Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/1EB1232C377D11EE8DE0982DC4F9AE02.roa
File: 1EB1232C377D11EE8DE0982DC4F9AE02.roa (raw, json)
Hash identifier: qL0MTWou9CD1Y4AKOh+Q3LH9AA4iyrM0pltj6DAXMAk=
Subject key identifier: 53:33:41:42:F8:7E:A6:84:36:F9:1C:0F:A8:DA:BC:1A:89:88:FD:8D
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: 9127
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/1EB1232C377D11EE8DE0982DC4F9AE02.roa
Signing time: Thu 30 May 2024 16:30:58 +0000
ROA not before: Thu 30 May 2024 16:30:58 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 59162
IP address blocks: 43.225.68.0/22 maxlen: 24
43.225.212.0/22 maxlen: 24
45.114.152.0/24 maxlen: 24
45.114.153.0/24 maxlen: 24
45.114.154.0/24 maxlen: 24
45.114.155.0/24 maxlen: 24
45.115.168.0/22 maxlen: 24
45.117.112.0/24 maxlen: 24
45.117.113.0/24 maxlen: 24
45.117.114.0/24 maxlen: 24
45.117.115.0/24 maxlen: 24
45.119.236.0/24 maxlen: 24
45.119.237.0/24 maxlen: 24
45.119.238.0/24 maxlen: 24
45.119.239.0/24 maxlen: 24
45.123.8.0/22 maxlen: 22
45.123.8.0/24 maxlen: 24
45.123.9.0/24 maxlen: 24
45.123.10.0/24 maxlen: 24
45.123.11.0/24 maxlen: 24
45.248.12.0/22 maxlen: 24
45.251.40.0/22 maxlen: 24
103.17.48.0/22 maxlen: 24
103.38.202.0/24 maxlen: 24
103.38.203.0/24 maxlen: 24
103.40.64.0/24 maxlen: 24
103.40.65.0/24 maxlen: 24
103.40.66.0/24 maxlen: 24
103.40.67.0/24 maxlen: 24
103.57.176.0/24 maxlen: 24
103.57.177.0/24 maxlen: 24
103.57.178.0/24 maxlen: 24
103.57.179.0/24 maxlen: 24
103.106.152.0/24 maxlen: 24
103.106.153.0/24 maxlen: 24
103.106.154.0/24 maxlen: 24
103.106.155.0/24 maxlen: 24
103.117.152.0/22 maxlen: 24
103.134.112.0/24 maxlen: 24
103.134.113.0/24 maxlen: 24
103.146.233.0/24 maxlen: 24
103.193.200.0/22 maxlen: 24
103.211.59.0/24 maxlen: 24
103.219.216.0/22 maxlen: 24
103.239.140.0/24 maxlen: 24
103.239.141.0/24 maxlen: 24
103.239.142.0/24 maxlen: 24
103.239.143.0/24 maxlen: 24
103.253.208.0/22 maxlen: 24
103.254.206.0/24 maxlen: 24
103.254.207.0/24 maxlen: 24
103.255.72.0/22 maxlen: 24
114.134.20.0/24 maxlen: 24
114.134.21.0/24 maxlen: 24
114.134.22.0/24 maxlen: 24
114.134.23.0/24 maxlen: 24
2001:df2:59c0::/48 maxlen: 48
2001:df7::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 02 Dec 2024 10:54:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 37159 (0x9127)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Validity
Not Before: May 30 16:30:58 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6658a9c1-8519
