Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91AF59C/735DC4D61D8D11E29A7543EB08B02CD2/117E1F1A68D411EEB1313F7DC4F9AE02.roa
File: 117E1F1A68D411EEB1313F7DC4F9AE02.roa (raw, json)
Hash identifier: LAm5srYmYBa9WShMZPaiIeFdpoZdlrFsrxnvM6yFi7M=
Subject key identifier: AB:A7:D8:3F:0A:D1:57:43:61:1E:AE:B0:8F:1D:8D:B2:56:0F:07:B6
Certificate issuer: /CN=A91AF59C/serialNumber=C1296FFAD34F29F04E0EFAD5D9244C02A7D87D8D
Certificate serial: 34D1
Authority key identifier: C1:29:6F:FA:D3:4F:29:F0:4E:0E:FA:D5:D9:24:4C:02:A7:D8:7D:8D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wSlv-tNPKfBODvrV2SRMAqfYfY0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91AF59C/735DC4D61D8D11E29A7543EB08B02CD2/117E1F1A68D411EEB1313F7DC4F9AE02.roa
Signing time: Mon 28 Apr 2025 14:50:47 +0000
ROA not before: Mon 28 Apr 2025 14:50:47 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 7604
IP address blocks: 103.6.12.0/22 maxlen: 22
103.6.12.0/24 maxlen: 24
103.6.13.0/24 maxlen: 24
103.6.14.0/24 maxlen: 24
103.6.15.0/24 maxlen: 24
103.25.112.0/23 maxlen: 23
103.241.200.0/22 maxlen: 22
103.241.200.0/24 maxlen: 24
103.241.201.0/24 maxlen: 24
119.252.64.0/22 maxlen: 22
119.252.64.0/24 maxlen: 24
119.252.68.0/22 maxlen: 22
119.252.72.0/22 maxlen: 22
119.252.72.0/23 maxlen: 23
119.252.74.0/24 maxlen: 24
119.252.76.0/22 maxlen: 22
119.252.80.0/22 maxlen: 22
119.252.84.0/22 maxlen: 22
119.252.86.0/24 maxlen: 24
119.252.88.0/22 maxlen: 22
119.252.88.0/23 maxlen: 23
119.252.91.0/24 maxlen: 24
119.252.92.0/22 maxlen: 23
122.202.64.0/20 maxlen: 20
180.233.129.0/24 maxlen: 24
180.233.130.0/24 maxlen: 24
180.233.131.0/24 maxlen: 24
202.74.160.0/20 maxlen: 20
202.74.160.0/22 maxlen: 22
202.74.164.0/22 maxlen: 24
202.74.168.0/22 maxlen: 22
202.74.172.0/22 maxlen: 22
202.74.174.0/24 maxlen: 24
202.74.176.0/22 maxlen: 22
202.74.178.0/24 maxlen: 24
202.74.180.0/22 maxlen: 22
202.74.184.0/22 maxlen: 22
202.74.188.0/22 maxlen: 22
202.74.188.0/23 maxlen: 23
202.191.4.0/22 maxlen: 24
203.7.224.0/23 maxlen: 23
203.7.224.0/24 maxlen: 24
203.19.12.0/24 maxlen: 24
203.23.208.0/21 maxlen: 21
203.23.216.0/22 maxlen: 22
203.23.220.0/22 maxlen: 22
203.23.220.0/23 maxlen: 24
203.23.223.0/24 maxlen: 24
203.24.54.0/24 maxlen: 24
203.25.26.0/23 maxlen: 23
203.30.19.0/24 maxlen: 24
203.30.34.0/24 maxlen: 24
203.31.0.0/24 maxlen: 24
203.32.124.0/22 maxlen: 22
203.32.125.0/24 maxlen: 24
203.34.30.0/23 maxlen: 23
203.34.30.0/24 maxlen: 24
203.55.198.0/24 maxlen: 24
203.124.176.0/20 maxlen: 20
203.196.92.0/22 maxlen: 22
203.209.160.0/20 maxlen: 20
203.209.160.0/22 maxlen: 22
203.209.164.0/24 maxlen: 24
203.209.166.0/23 maxlen: 23
203.209.168.0/24 maxlen: 24
203.209.169.0/24 maxlen: 24
203.209.170.0/23 maxlen: 23
203.209.172.0/22 maxlen: 22
2401:400::/32 maxlen: 32
2401:402::/31 maxlen: 32
2403:3400::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91AF59C/735DC4D61D8D11E29A7543EB08B02CD2/wSlv-tNPKfBODvrV2SRMAqfYfY0.crl
