Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91798AD/70EFB4ACFE2A11E68F2C5A13C4F9AE02/AD3B2582EF9A11EDA4E50366C4F9AE02.roa
File: AD3B2582EF9A11EDA4E50366C4F9AE02.roa (raw, json)
Hash identifier: 9hP/dOJZ68J9wG9WujkuydAwcpbwE5GTRmYGdVkPk84=
Subject key identifier: 18:E4:18:0F:18:1F:84:AA:A5:AB:A0:7B:24:86:4C:B9:11:94:A8:D7
Certificate issuer: /CN=A91798AD/serialNumber=7C1A0F48EA43231FA3343D592821EF29E8D2B31B
Certificate serial: 1AF7
Authority key identifier: 7C:1A:0F:48:EA:43:23:1F:A3:34:3D:59:28:21:EF:29:E8:D2:B3:1B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fBoPSOpDIx-jND1ZKCHvKejSsxs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91798AD/70EFB4ACFE2A11E68F2C5A13C4F9AE02/AD3B2582EF9A11EDA4E50366C4F9AE02.roa
Signing time: Fri 22 Sep 2023 16:33:27 +0000
ROA not before: Fri 22 Sep 2023 16:33:27 +0000
ROA not after: Thu 31 Oct 2024 00:00:00 +0000
asID: 4761
IP address blocks: 114.0.0.0/16 maxlen: 24
114.1.0.0/16 maxlen: 24
114.2.0.0/16 maxlen: 24
114.3.0.0/16 maxlen: 24
114.4.0.0/16 maxlen: 24
114.5.0.0/16 maxlen: 24
114.6.0.0/16 maxlen: 24
114.7.0.0/16 maxlen: 24
114.8.0.0/16 maxlen: 24
114.9.0.0/16 maxlen: 24
114.10.0.0/16 maxlen: 23
114.10.0.0/19 maxlen: 24
114.10.33.0/24 maxlen: 24
114.10.34.0/23 maxlen: 24
114.10.36.0/22 maxlen: 24
114.10.40.0/21 maxlen: 24
114.10.48.0/20 maxlen: 24
114.10.64.0/18 maxlen: 24
114.10.128.0/17 maxlen: 24
114.11.0.0/16 maxlen: 24
114.12.0.0/16 maxlen: 24
114.13.0.0/16 maxlen: 24
114.14.0.0/16 maxlen: 24
114.15.0.0/16 maxlen: 24
124.195.6.0/23 maxlen: 24
124.195.8.0/23 maxlen: 24
124.195.12.0/23 maxlen: 24
124.195.26.0/23 maxlen: 24
124.195.28.0/23 maxlen: 24
124.195.32.0/23 maxlen: 24
124.195.34.0/23 maxlen: 24
124.195.36.0/23 maxlen: 24
124.195.52.0/24 maxlen: 24
124.195.54.0/23 maxlen: 24
124.195.58.0/23 maxlen: 24
124.195.124.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91798AD/70EFB4ACFE2A11E68F2C5A13C4F9AE02/fBoPSOpDIx-jND1ZKCHvKejSsxs.crl
rsync://rpki.apnic.net/member_repository/A91798AD/70EFB4ACFE2A11E68F2C5A13C4F9AE02/fBoPSOpDIx-jND1ZKCHvKejSsxs.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fBoPSOpDIx-jND1ZKCHvKejSsxs.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 07 Jun 2024 16:47:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6903 (0x1af7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91798AD/serialNumber=7C1A0F48EA43231FA3343D592821EF29E8D2B31B
Validity
Not Before: Sep 22 16:33:27 2023 GMT
Not After : Oct 31 00:00:00 2024 GMT
Subject: CN=650dc1d6-f2af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:c7:62:98:85:2f:06:01:e8:2a:7a:e2:c9:1f:
46:ff:8a:d9:1c:18:db:eb:a9:8d:2d:2e:ee:a9:b6:
45:c5:00:20:54:ea:8c:9f:c2:95:6d:e4:96:90:f3:
89:5d:af:ae:e8:3b:5f:c1:e6:4a:43:ba:86:1d:68:
26:3c:3b:83:dc:f4:4d:72:18:71:7f:14:e8:35:3a:
84:b2:3c:d9:dc:7c:a7:ba:20:55:51:a4:51:70:53:
51:3c:e9:14:8d:d8:08:02:eb:f7:41:a3:04:6b:4e:
85:a9:02:04:17:d1:0c:1a:8f:2c:23:8f:d7:68:89:
d2:c4:ce:e1:ed:ad:8b:1e:cd:a2:50:af:12:da:72:
a5:39:cc:04:3d:21:25:01:64:af:d5:d0:3d:82:f8:
c6:d9:ba:9b:74:b4:ed:73:3a:51:a3:a4:75:4e:d7:
8f:26:56:b9:23:80:7c:3c:0a:35:71:1d:ba:d7:07:
59:5a:1c:c2:59:c4:3f:30:c2:15:1c:ad:51:8d:fe:
3f:db:8c:2a:b8:28:fa:42:ef:62:c1:d0:e0:b1:43:
fc:54:4c:76:93:6b:d2:c9:3d:34:9d:74:35:9c:15:
96:74:78:75:0f:b0:d6:15:a6:1a:5f:06:a9:3e:b4:
00:88:93:36:62:de:41:11:46:6b:4a:ed:2f:e4:bc:
70:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:E4:18:0F:18:1F:84:AA:A5:AB:A0:7B:24:86:4C:B9:11:94:A8:D7
X509v3 Authority Key Identifier:
keyid:7C:1A:0F:48:EA:43:23:1F:A3:34:3D:59:28:21:EF:29:E8:D2:B3:1B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91798AD/70EFB4ACFE2A11E68F2C5A13C4F9AE02/fBoPSOpDIx-jND1ZKCHvKejSsxs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fBoPSOpDIx-jND1ZKCHvKejSsxs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91798AD/70EFB4ACFE2A11E68F2C5A13C4F9AE02/AD3B2582EF9A11EDA4E50366C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
114.0.0.0/12
124.195.6.0-124.195.9.255
124.195.12.0/23
124.195.26.0-124.195.29.255
124.195.32.0-124.195.37.255
124.195.52.0/24
124.195.54.0/23
124.195.58.0/23
124.195.124.0/23
Signature Algorithm: sha256WithRSAEncryption
93:ca:94:41:62:7d:1b:76:8b:50:45:8e:5e:df:ff:49:e9:69:
51:2d:96:45:d0:01:98:b9:de:ac:d7:bc:ba:42:74:30:a4:ca:
d4:89:21:f2:9e:eb:df:d7:40:61:85:7e:c1:39:25:47:fa:a4:
00:50:29:c5:b5:83:de:90:1d:0e:60:6d:66:a7:2b:df:62:68:
84:09:88:10:fc:4c:02:a2:44:57:ca:de:80:09:c7:0c:ac:2f:
cd:90:0f:a7:e8:06:70:0a:cf:6c:fd:50:41:94:bf:d7:a4:b3:
2b:56:e2:80:e9:e8:98:11:54:60:6a:34:e5:93:8e:8e:64:7f:
bf:8e:5c:d5:66:ed:a8:97:4f:7c:ce:d3:ce:37:97:36:6e:47:
6e:53:3f:1f:ff:25:23:74:b8:3a:f2:3d:26:87:3e:f0:11:b7:
40:ff:38:d2:b1:a8:b3:0b:b9:2c:3e:be:ff:3e:07:37:96:00:
a3:4c:b9:05:ea:95:b8:57:d8:3d:89:0d:6c:a6:c6:91:9e:91:
60:fb:8f:23:31:e4:94:c6:c3:be:5e:96:f3:7b:f9:79:4d:28:
a7:81:f0:b9:4d:73:f2:fa:23:c7:65:79:c7:32:20:c3:d2:8e:
d7:da:ac:c3:52:9f:02:5c:36:04:c4:72:6c:6a:6f:36:99:1c:
65:d4:79:a0
-----BEGIN CERTIFICATE-----
MIIFuDCCBKCgAwIBAgICGvcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
Nzk4QUQxMTAvBgNVBAUTKDdDMUEwRjQ4RUE0MzIzMUZBMzM0M0Q1OTI4MjFFRjI5
RThEMkIzMUIwHhcNMjMwOTIyMTYzMzI3WhcNMjQxMDMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02NTBkYzFkNi1mMmFmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA18dimIUvBgHoKnriyR9G/4rZHBjb66mNLS7uqbZFxQAgVOqMn8KVbeSWkPOJ
Xa+u6DtfweZKQ7qGHWgmPDuD3PRNchhxfxToNTqEsjzZ3HynuiBVUaRRcFNRPOkU
jdgIAuv3QaMEa06FqQIEF9EMGo8sI4/XaInSxM7h7a2LHs2iUK8S2nKlOcwEPSEl
AWSv1dA9gvjG2bqbdLTtczpRo6R1TtePJla5I4B8PAo1cR261wdZWhzCWcQ/MMIV
HK1Rjf4/24wquCj6Qu9iwdDgsUP8VEx2k2vSyT00nXQ1nBWWdHh1D7DWFaYaXwap
PrQAiJM2Yt5BEUZrSu0v5LxwPwIDAQABo4IC3DCCAtgwHQYDVR0OBBYEFBjkGA8Y
H4SqpaugeySGTLkRlKjXMB8GA1UdIwQYMBaAFHwaD0jqQyMfozQ9WSgh7yno0rMb
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3OThBRC83MEVGQjRBQ0ZF
MkExMUU2OEYyQzVBMTNDNEY5QUUwMi9mQm9QU09wREl4LWpORDFaS0NIdktlalNz
eHMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2ZCb1BTT3BESXgtak5EMVpLQ0h2S2VqU3N4cy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
Nzk4QUQvNzBFRkI0QUNGRTJBMTFFNjhGMkM1QTEzQzRGOUFFMDIvQUQzQjI1ODJF
RjlBMTFFREE0RTUwMzY2QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwZgYIKwYBBQUHAQcBAf8E
VzBVMFMEAgABME0DAwRyADAMAwQBfMMGAwQBfMMIAwQBfMMMMAwDBAF8wxoDBAF8
wxwwDAMEBXzDIAMEAXzDJAMEAHzDNAMEAXzDNgMEAXzDOgMEAXzDfDANBgkqhkiG
9w0BAQsFAAOCAQEAk8qUQWJ9G3aLUEWOXt//SelpUS2WRdABmLnerNe8ukJ0MKTK
1Ikh8p7r39dAYYV+wTklR/qkAFApxbWD3pAdDmBtZqcr32JohAmIEPxMAqJEV8re
gAnHDKwvzZAPp+gGcArPbP1QQZS/16SzK1bigOnomBFUYGo05ZOOjmR/v45c1Wbt
qJdPfM7TzjeXNm5HblM/H/8lI3S4OvI9Joc+8BG3QP840rGoswu5LD6+/z4HN5YA
o0y5BeqVuFfYPYkNbKbGkZ6RYPuPIzHklMbDvl6W83v5eU0op4HwuU1z8vojx2V5
xzIgw9KO19qsw1KfAlw2BMRybGpvNpkcZdR5oA==
-----END CERTIFICATE-----
Generated at Fri May 31 17:44:25 2024 by rpki-client on console-fra.rpki-client.org