Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A912C8AF/D1F64E725EEF11EAA54E6C6CC4F9AE02/0FB29E462A0811EE9A08C30FC4F9AE02.roa
File: 0FB29E462A0811EE9A08C30FC4F9AE02.roa (raw, json)
Hash identifier: wlc2/03rC40Vxpug9k2AwUUCInAJcOvi83wC6HkfHxY=
Subject key identifier: 9D:03:F6:6A:06:31:BB:07:B9:DB:45:2F:E8:7F:DB:DE:1A:B0:01:69
Certificate issuer: /CN=A912C8AF/serialNumber=763F7FBD964A1C3668308C9A29E15025C0DDF9D4
Certificate serial: 0A64
Authority key identifier: 76:3F:7F:BD:96:4A:1C:36:68:30:8C:9A:29:E1:50:25:C0:DD:F9:D4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dj9_vZZKHDZoMIyaKeFQJcDd-dQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912C8AF/D1F64E725EEF11EAA54E6C6CC4F9AE02/0FB29E462A0811EE9A08C30FC4F9AE02.roa
Signing time: Thu 16 May 2024 03:56:20 +0000
ROA not before: Thu 16 May 2024 03:56:20 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 138915
IP address blocks: 59.153.156.0/24 maxlen: 24
59.153.157.0/24 maxlen: 24
59.153.158.0/24 maxlen: 24
59.153.159.0/24 maxlen: 24
103.84.108.0/24 maxlen: 24
103.136.248.0/22 maxlen: 22
103.136.248.0/24 maxlen: 24
103.136.249.0/24 maxlen: 24
103.136.250.0/24 maxlen: 24
103.136.251.0/24 maxlen: 24
103.198.200.0/24 maxlen: 24
103.198.201.0/24 maxlen: 24
103.198.202.0/24 maxlen: 24
175.176.192.0/24 maxlen: 24
175.176.193.0/24 maxlen: 24
175.176.194.0/24 maxlen: 24
175.176.195.0/24 maxlen: 24
2404:a140::/32 maxlen: 32
2404:a140:2::/48 maxlen: 48
2404:a140:3::/48 maxlen: 48
2404:a140:4::/48 maxlen: 48
2404:a140:5::/48 maxlen: 48
2404:a140:6::/48 maxlen: 48
2404:a140:7::/48 maxlen: 48
2404:a140:8::/48 maxlen: 48
2404:a140:9::/48 maxlen: 48
2404:a140:a::/48 maxlen: 48
2404:a140:b::/48 maxlen: 48
2404:a140:c::/48 maxlen: 48
2404:a140:d::/48 maxlen: 48
2404:a140:e::/48 maxlen: 48
2404:a140:f::/48 maxlen: 48
2404:a140:10::/48 maxlen: 48
2404:a140:11::/48 maxlen: 48
2404:a140:12::/48 maxlen: 48
2404:a140:13::/48 maxlen: 48
2404:a140:14::/48 maxlen: 48
2404:a140:15::/48 maxlen: 48
2404:a140:16::/48 maxlen: 48
2404:a140:17::/48 maxlen: 48
2404:a140:18::/48 maxlen: 48
2404:a140:19::/48 maxlen: 48
2404:a140:1a::/48 maxlen: 48
2404:a140:1b::/48 maxlen: 48
2404:a140:1c::/48 maxlen: 48
2404:a140:1d::/48 maxlen: 48
2404:a140:1e::/48 maxlen: 48
2404:a140:1f::/48 maxlen: 48
2404:a140:20::/48 maxlen: 48
2404:a140:21::/48 maxlen: 48
2404:a140:23::/48 maxlen: 48
2404:a140:24::/48 maxlen: 48
2404:a140:25::/48 maxlen: 48
2404:a140:26::/48 maxlen: 48
2404:a140:27::/48 maxlen: 48
2404:a140:28::/48 maxlen: 48
2404:a140:29::/48 maxlen: 48
2404:a140:2a::/48 maxlen: 48
2404:a140:2b::/48 maxlen: 48
2404:a140:2c::/48 maxlen: 48
2404:a140:2d::/48 maxlen: 48
2404:a140:2e::/48 maxlen: 48
2404:a140:2f::/48 maxlen: 48
2404:a140:30::/48 maxlen: 48
2404:a140:32::/48 maxlen: 48
2404:a140:33::/48 maxlen: 48
2404:a140:38::/48 maxlen: 48
2404:a140:3a::/48 maxlen: 48
2404:a140:3b::/48 maxlen: 48
2404:a140:3c::/48 maxlen: 48
2404:a140:3d::/48 maxlen: 48
2404:a140:3e::/48 maxlen: 48
2404:a140:3f::/48 maxlen: 48
2404:a140:4a::/48 maxlen: 48
2404:a140:4b::/48 maxlen: 48
2404:a140:4c::/48 maxlen: 48
2404:a140:4d::/48 maxlen: 48
