Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9160856/ED57795E4C7411E99E1B9956C4F9AE02/5318EFAC6BAE11EBA5B87E56C4F9AE02.roa
File: 5318EFAC6BAE11EBA5B87E56C4F9AE02.roa (raw, json)
Hash identifier: 1sGCnQcrQGfXtQTTEryWCHrm9alCbVYb+kSoPUTnLJw=
Subject key identifier: D4:4A:8E:0D:29:E4:A1:30:C1:CA:C2:DB:B7:4D:30:8C:AF:4F:49:26
Certificate issuer: /CN=A9160856/serialNumber=551F58A68C8FE6920B2EF0AC6E90A2D3F3588A76
Certificate serial: 0F78
Authority key identifier: 55:1F:58:A6:8C:8F:E6:92:0B:2E:F0:AC:6E:90:A2:D3:F3:58:8A:76
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VR9YpoyP5pILLvCsbpCi0_NYinY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9160856/ED57795E4C7411E99E1B9956C4F9AE02/5318EFAC6BAE11EBA5B87E56C4F9AE02.roa
Signing time: Sun 09 Jun 2024 11:14:25 +0000
ROA not before: Sun 09 Jun 2024 11:14:25 +0000
ROA not after: Sun 01 Dec 2024 00:00:00 +0000
asID: 132298
IP address blocks: 103.73.104.0/22 maxlen: 22
103.73.104.0/24 maxlen: 24
103.73.105.0/24 maxlen: 24
103.73.106.0/24 maxlen: 24
103.73.107.0/24 maxlen: 24
2406:f680::/32 maxlen: 36
2406:f680:1::/48 maxlen: 48
2406:f680:a01::/48 maxlen: 48
2406:f680:7000::/48 maxlen: 48
2406:f680:7001::/48 maxlen: 48
2406:f680:7011::/48 maxlen: 48
2406:f680:701a::/48 maxlen: 48
2406:f680:701b::/48 maxlen: 48
2406:f680:7100::/48 maxlen: 48
2406:f680:7101::/48 maxlen: 48
2406:f680:7102::/48 maxlen: 48
2406:f680:7103::/48 maxlen: 48
2406:f680:7104::/48 maxlen: 48
2406:f680:7105::/48 maxlen: 48
2406:f680:7106::/48 maxlen: 48
2406:f680:7107::/48 maxlen: 48
2406:f680:7108::/48 maxlen: 48
2406:f680:7109::/48 maxlen: 48
2406:f680:710a::/48 maxlen: 48
2406:f680:710b::/48 maxlen: 48
2406:f680:710c::/48 maxlen: 48
2406:f680:7111::/48 maxlen: 48
2406:f680:7112::/48 maxlen: 48
2406:f680:7113::/48 maxlen: 48
2406:f680:7114::/48 maxlen: 48
2406:f680:7115::/48 maxlen: 48
2406:f680:7116::/48 maxlen: 48
2406:f680:7117::/48 maxlen: 48
2406:f680:7118::/48 maxlen: 48
2406:f680:7119::/48 maxlen: 48
2406:f680:711a::/48 maxlen: 48
2406:f680:711b::/48 maxlen: 48
2406:f680:711c::/48 maxlen: 48
2406:f680:7121::/48 maxlen: 48
2406:f680:7122::/48 maxlen: 48
2406:f680:7123::/48 maxlen: 48
2406:f680:7124::/48 maxlen: 48
2406:f680:7125::/48 maxlen: 48
2406:f680:7126::/48 maxlen: 48
2406:f680:7127::/48 maxlen: 48
2406:f680:7128::/48 maxlen: 48
2406:f680:7129::/48 maxlen: 48
2406:f680:712a::/48 maxlen: 48
2406:f680:712b::/48 maxlen: 48
2406:f680:712c::/48 maxlen: 48
2406:f680:7131::/48 maxlen: 48
2406:f680:7132::/48 maxlen: 48
2406:f680:7133::/48 maxlen: 48
2406:f680:7134::/48 maxlen: 48
2406:f680:7135::/48 maxlen: 48
2406:f680:7136::/48 maxlen: 48
2406:f680:7137::/48 maxlen: 48
2406:f680:7138::/48 maxlen: 48
2406:f680:7139::/48 maxlen: 48
2406:f680:713a::/48 maxlen: 48
2406:f680:713b::/48 maxlen: 48
2406:f680:713c::/48 maxlen: 48
2406:f680:8001::/48 maxlen: 48
2406:f680:8100::/48 maxlen: 48
2406:f680:8101::/48 maxlen: 48
2406:f680:8102::/48 maxlen: 48
2406:f680:8103::/48 maxlen: 48
2406:f680:8104::/48 maxlen: 48
2406:f680:8105::/48 maxlen: 48
2406:f680:8106::/48 maxlen: 48
2406:f680:8107::/48 maxlen: 48
2406:f680:8108::/48 maxlen: 48
2406:f680:81ff::/48 maxlen: 48
2406:f680:8301::/48 maxlen: 48
2406:f680:8302::/48 maxlen: 48
2406:f680:8303::/48 maxlen: 48
2406:f680:8304::/48 maxlen: 48
2406:f680:8305::/48 maxlen: 48
2406:f680:8306::/48 maxlen: 48
2406:f680:8307::/48 maxlen: 48
2406:f680:8308::/48 maxlen: 48
2406:f680:8601::/48 maxlen: 48
2406:f680:8602::/48 maxlen: 48
2406:f680:8603::/48 maxlen: 48
