Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/5E0E98488B6511EDB611CA3CC4F9AE02.roa
File: 5E0E98488B6511EDB611CA3CC4F9AE02.roa (raw, json)
Hash identifier: +D2fj58ioHP3uTiLRC7v9b7pk3HHqtIEfxnPpLu2yRM=
Subject key identifier: 11:D7:C0:2C:6C:38:D3:65:B5:4E:35:8E:64:30:4E:81:E3:AD:93:09
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: 97FF
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/5E0E98488B6511EDB611CA3CC4F9AE02.roa
Signing time: Tue 03 Sep 2024 09:07:13 +0000
ROA not before: Tue 03 Sep 2024 09:07:13 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 137109
IP address blocks: 103.109.12.0/22 maxlen: 24
103.137.48.0/24 maxlen: 24
103.137.49.0/24 maxlen: 24
103.137.50.0/24 maxlen: 24
103.137.51.0/24 maxlen: 24
103.139.226.0/24 maxlen: 24
103.152.180.0/24 maxlen: 24
103.160.166.0/24 maxlen: 24
103.160.167.0/24 maxlen: 24
103.161.148.0/24 maxlen: 24
103.173.50.0/24 maxlen: 24
103.173.51.0/24 maxlen: 24
103.176.212.0/23 maxlen: 24
103.176.238.0/24 maxlen: 24
103.176.239.0/24 maxlen: 24
103.186.246.0/24 maxlen: 24
103.186.247.0/24 maxlen: 24
103.187.36.0/23 maxlen: 24
103.189.98.0/23 maxlen: 24
2405:95c0::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 02 Dec 2024 10:54:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 38911 (0x97ff)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Validity
Not Before: Sep 3 09:07:13 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=66d6d1c1-394d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:45:8a:6a:fa:e2:a5:62:ff:d5:0d:08:88:a7:
f1:58:26:36:68:7b:7b:d3:d9:5c:72:5a:eb:e0:cc:
9e:dc:04:db:4f:ab:12:77:f2:ce:a7:95:09:bc:fb:
10:c4:8a:7d:65:84:f6:6f:60:32:23:6a:7c:09:82:
38:9f:2b:8e:4e:6a:b6:e3:07:d8:c3:04:7e:3c:a2:
2f:e1:5c:e3:fb:e0:33:27:75:d3:b3:88:bc:a9:eb:
3a:72:b0:0a:e8:d8:2b:26:59:e4:8b:90:ad:0a:f6:
0e:15:c4:b0:3e:be:e1:74:db:33:3e:54:1c:45:6e:
b7:7f:87:6b:d6:0c:94:2c:a4:e6:d5:48:ec:0a:9e:
82:c0:a4:f3:68:de:e1:0b:d7:0f:4b:51:84:fb:1a:
ee:9a:43:f7:5f:a8:1f:61:17:94:39:2f:d4:ca:d2:
11:f3:73:5d:fd:3e:59:c6:99:30:f2:fc:7f:f7:2d:
91:e2:01:bf:59:9a:ad:02:ee:66:cb:ac:18:75:9f:
ec:d3:44:fb:53:f0:2f:ce:a2:c0:eb:84:85:3a:58:
3f:54:4f:a1:cc:ad:11:a8:72:fe:92:26:9e:e0:e3:
b8:34:f8:dc:67:24:7b:c7:bd:92:b0:3c:d6:f5:f4:
3c:29:51:8b:4c:f3:45:a1:dd:e8:d6:aa:c3:79:77:
44:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:D7:C0:2C:6C:38:D3:65:B5:4E:35:8E:64:30:4E:81:E3:AD:93:09
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/5E0E98488B6511EDB611CA3CC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.109.12.0/22
103.137.48.0/22
103.139.226.0/24
103.152.180.0/24
103.160.166.0/23
103.161.148.0/24
103.173.50.0/23
103.176.212.0/23
103.176.238.0/23
103.186.246.0/23
103.187.36.0/23
103.189.98.0/23
IPv6:
2405:95c0::/32
Signature Algorithm: sha256WithRSAEncryption
52:22:55:aa:55:f7:df:bc:b1:e5:a4:96:f9:cb:0b:0a:af:4b:
ba:43:52:70:6a:88:c4:66:67:8d:e4:53:3f:91:83:e0:ed:90:
f2:c7:70:8c:73:c3:5c:44:d5:d3:da:f3:69:9f:f3:9f:5f:3b:
e3:d2:94:38:0d:7c:8a:f1:2c:b2:5e:14:21:95:ce:dd:c6:2a:
80:8f:d1:57:24:4a:c8:2c:84:6e:1b:89:d2:70:b0:5d:da:b7:
ad:59:29:4e:be:f6:3c:87:a4:65:fd:72:80:05:e0:f4:5a:c5:
43:3a:5f:15:fd:89:7b:96:7d:b6:af:b1:c8:0d:87:ac:83:7e:
e1:d0:a2:e2:a2:7f:ac:6f:57:06:49:6d:d7:a7:f8:a8:bc:c8:
9a:3b:c3:ee:06:26:95:e2:b5:b6:db:5f:0d:e1:d8:18:11:5a:
90:77:d5:b8:ad:88:db:8c:75:5d:54:e6:0c:91:2c:9a:12:2a:
f7:55:b3:04:1c:b0:f8:d6:ce:6a:0b:04:d7:54:90:9b:6c:c1:
28:93:5d:88:9a:06:49:e9:12:5f:34:70:5d:cd:15:51:42:12:
1a:6c:ef:99:22:03:d6:8e:a9:ec:dd:f3:08:31:e2:e1:92:52:
df:2d:ec:50:92:87:38:11:09:6c:4e:d2:72:41:55:9e:ab:92:
0f:ef:8e:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 13:17:14 2024 by rpki-client on console-ams.rpki-client.org