Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9149F3E/AC52B7481D8211E2BC6417D708B02CD2/5E035B480E8C11F0AD0C273AC4F9AE02.roa
File: 5E035B480E8C11F0AD0C273AC4F9AE02.roa (raw, json)
Hash identifier: Wnu/A0yUx+4HqrhfwfUPaml1HEg9mGCN1YlC1GXeGvE=
Subject key identifier: 4D:71:52:6F:DE:C5:4F:71:13:05:97:20:D5:4B:48:03:92:8A:CD:A8
Certificate issuer: /CN=A9149F3E/serialNumber=EB389FB339B3908D549A65390C92E15F9DF7C54B
Certificate serial: 3765
Authority key identifier: EB:38:9F:B3:39:B3:90:8D:54:9A:65:39:0C:92:E1:5F:9D:F7:C5:4B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6zifszmzkI1UmmU5DJLhX533xUs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9149F3E/AC52B7481D8211E2BC6417D708B02CD2/5E035B480E8C11F0AD0C273AC4F9AE02.roa
Signing time: Thu 03 Apr 2025 00:39:27 +0000
ROA not before: Thu 03 Apr 2025 00:39:27 +0000
ROA not after: Sun 31 Aug 2025 00:00:00 +0000
asID: 38661
IP address blocks: 101.79.0.0/22 maxlen: 24
101.79.72.0/22 maxlen: 24
101.79.136.0/23 maxlen: 24
101.79.240.0/21 maxlen: 24
101.79.248.0/22 maxlen: 24
101.79.254.0/23 maxlen: 24
110.4.104.0/22 maxlen: 24
180.210.60.0/22 maxlen: 24
182.252.140.0/22 maxlen: 24
182.252.176.0/21 maxlen: 24
210.4.220.0/22 maxlen: 24
211.172.228.0/22 maxlen: 24
211.172.232.0/22 maxlen: 24
211.236.160.0/22 maxlen: 24
211.236.168.0/21 maxlen: 24
211.236.180.0/22 maxlen: 24
211.236.184.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9149F3E/AC52B7481D8211E2BC6417D708B02CD2/6zifszmzkI1UmmU5DJLhX533xUs.crl
rsync://rpki.apnic.net/member_repository/A9149F3E/AC52B7481D8211E2BC6417D708B02CD2/6zifszmzkI1UmmU5DJLhX533xUs.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6zifszmzkI1UmmU5DJLhX533xUs.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 01 May 2025 13:59:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 14181 (0x3765)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9149F3E, serialNumber=EB389FB339B3908D549A65390C92E15F9DF7C54B
Validity
Not Before: Apr 3 00:39:27 2025 GMT
Not After : Aug 31 00:00:00 2025 GMT
Subject: CN=67edd8bf-cc1b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:38:86:56:52:06:ff:37:98:14:00:99:17:59:
eb:33:a6:df:6b:f7:84:00:bc:3f:16:9d:60:1f:fb:
a5:7f:f3:13:1b:a1:18:2e:52:97:10:77:b2:82:05:
83:68:6c:04:83:cd:ba:e3:10:08:2b:a2:53:58:d2:
04:a8:b8:82:2d:56:4c:21:28:d4:cd:1e:88:49:7f:
6a:16:e7:2a:5a:17:1e:8f:50:70:de:a5:84:5c:ae:
a2:a7:03:43:de:e6:0b:bc:1a:aa:1c:b4:9e:9b:cd:
a6:aa:f4:9a:5e:14:9d:51:5f:f4:c8:e0:c5:ff:8d:
ad:30:cf:99:e9:5f:4d:b1:1d:92:f9:6d:d5:43:0c:
f8:21:76:48:58:64:34:fc:50:f6:51:52:e5:fe:f8:
85:ba:86:b8:cd:f1:17:9e:2b:d5:81:86:81:1e:0f:
15:43:2b:2c:dc:10:0c:cf:23:b9:bb:98:96:4c:5e:
42:a9:b4:61:6c:a2:48:23:58:dd:1a:30:68:11:f4:
5b:a2:ae:38:e6:ca:8a:4a:49:b8:92:aa:0d:38:ad:
1d:52:84:0e:2a:a1:49:5f:a0:ce:95:0e:b1:66:1d:
5c:42:65:0e:17:10:6b:c8:d1:45:f3:0e:19:ad:c5:
83:58:b6:52:5a:f5:77:31:84:72:21:0c:58:df:2c:
1c:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:71:52:6F:DE:C5:4F:71:13:05:97:20:D5:4B:48:03:92:8A:CD:A8
X509v3 Authority Key Identifier:
keyid:EB:38:9F:B3:39:B3:90:8D:54:9A:65:39:0C:92:E1:5F:9D:F7:C5:4B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9149F3E/AC52B7481D8211E2BC6417D708B02CD2/6zifszmzkI1UmmU5DJLhX533xUs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6zifszmzkI1UmmU5DJLhX533xUs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9149F3E/AC52B7481D8211E2BC6417D708B02CD2/5E035B480E8C11F0AD0C273AC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
101.79.0.0/22
101.79.72.0/22
101.79.136.0/23
101.79.240.0-101.79.251.255
101.79.254.0/23
110.4.104.0/22
180.210.60.0/22
182.252.140.0/22
182.252.176.0/21
210.4.220.0/22
211.172.228.0-211.172.235.255
211.236.160.0/22
211.236.168.0/21
211.236.180.0-211.236.191.255
Signature Algorithm: sha256WithRSAEncryption
9f:94:7f:89:d8:d1:4e:39:5e:4f:b4:cc:7f:71:b9:3c:20:41:
d7:18:db:9e:cc:09:4c:7b:2a:9a:5e:47:4c:dd:85:99:f4:c4:
9b:d2:0f:50:ba:bd:65:e7:7e:15:ed:c7:7f:00:e2:e5:08:21:
cb:ba:11:14:11:9a:f5:07:2c:2f:06:6d:cc:8d:19:47:e4:b8:
c3:54:9e:c5:ce:26:46:6c:46:19:e1:9a:cd:57:9a:94:34:6d:
37:f7:35:a4:bf:98:ee:f8:74:e0:4e:44:61:f4:db:56:72:fa:
c5:f6:fb:94:c4:52:61:3b:09:78:c1:6a:02:d9:df:44:75:2a:
19:e9:22:55:c2:6c:7f:8a:59:e3:e2:c3:46:17:7a:4d:aa:89:
9c:cb:f8:a1:10:f7:ad:a2:76:37:db:ad:1b:75:a9:cc:75:7f:
34:0d:7e:42:ad:74:c6:f3:86:73:96:cb:c5:ac:33:04:9a:2e:
05:23:19:27:06:2f:72:4c:2b:9f:7d:db:92:5f:50:66:43:4a:
64:dd:19:0d:f8:65:10:10:99:7f:aa:3b:c7:0d:9d:ee:49:f0:
fb:10:4d:ac:41:ed:94:86:52:6b:f9:49:16:4a:bf:7e:63:bb:
51:5f:ca:32:0b:f2:a6:30:9b:cb:4b:e0:6a:e0:6e:45:bf:3b:
77:81:e8:f9
-----BEGIN CERTIFICATE-----
MIIF2DCCBMCgAwIBAgICN2UwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NDlGM0UxMTAvBgNVBAUTKEVCMzg5RkIzMzlCMzkwOEQ1NDlBNjUzOTBDOTJFMTVG
OURGN0M1NEIwHhcNMjUwNDAzMDAzOTI3WhcNMjUwODMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02N2VkZDhiZi1jYzFiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAsjiGVlIG/zeYFACZF1nrM6bfa/eEALw/Fp1gH/ulf/MTG6EYLlKXEHeyggWD
aGwEg8264xAIK6JTWNIEqLiCLVZMISjUzR6ISX9qFucqWhcej1Bw3qWEXK6ipwND
3uYLvBqqHLSem82mqvSaXhSdUV/0yODF/42tMM+Z6V9NsR2S+W3VQwz4IXZIWGQ0
/FD2UVLl/viFuoa4zfEXnivVgYaBHg8VQyss3BAMzyO5u5iWTF5CqbRhbKJII1jd
GjBoEfRboq445sqKSkm4kqoNOK0dUoQOKqFJX6DOlQ6xZh1cQmUOFxBryNFF8w4Z
rcWDWLZSWvV3MYRyIQxY3ywczwIDAQABo4IC/DCCAvgwHQYDVR0OBBYEFE1xUm/e
xU9xEwWXINVLSAOSis2oMB8GA1UdIwQYMBaAFOs4n7M5s5CNVJplOQyS4V+d98VL
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0OUYzRS9BQzUyQjc0ODFE
ODIxMUUyQkM2NDE3RDcwOEIwMkNEMi82emlmc3ptemtJMVVtbVU1REpMaFg1MzN4
VXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzZ6aWZzem16a0kxVW1tVTVESkxoWDUzM3hVcy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
NDlGM0UvQUM1MkI3NDgxRDgyMTFFMkJDNjQxN0Q3MDhCMDJDRDIvNUUwMzVCNDgw
RThDMTFGMEFEMEMyNzNBQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwgYUGCCsGAQUFBwEHAQH/
BHYwdDByBAIAATBsAwQCZU8AAwQCZU9IAwQBZU+IMAwDBARlT/ADBAJlT/gDBAFl
T/4DBAJuBGgDBAK00jwDBAK2/IwDBAO2/LADBALSBNwwDAMEAtOs5AMEAtOs6AME
AtPsoAMEA9PsqDAMAwQC0+y0AwQG0+yAMA0GCSqGSIb3DQEBCwUAA4IBAQCflH+J
2NFOOV5PtMx/cbk8IEHXGNuezAlMeyqaXkdM3YWZ9MSb0g9Qur1l534V7cd/AOLl
CCHLuhEUEZr1BywvBm3MjRlH5LjDVJ7FziZGbEYZ4ZrNV5qUNG039zWkv5ju+HTg
TkRh9NtWcvrF9vuUxFJhOwl4wWoC2d9EdSoZ6SJVwmx/ilnj4sNGF3pNqomcy/ih
EPetonY3260bdanMdX80DX5CrXTG84ZzlsvFrDMEmi4FIxknBi9yTCuffduSX1Bm
Q0pk3RkN+GUQEJl/qjvHDZ3uSfD7EE2sQe2UhlJr+UkWSr9+Y7tRX8oyC/KmMJvL
S+Bq4G5Fvzt3gej5
-----END CERTIFICATE-----
Generated at Thu Apr 24 15:52:12 2025 by rpki-client on console.sobornost.net