2406:f680:8604::/48 maxlen: 48
2406:f680:8605::/48 maxlen: 48
2406:f680:8606::/48 maxlen: 48
2406:f680:8607::/48 maxlen: 48
2406:f680:8608::/48 maxlen: 48
2406:f680:8801::/48 maxlen: 48
2406:f680:8802::/48 maxlen: 48
2406:f680:8803::/48 maxlen: 48
2406:f680:8804::/48 maxlen: 48
2406:f680:8805::/48 maxlen: 48
2406:f680:8806::/48 maxlen: 48
2406:f680:8807::/48 maxlen: 48
2406:f680:8808::/48 maxlen: 48
2406:f680:8f00::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9160856/ED57795E4C7411E99E1B9956C4F9AE02/VR9YpoyP5pILLvCsbpCi0_NYinY.crl
rsync://rpki.apnic.net/member_repository/A9160856/ED57795E4C7411E99E1B9956C4F9AE02/VR9YpoyP5pILLvCsbpCi0_NYinY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VR9YpoyP5pILLvCsbpCi0_NYinY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 23 Jun 2024 14:50:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3960 (0xf78)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9160856/serialNumber=551F58A68C8FE6920B2EF0AC6E90A2D3F3588A76
Validity
Not Before: Jun 9 11:14:25 2024 GMT
Not After : Dec 1 00:00:00 2024 GMT
Subject: CN=66658e90-c98c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:7c:02:c7:32:6a:24:2f:4d:9b:b6:11:09:b5:
62:dc:f6:de:d6:c5:96:e6:28:e8:dc:70:7a:87:4d:
c5:1e:47:f5:88:5a:fd:24:66:ff:8a:65:f1:e0:e5:
e1:b3:cc:62:cf:3c:52:7f:ec:1a:f0:72:16:41:d3:
b0:3f:28:fb:2a:38:0a:02:43:d8:1c:71:1a:8b:c9:
4d:79:b9:81:0f:e3:66:56:ce:a0:ed:7a:58:47:64:
68:4b:ca:87:b9:b3:e0:b2:28:dc:f6:b2:d2:a7:fb:
12:2f:1a:a2:f0:52:58:cd:f8:1f:2a:30:38:da:f2:
c9:07:01:14:7b:f5:20:87:e0:7a:df:54:ab:4a:92:
1c:b4:70:05:0e:84:16:c8:31:ec:ec:ca:92:9a:00:
e5:f8:14:ca:5e:0b:44:f1:2f:c5:55:b2:43:ac:46:
08:ea:17:49:72:99:c5:ee:c8:c5:78:87:55:69:9b:
4f:c6:4b:b9:d8:7b:ee:ca:11:98:74:04:a8:36:43:
4c:13:93:28:7f:f4:19:79:65:a8:14:1a:3a:45:d3:
85:15:5e:a4:a2:48:09:e7:2a:ea:54:88:0b:2a:0b:
5b:3a:aa:f0:f3:f5:cd:f2:77:0b:fc:d9:41:20:fb:
d1:69:a7:a0:39:86:d7:d9:05:e7:67:fa:fc:bd:19:
4a:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:4A:8E:0D:29:E4:A1:30:C1:CA:C2:DB:B7:4D:30:8C:AF:4F:49:26
X509v3 Authority Key Identifier:
keyid:55:1F:58:A6:8C:8F:E6:92:0B:2E:F0:AC:6E:90:A2:D3:F3:58:8A:76
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9160856/ED57795E4C7411E99E1B9956C4F9AE02/VR9YpoyP5pILLvCsbpCi0_NYinY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VR9YpoyP5pILLvCsbpCi0_NYinY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9160856/ED57795E4C7411E99E1B9956C4F9AE02/5318EFAC6BAE11EBA5B87E56C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.73.104.0/22
IPv6:
2406:f680::/32
Signature Algorithm: sha256WithRSAEncryption
1e:b1:3b:20:a4:73:4f:13:02:e2:c0:48:a9:fc:38:f2:2c:51:
f0:53:4e:c8:1c:82:aa:13:2d:d9:2f:a0:c5:7e:57:34:c6:9a:
99:fe:20:16:be:c6:40:24:2c:7a:47:02:1b:6f:82:65:a4:ec:
6b:23:63:8b:ac:6d:c0:8e:3d:23:96:d0:60:09:c9:aa:e9:97:
f2:27:8e:6d:4e:08:31:23:78:18:af:1d:0a:2d:5d:ff:96:be:
ee:ff:3d:f9:06:3c:39:26:6d:17:27:ba:e9:7c:f4:16:48:2a:
40:13:04:1b:9d:33:c0:81:c1:4d:06:5d:f7:39:96:9c:b0:c8:
cc:00:2a:51:84:d5:1c:92:bb:bf:49:1a:70:33:e6:46:ac:e1:
65:23:11:49:97:9b:63:10:33:8f:6b:50:a5:fc:73:ad:4a:f9:
79:e3:1b:60:08:33:55:a6:9e:25:57:85:7d:d4:37:f3:e9:a7:
2b:44:36:36:9a:a1:86:90:98:bd:9e:be:ae:f0:0b:4b:e1:ab:
f9:89:c0:f1:46:26:6a:4b:a4:bc:2f:38:0c:3e:7e:61:4b:ac:
93:40:0c:be:21:f3:d3:21:f1:d4:97:64:dd:07:da:bf:2e:84:
7d:91:3d:88:09:57:5b:aa:23:f4:5c:2f:a5:c7:64:a3:e6:a2:
4c:f7:fc:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 19:10:21 2024 by rpki-client on console-ams.rpki-client.org