Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D3633/62909F38A24111E6BCA8D078C4F9AE02/79AE82F8171711EBB12F2574C4F9AE02.roa
File: 79AE82F8171711EBB12F2574C4F9AE02.roa (raw, json)
Hash identifier: xgRdkx3HlYgErdgIoQ9HlNBZBIlpv/AqB1G+fVzRXiU=
Subject key identifier: 83:F4:66:31:3F:21:CC:CA:3F:F7:36:5B:D3:A6:2B:41:F9:C9:38:A1
Certificate issuer: /CN=A91D3633/serialNumber=74E482606358B2E81258AAF0DBE4C7C963D87E1C
Certificate serial: 1DA4
Authority key identifier: 74:E4:82:60:63:58:B2:E8:12:58:AA:F0:DB:E4:C7:C9:63:D8:7E:1C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dOSCYGNYsugSWKrw2-THyWPYfhw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D3633/62909F38A24111E6BCA8D078C4F9AE02/79AE82F8171711EBB12F2574C4F9AE02.roa
Signing time: Fri 18 Apr 2025 16:34:30 +0000
ROA not before: Fri 18 Apr 2025 16:34:30 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 38880
IP address blocks: 27.131.64.0/18 maxlen: 24
27.131.80.0/21 maxlen: 23
27.131.80.0/22 maxlen: 24
27.131.84.0/23 maxlen: 24
27.131.100.0/22 maxlen: 24
43.245.68.0/24 maxlen: 24
43.245.69.0/24 maxlen: 24
43.245.70.0/24 maxlen: 24
43.245.71.0/24 maxlen: 24
103.13.56.0/22 maxlen: 24
103.31.28.0/22 maxlen: 24
103.204.106.0/23 maxlen: 24
103.213.100.0/22 maxlen: 24
111.223.224.0/20 maxlen: 22
111.223.224.0/24 maxlen: 24
111.223.225.0/24 maxlen: 24
111.223.226.0/24 maxlen: 24
111.223.227.0/24 maxlen: 24
111.223.228.0/24 maxlen: 24
111.223.229.0/24 maxlen: 24
111.223.231.0/24 maxlen: 24
111.223.232.0/24 maxlen: 24
111.223.233.0/24 maxlen: 24
111.223.234.0/24 maxlen: 24
111.223.235.0/24 maxlen: 24
111.223.236.0/24 maxlen: 24
111.223.237.0/24 maxlen: 24
111.223.238.0/24 maxlen: 24
111.223.239.0/24 maxlen: 24
119.31.224.0/21 maxlen: 24
192.140.140.0/22 maxlen: 24
2400:9c00::/32 maxlen: 32
2400:9c00::/44 maxlen: 48
2407:ca80::/32 maxlen: 64
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D3633/62909F38A24111E6BCA8D078C4F9AE02/dOSCYGNYsugSWKrw2-THyWPYfhw.crl
rsync://rpki.apnic.net/member_repository/A91D3633/62909F38A24111E6BCA8D078C4F9AE02/dOSCYGNYsugSWKrw2-THyWPYfhw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dOSCYGNYsugSWKrw2-THyWPYfhw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 01 May 2025 16:08:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7588 (0x1da4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D3633, serialNumber=74E482606358B2E81258AAF0DBE4C7C963D87E1C
Validity
Not Before: Apr 18 16:34:30 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=68027f16-49e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:d8:bd:fd:bc:d2:9f:a5:11:df:84:5f:1a:b3:
