Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/6421A826459E11EE9D78EB42C4F9AE02.roa
File: 6421A826459E11EE9D78EB42C4F9AE02.roa (raw, json)
Hash identifier: qmY7+9GwzqGClJDp6sp9n7DG2KL8+WTZOu3RtQE+qzs=
Subject key identifier: FF:53:10:42:BA:20:26:D5:0D:FD:7F:BE:BC:24:35:1B:4C:2A:1C:6E
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: 9D54
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/6421A826459E11EE9D78EB42C4F9AE02.roa
Signing time: Mon 18 Nov 2024 05:13:29 +0000
ROA not before: Mon 18 Nov 2024 05:13:29 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 138311
IP address blocks: 103.96.40.0/24 maxlen: 24
103.96.41.0/24 maxlen: 24
103.96.42.0/24 maxlen: 24
103.132.229.0/24 maxlen: 24
103.132.244.0/23 maxlen: 24
103.133.158.0/23 maxlen: 24
103.139.170.0/24 maxlen: 24
103.139.171.0/24 maxlen: 24
103.157.122.0/23 maxlen: 24
103.163.90.0/24 maxlen: 24
103.163.91.0/24 maxlen: 24
103.169.240.0/23 maxlen: 24
103.171.132.0/24 maxlen: 24
103.171.133.0/24 maxlen: 24
103.175.170.0/23 maxlen: 24
103.176.186.0/24 maxlen: 24
103.176.187.0/24 maxlen: 24
103.195.82.0/23 maxlen: 24
103.196.184.0/23 maxlen: 24
103.207.11.0/24 maxlen: 24
103.212.152.0/23 maxlen: 24
103.212.154.0/23 maxlen: 24
210.16.92.0/24 maxlen: 24
210.16.93.0/24 maxlen: 24
2405:3440::/32 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 02 Dec 2024 10:54:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 40276 (0x9d54)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Validity
Not Before: Nov 18 05:13:29 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=673accf8-9b1e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:de:a0:33:84:51:b2:6f:b7:bf:ad:69:89:05:
77:64:1f:ae:27:64:88:bc:8c:4f:dc:87:e4:f8:6e:
35:46:8c:08:ef:51:74:17:c5:35:00:96:d6:5b:25:
fb:7c:54:d1:12:77:33:67:b9:fc:7b:9d:2b:07:34:
3a:48:86:d8:5d:85:66:ef:78:e5:ee:2d:ac:0f:43:
90:ca:64:b4:95:05:70:bb:91:af:3c:a5:c1:5c:36:
16:1a:a4:2c:ed:f4:ce:f2:ad:fc:b7:f4:f2:60:19:
96:c2:89:6c:71:3e:17:16:5c:41:d5:15:aa:9e:ee:
aa:71:30:7c:ce:b3:da:db:b4:4b:66:3b:51:b1:03:
ed:2d:72:bc:ce:48:66:72:9d:3e:61:f2:21:2f:37:
21:fe:6b:06:d9:3b:6a:d6:07:82:f4:23:fb:75:0f:
f4:04:bd:2b:f5:c5:0e:ff:7d:ad:3e:f1:cd:ee:a2:
ad:e6:c2:ab:bd:b6:45:37:3c:60:51:58:c4:f7:9f:
61:17:ca:95:87:58:71:5b:7f:f3:9e:15:12:72:53:
b2:08:db:d9:2f:de:b9:0c:a4:76:3a:2e:ec:c1:ac:
cc:6e:c6:2b:4c:6d:8c:9c:81:f0:9d:6f:62:73:5c:
f6:fb:34:2d:4a:40:9b:46:cf:cd:cd:b7:28:16:46:
fc:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:53:10:42:BA:20:26:D5:0D:FD:7F:BE:BC:24:35:1B:4C:2A:1C:6E
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/6421A826459E11EE9D78EB42C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.96.40.0-103.96.42.255
103.132.229.0/24
103.132.244.0/23
103.133.158.0/23
103.139.170.0/23
103.157.122.0/23
103.163.90.0/23
103.169.240.0/23
103.171.132.0/23
103.175.170.0/23
103.176.186.0/23
103.195.82.0/23
103.196.184.0/23
103.207.11.0/24
103.212.152.0/22
210.16.92.0/23
IPv6:
2405:3440::/32
Signature Algorithm: sha256WithRSAEncryption
14:b1:6b:71:02:54:42:9f:59:70:2f:d4:cd:84:2e:d0:fe:0b:
9c:f0:96:ae:74:02:3e:93:79:8e:4a:ed:9d:4d:7a:5f:59:8e:
6d:c1:35:32:18:5a:f6:43:6d:b9:dc:f3:69:24:22:bd:9b:d4:
39:62:8a:62:35:0f:39:d4:80:44:20:4d:3c:31:ab:49:42:1d:
9c:dc:8f:bb:f3:52:8e:eb:51:a7:20:56:bb:3d:1c:58:a2:33:
af:0e:07:d7:82:c5:c5:5d:36:65:22:d0:dd:0f:78:47:3d:58:
13:15:1e:21:f6:d5:0d:61:62:9a:c4:8e:73:17:59:23:48:e6:
39:b4:d5:69:1a:fb:8e:8c:ca:d8:aa:41:3f:1d:c3:ff:5c:cc:
62:0a:b1:57:a5:6a:52:df:1e:de:27:8d:30:c2:ea:24:58:9d:
16:3d:7a:77:d7:8e:c5:13:4a:0d:fd:38:55:dc:07:05:6e:e9:
a4:49:53:32:da:ab:e5:58:cf:55:3b:52:f4:ad:2a:bc:d1:a2:
b5:50:57:b1:16:00:a5:4d:bd:58:85:fb:0a:48:bf:55:f9:0b:
35:22:1f:df:96:01:45:cf:f3:0e:6f:fb:06:74:eb:ef:db:50:
cf:dd:0a:2d:32:70:3b:66:61:c4:bf:98:f3:08:1e:16:07:cc:
b5:af:78:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 13:17:15 2024 by rpki-client on console-ams.rpki-client.org