Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F731E/F5967E6C5EF111E6A7D1AF26C4F9AE02/5B425102C0E911EF978F1385C4F9AE02.roa
File: 5B425102C0E911EF978F1385C4F9AE02.roa (raw, json)
Hash identifier: k1pIrPdvh6z0dp5En85XqdbWfUA4ZO6tHmuvy2durEk=
Subject key identifier: 61:31:C3:30:E3:0B:DD:FA:2A:DA:80:09:DC:1D:36:3B:6F:39:CC:E5
Certificate issuer: /CN=A91F731E/serialNumber=2585243D6805F2EA8BC3F63B82364BA991F330B9
Certificate serial: 1F31
Authority key identifier: 25:85:24:3D:68:05:F2:EA:8B:C3:F6:3B:82:36:4B:A9:91:F3:30:B9
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JYUkPWgF8uqLw_Y7gjZLqZHzMLk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F731E/F5967E6C5EF111E6A7D1AF26C4F9AE02/5B425102C0E911EF978F1385C4F9AE02.roa
Signing time: Mon 23 Dec 2024 04:50:09 +0000
ROA not before: Mon 23 Dec 2024 04:50:09 +0000
ROA not after: Tue 30 Sep 2025 00:00:00 +0000
asID: 17501
IP address blocks: 27.34.0.0/17 maxlen: 24
103.211.148.0/23 maxlen: 24
103.254.184.0/22 maxlen: 22
103.254.184.0/24 maxlen: 24
103.254.185.0/24 maxlen: 24
103.254.186.0/24 maxlen: 24
103.254.187.0/24 maxlen: 24
124.41.192.0/18 maxlen: 20
124.41.192.0/19 maxlen: 24
124.41.224.0/20 maxlen: 24
124.41.240.0/22 maxlen: 24
124.41.248.0/21 maxlen: 21
124.41.248.0/22 maxlen: 22
124.41.248.0/23 maxlen: 24
124.41.250.0/24 maxlen: 24
124.41.251.0/24 maxlen: 24
124.41.252.0/24 maxlen: 24
124.41.253.0/24 maxlen: 24
124.41.254.0/24 maxlen: 24
124.41.255.0/24 maxlen: 24
139.5.68.0/22 maxlen: 24
139.5.72.0/22 maxlen: 24
202.79.32.0/19 maxlen: 24
202.129.248.0/22 maxlen: 24
202.166.192.0/19 maxlen: 24
2400:1a00::/32 maxlen: 32
2400:1a00::/36 maxlen: 36
2400:1a00::/48 maxlen: 48
2400:1a00:4::/48 maxlen: 48
2400:1a00:1000::/36 maxlen: 36
2400:1a00:2000::/36 maxlen: 36
2400:1a00:3000::/36 maxlen: 36
2400:1a00:4000::/36 maxlen: 36
2400:1a00:5000::/36 maxlen: 36
2400:1a00:6000::/36 maxlen: 36
2400:1a00:7000::/36 maxlen: 36
2400:1a00:8000::/36 maxlen: 36
2400:1a00:8000::/48 maxlen: 48
2400:1a00:8002::/48 maxlen: 48
2400:1a00:8004::/48 maxlen: 48
2400:1a00:8010::/48 maxlen: 48
2400:1a00:b000::/36 maxlen: 36
2400:1a00:b000::/40 maxlen: 40
2400:1a00:b010::/48 maxlen: 48
2400:1a00:b011::/48 maxlen: 48
2400:1a00:b012::/48 maxlen: 48
2400:1a00:b013::/48 maxlen: 48
2400:1a00:b020::/48 maxlen: 48
2400:1a00:b021::/48 maxlen: 48
2400:1a00:b022::/48 maxlen: 48
2400:1a00:b030::/48 maxlen: 48
