Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A911CA78/BE8846D235D811EAA730EC46C4F9AE02/9C294BEEE9B111EF8FD3E36DC4F9AE02.roa
File: 9C294BEEE9B111EF8FD3E36DC4F9AE02.roa (raw, json)
Hash identifier: JnGAM1wsHp5wW5YUc/+ZGIE9EUUS5JBbavsugytK8eo=
Subject key identifier: 62:12:11:50:22:57:A9:18:51:17:06:70:76:82:80:96:A9:9A:E6:89
Certificate issuer: /CN=A911CA78/serialNumber=40562C143A29CB19C70FFC9B99B60BBECD1D73B6
Certificate serial: 0C85
Authority key identifier: 40:56:2C:14:3A:29:CB:19:C7:0F:FC:9B:99:B6:0B:BE:CD:1D:73:B6
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QFYsFDopyxnHD_ybmbYLvs0dc7Y.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911CA78/BE8846D235D811EAA730EC46C4F9AE02/9C294BEEE9B111EF8FD3E36DC4F9AE02.roa
Signing time: Thu 13 Feb 2025 02:24:11 +0000
ROA not before: Thu 13 Feb 2025 02:24:11 +0000
ROA not after: Mon 02 Mar 2026 00:00:00 +0000
asID: 17971
IP address blocks: 49.236.192.0/20 maxlen: 24
103.17.168.0/22 maxlen: 24
112.137.160.0/20 maxlen: 24
119.110.96.0/20 maxlen: 24
202.71.96.0/20 maxlen: 23
202.71.96.0/21 maxlen: 24
202.71.104.0/22 maxlen: 24
202.71.108.0/24 maxlen: 24
202.71.110.0/23 maxlen: 24
202.75.32.0/20 maxlen: 23
202.75.32.0/21 maxlen: 24
202.75.40.0/24 maxlen: 24
202.75.42.0/23 maxlen: 24
202.75.44.0/22 maxlen: 24
202.75.48.0/20 maxlen: 24
202.165.3.0/24 maxlen: 24
210.48.144.0/20 maxlen: 20
210.48.145.0/24 maxlen: 24
210.48.148.0/23 maxlen: 24
210.48.150.0/24 maxlen: 24
210.48.152.0/24 maxlen: 24
210.48.153.0/24 maxlen: 24
210.48.154.0/24 maxlen: 24
210.48.156.0/24 maxlen: 24
210.48.157.0/24 maxlen: 24
210.48.158.0/24 maxlen: 24
210.48.159.0/24 maxlen: 24
218.100.22.0/24 maxlen: 24
2401:b000::/32 maxlen: 32
2401:b000::/48 maxlen: 48
2401:b000:0:5::/64 maxlen: 64
2401:b000:0:6::/64 maxlen: 64
2401:b000:10::/48 maxlen: 48
2404:b8::/48 maxlen: 48
2404:b8:0:1::/64 maxlen: 64
2404:b8:3::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A911CA78/BE8846D235D811EAA730EC46C4F9AE02/QFYsFDopyxnHD_ybmbYLvs0dc7Y.crl
rsync://rpki.apnic.net/member_repository/A911CA78/BE8846D235D811EAA730EC46C4F9AE02/QFYsFDopyxnHD_ybmbYLvs0dc7Y.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QFYsFDopyxnHD_ybmbYLvs0dc7Y.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 01 May 2025 19:03:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3205 (0xc85)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911CA78, serialNumber=40562C143A29CB19C70FFC9B99B60BBECD1D73B6
Validity
Not Before: Feb 13 02:24:11 2025 GMT
Not After : Mar 2 00:00:00 2026 GMT
