Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/1FFFFA8608AB11F096EC666FC4F9AE02.roa
File: 1FFFFA8608AB11F096EC666FC4F9AE02.roa (raw, json)
Hash identifier: /xujNokyZdOD/1Yhyoq/paFwfBJGzUQYpPzFD0gQTPU=
Subject key identifier: EE:BF:A1:9C:0F:E9:9E:84:34:95:C3:89:16:55:2A:49:03:53:0C:77
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: AE07
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/1FFFFA8608AB11F096EC666FC4F9AE02.roa
Signing time: Tue 08 Apr 2025 12:09:12 +0000
ROA not before: Tue 08 Apr 2025 12:09:12 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 133296
IP address blocks: 43.239.110.0/24 maxlen: 24
43.243.76.0/24 maxlen: 24
43.243.77.0/24 maxlen: 24
43.243.78.0/24 maxlen: 24
103.78.245.0/24 maxlen: 24
103.78.247.0/24 maxlen: 24
103.131.24.0/23 maxlen: 24
103.182.176.0/23 maxlen: 24
103.228.149.0/24 maxlen: 24
103.233.24.0/23 maxlen: 24
103.251.22.0/24 maxlen: 24
150.129.235.0/24 maxlen: 24
202.162.231.0/24 maxlen: 24
202.162.249.0/24 maxlen: 24
203.115.82.0/23 maxlen: 24
210.89.32.0/24 maxlen: 24
210.89.49.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 02 May 2025 19:52:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 44551 (0xae07)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Validity
Not Before: Apr 8 12:09:12 2025 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=67f511e8-27ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:5a:b1:79:1c:36:6a:c6:f0:ba:4c:c4:55:0c:
63:a6:5e:c9:81:57:4f:2a:1e:ac:84:6f:49:79:ab:
fb:19:37:81:a8:86:39:ea:c3:e6:72:fc:94:8f:a4:
36:08:dd:c7:bf:3d:ba:95:6f:b2:12:06:ec:1d:9f:
7a:78:a9:a7:16:2f:9e:1d:c1:fd:a6:cd:36:c0:5c:
8d:1b:0e:0c:04:2e:70:3c:3f:55:ed:81:bb:0c:1d:
4b:e8:df:dd:c9:d9:8a:d5:2e:b5:c8:87:06:f3:0f:
01:52:6d:3e:84:c1:5a:1c:cf:46:c0:22:ae:b8:e0:
97:ad:5f:fa:1f:fa:7a:13:cd:d0:5f:2a:20:d0:89:
ea:8e:5c:3b:a5:e5:29:b9:49:0c:70:30:5a:1b:24:
6f:3c:d8:1c:7a:f3:83:15:3f:1c:46:06:b9:55:55:
3d:98:1d:56:1c:a7:c9:c0:ea:b0:eb:fb:48:6f:cb:
15:14:60:e1:b2:4d:1e:1d:7a:26:bc:cf:b8:10:35:
cb:cd:1f:c1:17:d5:00:cd:3e:b6:65:21:de:f8:15:
40:f8:51:41:e7:89:d2:44:7d:54:73:b5:d9:00:01:
a4:dc:b8:6f:1b:66:f3:61:cb:f2:80:45:fc:9f:ee:
be:09:75:d1:e6:08:6a:b6:3a:79:7d:ef:64:2f:89:
6b:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:BF:A1:9C:0F:E9:9E:84:34:95:C3:89:16:55:2A:49:03:53:0C:77
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/1FFFFA8608AB11F096EC666FC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
43.239.110.0/24
43.243.76.0-43.243.78.255
103.78.245.0/24
103.78.247.0/24
103.131.24.0/23
103.182.176.0/23
103.228.149.0/24
103.233.24.0/23
103.251.22.0/24
150.129.235.0/24
202.162.231.0/24
202.162.249.0/24
203.115.82.0/23
210.89.32.0/24
210.89.49.0/24
Signature Algorithm: sha256WithRSAEncryption
5a:fd:89:18:65:77:db:d3:d9:0e:33:98:ab:38:f4:ee:9b:38:
fd:09:40:3e:ed:c2:c2:4d:7e:44:06:49:94:eb:4e:2e:8d:e3:
bc:8d:30:a5:13:67:eb:11:92:03:d6:73:fe:12:14:14:f8:96:
99:bd:c6:d9:ac:c6:f4:f3:7c:fa:3e:22:0a:6b:98:09:ce:3d:
b4:3e:9d:3f:96:ac:ad:aa:87:99:21:63:ec:95:69:40:d1:49:
2f:43:44:ba:34:11:90:e8:60:68:14:a3:a2:e6:f0:f2:c6:31:
af:59:53:b1:5c:df:dd:71:d7:c7:8c:10:e4:4e:4a:8b:3b:9e:
64:a2:73:8c:f8:73:ac:4d:03:6c:ab:6f:b8:47:83:2e:82:83:
d7:75:c1:c4:40:dd:82:a7:9f:df:41:fd:cd:a8:87:aa:f1:21:
2f:3a:1f:0b:40:ed:15:0d:f2:9b:45:f5:b6:47:21:4e:47:ab:
05:ec:e8:df:44:c8:78:53:38:d8:2f:75:26:8b:ad:01:75:c7:
43:4e:99:c4:1c:eb:c8:e2:80:ad:81:46:03:ac:59:2d:62:c0:
15:1f:28:7d:5b:bf:63:18:a9:a5:9e:b1:82:fa:9c:a3:c4:7d:
68:36:83:db:6e:d0:be:0e:a0:40:e5:7c:bf:fd:37:71:62:a6:
cd:a7:ff:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 06:21:50 2025 by rpki-client on console.sobornost.net