Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F8A41/554140DE87BC11EBB3C08272C4F9AE02/983FA0E8F68C11EC884BB16BC4F9AE02.roa
File: 983FA0E8F68C11EC884BB16BC4F9AE02.roa (raw, json)
Hash identifier: +HIWxJiLolDgRpb6PQ9bp+rcmEeyPFvi32O1KjhIdI4=
Subject key identifier: A1:82:D1:35:85:4A:13:04:9C:17:99:E7:78:B2:DE:17:98:19:A7:4E
Certificate issuer: /CN=A91F8A41/serialNumber=CDFEDF2D411C84C36DC3BB6A02FDF1AC50B5BA14
Certificate serial: 06C5
Authority key identifier: CD:FE:DF:2D:41:1C:84:C3:6D:C3:BB:6A:02:FD:F1:AC:50:B5:BA:14
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zf7fLUEchMNtw7tqAv3xrFC1uhQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F8A41/554140DE87BC11EBB3C08272C4F9AE02/983FA0E8F68C11EC884BB16BC4F9AE02.roa
Signing time: Fri 27 Dec 2024 02:42:42 +0000
ROA not before: Fri 27 Dec 2024 02:42:42 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 10094
IP address blocks: 61.6.192.0/18 maxlen: 24
103.4.188.0/22 maxlen: 22
103.4.188.0/24 maxlen: 24
103.4.189.0/24 maxlen: 24
103.4.190.0/24 maxlen: 24
103.4.191.0/24 maxlen: 24
103.20.24.0/22 maxlen: 22
103.42.208.0/22 maxlen: 22
118.103.248.0/21 maxlen: 21
118.103.248.0/22 maxlen: 22
118.103.248.0/24 maxlen: 24
118.103.249.0/24 maxlen: 24
118.103.250.0/24 maxlen: 24
118.103.251.0/24 maxlen: 24
118.103.252.0/24 maxlen: 24
118.103.253.0/24 maxlen: 24
118.103.254.0/24 maxlen: 24
118.103.255.0/24 maxlen: 24
119.160.128.0/18 maxlen: 24
202.93.208.0/20 maxlen: 24
202.152.64.0/24 maxlen: 24
202.152.65.0/24 maxlen: 24
202.152.66.0/24 maxlen: 24
202.152.67.0/24 maxlen: 24
202.152.68.0/22 maxlen: 22
202.152.68.0/24 maxlen: 24
202.152.69.0/24 maxlen: 24
202.152.70.0/24 maxlen: 24
202.152.71.0/24 maxlen: 24
202.152.72.0/24 maxlen: 24
202.152.73.0/24 maxlen: 24
202.152.76.0/22 maxlen: 22
202.152.76.0/24 maxlen: 24
202.152.77.0/24 maxlen: 24
202.152.78.0/24 maxlen: 24
202.152.79.0/24 maxlen: 24
202.152.80.0/24 maxlen: 24
202.152.81.0/24 maxlen: 24
202.152.82.0/24 maxlen: 24
202.152.83.0/24 maxlen: 24
202.152.84.0/24 maxlen: 24
202.152.85.0/24 maxlen: 24
202.152.86.0/24 maxlen: 24
202.152.87.0/24 maxlen: 24
202.152.92.0/24 maxlen: 24
202.152.93.0/24 maxlen: 24
202.152.94.0/24 maxlen: 24
202.152.95.0/24 maxlen: 24
202.160.0.0/21 maxlen: 24
202.160.8.0/21 maxlen: 24
202.160.16.0/20 maxlen: 24
202.160.32.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F8A41/554140DE87BC11EBB3C08272C4F9AE02/zf7fLUEchMNtw7tqAv3xrFC1uhQ.crl
rsync://rpki.apnic.net/member_repository/A91F8A41/554140DE87BC11EBB3C08272C4F9AE02/zf7fLUEchMNtw7tqAv3xrFC1uhQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zf7fLUEchMNtw7tqAv3xrFC1uhQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 01 May 2025 22:22:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1733 (0x6c5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F8A41, serialNumber=CDFEDF2D411C84C36DC3BB6A02FDF1AC50B5BA14