2404:a140:4f::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A912C8AF/D1F64E725EEF11EAA54E6C6CC4F9AE02/dj9_vZZKHDZoMIyaKeFQJcDd-dQ.crl
rsync://rpki.apnic.net/member_repository/A912C8AF/D1F64E725EEF11EAA54E6C6CC4F9AE02/dj9_vZZKHDZoMIyaKeFQJcDd-dQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dj9_vZZKHDZoMIyaKeFQJcDd-dQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 21 Jun 2024 20:56:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2660 (0xa64)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912C8AF/serialNumber=763F7FBD964A1C3668308C9A29E15025C0DDF9D4
Validity
Not Before: May 16 03:56:20 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=664583e4-8289
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:55:f0:61:06:c3:73:e4:1b:e7:ca:c2:d8:4a:
8f:67:a3:42:28:7b:b8:7d:2d:5a:c1:22:01:12:89:
71:8c:00:f8:bd:ff:ca:97:08:5a:8b:2a:35:0a:78:
20:ff:f8:84:bf:4b:41:91:a6:40:fd:cc:d0:2a:5a:
24:1a:37:44:1f:23:ed:61:99:14:5a:f9:a4:32:5f:
46:2f:53:f2:df:54:f4:11:a4:20:1a:20:aa:7a:1b:
09:0e:5b:16:a9:44:07:73:88:2f:62:c9:78:98:ff:
9b:bf:30:a4:36:74:19:3f:0c:7e:8f:8e:a3:96:03:
56:10:91:6c:32:ef:81:c2:32:25:aa:42:16:62:01:
f1:b7:da:06:db:e2:56:cd:24:e1:29:12:3a:88:ac:
4b:10:b4:3e:52:f3:8f:e2:c0:5d:52:6a:bc:34:a1:
78:a6:81:03:22:79:80:0b:7f:2a:f1:c0:18:81:66:
0a:af:8c:a9:6a:d5:92:72:47:92:46:5c:b3:46:09:
2c:c6:bf:37:a7:ce:26:56:ba:a2:93:04:f7:98:89:
07:03:cc:7a:f8:c9:63:c5:9b:0d:46:d5:fd:76:d7:
4c:2d:f0:b4:b1:f4:93:72:1b:5e:d6:ca:3f:4c:01:
fc:00:ba:ef:b3:36:29:54:55:cc:39:50:8d:ac:ad:
4a:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:03:F6:6A:06:31:BB:07:B9:DB:45:2F:E8:7F:DB:DE:1A:B0:01:69
X509v3 Authority Key Identifier:
keyid:76:3F:7F:BD:96:4A:1C:36:68:30:8C:9A:29:E1:50:25:C0:DD:F9:D4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912C8AF/D1F64E725EEF11EAA54E6C6CC4F9AE02/dj9_vZZKHDZoMIyaKeFQJcDd-dQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dj9_vZZKHDZoMIyaKeFQJcDd-dQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912C8AF/D1F64E725EEF11EAA54E6C6CC4F9AE02/0FB29E462A0811EE9A08C30FC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
59.153.156.0/22
103.84.108.0/24
103.136.248.0/22
103.198.200.0-103.198.202.255
175.176.192.0/22
IPv6:
2404:a140::/32
Signature Algorithm: sha256WithRSAEncryption
1f:3e:b6:e8:ae:c3:5e:e9:c2:73:b3:13:a1:d6:61:38:31:75:
5f:9a:ba:d3:1d:9f:b4:d8:3e:dc:5a:55:f2:58:b5:4a:24:dc:
35:ac:55:b7:78:20:57:98:9f:b2:07:c4:78:b8:bc:6d:80:cf:
55:d0:49:ce:b2:e9:62:7f:c9:5f:0b:9f:1e:94:ec:d5:f9:b4:
40:bf:92:c5:3d:96:9c:cb:84:26:3e:99:1c:3b:c9:74:d4:b4:
c7:83:4a:25:2e:a4:f8:5e:8d:1b:2f:49:93:a9:89:e5:9a:44:
80:40:1b:24:30:1c:d9:17:62:63:07:1a:f5:e5:33:c9:93:48:
86:74:64:1a:9a:8c:0e:49:57:62:80:7a:62:47:77:ed:44:ae:
d1:b2:5f:4d:26:e3:d8:c3:89:c0:a9:2f:a7:38:3b:22:f2:60:
34:92:89:e0:bb:4e:28:d0:63:b6:29:b9:d5:fc:42:0e:86:07:
6b:9a:ff:f9:68:79:61:61:cc:6f:d1:71:74:77:97:71:ab:0e:
5a:dc:34:c9:cf:1e:de:46:f3:b7:a9:ba:04:c5:41:73:37:eb:
93:88:c2:92:de:8a:c6:f2:4d:8a:66:29:68:a9:53:d2:46:34:
72:9e:e0:5d:b7:7c:23:00:cd:5d:74:39:47:60:6f:f9:82:11:
3c:e0:67:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 14 22:02:26 2024 by rpki-client on console-ams.rpki-client.org