Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F4268/C78EBCEA219311EC900C5653C4F9AE02/BEDF72A076B911EF95DBF27CC4F9AE02.roa
File: BEDF72A076B911EF95DBF27CC4F9AE02.roa (raw, json)
Hash identifier: pFXUfU8J6+rawQvdZ0DzHycI68DJinKh4UA+nChrzC8=
Subject key identifier: 40:1A:B7:69:02:42:E6:3D:06:55:08:B6:7A:16:D8:C1:E7:0F:A7:8D
Certificate issuer: /CN=A91F4268/serialNumber=93732F3FC31359BBBF8B379624BF91351CCAD857
Certificate serial: 0516
Authority key identifier: 93:73:2F:3F:C3:13:59:BB:BF:8B:37:96:24:BF:91:35:1C:CA:D8:57
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k3MvP8MTWbu_izeWJL-RNRzK2Fc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F4268/C78EBCEA219311EC900C5653C4F9AE02/BEDF72A076B911EF95DBF27CC4F9AE02.roa
Signing time: Thu 06 Feb 2025 23:42:21 +0000
ROA not before: Thu 06 Feb 2025 23:42:21 +0000
ROA not after: Tue 31 Mar 2026 00:00:00 +0000
asID: 55429
IP address blocks: 45.113.116.0/22 maxlen: 24
103.53.12.0/22 maxlen: 24
111.119.0.0/23 maxlen: 24
111.119.12.0/22 maxlen: 22
111.119.12.0/24 maxlen: 24
111.119.13.0/24 maxlen: 24
111.119.14.0/24 maxlen: 24
111.119.15.0/24 maxlen: 24
203.9.179.0/24 maxlen: 24
203.9.180.0/24 maxlen: 24
203.9.182.0/24 maxlen: 24
203.9.183.0/24 maxlen: 24
2402:6800:3::/48 maxlen: 48
2402:6800:4::/48 maxlen: 48
2402:6800:5::/48 maxlen: 48
2402:6800:760::/48 maxlen: 48
2402:6800:763::/48 maxlen: 48
2402:6800:764::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F4268/C78EBCEA219311EC900C5653C4F9AE02/k3MvP8MTWbu_izeWJL-RNRzK2Fc.crl
rsync://rpki.apnic.net/member_repository/A91F4268/C78EBCEA219311EC900C5653C4F9AE02/k3MvP8MTWbu_izeWJL-RNRzK2Fc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k3MvP8MTWbu_izeWJL-RNRzK2Fc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 23 Apr 2025 23:30:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1302 (0x516)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F4268, serialNumber=93732F3FC31359BBBF8B379624BF91351CCAD857
Validity
Not Before: Feb 6 23:42:21 2025 GMT
Not After : Mar 31 00:00:00 2026 GMT
Subject: CN=67a548dc-c89c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:e5:e8:88:49:8c:2f:a4:77:4f:62:46:61:ef:
a9:d6:45:76:2b:15:86:75:a0:f5:18:03:bc:da:1d:
50:7e:75:9b:0b:50:71:15:63:a2:b7:04:3b:a7:f6:
03:b9:28:c2:ef:9b:d1:71:ff:d3:13:9e:85:37:e6:
d1:4c:ee:ae:a5:24:f3:43:62:c4:98:a8:dc:03:8c:
4e:a3:51:87:84:1d:46:da:5d:6a:ea:bd:f8:76:5c:
da:ea:1d:0c:2b:f8:e8:f8:04:28:3c:97:9c:3e:90:
2d:23:35:3d:d5:6c:2a:eb:95:2a:c9:52:01:f5:b3:
4f:c4:ac:f6:72:5a:ce:e9:9e:18:02:57:05:a9:8f:
a1:9b:77:28:8b:2d:38:db:78:9e:57:ae:b1:e2:10:
89:10:35:64:48:ba:83:fd:6d:8f:1a:2e:5c:c8:d7:
06:c9:f1:45:9e:55:d0:d5:55:e3:47:8e:03:96:90:
b5:04:c1:e2:6f:e6:3f:1f:5b:0c:d5:e1:b7:14:93:
0f:e5:f7:bc:15:d6:a1:97:ad:62:07:7e:f8:e5:dc:
ab:26:08:39:eb:b5:51:b2:a4:cc:61:72:f8:ab:a1:
2e:19:c1:34:62:2d:48:f9:8e:7b:3c:e1:78:d9:65:
bc:ff:3d:b2:cc:84:13:33:1e:1c:dc:44:31:5f:c3:
ad:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:1A:B7:69:02:42:E6:3D:06:55:08:B6:7A:16:D8:C1:E7:0F:A7:8D
X509v3 Authority Key Identifier:
keyid:93:73:2F:3F:C3:13:59:BB:BF:8B:37:96:24:BF:91:35:1C:CA:D8:57
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F4268/C78EBCEA219311EC900C5653C4F9AE02/k3MvP8MTWbu_izeWJL-RNRzK2Fc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k3MvP8MTWbu_izeWJL-RNRzK2Fc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F4268/C78EBCEA219311EC900C5653C4F9AE02/BEDF72A076B911EF95DBF27CC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.113.116.0/22
103.53.12.0/22
111.119.0.0/23
111.119.12.0/22
203.9.179.0-203.9.180.255
203.9.182.0/23
IPv6:
2402:6800:3::-2402:6800:5:ffff:ffff:ffff:ffff:ffff
2402:6800:760::/48
2402:6800:763::-2402:6800:764:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
a0:8e:98:14:e4:89:86:38:39:ee:84:2d:e7:32:26:0e:f6:c9:
6d:a9:2c:e4:dc:8c:ae:ad:90:0a:02:96:c8:b7:20:41:9f:5f:
cb:f2:3c:e2:7a:01:d8:8f:f6:3c:d9:49:bd:0c:c4:3f:d1:69:
99:7a:39:fb:41:09:58:80:52:ea:ff:c0:34:b1:b3:4d:f1:04:
c1:42:fc:11:9e:87:81:fe:67:fc:85:38:fe:da:c4:c2:f5:d4:
ee:05:d0:7f:90:3a:48:24:06:8f:da:7c:ad:53:fc:2b:6a:78:
a7:9e:7a:62:fa:d9:22:96:37:70:84:09:6f:ea:ba:97:8f:9e:
6a:0e:66:a6:7e:1f:48:16:fe:8c:25:0d:d4:0b:69:f9:4f:92:
1d:e5:10:75:28:4c:5e:4f:11:34:4c:35:4b:c7:c3:6f:f0:0d:
04:f7:5a:fd:bd:db:41:e2:1a:00:62:d9:37:1a:3c:73:74:e3:
01:b8:e7:3c:e7:fb:1d:e0:7b:f8:1d:24:e8:5f:8d:33:8a:12:
e4:9b:4e:a8:eb:f1:be:ed:10:e7:9d:30:f3:67:f3:bf:6b:99:
a4:b4:97:12:76:df:90:f1:88:53:f6:26:66:97:31:47:e1:85:
11:8c:d9:0c:dc:fa:68:49:68:7e:3d:f9:87:b9:44:64:b1:6b:
d1:8a:f5:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 00:43:44 2025 by rpki-client