Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9153646/6B8EFA5AFF9811E987C80A6AC4F9AE02/94F63B5E526611EEB3469984C4F9AE02.roa
File: 94F63B5E526611EEB3469984C4F9AE02.roa (raw, json)
Hash identifier: dStnJMplMvYOHad3AfCPjt8ObYX9lBkMIZC8ouHPBl0=
Subject key identifier: 64:38:CF:8A:BA:9D:D0:D1:33:86:0E:82:D1:BC:0E:E2:E5:9D:4F:BC
Certificate issuer: /CN=A9153646/serialNumber=3492EFFE9622B1FFF881597003763C1BA24A1E06
Certificate serial: 05F7
Authority key identifier: 34:92:EF:FE:96:22:B1:FF:F8:81:59:70:03:76:3C:1B:A2:4A:1E:06
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NJLv_pYisf_4gVlwA3Y8G6JKHgY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9153646/6B8EFA5AFF9811E987C80A6AC4F9AE02/94F63B5E526611EEB3469984C4F9AE02.roa
Signing time: Sun 24 Dec 2023 19:07:09 +0000
ROA not before: Sun 24 Dec 2023 19:07:09 +0000
ROA not after: Fri 31 Jan 2025 00:00:00 +0000
asID: 64074
IP address blocks: 103.203.176.0/24 maxlen: 24
103.203.179.0/24 maxlen: 24
223.29.212.0/24 maxlen: 24
223.29.213.0/24 maxlen: 24
223.29.215.0/24 maxlen: 24
2401:b8c0::/32 maxlen: 32
2401:b8c0::/37 maxlen: 37
2401:b8c0:800::/37 maxlen: 37
2401:b8c0:1000::/37 maxlen: 37
2401:b8c0:1800::/37 maxlen: 37
2401:b8c0:2000::/37 maxlen: 37
2401:b8c0:2800::/37 maxlen: 37
2401:b8c0:3000::/37 maxlen: 37
2401:b8c0:3800::/37 maxlen: 37
2401:b8c0:4000::/37 maxlen: 37
2401:b8c0:4800::/37 maxlen: 37
2401:b8c0:5000::/37 maxlen: 37
2401:b8c0:5800::/37 maxlen: 37
2401:b8c0:6000::/37 maxlen: 37
2401:b8c0:6800::/37 maxlen: 37
2401:b8c0:7000::/37 maxlen: 37
2401:b8c0:7800::/37 maxlen: 37
2401:b8c0:8000::/37 maxlen: 37
2401:b8c0:8800::/37 maxlen: 37
2401:b8c0:9000::/37 maxlen: 37
2401:b8c0:9800::/37 maxlen: 37
2401:b8c0:a000::/37 maxlen: 37
2401:b8c0:a800::/37 maxlen: 37
2401:b8c0:b000::/37 maxlen: 37
2401:b8c0:b800::/37 maxlen: 37
2401:b8c0:c000::/37 maxlen: 37
2401:b8c0:c800::/37 maxlen: 37
2401:b8c0:d000::/37 maxlen: 37
2401:b8c0:d800::/37 maxlen: 37
2401:b8c0:e000::/37 maxlen: 37
2401:b8c0:e800::/37 maxlen: 37
2401:b8c0:f000::/37 maxlen: 37
2401:b8c0:f800::/37 maxlen: 37
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9153646/6B8EFA5AFF9811E987C80A6AC4F9AE02/NJLv_pYisf_4gVlwA3Y8G6JKHgY.crl
rsync://rpki.apnic.net/member_repository/A9153646/6B8EFA5AFF9811E987C80A6AC4F9AE02/NJLv_pYisf_4gVlwA3Y8G6JKHgY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NJLv_pYisf_4gVlwA3Y8G6JKHgY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 13 Jun 2024 19:32:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1527 (0x5f7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9153646/serialNumber=3492EFFE9622B1FFF881597003763C1BA24A1E06
Validity
Not Before: Dec 24 19:07:09 2023 GMT
Not After : Jan 31 00:00:00 2025 GMT
Subject: CN=6588815d-c674
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:f6:b5:3f:c7:e5:d7:25:44:85:ff:fc:66:b8:
c5:43:6e:b4:9c:76:95:c3:44:65:bd:c0:34:1b:28:
42:f6:7c:8a:32:61:d0:ab:39:ba:bd:d7:2d:8b:81:
59:eb:8f:71:01:48:3e:a8:a1:b9:9b:02:ed:5e:0f:
b5:da:1f:ec:79:b3:95:97:53:bf:24:af:4e:b7:e9:
de:2b:86:ba:0c:55:27:6e:af:f4:33:ef:82:59:4c:
d1:4f:cc:14:c5:9c:65:80:9c:2c:59:f7:ff:1b:d6:
19:d1:b5:1f:82:8e:60:86:3a:ea:82:14:b7:16:4b:
67:ad:b3:4e:83:65:d0:e7:b9:86:2a:eb:4d:9e:68:
21:65:5c:30:da:ce:47:53:7d:42:0f:8f:e7:fe:2a:
44:16:92:ad:df:00:ba:0d:86:e7:67:01:65:a9:57:
75:8d:02:88:d4:93:9d:f6:6f:df:d9:89:41:89:52:
72:12:2a:a4:71:fb:fe:e4:a4:80:27:2c:38:cb:5b:
e6:58:69:0d:69:29:f4:5f:e3:53:53:1c:ca:00:c1:
