc:2c:6b:3d:fd:12:f3:03:30:2d:0b:49:e2:12:
cb:27:87:64:ef:19:ce:fe:b1:d5:19:16:1d:53:76:
c8:e3:0a:1a:14:99:ca:ed:7c:4b:89:76:fe:55:4d:
a8:5b:78:c8:1e:f2:62:6f:7c:65:2c:ea:65:00:af:
bc:a7:cf:74:49:08:2a:db:f6:fb:31:c4:f5:85:af:
78:7b:e8:3c:0e:35:3a:9a:b1:8c:2b:ff:ef:80:dd:
48:92:1b:67:0c:ef:7f:0d:67:f3:86:f8:a9:b7:62:
1f:76:f7:f3:05:17:6e:48:f2:04:22:cc:d6:9d:8e:
e1:09:9a:de:f7:ce:77:71:8a:67:17:26:97:e3:38:
8a:68:62:5d:61:51:31:e6:f0:ed:cb:af:e6:6c:97:
13:5b:1f:fd:92:72:78:46:cb:40:09:2c:5c:41:6d:
15:7d:a7:51:9d:f5:bd:50:c5:c8:da:e1:ec:a5:2c:
f8:e3:9b:b3:bf:dd:38:41:74:fe:ba:5b:06:99:0c:
19:e1:19:77:15:33:7e:38:81:dc:fc:d7:55:a6:4e:
9e:15:3d:e1:cb:2f:fe:ed:a4:c4:f1:08:dc:c2:ee:
31:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:0C:10:E7:67:17:D2:DE:31:CB:AE:F7:E0:17:5F:3C:DB:91:B0:EB
X509v3 Authority Key Identifier:
keyid:16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/367647BCC10111EFA021DB2EC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
42.96.32.0/24
42.96.34.0/23
45.122.253.0/24
101.99.3.0/24
103.21.148.0/22
103.63.108.0/23
103.152.164.0/23
103.173.66.0/23
103.252.0.0/22
115.146.120.0/21
124.158.0.0/21
163.227.126.0/23
183.91.14.0/24
203.205.8.0/24
IPv6:
2001:df5:67c0::/48
2402:5300:407::/48
2402:5300:7000::/40
2402:5300:7200::-2402:5300:7bff:ffff:ffff:ffff:ffff:ffff
2406:30c0::/48
2407:e3c0::/48
Signature Algorithm: sha256WithRSAEncryption
5d:64:0c:6a:88:bf:3a:1d:2f:cf:db:16:2b:34:87:c0:d7:23:
ea:ad:f4:7a:c0:dc:5b:5f:a4:e3:f1:22:12:34:ab:09:cb:31:
fe:99:16:ab:37:c4:52:0d:41:79:e4:48:b7:a1:c3:b9:62:9d:
47:1f:7e:8b:09:ce:93:c9:27:92:ec:a7:59:12:51:e4:a6:bc:
94:29:52:e7:ce:d3:4a:44:75:80:79:0c:0d:65:92:9a:ee:b0:
c0:fb:19:a4:9e:51:5d:b0:a2:d4:33:02:8b:19:3c:f5:a2:22:
f8:12:5d:0a:f6:63:5c:e8:c0:28:bb:70:75:c0:b3:c9:b6:5d:
17:39:a4:3f:46:7b:32:83:76:b4:d7:aa:47:4c:72:87:61:23:
80:62:a5:f5:d3:ea:dd:00:80:aa:43:62:dd:b5:93:d7:53:7e:
3e:ee:47:19:60:73:55:42:b1:73:ce:5e:69:d6:bc:81:50:68:
c9:5c:b5:79:ed:7b:76:c5:fb:45:0c:9e:20:19:aa:89:1a:56:
a5:57:da:63:e2:0d:7c:0f:ec:c0:6a:e0:f6:04:38:c6:74:11:
96:56:d7:8f:76:62:55:e2:69:6d:84:fd:07:54:ec:b7:1d:14:
ee:60:1f:b5:66:cd:a7:8e:ad:58:ce:0e:80:01:31:08:05:71:
85:55:1d:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 3 23:44:24 2025 by rpki-client