Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9158E3F/C24322BA544611EA8C05651DC4F9AE02/AC36F4D4AA9F11EEBEEB100EC4F9AE02.roa
File: AC36F4D4AA9F11EEBEEB100EC4F9AE02.roa (raw, json)
Hash identifier: a31NhKXb2lrWAAka7e5K4Qmwgb9+qAfYXBMo6SjT30E=
Subject key identifier: 83:3F:27:C6:5A:76:7C:5B:74:84:2E:AD:7A:EF:16:3E:C6:F7:88:EE
Certificate issuer: /CN=A9158E3F/serialNumber=7E313AB7FF26E783E03C07851612751881AE4918
Certificate serial: 0A27
Authority key identifier: 7E:31:3A:B7:FF:26:E7:83:E0:3C:07:85:16:12:75:18:81:AE:49:18
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fjE6t_8m54PgPAeFFhJ1GIGuSRg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9158E3F/C24322BA544611EA8C05651DC4F9AE02/AC36F4D4AA9F11EEBEEB100EC4F9AE02.roa
Signing time: Thu 04 Jan 2024 02:15:54 +0000
ROA not before: Thu 04 Jan 2024 02:15:54 +0000
ROA not after: Thu 31 Oct 2024 00:00:00 +0000
asID: 17819
IP address blocks: 36.255.39.0/24 maxlen: 24
119.27.0.0/19 maxlen: 19
119.27.0.0/24 maxlen: 24
119.27.1.0/24 maxlen: 24
119.27.32.0/20 maxlen: 20
119.27.50.0/23 maxlen: 23
119.27.52.0/22 maxlen: 22
119.27.56.0/22 maxlen: 22
119.27.60.0/23 maxlen: 23
122.50.64.0/19 maxlen: 19
122.50.104.0/21 maxlen: 21
122.50.112.0/24 maxlen: 24
122.50.113.0/24 maxlen: 24
122.50.114.0/24 maxlen: 24
122.50.115.0/24 maxlen: 24
122.50.120.0/22 maxlen: 22
122.50.124.0/22 maxlen: 22
122.50.124.0/23 maxlen: 23
122.50.126.0/24 maxlen: 24
180.189.0.0/21 maxlen: 21
180.189.8.0/21 maxlen: 21
180.189.32.0/21 maxlen: 21
180.189.40.0/21 maxlen: 21
180.189.48.0/22 maxlen: 22
183.177.0.0/20 maxlen: 20
183.177.16.0/20 maxlen: 20
183.177.32.0/20 maxlen: 20
202.167.224.0/23 maxlen: 23
202.167.226.0/24 maxlen: 24
202.167.227.0/24 maxlen: 24
202.167.230.0/23 maxlen: 23
202.167.232.0/24 maxlen: 24
202.167.234.0/23 maxlen: 23
202.167.236.0/22 maxlen: 22
202.167.240.0/22 maxlen: 22
202.167.243.0/24 maxlen: 24
202.167.244.0/22 maxlen: 22
202.167.248.0/23 maxlen: 23
202.167.252.0/23 maxlen: 23
202.167.254.0/24 maxlen: 24
202.167.255.0/24 maxlen: 24
202.177.192.0/24 maxlen: 24
202.177.193.0/24 maxlen: 24
202.177.195.0/24 maxlen: 24
202.177.196.0/23 maxlen: 23
202.177.198.0/24 maxlen: 24
202.177.199.0/24 maxlen: 24
202.177.200.0/23 maxlen: 23
202.177.201.0/24 maxlen: 24
202.177.202.0/23 maxlen: 23
202.177.204.0/23 maxlen: 23
202.177.207.0/24 maxlen: 24
203.190.224.0/23 maxlen: 23
203.190.224.0/24 maxlen: 24
203.190.226.0/24 maxlen: 24
203.190.228.0/23 maxlen: 23
203.190.232.0/22 maxlen: 22
203.190.232.0/24 maxlen: 24
203.190.236.0/22 maxlen: 22
2407:b000::/33 maxlen: 33
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9158E3F/C24322BA544611EA8C05651DC4F9AE02/fjE6t_8m54PgPAeFFhJ1GIGuSRg.crl
rsync://rpki.apnic.net/member_repository/A9158E3F/C24322BA544611EA8C05651DC4F9AE02/fjE6t_8m54PgPAeFFhJ1GIGuSRg.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fjE6t_8m54PgPAeFFhJ1GIGuSRg.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 25 May 2024 19:51:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2599 (0xa27)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9158E3F/serialNumber=7E313AB7FF26E783E03C07851612751881AE4918
