Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A916A983/0E082E72CD0F11E89D9FF165C4F9AE02/429A130C13D811EEBE72B647C4F9AE02.roa
File: 429A130C13D811EEBE72B647C4F9AE02.roa (raw, json)
Hash identifier: 5Sp02YWI4qKwr03L/LXuy/8eldra6xwZUUFMUFk3GoA=
Subject key identifier: 99:A0:94:97:D1:09:4E:3C:BC:AB:C5:24:D3:66:63:06:40:63:F3:16
Certificate issuer: /CN=A916A983/serialNumber=88D87B102F5C2771C367064E2049B68A903C71B5
Certificate serial: 11C3
Authority key identifier: 88:D8:7B:10:2F:5C:27:71:C3:67:06:4E:20:49:B6:8A:90:3C:71:B5
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/iNh7EC9cJ3HDZwZOIEm2ipA8cbU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916A983/0E082E72CD0F11E89D9FF165C4F9AE02/429A130C13D811EEBE72B647C4F9AE02.roa
Signing time: Wed 02 Aug 2023 17:34:58 +0000
ROA not before: Wed 02 Aug 2023 17:34:58 +0000
ROA not after: Mon 30 Sep 2024 00:00:00 +0000
asID: 1221
IP address blocks: 137.147.0.0/16 maxlen: 16
138.130.0.0/16 maxlen: 16
138.217.0.0/16 maxlen: 16
139.130.0.0/16 maxlen: 16
139.134.0.0/16 maxlen: 16
139.168.0.0/16 maxlen: 16
143.238.0.0/16 maxlen: 16
144.130.0.0/15 maxlen: 15
144.130.0.0/17 maxlen: 17
144.130.144.0/20 maxlen: 20
144.130.160.0/19 maxlen: 19
144.130.192.0/18 maxlen: 18
144.131.0.0/16 maxlen: 16
144.132.0.0/14 maxlen: 14
144.136.0.0/15 maxlen: 15
144.139.0.0/16 maxlen: 16
144.140.0.0/16 maxlen: 16
147.69.0.0/16 maxlen: 16
149.135.0.0/16 maxlen: 16
165.228.0.0/16 maxlen: 16
192.67.84.0/24 maxlen: 24
192.70.219.0/24 maxlen: 24
192.73.66.0/24 maxlen: 24
192.74.139.0/24 maxlen: 24
192.74.140.0/22 maxlen: 26
192.74.144.0/20 maxlen: 20
192.74.160.0/19 maxlen: 19
192.74.192.0/20 maxlen: 20
192.74.208.0/24 maxlen: 24
192.82.143.0/24 maxlen: 24
192.111.105.0/24 maxlen: 24
192.131.27.0/24 maxlen: 24
192.131.28.0/23 maxlen: 23
192.131.30.0/24 maxlen: 24
192.148.116.0/22 maxlen: 22
192.148.120.0/21 maxlen: 21
192.148.128.0/19 maxlen: 19
192.148.160.0/22 maxlen: 22
192.148.164.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A916A983/0E082E72CD0F11E89D9FF165C4F9AE02/iNh7EC9cJ3HDZwZOIEm2ipA8cbU.crl
rsync://rpki.apnic.net/member_repository/A916A983/0E082E72CD0F11E89D9FF165C4F9AE02/iNh7EC9cJ3HDZwZOIEm2ipA8cbU.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/iNh7EC9cJ3HDZwZOIEm2ipA8cbU.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 07 Jun 2024 18:05:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4547 (0x11c3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916A983/serialNumber=88D87B102F5C2771C367064E2049B68A903C71B5
Validity
Not Before: Aug 2 17:34:58 2023 GMT
Not After : Sep 30 00:00:00 2024 GMT
Subject: CN=64ca93c2-3374
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:00:63:a6:66:88:4f:de:db:9c:5b:94:5c:a0:
