Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/539F25389CF911EFAE531D20C4F9AE02.roa
File: 539F25389CF911EFAE531D20C4F9AE02.roa (raw, json)
Hash identifier: Jzu0R5zw5dUZ1P89+HwY3w/GC8zX0lhtq8ypYkOo3qw=
Subject key identifier: 7A:0E:C7:90:B2:B0:60:58:A0:65:5C:CE:50:DC:58:32:65:C6:51:34
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: 9CE9
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/539F25389CF911EFAE531D20C4F9AE02.roa
Signing time: Thu 07 Nov 2024 11:13:33 +0000
ROA not before: Thu 07 Nov 2024 11:13:33 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 133647
IP address blocks: 43.229.162.0/24 maxlen: 24
43.230.156.0/22 maxlen: 24
45.115.252.0/22 maxlen: 24
45.116.68.0/22 maxlen: 24
103.38.70.0/24 maxlen: 24
103.43.4.0/22 maxlen: 24
103.50.4.0/22 maxlen: 24
103.55.6.0/23 maxlen: 24
103.61.102.0/23 maxlen: 24
103.69.216.0/22 maxlen: 24
103.70.144.0/22 maxlen: 24
103.70.176.0/23 maxlen: 24
103.79.112.0/22 maxlen: 24
103.87.48.0/24 maxlen: 24
103.87.49.0/24 maxlen: 24
103.91.68.0/22 maxlen: 24
103.93.176.0/22 maxlen: 24
103.109.72.0/23 maxlen: 24
103.122.85.0/24 maxlen: 24
103.129.194.0/24 maxlen: 24
103.129.195.0/24 maxlen: 24
103.144.37.0/24 maxlen: 24
103.156.168.0/23 maxlen: 24
103.157.160.0/23 maxlen: 24
103.159.154.0/23 maxlen: 24
103.161.230.0/23 maxlen: 24
103.161.232.0/24 maxlen: 24
103.161.233.0/24 maxlen: 24
103.174.105.0/24 maxlen: 24
103.175.76.0/24 maxlen: 24
103.175.77.0/24 maxlen: 24
103.176.71.0/24 maxlen: 24
103.177.61.0/24 maxlen: 24
103.214.97.0/24 maxlen: 24
103.220.28.0/24 maxlen: 24
103.220.29.0/24 maxlen: 24
103.220.30.0/24 maxlen: 24
103.220.31.0/24 maxlen: 24
103.237.172.0/24 maxlen: 24
103.237.173.0/24 maxlen: 24
103.237.174.0/24 maxlen: 24
103.237.175.0/24 maxlen: 24
110.172.163.0/24 maxlen: 24
175.111.180.0/24 maxlen: 24
175.111.182.0/24 maxlen: 24
175.111.183.0/24 maxlen: 24
202.89.73.0/24 maxlen: 24
2001:df0:dc80::/48 maxlen: 48
2001:df1:b280::/48 maxlen: 48
2001:df1:f440::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 29 Nov 2024 06:14:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 40169 (0x9ce9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Validity
Not Before: Nov 7 11:13:33 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=672ca0dd-84ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:5c:36:22:83:68:6a:f3:3d:f6:5f:73:50:4c:
87:fb:47:bc:99:65:4b:c9:1b:fa:ba:fe:06:c8:81:
66:66:5d:c5:ba:f8:31:f2:b5:ba:d7:c3:5b:4e:de:
23:1b:9a:b9:76:69:f8:83:9f:b6:cc:3c:48:f7:c8:
35:8a:ff:ce:cd:47:93:c9:93:0b:50:33:93:a4:82:
6f:e1:19:74:2b:78:6b:34:73:ac:dd:ca:8f:1f:13:
18:1e:5e:62:df:74:9f:85:e6:c4:e8:cd:93:1f:5d:
bf:a4:d8:f9:42:c5:65:3e:e4:7a:19:63:2c:1d:49:
50:bc:c6:6f:9b:9a:45:d9:1e:18:46:38:7b:f1:b0:
63:b2:a8:bc:7d:d3:41:c1:45:71:b2:dc:35:2f:1d:
f0:41:49:2b:ac:e3:68:fd:9e:32:86:52:88:c7:64:
34:4b:ac:46:38:c7:a9:7d:97:39:87:c6:fe:ce:e2:
3b:44:55:9c:86:a6:af:2e:32:7d:9c:9a:88:c2:a2:
d2:cb:46:e3:86:c4:54:10:c7:98:e2:92:85:58:92:
4a:c8:6d:60:98:cf:34:1a:6d:27:4f:4c:2e:d1:1b:
88:c8:92:90:15:13:85:4e:e9:3c:69:ab:a3:42:c0:
68:f6:17:bb:01:c0:97:4f:bc:c1:e9:89:9e:24:39:
2a:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:0E:C7:90:B2:B0:60:58:A0:65:5C:CE:50:DC:58:32:65:C6:51:34
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/539F25389CF911EFAE531D20C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
43.229.162.0/24
43.230.156.0/22
45.115.252.0/22
45.116.68.0/22
103.38.70.0/24
103.43.4.0/22
103.50.4.0/22
103.55.6.0/23
103.61.102.0/23
103.69.216.0/22
103.70.144.0/22
103.70.176.0/23
103.79.112.0/22
103.87.48.0/23
103.91.68.0/22
103.93.176.0/22
103.109.72.0/23
103.122.85.0/24
103.129.194.0/23
103.144.37.0/24
103.156.168.0/23
103.157.160.0/23
103.159.154.0/23
103.161.230.0-103.161.233.255
103.174.105.0/24
103.175.76.0/23
103.176.71.0/24
103.177.61.0/24
103.214.97.0/24
103.220.28.0/22
103.237.172.0/22
110.172.163.0/24
175.111.180.0/24
175.111.182.0/23
202.89.73.0/24
IPv6:
2001:df0:dc80::/48
2001:df1:b280::/48
2001:df1:f440::/48
Signature Algorithm: sha256WithRSAEncryption
23:ab:44:50:5b:d1:12:a0:89:24:8f:d8:ec:e3:10:b6:36:77:
7f:61:e4:c2:88:2f:e0:94:65:67:d6:35:dc:a2:82:3c:e7:bb:
a6:2c:2f:b7:f5:61:8e:e0:32:b2:dd:32:13:b6:08:e7:68:e9:
50:e6:33:0d:6e:6c:3e:d9:dd:8c:2b:bd:70:f7:84:fd:c9:2f:
75:25:13:2f:51:93:b2:41:07:0d:99:9f:da:5d:de:00:cc:a8:
6c:be:b9:6f:20:ce:49:49:ea:0d:fc:57:58:ff:dd:7d:d4:d8:
59:81:a8:8a:59:d3:76:2a:06:eb:c0:be:65:39:5c:5d:e9:e5:
6b:79:43:30:25:d5:97:5a:19:16:be:63:c4:5e:3a:5d:d9:5a:
7c:18:5c:59:62:d3:dd:e4:3c:4f:ad:27:0f:d1:28:c4:f4:f4:
d2:25:41:52:59:7a:22:2a:06:05:48:14:1a:17:f1:c9:9a:3f:
a1:22:a9:59:f1:ff:2b:33:96:d4:b9:8a:c9:6c:11:86:9c:fe:
17:02:b8:7d:0e:f0:fa:50:7a:20:e5:20:c0:d3:c1:2c:e2:61:
2b:6d:84:24:57:c3:e8:43:5d:4e:33:fa:62:f6:97:5f:17:68:
91:41:e0:7c:c3:8d:6a:7e:65:3d:f6:37:9f:cd:fe:97:77:60:
6e:f6:95:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 11:17:38 2024 by rpki-client on console-fra.rpki-client.org