Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/5D815D4096F811EDA42F4660C4F9AE02.roa
File: 5D815D4096F811EDA42F4660C4F9AE02.roa (raw, json)
Hash identifier: SC9I8NfK9UKvwLWl26nNY871I0D/oD7p4Qml2Hf2oY0=
Subject key identifier: 29:AA:76:A5:5B:31:69:49:FE:36:3B:44:28:1A:B8:AE:AC:22:A1:85
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: B458
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/5D815D4096F811EDA42F4660C4F9AE02.roa
Signing time: Thu 08 May 2025 16:08:42 +0000
ROA not before: Thu 08 May 2025 16:08:42 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 137097
IP address blocks: 103.105.176.0/24 maxlen: 24
103.105.177.0/24 maxlen: 24
103.105.178.0/24 maxlen: 24
103.105.179.0/24 maxlen: 24
103.174.162.0/24 maxlen: 24
103.174.163.0/24 maxlen: 24
2001:df1:3c40::/48 maxlen: 48
2400:7b60::/32 maxlen: 32
2400:7b60::/48 maxlen: 48
2400:7b60:1::/48 maxlen: 48
2400:7b60:2::/48 maxlen: 48
2400:7b60:3::/48 maxlen: 48
2400:7b60:4::/48 maxlen: 48
2400:7b60:5::/48 maxlen: 48
2400:7b60:6::/48 maxlen: 48
2400:7b60:7::/48 maxlen: 48
2400:7b60:8::/48 maxlen: 48
2400:7b60:9::/48 maxlen: 48
2400:7b60:a::/48 maxlen: 48
2400:7b60:b::/48 maxlen: 48
2400:7b60:c::/48 maxlen: 48
2400:7b60:d::/48 maxlen: 48
2400:7b60:e::/48 maxlen: 48
2400:7b60:f::/48 maxlen: 48
2400:7b60:10::/48 maxlen: 48
2400:7b60:11::/48 maxlen: 48
2400:7b60:12::/48 maxlen: 48
2400:7b60:13::/48 maxlen: 48
2400:7b60:14::/48 maxlen: 48
2400:7b60:15::/48 maxlen: 48
2400:7b60:16::/48 maxlen: 48
2400:7b60:17::/48 maxlen: 48
2400:7b60:18::/48 maxlen: 48
2400:7b60:19::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 19 May 2025 18:54:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 46168 (0xb458)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Validity
Not Before: May 8 16:08:42 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=681cd70a-a796
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:4b:63:83:62:14:ac:4f:44:f5:92:f6:d6:e7:
18:51:27:4e:ef:14:10:c1:dd:f4:fd:d0:d9:24:1c:
b3:8e:af:60:cf:c9:80:12:a2:de:f4:8e:e2:a1:ae:
82:7e:42:85:54:82:6e:aa:c3:64:30:58:58:9a:e1:
cf:67:45:66:44:5a:27:c1:84:a9:4e:e9:ec:72:4e:
d8:c7:13:a6:8b:9c:eb:00:88:d6:d5:31:77:24:a0:
5a:e0:29:b5:e2:0f:c3:57:0e:35:8f:cc:6e:38:3f:
77:bf:02:83:9e:45:2b:fd:58:39:15:01:08:64:53:
5d:22:e8:b0:77:6c:1d:5c:e9:d5:a4:36:77:55:a7:
15:a7:26:29:62:6e:32:b6:5d:90:54:21:93:d8:d2:
4b:17:59:7a:c3:34:ad:ac:21:03:fd:50:0c:37:24:
20:b8:70:3d:1a:04:81:51:dc:51:e1:f9:e1:ac:cd:
ba:4f:0f:40:8c:ff:c4:59:f5:dc:9d:5e:5c:c9:a8:
f3:70:a7:13:2e:d2:4b:1c:38:ce:07:35:85:fe:8c:
84:42:05:64:99:fb:5a:f2:29:58:9f:77:07:4b:b7:
18:b1:0b:b5:70:10:b0:c8:0d:85:ef:a7:51:29:ab:
b5:7c:d1:94:0d:00:6f:79:c4:a8:d9:9d:91:5f:ff:
49:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:AA:76:A5:5B:31:69:49:FE:36:3B:44:28:1A:B8:AE:AC:22:A1:85
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/5D815D4096F811EDA42F4660C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.105.176.0/22
103.174.162.0/23
IPv6:
2001:df1:3c40::/48
2400:7b60::/32
Signature Algorithm: sha256WithRSAEncryption
b9:09:ed:db:1d:cd:8b:d1:d9:53:e2:ad:70:9e:c7:3f:eb:a7:
f2:27:f5:cb:42:09:26:c9:95:ce:fc:62:84:a2:20:0e:09:80:
a1:e3:32:03:6f:44:9a:f8:a3:7c:df:fb:38:e1:d1:20:2d:4b:
15:50:51:2e:03:a7:83:1d:02:28:73:98:0d:05:8d:7c:d3:c7:
ac:db:b9:87:82:d7:5e:56:b0:b6:2b:4d:2e:2c:91:f8:ab:fc:
2d:21:2c:61:d5:b8:e2:de:b9:b3:b6:ff:27:de:07:35:39:9e:
4e:28:1a:5f:c6:a6:09:cd:66:c0:63:97:bc:c2:87:45:4e:e4:
64:cf:49:15:3e:ee:e3:18:82:c0:0b:f1:a4:49:53:a3:2a:9c:
93:6e:2b:fc:e5:a8:00:bc:ac:1d:64:73:5d:58:90:08:d2:d9:
bc:4d:eb:e0:7e:3d:37:12:f3:db:c8:4e:a5:b8:07:63:90:98:
67:81:21:25:19:c1:c1:19:20:61:c3:1c:48:53:8e:8c:d7:da:
b4:14:dd:04:dc:02:a7:56:63:fa:55:1b:3f:d1:20:05:14:66:
36:8d:50:a5:be:b2:f0:b3:d4:8c:33:ae:0f:55:4f:80:5b:0c:
1f:ad:1c:56:1c:04:0c:20:f5:3f:39:26:da:68:78:98:e9:da:
d9:e8:d0:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 02:27:10 2025 by rpki-client