rsync://rpki.apnic.net/member_repository/A91AF59C/735DC4D61D8D11E29A7543EB08B02CD2/wSlv-tNPKfBODvrV2SRMAqfYfY0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wSlv-tNPKfBODvrV2SRMAqfYfY0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 17 May 2025 14:36:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13521 (0x34d1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91AF59C, serialNumber=C1296FFAD34F29F04E0EFAD5D9244C02A7D87D8D
Validity
Not Before: Apr 28 14:50:47 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=680f95c7-094f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:86:be:5c:bf:7d:d8:98:c6:ee:b5:92:89:42:
4a:5c:07:60:db:91:5b:3f:c5:1d:c3:0a:7f:f5:f1:
28:fc:6e:ce:fb:45:42:d3:1c:91:ee:1e:4e:88:f0:
3d:19:c5:ab:2e:02:aa:1b:f8:85:dc:65:b1:20:67:
f4:48:c8:eb:44:10:09:be:23:8b:59:ca:9f:a9:97:
be:39:36:d1:4a:8b:b4:0e:59:46:b6:1f:db:2c:be:
9a:71:8b:c7:74:8c:53:13:65:8e:40:53:22:d2:2c:
ab:ea:1f:25:32:50:4c:2b:f5:1f:bf:b8:be:3b:0e:
96:06:83:5f:10:3d:29:4a:1e:c3:b4:0d:15:07:4b:
ac:54:5a:3c:e8:c7:7f:b7:37:7a:50:63:07:18:ee:
4a:36:7d:4b:d7:99:9b:d0:31:04:b7:9d:1f:fb:0e:
54:1e:cd:20:c5:47:f8:37:39:9e:4f:79:8a:64:2a:
b8:ad:75:c5:aa:ed:ad:04:cd:91:5c:20:14:83:ce:
2c:a2:2c:a5:87:17:ab:bf:a0:e1:f5:fd:cc:33:cb:
af:e5:5c:be:6f:09:ba:01:83:e9:27:11:0f:34:27:
e4:78:af:f0:24:85:df:db:6f:59:5e:16:cb:f3:82:
93:5f:7b:e3:2e:fc:7d:9f:f6:4e:96:2b:1c:7c:53:
8d:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:A7:D8:3F:0A:D1:57:43:61:1E:AE:B0:8F:1D:8D:B2:56:0F:07:B6
X509v3 Authority Key Identifier:
keyid:C1:29:6F:FA:D3:4F:29:F0:4E:0E:FA:D5:D9:24:4C:02:A7:D8:7D:8D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91AF59C/735DC4D61D8D11E29A7543EB08B02CD2/wSlv-tNPKfBODvrV2SRMAqfYfY0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wSlv-tNPKfBODvrV2SRMAqfYfY0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AF59C/735DC4D61D8D11E29A7543EB08B02CD2/117E1F1A68D411EEB1313F7DC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.6.12.0/22
103.25.112.0/23
103.241.200.0/22
119.252.64.0/19
122.202.64.0/20
180.233.129.0-180.233.131.255
202.74.160.0/19
202.191.4.0/22
203.7.224.0/23
203.19.12.0/24
203.23.208.0/20
203.24.54.0/24
203.25.26.0/23
203.30.19.0/24
203.30.34.0/24
203.31.0.0/24
203.32.124.0/22
203.34.30.0/23
203.55.198.0/24
203.124.176.0/20
203.196.92.0/22
203.209.160.0/20
IPv6:
2401:400::/32
2401:402::/31
2403:3400::/32
Signature Algorithm: sha256WithRSAEncryption
a4:09:17:1d:5b:0a:aa:7d:81:e3:41:a0:46:ab:8b:e3:4a:7f:
22:a2:d1:ad:9d:71:e5:8d:7e:97:23:7e:68:fa:79:6f:d9:95:
be:2f:a1:02:81:53:a9:b9:af:67:aa:6e:7e:46:f7:ba:a9:34:
fc:14:1f:25:7c:52:38:55:3d:a8:db:6e:b4:ab:1b:29:f4:39:
0d:bd:34:9f:25:95:69:2c:a1:56:80:dd:06:b6:32:92:c4:40:
6d:d7:89:58:55:1b:95:9b:5a:fd:ec:19:80:9b:21:28:1c:ad:
0b:01:33:45:f2:c7:37:b0:c7:9f:61:a4:21:c3:63:17:be:1e:
e3:63:a4:83:5b:c0:a0:aa:f6:9d:77:f1:3c:cf:48:d8:61:49:
e3:9b:6b:db:da:52:bd:76:25:d5:a9:a0:35:ef:61:b2:7a:14:
fb:38:3d:f2:53:5f:41:01:f3:68:9d:e6:74:17:a4:2c:5c:3d:
39:be:c5:45:30:eb:67:1a:09:38:e3:5a:27:28:1c:c7:2d:85:
de:50:80:f4:a1:ed:d9:57:19:43:10:36:31:e2:86:ac:a1:12:
47:62:69:54:c1:77:88:16:c3:39:f6:b8:da:4b:f2:08:73:cc:
26:d2:ab:c8:24:62:bb:c3:41:6e:32:62:38:a2:a3:0d:9e:ee:
3b:8a:82:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 19:14:48 2025 by rpki-client