Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A913F721/6442437A53AC11EA9AD54B2FC4F9AE02/1AB6B24A502211F0AFF2E30FC4F9AE02.roa
File: 1AB6B24A502211F0AFF2E30FC4F9AE02.roa (raw, json)
Hash identifier: 2QerLmtFHY48UeZhmV6pCrS0LhLRpqATZj6aiM1bwoY=
Subject key identifier: 96:67:AB:8E:AE:C9:22:D2:EC:E8:7A:DF:76:C9:49:64:F5:FD:29:4E
Certificate issuer: /CN=A913F721/serialNumber=1DD717B229936190CEB667C7CE1CA9F9BFB5FAC4
Certificate serial: 0B25
Authority key identifier: 1D:D7:17:B2:29:93:61:90:CE:B6:67:C7:CE:1C:A9:F9:BF:B5:FA:C4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HdcXsimTYZDOtmfHzhyp-b-1-sQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A913F721/6442437A53AC11EA9AD54B2FC4F9AE02/1AB6B24A502211F0AFF2E30FC4F9AE02.roa
Signing time: Mon 23 Jun 2025 11:09:36 +0000
ROA not before: Mon 23 Jun 2025 11:09:36 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 137703
IP address blocks: 103.113.192.0/24 maxlen: 24
103.113.193.0/24 maxlen: 24
103.113.194.0/24 maxlen: 24
103.113.195.0/24 maxlen: 24
2404:5e40::/48 maxlen: 48
2404:5e40:1::/48 maxlen: 48
2404:5e40:2::/48 maxlen: 48
2404:5e40:3::/48 maxlen: 48
2404:5e40:4::/48 maxlen: 48
2404:5e40:5::/48 maxlen: 48
2404:5e40:6::/48 maxlen: 48
2404:5e40:7::/48 maxlen: 48
2404:5e40:8::/48 maxlen: 48
2404:5e40:9::/48 maxlen: 48
2404:5e40:a::/48 maxlen: 48
2404:5e40:b::/48 maxlen: 48
2404:5e40:c::/48 maxlen: 48
2404:5e40:d::/48 maxlen: 48
2404:5e40:e::/48 maxlen: 48
2404:5e40:f::/48 maxlen: 48
2404:5e40:8000::/48 maxlen: 48
2404:5e40:8001::/48 maxlen: 48
2404:5e40:8002::/48 maxlen: 48
2404:5e40:8003::/48 maxlen: 48
2404:5e40:8004::/48 maxlen: 48
2404:5e40:8005::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A913F721/6442437A53AC11EA9AD54B2FC4F9AE02/HdcXsimTYZDOtmfHzhyp-b-1-sQ.crl
rsync://rpki.apnic.net/member_repository/A913F721/6442437A53AC11EA9AD54B2FC4F9AE02/HdcXsimTYZDOtmfHzhyp-b-1-sQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HdcXsimTYZDOtmfHzhyp-b-1-sQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 09 Jul 2025 19:42:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2853 (0xb25)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A913F721, serialNumber=1DD717B229936190CEB667C7CE1CA9F9BFB5FAC4
Validity
Not Before: Jun 23 11:09:36 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=685935f0-5cf0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:99:15:4d:cc:c4:2d:d1:63:08:67:f9:ca:95:
cb:c9:53:96:62:46:d5:36:b0:3f:d8:fa:c3:e8:e7:
22:d8:26:c2:eb:16:9c:f5:cd:30:37:49:07:9a:6c:
2c:22:95:36:cc:b3:c8:85:af:59:b0:1e:8f:8d:6b:
bc:ad:7a:51:1c:ec:55:53:ef:77:ad:c1:b0:4a:36:
ec:7e:18:b3:8b:8f:60:ce:0b:5d:b4:3c:2a:48:47:
45:1c:ef:fc:36:5d:e8:ae:d9:8c:ea:6b:0d:86:92:
8a:d7:e7:f5:f8:b4:5e:1e:1e:49:ee:c5:a7:ad:48:
17:cf:56:f7:d0:af:58:cf:39:d7:4f:b7:33:ba:31:
34:34:d6:3e:35:c6:15:ad:64:2f:bd:a6:47:ef:bf:
27:15:06:db:24:c8:04:ed:48:a0:ea:16:84:3c:f8:
3d:1a:69:dd:ce:f0:f4:97:47:99:63:0f:19:8a:82:
4f:e8:6e:99:26:38:ee:e7:14:b9:c4:ba:4e:3d:dc:
0e:60:c0:79:94:b8:30:74:87:c2:fe:76:8b:22:a2:
87:98:42:97:4f:58:8d:fe:60:bb:e6:2d:68:e8:b8:
3f:05:51:99:7a:94:78:f9:7e:67:76:34:3c:c0:68:
9e:28:df:f8:56:b2:22:50:c8:76:68:ac:ad:bb:df:
60:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:67:AB:8E:AE:C9:22:D2:EC:E8:7A:DF:76:C9:49:64:F5:FD:29:4E
X509v3 Authority Key Identifier:
keyid:1D:D7:17:B2:29:93:61:90:CE:B6:67:C7:CE:1C:A9:F9:BF:B5:FA:C4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A913F721/6442437A53AC11EA9AD54B2FC4F9AE02/HdcXsimTYZDOtmfHzhyp-b-1-sQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HdcXsimTYZDOtmfHzhyp-b-1-sQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913F721/6442437A53AC11EA9AD54B2FC4F9AE02/1AB6B24A502211F0AFF2E30FC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.113.192.0/22
IPv6:
2404:5e40::/44
2404:5e40:8000::-2404:5e40:8005:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
2c:a8:03:88:f5:2d:75:ac:e2:84:1a:1e:21:41:12:77:c6:46:
c2:79:54:f3:cd:f2:02:8b:95:85:07:2b:4a:1d:c0:d0:18:a7:
7b:f3:99:df:d7:15:6d:f3:97:f2:ef:cd:ed:42:3d:18:86:c1:
08:57:e7:b1:2d:96:80:64:af:94:78:81:e0:30:6c:4c:a3:86:
76:29:f1:07:9c:51:b6:04:ac:1b:d1:dc:fd:6d:46:60:b5:95:
94:e8:d2:a7:bc:73:64:73:f4:f9:17:61:22:7c:92:4d:f0:37:
3a:bd:a8:2a:20:71:2a:48:59:33:6d:c3:b2:69:54:f1:3e:c3:
e6:2f:56:30:ee:54:0a:25:21:38:af:32:91:6e:fc:fe:d4:06:
1c:7c:4f:54:5b:b8:84:ce:49:eb:74:37:f6:99:85:52:87:1b:
23:ee:ea:a8:41:9d:c1:d2:d5:42:51:25:bc:82:fc:6f:7b:8f:
a8:7b:bc:c7:41:b0:58:48:6d:0d:1e:63:fc:52:9c:f9:f9:cc:
08:99:7e:e9:02:01:93:94:c5:6f:e2:ef:74:0a:42:b9:5e:05:
e2:28:f5:b0:c8:30:08:4e:d8:ed:cc:81:3e:16:a5:c7:ca:ab:
e6:11:d9:14:c0:04:27:48:52:77:41:15:ea:5e:0d:ba:c5:b7:
6e:56:e0:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 4 08:16:22 2025 by rpki-client