Validity
Not Before: Dec 27 02:42:42 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=676e1421-3707
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:b2:52:28:1d:8b:cb:2b:7e:a0:19:d9:ff:ab:
70:a6:1e:be:8a:85:46:b6:48:68:b3:a5:e7:a2:ad:
43:39:db:16:1b:23:ac:8f:a5:64:76:75:0a:ca:51:
1d:39:e7:0c:ba:39:c0:d7:71:d2:f6:4e:6d:6c:87:
8d:a4:87:c7:e7:d6:eb:2d:73:9c:f1:06:83:bd:6e:
56:2f:48:b5:92:4a:fe:d8:0a:71:3f:14:57:12:fc:
62:80:f5:7b:0e:b2:ca:95:db:ba:ea:f2:c4:64:ca:
f7:cd:77:66:8e:8f:d0:be:7e:45:3a:d6:f0:50:32:
eb:f0:d3:ee:5f:65:77:c4:08:15:d7:70:7d:6f:ea:
9a:85:22:d4:c6:00:6b:0d:7b:5b:39:d1:f6:76:89:
ad:91:d7:1e:14:2d:6e:63:7b:93:e5:1b:b0:2f:6e:
03:5c:8d:f5:90:1e:f7:1b:60:19:2b:93:2d:8f:42:
bb:59:7a:92:a3:f4:c1:64:45:c0:4a:5a:55:17:7c:
10:1a:11:27:a1:4f:ef:23:98:f4:e8:bb:ec:a6:9c:
86:3f:47:d5:4d:55:32:4a:69:30:61:f6:f7:f1:39:
79:8b:08:b3:18:b6:38:0d:55:52:cc:f1:9e:b1:14:
49:bd:bc:e5:bf:64:a6:ee:9b:03:0a:42:2c:59:6e:
df:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:82:D1:35:85:4A:13:04:9C:17:99:E7:78:B2:DE:17:98:19:A7:4E
X509v3 Authority Key Identifier:
keyid:CD:FE:DF:2D:41:1C:84:C3:6D:C3:BB:6A:02:FD:F1:AC:50:B5:BA:14
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F8A41/554140DE87BC11EBB3C08272C4F9AE02/zf7fLUEchMNtw7tqAv3xrFC1uhQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zf7fLUEchMNtw7tqAv3xrFC1uhQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F8A41/554140DE87BC11EBB3C08272C4F9AE02/983FA0E8F68C11EC884BB16BC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
61.6.192.0/18
103.4.188.0/22
103.20.24.0/22
103.42.208.0/22
118.103.248.0/21
119.160.128.0/18
202.93.208.0/20
202.152.64.0-202.152.73.255
202.152.76.0-202.152.87.255
202.152.92.0/22
202.160.0.0-202.160.47.255
Signature Algorithm: sha256WithRSAEncryption
a6:c0:49:3d:ea:60:2d:f3:1d:1e:4b:9b:bf:30:05:5c:f5:09:
e1:96:08:f3:d2:29:6c:29:09:40:0e:75:ee:e5:6f:dd:f2:54:
28:bc:5d:0a:e2:72:23:6f:e5:b4:71:7c:50:d4:e2:fa:99:42:
13:02:d0:9e:52:67:98:3a:d3:75:49:97:9c:ca:c9:a8:95:7a:
fd:ac:96:15:65:3f:ef:a3:3c:cd:2c:bd:33:db:d0:9c:d5:56:
2d:d9:74:01:51:c1:a5:d1:70:9b:96:7a:96:7f:ea:82:04:e8:
cc:ee:bb:90:19:de:b3:30:15:9c:75:3f:8a:be:1f:b2:c0:58:
02:78:b1:46:f6:3f:3a:7f:2e:d8:36:10:a5:a8:f1:54:b0:b2:
cc:2f:b9:5c:53:d2:a2:0f:bd:01:ee:61:85:df:c8:c6:bd:1a:
a0:ce:ee:17:04:f6:a0:5d:c6:3e:f0:fd:1d:39:5c:ce:7c:23:
44:bd:13:31:c8:53:b3:2f:3d:eb:d2:36:72:ab:44:42:a7:cc:
f6:c1:de:e6:95:7b:a6:1b:bc:1c:bd:f5:c6:14:fb:08:cf:05:
47:29:9a:35:4a:67:d6:6f:10:6c:92:d8:90:a6:6f:98:3c:68:
66:0b:b2:df:7b:91:a0:d5:89:d2:c6:ff:04:c6:f6:31:02:7c:
da:7b:d9:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 08:17:34 2025 by rpki-client