Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C2CC7/791C6A347B3811E9BC0D3B32C4F9AE02/B35E5B46334111EF9770A542C4F9AE02.roa
File: B35E5B46334111EF9770A542C4F9AE02.roa (raw, json)
Hash identifier: POv6am3kG0Q+Q6wUXCA7wbkvozTpMjE+VV+U9mmfNA0=
Subject key identifier: ED:A2:57:E0:1D:C3:50:B2:B0:3D:99:0E:E5:38:4A:EB:45:72:4D:B9
Certificate issuer: /CN=A91C2CC7/serialNumber=77486B610D333AEBDA8F255C501411B01F18FF49
Certificate serial: 0F00
Authority key identifier: 77:48:6B:61:0D:33:3A:EB:DA:8F:25:5C:50:14:11:B0:1F:18:FF:49
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d0hrYQ0zOuvajyVcUBQRsB8Y_0k.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C2CC7/791C6A347B3811E9BC0D3B32C4F9AE02/B35E5B46334111EF9770A542C4F9AE02.roa
Signing time: Tue 25 Jun 2024 22:48:59 +0000
ROA not before: Tue 25 Jun 2024 22:48:59 +0000
ROA not after: Wed 28 May 2025 00:00:00 +0000
asID: 3356
IP address blocks: 103.30.186.0/23 maxlen: 23
202.53.197.0/24 maxlen: 24
202.53.204.0/23 maxlen: 23
202.53.206.0/23 maxlen: 23
2401:df00:1::/48 maxlen: 48
2401:df00:2::/48 maxlen: 48
2401:df00:11::/48 maxlen: 48
2401:df00:12::/48 maxlen: 48
2401:df00:21::/48 maxlen: 48
2401:df00:22::/48 maxlen: 48
2401:df00:31::/48 maxlen: 48
2401:df00:32::/48 maxlen: 48
2401:df00:41::/48 maxlen: 48
2401:df00:42::/48 maxlen: 48
2401:df00:51::/48 maxlen: 48
2401:df00:52::/48 maxlen: 48
2401:df00:61::/48 maxlen: 48
2401:df00:62::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C2CC7/791C6A347B3811E9BC0D3B32C4F9AE02/d0hrYQ0zOuvajyVcUBQRsB8Y_0k.crl
rsync://rpki.apnic.net/member_repository/A91C2CC7/791C6A347B3811E9BC0D3B32C4F9AE02/d0hrYQ0zOuvajyVcUBQRsB8Y_0k.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d0hrYQ0zOuvajyVcUBQRsB8Y_0k.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 21 Feb 2025 05:15:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3840 (0xf00)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C2CC7
Validity
Not Before: Jun 25 22:48:59 2024 GMT
Not After : May 28 00:00:00 2025 GMT
Subject: CN=667b495a-204e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:e3:54:99:57:e9:ac:d2:8f:99:6a:d0:40:45:
d1:c3:a2:f8:06:d6:ac:0b:f1:ae:70:9f:60:ad:85:
e3:fd:93:64:ab:5f:3c:42:cf:c4:79:d8:60:67:3a:
45:c3:b8:13:5e:2b:20:bf:a6:35:1e:98:23:c6:d5:
9c:a6:6d:55:be:53:f3:f2:1a:11:70:e5:66:19:b2:
94:02:95:5f:0a:2c:b3:a5:ef:27:59:73:62:5b:6d:
31:3c:98:8a:e0:d3:92:84:ab:47:5e:0b:c1:cd:e5:
83:73:eb:df:86:5e:fe:1e:4d:45:05:c9:55:7e:b4:
cd:99:0d:fe:51:a6:20:8f:88:87:4b:74:00:b8:ea:
7c:f0:bc:dc:29:27:5f:7c:fe:1d:74:c8:28:24:d8:
a6:da:4b:cc:fe:85:80:2f:82:b1:50:0b:3a:5b:a7:
c1:5a:86:b3:c0:e6:95:97:7a:8c:dd:33:25:ba:3c:
33:a8:4a:ef:46:58:5d:7a:c0:ce:6e:8e:9c:59:fa:
44:70:32:f8:b8:99:50:09:87:fd:e9:f6:90:33:19:
22:d5:3a:1a:58:2b:fb:fb:bb:2a:8b:32:ee:08:e9:
be:bc:fd:b5:7a:6f:0f:ba:57:b7:f1:52:81:77:fb:
7b:8b:cd:fe:6d:df:b1:c7:56:96:98:ae:d4:5f:33:
a8:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:A2:57:E0:1D:C3:50:B2:B0:3D:99:0E:E5:38:4A:EB:45:72:4D:B9
X509v3 Authority Key Identifier:
keyid:77:48:6B:61:0D:33:3A:EB:DA:8F:25:5C:50:14:11:B0:1F:18:FF:49
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C2CC7/791C6A347B3811E9BC0D3B32C4F9AE02/d0hrYQ0zOuvajyVcUBQRsB8Y_0k.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d0hrYQ0zOuvajyVcUBQRsB8Y_0k.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C2CC7/791C6A347B3811E9BC0D3B32C4F9AE02/B35E5B46334111EF9770A542C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.30.186.0/23
