Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/09D19E4C0D4511EBA34AF263C4F9AE02.roa
File: 09D19E4C0D4511EBA34AF263C4F9AE02.roa (raw, json)
Hash identifier: Rde2YOHxX7v19W6edDRaTky56mQJ283bI8JHBtSuSqE=
Subject key identifier: A5:6F:66:5C:8D:15:CB:98:19:E0:68:DC:40:60:A0:3A:83:3C:58:AA
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: 90EC
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/09D19E4C0D4511EBA34AF263C4F9AE02.roa
Signing time: Thu 30 May 2024 16:29:59 +0000
ROA not before: Thu 30 May 2024 16:29:59 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 45775
IP address blocks: 27.131.208.0/21 maxlen: 24
43.226.28.0/22 maxlen: 24
43.231.240.0/22 maxlen: 24
43.251.88.0/22 maxlen: 24
45.113.100.0/22 maxlen: 24
45.123.108.0/22 maxlen: 24
45.124.4.0/22 maxlen: 24
45.250.48.0/22 maxlen: 24
103.17.84.0/22 maxlen: 24
103.42.124.0/22 maxlen: 24
103.42.156.0/22 maxlen: 24
103.42.172.0/22 maxlen: 24
103.44.172.0/22 maxlen: 24
103.51.56.0/22 maxlen: 24
103.52.252.0/22 maxlen: 24
103.192.116.0/22 maxlen: 24
103.214.136.0/22 maxlen: 24
103.219.44.0/22 maxlen: 24
110.172.52.0/22 maxlen: 24
113.21.64.0/20 maxlen: 24
139.5.228.0/22 maxlen: 24
223.223.128.0/19 maxlen: 24
2400:85c0::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 21 Feb 2025 05:15:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 37100 (0x90ec)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2
Validity
Not Before: May 30 16:29:59 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6658a987-7f9c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:46:52:00:99:34:c7:d1:9e:04:9e:83:28:44:
71:09:85:aa:c0:bb:34:9b:87:ae:0d:66:06:71:2a:
b7:58:83:fa:be:e8:39:19:57:bc:a3:f5:48:28:4c:
9a:b6:9a:3e:1a:62:6c:2f:98:6c:4e:d1:10:64:20:
f3:74:6c:59:73:cd:0a:4d:cb:11:c7:75:c7:c8:d2:
7f:72:2d:db:60:8e:9e:70:d8:0a:19:01:65:93:39:
87:00:e6:8b:2c:d7:f3:65:9b:c1:16:e6:d9:1b:bf:
fc:24:7b:f5:8f:a3:1d:97:22:4b:57:3e:78:8d:c5:
27:f4:88:7b:ea:31:40:a8:c8:e5:e9:8c:e8:25:9a:
0c:cf:ff:ce:d9:0f:06:11:d7:39:e3:83:37:fa:11:
3c:75:65:d1:eb:e8:b3:10:04:85:c2:b5:f7:88:4e:
8c:5a:cf:bc:3d:db:4b:98:c7:8c:b9:8f:c8:79:7c:
a6:79:07:5c:a1:9d:4d:39:a5:59:54:ee:08:24:2e:
b3:1e:c1:6c:d3:49:bb:ca:d3:39:19:ad:71:f4:ea:
f4:a4:7a:ad:35:34:c1:19:7b:f3:96:05:35:a8:3c:
26:42:c6:ab:b2:82:34:b1:bf:3c:71:15:16:51:da:
01:64:d4:e2:55:24:d4:db:4e:48:e9:b6:b8:ca:c4:
c2:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:6F:66:5C:8D:15:CB:98:19:E0:68:DC:40:60:A0:3A:83:3C:58:AA
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/09D19E4C0D4511EBA34AF263C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
27.131.208.0/21
43.226.28.0/22
43.231.240.0/22
43.251.88.0/22
45.113.100.0/22
45.123.108.0/22
45.124.4.0/22
45.250.48.0/22
103.17.84.0/22
103.42.124.0/22
103.42.156.0/22
103.42.172.0/22
103.44.172.0/22
103.51.56.0/22
103.52.252.0/22
103.192.116.0/22
103.214.136.0/22
103.219.44.0/22
110.172.52.0/22
113.21.64.0/20
139.5.228.0/22
223.223.128.0/19
IPv6:
2400:85c0::/32
Signature Algorithm: sha256WithRSAEncryption
49:4d:94:6b:f4:60:5a:fb:42:78:62:a4:58:8f:bd:0c:b5:9c:
0d:29:a6:94:0f:21:69:ce:d2:70:a2:c7:17:58:eb:67:c5:25:
5f:9d:61:8f:d1:63:52:ee:a7:6c:38:81:b5:18:b6:40:18:c5:
61:9c:a1:50:75:4e:6a:50:7a:fd:70:f0:39:6f:fb:5d:48:52:
5b:bb:49:70:e4:b4:13:b1:8c:43:8c:5e:22:3e:f1:ad:60:7c:
91:61:9d:cc:69:9c:d6:12:fa:9f:f5:13:51:e7:32:9c:95:f2:
93:18:fd:59:67:31:a1:71:82:92:ab:ac:90:a8:62:1e:82:55:
ab:ef:3a:75:6f:93:38:d5:73:6d:85:3b:1a:eb:0d:22:2c:83:
32:e0:09:d0:5a:fb:3e:de:fe:47:a0:22:37:04:62:af:54:d0:
db:c0:aa:ea:c4:a5:8b:78:ee:bf:c6:71:d2:64:f3:57:c1:70:
34:96:4b:60:af:b2:86:e6:bb:29:29:a9:df:57:2c:4e:ca:bf:
6b:72:04:d8:06:ef:ff:86:31:f6:59:f9:15:3f:63:e9:a0:11:
f0:93:16:f0:cf:2e:06:3d:19:a0:bb:f1:48:af:31:b6:8f:87:
d2:df:52:29:bd:d4:39:05:dd:ba:78:5e:9a:74:a0:75:3e:fd:
c3:67:a1:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 20:27:24 2025 by rpki-client