Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/1D040B66134B11EFA9B7DA3CC4F9AE02.roa
File: 1D040B66134B11EFA9B7DA3CC4F9AE02.roa (raw, json)
Hash identifier: 4+MSNodm+KXxMLczoQWWB3mcV0WONM3s1OlHkDrAg5I=
Subject key identifier: B6:88:BC:C8:0D:03:33:88:4C:74:21:D2:A6:C1:F8:67:E7:1A:D0:B2
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: 9A7A
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/1D040B66134B11EFA9B7DA3CC4F9AE02.roa
Signing time: Tue 01 Oct 2024 06:28:53 +0000
ROA not before: Tue 01 Oct 2024 06:28:52 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 151734
IP address blocks: 43.250.252.0/24 maxlen: 24
43.250.254.0/24 maxlen: 24
43.250.255.0/24 maxlen: 24
103.76.122.0/24 maxlen: 24
103.76.123.0/24 maxlen: 24
103.98.53.0/24 maxlen: 24
103.109.180.0/22 maxlen: 24
103.111.228.0/23 maxlen: 24
103.118.180.0/22 maxlen: 24
103.170.58.0/23 maxlen: 24
103.178.59.0/24 maxlen: 24
103.204.169.0/24 maxlen: 24
103.211.56.0/24 maxlen: 24
103.212.136.0/23 maxlen: 24
150.242.200.0/22 maxlen: 24
2001:df2:1c40::/48 maxlen: 48
2401:7ee0::/48 maxlen: 48
2401:7ee0:1::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 02 Dec 2024 10:54:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 39546 (0x9a7a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Validity
Not Before: Oct 1 06:28:52 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=66fb96a4-5988
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:ed:05:2b:00:bf:e8:7b:f5:f8:4a:02:ab:25:
4a:3d:9c:2e:50:64:c4:11:91:21:27:c6:48:e9:50:
e2:48:fc:50:dc:10:38:f1:72:58:f4:a1:c5:5c:9b:
c6:0d:40:26:fe:6a:ac:af:8a:b1:c7:87:ba:a6:26:
34:19:05:24:0d:00:7d:24:b8:0c:23:af:32:44:10:
66:37:4f:b6:e6:e9:1f:07:77:56:68:b0:73:04:35:
2d:4c:d1:55:b2:c3:ea:d4:0c:f7:a8:82:37:4d:d6:
a4:da:df:3e:fe:54:2e:23:e0:c4:f9:78:3f:5f:ce:
9f:69:b4:85:55:ec:4b:41:7e:50:ad:b4:c0:b7:dd:
16:1d:c6:c9:c8:91:3f:08:56:29:3c:72:cd:80:97:
9a:e4:13:5d:1d:0e:9b:e1:08:35:fc:ad:fd:fc:d9:
f9:7d:f9:89:7d:9f:d0:d1:d8:2e:6e:89:70:7e:17:
3d:41:f4:93:40:b9:5a:04:f4:af:47:f9:63:cf:db:
f5:ad:a7:e4:ba:fa:73:14:5b:d6:83:23:13:a7:67:
f9:5a:c1:ba:56:4e:b6:20:b7:0d:94:f3:f6:ff:48:
7a:d7:42:e9:58:30:29:16:dc:b0:60:4a:86:9e:6d:
d2:f5:47:8e:ca:f7:b7:9f:53:21:34:02:80:15:50:
83:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:88:BC:C8:0D:03:33:88:4C:74:21:D2:A6:C1:F8:67:E7:1A:D0:B2
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/1D040B66134B11EFA9B7DA3CC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
43.250.252.0/24
43.250.254.0/23
103.76.122.0/23
103.98.53.0/24
103.109.180.0/22
103.111.228.0/23
103.118.180.0/22
103.170.58.0/23
103.178.59.0/24
103.204.169.0/24
103.211.56.0/24
103.212.136.0/23
150.242.200.0/22
IPv6:
2001:df2:1c40::/48
2401:7ee0::/47
Signature Algorithm: sha256WithRSAEncryption
35:3e:c7:cc:ec:c8:31:c1:48:c5:21:01:41:8d:d5:b3:37:1a:
62:dd:f8:d3:3b:d0:8f:f4:45:a6:92:59:9c:51:22:f4:0d:56:
3b:26:fa:4e:d2:a9:34:cd:2a:62:92:b5:fe:3e:12:0e:0b:e7:
f9:93:3e:0a:38:58:9f:37:e9:23:fb:48:37:10:fa:ff:ee:fb:
26:4f:91:21:52:f2:a6:c5:f5:8a:71:51:09:0c:b9:cd:84:34:
47:ef:17:71:d0:45:01:85:98:7e:6e:aa:43:99:48:8e:8d:43:
0c:09:79:ea:77:bf:ba:7b:f2:ea:59:d9:a4:e2:8e:63:d4:cc:
56:0e:68:89:ae:6c:af:2d:34:d5:69:7f:6e:32:d1:62:eb:62:
c3:c3:b1:84:06:d5:5a:a2:f6:58:2a:6a:10:fe:59:43:0e:87:
12:d3:5d:5a:65:c8:3a:dc:c5:78:84:52:89:11:d9:88:94:c8:
29:19:c3:96:04:c8:1d:de:ee:62:22:17:d7:8c:77:f9:e8:79:
6e:da:07:3f:f1:49:88:b1:09:69:47:39:7a:ca:dd:91:f1:e5:
61:6a:f0:67:da:d8:2b:ec:ca:f6:33:77:26:65:e4:ad:08:f2:
2c:92:c7:43:a1:10:6a:0a:e0:2c:f1:7a:21:50:fb:ae:7d:d4:
9d:ab:2d:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 13:17:05 2024 by rpki-client on console-ams.rpki-client.org