Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9186C66/8FB958FAF86B11E483167360C4F9AE02/02DB5704B0F211E58974874FC4F9AE02.roa
File: 02DB5704B0F211E58974874FC4F9AE02.roa (raw, json)
Hash identifier: 80axerWiZ6cd/ywlGklwH07eZfaJzXVmfhf4nrdmoFQ=
Subject key identifier: 44:7B:C3:F1:21:59:DC:65:16:21:99:DE:42:EC:E6:E1:29:80:8A:CA
Certificate issuer: /CN=A9186C66/serialNumber=3B0BC55650AA46B178B3E17423000BD981CA6736
Certificate serial: 25C1
Authority key identifier: 3B:0B:C5:56:50:AA:46:B1:78:B3:E1:74:23:00:0B:D9:81:CA:67:36
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OwvFVlCqRrF4s-F0IwAL2YHKZzY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9186C66/8FB958FAF86B11E483167360C4F9AE02/02DB5704B0F211E58974874FC4F9AE02.roa
Signing time: Sat 30 Nov 2024 15:52:22 +0000
ROA not before: Sat 30 Nov 2024 15:52:22 +0000
ROA not after: Sat 31 Jan 2026 00:00:00 +0000
asID: 55828
IP address blocks: 45.115.112.0/22 maxlen: 22
45.115.112.0/24 maxlen: 24
45.115.113.0/24 maxlen: 24
45.115.114.0/24 maxlen: 24
45.115.115.0/24 maxlen: 24
103.10.52.0/22 maxlen: 22
103.10.52.0/24 maxlen: 24
103.10.53.0/24 maxlen: 24
103.10.54.0/24 maxlen: 24
103.10.55.0/24 maxlen: 24
121.200.60.0/22 maxlen: 22
121.200.60.0/24 maxlen: 24
121.200.61.0/24 maxlen: 24
121.200.62.0/24 maxlen: 24
121.200.63.0/24 maxlen: 24
2401:3300::/32 maxlen: 32
2401:3300::/33 maxlen: 33
2401:3300::/34 maxlen: 34
2401:3300::/35 maxlen: 35
2401:3300::/36 maxlen: 36
2401:3300::/37 maxlen: 37
2401:3300::/38 maxlen: 38
2401:3300::/39 maxlen: 39
2401:3300::/40 maxlen: 40
2401:3300::/41 maxlen: 41
2401:3300::/42 maxlen: 42
2401:3300::/43 maxlen: 43
2401:3300::/44 maxlen: 44
2401:3300::/45 maxlen: 45
2401:3300::/46 maxlen: 46
2401:3300::/47 maxlen: 47
2401:3300::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9186C66/8FB958FAF86B11E483167360C4F9AE02/OwvFVlCqRrF4s-F0IwAL2YHKZzY.crl
rsync://rpki.apnic.net/member_repository/A9186C66/8FB958FAF86B11E483167360C4F9AE02/OwvFVlCqRrF4s-F0IwAL2YHKZzY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OwvFVlCqRrF4s-F0IwAL2YHKZzY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 01 May 2025 15:43:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 9665 (0x25c1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9186C66, serialNumber=3B0BC55650AA46B178B3E17423000BD981CA6736
Validity
Not Before: Nov 30 15:52:22 2024 GMT
Not After : Jan 31 00:00:00 2026 GMT
Subject: CN=674b34b6-a650
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:59:a6:02:bd:73:88:35:1e:2c:92:a5:aa:3f:
6a:6a:4e:22:0b:87:1c:a9:10:7e:6e:f8:97:f0:18:
2a:2b:f7:07:9e:a7:23:54:a4:e1:3d:fd:4f:4a:ae:
ab:de:80:a0:d1:16:54:03:7d:bf:08:6e:e5:03:a6:
dc:8e:c0:a4:f1:c0:6e:aa:2f:c3:20:1a:ac:eb:bb:
74:26:02:13:f0:19:47:15:41:0f:85:78:53:18:65:
ce:18:eb:3c:9e:2b:e1:b5:09:b3:49:c9:e7:ad:6a:
12:2b:a3:1b:21:ba:e5:57:79:01:e6:60:4f:4b:c0:
c4:2d:ce:94:e0:6a:10:fb:3e:22:2a:06:a0:08:e0:
5c:fa:46:06:18:1c:35:ba:d6:b8:e3:ab:11:0c:6e:
85:35:5d:35:08:7b:bb:2f:cd:f4:d1:98:da:91:37:
22:38:c1:04:5c:eb:41:9f:42:9d:39:fd:3c:da:65:
ff:02:0f:c2:a2:d4:cb:0c:7a:f3:f5:95:ad:6e:69:
1e:83:22:72:25:54:94:48:e6:fe:30:60:2f:d7:75:
c5:00:4c:ad:26:22:cb:a1:00:81:ef:f8:2b:eb:bd:
e4:67:dd:39:27:65:c4:d3:89:a6:83:5e:b9:13:a0:
04:a0:1e:cc:f5:4a:c2:19:0b:8a:00:29:50:f0:31:
a3:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:7B:C3:F1:21:59:DC:65:16:21:99:DE:42:EC:E6:E1:29:80:8A:CA
X509v3 Authority Key Identifier:
keyid:3B:0B:C5:56:50:AA:46:B1:78:B3:E1:74:23:00:0B:D9:81:CA:67:36
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9186C66/8FB958FAF86B11E483167360C4F9AE02/OwvFVlCqRrF4s-F0IwAL2YHKZzY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OwvFVlCqRrF4s-F0IwAL2YHKZzY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9186C66/8FB958FAF86B11E483167360C4F9AE02/02DB5704B0F211E58974874FC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.115.112.0/22
103.10.52.0/22
121.200.60.0/22
IPv6:
2401:3300::/32
Signature Algorithm: sha256WithRSAEncryption
0e:c8:55:64:3f:43:55:4c:98:9a:59:1f:9f:aa:f1:fa:49:b8:
e7:09:66:e9:53:f3:e3:24:72:4a:32:89:24:e0:65:79:86:7e:
15:88:a5:f6:3e:03:85:e6:ca:19:76:03:14:6d:7b:a3:87:48:
03:a4:df:4b:a4:c1:06:ec:a8:f1:63:85:03:61:fb:63:06:d3:
ed:12:8d:6d:07:f9:a2:83:72:86:89:18:4f:76:10:f8:ba:fd:
52:61:5b:c1:6d:13:ee:57:68:44:e4:72:59:61:dd:58:f0:30:
62:c3:8c:d4:3e:54:28:b3:4b:fe:74:02:66:79:a9:44:07:9a:
db:86:d8:51:39:9b:a4:59:46:d9:dc:2a:61:24:26:3d:34:e4:
fd:90:64:ac:62:09:98:08:0c:5e:24:0f:06:e9:c0:de:fe:3a:
02:45:c6:fb:a5:8c:76:cd:f5:0e:c6:16:b5:a9:43:8c:6c:da:
4a:c8:68:3a:de:e8:dc:ec:61:2c:2f:7c:8d:39:b0:a6:a4:fa:
0d:4b:e3:3e:c0:8e:73:91:52:7c:29:ee:60:f6:a9:37:d1:80:
66:48:84:01:9d:a5:92:7f:97:a0:bd:02:6e:b5:d5:18:17:e9:
7c:58:06:68:a8:e2:30:84:37:f4:26:f9:f8:31:12:79:a8:ff:
6a:a5:d1:89
-----BEGIN CERTIFICATE-----
MIIFjDCCBHSgAwIBAgICJcEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
ODZDNjYxMTAvBgNVBAUTKDNCMEJDNTU2NTBBQTQ2QjE3OEIzRTE3NDIzMDAwQkQ5
ODFDQTY3MzYwHhcNMjQxMTMwMTU1MjIyWhcNMjYwMTMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02NzRiMzRiNi1hNjUwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAyFmmAr1ziDUeLJKlqj9qak4iC4ccqRB+bviX8BgqK/cHnqcjVKThPf1PSq6r
3oCg0RZUA32/CG7lA6bcjsCk8cBuqi/DIBqs67t0JgIT8BlHFUEPhXhTGGXOGOs8
nivhtQmzScnnrWoSK6MbIbrlV3kB5mBPS8DELc6U4GoQ+z4iKgagCOBc+kYGGBw1
uta446sRDG6FNV01CHu7L8300ZjakTciOMEEXOtBn0KdOf082mX/Ag/CotTLDHrz
9ZWtbmkegyJyJVSUSOb+MGAv13XFAEytJiLLoQCB7/gr673kZ905J2XE04mmg165
E6AEoB7M9UrCGQuKAClQ8DGj0wIDAQABo4ICsDCCAqwwHQYDVR0OBBYEFER7w/Eh
WdxlFiGZ3kLs5uEpgIrKMB8GA1UdIwQYMBaAFDsLxVZQqkaxeLPhdCMAC9mBymc2
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NkM2Ni84RkI5NThGQUY4
NkIxMUU0ODMxNjczNjBDNEY5QUUwMi9Pd3ZGVmxDcVJyRjRzLUYwSXdBTDJZSEta
elkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL093dkZWbENxUnJGNHMtRjBJd0FMMllIS1p6WS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
ODZDNjYvOEZCOTU4RkFGODZCMTFFNDgzMTY3MzYwQzRGOUFFMDIvMDJEQjU3MDRC
MEYyMTFFNTg5NzQ4NzRGQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwOgYIKwYBBQUHAQcBAf8E
KzApMBgEAgABMBIDBAItc3ADBAJnCjQDBAJ5yDwwDQQCAAIwBwMFACQBMwAwDQYJ
KoZIhvcNAQELBQADggEBAA7IVWQ/Q1VMmJpZH5+q8fpJuOcJZulT8+MkckoyiSTg
ZXmGfhWIpfY+A4Xmyhl2AxRte6OHSAOk30ukwQbsqPFjhQNh+2MG0+0SjW0H+aKD
coaJGE92EPi6/VJhW8FtE+5XaETkcllh3VjwMGLDjNQ+VCizS/50AmZ5qUQHmtuG
2FE5m6RZRtncKmEkJj005P2QZKxiCZgIDF4kDwbpwN7+OgJFxvuljHbN9Q7GFrWp
Q4xs2krIaDre6NzsYSwvfI05sKak+g1L4z7AjnORUnwp7mD2qTfRgGZIhAGdpZJ/
l6C9Am611RgX6XxYBmio4jCEN/Qm+fgxEnmo/2ql0Yk=
-----END CERTIFICATE-----
Generated at Sat Apr 26 16:57:28 2025 by rpki-client