32:e8:cd:1e:65:09:2c:a8:ea:4a:67:c3:a5:0e:52:
27:4e:54:2f:82:9b:99:dd:08:28:ec:e4:8c:46:27:
9a:3d:c7:57:26:73:79:af:35:df:56:85:f0:b4:77:
bb:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:38:CF:8A:BA:9D:D0:D1:33:86:0E:82:D1:BC:0E:E2:E5:9D:4F:BC
X509v3 Authority Key Identifier:
keyid:34:92:EF:FE:96:22:B1:FF:F8:81:59:70:03:76:3C:1B:A2:4A:1E:06
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9153646/6B8EFA5AFF9811E987C80A6AC4F9AE02/NJLv_pYisf_4gVlwA3Y8G6JKHgY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NJLv_pYisf_4gVlwA3Y8G6JKHgY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9153646/6B8EFA5AFF9811E987C80A6AC4F9AE02/94F63B5E526611EEB3469984C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.203.176.0/24
103.203.179.0/24
223.29.212.0/23
223.29.215.0/24
IPv6:
2401:b8c0::/32
Signature Algorithm: sha256WithRSAEncryption
38:cf:46:c2:7a:eb:46:5a:bf:81:2f:15:5d:40:fe:ac:b4:3b:
7c:50:f3:e6:6e:42:a2:0c:f6:a1:c2:45:bc:aa:e6:37:23:fe:
ea:94:2c:f3:8e:76:73:9b:97:0b:b7:bf:d5:a9:80:e8:d2:f7:
f2:dc:d6:a4:80:85:0e:55:91:43:1f:0d:81:98:cc:35:72:65:
d4:fb:2c:84:b3:cf:57:43:0b:29:c7:08:72:4c:6d:88:5e:9c:
a6:ff:69:89:bb:dd:a3:fc:cf:ef:2c:3b:09:f7:04:8a:55:07:
1d:60:b6:35:0f:b2:aa:73:36:d4:09:b8:a6:66:08:3d:f9:f3:
24:0e:59:b3:15:d6:3d:a3:35:00:62:21:a1:89:a3:3c:f8:b6:
6a:4e:08:96:d8:3e:73:1c:fc:b4:0a:17:6f:43:a1:01:4d:75:
35:89:08:d7:ab:02:2a:78:5f:5f:75:22:6d:58:28:42:ed:89:
c5:af:04:91:4e:5a:a5:14:86:ab:67:30:00:4b:52:6c:a7:a2:
00:0c:37:1a:06:8b:70:1f:df:78:88:40:38:ef:a3:1f:4f:18:
b3:b7:51:65:18:da:a1:31:54:0e:0f:72:23:6e:33:4e:10:1b:
1d:b5:1b:90:bc:25:17:14:af:f8:69:8b:95:47:30:5b:b8:ff:
f3:64:c2:4d
-----BEGIN CERTIFICATE-----
MIIFkjCCBHqgAwIBAgICBfcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NTM2NDYxMTAvBgNVBAUTKDM0OTJFRkZFOTYyMkIxRkZGODgxNTk3MDAzNzYzQzFC
QTI0QTFFMDYwHhcNMjMxMjI0MTkwNzA5WhcNMjUwMTMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02NTg4ODE1ZC1jNjc0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA2/a1P8fl1yVEhf/8ZrjFQ260nHaVw0RlvcA0GyhC9nyKMmHQqzm6vdcti4FZ
649xAUg+qKG5mwLtXg+12h/sebOVl1O/JK9Ot+neK4a6DFUnbq/0M++CWUzRT8wU
xZxlgJwsWff/G9YZ0bUfgo5ghjrqghS3FktnrbNOg2XQ57mGKutNnmghZVww2s5H
U31CD4/n/ipEFpKt3wC6DYbnZwFlqVd1jQKI1JOd9m/f2YlBiVJyEiqkcfv+5KSA
Jyw4y1vmWGkNaSn0X+NTUxzKAMEy6M0eZQksqOpKZ8OlDlInTlQvgpuZ3Qgo7OSM
RieaPcdXJnN5rzXfVoXwtHe7bwIDAQABo4ICtjCCArIwHQYDVR0OBBYEFGQ4z4q6
ndDRM4YOgtG8DuLlnU+8MB8GA1UdIwQYMBaAFDSS7/6WIrH/+IFZcAN2PBuiSh4G
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1MzY0Ni82QjhFRkE1QUZG
OTgxMUU5ODdDODBBNkFDNEY5QUUwMi9OSkx2X3BZaXNmXzRnVmx3QTNZOEc2SktI
Z1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL05KTHZfcFlpc2ZfNGdWbHdBM1k4RzZKS0hnWS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
NTM2NDYvNkI4RUZBNUFGRjk4MTFFOTg3QzgwQTZBQzRGOUFFMDIvOTRGNjNCNUU1
MjY2MTFFRUIzNDY5OTg0QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwQAYIKwYBBQUHAQcBAf8E
MTAvMB4EAgABMBgDBABny7ADBABny7MDBAHfHdQDBADfHdcwDQQCAAIwBwMFACQB
uMAwDQYJKoZIhvcNAQELBQADggEBADjPRsJ660Zav4EvFV1A/qy0O3xQ8+ZuQqIM
9qHCRbyq5jcj/uqULPOOdnOblwu3v9WpgOjS9/Lc1qSAhQ5VkUMfDYGYzDVyZdT7
LISzz1dDCynHCHJMbYhenKb/aYm73aP8z+8sOwn3BIpVBx1gtjUPsqpzNtQJuKZm
CD358yQOWbMV1j2jNQBiIaGJozz4tmpOCJbYPnMc/LQKF29DoQFNdTWJCNerAip4
X191Im1YKELticWvBJFOWqUUhqtnMABLUmynogAMNxoGi3Af33iIQDjvox9PGLO3
UWUY2qExVA4PciNuM04QGx21G5C8JRcUr/hpi5VHMFu4//Nkwk0=
-----END CERTIFICATE-----
Generated at Thu Jun 6 21:06:51 2024 by rpki-client on console-fra.rpki-client.org