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:25:c0:d4:4c:88:87:7c:0d:33:dc:65:68:af:
5f:71:45:f8:a0:c4:6b:31:1d:21:25:96:28:26:10:
ac:86:20:12:27:97:aa:a1:7a:7a:ca:3f:a9:06:19:
81:52:6f:3f:3c:13:b2:81:d3:c5:42:14:b4:07:d0:
e4:9f:37:cd:c9:8e:4b:f7:97:62:3b:8b:5c:2e:ba:
33:bd:a0:e0:bc:11:ac:43:cf:c2:fa:6e:9b:8e:58:
ef:67:2d:ab:41:03:bb:3a:fe:72:5e:ff:dc:60:81:
f8:bd:34:49:ce:7d:1d:f6:8a:ae:d0:48:0c:30:71:
26:98:2b:c3:86:10:16:6a:62:02:18:4f:4f:7e:11:
57:89:75:74:6f:f6:f8:10:bc:5c:fe:dc:53:ac:95:
18:a6:12:af:7b:cb:0f:d6:75:8b:85:58:8b:93:36:
85:9f:01:ea:db:96:a2:52:7e:cf:f6:9e:14:7d:be:
e9:71:13:bc:ae:b1:83:da:c1:fe:78:2a:fb:60:0d:
0b:59:e0:b0:8f:5f:8f:d5:65:b2:99:a0:d6:29:11:
42:4d:d9:81:52:88:de:ec:3b:ca:62:f4:4f:96:f4:
d1:70:e7:97:c0:95:7a:4c:64:8c:9b:8e:11:ca:db:
fd:c2:83:d9:9e:8c:74:d5:02:6b:fd:cc:a3:9a:02:
02:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:33:41:42:F8:7E:A6:84:36:F9:1C:0F:A8:DA:BC:1A:89:88:FD:8D
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/1EB1232C377D11EE8DE0982DC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
43.225.68.0/22
43.225.212.0/22
45.114.152.0/22
45.115.168.0/22
45.117.112.0/22
45.119.236.0/22
45.123.8.0/22
45.248.12.0/22
45.251.40.0/22
103.17.48.0/22
103.38.202.0/23
103.40.64.0/22
103.57.176.0/22
103.106.152.0/22
103.117.152.0/22
103.134.112.0/23
103.146.233.0/24
103.193.200.0/22
103.211.59.0/24
103.219.216.0/22
103.239.140.0/22
103.253.208.0/22
103.254.206.0/23
103.255.72.0/22
114.134.20.0/22
IPv6:
2001:df2:59c0::/48
2001:df7::/48
Signature Algorithm: sha256WithRSAEncryption
0f:ea:0c:30:9b:cb:7b:1c:12:72:0f:03:52:04:16:17:65:11:
eb:67:09:5d:1d:41:90:00:d3:44:68:14:f3:d5:9b:92:d2:8a:
b3:1b:f4:ff:81:4f:4c:75:0e:73:21:cc:d4:64:a0:bf:c8:65:
a3:d6:09:cf:e7:64:db:bb:5f:dc:49:5e:00:86:e1:e3:62:b9:
ac:09:52:03:ec:24:34:0a:f4:03:cc:c8:46:d3:b8:59:08:21:
89:1c:72:1f:c8:76:80:0c:dd:cf:e4:d8:d2:42:a7:27:05:95:
8f:1c:09:1a:d7:d8:7f:3d:8f:4b:42:3d:58:1a:88:a8:fb:ba:
05:05:5b:9d:bd:eb:f5:af:be:f0:8c:fd:e7:ed:2c:ed:7a:a5:
06:77:bd:69:4e:a8:44:54:19:64:e3:ce:a7:c1:73:88:a1:a2:
10:16:8a:76:0f:20:04:b8:17:49:74:93:e2:ea:44:86:10:53:
b0:5c:8d:d6:89:32:8c:75:e8:91:ee:5a:c9:19:63:89:db:df:
64:b0:b7:14:10:da:6c:c6:48:85:24:0a:bd:52:93:ce:ac:32:
e2:5c:00:eb:6f:99:ca:4f:49:f9:ac:6d:db:73:40:26:96:0c:
cf:a4:7d:c8:3c:cf:4c:22:b1:dd:ef:57:38:bd:44:d2:4d:d1:
16:b4:c0:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 13:17:05 2024 by rpki-client on console-ams.rpki-client.org