Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A913387C/2C7D79E81D8911E28A693DE208B02CD2/08B3D71E068611EDA1C2070DC4F9AE02.roa
File: 08B3D71E068611EDA1C2070DC4F9AE02.roa (raw, json)
Hash identifier: nsDloBmSb7WnZ4IIBV/7HLbvVNyY5PAJVB5LfyUu8BU=
Subject key identifier: E2:45:20:0E:06:04:AB:7C:6A:0F:49:8E:97:F7:89:C4:E2:7F:18:F1
Certificate issuer: /CN=A913387C/serialNumber=BDE1B3955F1625DF7625AF71CBB794B87C39DC67
Certificate serial: 33DF
Authority key identifier: BD:E1:B3:95:5F:16:25:DF:76:25:AF:71:CB:B7:94:B8:7C:39:DC:67
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/veGzlV8WJd92Ja9xy7eUuHw53Gc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A913387C/2C7D79E81D8911E28A693DE208B02CD2/08B3D71E068611EDA1C2070DC4F9AE02.roa
Signing time: Mon 24 Jun 2024 15:10:33 +0000
ROA not before: Mon 24 Jun 2024 15:10:33 +0000
ROA not after: Sun 31 Aug 2025 00:00:00 +0000
asID: 4844
IP address blocks: 210.23.0.0/19 maxlen: 19
210.23.0.0/20 maxlen: 20
210.23.16.0/20 maxlen: 20
2406:f000::/32 maxlen: 32
2406:f000:1::/48 maxlen: 48
2406:f000:1:32::/64 maxlen: 64
2406:f000:1:e000::/64 maxlen: 64
2406:f000:1:e003::/64 maxlen: 64
2406:f000:2:e004::/64 maxlen: 64
2406:f000:3:e000::/64 maxlen: 64
2406:f000:3:e001::/64 maxlen: 64
2406:f000:3:e005::/64 maxlen: 64
2406:f000:3:e007::/64 maxlen: 64
2406:f000:3:e00a::/64 maxlen: 64
2406:f000:3:e00d::/64 maxlen: 64
2406:f000:20ff:200::/56 maxlen: 56
2406:f000:20ff:300::/56 maxlen: 56
2406:f000:30f0::/56 maxlen: 56
2406:f000:30f0:100::/56 maxlen: 56
2406:f000:30f0:300::/56 maxlen: 56
2406:f000:30f0:400::/56 maxlen: 56
2406:f000:30f0:600::/56 maxlen: 56
2406:f000:30f0:700::/56 maxlen: 56
2406:f000:30f0:800::/56 maxlen: 56
2406:f000:30f0:900::/56 maxlen: 56
2406:f000:30f1:ff00::/64 maxlen: 64
2406:f000:30f1:ff01::/64 maxlen: 64
2406:f000:30ff:1::/64 maxlen: 64
2406:f000:30ff:2::/64 maxlen: 64
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A913387C/2C7D79E81D8911E28A693DE208B02CD2/veGzlV8WJd92Ja9xy7eUuHw53Gc.crl
rsync://rpki.apnic.net/member_repository/A913387C/2C7D79E81D8911E28A693DE208B02CD2/veGzlV8WJd92Ja9xy7eUuHw53Gc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/veGzlV8WJd92Ja9xy7eUuHw53Gc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 01 Dec 2024 14:30:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13279 (0x33df)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A913387C/serialNumber=BDE1B3955F1625DF7625AF71CBB794B87C39DC67
Validity
Not Before: Jun 24 15:10:33 2024 GMT
Not After : Aug 31 00:00:00 2025 GMT
Subject: CN=66798c67-6d5c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:2a:4f:49:f8:61:ea:b2:41:58:ab:f2:b5:6e:
f2:08:c0:93:b2:cf:35:47:2d:6f:4d:e6:b4:0e:60:
3d:72:6a:53:4a:ec:03:2d:ec:8f:64:8a:0e:b2:20:
23:c2:be:e3:d8:c1:72:61:97:97:6d:eb:23:8f:17:
af:fc:cc:49:70:fe:9b:c5:e3:93:ac:a7:c8:40:6b:
59:90:35:05:93:7f:6b:a5:09:f7:9f:35:1d:88:6e:
ed:e3:8e:e8:e7:df:20:86:02:a3:8c:d1:17:9d:5a:
f8:4b:30:f3:00:c0:2d:76:63:49:d4:7b:99:6a:86:
a9:2d:dc:bc:3a:08:f8:6f:09:0c:96:da:9c:75:de:
97:d9:3f:cf:8b:fe:13:39:7e:45:f0:37:93:5d:ad:
06:54:dd:5e:75:3d:ed:1c:48:af:ac:81:78:5f:a7:
0f:f2:1c:cf:1c:be:f2:3b:4a:29:77:8f:96:9f:f8:
8a:cb:44:29:e4:82:e0:49:68:7a:35:83:16:c8:a7:
5b:b8:5c:7e:be:72:49:5b:41:45:d9:0f:99:d9:73:
7e:97:c1:0a:77:5e:01:64:8d:0b:1d:76:b8:22:21:
d0:de:69:e9:6b:d6:f0:98:5e:d8:a6:6c:b8:4f:a5:
b4:26:2e:ed:00:9b:85:2c:26:31:02:51:52:19:b9:
a7:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:45:20:0E:06:04:AB:7C:6A:0F:49:8E:97:F7:89:C4:E2:7F:18:F1
X509v3 Authority Key Identifier:
keyid:BD:E1:B3:95:5F:16:25:DF:76:25:AF:71:CB:B7:94:B8:7C:39:DC:67
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A913387C/2C7D79E81D8911E28A693DE208B02CD2/veGzlV8WJd92Ja9xy7eUuHw53Gc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/veGzlV8WJd92Ja9xy7eUuHw53Gc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913387C/2C7D79E81D8911E28A693DE208B02CD2/08B3D71E068611EDA1C2070DC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
210.23.0.0/19
IPv6:
2406:f000::/32
Signature Algorithm: sha256WithRSAEncryption
1a:7b:7e:03:49:64:31:19:f2:69:d8:4e:13:28:74:b0:44:a7:
77:a6:f9:45:03:5a:c5:35:f5:0a:79:6e:09:85:c4:4e:b3:b8:
d7:63:b7:42:ae:87:42:d9:13:53:c7:bf:1e:1d:d5:9d:f2:04:
90:8d:f0:55:d8:30:8a:5d:75:0f:a9:f1:64:f9:9d:3d:e2:1f:
d9:04:4e:4f:92:de:35:d6:ac:d2:cd:6f:ba:88:d2:34:f8:26:
aa:16:c6:53:b0:e2:ff:7d:47:d0:54:98:3b:97:ba:85:b0:5f:
d5:b2:c6:11:3a:ed:c8:28:87:1f:fa:dd:3c:64:cd:fb:b1:68:
b6:60:23:df:9a:3f:5b:74:07:80:18:93:c8:b4:98:50:90:5b:
e1:45:b2:f1:1d:7b:b7:45:e8:69:5e:00:6c:65:28:26:95:92:
6a:a0:13:c4:3f:a7:d5:8c:5c:2c:34:02:21:58:c6:25:81:90:
1e:89:f2:30:ec:e4:16:41:93:05:c5:57:88:df:5d:db:63:eb:
30:ca:9b:5d:b0:63:f2:dc:cc:95:55:a1:09:82:05:af:bb:57:
5d:db:79:4f:31:10:35:d5:a7:f2:10:a4:ca:e6:76:8f:55:40:
7d:9b:0e:d8:c5:4e:19:41:0f:f8:31:f9:0f:fe:a0:54:6d:eb:
b3:a0:9b:56
-----BEGIN CERTIFICATE-----
MIIFgDCCBGigAwIBAgICM98wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MzM4N0MxMTAvBgNVBAUTKEJERTFCMzk1NUYxNjI1REY3NjI1QUY3MUNCQjc5NEI4
N0MzOURDNjcwHhcNMjQwNjI0MTUxMDMzWhcNMjUwODMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02Njc5OGM2Ny02ZDVjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAtSpPSfhh6rJBWKvytW7yCMCTss81Ry1vTea0DmA9cmpTSuwDLeyPZIoOsiAj
wr7j2MFyYZeXbesjjxev/MxJcP6bxeOTrKfIQGtZkDUFk39rpQn3nzUdiG7t447o
598ghgKjjNEXnVr4SzDzAMAtdmNJ1HuZaoapLdy8Ogj4bwkMltqcdd6X2T/Pi/4T
OX5F8DeTXa0GVN1edT3tHEivrIF4X6cP8hzPHL7yO0opd4+Wn/iKy0Qp5ILgSWh6
NYMWyKdbuFx+vnJJW0FF2Q+Z2XN+l8EKd14BZI0LHXa4IiHQ3mnpa9bwmF7Ypmy4
T6W0Ji7tAJuFLCYxAlFSGbmnCQIDAQABo4ICpDCCAqAwHQYDVR0OBBYEFOJFIA4G
BKt8ag9Jjpf3icTifxjxMB8GA1UdIwQYMBaAFL3hs5VfFiXfdiWvccu3lLh8Odxn
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMzg3Qy8yQzdENzlFODFE
ODkxMUUyOEE2OTNERTIwOEIwMkNEMi92ZUd6bFY4V0pkOTJKYTl4eTdlVXVIdzUz
R2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3ZlR3psVjhXSmQ5MkphOXh5N2VVdUh3NTNHYy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
MzM4N0MvMkM3RDc5RTgxRDg5MTFFMjhBNjkzREUyMDhCMDJDRDIvMDhCM0Q3MUUw
Njg2MTFFREExQzIwNzBEQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwLgYIKwYBBQUHAQcBAf8E
HzAdMAwEAgABMAYDBAXSFwAwDQQCAAIwBwMFACQG8AAwDQYJKoZIhvcNAQELBQAD
ggEBABp7fgNJZDEZ8mnYThModLBEp3em+UUDWsU19Qp5bgmFxE6zuNdjt0Kuh0LZ
E1PHvx4d1Z3yBJCN8FXYMIpddQ+p8WT5nT3iH9kETk+S3jXWrNLNb7qI0jT4JqoW
xlOw4v99R9BUmDuXuoWwX9WyxhE67cgohx/63TxkzfuxaLZgI9+aP1t0B4AYk8i0
mFCQW+FFsvEde7dF6GleAGxlKCaVkmqgE8Q/p9WMXCw0AiFYxiWBkB6J8jDs5BZB
kwXFV4jfXdtj6zDKm12wY/LczJVVoQmCBa+7V13beU8xEDXVp/IQpMrmdo9VQH2b
DtjFThlBD/gx+Q/+oFRt67Ogm1Y=
-----END CERTIFICATE-----
Generated at Sun Nov 24 17:19:59 2024 by rpki-client on console-fra.rpki-client.org