Subject: CN=67ad57cb-1395
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:85:e0:4b:28:b2:cd:93:c6:e4:2e:c0:72:f6:
b3:ae:b0:03:52:99:d3:ee:8a:9e:53:98:04:eb:56:
08:30:c6:dc:25:44:4f:09:2c:b3:8c:e1:fa:d0:7c:
b7:ce:55:a2:d1:1a:e7:90:01:a9:fa:ab:10:1c:75:
90:33:fa:11:4a:c0:64:8d:dc:0c:64:46:f9:27:57:
33:e5:a4:7b:ab:85:ac:22:c3:1c:91:93:fb:cc:59:
b3:42:e0:82:3c:13:57:a4:af:01:66:b0:27:43:46:
1a:e2:d2:a6:62:e9:9f:40:58:73:b5:76:f1:92:71:
c7:e4:3c:d4:48:71:f7:8c:e3:29:0c:c3:82:a8:5d:
c1:d3:41:b3:94:87:ff:62:53:cd:25:67:65:af:a1:
72:7b:ef:1a:ce:f7:21:50:d1:f5:c5:1a:6f:1c:2c:
a4:60:1c:81:be:fb:24:df:68:1e:68:c2:b4:6e:05:
ac:71:c2:99:94:18:44:da:33:d8:32:9a:40:4f:fa:
2f:44:6f:5a:5a:b1:16:da:bd:3b:9b:12:82:14:63:
f0:1f:fa:c3:ca:7f:04:01:ce:23:a8:1b:26:f8:89:
4f:c4:11:e3:fe:66:66:45:43:e2:ce:b0:e8:a9:39:
0a:53:cd:f8:5a:98:8b:2b:17:c6:82:59:d1:7d:20:
4a:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:12:11:50:22:57:A9:18:51:17:06:70:76:82:80:96:A9:9A:E6:89
X509v3 Authority Key Identifier:
keyid:40:56:2C:14:3A:29:CB:19:C7:0F:FC:9B:99:B6:0B:BE:CD:1D:73:B6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911CA78/BE8846D235D811EAA730EC46C4F9AE02/QFYsFDopyxnHD_ybmbYLvs0dc7Y.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QFYsFDopyxnHD_ybmbYLvs0dc7Y.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911CA78/BE8846D235D811EAA730EC46C4F9AE02/9C294BEEE9B111EF8FD3E36DC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
49.236.192.0/20
103.17.168.0/22
112.137.160.0/20
119.110.96.0/20
202.71.96.0/20
202.75.32.0/19
202.165.3.0/24
210.48.144.0/20
218.100.22.0/24
IPv6:
2401:b000::/32
2404:b8::/48
2404:b8:3::/48
Signature Algorithm: sha256WithRSAEncryption
ab:dc:41:f6:eb:df:c7:ba:ee:cc:f5:ba:49:9d:6d:98:a6:e2:
f6:11:3d:1b:1d:d7:19:17:a7:dd:85:35:21:f4:5e:0d:f4:fa:
f3:de:03:a5:aa:86:3b:bc:52:53:eb:6e:07:12:43:c7:70:83:
17:87:ea:0c:90:00:11:ed:b5:e3:12:e5:72:39:12:a3:e7:29:
ea:9d:bf:04:5c:2f:27:d5:a2:57:d7:03:6a:f1:be:a8:6b:09:
ce:2d:af:16:34:f6:bd:1c:f3:7a:ca:37:74:c3:78:34:91:c5:
eb:0c:ca:c9:cd:bb:fc:dd:e2:19:f6:8d:91:86:0b:4d:d6:61:
18:f1:e3:af:c3:bf:94:98:aa:15:c2:34:b3:aa:0a:9e:93:ee:
e4:8e:79:c5:62:57:76:54:f1:eb:d2:8e:81:69:05:ad:24:0d:
6e:a6:c3:98:fe:b5:1d:8c:b4:73:aa:c4:f1:6e:5c:37:f7:89:
48:50:f2:6b:87:64:ac:36:d3:85:fa:89:98:41:5d:25:e4:16:
60:ba:75:a3:0a:3c:1f:7e:df:00:10:71:ed:58:da:30:f9:fd:
9f:57:7a:2f:cd:45:80:43:36:b3:92:72:a3:99:e9:10:8b:18:
34:7a:ed:90:c9:7a:01:a0:6e:df:82:f6:b6:b8:10:30:8a:62:
92:41:33:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 08:33:29 2025 by rpki-client