Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F4268/C78EBCEA219311EC900C5653C4F9AE02/B5960F8CB03111EEA45DE91DC4F9AE02.roa
File: B5960F8CB03111EEA45DE91DC4F9AE02.roa (raw, json)
Hash identifier: tO89KC6SX/YI4kYIo5r9IqXP4sUugJ5kj9ybH7Ev/Ck=
Subject key identifier: D9:F1:5A:84:F7:D7:C5:99:EB:68:38:A4:14:40:31:27:67:DA:90:FE
Certificate issuer: /CN=A91F4268/serialNumber=93732F3FC31359BBBF8B379624BF91351CCAD857
Certificate serial: 0511
Authority key identifier: 93:73:2F:3F:C3:13:59:BB:BF:8B:37:96:24:BF:91:35:1C:CA:D8:57
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k3MvP8MTWbu_izeWJL-RNRzK2Fc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F4268/C78EBCEA219311EC900C5653C4F9AE02/B5960F8CB03111EEA45DE91DC4F9AE02.roa
Signing time: Thu 06 Feb 2025 23:42:16 +0000
ROA not before: Thu 06 Feb 2025 23:42:16 +0000
ROA not after: Tue 31 Mar 2026 00:00:00 +0000
asID: 22822
IP address blocks: 111.119.0.0/22 maxlen: 22
111.119.2.0/23 maxlen: 24
111.119.4.0/22 maxlen: 22
111.119.5.0/24 maxlen: 24
111.119.6.0/24 maxlen: 24
111.119.7.0/24 maxlen: 24
111.119.16.0/23 maxlen: 23
111.119.16.0/24 maxlen: 24
111.119.17.0/24 maxlen: 24
111.119.20.0/23 maxlen: 23
111.119.20.0/24 maxlen: 24
111.119.21.0/24 maxlen: 24
111.119.22.0/23 maxlen: 23
111.119.22.0/24 maxlen: 24
111.119.23.0/24 maxlen: 24
111.119.24.0/21 maxlen: 24
117.121.248.0/21 maxlen: 24
203.9.176.0/21 maxlen: 24
203.77.184.0/22 maxlen: 22
203.77.184.0/24 maxlen: 24
203.77.185.0/24 maxlen: 24
203.77.186.0/24 maxlen: 24
203.77.187.0/24 maxlen: 24
203.77.188.0/22 maxlen: 22
203.77.188.0/23 maxlen: 24
203.77.190.0/24 maxlen: 24
203.77.191.0/24 maxlen: 24
2402:6800::/32 maxlen: 32
2402:6800:712::/48 maxlen: 48
2402:6800:720::/48 maxlen: 48
2402:6800:730::/48 maxlen: 48
2402:6800:780::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F4268/C78EBCEA219311EC900C5653C4F9AE02/k3MvP8MTWbu_izeWJL-RNRzK2Fc.crl
rsync://rpki.apnic.net/member_repository/A91F4268/C78EBCEA219311EC900C5653C4F9AE02/k3MvP8MTWbu_izeWJL-RNRzK2Fc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k3MvP8MTWbu_izeWJL-RNRzK2Fc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 21 Feb 2025 05:15:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1297 (0x511)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F4268
Validity
Not Before: Feb 6 23:42:16 2025 GMT
Not After : Mar 31 00:00:00 2026 GMT
Subject: CN=67a548d7-02ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:3c:6b:07:ad:33:ab:ec:61:17:9c:de:cd:9d:
91:40:3e:a7:d0:fc:a9:3f:b1:3d:c5:65:40:0f:06:
d2:1c:4d:31:07:a1:71:c8:67:e6:ab:37:a2:f5:08:
11:00:b5:d6:fd:68:09:70:3a:83:c9:41:b2:8f:26:
ef:52:80:81:38:90:b5:61:82:86:13:0b:f1:bc:a2:
00:05:5e:70:4c:34:40:f0:7e:f7:c0:4b:f4:f0:a6:
70:38:d9:3a:75:fd:f5:ec:6e:e8:f4:81:8e:f5:97:
5f:02:3e:4a:fd:e7:40:87:3e:8d:c0:2f:23:9c:c4:
01:a0:93:0e:86:d5:4c:62:ca:3d:72:bb:65:94:35:
8e:6b:fb:b7:dc:95:a7:81:46:cb:9f:77:21:f9:57:
2a:c1:da:3e:eb:57:e5:e9:06:35:5e:d9:5a:49:73:
b5:96:2f:e3:8f:f2:b3:d5:a1:54:38:1f:01:cb:f8:
87:37:9e:6c:98:a4:41:02:16:26:0c:0c:6e:47:cd:
0b:7b:eb:f4:eb:e5:cc:b1:39:bd:b1:4b:5c:7b:ff:
e2:cf:99:e2:8e:e9:25:fe:c6:89:be:78:80:a3:92:
09:0a:44:a3:67:00:d5:27:0b:47:95:ff:56:53:de:
60:fd:14:97:a1:b9:08:16:b2:f0:3b:0f:ff:7c:7b:
4b:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:F1:5A:84:F7:D7:C5:99:EB:68:38:A4:14:40:31:27:67:DA:90:FE
