Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A911ABDD/3AE004B4D77811E4B3778B72C4F9AE02/4FA6792A8F6711E6A509C92DC4F9AE02.roa
File: 4FA6792A8F6711E6A509C92DC4F9AE02.roa (raw, json)
Hash identifier: TJ743hynCmYlHuXkzPEd5ytiQ21JU2qqiMF05u3xD5w=
Subject key identifier: AA:BF:EA:97:CA:FB:99:18:71:23:41:A7:9B:83:4C:53:15:14:51:7D
Certificate issuer: /CN=A911ABDD/serialNumber=4287B3332176DB486A2CBC425402FA9C86B6DC48
Certificate serial: 1D01
Authority key identifier: 42:87:B3:33:21:76:DB:48:6A:2C:BC:42:54:02:FA:9C:86:B6:DC:48
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QoezMyF220hqLLxCVAL6nIa23Eg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911ABDD/3AE004B4D77811E4B3778B72C4F9AE02/4FA6792A8F6711E6A509C92DC4F9AE02.roa
Signing time: Thu 21 Dec 2023 08:42:59 +0000
ROA not before: Thu 21 Dec 2023 08:42:59 +0000
ROA not after: Thu 31 Oct 2024 00:00:00 +0000
asID: 45223
IP address blocks: 180.128.0.0/16 maxlen: 16
180.128.0.0/17 maxlen: 17
180.128.0.0/23 maxlen: 23
180.128.2.0/23 maxlen: 23
180.128.4.0/23 maxlen: 23
180.128.6.0/23 maxlen: 23
180.128.8.0/23 maxlen: 23
180.128.10.0/23 maxlen: 23
180.128.14.0/23 maxlen: 23
180.128.16.0/23 maxlen: 23
180.128.18.0/23 maxlen: 23
180.128.20.0/23 maxlen: 23
180.128.22.0/23 maxlen: 23
180.128.24.0/23 maxlen: 23
180.128.26.0/23 maxlen: 23
180.128.28.0/23 maxlen: 23
180.128.30.0/23 maxlen: 23
180.128.32.0/23 maxlen: 23
180.128.34.0/23 maxlen: 23
180.128.40.0/23 maxlen: 23
180.128.42.0/23 maxlen: 23
180.128.44.0/23 maxlen: 23
180.128.240.0/21 maxlen: 21
180.128.242.0/23 maxlen: 23
202.44.52.0/22 maxlen: 22
202.52.4.0/22 maxlen: 22
203.145.112.0/22 maxlen: 22
203.145.116.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A911ABDD/3AE004B4D77811E4B3778B72C4F9AE02/QoezMyF220hqLLxCVAL6nIa23Eg.crl
rsync://rpki.apnic.net/member_repository/A911ABDD/3AE004B4D77811E4B3778B72C4F9AE02/QoezMyF220hqLLxCVAL6nIa23Eg.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QoezMyF220hqLLxCVAL6nIa23Eg.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 07 Jun 2024 16:04:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7425 (0x1d01)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911ABDD/serialNumber=4287B3332176DB486A2CBC425402FA9C86B6DC48
Validity
Not Before: Dec 21 08:42:59 2023 GMT
Not After : Oct 31 00:00:00 2024 GMT
Subject: CN=6583fa93-efda
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:2f:24:11:a9:91:d3:67:65:ef:ba:be:e5:b5:
6b:fb:4b:ca:6f:2b:7d:44:14:a7:c1:5f:d0:1f:16:
6f:12:fa:0f:64:1f:b8:57:5b:b9:fb:9b:11:89:01:
d6:bc:56:34:b2:f1:7e:5f:f8:7b:c1:1e:2e:a3:1c:
b2:74:43:18:ed:44:09:b8:c4:1a:e3:a2:44:16:bb:
b7:4d:95:80:f8:46:2e:b0:e3:97:71:71:bd:e0:e1:
90:02:ae:72:ae:41:d1:1b:36:0c:4d:cb:c1:89:4c:
b6:98:72:bd:07:6e:46:57:92:b8:25:cd:11:83:fb:
0f:96:b1:51:5c:63:fc:ee:94:b3:05:3b:3a:69:8a:
d5:7e:07:f1:32:02:8e:83:ce:85:81:bf:60:09:3c:
b4:6a:1f:cf:69:f4:9e:b3:48:c5:ac:b3:24:41:c7:
02:c1:bd:38:29:30:ff:3f:f8:81:63:6f:f7:11:f1:
9b:ab:7d:6a:96:0a:15:21:27:25:4d:db:6a:a2:98:
10:59:fc:0e:b8:70:ee:a2:8d:2c:55:5d:ea:a8:93:
96:ed:7e:af:93:a1:b9:32:7e:5e:5b:20:bb:a4:2e:
d8:54:b4:a2:f4:88:85:9e:a3:be:02:74:d4:ca:87:
89:47:cb:0a:b3:55:ef:10:82:83:e9:15:c6:3d:0f:
99:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:BF:EA:97:CA:FB:99:18:71:23:41:A7:9B:83:4C:53:15:14:51:7D
X509v3 Authority Key Identifier:
keyid:42:87:B3:33:21:76:DB:48:6A:2C:BC:42:54:02:FA:9C:86:B6:DC:48
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911ABDD/3AE004B4D77811E4B3778B72C4F9AE02/QoezMyF220hqLLxCVAL6nIa23Eg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QoezMyF220hqLLxCVAL6nIa23Eg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911ABDD/3AE004B4D77811E4B3778B72C4F9AE02/4FA6792A8F6711E6A509C92DC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
180.128.0.0/16
202.44.52.0/22
202.52.4.0/22
203.145.112.0/21
Signature Algorithm: sha256WithRSAEncryption
9c:ff:00:3f:d6:0e:26:de:42:64:8c:dc:45:1e:1e:a1:78:d7:
25:fe:47:db:36:15:50:7f:33:42:19:86:86:66:49:eb:11:67:
b4:eb:1b:d5:cf:20:73:f7:40:23:aa:46:c9:7a:da:f7:d1:27:
c9:9e:47:d8:b2:c9:ad:2e:9d:a1:b8:df:75:88:0d:5a:76:24:
ff:34:33:3b:e9:8e:f2:53:d1:74:f6:43:f6:f4:a2:9a:58:d0:
12:2a:51:1e:16:ea:7a:21:0c:7d:84:c2:ac:d4:c3:af:9e:df:
bf:aa:84:42:62:42:e4:35:81:4a:d7:c9:d0:47:5e:a7:c6:7f:
41:80:fe:90:0a:dd:10:81:a2:8f:67:c0:9d:de:95:7b:bf:79:
77:5e:3d:4a:eb:e3:f4:f0:dc:57:00:f2:97:0a:f3:8d:b0:8e:
f3:3a:93:68:40:5e:f3:76:d3:ac:28:14:b7:21:6b:e5:d8:d1:
8a:81:8a:2d:80:5b:d9:8e:3d:f1:84:57:35:13:fd:de:95:c7:
94:d1:73:5c:45:61:4c:44:2f:97:f1:af:55:a4:c4:a3:4e:b9:
a4:69:c1:a6:2e:6b:d2:1f:44:7d:80:7b:76:e4:32:cc:94:92:
b1:c1:ed:a5:76:0b:a6:56:46:2b:96:52:88:13:21:b3:e7:b5:
df:ae:85:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 31 20:33:57 2024 by rpki-client on console-ams.rpki-client.org