2400:1a00:b031::/48 maxlen: 48
2400:1a00:b032::/48 maxlen: 48
2400:1a00:b040::/48 maxlen: 48
2400:1a00:b041::/48 maxlen: 48
2400:1a00:b050::/48 maxlen: 48
2400:1a00:b051::/48 maxlen: 48
2400:1a00:b060::/48 maxlen: 48
2400:1a00:b061::/48 maxlen: 48
2400:1a00:b070::/48 maxlen: 48
2400:1a00:b071::/48 maxlen: 48
2400:1a00:b080::/48 maxlen: 48
2400:1a00:b081::/48 maxlen: 48
2400:1a00:b100::/40 maxlen: 40
2400:1a00:b111::/48 maxlen: 48
2400:1a00:b112::/48 maxlen: 48
2400:1a00:b1a6::/48 maxlen: 48
2400:1a00:b1af::/48 maxlen: 48
2400:1a00:b1ba::/48 maxlen: 48
2400:1a00:b1c0::/48 maxlen: 48
2400:1a00:b1c1::/48 maxlen: 48
2400:1a00:b1e0::/48 maxlen: 48
2400:1a00:b1e1::/48 maxlen: 48
2400:1a00:b1fa::/48 maxlen: 48
2400:1a00:ba00::/40 maxlen: 40
2400:1a00:ba10::/48 maxlen: 48
2400:1a00:ba11::/48 maxlen: 48
2400:1a00:baa0::/48 maxlen: 48
2400:1a00:baa1::/48 maxlen: 48
2400:1a00:bb00::/40 maxlen: 40
2400:1a00:bb10::/48 maxlen: 48
2400:1a00:bb11::/48 maxlen: 48
2400:1a00:bb20::/48 maxlen: 48
2400:1a00:bb21::/48 maxlen: 48
2400:1a00:bc00::/40 maxlen: 40
2400:1a00:bc10::/48 maxlen: 48
2400:1a00:bc11::/48 maxlen: 48
2400:1a00:bd00::/40 maxlen: 40
2400:1a00:bd11::/48 maxlen: 48
2400:1a00:bd12::/48 maxlen: 48
2400:1a00:bd20::/48 maxlen: 48
2400:1a00:bd21::/48 maxlen: 48
2400:1a00:bda0::/48 maxlen: 48
2400:1a00:bda1::/48 maxlen: 48
2400:1a00:bde0::/48 maxlen: 48
2400:1a00:bde1::/48 maxlen: 48
2400:1a00:cd11::/48 maxlen: 48
2400:1a00:d000::/36 maxlen: 36
2400:1a00:d000::/40 maxlen: 40
2400:1a00:d100::/40 maxlen: 40
2400:1a00:d200::/40 maxlen: 40
2400:1a00:d300::/40 maxlen: 40
2400:1a00:d400::/40 maxlen: 40
2400:1a00:d500::/40 maxlen: 40
2400:1a00:d600::/40 maxlen: 40
2400:1a00:efff::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F731E/F5967E6C5EF111E6A7D1AF26C4F9AE02/JYUkPWgF8uqLw_Y7gjZLqZHzMLk.crl
rsync://rpki.apnic.net/member_repository/A91F731E/F5967E6C5EF111E6A7D1AF26C4F9AE02/JYUkPWgF8uqLw_Y7gjZLqZHzMLk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JYUkPWgF8uqLw_Y7gjZLqZHzMLk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 25 Feb 2025 16:23:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7985 (0x1f31)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F731E
Validity
Not Before: Dec 23 04:50:09 2024 GMT
Not After : Sep 30 00:00:00 2025 GMT
Subject: CN=6768ec01-8bfa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:d9:57:f5:16:fd:95:e5:15:41:19:1d:69:bc:
57:0c:0c:25:b8:de:ac:6d:d7:2b:cb:65:64:a2:dd:
ba:20:16:9f:e0:5f:af:2e:c2:d6:58:ec:90:25:3c:
70:37:e9:25:0a:41:fd:c2:1b:95:3f:fe:6c:24:a7:
26:06:32:56:6e:96:37:bb:c3:ec:95:bb:8b:a1:c5:
ab:43:68:8a:36:e4:09:f5:1a:99:87:05:fa:48:ef:
45:66:07:c7:74:20:4a:28:a0:d2:e2:c4:88:33:f0:
18:6a:a0:c7:44:eb:ed:26:18:3b:39:b2:ea:fb:36:
cf:c6:ba:b8:f4:81:ef:f3:60:38:18:6e:64:2e:2c:
9d:0e:14:5a:6b:4e:75:b5:6f:b7:61:8c:dc:40:b1:
39:6e:63:fb:6f:79:c4:8c:eb:f8:d3:f2:4c:3c:52:
af:51:00:da:ba:a6:e6:ab:77:e1:60:03:9e:c3:bf:
ee:5b:e8:6e:fa:2f:44:ff:6b:90:68:20:4d:d1:aa:
68:34:42:fa:6f:09:5e:a4:1d:64:de:bc:d3:79:0d:
31:21:56:1b:06:df:f0:a7:da:dd:d3:a7:63:f3:cc:
7c:45:a2:90:c2:ec:45:82:20:97:b1:b2:77:12:35:
4e:d6:16:71:b7:b4:a8:4e:99:c5:80:fc:be:f9:dc:
91:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:31:C3:30:E3:0B:DD:FA:2A:DA:80:09:DC:1D:36:3B:6F:39:CC:E5
X509v3 Authority Key Identifier:
keyid:25:85:24:3D:68:05:F2:EA:8B:C3:F6:3B:82:36:4B:A9:91:F3:30:B9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F731E/F5967E6C5EF111E6A7D1AF26C4F9AE02/JYUkPWgF8uqLw_Y7gjZLqZHzMLk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JYUkPWgF8uqLw_Y7gjZLqZHzMLk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F731E/F5967E6C5EF111E6A7D1AF26C4F9AE02/5B425102C0E911EF978F1385C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
27.34.0.0/17
103.211.148.0/23
103.254.184.0/22
124.41.192.0/18
139.5.68.0-139.5.75.255
202.79.32.0/19
202.129.248.0/22
202.166.192.0/19
IPv6:
2400:1a00::/32
Signature Algorithm: sha256WithRSAEncryption
26:6d:ae:a6:62:3b:60:a1:f1:87:9d:f6:31:77:83:b7:52:c2:
7f:76:54:d7:a9:6a:bb:55:14:61:ca:9a:7d:ab:f1:ef:89:ef:
bf:89:ba:b1:66:ff:b0:34:39:7e:4c:19:7e:4b:64:da:69:17:
65:78:37:98:a4:46:87:08:f8:df:01:73:9f:0c:44:a7:25:0b:
b8:a2:1b:a4:77:98:68:b9:d3:2a:b8:2c:ec:1e:9d:62:af:12:
24:b8:d5:11:2e:4e:4b:4c:69:1b:e3:cb:9d:81:7c:7f:b5:ff:
27:12:61:8e:81:8c:e8:df:49:cd:bb:bf:88:c1:55:09:9d:d1:
45:6c:b6:ef:33:d2:36:16:42:3d:07:6c:46:a9:29:29:21:e6:
85:bc:b0:2c:c1:4a:b2:5f:d2:28:bb:8f:87:3b:ef:f3:b2:e2:
0e:99:79:4d:b8:e4:b7:95:ed:52:2b:1a:dd:28:fa:75:2e:c5:
b2:67:5f:08:1e:bb:99:b5:17:b7:3f:2d:4b:31:c4:5a:a5:56:
70:73:63:71:79:f6:0f:23:e5:87:60:1f:b2:23:73:8b:31:2e:
27:13:97:b0:11:8c:e1:7b:d7:12:7d:e9:c1:1e:11:d1:5f:85:
42:f0:a4:f8:06:c8:bc:59:16:c3:a3:c0:9b:fb:a2:f8:36:11:
c7:d3:5e:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:12:46 2025 by rpki-client