Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/03A91AAEE52C11EFB2237F6CC4F9AE02.roa
File: 03A91AAEE52C11EFB2237F6CC4F9AE02.roa (raw, json)
Hash identifier: 948oGWy+j639EJ/ZHkoYMhL0R3vLPep1cnu4M+cOoO8=
Subject key identifier: DB:31:E7:56:2D:FE:BC:F8:80:3E:AA:52:9C:73:1E:9B:3D:C5:04:6F
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: B9D8
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/03A91AAEE52C11EFB2237F6CC4F9AE02.roa
Signing time: Thu 08 May 2025 16:29:56 +0000
ROA not before: Thu 08 May 2025 16:29:56 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 17754
IP address blocks: 103.48.71.0/24 maxlen: 24
175.101.0.0/16 maxlen: 24
202.133.48.0/20 maxlen: 24
202.153.32.0/20 maxlen: 24
2401:fb00::/33 maxlen: 33
2401:fb00::/40 maxlen: 48
2401:fb00:100::/40 maxlen: 48
2401:fb00:200::/40 maxlen: 48
2401:fb00:300::/40 maxlen: 48
2401:fb00:400::/40 maxlen: 48
2401:fb00:500::/40 maxlen: 48
2401:fb00:600::/40 maxlen: 48
2401:fb00:700::/40 maxlen: 48
2401:fb00:800::/40 maxlen: 48
2401:fb00:900::/40 maxlen: 48
2401:fb00:7600::/40 maxlen: 48
2401:fb00:7700::/40 maxlen: 48
2401:fb00:7800::/40 maxlen: 48
2401:fb00:7900::/40 maxlen: 48
2401:fb00:7a00::/40 maxlen: 48
2401:fb00:7b00::/40 maxlen: 48
2401:fb00:7c00::/40 maxlen: 48
2401:fb00:7d00::/40 maxlen: 48
2401:fb00:7e00::/40 maxlen: 48
2401:fb00:7f00::/40 maxlen: 48
2401:fb00:8000::/33 maxlen: 33
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 20 May 2025 13:22:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 47576 (0xb9d8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Validity
Not Before: May 8 16:29:56 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=681cdc04-9433
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:ed:64:bf:06:c1:5f:7c:91:f7:9f:e3:59:05:
cd:c3:ce:58:72:11:c7:f7:60:a3:c0:e4:b6:8e:1d:
86:cf:24:40:4c:e1:30:18:f4:40:82:c3:2d:da:fb:
86:a0:e5:ad:cb:33:30:cd:17:27:57:8b:25:38:12:
9b:ef:8b:26:b3:f7:ab:a1:1e:0b:00:29:7e:0b:2d:
36:cd:e4:6c:84:8a:81:81:f7:ab:c1:14:89:10:eb:
45:03:25:40:d2:40:93:81:7f:17:7d:cd:b7:90:f9:
73:fe:d1:31:37:47:78:4f:c9:49:9e:33:4e:4d:e3:
f5:f5:ed:c4:10:07:ff:12:62:b9:e3:88:ca:8a:f9:
f1:c8:b9:8f:b7:93:f8:2c:8b:2d:57:53:9a:91:3f:
a7:7f:e3:6a:26:db:21:e1:70:4c:af:af:a9:ab:c0:
78:4b:a1:9a:b0:19:49:fa:9b:b8:df:3f:1a:24:35:
1e:4e:45:ca:0b:82:dc:18:bc:3b:f1:b3:98:f1:76:
90:59:a7:8f:b9:96:42:21:d7:86:35:9c:95:a7:5b:
0c:33:ee:1a:a2:d6:5c:10:a3:a8:f1:66:0e:69:a8:
24:34:07:57:a3:33:a8:6a:58:65:f0:4d:7b:93:5b:
2d:22:b8:64:b2:d0:19:89:ff:f9:ba:bb:33:49:c5:
8d:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:31:E7:56:2D:FE:BC:F8:80:3E:AA:52:9C:73:1E:9B:3D:C5:04:6F
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/03A91AAEE52C11EFB2237F6CC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.48.71.0/24
175.101.0.0/16
202.133.48.0/20
202.153.32.0/20
IPv6:
2401:fb00::/32
Signature Algorithm: sha256WithRSAEncryption
50:c8:75:64:c4:21:08:80:fd:00:3d:83:67:db:f0:43:10:3a:
0a:be:df:64:21:59:aa:7f:a0:2f:82:ac:08:9f:55:d8:ef:25:
ab:87:9d:7c:1a:7f:34:b1:f0:7c:00:eb:92:22:98:d8:5d:55:
3c:44:57:1a:49:ff:61:ab:89:40:70:5d:d8:a4:d1:5f:42:00:
0d:6f:7c:f7:c8:48:89:da:b4:06:80:24:a7:3e:0b:d3:35:52:
58:b5:4b:66:a9:ed:3b:0f:20:af:c9:1f:fc:19:38:5c:25:12:
93:a8:c0:72:cd:bb:c4:d5:94:5f:3b:b0:f7:40:80:19:86:96:
e8:16:b1:8e:4c:ab:1a:52:a1:12:c1:db:e8:2c:d1:c4:ff:3d:
7c:b7:06:38:46:55:81:9b:a7:ad:64:07:7e:6d:34:de:0b:b9:
c3:1c:a1:87:fb:7e:80:e8:3c:f5:49:41:85:c3:f6:03:9b:db:
28:30:b0:08:a6:cf:d0:ae:21:1a:8d:2e:cd:69:eb:08:d1:68:
d6:38:c0:ea:c2:d9:9d:db:5f:3a:e8:7d:04:b9:24:62:7e:c3:
99:c8:46:ae:34:f7:31:33:f0:67:5c:73:3c:c7:3a:83:96:50:
52:cf:ea:8c:74:ef:f5:75:a6:88:84:5a:9c:cc:6c:d6:d9:fa:
19:2d:01:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 19:30:24 2025 by rpki-client