3a:e6:52:ed:a8:46:b6:6f:d9:4b:61:04:e6:df:6c:
c8:f6:d1:73:8e:b7:ab:0a:6b:3d:80:5d:7f:a3:5f:
44:23:96:b9:0b:03:d2:c2:9c:14:ee:e4:f7:54:ae:
a7:59:5d:ec:72:13:64:cf:9b:e1:16:95:9c:ce:0c:
13:69:36:c4:67:79:18:c7:b8:d8:a9:b1:93:1c:c4:
22:6c:a9:26:5a:49:dd:ae:15:48:33:00:3b:23:df:
ad:09:cc:79:6a:79:01:73:36:3f:e0:77:d9:61:45:
6c:b4:87:44:09:2b:5d:86:f6:8a:7c:a3:1f:e5:0b:
7e:4b:b6:75:d0:19:df:dc:0d:0c:6c:54:a2:8b:94:
5a:45:89:9e:d1:5d:6a:51:52:3e:73:26:11:6d:d5:
2f:44:d4:9a:34:df:38:e3:e6:8d:f1:dd:bd:c3:cf:
3b:99:2c:dc:22:f2:74:75:9f:6a:57:ef:96:48:ba:
3b:c6:42:ad:f5:df:23:1e:9f:15:7e:e6:65:36:e8:
51:85:70:cc:23:ed:01:00:49:47:0e:24:b9:5e:a8:
0e:6c:7e:7b:55:c9:12:24:59:5c:a7:90:ae:d8:f3:
4d:60:69:1e:d7:cb:bd:d0:9d:95:65:72:4d:5d:e9:
80:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:F4:66:31:3F:21:CC:CA:3F:F7:36:5B:D3:A6:2B:41:F9:C9:38:A1
X509v3 Authority Key Identifier:
keyid:74:E4:82:60:63:58:B2:E8:12:58:AA:F0:DB:E4:C7:C9:63:D8:7E:1C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D3633/62909F38A24111E6BCA8D078C4F9AE02/dOSCYGNYsugSWKrw2-THyWPYfhw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dOSCYGNYsugSWKrw2-THyWPYfhw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D3633/62909F38A24111E6BCA8D078C4F9AE02/79AE82F8171711EBB12F2574C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
27.131.64.0/18
43.245.68.0/22
103.13.56.0/22
103.31.28.0/22
103.204.106.0/23
103.213.100.0/22
111.223.224.0/20
119.31.224.0/21
192.140.140.0/22
IPv6:
2400:9c00::/32
2407:ca80::/32
Signature Algorithm: sha256WithRSAEncryption
70:af:5a:23:74:42:e4:d8:b6:de:4d:9a:b9:62:63:16:8b:1f:
06:f5:b7:fb:93:b8:76:10:94:34:59:b8:14:44:5f:42:90:38:
9a:13:0e:e9:d2:c7:45:0a:b2:d7:44:ea:1e:54:10:1a:68:8c:
c0:45:a8:96:40:05:69:22:fb:3a:44:41:27:85:54:06:30:a7:
8b:d4:97:91:02:89:b2:81:81:04:bb:c1:4a:1a:0f:d3:33:88:
78:a2:f9:6e:04:c4:36:01:e7:e9:b5:35:6f:bc:a6:1c:57:27:
bc:31:a7:cc:08:db:87:8e:ad:97:26:47:57:5a:f8:3b:89:89:
dc:83:6f:dc:3a:85:cc:7a:c3:a4:93:3c:e9:55:12:d6:43:c3:
81:21:0f:b2:31:9a:d1:af:95:04:4a:7c:e8:b5:02:04:f0:74:
2c:84:79:cb:43:2c:e0:bd:29:59:a9:57:53:bb:0e:f8:59:6a:
67:fa:4e:a7:78:be:96:e7:59:33:7b:d6:9c:d0:15:e1:79:f3:
ff:84:af:f5:12:9e:66:8f:8b:f1:3c:da:43:f8:21:55:32:13:
e7:7d:38:63:d4:88:97:c4:38:86:91:84:82:17:65:68:f6:a1:
ca:bc:df:a6:5b:7c:0f:a2:88:6f:0f:68:d1:7d:99:7e:6e:6a:
dc:a0:15:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 05:55:48 2025 by rpki-client