Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9136EC5/2DECAE560E5611E4B6F1953AC4F9AE02/F1BA2EAC353311EBB895B082C4F9AE02.roa
File: F1BA2EAC353311EBB895B082C4F9AE02.roa (raw, json)
Hash identifier: IqUJT71VWcq8Bzx+MPSE83ybSahgq2Gbrd7FADLbXzs=
Subject key identifier: 96:F6:69:84:EA:A7:ED:23:D5:19:D1:84:07:5A:2B:C3:CB:28:90:21
Certificate issuer: /CN=A9136EC5/serialNumber=9FCE28914C50DC99755F108AB4334F772CBEA0E2
Certificate serial: 2A5D
Authority key identifier: 9F:CE:28:91:4C:50:DC:99:75:5F:10:8A:B4:33:4F:77:2C:BE:A0:E2
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n84okUxQ3Jl1XxCKtDNPdyy-oOI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9136EC5/2DECAE560E5611E4B6F1953AC4F9AE02/F1BA2EAC353311EBB895B082C4F9AE02.roa
Signing time: Sun 02 Jun 2024 13:09:09 +0000
ROA not before: Sun 02 Jun 2024 13:09:09 +0000
ROA not after: Sun 01 Dec 2024 00:00:00 +0000
asID: 58621
IP address blocks: 43.245.96.0/22 maxlen: 24
43.245.108.0/22 maxlen: 24
43.245.252.0/22 maxlen: 24
101.100.192.0/18 maxlen: 24
103.9.100.0/22 maxlen: 24
103.11.188.0/22 maxlen: 24
103.15.232.0/22 maxlen: 24
103.104.196.0/24 maxlen: 24
103.245.92.0/22 maxlen: 24
111.235.136.0/22 maxlen: 24
119.31.232.0/21 maxlen: 24
2001:df0:454::/48 maxlen: 48
2001:df3:4f00::/48 maxlen: 48
2403:cb00::/32 maxlen: 36
2403:cb00::/32 maxlen: 96
2403:cb00:300::/48 maxlen: 48
2403:cb00:301::/48 maxlen: 48
2403:cb00:302::/48 maxlen: 48
2403:cb00:cb00::/48 maxlen: 48
2403:cb00:cb01::/48 maxlen: 48
2403:cb00:cb02::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9136EC5/2DECAE560E5611E4B6F1953AC4F9AE02/n84okUxQ3Jl1XxCKtDNPdyy-oOI.crl
rsync://rpki.apnic.net/member_repository/A9136EC5/2DECAE560E5611E4B6F1953AC4F9AE02/n84okUxQ3Jl1XxCKtDNPdyy-oOI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n84okUxQ3Jl1XxCKtDNPdyy-oOI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 21 Jun 2024 15:55:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 10845 (0x2a5d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9136EC5/serialNumber=9FCE28914C50DC99755F108AB4334F772CBEA0E2
Validity
Not Before: Jun 2 13:09:09 2024 GMT
Not After : Dec 1 00:00:00 2024 GMT
Subject: CN=665c6ef5-1b19
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:22:36:35:a8:c5:b1:d0:c5:62:5e:16:10:e0:
6a:f9:b7:c6:1f:50:76:d4:da:3b:d7:9f:5d:02:9f:
92:dd:a7:12:6a:4c:75:53:94:15:99:d3:56:7c:84:
3e:22:aa:6e:49:16:a8:32:c5:b1:80:52:91:0a:69:
64:ac:fd:d7:67:8b:33:81:5a:76:f6:56:55:b8:c8:
11:7d:03:d9:59:41:e6:7a:dc:2b:97:ab:81:87:c7:
25:dc:b5:d1:bc:22:16:a9:73:9d:a0:f6:b1:f7:e7:
50:ec:ec:3f:ca:68:f0:84:82:64:33:d3:8c:31:44:
81:9f:35:e8:bf:65:01:87:fd:38:7b:4c:98:b2:d0:
ec:b5:8b:0e:3f:14:70:74:d6:13:1e:40:de:34:99:
f9:1d:0e:de:cc:ed:57:10:3a:c9:73:6a:f7:6a:49:
6d:8f:8e:d7:a5:4c:0e:22:b1:d3:b3:78:b7:24:29:
fc:f0:17:fc:84:92:fd:ef:19:9e:95:45:13:e8:89:
de:4f:96:33:d2:d2:70:a4:4d:f0:37:b6:ca:76:a0:
4a:49:5e:78:21:e6:ce:15:9e:21:7f:6f:78:71:8f:
fb:8d:69:75:38:46:bf:23:7d:94:47:30:49:dc:01:
aa:52:d4:90:d5:7c:a1:39:05:65:5b:ec:77:fb:8b:
0e:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:F6:69:84:EA:A7:ED:23:D5:19:D1:84:07:5A:2B:C3:CB:28:90:21
X509v3 Authority Key Identifier:
keyid:9F:CE:28:91:4C:50:DC:99:75:5F:10:8A:B4:33:4F:77:2C:BE:A0:E2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9136EC5/2DECAE560E5611E4B6F1953AC4F9AE02/n84okUxQ3Jl1XxCKtDNPdyy-oOI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n84okUxQ3Jl1XxCKtDNPdyy-oOI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9136EC5/2DECAE560E5611E4B6F1953AC4F9AE02/F1BA2EAC353311EBB895B082C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
43.245.96.0/22
43.245.108.0/22
43.245.252.0/22
101.100.192.0/18
103.9.100.0/22
103.11.188.0/22
103.15.232.0/22
103.104.196.0/24
103.245.92.0/22
111.235.136.0/22
119.31.232.0/21
IPv6:
2001:df0:454::/48
2001:df3:4f00::/48
2403:cb00::/32
Signature Algorithm: sha256WithRSAEncryption
8c:dc:ff:63:c7:3a:94:58:6a:de:44:8d:6b:4e:28:3f:ca:04:
0e:ba:09:17:2b:ae:37:1f:44:97:4c:d0:bd:c6:fa:d4:1f:1d:
61:05:f8:2c:c0:37:75:88:77:99:f5:58:ef:6f:ca:bd:dd:4b:
b0:4c:94:54:72:13:9d:55:cc:59:75:d0:51:a7:18:e5:c9:66:
fd:51:09:2f:36:ad:ae:b2:c9:e0:18:70:5c:c4:3a:83:73:ef:
a5:de:ec:0a:4d:db:7b:18:41:d3:a6:04:fb:b2:b3:f7:6a:ec:
ea:a9:32:0e:53:39:72:53:a7:58:24:09:0c:e4:2a:40:f5:bf:
dc:b8:f0:57:21:ff:3e:84:de:d1:ef:94:1d:43:d7:1e:25:cb:
a9:42:30:f6:0c:1d:6b:55:89:c1:bc:13:69:41:1e:49:e3:d7:
e2:fe:08:41:5a:f9:7d:ed:56:78:61:c6:50:f8:b9:cf:0a:a6:
35:b8:3e:c5:86:17:53:5b:c0:6f:70:95:49:07:2b:70:5f:a5:
da:a5:21:10:e8:e0:89:f6:e8:1d:48:e4:44:e4:86:93:55:13:
0f:75:57:2d:85:de:81:a4:f3:2a:39:0e:f1:85:16:cd:31:38:
a1:da:fe:b4:1d:f9:d6:ba:9a:5c:fd:80:cc:75:ff:61:bf:7a:
51:54:bf:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 14 19:09:18 2024 by rpki-client on console-ams.rpki-client.org