Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91262CA/EC1EE6528A5711EC96EBC014C4F9AE02/82D00C2895AD11ED9D01B932C4F9AE02.roa
File: 82D00C2895AD11ED9D01B932C4F9AE02.roa (raw, json)
Hash identifier: 4jNkeWKZZzElNBBPpebWTSORyo1jdcNMT9UqLTiLQI4=
Subject key identifier: FD:96:A4:01:63:E9:CD:AE:7A:1E:5E:7C:C7:80:18:BE:D9:30:B5:F9
Certificate issuer: /CN=A91262CA/serialNumber=D63DE82A759F9657F8F073B251251AAE67BA4BA6
Certificate serial: 0362
Authority key identifier: D6:3D:E8:2A:75:9F:96:57:F8:F0:73:B2:51:25:1A:AE:67:BA:4B:A6
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1j3oKnWfllf48HOyUSUarme6S6Y.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91262CA/EC1EE6528A5711EC96EBC014C4F9AE02/82D00C2895AD11ED9D01B932C4F9AE02.roa
Signing time: Tue 07 May 2024 04:27:14 +0000
ROA not before: Tue 07 May 2024 04:27:14 +0000
ROA not after: Mon 30 Sep 2024 00:00:00 +0000
asID: 4750
IP address blocks: 147.50.0.0/18 maxlen: 18
147.50.0.0/22 maxlen: 22
147.50.4.0/22 maxlen: 22
147.50.8.0/22 maxlen: 22
147.50.12.0/22 maxlen: 22
147.50.16.0/22 maxlen: 22
147.50.20.0/22 maxlen: 22
147.50.24.0/22 maxlen: 22
147.50.28.0/22 maxlen: 22
147.50.32.0/21 maxlen: 21
147.50.32.0/22 maxlen: 22
147.50.32.0/24 maxlen: 24
147.50.34.0/24 maxlen: 24
147.50.35.0/24 maxlen: 24
147.50.36.0/22 maxlen: 22
147.50.41.0/24 maxlen: 24
147.50.42.0/24 maxlen: 24
147.50.43.0/24 maxlen: 24
147.50.44.0/24 maxlen: 24
147.50.45.0/24 maxlen: 24
147.50.46.0/24 maxlen: 24
147.50.47.0/24 maxlen: 24
147.50.48.0/24 maxlen: 24
147.50.49.0/24 maxlen: 24
147.50.50.0/24 maxlen: 24
147.50.51.0/24 maxlen: 24
147.50.52.0/24 maxlen: 24
147.50.53.0/24 maxlen: 24
147.50.54.0/24 maxlen: 24
147.50.55.0/24 maxlen: 24
147.50.56.0/24 maxlen: 24
147.50.57.0/24 maxlen: 24
147.50.58.0/24 maxlen: 24
147.50.59.0/24 maxlen: 24
147.50.60.0/22 maxlen: 22
147.50.60.0/24 maxlen: 24
147.50.61.0/24 maxlen: 24
147.50.64.0/20 maxlen: 20
147.50.64.0/22 maxlen: 22
147.50.68.0/22 maxlen: 22
147.50.73.0/24 maxlen: 24
147.50.75.0/24 maxlen: 24
147.50.76.0/22 maxlen: 22
147.50.76.0/24 maxlen: 24
147.50.77.0/24 maxlen: 24
147.50.78.0/24 maxlen: 24
147.50.128.0/19 maxlen: 19
147.50.128.0/22 maxlen: 22
147.50.128.0/24 maxlen: 24
147.50.132.0/22 maxlen: 22
147.50.144.0/22 maxlen: 22
147.50.148.0/22 maxlen: 22
147.50.156.0/22 maxlen: 22
147.50.160.0/20 maxlen: 20
147.50.162.0/23 maxlen: 23
147.50.164.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91262CA/EC1EE6528A5711EC96EBC014C4F9AE02/1j3oKnWfllf48HOyUSUarme6S6Y.crl
rsync://rpki.apnic.net/member_repository/A91262CA/EC1EE6528A5711EC96EBC014C4F9AE02/1j3oKnWfllf48HOyUSUarme6S6Y.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1j3oKnWfllf48HOyUSUarme6S6Y.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 08 Jun 2024 02:50:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 866 (0x362)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91262CA/serialNumber=D63DE82A759F9657F8F073B251251AAE67BA4BA6
