Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A914EAE4/6753B8AE257511E7AC0D172AC4F9AE02/CBAFF664136B11EFB53F2683C4F9AE02.roa
File: CBAFF664136B11EFB53F2683C4F9AE02.roa (raw, json)
Hash identifier: zL7f4owaIFeQIlAVjkdq8wY2gytoNI2SWPVd1+1knc4=
Subject key identifier: C7:62:A3:77:F6:05:09:C1:CC:0C:F8:EE:CE:14:3B:BB:6E:EB:41:C8
Certificate issuer: /CN=A914EAE4/serialNumber=AD56B67187A98BA314084405797BD9656E8AC8BA
Certificate serial: 1DAF
Authority key identifier: AD:56:B6:71:87:A9:8B:A3:14:08:44:05:79:7B:D9:65:6E:8A:C8:BA
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rVa2cYepi6MUCEQFeXvZZW6KyLo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914EAE4/6753B8AE257511E7AC0D172AC4F9AE02/CBAFF664136B11EFB53F2683C4F9AE02.roa
Signing time: Thu 16 May 2024 10:12:22 +0000
ROA not before: Thu 16 May 2024 10:12:22 +0000
ROA not after: Sun 01 Dec 2024 00:00:00 +0000
asID: 58777
IP address blocks: 202.67.0.0/22 maxlen: 24
202.73.128.0/22 maxlen: 24
202.191.72.0/21 maxlen: 24
203.33.67.0/24 maxlen: 24
203.33.68.0/24 maxlen: 24
203.33.73.0/24 maxlen: 24
203.33.79.0/24 maxlen: 24
203.33.100.0/24 maxlen: 24
203.33.122.0/24 maxlen: 24
203.33.129.0/24 maxlen: 24
203.33.131.0/24 maxlen: 24
240e:108:4040::/48 maxlen: 48
240e:108:4047::/48 maxlen: 48
240e:108:4060::/48 maxlen: 48
240e:108:4360::/48 maxlen: 48
240e:108:4820::/48 maxlen: 48
240e:108:4840::/48 maxlen: 48
240e:108:4847::/48 maxlen: 48
240e:108:4860::/48 maxlen: 48
240e:108:4b60::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A914EAE4/6753B8AE257511E7AC0D172AC4F9AE02/rVa2cYepi6MUCEQFeXvZZW6KyLo.crl
rsync://rpki.apnic.net/member_repository/A914EAE4/6753B8AE257511E7AC0D172AC4F9AE02/rVa2cYepi6MUCEQFeXvZZW6KyLo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rVa2cYepi6MUCEQFeXvZZW6KyLo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 09 Jun 2024 16:56:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7599 (0x1daf)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914EAE4/serialNumber=AD56B67187A98BA314084405797BD9656E8AC8BA
Validity
Not Before: May 16 10:12:22 2024 GMT
Not After : Dec 1 00:00:00 2024 GMT
Subject: CN=6645dc06-c300
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:6d:4b:1b:87:87:f4:2e:cc:0d:c1:97:66:49:
4a:56:d0:19:0f:ce:46:20:49:eb:23:9f:a3:69:17:
af:67:79:8d:3b:e1:3a:9f:75:3d:8a:13:52:2f:16:
30:4a:96:0f:9c:4a:24:e7:da:78:2d:b3:ac:46:81:
77:d5:98:11:aa:38:52:1b:89:8c:3b:f0:d4:cc:2c:
0a:19:87:8b:82:c3:22:69:7c:80:8c:69:c2:1b:0f:
23:ed:b1:7d:3e:2a:33:99:22:99:93:df:58:fd:65:
31:26:31:d5:01:68:ad:9a:db:af:f3:c0:b2:bb:36:
d2:28:20:c1:b4:a2:85:bb:b9:8e:d6:ca:f2:fd:53:
92:06:ac:40:98:1b:ca:91:f3:b5:82:48:9c:b2:36:
03:89:b0:f6:63:9c:be:6d:ee:af:d2:2f:bb:26:9d:
7d:bb:c4:07:75:5f:07:aa:cd:12:7a:bf:4c:34:56:
19:2c:d8:40:78:0a:fa:7c:fa:00:d0:69:41:cb:02:
ed:d9:25:2e:71:c9:45:05:93:d9:4e:b4:8d:3c:c2:
d1:f5:b1:68:73:02:24:e9:83:44:9a:8c:b5:bd:fe:
fa:af:ea:b0:45:d1:af:99:af:0f:09:0c:71:30:df:
12:32:6c:cb:6a:7a:81:c1:e4:8d:23:94:ed:0b:c2:
49:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:62:A3:77:F6:05:09:C1:CC:0C:F8:EE:CE:14:3B:BB:6E:EB:41:C8
X509v3 Authority Key Identifier:
keyid:AD:56:B6:71:87:A9:8B:A3:14:08:44:05:79:7B:D9:65:6E:8A:C8:BA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914EAE4/6753B8AE257511E7AC0D172AC4F9AE02/rVa2cYepi6MUCEQFeXvZZW6KyLo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rVa2cYepi6MUCEQFeXvZZW6KyLo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914EAE4/6753B8AE257511E7AC0D172AC4F9AE02/CBAFF664136B11EFB53F2683C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
202.67.0.0/22
202.73.128.0/22
202.191.72.0/21
203.33.67.0-203.33.68.255
203.33.73.0/24
203.33.79.0/24
203.33.100.0/24
203.33.122.0/24
203.33.129.0/24
203.33.131.0/24
IPv6:
240e:108:4040::/48
240e:108:4047::/48
240e:108:4060::/48
240e:108:4360::/48
240e:108:4820::/48
240e:108:4840::/48
240e:108:4847::/48
240e:108:4860::/48
240e:108:4b60::/48
Signature Algorithm: sha256WithRSAEncryption
33:6d:ff:c1:f6:69:14:05:75:b7:4f:8d:ab:d7:b0:31:d0:10:
61:0e:be:b3:2d:c9:17:b3:30:fb:16:bf:86:59:9a:c2:6d:4a:
47:71:c8:ea:63:a5:28:b0:ff:97:2e:c9:43:4b:2b:5c:71:84:
c9:3a:98:c4:af:4c:27:b0:1e:33:67:b5:6d:c5:7b:05:ce:13:
d2:38:0e:d0:0a:d4:57:50:38:1e:3b:9e:1a:66:c4:f2:7b:3e:
34:c7:04:6c:05:bf:43:9c:0d:34:32:bb:9c:28:93:09:79:b9:
92:e1:a8:88:82:0b:90:01:cd:3a:0e:c2:a3:76:49:8b:14:b4:
e5:08:ea:d9:ab:9c:8d:67:69:ab:d4:7d:e9:d2:53:79:7e:57:
37:93:bd:0e:1e:4e:26:44:b9:eb:11:9c:9a:95:4a:ec:b6:a9:
28:c1:bb:b0:c1:9c:1a:fe:c8:bc:a8:48:f9:e3:05:2b:82:ec:
33:9e:c2:77:bf:17:cd:b0:13:6a:54:ab:77:00:1a:56:47:25:
dd:59:69:fa:10:93:fb:d1:f3:ea:25:4f:39:64:85:9c:00:1d:
cf:ac:36:33:21:ae:55:8f:c7:47:90:9d:e9:02:d8:52:10:17:
b5:b7:30:71:c1:21:27:49:a5:2a:1d:4b:6e:2b:8c:4d:cd:35:
0c:0c:d8:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 2 18:46:19 2024 by rpki-client on console-ams.rpki-client.org