Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91CE978/3223F35E1D9811E28A8C2E8208B02CD2/29F7413CBB6011EEB59E5D81C4F9AE02.roa
File: 29F7413CBB6011EEB59E5D81C4F9AE02.roa (raw, json)
Hash identifier: ZqgeyChgSkuAuEy8E4XBqCcFOmGTEjV9SXx7odN3pv4=
Subject key identifier: 6B:C0:5F:43:72:9C:CA:99:BF:A6:86:F8:5E:5A:86:5C:E5:31:2F:45
Certificate issuer: /CN=A91CE978/serialNumber=6A1E4F72847EB3699522C93D26773F0DF8396EBE
Certificate serial: 352D
Authority key identifier: 6A:1E:4F:72:84:7E:B3:69:95:22:C9:3D:26:77:3F:0D:F8:39:6E:BE
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ah5PcoR-s2mVIsk9Jnc_Dfg5br4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91CE978/3223F35E1D9811E28A8C2E8208B02CD2/29F7413CBB6011EEB59E5D81C4F9AE02.roa
Signing time: Thu 10 Apr 2025 15:20:55 +0000
ROA not before: Thu 10 Apr 2025 15:20:55 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 45459
IP address blocks: 103.14.40.0/22 maxlen: 23
103.14.40.0/24 maxlen: 24
103.14.41.0/24 maxlen: 24
103.14.42.0/24 maxlen: 24
103.14.43.0/24 maxlen: 24
112.109.64.0/21 maxlen: 24
112.109.72.0/23 maxlen: 24
112.109.75.0/24 maxlen: 24
112.109.76.0/22 maxlen: 24
112.109.80.0/24 maxlen: 24
112.109.85.0/24 maxlen: 24
112.109.86.0/23 maxlen: 24
119.47.116.0/24 maxlen: 24
119.47.120.0/23 maxlen: 24
119.47.125.0/24 maxlen: 24
119.47.126.0/23 maxlen: 24
202.174.116.0/24 maxlen: 24
210.79.48.0/22 maxlen: 23
210.79.49.0/24 maxlen: 24
210.79.50.0/23 maxlen: 24
210.79.52.0/24 maxlen: 24
210.79.53.0/24 maxlen: 24
210.79.54.0/24 maxlen: 24
210.79.55.0/24 maxlen: 24
2404:3800::/48 maxlen: 48
2404:3800:1::/48 maxlen: 48
2404:3800:8::/46 maxlen: 46
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91CE978/3223F35E1D9811E28A8C2E8208B02CD2/ah5PcoR-s2mVIsk9Jnc_Dfg5br4.crl
rsync://rpki.apnic.net/member_repository/A91CE978/3223F35E1D9811E28A8C2E8208B02CD2/ah5PcoR-s2mVIsk9Jnc_Dfg5br4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ah5PcoR-s2mVIsk9Jnc_Dfg5br4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 03 May 2025 14:52:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13613 (0x352d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91CE978, serialNumber=6A1E4F72847EB3699522C93D26773F0DF8396EBE
Validity
Not Before: Apr 10 15:20:55 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=67f7e1d7-dd4e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:b0:da:dd:28:42:c2:43:50:71:c4:dd:ba:eb:
3f:0d:f9:bf:fe:43:e6:ec:71:c9:0c:58:0a:ca:17:
a1:bf:9e:cb:94:f5:b3:91:c6:df:15:91:ad:4b:8f:
4f:5e:ef:15:d9:a1:53:15:40:33:06:0e:e3:f7:b8:
b9:dc:0f:06:3a:4b:47:b6:fe:4c:7c:1c:d6:6c:90:
1f:06:81:56:28:95:4f:9c:99:91:38:e7:5c:cd:87:
fa:00:53:6e:5a:a3:c3:8e:c0:77:71:46:b7:f6:37:
30:7d:2d:50:e8:96:cc:9f:2d:9f:0d:1b:90:6b:24:
2b:fb:86:c0:9b:4e:db:63:1e:85:ed:5c:23:f7:32:
a9:76:74:58:e9:57:42:98:38:20:a8:12:32:37:1f:
ce:43:e6:74:59:df:4f:36:8e:42:68:0b:c0:ac:c6:
47:41:bf:18:eb:08:f7:05:54:dc:5a:65:a6:28:c3:
b3:a7:9b:4c:4d:1e:b6:cc:b0:0d:5b:d9:f0:b1:b2:
90:f8:33:e2:d3:74:e9:d3:fe:b5:c1:c1:f4:84:27:
92:2b:0a:0a:ad:48:d4:c2:63:f2:dd:fd:ba:32:ad:
73:8f:f5:73:52:19:ea:1d:43:78:7e:a4:62:1b:ac:
15:68:52:1d:a5:6b:d6:d5:e8:d7:30:af:2d:69:2f:
09:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:C0:5F:43:72:9C:CA:99:BF:A6:86:F8:5E:5A:86:5C:E5:31:2F:45
X509v3 Authority Key Identifier:
keyid:6A:1E:4F:72:84:7E:B3:69:95:22:C9:3D:26:77:3F:0D:F8:39:6E:BE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91CE978/3223F35E1D9811E28A8C2E8208B02CD2/ah5PcoR-s2mVIsk9Jnc_Dfg5br4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ah5PcoR-s2mVIsk9Jnc_Dfg5br4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CE978/3223F35E1D9811E28A8C2E8208B02CD2/29F7413CBB6011EEB59E5D81C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.14.40.0/22
112.109.64.0-112.109.73.255
112.109.75.0-112.109.80.255
112.109.85.0-112.109.87.255
119.47.116.0/24
119.47.120.0/23
119.47.125.0-119.47.127.255
202.174.116.0/24
210.79.48.0/21
IPv6:
2404:3800::/47
2404:3800:8::/46
Signature Algorithm: sha256WithRSAEncryption
a2:67:f1:54:e9:f4:62:63:23:84:9f:22:8d:2c:69:ed:e7:73:
cc:76:f2:d7:5f:34:e2:bb:ab:a5:66:4a:18:48:74:c1:ce:e3:
d4:93:91:07:b4:f7:40:52:e0:62:d9:8e:67:f0:aa:64:0e:1a:
36:3c:fb:fd:8c:15:74:76:12:d0:74:da:2e:42:6a:5c:a6:43:
38:b6:1f:8a:24:40:0f:d5:02:a9:29:2d:32:46:3c:77:09:40:
9a:58:42:b7:3e:80:e6:35:81:bd:09:e2:50:64:2c:96:f2:78:
7a:e6:7a:f8:0f:fb:2e:6d:5b:57:44:86:4b:d8:d3:78:a4:06:
2c:06:92:41:6f:8b:26:bc:43:66:18:6f:c8:d8:97:51:db:cb:
a2:2f:24:d7:18:e8:88:c9:42:ac:a2:0c:da:ee:50:e8:39:e1:
08:0e:12:c2:2f:c1:2c:8e:3e:c7:3a:7d:d0:a7:0c:a3:de:1d:
6e:cf:54:b1:6d:72:d8:39:8f:54:7a:17:63:fb:ba:1e:7d:2f:
88:fc:a8:d7:c4:d6:83:95:8e:8f:d7:d7:cf:69:ba:78:82:ca:
2e:90:46:dd:88:7f:ac:e2:2d:a4:53:21:aa:47:4d:f2:20:71:
96:e3:b0:df:a3:2e:b4:62:5d:bd:7c:28:bb:5c:5c:91:df:22:
fe:81:00:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 20:32:20 2025 by rpki-client