Validity
Not Before: May 7 04:27:14 2024 GMT
Not After : Sep 30 00:00:00 2024 GMT
Subject: CN=6639ada2-1b3d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:9d:b5:78:ea:df:4e:ad:e4:11:e3:96:70:14:
ca:2c:a0:71:86:d6:28:de:f3:eb:19:76:23:4b:77:
18:0f:b4:d4:81:37:eb:26:07:f8:de:e5:67:47:4c:
ad:14:dd:9d:82:b5:74:5c:18:b2:f1:8e:12:c4:58:
32:b8:c8:00:3b:73:f6:90:88:67:4d:19:41:2a:2a:
11:4b:9a:62:57:9c:79:f5:60:2c:f0:55:93:a2:2d:
f8:b7:29:d7:5e:18:06:1c:e1:7c:24:86:8e:d5:2e:
92:f0:42:5c:3a:ec:50:af:4f:2c:59:27:87:a0:84:
e9:e5:c9:54:cb:e4:6d:59:b5:f0:09:ac:3c:ce:89:
dc:7e:78:b4:f6:b6:93:14:00:f7:1e:3c:87:51:61:
f2:23:17:40:0b:94:18:5c:b9:2b:a0:16:52:94:b4:
38:f7:1d:21:fa:f3:68:e7:9f:d1:82:95:46:c1:69:
e1:28:00:b9:f5:3f:75:4f:e9:e3:01:c9:c7:5a:11:
6e:86:e8:52:64:a3:fa:76:8a:46:01:c4:7c:38:3e:
8b:c0:f1:fb:5f:9e:be:66:1b:ea:f7:75:21:09:77:
3b:2e:8e:1c:ba:06:8e:87:40:d6:97:54:4c:02:e6:
d3:e5:22:f8:ba:c5:a3:f9:70:c0:84:14:17:69:dc:
90:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:96:A4:01:63:E9:CD:AE:7A:1E:5E:7C:C7:80:18:BE:D9:30:B5:F9
X509v3 Authority Key Identifier:
keyid:D6:3D:E8:2A:75:9F:96:57:F8:F0:73:B2:51:25:1A:AE:67:BA:4B:A6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91262CA/EC1EE6528A5711EC96EBC014C4F9AE02/1j3oKnWfllf48HOyUSUarme6S6Y.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1j3oKnWfllf48HOyUSUarme6S6Y.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91262CA/EC1EE6528A5711EC96EBC014C4F9AE02/82D00C2895AD11ED9D01B932C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
147.50.0.0-147.50.79.255
147.50.128.0-147.50.175.255
Signature Algorithm: sha256WithRSAEncryption
3f:2b:ac:8a:da:81:f2:97:cb:d8:cc:63:12:f7:18:7a:2d:a9:
2b:a4:5b:e8:9b:31:bb:2c:b6:26:5a:fb:12:d8:0c:0f:ab:e1:
c7:21:d7:f9:63:6c:97:41:80:f6:ab:b3:43:69:15:db:bf:ed:
d6:fd:49:14:87:69:ac:fc:b9:8f:76:95:58:82:78:25:ce:6b:
ce:7b:af:96:72:3c:87:17:9b:d1:fc:f9:18:ec:69:ba:01:d7:
0b:8d:fc:da:95:de:9b:6e:47:6d:ee:bd:1d:ce:78:c2:3d:e3:
c5:ef:13:2f:b9:b4:50:d8:cb:f3:0e:96:8f:cb:20:10:8f:de:
8a:4e:80:c5:da:3d:47:9e:ba:bb:d7:f1:53:89:be:7e:12:9a:
6a:67:3f:2e:06:6b:fa:e5:fb:fa:b4:cb:01:83:03:fa:d2:05:
e7:0d:18:1c:09:f1:6a:b0:30:ed:88:fa:77:2d:7d:ae:34:3c:
30:f2:8c:66:23:55:77:9e:04:0c:c3:da:b1:36:d3:64:ce:28:
aa:28:cc:c7:ad:51:db:be:1a:78:ca:0a:bc:e2:80:41:92:f9:
58:80:43:d2:eb:6c:46:8c:9e:3f:82:e9:56:c8:4e:74:27:9d:
e5:a1:4a:8f:66:c3:d8:2b:a2:b1:ea:2e:e3:e4:9c:9c:be:0a:
da:1e:66:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 04:59:00 2024 by rpki-client on console-fra.rpki-client.org