Route Origin Authorization
$ rpki-client -vvf rpki.apernet.io/repo/APERNET/1/3130332e3135322e33352e302f32342d3234203d3e203338303038.roa
File: 3130332e3135322e33352e302f32342d3234203d3e203338303038.roa (raw, json)
Hash identifier: 4OKNzXQZaQBFPJeT8CDvUSfceSgDf/4rXnVpojNI/K8=
Subject key identifier: 08:6B:7E:0A:97:41:7F:F6:DF:EE:B9:90:E0:D6:2A:FD:4C:66:40:60
Certificate issuer: /CN=FCB1805FA7AE22D565E0A502D08D37EB2BD837A7
Certificate serial: 02A3147DAA0350004F1D6A125973CE544C601025
Authority key identifier: FC:B1:80:5F:A7:AE:22:D5:65:E0:A5:02:D0:8D:37:EB:2B:D8:37:A7
Authority info access: rsync://sakuya.nat.moe/repo/NATOCA/1/FCB1805FA7AE22D565E0A502D08D37EB2BD837A7.cer
Subject info access: rsync://rpki.apernet.io/repo/APERNET/1/3130332e3135322e33352e302f32342d3234203d3e203338303038.roa
Signing time: Tue 13 Jun 2023 01:00:00 +0000
ROA not before: Tue 13 Jun 2023 00:55:00 +0000
ROA not after: Thu 13 Jun 2024 01:00:00 +0000
asID: 38008
IP address blocks: 103.152.35.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apernet.io/repo/APERNET/1/FCB1805FA7AE22D565E0A502D08D37EB2BD837A7.crl
rsync://rpki.apernet.io/repo/APERNET/1/FCB1805FA7AE22D565E0A502D08D37EB2BD837A7.mft
rsync://sakuya.nat.moe/repo/NATOCA/1/FCB1805FA7AE22D565E0A502D08D37EB2BD837A7.cer
rsync://sakuya.nat.moe/repo/NATOCA/1/5A179648B3EF2369DCE7BDB58140FF7DC7060ABF.crl
rsync://sakuya.nat.moe/repo/NATOCA/1/5A179648B3EF2369DCE7BDB58140FF7DC7060ABF.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WheWSLPvI2nc5721gUD_fccGCr8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 25 Apr 2024 09:54:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
02:a3:14:7d:aa:03:50:00:4f:1d:6a:12:59:73:ce:54:4c:60:10:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=FCB1805FA7AE22D565E0A502D08D37EB2BD837A7
Validity
Not Before: Jun 13 00:55:00 2023 GMT
Not After : Jun 13 01:00:00 2024 GMT
Subject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
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:0f:6f:f6:bd:aa:c3:cc:32:99:58:f6:d6:4d:
f5:41:ed:8d:a0:58:cc:c5:59:e6:91:f6:8c:f5:6e:
bc:58:be:4f:05:c1:6d:74:a3:88:f7:48:cb:f3:65:
6b:6f:6b:78:8c:74:e7:01:00:b5:21:3a:b8:e1:42:
5d:53:de:14:e0:6b:91:73:dd:47:c4:3f:b7:03:5b:
2d:32:c5:91:0a:25:fe:c8:c2:a9:21:51:73:14:1c:
6e:f8:fe:9b:42:d3:d5:83:93:a0:8a:13:77:21:b3:
fc:91:46:0b:a9:8f:aa:55:5e:06:22:7c:46:af:d0:
78:89:4b:f1:02:06:56:84:5d:15:e2:53:25:12:8c:
16:08:f7:14:eb:6e:77:5b:91:cd:c8:80:c4:19:86:
97:c1:2b:51:24:10:ac:bc:ee:44:de:bd:16:48:cd:
4c:56:b0:ad:e9:db:0d:e0:e3:49:47:97:3e:d1:fb:
b5:7c:a4:50:e3:a6:51:50:fa:dc:a4:b9:ca:78:0b:
16:58:c4:42:f8:0a:16:76:0e:5e:46:ed:1b:ec:34:
6e:7d:b2:ad:2e:7c:f2:48:8a:37:3a:e7:82:db:54:
af:27:02:8a:89:d3:94:3f:59:dc:00:d7:d6:33:50:
46:ba:cd:d1:3e:85:d8:85:88:d1:a5:da:b4:98:0d:
e5:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:6B:7E:0A:97:41:7F:F6:DF:EE:B9:90:E0:D6:2A:FD:4C:66:40:60
X509v3 Authority Key Identifier:
keyid:FC:B1:80:5F:A7:AE:22:D5:65:E0:A5:02:D0:8D:37:EB:2B:D8:37:A7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apernet.io/repo/APERNET/1/FCB1805FA7AE22D565E0A502D08D37EB2BD837A7.crl
Authority Information Access:
CA Issuers - URI:rsync://sakuya.nat.moe/repo/NATOCA/1/FCB1805FA7AE22D565E0A502D08D37EB2BD837A7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.apernet.io/repo/APERNET/1/3130332e3135322e33352e302f32342d3234203d3e203338303038.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.152.35.0/24
Signature Algorithm: sha256WithRSAEncryption
56:66:7f:e4:4b:d7:32:7b:a8:e9:b4:5d:4a:b1:2f:2a:72:61:
21:31:8c:fa:df:7c:d0:83:30:a5:2a:08:22:37:2b:b8:8d:1b:
e5:e7:7a:7c:99:0a:cb:5b:f1:a1:62:5e:ed:cb:71:1d:19:f5:
19:03:72:b7:bc:c3:48:05:5d:1a:18:3e:4b:fa:35:33:aa:73:
a1:e2:4c:09:57:6c:28:d5:33:d2:70:fa:d2:04:65:e7:8a:c0:
80:7e:4a:41:84:ec:8b:70:9c:a1:c4:f3:22:a5:90:6b:0b:63:
71:82:f5:54:32:ae:65:9d:d9:72:82:67:0d:54:6d:31:0f:23:
0d:0f:a8:3e:94:13:f6:3f:a1:4d:a3:ab:b2:b6:e3:cf:aa:c3:
09:cd:2c:8d:7b:e9:54:d1:38:94:d3:67:e7:e8:b8:a3:81:f3:
a6:c9:5a:4a:0a:ce:58:a3:64:eb:20:e4:ab:8f:77:13:07:48:
3a:a4:ee:38:31:81:75:4b:52:b0:7c:db:13:a7:6a:a9:29:d7:
63:5e:8f:32:bc:58:2c:0c:0d:49:35:32:95:69:29:6b:56:66:
c6:6d:bc:96:90:90:0a:79:68:eb:1b:f6:e6:02:8b:56:25:49:
14:73:8b:86:15:f7:32:c6:bc:3a:ce:f5:f8:6d:a3:bc:da:22:
f1:c2:86:d9
-----BEGIN CERTIFICATE-----
MIIG1TCCBb2gAwIBAgIUAqMUfaoDUABPHWoSWXPOVExgECUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRkNCMTgwNUZBN0FFMjJENTY1RTBBNTAyRDA4RDM3RUIy
QkQ4MzdBNzAeFw0yMzA2MTMwMDU1MDBaFw0yNDA2MTMwMTAwMDBaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwQ0EwRjZGRjZCREFBQzNDQzMy
