Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C1323/084D88D495B711EABB824F1BC4F9AE02/A365FCD0FC7C11EF9988DB39C4F9AE02.roa
File: A365FCD0FC7C11EF9988DB39C4F9AE02.roa (raw, json)
Hash identifier: qZbpYm5uLqvjMYZyoa4sKd5QyiSxfrxHUTOJvwQsdFs=
Subject key identifier: 9D:5B:CD:D2:B1:19:9A:E7:6B:9E:E7:3F:04:DA:9C:6D:C6:79:FF:D8
Certificate issuer: /CN=A91C1323/serialNumber=412A6511CFEDCFECB5590C96C8C361E2FED44857
Certificate serial: 600F
Authority key identifier: 41:2A:65:11:CF:ED:CF:EC:B5:59:0C:96:C8:C3:61:E2:FE:D4:48:57
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QSplEc_tz-y1WQyWyMNh4v7USFc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C1323/084D88D495B711EABB824F1BC4F9AE02/A365FCD0FC7C11EF9988DB39C4F9AE02.roa
Signing time: Fri 25 Apr 2025 20:12:08 +0000
ROA not before: Fri 25 Apr 2025 20:12:08 +0000
ROA not after: Wed 30 Jul 2025 00:00:00 +0000
asID: 10032
IP address blocks: 203.184.128.0/24 maxlen: 24
203.184.129.0/24 maxlen: 24
203.184.204.0/22 maxlen: 22
203.184.204.0/23 maxlen: 23
203.184.204.0/24 maxlen: 24
203.184.205.0/24 maxlen: 24
203.184.206.0/23 maxlen: 23
203.184.206.0/24 maxlen: 24
203.184.207.0/24 maxlen: 24
203.184.208.0/22 maxlen: 22
203.184.208.0/23 maxlen: 23
203.184.208.0/24 maxlen: 24
203.184.209.0/24 maxlen: 24
203.184.210.0/23 maxlen: 23
203.184.210.0/24 maxlen: 24
203.184.211.0/24 maxlen: 24
210.0.234.0/24 maxlen: 24
210.0.235.0/24 maxlen: 24
210.3.22.0/24 maxlen: 24
210.3.27.0/24 maxlen: 24
210.3.47.0/24 maxlen: 24
218.189.64.0/24 maxlen: 24
218.189.65.0/24 maxlen: 24
218.189.66.0/24 maxlen: 24
218.189.67.0/24 maxlen: 24
218.189.68.0/24 maxlen: 24
218.189.69.0/24 maxlen: 24
218.189.70.0/24 maxlen: 24
218.189.71.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C1323/084D88D495B711EABB824F1BC4F9AE02/QSplEc_tz-y1WQyWyMNh4v7USFc.crl
rsync://rpki.apnic.net/member_repository/A91C1323/084D88D495B711EABB824F1BC4F9AE02/QSplEc_tz-y1WQyWyMNh4v7USFc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QSplEc_tz-y1WQyWyMNh4v7USFc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 02 May 2025 19:52:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 24591 (0x600f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C1323, serialNumber=412A6511CFEDCFECB5590C96C8C361E2FED44857
Validity
Not Before: Apr 25 20:12:08 2025 GMT
Not After : Jul 30 00:00:00 2025 GMT
Subject: CN=680bec97-1603
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:a4:ff:6d:01:58:da:28:19:fa:49:84:46:70:
9b:1d:08:5d:a6:b3:fe:5b:2a:3b:8c:51:87:38:76:
0f:66:30:f3:90:34:7c:8f:7e:50:a2:bd:da:81:3e:
75:c1:13:da:9b:ce:eb:7a:b1:b2:4f:7d:50:ae:6f:
6c:cc:e3:28:ca:a1:b2:dc:d6:ba:fe:06:37:4c:72:
f9:e6:f0:7a:42:de:c3:80:b0:d4:13:50:b8:eb:37:
06:21:94:3a:d6:f5:b4:f4:ca:45:a1:f1:a6:3b:a6:
1f:1e:2a:fa:4b:16:06:c4:3d:7c:c6:6d:0e:05:90:
59:b2:e0:42:92:d0:e2:29:8c:00:c7:0d:17:49:72:
37:70:8a:11:25:85:60:67:da:34:49:44:57:1e:ac:
b3:ff:0f:cc:50:f7:a6:47:85:1e:cb:60:bc:64:49:
02:34:b4:2b:12:e1:86:4c:41:03:3c:e5:ee:c2:7b:
26:c6:56:60:6c:38:57:36:e6:a2:45:45:01:b0:5a:
cb:f8:3b:62:df:e9:82:af:d4:22:0d:e0:87:37:71:
07:e6:3a:20:0a:a7:c9:86:ca:c6:93:14:41:68:b9:
bc:d2:9a:22:85:2f:66:d9:17:f0:ab:d7:fa:c8:a3:
ed:0f:38:d1:9b:b3:70:91:fa:74:7b:7a:d4:0e:85:
0e:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:5B:CD:D2:B1:19:9A:E7:6B:9E:E7:3F:04:DA:9C:6D:C6:79:FF:D8
X509v3 Authority Key Identifier:
keyid:41:2A:65:11:CF:ED:CF:EC:B5:59:0C:96:C8:C3:61:E2:FE:D4:48:57
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C1323/084D88D495B711EABB824F1BC4F9AE02/QSplEc_tz-y1WQyWyMNh4v7USFc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QSplEc_tz-y1WQyWyMNh4v7USFc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C1323/084D88D495B711EABB824F1BC4F9AE02/A365FCD0FC7C11EF9988DB39C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
203.184.128.0/23
203.184.204.0-203.184.211.255
210.0.234.0/23
210.3.22.0/24
210.3.27.0/24
210.3.47.0/24
218.189.64.0/21
Signature Algorithm: sha256WithRSAEncryption
90:86:97:3b:dc:40:9c:39:af:0e:6f:43:09:3b:2a:63:85:a8:
c1:6f:d4:e4:33:dd:e5:c9:65:7d:b1:1f:ef:e8:32:24:37:76:
83:5b:67:37:1a:6f:02:5b:43:5b:0a:b5:7c:c9:c7:e2:e8:d9:
7d:9c:0a:5d:13:cf:2a:e8:22:ab:e1:2c:d2:48:f0:a2:c2:48:
b4:04:ef:05:c4:7c:e4:99:ce:77:6d:d4:fe:1b:6a:b9:0d:2a:
56:76:07:04:39:bf:b7:aa:9c:93:d4:c8:1f:3c:be:9b:91:0b:
2a:9b:c1:f8:10:78:2c:60:06:40:d1:3a:c4:90:9d:5d:2c:b9:
16:89:3a:90:89:7d:22:cd:39:cb:ec:eb:a3:84:26:87:ad:03:
0d:aa:64:2f:fd:08:7f:d5:df:61:c4:8c:eb:69:8c:27:1a:01:
27:2b:cd:a7:10:10:bc:05:31:88:9a:d0:a7:74:c5:0f:62:ec:
aa:ed:35:60:e7:9f:ad:f5:27:6a:7f:a6:e6:99:ff:68:c4:13:
56:a2:3e:56:39:21:0b:32:e9:7c:38:ea:7c:e3:fa:a1:ad:c4:
34:fb:73:0d:eb:71:ac:39:2c:9c:0a:66:91:5c:a4:d3:2a:56:
eb:f5:2f:1d:8f:41:40:50:d9:ba:53:72:40:c3:87:6d:04:36:
0b:5a:db:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 06:22:29 2025 by rpki-client on console.sobornost.net