202.53.197.0/24
202.53.204.0/22
IPv6:
2401:df00:1::-2401:df00:2:ffff:ffff:ffff:ffff:ffff
2401:df00:11::-2401:df00:12:ffff:ffff:ffff:ffff:ffff
2401:df00:21::-2401:df00:22:ffff:ffff:ffff:ffff:ffff
2401:df00:31::-2401:df00:32:ffff:ffff:ffff:ffff:ffff
2401:df00:41::-2401:df00:42:ffff:ffff:ffff:ffff:ffff
2401:df00:51::-2401:df00:52:ffff:ffff:ffff:ffff:ffff
2401:df00:61::-2401:df00:62:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
1b:84:f8:52:c9:b5:4f:bb:64:d9:ed:20:03:84:01:8f:4a:0d:
0a:73:f8:1b:ce:c7:9b:24:3a:5f:4e:98:37:d6:ac:61:f0:33:
33:94:a9:07:7c:c7:8f:e4:e9:c3:cb:aa:1a:88:20:9d:20:c7:
7a:63:6c:b0:40:fb:0c:7f:14:c0:d5:ce:a4:2b:92:55:31:1c:
fd:62:aa:94:ed:bd:42:d9:23:5f:9a:f3:dc:73:02:06:e9:43:
ad:d6:a1:1d:9d:25:66:0a:72:8e:91:8e:06:a5:07:76:08:5f:
35:4e:26:ba:14:24:4d:e1:26:21:f5:27:c5:65:b6:7d:00:5a:
99:94:78:59:5d:11:d6:71:c8:08:0e:e9:1a:e2:69:47:15:ea:
fc:b9:58:2b:6e:56:b3:56:bd:46:98:c9:b7:23:75:2d:6e:da:
38:15:dc:9f:0e:6f:29:5c:a0:3f:5a:98:4b:c3:07:8c:3b:b1:
ee:9b:d1:44:0d:5c:e1:5f:b9:7e:32:77:27:c3:2d:33:29:25:
13:b8:63:53:ca:5f:47:ae:1b:43:d7:ff:da:eb:90:29:d2:f7:
ec:90:69:33:c9:48:9a:a0:db:e1:d8:42:e3:7b:c3:72:13:f3:
02:d6:4f:cf:99:fd:07:36:2e:a3:8d:e6:25:10:16:eb:15:8f:
db:6b:dd:4f
-----BEGIN CERTIFICATE-----
MIIGFjCCBP6gAwIBAgICDwAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QzJDQzcxMTAvBgNVBAUTKDc3NDg2QjYxMEQzMzNBRUJEQThGMjU1QzUwMTQxMUIw
MUYxOEZGNDkwHhcNMjQwNjI1MjI0ODU5WhcNMjUwNTI4MDAwMDAwWjAYMRYwFAYD
VQQDEw02NjdiNDk1YS0yMDRlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAxONUmVfprNKPmWrQQEXRw6L4BtasC/GucJ9grYXj/ZNkq188Qs/EedhgZzpF
w7gTXisgv6Y1HpgjxtWcpm1VvlPz8hoRcOVmGbKUApVfCiyzpe8nWXNiW20xPJiK
4NOShKtHXgvBzeWDc+vfhl7+Hk1FBclVfrTNmQ3+UaYgj4iHS3QAuOp88LzcKSdf
fP4ddMgoJNim2kvM/oWAL4KxUAs6W6fBWoazwOaVl3qM3TMlujwzqErvRlhdesDO
bo6cWfpEcDL4uJlQCYf96faQMxki1ToaWCv7+7sqizLuCOm+vP21em8Pule38VKB
d/t7i83+bd+xx1aWmK7UXzOo8QIDAQABo4IDOjCCAzYwHQYDVR0OBBYEFO2iV+Ad
w1CysD2ZDuU4SutFck25MB8GA1UdIwQYMBaAFHdIa2ENMzrr2o8lXFAUEbAfGP9J
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMkNDNy83OTFDNkEzNDdC
MzgxMUU5QkMwRDNCMzJDNEY5QUUwMi9kMGhyWVEwek91dmFqeVZjVUJRUnNCOFlf
MGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2QwaHJZUTB6T3V2YWp5VmNVQlFSc0I4WV8way5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
QzJDQzcvNzkxQzZBMzQ3QjM4MTFFOUJDMEQzQjMyQzRGOUFFMDIvQjM1RTVCNDYz
MzQxMTFFRjk3NzBBNTQyQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwgcMGCCsGAQUFBwEHAQH/
BIGzMIGwMBgEAgABMBIDBAFnHroDBADKNcUDBALKNcwwgZMEAgACMIGMMBIDBwAk
Ad8AAAEDBwAkAd8AAAIwEgMHACQB3wAAEQMHACQB3wAAEjASAwcAJAHfAAAhAwcA
JAHfAAAiMBIDBwAkAd8AADEDBwAkAd8AADIwEgMHACQB3wAAQQMHACQB3wAAQjAS
AwcAJAHfAABRAwcAJAHfAABSMBIDBwAkAd8AAGEDBwAkAd8AAGIwDQYJKoZIhvcN
AQELBQADggEBABuE+FLJtU+7ZNntIAOEAY9KDQpz+BvOx5skOl9OmDfWrGHwMzOU
qQd8x4/k6cPLqhqIIJ0gx3pjbLBA+wx/FMDVzqQrklUxHP1iqpTtvULZI1+a89xz
AgbpQ63WoR2dJWYKco6RjgalB3YIXzVOJroUJE3hJiH1J8Vltn0AWpmUeFldEdZx
yAgO6RriaUcV6vy5WCtuVrNWvUaYybcjdS1u2jgV3J8ObylcoD9amEvDB4w7se6b
0UQNXOFfuX4ydyfDLTMpJRO4Y1PKX0euG0PX/9rrkCnS9+yQaTPJSJqg2+HYQuN7
w3IT8wLWT8+Z/Qc2LqON5iUQFusVj9tr3U8=
-----END CERTIFICATE-----
Generated at Sun Feb 16 15:24:41 2025 by rpki-client