OTk1OEY2RDY0REY1NDFFRDhEQTA1OENDQzU1OUU2OTFGNjhDRjU2RUJDNThCRTRG
MDVDMTZENzRBMzg4Rjc0OENCRjM2NTZCNkY2Qjc4OEM3NEU3MDEwMEI1MjEzQUI4
RTE0MjVENTNERTE0RTA2QjkxNzNERDQ3QzQzRkI3MDM1QjJEMzJDNTkxMEEyNUZF
QzhDMkE5MjE1MTczMTQxQzZFRjhGRTlCNDJEM0Q1ODM5M0EwOEExMzc3MjFCM0ZD
OTE0NjBCQTk4RkFBNTU1RTA2MjI3QzQ2QUZEMDc4ODk0QkYxMDIwNjU2ODQ1RDE1
RTI1MzI1MTI4QzE2MDhGNzE0RUI2RTc3NUI5MUNEQzg4MEM0MTk4Njk3QzEyQjUx
MjQxMEFDQkNFRTQ0REVCRDE2NDhDRDRDNTZCMEFERTlEQjBERTBFMzQ5NDc5NzNF
RDFGQkI1N0NBNDUwRTNBNjUxNTBGQURDQTRCOUNBNzgwQjE2NThDNDQyRjgwQTE2
NzYwRTVFNDZFRDFCRUMzNDZFN0RCMkFEMkU3Q0YyNDg4QTM3M0FFNzgyREI1NEFG
MjcwMjhBODlEMzk0M0Y1OURDMDBEN0Q2MzM1MDQ2QkFDREQxM0U4NUQ4ODU4OEQx
QTVEQUI0OTgwREU1M0YwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEAyg9v9r2qw8wymVj21k31Qe2NoFjMxVnmkfaM9W68WL5PBcFtdKOI
90jL82Vrb2t4jHTnAQC1ITq44UJdU94U4GuRc91HxD+3A1stMsWRCiX+yMKpIVFz
FBxu+P6bQtPVg5OgihN3IbP8kUYLqY+qVV4GInxGr9B4iUvxAgZWhF0V4lMlEowW
CPcU6253W5HNyIDEGYaXwStRJBCsvO5E3r0WSM1MVrCt6dsN4ONJR5c+0fu1fKRQ
46ZRUPrcpLnKeAsWWMRC+AoWdg5eRu0b7DRufbKtLnzySIo3OueC21SvJwKKidOU
P1ncANfWM1BGus3RPoXYhYjRpdq0mA3lPwIDAQABo4IB4zCCAd8wHQYDVR0OBBYE
FAhrfgqXQX/23+65kODWKv1MZkBgMB8GA1UdIwQYMBaAFPyxgF+nriLVZeClAtCN
N+sr2DenMA4GA1UdDwEB/wQEAwIHgDBkBgNVHR8EXTBbMFmgV6BVhlNyc3luYzov
L3Jwa2kuYXBlcm5ldC5pby9yZXBvL0FQRVJORVQvMS9GQ0IxODA1RkE3QUUyMkQ1
NjVFMEE1MDJEMDhEMzdFQjJCRDgzN0E3LmNybDBtBggrBgEFBQcBAQRhMF8wXQYI
KwYBBQUHMAKGUXJzeW5jOi8vc2FrdXlhLm5hdC5tb2UvcmVwby9OQVRPQ0EvMS9G
Q0IxODA1RkE3QUUyMkQ1NjVFMEE1MDJEMDhEMzdFQjJCRDgzN0E3LmNlcjB9Bggr
BgEFBQcBCwRxMG8wbQYIKwYBBQUHMAuGYXJzeW5jOi8vcnBraS5hcGVybmV0Lmlv
L3JlcG8vQVBFUk5FVC8xLzMxMzAzMzJlMzEzNTMyMmUzMzM1MmUzMDJmMzIzNDJk
MzIzNDIwM2QzZTIwMzMzODMwMzAzOC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEF
BQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAGeYIzANBgkqhkiG9w0B
AQsFAAOCAQEAVmZ/5EvXMnuo6bRdSrEvKnJhITGM+t980IMwpSoIIjcruI0b5ed6
fJkKy1vxoWJe7ctxHRn1GQNyt7zDSAVdGhg+S/o1M6pzoeJMCVdsKNUz0nD60gRl
54rAgH5KQYTsi3CcocTzIqWQawtjcYL1VDKuZZ3ZcoJnDVRtMQ8jDQ+oPpQT9j+h
TaOrsrbjz6rDCc0sjXvpVNE4lNNn5+i4o4HzpslaSgrOWKNk6yDkq493EwdIOqTu
ODGBdUtSsHzbE6dqqSnXY16PMrxYLAwNSTUylWkpa1Zmxm28lpCQCnlo6xv25gKL
ViVJFHOLhhX3Msa8Os71+G2jvNoi8cKG2Q==
-----END CERTIFICATE-----
Generated at Wed Apr 24 18:35:50 2024 by rpki-client on console-ams.rpki-client.org