Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A912DC44/29B6BEDAE4FC11E9B13B4860C4F9AE02/5614ADF6C2D811EF873CE458C4F9AE02.roa
File: 5614ADF6C2D811EF873CE458C4F9AE02.roa (raw, json)
Hash identifier: RDs4E4PsjjGLZT+7OZQ+4M3HWmV0V93uL7g7uiZOHjA=
Subject key identifier: A3:4E:AD:31:ED:08:C3:B5:E8:21:4F:F4:A8:FF:00:DD:50:00:0A:5E
Certificate issuer: /CN=A912DC44/serialNumber=A6421FE13D8C93A7BDDFF8B53719B5808748D0DF
Certificate serial: 0D3F
Authority key identifier: A6:42:1F:E1:3D:8C:93:A7:BD:DF:F8:B5:37:19:B5:80:87:48:D0:DF
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pkIf4T2Mk6e93_i1Nxm1gIdI0N8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912DC44/29B6BEDAE4FC11E9B13B4860C4F9AE02/5614ADF6C2D811EF873CE458C4F9AE02.roa
Signing time: Sun 13 Apr 2025 14:26:46 +0000
ROA not before: Sun 13 Apr 2025 14:26:46 +0000
ROA not after: Mon 02 Mar 2026 00:00:00 +0000
asID: 134806
IP address blocks: 103.89.26.0/24 maxlen: 24
103.89.27.0/24 maxlen: 24
103.126.216.0/22 maxlen: 24
103.127.58.0/24 maxlen: 24
103.200.36.0/22 maxlen: 22
103.200.36.0/23 maxlen: 23
103.200.36.0/24 maxlen: 24
103.200.37.0/24 maxlen: 24
103.200.38.0/23 maxlen: 23
103.200.38.0/24 maxlen: 24
103.200.39.0/24 maxlen: 24
123.253.64.0/22 maxlen: 24
2401:1040::/32 maxlen: 32
2401:1040::/40 maxlen: 40
2401:1040::/48 maxlen: 48
2401:1040:1::/48 maxlen: 48
2401:1040:2::/48 maxlen: 48
2401:1040:3::/48 maxlen: 48
2401:1040:100::/40 maxlen: 40
2401:1040:100::/48 maxlen: 48
2401:1040:101::/48 maxlen: 48
2401:1040:102::/48 maxlen: 48
2401:1040:103::/48 maxlen: 48
2401:1040:300::/40 maxlen: 40
2401:1040:301::/48 maxlen: 48
2401:1040:8100::/40 maxlen: 40
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A912DC44/29B6BEDAE4FC11E9B13B4860C4F9AE02/pkIf4T2Mk6e93_i1Nxm1gIdI0N8.crl
rsync://rpki.apnic.net/member_repository/A912DC44/29B6BEDAE4FC11E9B13B4860C4F9AE02/pkIf4T2Mk6e93_i1Nxm1gIdI0N8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pkIf4T2Mk6e93_i1Nxm1gIdI0N8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 01 May 2025 18:05:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3391 (0xd3f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912DC44, serialNumber=A6421FE13D8C93A7BDDFF8B53719B5808748D0DF
Validity
Not Before: Apr 13 14:26:46 2025 GMT
Not After : Mar 2 00:00:00 2026 GMT
Subject: CN=67fbc9a6-ff89
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:d5:e6:06:18:92:6a:94:dc:f8:87:e9:f3:da:
9b:a9:0b:4a:07:a1:04:ef:af:9e:c8:36:a7:49:f8:
c9:80:1c:57:94:fd:83:d9:7b:26:22:f2:44:f7:0a:
60:f9:7f:73:63:d9:b4:8a:58:6c:e5:8c:8b:cf:67:
53:7f:d4:1a:f2:fc:12:45:37:35:a2:7d:ed:6b:95:
55:1d:1a:cf:4a:57:ea:06:65:b6:c4:7f:7e:5e:d1:
f2:2b:e0:35:37:aa:12:71:7c:07:5c:06:7e:aa:15:
d5:0e:e6:8f:da:48:b1:e1:c5:c8:7d:70:47:72:48:
e3:32:d7:58:27:a7:3a:be:cb:d3:41:70:77:7f:18:
a5:cd:67:d1:54:d3:be:33:67:21:1c:51:fd:00:47:
80:32:a6:78:82:88:4b:a8:c0:94:d9:d3:92:2d:69:
c1:c0:68:a8:7d:4e:19:e1:5f:4f:75:de:dd:b0:50:
d5:fb:05:3b:f6:5d:59:86:17:47:3e:3c:c1:7e:65:
da:97:0d:9c:98:c1:78:3a:e5:b2:8f:42:24:92:6e:
88:35:44:98:0e:24:1c:25:1c:94:a6:9a:7c:81:03:
ed:20:96:81:52:14:c9:ed:f1:8f:b2:05:f6:25:9f:
80:39:63:d2:4e:da:b4:21:52:19:5b:36:ea:80:92:
d0:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:4E:AD:31:ED:08:C3:B5:E8:21:4F:F4:A8:FF:00:DD:50:00:0A:5E
X509v3 Authority Key Identifier:
keyid:A6:42:1F:E1:3D:8C:93:A7:BD:DF:F8:B5:37:19:B5:80:87:48:D0:DF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912DC44/29B6BEDAE4FC11E9B13B4860C4F9AE02/pkIf4T2Mk6e93_i1Nxm1gIdI0N8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pkIf4T2Mk6e93_i1Nxm1gIdI0N8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912DC44/29B6BEDAE4FC11E9B13B4860C4F9AE02/5614ADF6C2D811EF873CE458C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.89.26.0/23
103.126.216.0/22
103.127.58.0/24
103.200.36.0/22
123.253.64.0/22
IPv6:
2401:1040::/32
Signature Algorithm: sha256WithRSAEncryption
8b:68:e0:ce:a3:e3:dc:56:b4:3e:b6:b8:fd:13:b5:62:a1:78:
80:dc:73:b8:82:e5:42:ac:8b:0e:b1:d5:9d:ea:a4:a2:af:c7:
cf:03:58:b5:e3:ae:49:a6:e4:f1:e8:f4:a3:ae:ea:99:c1:4b:
de:00:2b:67:bd:b8:e0:79:c1:0e:8e:c1:bb:76:f9:49:5c:ed:
6b:9d:cf:5c:fe:65:9b:f0:20:1a:be:98:aa:83:52:4c:c5:d7:
2f:6f:da:a7:1c:9f:1c:84:96:47:85:d5:95:14:df:41:da:55:
2c:45:3a:e3:75:a9:2f:32:aa:dc:f8:9f:2f:b2:89:b5:04:82:
b6:e4:7a:37:dc:2a:17:a6:8e:0f:d5:d9:a0:77:1b:29:48:33:
de:58:7a:6c:90:8d:33:31:8a:78:90:c6:ee:c7:d2:21:02:09:
34:1e:09:b6:43:c0:25:4e:96:fc:85:db:33:95:a6:e9:62:c9:
88:00:85:04:4d:b2:4b:1b:1a:b7:cb:a6:45:2c:bc:c8:93:ab:
b5:ee:07:e8:fa:66:a9:e4:f7:8a:e9:50:1c:0c:38:4a:7a:56:
79:dd:31:c2:88:c9:54:f8:5e:1e:0b:ae:8e:94:0d:08:5f:b8:
ee:36:3a:ab:51:95:92:84:7e:8e:35:81:98:e8:6b:10:de:b2:
30:cd:6a:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 14:10:57 2025 by rpki-client