b4:13:c9:dc:8e:d1:bb:89:0a:1e:a1:4a:75:b6:2d:
37:76:f1:ab:72:95:b2:a4:7d:69:39:82:ac:29:f4:
fb:d6:54:c6:3b:2b:c4:f0:b2:ea:2f:30:25:98:83:
8c:9a:96:6c:03:a9:39:f2:0f:d4:2f:46:24:d7:1b:
df:28:16:a2:78:ba:b5:5b:ec:e3:9e:e9:2b:d2:24:
4d:f4:28:62:fa:78:8e:d9:0c:db:88:51:a5:9a:c7:
26:5a:6e:7b:cb:10:aa:ea:b7:ca:43:e5:00:62:bf:
91:2d:05:f4:46:1e:81:97:76:54:d5:2e:16:d1:18:
48:3a:a2:dc:52:b1:9b:91:03:77:7d:3d:b4:04:59:
b9:bf:2b:87:d0:c0:77:69:a9:a1:8f:7f:0d:68:c1:
aa:ae:ab:6b:2b:f5:5d:e6:1c:9b:bf:52:92:5a:01:
a3:d9:11:de:5d:e9:c6:6f:f3:c3:0c:e8:8e:73:cf:
24:e1:57:25:27:31:fc:6a:14:d5:c0:67:01:fb:cf:
39:6d:bd:bc:14:32:4d:8d:37:30:11:97:61:6e:65:
8b:28:fe:2d:34:1e:cc:c8:c2:5d:28:4a:c8:55:19:
70:de:c3:18:fa:83:f7:e1:12:36:13:dd:5d:49:f1:
3d:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:A0:94:97:D1:09:4E:3C:BC:AB:C5:24:D3:66:63:06:40:63:F3:16
X509v3 Authority Key Identifier:
keyid:88:D8:7B:10:2F:5C:27:71:C3:67:06:4E:20:49:B6:8A:90:3C:71:B5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916A983/0E082E72CD0F11E89D9FF165C4F9AE02/iNh7EC9cJ3HDZwZOIEm2ipA8cbU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/iNh7EC9cJ3HDZwZOIEm2ipA8cbU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916A983/0E082E72CD0F11E89D9FF165C4F9AE02/429A130C13D811EEBE72B647C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
137.147.0.0/16
138.130.0.0/16
138.217.0.0/16
139.130.0.0/16
139.134.0.0/16
139.168.0.0/16
143.238.0.0/16
144.130.0.0-144.137.255.255
144.139.0.0-144.140.255.255
147.69.0.0/16
149.135.0.0/16
165.228.0.0/16
192.67.84.0/24
192.70.219.0/24
192.73.66.0/24
192.74.139.0-192.74.208.255
192.82.143.0/24
192.111.105.0/24
192.131.27.0-192.131.30.255
192.148.116.0-192.148.165.255
Signature Algorithm: sha256WithRSAEncryption
0a:e9:5d:11:06:3e:73:be:25:62:86:4c:74:e0:10:d6:de:5f:
45:38:8d:1b:cc:5d:9c:5b:10:66:88:94:27:6e:6f:8e:14:ad:
38:0f:8d:29:07:4b:e0:0e:68:32:48:3e:ab:14:e7:54:e8:2f:
ac:6c:69:8d:a0:a7:9b:a6:bc:e1:3c:00:00:3a:49:1c:0d:75:
d0:9a:6a:f1:d7:c5:5a:be:d3:d8:4d:21:e3:28:67:70:c4:db:
ed:a7:77:27:73:6c:91:7d:a9:ea:f5:26:87:f5:96:25:52:b8:
f8:b6:8a:d4:01:20:c5:bf:87:17:90:2b:56:65:59:b1:ec:e5:
4f:88:f9:c9:03:db:9b:50:ec:b7:b6:f9:39:ca:bb:0d:c5:54:
60:6d:d9:4c:77:b8:88:b0:8b:24:39:fa:b2:fa:4f:15:4a:bc:
2d:ef:3b:bc:9f:0b:5f:92:67:9e:f5:e9:2f:6c:07:eb:0c:d4:
f1:c6:18:db:f8:31:0b:d9:23:8d:35:a2:da:a5:c3:d4:40:e2:
14:62:af:11:d2:94:c8:e8:9f:56:b2:07:c5:40:5e:19:52:ef:
84:3a:2f:bb:79:7f:95:0c:70:cd:cf:00:7a:f9:f1:30:2f:89:
40:4d:f0:ea:bc:69:32:0b:be:2a:26:17:dd:8a:08:a5:3c:5f:
56:cc:c6:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 31 19:47:49 2024 by rpki-client on console-fra.rpki-client.org