Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9179F22/CF9BF5FE8F2F11EE9CBFD961C4F9AE02/4120F6A28F3011EEA61ACF62C4F9AE02.roa
File: 4120F6A28F3011EEA61ACF62C4F9AE02.roa (raw, json)
Hash identifier: OCepXKtPM8Ugq1ZnTOeqLJrMwE6SWX8J/dtz+Y3O35w=
Subject key identifier: F3:FC:CF:C0:EA:0A:CF:0F:09:9D:AD:FD:3A:AB:AC:56:70:03:5E:1C
Certificate issuer: /CN=A9179F22/serialNumber=FCF753D346AAAB95AB14C6267515CDF13F80FBBB
Certificate serial: FD
Authority key identifier: FC:F7:53:D3:46:AA:AB:95:AB:14:C6:26:75:15:CD:F1:3F:80:FB:BB
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_PdT00aqq5WrFMYmdRXN8T-A-7s.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9179F22/CF9BF5FE8F2F11EE9CBFD961C4F9AE02/4120F6A28F3011EEA61ACF62C4F9AE02.roa
Signing time: Thu 27 Feb 2025 06:29:48 +0000
ROA not before: Thu 27 Feb 2025 06:29:48 +0000
ROA not after: Fri 01 May 2026 00:00:00 +0000
asID: 14618
IP address blocks: 103.150.252.0/24 maxlen: 24
2400:a4a0:1::/48 maxlen: 48
2400:a4a0:30::/48 maxlen: 48
2400:a4a0:40::/48 maxlen: 48
2400:a4a0:41::/48 maxlen: 48
2400:a4a0:42::/48 maxlen: 48
2400:a4a0:90::/48 maxlen: 48
2400:a4a0:100::/48 maxlen: 48
2400:a4a0:101::/48 maxlen: 48
2400:a4a0:115::/48 maxlen: 48
2400:a4a0:a100::/48 maxlen: 48
2400:a4a0:aaa2::/48 maxlen: 48
2400:a4a0:aaa3::/48 maxlen: 48
2400:a4a0:aaa4::/48 maxlen: 48
2400:a4a0:aaa5::/48 maxlen: 48
2400:a4a0:b100::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9179F22/CF9BF5FE8F2F11EE9CBFD961C4F9AE02/_PdT00aqq5WrFMYmdRXN8T-A-7s.crl
rsync://rpki.apnic.net/member_repository/A9179F22/CF9BF5FE8F2F11EE9CBFD961C4F9AE02/_PdT00aqq5WrFMYmdRXN8T-A-7s.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_PdT00aqq5WrFMYmdRXN8T-A-7s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 30 Apr 2025 04:09:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 253 (0xfd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9179F22, serialNumber=FCF753D346AAAB95AB14C6267515CDF13F80FBBB
Validity
Not Before: Feb 27 06:29:48 2025 GMT
Not After : May 1 00:00:00 2026 GMT
Subject: CN=67c0065b-f126
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:a3:40:31:e0:23:28:1b:2c:76:f4:d5:be:a5:
95:ce:c7:14:47:28:f1:95:fb:e8:07:2b:ad:7b:0d:
ea:56:70:cd:75:56:83:95:f3:44:76:6a:19:fa:d4:
be:6c:ce:c1:cc:ca:90:5e:aa:a6:ae:43:e3:1e:a2:
c8:44:e4:84:dc:22:cf:23:50:58:f6:48:64:76:27:
2e:b9:45:6d:99:84:d1:38:4a:81:06:46:19:7a:a9:
bf:c4:af:db:60:8e:c2:2f:0e:13:fa:12:86:1e:28:
40:5d:47:3e:f2:9f:1f:13:50:43:c1:22:21:b3:e9:
af:2f:87:4c:28:e2:93:99:5b:16:49:fb:de:68:03:
52:ba:72:47:c0:9e:ee:38:69:d6:ba:a6:17:5f:06:
1c:55:10:4a:a9:f3:a8:26:7e:80:71:fb:38:1e:d8:
f3:5e:81:b3:f1:92:48:cb:20:d1:e7:35:56:c4:0f:
80:19:a0:e8:41:bc:e5:56:57:76:ef:ab:fb:94:fe:
7b:62:cd:1d:c5:d1:15:ff:be:b9:db:46:81:5c:39:
c5:38:53:1b:bf:32:7e:2a:6e:de:1e:e0:87:68:88:
ba:bd:ba:03:e5:c4:87:ab:18:cf:60:54:b3:aa:6f:
9a:a1:51:42:81:f4:81:3c:a4:37:bf:e5:71:00:f9:
a3:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:FC:CF:C0:EA:0A:CF:0F:09:9D:AD:FD:3A:AB:AC:56:70:03:5E:1C
X509v3 Authority Key Identifier:
keyid:FC:F7:53:D3:46:AA:AB:95:AB:14:C6:26:75:15:CD:F1:3F:80:FB:BB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9179F22/CF9BF5FE8F2F11EE9CBFD961C4F9AE02/_PdT00aqq5WrFMYmdRXN8T-A-7s.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_PdT00aqq5WrFMYmdRXN8T-A-7s.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9179F22/CF9BF5FE8F2F11EE9CBFD961C4F9AE02/4120F6A28F3011EEA61ACF62C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.150.252.0/24
IPv6:
2400:a4a0:1::/48
2400:a4a0:30::/48
2400:a4a0:40::-2400:a4a0:42:ffff:ffff:ffff:ffff:ffff
2400:a4a0:90::/48
2400:a4a0:100::/47
2400:a4a0:115::/48
2400:a4a0:a100::/48
2400:a4a0:aaa2::-2400:a4a0:aaa5:ffff:ffff:ffff:ffff:ffff
2400:a4a0:b100::/48
Signature Algorithm: sha256WithRSAEncryption
93:53:0d:da:12:d6:fd:8e:42:2c:ea:ee:5d:89:5f:95:82:79:
7d:08:58:30:ea:f4:6b:16:61:6e:db:59:eb:30:48:e0:bc:a8:
e5:08:ed:09:5a:c7:81:05:77:7f:a1:eb:6a:35:b6:c8:a6:eb:
18:b4:99:a5:55:0b:16:ee:5e:48:25:e7:b9:7b:e9:3e:a2:e6:
85:e2:c3:06:5a:6a:45:c4:57:84:b1:37:fa:b6:64:a7:83:80:
65:ed:7f:d3:3d:89:92:79:0e:70:18:85:34:5e:74:97:68:6c:
fa:10:6f:db:ce:a0:97:ae:a9:88:89:60:e5:f6:1a:ba:ea:33:
f1:70:7e:20:af:2f:33:38:83:17:43:54:9f:b3:e4:ff:e3:67:
fd:0a:3a:87:41:cc:d6:81:c3:04:33:9f:d8:8e:72:16:c0:14:
e2:2e:aa:ec:0b:93:ef:19:65:88:aa:03:54:77:1c:eb:ea:96:
5c:12:a7:ed:4c:d7:23:05:42:4e:59:1e:c0:2a:54:c2:f6:80:
bf:86:9b:9c:1d:01:e8:28:dd:cc:49:21:05:dc:33:bd:93:95:
0e:3a:7b:e2:73:7d:11:0e:c1:be:7f:64:43:ec:2f:9f:89:7d:
ca:f8:db:20:3a:fe:a1:da:1f:32:86:37:e6:b4:73:a0:cc:97:
c2:88:d9:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 23 06:35:45 2025 by rpki-client on console.sobornost.net