Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9117E49/CBEEAE48D5D511E797CBC37DC4F9AE02/1DA0BF7C7C5911EDB5D8DA67C4F9AE02.roa
File: 1DA0BF7C7C5911EDB5D8DA67C4F9AE02.roa (raw, json)
Hash identifier: AFv3+8G4+14cWKdLCa3SvwGQd6CuiEszUkutLoyR7bA=
Subject key identifier: 6A:A8:A1:A1:9F:D8:A6:CB:EE:5C:64:37:82:8A:7C:1D:59:63:99:D3
Certificate issuer: /CN=A9117E49/serialNumber=FC9CC38035DF0FD8B2455E36767E130227F4E87B
Certificate serial: 176B
Authority key identifier: FC:9C:C3:80:35:DF:0F:D8:B2:45:5E:36:76:7E:13:02:27:F4:E8:7B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_JzDgDXfD9iyRV42dn4TAif06Hs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9117E49/CBEEAE48D5D511E797CBC37DC4F9AE02/1DA0BF7C7C5911EDB5D8DA67C4F9AE02.roa
Signing time: Mon 28 Apr 2025 16:55:17 +0000
ROA not before: Mon 28 Apr 2025 16:55:17 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 58826
IP address blocks: 103.17.180.0/23 maxlen: 24
103.56.208.0/23 maxlen: 24
192.144.80.0/22 maxlen: 22
192.144.80.0/24 maxlen: 24
192.144.81.0/24 maxlen: 24
192.144.82.0/24 maxlen: 24
192.144.83.0/24 maxlen: 24
2402:1d40::/48 maxlen: 48
2402:1d40:1::/48 maxlen: 48
2402:1d40:2::/48 maxlen: 48
2402:1d40:1000::/48 maxlen: 48
2402:1d40:1001::/48 maxlen: 48
2402:1d40:2000::/48 maxlen: 48
2402:1d40:2001::/48 maxlen: 48
2402:1d40:3000::/48 maxlen: 48
2402:1d40:3001::/48 maxlen: 48
2402:1d40:3002::/48 maxlen: 48
2402:1d40:3003::/48 maxlen: 48
2402:1d40:4000::/48 maxlen: 48
2402:1d40:4001::/48 maxlen: 48
2402:1d40:4002::/48 maxlen: 48
2402:1d40:4003::/48 maxlen: 48
2402:1d40:5000::/48 maxlen: 48
2402:1d40:5001::/48 maxlen: 48
2402:1d40:5002::/48 maxlen: 48
2402:1d40:5003::/48 maxlen: 48
2402:1d40:5004::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9117E49/CBEEAE48D5D511E797CBC37DC4F9AE02/_JzDgDXfD9iyRV42dn4TAif06Hs.crl
rsync://rpki.apnic.net/member_repository/A9117E49/CBEEAE48D5D511E797CBC37DC4F9AE02/_JzDgDXfD9iyRV42dn4TAif06Hs.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_JzDgDXfD9iyRV42dn4TAif06Hs.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 21 May 2025 16:41:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5995 (0x176b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9117E49, serialNumber=FC9CC38035DF0FD8B2455E36767E130227F4E87B
Validity
Not Before: Apr 28 16:55:17 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=680fb2f5-11ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:01:7d:03:b9:4f:8a:55:c7:f5:9c:96:9d:31:
97:b1:ad:a9:f9:4f:fd:a9:da:d3:8c:6a:05:8f:d9:
3b:ab:5e:bc:88:f9:c5:a3:69:b0:09:28:c9:98:86:
fa:f1:33:a3:43:e1:25:03:1b:83:64:6d:3a:0e:90:
e2:a3:14:3c:6f:61:e0:87:71:a2:d0:05:fc:9b:6b:
5e:00:36:6b:8a:9e:0e:95:a2:b9:10:3b:df:b9:2d:
d3:99:ec:94:87:9e:e7:16:9a:d2:f7:c1:52:a7:1a:
9a:b1:79:af:ff:43:ab:b5:9e:ac:bc:56:08:93:1f:
8b:65:f0:d0:43:e4:d7:4e:3b:99:28:24:3d:68:0e:
09:af:9a:54:c4:d8:64:f5:c6:f4:4d:2a:03:c0:88:
d2:8d:fa:a2:e2:df:0f:b1:62:47:d3:4b:c5:95:76:
83:60:66:7f:ef:0d:d1:85:58:35:3c:a8:46:15:62:
f9:bd:6d:dd:7c:ab:d3:60:58:f9:ae:12:f8:0b:b7:
51:cb:df:8d:70:d0:6d:ed:65:fe:cc:6b:1e:78:43:
64:82:8c:7f:a6:dc:6b:c9:d7:06:6e:6b:fe:8a:89:
5f:51:41:a8:86:31:ac:a2:82:ca:60:86:d3:0f:38:
fd:ef:79:0b:ef:77:bd:e0:f8:ea:4d:9c:2c:3f:8e:
15:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:A8:A1:A1:9F:D8:A6:CB:EE:5C:64:37:82:8A:7C:1D:59:63:99:D3
X509v3 Authority Key Identifier:
keyid:FC:9C:C3:80:35:DF:0F:D8:B2:45:5E:36:76:7E:13:02:27:F4:E8:7B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9117E49/CBEEAE48D5D511E797CBC37DC4F9AE02/_JzDgDXfD9iyRV42dn4TAif06Hs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_JzDgDXfD9iyRV42dn4TAif06Hs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9117E49/CBEEAE48D5D511E797CBC37DC4F9AE02/1DA0BF7C7C5911EDB5D8DA67C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.17.180.0/23
103.56.208.0/23
192.144.80.0/22
IPv6:
2402:1d40::-2402:1d40:2:ffff:ffff:ffff:ffff:ffff
2402:1d40:1000::/47
2402:1d40:2000::/47
2402:1d40:3000::/46
2402:1d40:4000::/46
2402:1d40:5000::-2402:1d40:5004:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
4a:40:08:76:77:f0:fb:21:51:bc:34:5d:63:d5:d6:f8:f7:79:
e7:21:2b:8a:5a:a9:59:26:35:3b:d9:9c:11:6c:00:05:4c:0e:
e2:ad:41:51:74:3b:1d:39:c6:23:db:66:ec:5e:6d:ef:ab:23:
fd:4b:a8:fc:9a:76:d2:aa:87:bb:9f:3e:7e:a2:97:18:bd:48:
6a:fd:17:a5:b3:ff:f8:c8:b6:26:ec:03:9f:55:76:aa:b3:39:
ab:de:3e:7a:18:bc:6d:bb:40:7a:a9:a0:e0:90:3f:d4:0f:59:
27:a9:c2:dd:b9:73:be:d3:fb:75:cc:db:df:b7:9b:38:25:98:
f3:24:83:47:49:bc:3d:b0:4b:de:89:80:81:59:c2:84:91:1c:
9b:a0:22:e9:57:4a:a2:af:5c:dc:24:83:a2:20:8d:72:89:d4:
1b:ea:20:00:c2:55:d9:c8:10:49:1c:e0:65:96:23:1b:3e:57:
4b:11:13:9b:3f:a3:e3:a1:a7:91:4c:a5:06:3a:6f:ad:cc:7f:
bf:38:0c:c1:d1:28:56:d6:36:80:a9:dc:89:07:94:83:07:76:
d7:2a:44:78:c6:9b:93:3e:29:23:1d:9a:bf:fd:04:1f:c6:d1:
e3:d6:cd:a8:10:83:7c:b0:57:de:a0:df:71:a6:00:0e:3a:f6:
13:f0:bc:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 15 08:51:38 2025 by rpki-client