Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6194/5F37B9EEEF6B11EBB376EC75C4F9AE02/EEF4F7A6EF6E11EBB1C02712C4F9AE02.roa
File: EEF4F7A6EF6E11EBB1C02712C4F9AE02.roa (raw, json)
Hash identifier: efdLoq6zZv0F6RR1ze+KA4UrdZ3dfGQdbaEk/qTBX+o=
Subject key identifier: 39:13:13:E4:CE:CE:72:39:99:F3:EF:C4:8F:4D:6E:A3:05:9A:8F:CA
Certificate issuer: /CN=A91E6194/serialNumber=67DD7747A9DB8B01A5E7CCA146C48965A2308091
Certificate serial: 0557
Authority key identifier: 67:DD:77:47:A9:DB:8B:01:A5:E7:CC:A1:46:C4:89:65:A2:30:80:91
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z913R6nbiwGl58yhRsSJZaIwgJE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E6194/5F37B9EEEF6B11EBB376EC75C4F9AE02/EEF4F7A6EF6E11EBB1C02712C4F9AE02.roa
Signing time: Tue 06 May 2025 23:33:21 +0000
ROA not before: Tue 06 May 2025 23:33:21 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 7628
IP address blocks: 103.68.202.0/24 maxlen: 24
103.212.217.0/24 maxlen: 24
103.212.218.0/24 maxlen: 24
103.212.219.0/24 maxlen: 24
203.56.23.0/24 maxlen: 24
2402:1b40:1001::/48 maxlen: 48
2402:1b40:1002::/48 maxlen: 48
2402:1b40:2000::/37 maxlen: 37
2402:1b40:2000::/48 maxlen: 48
2402:1b40:2004::/48 maxlen: 48
2402:1b40:2008::/48 maxlen: 48
2402:1b40:2800::/37 maxlen: 37
2402:1b40:3000::/37 maxlen: 37
2402:1b40:3000::/48 maxlen: 48
2402:1b40:3800::/37 maxlen: 37
2402:1b40:4000::/37 maxlen: 37
2402:1b40:4000::/48 maxlen: 48
2402:1b40:5000::/48 maxlen: 48
2402:1b40:8000::/36 maxlen: 36
2402:1b40:9000::/36 maxlen: 36
2402:1b40:a000::/36 maxlen: 36
2402:1b40:b000::/36 maxlen: 36
2402:1b40:c000::/36 maxlen: 36
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E6194/5F37B9EEEF6B11EBB376EC75C4F9AE02/Z913R6nbiwGl58yhRsSJZaIwgJE.crl
rsync://rpki.apnic.net/member_repository/A91E6194/5F37B9EEEF6B11EBB376EC75C4F9AE02/Z913R6nbiwGl58yhRsSJZaIwgJE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z913R6nbiwGl58yhRsSJZaIwgJE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 21 May 2025 23:28:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1367 (0x557)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E6194, serialNumber=67DD7747A9DB8B01A5E7CCA146C48965A2308091
Validity
Not Before: May 6 23:33:21 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=681a9c41-2e2f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:b1:7c:da:d3:ce:a8:ec:71:c7:6f:93:d8:75:
b4:64:af:6b:3c:bf:d3:d8:25:68:0c:69:21:fd:fd:
73:4b:5e:6d:d5:06:67:0b:41:90:2a:f7:7e:b9:3d:
01:8c:76:b4:4f:ed:b1:70:05:20:51:82:08:85:79:
8f:8b:ed:d0:d0:8c:75:77:c9:44:3e:43:b2:a9:f3:
49:c0:fd:1e:e2:28:48:e1:d4:af:0f:cd:61:f6:80:
ba:4f:99:ef:b8:cb:07:aa:cc:4d:b1:9c:36:8e:9c:
2d:df:23:fa:fe:13:8d:ae:46:76:65:ad:55:a8:bc:
ff:c9:bf:c3:f0:28:68:23:2f:b4:e0:01:a0:32:e2:
6d:65:44:6f:96:bb:1d:39:f4:26:c7:30:9f:ce:2a:
2e:44:1f:6d:bb:1a:3f:5f:c2:51:f8:0f:da:98:58:
19:1e:f4:cc:78:fe:21:da:26:8d:eb:bb:13:73:02:
35:f6:86:dd:b5:12:f1:9d:ef:c2:a9:72:50:b1:8a:
4a:ce:47:18:57:0f:c9:12:da:2d:8a:1f:27:b6:6b:
57:64:5c:5d:a0:be:c2:f8:45:dc:d0:5d:06:6e:24:
15:ae:3f:0b:f6:b8:87:06:de:97:37:c2:7b:a7:b2:
8e:13:95:98:01:cb:d6:08:44:a4:96:bf:15:68:3f:
6e:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:13:13:E4:CE:CE:72:39:99:F3:EF:C4:8F:4D:6E:A3:05:9A:8F:CA
X509v3 Authority Key Identifier:
keyid:67:DD:77:47:A9:DB:8B:01:A5:E7:CC:A1:46:C4:89:65:A2:30:80:91
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E6194/5F37B9EEEF6B11EBB376EC75C4F9AE02/Z913R6nbiwGl58yhRsSJZaIwgJE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z913R6nbiwGl58yhRsSJZaIwgJE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6194/5F37B9EEEF6B11EBB376EC75C4F9AE02/EEF4F7A6EF6E11EBB1C02712C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.68.202.0/24
103.212.217.0-103.212.219.255
203.56.23.0/24
IPv6:
2402:1b40:1001::-2402:1b40:1002:ffff:ffff:ffff:ffff:ffff
2402:1b40:2000::-2402:1b40:47ff:ffff:ffff:ffff:ffff:ffff
2402:1b40:5000::/48
2402:1b40:8000::-2402:1b40:cfff:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
96:6a:6a:5a:da:ec:cb:36:d0:11:08:ad:b6:2f:bf:2f:c7:53:
7c:2a:7c:7f:2a:11:4f:ca:f5:96:04:33:83:76:1e:fe:40:f2:
89:3e:99:bc:b4:04:97:f3:6f:83:b3:b4:5e:4e:e9:b7:e4:28:
c4:59:11:cc:2e:4e:78:86:b8:b1:28:c6:ad:0d:bb:8c:19:ef:
23:06:0e:05:2b:77:55:8e:44:4d:12:d3:49:e3:fb:98:1b:75:
ec:1a:46:63:e8:80:5b:98:d5:f6:e3:0b:a6:8b:81:f8:2c:f9:
ec:32:02:f7:c8:14:0a:5b:b4:ae:ec:e5:c7:bc:0b:ee:48:76:
eb:de:7e:a5:74:dc:be:21:9b:6a:2b:3d:1e:44:a3:7b:7d:0a:
a3:c6:6d:95:28:af:59:fe:eb:0f:bc:34:b7:de:ff:28:b5:36:
4e:bf:d9:59:c2:dc:69:61:9c:b4:b1:67:db:cc:08:76:b4:6f:
53:4e:a0:b6:1f:50:54:ec:6c:34:49:a2:03:78:ad:d4:21:c4:
57:45:1c:18:93:45:c3:7f:59:b2:39:97:19:bc:dc:65:a8:40:
9f:2d:57:6d:c7:f6:ca:09:3f:d6:03:a1:00:1b:ab:23:b4:ae:
41:06:32:1b:e9:1c:0b:12:8e:10:1e:a5:03:c4:e5:3a:93:50:
a9:59:7f:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 16 19:06:45 2025 by rpki-client