Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9127523/12B997E89AE311E3A5A257A75911EA32/4221CE240EC211EB9F6B1914C4F9AE02.roa
File: 4221CE240EC211EB9F6B1914C4F9AE02.roa (raw, json)
Hash identifier: kLqMqBpKEFH6/wOJjRyVhUownkqorcEZej+kQ3FiGDc=
Subject key identifier: 87:87:AE:A7:87:30:57:F2:7B:8E:29:4B:DC:04:B5:CB:BF:E2:0B:AA
Certificate issuer: /CN=A9127523/serialNumber=8A681DD0C43731D0F4763A4DBDD5D4CC01FD64C2
Certificate serial: 2CF0
Authority key identifier: 8A:68:1D:D0:C4:37:31:D0:F4:76:3A:4D:BD:D5:D4:CC:01:FD:64:C2
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/imgd0MQ3MdD0djpNvdXUzAH9ZMI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9127523/12B997E89AE311E3A5A257A75911EA32/4221CE240EC211EB9F6B1914C4F9AE02.roa
Signing time: Sat 24 Aug 2024 15:51:59 +0000
ROA not before: Sat 24 Aug 2024 15:51:59 +0000
ROA not after: Fri 31 Oct 2025 00:00:00 +0000
asID: 58656
IP address blocks: 103.12.176.0/22 maxlen: 24
118.179.8.0/21 maxlen: 21
118.179.9.0/24 maxlen: 24
118.179.12.0/24 maxlen: 24
118.179.14.0/24 maxlen: 24
118.179.15.0/24 maxlen: 24
118.179.16.0/20 maxlen: 20
118.179.16.0/24 maxlen: 24
118.179.17.0/24 maxlen: 24
118.179.18.0/24 maxlen: 24
118.179.19.0/24 maxlen: 24
118.179.20.0/23 maxlen: 24
118.179.22.0/24 maxlen: 24
118.179.23.0/24 maxlen: 24
118.179.24.0/23 maxlen: 23
118.179.24.0/24 maxlen: 24
118.179.25.0/24 maxlen: 24
118.179.26.0/24 maxlen: 24
118.179.27.0/24 maxlen: 24
118.179.28.0/24 maxlen: 24
118.179.29.0/24 maxlen: 24
118.179.30.0/23 maxlen: 23
118.179.30.0/24 maxlen: 24
118.179.31.0/24 maxlen: 24
2404:d900::/32 maxlen: 32
2404:d900::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9127523/12B997E89AE311E3A5A257A75911EA32/imgd0MQ3MdD0djpNvdXUzAH9ZMI.crl
rsync://rpki.apnic.net/member_repository/A9127523/12B997E89AE311E3A5A257A75911EA32/imgd0MQ3MdD0djpNvdXUzAH9ZMI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/imgd0MQ3MdD0djpNvdXUzAH9ZMI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 29 Nov 2024 15:22:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 11504 (0x2cf0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9127523/serialNumber=8A681DD0C43731D0F4763A4DBDD5D4CC01FD64C2
Validity
Not Before: Aug 24 15:51:59 2024 GMT
Not After : Oct 31 00:00:00 2025 GMT
Subject: CN=66ca019e-bed1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:ff:bf:ff:c4:9d:f5:7e:86:06:e2:39:9f:7e:
79:61:b3:6d:c3:97:b7:22:c3:db:fd:98:99:e9:08:
8c:13:5a:a9:c3:d0:70:b5:8a:f7:cc:ca:95:08:f1:
02:45:91:8c:37:7d:54:ef:f5:b0:0c:be:e6:b6:c0:
17:8c:af:cf:fa:20:4f:03:c9:aa:17:30:1e:28:35:
37:9f:d0:4d:d9:45:61:96:3b:f5:36:91:43:5e:8c:
1f:1b:7e:e9:43:8f:28:98:66:6f:23:38:21:8f:08:
2a:ad:b1:59:96:5b:73:7e:37:55:f6:e4:97:7e:cd:
9f:6e:2b:8b:e0:7b:03:bb:94:6c:03:1e:b1:30:ce:
ef:26:e2:58:d9:a9:4e:1e:86:e0:2f:07:73:a8:a3:
c9:4e:dc:73:6c:c3:60:d5:f7:52:99:5f:02:3a:f8:
78:1f:7c:b2:a2:35:0d:2a:b2:3e:74:d5:ca:8e:58:
a7:2f:e3:6c:f3:03:7d:7b:1b:08:e5:d9:ad:41:49:
b1:cd:b2:49:27:6e:74:b5:48:65:54:24:05:d6:89:
fe:07:a3:3b:4b:21:58:6c:14:b6:24:61:09:89:4f:
3d:d3:1a:26:76:66:03:7b:39:6c:88:0e:41:21:26:
18:a4:04:03:74:4b:62:11:c5:53:b1:45:43:ee:2d:
69:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:87:AE:A7:87:30:57:F2:7B:8E:29:4B:DC:04:B5:CB:BF:E2:0B:AA
X509v3 Authority Key Identifier:
keyid:8A:68:1D:D0:C4:37:31:D0:F4:76:3A:4D:BD:D5:D4:CC:01:FD:64:C2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9127523/12B997E89AE311E3A5A257A75911EA32/imgd0MQ3MdD0djpNvdXUzAH9ZMI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/imgd0MQ3MdD0djpNvdXUzAH9ZMI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9127523/12B997E89AE311E3A5A257A75911EA32/4221CE240EC211EB9F6B1914C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.12.176.0/22
118.179.8.0-118.179.31.255
IPv6:
2404:d900::/32
Signature Algorithm: sha256WithRSAEncryption
0b:3a:20:90:e0:bc:d5:ad:c0:2c:57:22:d0:5d:e9:4f:89:80:
b6:5a:e8:f6:b6:2b:8e:8b:1f:5d:20:3a:e5:a1:2a:26:f4:64:
21:89:2c:f4:ed:82:2e:c8:9a:c4:2f:c7:5a:ed:86:89:f8:d9:
67:c9:cb:79:17:0b:eb:67:ca:91:99:b3:57:68:e5:3e:e5:0d:
05:45:af:da:94:9b:17:25:95:9b:14:f2:e9:df:c2:d2:49:0d:
0a:71:74:c1:7e:83:e6:ef:da:9e:28:a7:1f:3b:af:cc:4b:d5:
7d:8f:4f:31:47:98:81:5d:3b:2a:00:2f:cf:b8:f4:02:2e:87:
fd:e2:3d:a8:70:d3:13:15:ee:39:24:73:f7:91:0f:84:ad:c5:
f8:6b:0c:f0:8e:98:aa:da:56:a5:b1:15:fa:87:81:97:9a:ee:
1f:10:08:6f:3f:f3:f0:3b:94:1c:ef:9e:c7:55:39:7d:63:2e:
a0:0c:44:d6:e2:64:8e:5f:86:4d:d1:27:a8:76:90:d9:0f:ca:
32:9e:2b:2d:35:37:12:12:36:86:01:c4:fe:b0:54:d5:08:d3:
d0:55:ea:e3:d8:a2:43:23:f3:38:54:5b:3c:9f:07:a6:6e:c4:
80:b1:a0:47:70:f3:5e:0e:a6:48:99:6f:ce:bc:cf:dd:f0:4b:
77:33:57:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 16:49:15 2024 by rpki-client on console-ams.rpki-client.org