Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C2CC7/791C6A347B3811E9BC0D3B32C4F9AE02/B431D7F0334111EF9770A542C4F9AE02.roa
File: B431D7F0334111EF9770A542C4F9AE02.roa (raw, json)
Hash identifier: Xr2vVZFsdoKESdLFd5/aMVSCMJCON8AUPU5aD5Gvk7Y=
Subject key identifier: 75:CE:65:B3:39:E2:E7:1E:80:F6:DE:1A:A6:6F:8E:2F:82:0C:21:D4
Certificate issuer: /CN=A91C2CC7/serialNumber=77486B610D333AEBDA8F255C501411B01F18FF49
Certificate serial: 0EDB
Authority key identifier: 77:48:6B:61:0D:33:3A:EB:DA:8F:25:5C:50:14:11:B0:1F:18:FF:49
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d0hrYQ0zOuvajyVcUBQRsB8Y_0k.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C2CC7/791C6A347B3811E9BC0D3B32C4F9AE02/B431D7F0334111EF9770A542C4F9AE02.roa
Signing time: Tue 25 Jun 2024 22:25:11 +0000
ROA not before: Tue 25 Jun 2024 22:25:11 +0000
ROA not after: Wed 28 May 2025 00:00:00 +0000
asID: 3360
IP address blocks: 103.30.186.0/23 maxlen: 23
202.53.197.0/24 maxlen: 24
202.53.204.0/23 maxlen: 23
202.53.206.0/23 maxlen: 23
2401:df00:1::/48 maxlen: 48
2401:df00:2::/48 maxlen: 48
2401:df00:11::/48 maxlen: 48
2401:df00:12::/48 maxlen: 48
2401:df00:21::/48 maxlen: 48
2401:df00:22::/48 maxlen: 48
2401:df00:31::/48 maxlen: 48
2401:df00:32::/48 maxlen: 48
2401:df00:41::/48 maxlen: 48
2401:df00:42::/48 maxlen: 48
2401:df00:51::/48 maxlen: 48
2401:df00:52::/48 maxlen: 48
2401:df00:61::/48 maxlen: 48
2401:df00:62::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C2CC7/791C6A347B3811E9BC0D3B32C4F9AE02/d0hrYQ0zOuvajyVcUBQRsB8Y_0k.crl
rsync://rpki.apnic.net/member_repository/A91C2CC7/791C6A347B3811E9BC0D3B32C4F9AE02/d0hrYQ0zOuvajyVcUBQRsB8Y_0k.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d0hrYQ0zOuvajyVcUBQRsB8Y_0k.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 21 Feb 2025 05:15:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3803 (0xedb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C2CC7
Validity
Not Before: Jun 25 22:25:11 2024 GMT
Not After : May 28 00:00:00 2025 GMT
Subject: CN=667b43c7-0f31
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:95:61:9a:57:7b:4c:71:c3:d4:7b:c9:4e:31:
1e:0f:0f:53:dc:63:47:2b:fb:79:3b:b2:78:44:83:
b3:31:29:5b:c3:e5:04:7a:4b:75:85:32:b2:59:65:
73:71:fd:3e:98:de:3f:8b:9f:fc:a3:67:47:e8:cd:
a4:31:6a:b1:41:50:5f:ed:c7:f6:50:f1:83:2d:3f:
9b:d9:a9:77:d4:15:16:31:45:e0:39:02:a6:79:59:
85:4c:5a:25:47:11:14:2b:31:01:97:56:33:84:f0:
42:f8:24:83:af:eb:67:78:58:05:5c:24:43:d9:cb:
f9:63:ab:78:a1:ce:b2:8b:69:fd:f3:40:44:c1:c6:
75:37:16:da:35:44:4e:f3:d1:bc:f6:f0:cc:8e:33:
ad:22:84:be:1b:a7:1e:9e:10:73:39:8e:23:1e:aa:
df:23:02:12:6e:05:93:36:55:8f:e4:76:f3:bb:37:
c5:02:8b:c0:b7:83:3d:df:67:df:28:2a:f9:ca:67:
6e:99:82:c6:42:3b:d3:2e:0f:12:ac:01:70:19:3b:
7c:1a:27:41:91:67:05:42:ba:e2:58:74:19:a7:fc:
79:03:64:9f:87:05:18:15:ec:cc:12:d0:d1:75:79:
fb:53:8b:07:b7:46:e0:ae:17:02:54:e7:01:aa:0e:
b3:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:CE:65:B3:39:E2:E7:1E:80:F6:DE:1A:A6:6F:8E:2F:82:0C:21:D4
X509v3 Authority Key Identifier:
keyid:77:48:6B:61:0D:33:3A:EB:DA:8F:25:5C:50:14:11:B0:1F:18:FF:49
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C2CC7/791C6A347B3811E9BC0D3B32C4F9AE02/d0hrYQ0zOuvajyVcUBQRsB8Y_0k.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d0hrYQ0zOuvajyVcUBQRsB8Y_0k.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C2CC7/791C6A347B3811E9BC0D3B32C4F9AE02/B431D7F0334111EF9770A542C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.30.186.0/23
