Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B3558/0F21214E390511E99A330233C4F9AE02/BAE1D7A8716711EFBF91272AC4F9AE02.roa
File: BAE1D7A8716711EFBF91272AC4F9AE02.roa (raw, json)
Hash identifier: y8nzjZGMQib7WT4yCqeNAgHbrhJTL2UqXsshegz4sgE=
Subject key identifier: 06:B3:C8:08:28:71:D1:65:B2:F2:41:84:E3:49:96:68:F7:42:56:81
Certificate issuer: /CN=A91B3558/serialNumber=C8909254F69666D585E310ACD8DFF2B1FB9A5F2A
Certificate serial: 1063
Authority key identifier: C8:90:92:54:F6:96:66:D5:85:E3:10:AC:D8:DF:F2:B1:FB:9A:5F:2A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yJCSVPaWZtWF4xCs2N_ysfuaXyo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B3558/0F21214E390511E99A330233C4F9AE02/BAE1D7A8716711EFBF91272AC4F9AE02.roa
Signing time: Wed 30 Apr 2025 17:26:44 +0000
ROA not before: Wed 30 Apr 2025 17:26:44 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 46489
IP address blocks: 45.113.128.0/22 maxlen: 22
103.53.48.0/22 maxlen: 22
103.53.48.0/23 maxlen: 23
2402:2a80::/32 maxlen: 32
2402:2a80:100::/40 maxlen: 48
2402:2a80:200::/40 maxlen: 48
2402:2a80:300::/40 maxlen: 48
2402:2a80:400::/40 maxlen: 48
2402:2a80:1000::/36 maxlen: 36
2402:2a80:1000::/40 maxlen: 40
2402:2a80:1100::/40 maxlen: 40
2402:2a80:1200::/40 maxlen: 40
2402:2a80:1300::/40 maxlen: 40
2402:2a80:1400::/40 maxlen: 40
2402:2a80:1500::/40 maxlen: 40
2402:2a80:2000::/36 maxlen: 36
2402:2a80:2000::/40 maxlen: 40
2402:2a80:2100::/40 maxlen: 40
2402:2a80:3000::/36 maxlen: 36
2402:2a80:3000::/40 maxlen: 40
2402:2a80:3100::/40 maxlen: 40
2402:2a80:3200::/40 maxlen: 40
2402:2a80:3300::/40 maxlen: 40
2402:2a80:4000::/36 maxlen: 36
2402:2a80:4000::/40 maxlen: 40
2402:2a80:4100::/40 maxlen: 40
2402:2a80:4200::/40 maxlen: 40
2402:2a80:5000::/36 maxlen: 36
2402:2a80:6000::/36 maxlen: 36
2402:2a80:b000::/36 maxlen: 36
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B3558/0F21214E390511E99A330233C4F9AE02/yJCSVPaWZtWF4xCs2N_ysfuaXyo.crl
rsync://rpki.apnic.net/member_repository/A91B3558/0F21214E390511E99A330233C4F9AE02/yJCSVPaWZtWF4xCs2N_ysfuaXyo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yJCSVPaWZtWF4xCs2N_ysfuaXyo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 11 May 2025 17:17:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4195 (0x1063)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B3558, serialNumber=C8909254F69666D585E310ACD8DFF2B1FB9A5F2A
Validity
Not Before: Apr 30 17:26:44 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=68125d54-7469
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:86:0e:20:69:20:03:f8:32:3e:fa:5b:ff:3f:
17:d0:2e:9d:7c:be:13:27:de:ed:8e:3d:2c:65:fd:
63:0e:c6:5e:09:fd:77:4e:4e:fb:43:eb:82:0f:8a:
ee:2b:2c:2c:c4:a0:b4:2e:97:0d:69:17:e1:3e:1d:
17:a2:bc:eb:cc:eb:ac:5b:00:18:16:c6:af:2d:c0:
82:5c:6d:38:86:43:2a:ca:82:a3:c1:bf:f8:49:04:
7c:35:0a:38:f5:d6:b4:61:82:5e:5a:37:42:20:75:
17:77:5f:7d:e9:53:b7:3c:95:f1:50:8e:ec:22:fe:
25:cc:04:c8:64:7e:91:f6:46:cc:bb:99:19:a6:de:
12:a6:97:16:05:98:c3:c2:f5:39:0d:27:af:c7:36:
6e:31:3e:b2:47:fd:5f:6e:5e:be:83:dc:e5:d0:77:
07:83:fe:35:35:7c:ac:3a:02:79:57:ff:05:a7:82:
3e:09:06:68:84:2b:8b:6b:5e:14:d6:75:77:97:82:
bc:ae:eb:3b:23:81:e9:42:f4:8d:57:fb:b8:b4:fe:
0b:02:f9:f5:df:10:fa:1a:37:6b:20:c5:aa:55:dc:
ce:a2:bf:c4:41:af:99:e1:2a:87:13:cd:04:54:b8:
c0:0b:c1:73:d8:b9:fc:a1:18:ed:4f:67:ad:8d:85:
79:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:B3:C8:08:28:71:D1:65:B2:F2:41:84:E3:49:96:68:F7:42:56:81
X509v3 Authority Key Identifier:
keyid:C8:90:92:54:F6:96:66:D5:85:E3:10:AC:D8:DF:F2:B1:FB:9A:5F:2A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B3558/0F21214E390511E99A330233C4F9AE02/yJCSVPaWZtWF4xCs2N_ysfuaXyo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yJCSVPaWZtWF4xCs2N_ysfuaXyo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B3558/0F21214E390511E99A330233C4F9AE02/BAE1D7A8716711EFBF91272AC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.113.128.0/22
103.53.48.0/22
IPv6:
2402:2a80::/32
Signature Algorithm: sha256WithRSAEncryption
a4:7f:b7:76:31:a3:fa:53:11:c1:50:f4:dc:a9:16:68:c1:8c:
85:f3:c0:7f:09:77:98:31:e6:80:ba:5e:c5:ef:58:96:4c:61:
2a:9a:4b:58:01:15:13:4b:45:a5:eb:16:7a:21:36:13:1a:ab:
29:3b:28:ca:8b:23:19:2d:32:f6:11:1f:94:49:7e:b1:bf:66:
d9:0d:e8:32:b5:99:92:6d:c8:c8:53:0d:89:65:af:b8:78:32:
83:31:a6:53:20:e1:bb:f9:cf:7f:f8:5b:16:aa:85:86:c5:22:
e7:3c:62:b9:ff:28:07:9a:74:c9:15:46:56:16:2f:0f:c3:bb:
7f:68:21:07:fc:b7:1f:c7:4f:ca:0a:e2:55:ce:c0:4b:c2:a0:
7a:e3:cc:1c:63:2b:70:dd:b3:1a:75:fd:24:95:cb:67:13:51:
1b:2f:c4:79:2d:ad:7e:47:bf:42:3b:80:d5:23:88:12:bf:3b:
3c:55:13:3e:1c:e3:4d:9a:ae:10:e4:a3:8d:92:04:6d:9e:6a:
ad:71:57:33:39:2d:a7:68:01:1f:79:f3:a1:7b:68:c8:6e:c0:
b8:c1:35:69:98:b9:28:ba:03:20:17:51:54:ce:55:ff:09:bd:
37:dc:2c:88:0f:56:29:18:d7:ee:be:e5:3d:ab:e8:f7:9d:37:
e7:29:86:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 6 11:33:32 2025 by rpki-client