Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/24B6939CA8BA11EF9536EE0CC4F9AE02.roa
File: 24B6939CA8BA11EF9536EE0CC4F9AE02.roa (raw, json)
Hash identifier: kfqdmW/8lmWYO5FGPs+U1kEmqR0R/QWMfeHd3rsjqik=
Subject key identifier: 33:61:E2:D9:D1:3E:A7:7D:DF:03:5D:B3:C8:F9:D0:AB:44:A1:56:22
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: 9DB3
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/24B6939CA8BA11EF9536EE0CC4F9AE02.roa
Signing time: Fri 22 Nov 2024 10:28:00 +0000
ROA not before: Fri 22 Nov 2024 10:28:00 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 133594
IP address blocks: 14.102.0.0/22 maxlen: 24
14.102.3.0/24 maxlen: 24
14.102.22.0/23 maxlen: 24
14.102.24.0/22 maxlen: 24
14.102.28.0/22 maxlen: 24
14.102.32.0/22 maxlen: 24
14.102.36.0/23 maxlen: 24
14.102.38.0/24 maxlen: 24
14.102.40.0/22 maxlen: 24
14.102.43.0/24 maxlen: 24
14.102.44.0/24 maxlen: 24
14.102.45.0/24 maxlen: 24
14.102.48.0/24 maxlen: 24
14.102.50.0/24 maxlen: 24
14.102.56.0/23 maxlen: 24
14.102.57.0/24 maxlen: 24
14.102.59.0/24 maxlen: 24
14.102.64.0/22 maxlen: 24
14.102.66.0/24 maxlen: 24
14.102.68.0/22 maxlen: 24
14.102.72.0/22 maxlen: 24
14.102.76.0/23 maxlen: 24
14.102.78.0/24 maxlen: 24
14.102.80.0/22 maxlen: 24
14.102.88.0/24 maxlen: 24
14.102.92.0/22 maxlen: 24
14.102.96.0/23 maxlen: 24
14.102.99.0/24 maxlen: 24
14.102.100.0/23 maxlen: 24
14.102.103.0/24 maxlen: 24
14.102.104.0/22 maxlen: 24
14.102.108.0/22 maxlen: 24
14.102.112.0/22 maxlen: 24
14.102.116.0/22 maxlen: 24
14.102.120.0/22 maxlen: 24
14.102.123.0/24 maxlen: 24
14.102.125.0/24 maxlen: 24
14.102.126.0/23 maxlen: 24
110.172.136.0/24 maxlen: 24
110.172.150.0/24 maxlen: 24
110.172.168.0/24 maxlen: 24
111.235.64.0/22 maxlen: 24
118.91.176.0/24 maxlen: 24
202.89.70.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 02 Dec 2024 10:54:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 40371 (0x9db3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Validity
Not Before: Nov 22 10:28:00 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=67405cb0-bea8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:34:08:6b:38:c8:19:bb:7a:15:97:2b:6b:bb:
dd:eb:8f:3d:2d:22:97:37:63:93:c5:bd:c0:97:6a:
74:3c:63:fb:ee:7f:33:4d:f7:e4:d1:d2:48:e6:e0:
fd:af:ba:c2:9a:09:f0:af:a5:05:3a:1d:fe:c4:0d:
cb:a2:c8:13:b6:7e:b6:d2:77:6e:61:65:71:21:08:
74:ea:bc:5a:87:52:50:22:da:56:eb:9d:7f:f3:08:
a6:6e:2b:65:49:a1:7f:fe:e8:ed:1a:30:68:88:9f:
b8:71:80:1d:63:f1:d9:94:bd:1a:f0:84:a7:4e:6c:
87:44:1f:3c:c3:da:cd:29:50:4e:7f:27:00:95:e5:
38:14:ce:ed:70:c2:01:a4:02:7b:90:c7:53:f2:19:
0c:2a:5d:3c:dd:7b:bd:b4:d8:f6:a6:a9:ff:f8:c1:
bc:15:28:25:51:68:57:d1:d5:c7:99:5e:53:4c:fc:
34:b5:68:34:76:33:09:bb:85:f3:ef:bd:29:16:e5:
36:87:18:6d:f8:99:31:14:4f:e9:77:04:00:26:8c:
79:d7:61:20:fb:af:77:88:83:29:9d:35:fe:a3:d5:
3c:52:df:a1:39:74:d8:b2:28:a7:5e:2f:40:46:40:
2d:a1:c5:3e:f2:ae:f2:b5:5f:c7:fb:fa:9e:71:c1:
ed:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:61:E2:D9:D1:3E:A7:7D:DF:03:5D:B3:C8:F9:D0:AB:44:A1:56:22
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/24B6939CA8BA11EF9536EE0CC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
14.102.0.0/22
14.102.22.0-14.102.38.255
14.102.40.0-14.102.45.255
14.102.48.0/24
14.102.50.0/24
14.102.56.0/23
14.102.59.0/24
14.102.64.0-14.102.78.255
14.102.80.0/22
14.102.88.0/24
14.102.92.0-14.102.97.255
14.102.99.0-14.102.101.255
14.102.103.0-14.102.123.255
14.102.125.0-14.102.127.255
110.172.136.0/24
110.172.150.0/24
110.172.168.0/24
111.235.64.0/22
118.91.176.0/24
202.89.70.0/24
Signature Algorithm: sha256WithRSAEncryption
83:b3:c9:c1:77:7c:db:d6:e5:1d:d0:8b:6b:a7:40:42:92:70:
03:06:4e:b3:ed:fd:c6:8c:b5:26:d9:e9:0f:93:2c:bb:8b:ca:
69:b9:47:80:6a:5a:58:ce:b8:f4:f5:89:a7:62:c3:b6:a0:a7:
01:0c:0d:b0:61:6a:64:d2:e3:64:45:65:44:01:41:05:1b:40:
66:67:e7:46:5c:6f:4b:c9:5f:b3:31:8f:aa:b4:a9:44:0c:b0:
56:22:ba:3e:29:c2:96:37:1a:b6:64:b9:e6:87:76:2f:de:f9:
dd:f0:92:3a:3e:4f:b2:f4:a5:a7:08:2b:5c:10:a3:e3:b8:61:
17:10:20:5f:3b:81:c9:09:0e:cf:2b:2f:f0:91:33:f9:d4:1b:
cd:2f:30:50:e6:17:61:11:6c:1a:ff:e9:2a:4e:2d:da:9c:8b:
36:12:11:05:68:8d:46:2c:53:c0:e7:da:1b:94:36:b2:e7:da:
b2:8a:b0:35:f7:c3:6f:00:20:3f:00:ef:8f:6f:23:a7:29:e6:
53:f7:17:73:91:8f:37:dc:dd:49:54:b8:18:fc:ce:e9:b9:17:
4e:1f:87:e9:65:1a:71:04:75:12:88:20:6d:de:f3:f5:79:00:
b3:9f:c9:34:71:4f:10:e4:d2:3d:56:df:1c:27:96:75:b9:f6:
26:eb:ac:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 13:17:06 2024 by rpki-client on console-ams.rpki-client.org