202.53.197.0/24
202.53.204.0/22
IPv6:
2401:df00:1::-2401:df00:2:ffff:ffff:ffff:ffff:ffff
2401:df00:11::-2401:df00:12:ffff:ffff:ffff:ffff:ffff
2401:df00:21::-2401:df00:22:ffff:ffff:ffff:ffff:ffff
2401:df00:31::-2401:df00:32:ffff:ffff:ffff:ffff:ffff
2401:df00:41::-2401:df00:42:ffff:ffff:ffff:ffff:ffff
2401:df00:51::-2401:df00:52:ffff:ffff:ffff:ffff:ffff
2401:df00:61::-2401:df00:62:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
3e:68:44:48:78:1c:9e:0b:d4:98:8e:ea:6c:45:9b:a8:ec:bd:
cc:55:2b:c5:bd:fc:d2:db:d2:ee:ef:51:c6:80:4d:2a:39:c3:
2b:a2:b2:28:9e:04:17:a2:ea:bd:1c:2a:84:05:54:37:d5:6b:
f3:16:b4:d0:74:4a:36:3c:e9:c9:c8:91:6a:db:cd:84:34:88:
32:8a:78:50:70:3a:83:13:3f:2f:4b:e9:0a:7f:32:a1:fd:2b:
27:4d:b0:59:ca:04:06:3a:52:c6:b2:48:2a:9f:68:8e:59:df:
84:37:92:af:ae:56:e3:d2:97:51:50:50:c4:22:52:3f:d8:43:
cd:64:4c:a4:ac:80:8b:f7:d9:b7:02:83:b7:85:6a:ad:3f:64:
d4:41:be:1a:26:39:60:92:2c:51:75:96:53:b9:a0:a8:ba:10:
12:c7:e6:9b:aa:bc:d0:1d:30:6f:89:bd:f5:26:2b:2c:bf:7b:
82:53:04:7e:d9:6d:46:c9:d3:00:af:99:00:7f:04:68:30:82:
52:6a:55:1e:2b:c8:8c:19:d9:b7:e6:ba:54:b0:0e:61:18:7b:
5b:eb:cf:fc:04:f6:26:a3:be:04:de:bc:fa:ab:78:3a:75:92:
46:14:9b:41:5c:99:30:3f:e7:4b:dc:4c:7b:12:74:f8:c2:4b:
e1:75:cf:56
-----BEGIN CERTIFICATE-----
MIIGFjCCBP6gAwIBAgICDtswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QzJDQzcxMTAvBgNVBAUTKDc3NDg2QjYxMEQzMzNBRUJEQThGMjU1QzUwMTQxMUIw
MUYxOEZGNDkwHhcNMjQwNjI1MjIyNTExWhcNMjUwNTI4MDAwMDAwWjAYMRYwFAYD
VQQDEw02NjdiNDNjNy0wZjMxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA1ZVhmld7THHD1HvJTjEeDw9T3GNHK/t5O7J4RIOzMSlbw+UEekt1hTKyWWVz
cf0+mN4/i5/8o2dH6M2kMWqxQVBf7cf2UPGDLT+b2al31BUWMUXgOQKmeVmFTFol
RxEUKzEBl1YzhPBC+CSDr+tneFgFXCRD2cv5Y6t4oc6yi2n980BEwcZ1NxbaNURO
89G89vDMjjOtIoS+G6cenhBzOY4jHqrfIwISbgWTNlWP5HbzuzfFAovAt4M932ff
KCr5ymdumYLGQjvTLg8SrAFwGTt8GidBkWcFQrriWHQZp/x5A2SfhwUYFezMEtDR
dXn7U4sHt0bgrhcCVOcBqg6zuQIDAQABo4IDOjCCAzYwHQYDVR0OBBYEFHXOZbM5
4ucegPbeGqZvji+CDCHUMB8GA1UdIwQYMBaAFHdIa2ENMzrr2o8lXFAUEbAfGP9J
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMkNDNy83OTFDNkEzNDdC
MzgxMUU5QkMwRDNCMzJDNEY5QUUwMi9kMGhyWVEwek91dmFqeVZjVUJRUnNCOFlf
MGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2QwaHJZUTB6T3V2YWp5VmNVQlFSc0I4WV8way5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
QzJDQzcvNzkxQzZBMzQ3QjM4MTFFOUJDMEQzQjMyQzRGOUFFMDIvQjQzMUQ3RjAz
MzQxMTFFRjk3NzBBNTQyQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwgcMGCCsGAQUFBwEHAQH/
BIGzMIGwMBgEAgABMBIDBAFnHroDBADKNcUDBALKNcwwgZMEAgACMIGMMBIDBwAk
Ad8AAAEDBwAkAd8AAAIwEgMHACQB3wAAEQMHACQB3wAAEjASAwcAJAHfAAAhAwcA
JAHfAAAiMBIDBwAkAd8AADEDBwAkAd8AADIwEgMHACQB3wAAQQMHACQB3wAAQjAS
AwcAJAHfAABRAwcAJAHfAABSMBIDBwAkAd8AAGEDBwAkAd8AAGIwDQYJKoZIhvcN
AQELBQADggEBAD5oREh4HJ4L1JiO6mxFm6jsvcxVK8W9/NLb0u7vUcaATSo5wyui
siieBBei6r0cKoQFVDfVa/MWtNB0SjY86cnIkWrbzYQ0iDKKeFBwOoMTPy9L6Qp/
MqH9KydNsFnKBAY6UsaySCqfaI5Z34Q3kq+uVuPSl1FQUMQiUj/YQ81kTKSsgIv3
2bcCg7eFaq0/ZNRBvhomOWCSLFF1llO5oKi6EBLH5puqvNAdMG+JvfUmKyy/e4JT
BH7ZbUbJ0wCvmQB/BGgwglJqVR4ryIwZ2bfmulSwDmEYe1vrz/wE9iajvgTevPqr
eDp1kkYUm0FcmTA/50vcTHsSdPjCS+F1z1Y=
-----END CERTIFICATE-----
Generated at Sun Feb 16 20:53:17 2025 by rpki-client