Validity
Not Before: Jan 4 02:15:54 2024 GMT
Not After : Oct 31 00:00:00 2024 GMT
Subject: CN=659614da-086a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:fc:83:92:0c:ad:d0:b0:35:ad:6f:e3:3e:e4:
5d:5f:41:e9:d6:d6:44:f8:14:16:1d:fa:8e:5c:17:
f3:34:ea:62:3f:23:f1:6c:44:77:0c:1c:9a:59:1d:
ca:b8:28:26:d0:2a:72:79:f6:d5:0c:b9:9d:26:96:
4f:c0:74:61:59:6c:2a:e3:fb:62:b5:3b:0b:08:fd:
51:1e:be:15:81:22:81:c3:ed:25:fe:84:66:25:b5:
22:82:51:cc:92:97:1f:8a:92:a4:ff:74:69:70:a4:
3c:d0:f8:93:aa:97:bf:57:c2:a6:92:36:59:88:af:
e3:54:3c:5c:45:94:98:4c:6e:a2:07:f9:9c:fd:86:
ed:69:41:a2:0b:d2:bb:12:8a:f1:db:8e:ac:b1:55:
f3:28:25:c1:f5:74:f9:30:3b:76:80:04:78:ca:90:
77:52:7e:e4:99:1a:c3:da:52:38:e9:3c:f7:1a:b6:
11:24:5d:21:ca:7c:db:0d:fa:90:9a:f0:85:a3:8a:
22:ba:1b:3f:bf:35:29:f8:5d:f2:e5:a1:98:ec:76:
f5:cd:04:5e:24:a3:eb:33:d3:ba:69:0e:56:48:82:
8c:16:23:5f:5a:08:c4:cf:56:0e:90:66:2e:f2:5a:
93:a6:df:1b:2b:15:1c:d6:64:d2:a0:67:66:bd:24:
5f:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:3F:27:C6:5A:76:7C:5B:74:84:2E:AD:7A:EF:16:3E:C6:F7:88:EE
X509v3 Authority Key Identifier:
keyid:7E:31:3A:B7:FF:26:E7:83:E0:3C:07:85:16:12:75:18:81:AE:49:18
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9158E3F/C24322BA544611EA8C05651DC4F9AE02/fjE6t_8m54PgPAeFFhJ1GIGuSRg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fjE6t_8m54PgPAeFFhJ1GIGuSRg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9158E3F/C24322BA544611EA8C05651DC4F9AE02/AC36F4D4AA9F11EEBEEB100EC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
36.255.39.0/24
119.27.0.0-119.27.47.255
119.27.50.0-119.27.61.255
122.50.64.0/19
122.50.104.0-122.50.115.255
122.50.120.0/21
180.189.0.0/20
180.189.32.0-180.189.51.255
183.177.0.0-183.177.47.255
202.167.224.0/22
202.167.230.0-202.167.232.255
202.167.234.0-202.167.249.255
202.167.252.0/22
202.177.192.0/23
202.177.195.0-202.177.205.255
202.177.207.0/24
203.190.224.0-203.190.226.255
203.190.228.0/23
203.190.232.0/21
IPv6:
2407:b000::/33
Signature Algorithm: sha256WithRSAEncryption
3d:18:a4:51:33:7b:bd:27:6c:c1:9b:34:29:f0:b0:40:80:b4:
74:c1:18:73:9b:41:63:8b:ea:d1:d2:55:1e:e1:11:6c:2f:a9:
b0:dd:8b:91:02:2a:08:dc:0b:5f:cd:b2:5c:89:c1:07:e0:86:
e2:18:18:10:7f:90:50:66:d5:fb:76:f0:69:4b:89:8f:ac:ef:
f3:88:0d:b7:14:27:6e:ee:7d:96:b9:dc:fd:26:15:7e:46:10:
1c:97:45:b9:05:dc:93:63:e5:c6:c2:f8:95:ce:f5:98:0b:9e:
72:80:d6:17:9a:dc:78:fe:64:0c:cd:f2:ff:2f:cf:85:87:c4:
73:5b:1d:f9:37:bf:dd:77:d4:3b:96:64:0e:cb:e7:2d:ff:7d:
5b:29:75:b0:d5:f4:96:95:d4:14:83:27:45:cc:4d:b1:26:61:
6e:3a:b2:26:19:e2:e2:c4:ea:73:72:ba:7c:40:3a:15:40:2d:
eb:7a:17:15:4d:95:d0:b8:32:d2:e7:66:8b:ef:cb:3a:f3:27:
86:0c:b1:60:d7:76:16:8d:d3:29:de:c7:58:01:26:21:ad:67:
10:7c:29:22:6c:9e:b5:da:a4:3b:df:01:42:29:15:7c:b7:ef:
41:da:84:d7:09:dc:93:aa:e2:b2:f4:50:3f:38:d3:d3:79:26:
eb:42:36:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 21:24:21 2024 by rpki-client on console-fra.rpki-client.org