Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C2CC7/791C6A347B3811E9BC0D3B32C4F9AE02/B2A71CE2334111EF9770A542C4F9AE02.roa
File: B2A71CE2334111EF9770A542C4F9AE02.roa (raw, json)
Hash identifier: pfS5+RaNkCZt3S0EiNJ59HEgMt0xojAMbKbcs9rYZR4=
Subject key identifier: 5D:D0:CE:69:FC:FB:C2:C8:41:A8:A3:6B:DF:F3:1C:7A:D5:AC:25:05
Certificate issuer: /CN=A91C2CC7/serialNumber=77486B610D333AEBDA8F255C501411B01F18FF49
Certificate serial: 0F9E
Authority key identifier: 77:48:6B:61:0D:33:3A:EB:DA:8F:25:5C:50:14:11:B0:1F:18:FF:49
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d0hrYQ0zOuvajyVcUBQRsB8Y_0k.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C2CC7/791C6A347B3811E9BC0D3B32C4F9AE02/B2A71CE2334111EF9770A542C4F9AE02.roa
Signing time: Thu 10 Apr 2025 17:56:40 +0000
ROA not before: Thu 10 Apr 2025 17:56:40 +0000
ROA not after: Thu 28 May 2026 00:00:00 +0000
asID: 203
IP address blocks: 103.30.186.0/23 maxlen: 23
202.53.197.0/24 maxlen: 24
202.53.204.0/23 maxlen: 23
202.53.206.0/23 maxlen: 23
2401:df00:1::/48 maxlen: 48
2401:df00:2::/48 maxlen: 48
2401:df00:11::/48 maxlen: 48
2401:df00:12::/48 maxlen: 48
2401:df00:21::/48 maxlen: 48
2401:df00:22::/48 maxlen: 48
2401:df00:31::/48 maxlen: 48
2401:df00:32::/48 maxlen: 48
2401:df00:41::/48 maxlen: 48
2401:df00:42::/48 maxlen: 48
2401:df00:51::/48 maxlen: 48
2401:df00:52::/48 maxlen: 48
2401:df00:61::/48 maxlen: 48
2401:df00:62::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C2CC7/791C6A347B3811E9BC0D3B32C4F9AE02/d0hrYQ0zOuvajyVcUBQRsB8Y_0k.crl
rsync://rpki.apnic.net/member_repository/A91C2CC7/791C6A347B3811E9BC0D3B32C4F9AE02/d0hrYQ0zOuvajyVcUBQRsB8Y_0k.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d0hrYQ0zOuvajyVcUBQRsB8Y_0k.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 01 May 2025 17:38:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3998 (0xf9e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C2CC7, serialNumber=77486B610D333AEBDA8F255C501411B01F18FF49
Validity
Not Before: Apr 10 17:56:40 2025 GMT
Not After : May 28 00:00:00 2026 GMT
Subject: CN=67f80658-a65b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:08:59:b3:d4:87:94:ac:4b:19:db:f5:3b:67:
09:d5:e4:f7:a8:91:de:04:18:a2:b5:96:a3:4f:ef:
d8:37:6a:37:61:fa:a0:ff:db:6b:05:76:e3:a3:30:
3c:d4:c8:a6:f5:4e:d9:f1:7e:1b:90:23:e8:0d:d6:
6a:b1:a1:73:72:d8:7f:cf:9f:94:b6:05:c1:1d:6d:
41:10:a0:86:d5:d2:06:42:5a:7c:a5:a4:f1:f8:d5:
e8:1b:1b:44:f9:57:b3:e9:2b:2e:75:3e:d4:8b:ad:
82:10:3b:43:c1:ca:cf:7c:58:c2:d3:0c:cc:c0:a4:
fc:27:90:48:d5:98:52:af:ed:74:6c:3c:ae:6c:01:
a5:54:a9:a4:1b:68:81:e4:f8:ad:85:3f:c7:f7:b6:
f7:39:be:74:1d:57:8f:e8:43:9f:98:58:45:db:05:
38:bb:53:da:c8:c0:07:67:b2:17:1d:1b:4a:5e:f9:
df:65:40:d5:25:6d:f0:4b:b5:42:65:9f:b6:ef:fe:
19:ea:78:9a:1f:09:2b:75:cc:88:6b:b7:9e:38:5a:
fb:b4:6f:29:8a:06:ba:04:f6:66:cd:33:b0:b0:7c:
92:1c:b7:18:b5:ce:2c:68:aa:19:4a:65:e1:e8:cc:
83:d0:eb:c7:23:79:c1:17:38:35:30:87:62:72:06:
6b:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:D0:CE:69:FC:FB:C2:C8:41:A8:A3:6B:DF:F3:1C:7A:D5:AC:25:05
X509v3 Authority Key Identifier:
keyid:77:48:6B:61:0D:33:3A:EB:DA:8F:25:5C:50:14:11:B0:1F:18:FF:49
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C2CC7/791C6A347B3811E9BC0D3B32C4F9AE02/d0hrYQ0zOuvajyVcUBQRsB8Y_0k.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d0hrYQ0zOuvajyVcUBQRsB8Y_0k.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C2CC7/791C6A347B3811E9BC0D3B32C4F9AE02/B2A71CE2334111EF9770A542C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.30.186.0/23
202.53.197.0/24
202.53.204.0/22
IPv6:
2401:df00:1::-2401:df00:2:ffff:ffff:ffff:ffff:ffff
2401:df00:11::-2401:df00:12:ffff:ffff:ffff:ffff:ffff
2401:df00:21::-2401:df00:22:ffff:ffff:ffff:ffff:ffff
2401:df00:31::-2401:df00:32:ffff:ffff:ffff:ffff:ffff
2401:df00:41::-2401:df00:42:ffff:ffff:ffff:ffff:ffff
2401:df00:51::-2401:df00:52:ffff:ffff:ffff:ffff:ffff
2401:df00:61::-2401:df00:62:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
d5:be:f2:0d:55:b5:35:76:66:24:e9:f4:03:fa:16:bf:f8:2a:
d1:b3:63:32:2b:e4:54:b2:e6:07:0f:83:01:86:e2:64:c5:68:
0e:e1:cc:f6:ab:ab:d4:be:9c:bd:b2:10:b7:14:d2:d2:34:ab:
73:00:14:aa:d0:df:1a:3e:6f:92:a6:c0:b6:0c:cb:92:d2:6a:
62:84:a0:30:b8:64:15:4a:bb:e8:df:68:ad:06:5b:8f:cd:91:
e8:b8:72:b1:6d:db:8f:64:c3:6a:5c:24:82:4e:0b:d9:d5:52:
e5:0f:02:2e:38:d1:37:32:e3:b1:68:53:71:11:cd:ab:15:df:
0a:f0:42:79:16:8c:2f:a5:96:3c:1a:64:13:ee:e1:3a:2b:ba:
b6:16:d7:72:84:93:1f:3c:6a:d8:31:a4:2c:4f:46:e6:cb:8a:
6a:88:fe:71:62:2d:72:48:64:61:b9:85:49:71:01:b5:22:62:
f1:80:d5:5c:db:85:4c:d9:89:ba:c4:b6:a9:77:6d:2c:53:2a:
53:4a:01:f5:e9:d1:81:7f:9a:7b:1f:83:a2:af:40:e0:2f:a1:
44:23:4b:1b:0b:33:f9:ee:e3:0f:bd:b5:ec:65:bc:74:65:4b:
89:7f:17:2c:38:45:29:54:ed:58:be:2a:a8:5a:a2:91:b4:1a:
6c:a3:94:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 13:11:26 2025 by rpki-client