X509v3 Authority Key Identifier:
keyid:93:73:2F:3F:C3:13:59:BB:BF:8B:37:96:24:BF:91:35:1C:CA:D8:57
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F4268/C78EBCEA219311EC900C5653C4F9AE02/k3MvP8MTWbu_izeWJL-RNRzK2Fc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k3MvP8MTWbu_izeWJL-RNRzK2Fc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F4268/C78EBCEA219311EC900C5653C4F9AE02/B5960F8CB03111EEA45DE91DC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
111.119.0.0/21
111.119.16.0/23
111.119.20.0-111.119.31.255
117.121.248.0/21
203.9.176.0/21
203.77.184.0/21
IPv6:
2402:6800::/32
Signature Algorithm: sha256WithRSAEncryption
8a:8e:31:cb:e0:7c:ab:5d:b4:94:05:0e:b3:7f:24:04:f3:08:
21:a3:52:f5:1d:0e:6a:4d:24:6a:e3:17:5f:19:ea:cc:8a:bb:
a7:8a:96:96:8b:fa:e2:c3:a2:46:e8:80:54:a8:1b:52:92:9e:
00:29:26:65:7d:66:e8:12:64:95:48:60:5a:41:4d:98:85:49:
d0:59:99:72:c0:11:48:85:2c:72:b5:66:aa:e8:67:73:00:40:
c4:5c:c4:96:3b:a5:74:10:63:b6:5b:ae:3b:00:1f:f2:cd:cb:
b8:c2:d8:3a:7e:5b:62:f2:80:18:e5:c7:33:4f:6e:dd:15:e2:
7d:4e:88:94:98:8e:da:17:8a:fd:9a:10:0f:6e:f4:6b:85:fa:
ee:62:18:21:78:f8:6b:37:a0:f3:16:15:59:3b:ad:cc:15:0f:
81:81:a6:ad:98:58:32:93:e9:58:9f:4b:f1:e6:d3:e0:36:6b:
46:bb:aa:73:9f:e6:dc:63:70:3a:b7:b4:26:b6:ef:63:a3:27:
fb:76:f5:b7:d2:3b:6e:18:62:b1:63:18:85:a4:0c:78:c6:bd:
aa:6d:bd:f2:94:ce:4e:bd:e6:41:56:ee:3d:f8:e3:73:b5:e6:
4a:16:fc:05:47:b0:81:6a:00:50:a1:5a:66:87:93:ad:d5:c7:
64:37:72:61
-----BEGIN CERTIFICATE-----
MIIFpjCCBI6gAwIBAgICBREwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RjQyNjgxMTAvBgNVBAUTKDkzNzMyRjNGQzMxMzU5QkJCRjhCMzc5NjI0QkY5MTM1
MUNDQUQ4NTcwHhcNMjUwMjA2MjM0MjE2WhcNMjYwMzMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02N2E1NDhkNy0wMmVmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEApzxrB60zq+xhF5zezZ2RQD6n0PypP7E9xWVADwbSHE0xB6FxyGfmqzei9QgR
ALXW/WgJcDqDyUGyjybvUoCBOJC1YYKGEwvxvKIABV5wTDRA8H73wEv08KZwONk6
df317G7o9IGO9ZdfAj5K/edAhz6NwC8jnMQBoJMOhtVMYso9crtllDWOa/u33JWn
gUbLn3ch+Vcqwdo+61fl6QY1XtlaSXO1li/jj/Kz1aFUOB8By/iHN55smKRBAhYm
DAxuR80Le+v06+XMsTm9sUtce//iz5nijukl/saJvniAo5IJCkSjZwDVJwtHlf9W
U95g/RSXobkIFrLwOw//fHtLswIDAQABo4ICyjCCAsYwHQYDVR0OBBYEFNnxWoT3
18WZ62g4pBRAMSdn2pD+MB8GA1UdIwQYMBaAFJNzLz/DE1m7v4s3liS/kTUcythX
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNDI2OC9DNzhFQkNFQTIx
OTMxMUVDOTAwQzU2NTNDNEY5QUUwMi9rM012UDhNVFdidV9pemVXSkwtUk5Seksy
RmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2szTXZQOE1UV2J1X2l6ZVdKTC1STlJ6SzJGYy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
RjQyNjgvQzc4RUJDRUEyMTkzMTFFQzkwMEM1NjUzQzRGOUFFMDIvQjU5NjBGOENC
MDMxMTFFRUE0NURFOTFEQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwVAYIKwYBBQUHAQcBAf8E
RTBDMDIEAgABMCwDBANvdwADBAFvdxAwDAMEAm93FAMEBW93AAMEA3V5+AMEA8sJ
sAMEA8tNuDANBAIAAjAHAwUAJAJoADANBgkqhkiG9w0BAQsFAAOCAQEAio4xy+B8
q120lAUOs38kBPMIIaNS9R0Oak0kauMXXxnqzIq7p4qWlov64sOiRuiAVKgbUpKe
ACkmZX1m6BJklUhgWkFNmIVJ0FmZcsARSIUscrVmquhncwBAxFzEljuldBBjtluu
OwAf8s3LuMLYOn5bYvKAGOXHM09u3RXifU6IlJiO2heK/ZoQD270a4X67mIYIXj4
azeg8xYVWTutzBUPgYGmrZhYMpPpWJ9L8ebT4DZrRruqc5/m3GNwOre0JrbvY6Mn
+3b1t9I7bhhisWMYhaQMeMa9qm298pTOTr3mQVbuPfjjc7XmShb8BUewgWoAUKFa
ZoeTrdXHZDdyYQ==
-----END CERTIFICATE-----
Generated at Sun Feb 16 15:25:47 2025 by rpki-client