Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/355AF8BCBCF811EA815A1024C4F9AE02.roa
File: 355AF8BCBCF811EA815A1024C4F9AE02.roa (raw, json)
Hash identifier: PqL1bKA5Za8GcMK/UqWctHszbiaOwod1D4tXvrUUzFo=
Subject key identifier: C0:44:21:37:B5:1F:11:E5:7A:F4:DD:C5:D4:76:C7:4A:7A:C2:95:06
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: 8847
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/355AF8BCBCF811EA815A1024C4F9AE02.roa
Signing time: Thu 30 May 2024 15:53:49 +0000
ROA not before: Thu 30 May 2024 15:53:49 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 10225
IP address blocks: 103.41.74.0/23 maxlen: 24
103.119.113.0/24 maxlen: 24
103.145.36.0/23 maxlen: 24
103.195.244.0/22 maxlen: 22
103.195.244.0/24 maxlen: 24
103.195.245.0/24 maxlen: 24
103.195.246.0/24 maxlen: 24
103.195.247.0/24 maxlen: 24
202.41.0.0/23 maxlen: 23
202.53.64.0/19 maxlen: 19
202.53.64.0/24 maxlen: 24
202.53.65.0/24 maxlen: 24
202.53.65.160/29 maxlen: 29
202.53.66.0/24 maxlen: 24
202.53.67.0/24 maxlen: 24
202.53.68.0/24 maxlen: 24
202.53.68.96/29 maxlen: 29
202.53.69.0/24 maxlen: 24
202.53.70.0/24 maxlen: 24
202.53.71.0/24 maxlen: 24
202.53.72.0/24 maxlen: 24
202.53.73.0/24 maxlen: 24
202.53.74.0/24 maxlen: 24
202.53.75.0/24 maxlen: 24
202.53.76.0/24 maxlen: 24
202.53.77.0/24 maxlen: 24
202.53.78.0/24 maxlen: 24
202.53.79.0/24 maxlen: 24
202.53.79.0/25 maxlen: 25
202.53.79.0/29 maxlen: 29
202.53.79.32/27 maxlen: 27
202.53.79.64/27 maxlen: 27
202.53.79.128/27 maxlen: 27
202.53.79.240/28 maxlen: 28
202.53.80.0/24 maxlen: 24
202.53.81.0/24 maxlen: 24
202.53.82.0/24 maxlen: 24
202.53.83.0/24 maxlen: 24
202.53.84.0/24 maxlen: 24
202.53.85.0/24 maxlen: 24
202.53.86.0/24 maxlen: 24
202.53.87.0/24 maxlen: 24
202.53.88.0/24 maxlen: 24
202.53.89.0/24 maxlen: 24
202.53.90.0/24 maxlen: 24
202.53.91.0/24 maxlen: 24
202.53.92.0/24 maxlen: 24
202.53.93.0/24 maxlen: 24
202.53.94.0/24 maxlen: 24
202.53.95.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 29 Nov 2024 06:14:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 34887 (0x8847)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Validity
Not Before: May 30 15:53:49 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6658a10d-a5df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:1f:7b:f3:d8:1e:cd:e9:69:5e:51:0b:77:e3:
5b:4a:d6:e1:10:cb:be:9c:d4:71:76:7c:31:46:a9:
2c:98:26:88:ba:f7:c0:78:81:f8:24:95:33:92:77:
1b:88:83:f0:b2:a0:ed:fd:3d:c7:20:4c:42:4b:11:
e2:f2:07:31:9f:37:39:b0:42:82:f0:3b:3b:b0:38:
d6:16:b3:a9:76:3c:ff:0c:0e:36:0e:22:32:75:d9:
13:f9:43:92:0d:1d:39:66:46:0f:0a:e1:70:05:61:
42:58:8d:99:63:68:0e:e6:db:ee:89:76:ed:ad:1a:
10:3f:b4:e5:b2:d3:40:18:f8:4f:f5:11:df:7d:66:
28:ae:72:09:4d:02:c0:a0:ae:6b:7f:16:84:3c:6b:
45:83:a5:a4:a5:d4:3f:ab:69:f5:64:a8:31:06:1b:
b6:fb:d3:da:d4:2e:aa:e1:3f:3e:7a:97:d8:e7:47:
89:03:84:07:a3:16:a2:b7:b2:cf:0f:63:a7:89:37:
36:9d:a8:e5:43:05:08:9c:0b:23:5a:fa:24:2e:a4:
eb:34:83:d0:e4:33:6a:80:8e:7b:26:a0:14:b8:5d:
4c:d0:d9:1d:c8:43:c0:37:7b:25:49:6d:b5:ab:12:
7a:f0:ff:cf:6c:a8:87:48:27:c0:55:f3:da:23:86:
97:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:44:21:37:B5:1F:11:E5:7A:F4:DD:C5:D4:76:C7:4A:7A:C2:95:06
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/355AF8BCBCF811EA815A1024C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.41.74.0/23
103.119.113.0/24
103.145.36.0/23
103.195.244.0/22
202.41.0.0/23
202.53.64.0/19
Signature Algorithm: sha256WithRSAEncryption
5e:22:cb:8a:91:d0:d7:d7:11:46:60:f6:24:cb:8e:d5:45:94:
14:4c:db:19:f5:cb:9c:cd:2e:1b:80:b5:72:8a:83:ab:2c:23:
e4:0c:30:f1:c7:52:3e:15:67:0a:b9:59:a4:03:70:15:75:97:
2f:7b:74:a9:4c:93:38:6b:03:67:cf:64:c3:e2:d6:d2:4c:7b:
18:70:02:02:09:00:a8:dc:3f:e1:f8:97:c3:bd:fa:50:bb:04:
04:76:da:3a:f3:6a:db:c7:1c:01:60:48:d8:83:49:e3:d4:e1:
79:86:a6:72:a5:d8:4c:f8:00:f8:e5:30:23:1d:7e:3b:3b:81:
14:b3:bd:9c:7d:07:23:21:e3:84:a0:aa:6f:65:5c:b4:1f:85:
ec:4e:81:60:c1:1d:da:e1:f2:d5:c2:94:91:2d:e8:a6:e7:f8:
15:da:af:9e:d3:c5:5b:91:32:48:e4:87:a1:ac:0a:f3:0b:1b:
08:fa:3a:d5:dc:ea:5d:04:ec:dc:f3:79:a2:69:4c:7a:6c:20:
87:30:4e:8e:e0:11:44:6d:c9:e1:e8:1f:7c:8c:67:ec:35:b3:
20:c9:2e:17:21:9d:4a:d4:e3:ce:ab:08:cd:af:1a:b8:21:83:
7f:6a:d8:8f:95:5a:84:94:ad:e1:a2:58:9a:93:18:40:e7:a6:
bf:73:dd:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 11:47:39 2024 by rpki-client on console-ams.rpki-client.org