Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/9484C1028B6211EDB9F07D22C4F9AE02.roa
File: 9484C1028B6211EDB9F07D22C4F9AE02.roa (raw, json)
Hash identifier: tnJZeO2HWc0B3vzD6ILcuBUYUDe7m6xB9IRQ8qqyqoU=
Subject key identifier: 92:71:5D:E2:92:11:A4:98:40:91:D9:51:30:4B:55:BB:3C:A0:F0:04
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: 892E
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/9484C1028B6211EDB9F07D22C4F9AE02.roa
Signing time: Thu 30 May 2024 15:57:44 +0000
ROA not before: Thu 30 May 2024 15:57:44 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 133720
IP address blocks: 43.241.124.0/24 maxlen: 24
43.241.125.0/24 maxlen: 24
43.241.126.0/24 maxlen: 24
43.241.127.0/24 maxlen: 24
43.255.220.0/22 maxlen: 24
45.249.40.0/22 maxlen: 24
103.6.184.0/22 maxlen: 24
103.25.168.0/22 maxlen: 24
103.39.244.0/22 maxlen: 24
103.49.240.0/22 maxlen: 24
103.74.16.0/22 maxlen: 24
103.87.52.0/22 maxlen: 24
103.174.198.0/24 maxlen: 24
103.179.48.0/23 maxlen: 24
103.230.148.0/22 maxlen: 24
103.240.8.0/22 maxlen: 24
103.248.28.0/22 maxlen: 24
103.249.248.0/22 maxlen: 24
139.5.24.0/22 maxlen: 24
139.5.28.0/22 maxlen: 24
139.5.44.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 02 Dec 2024 10:54:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 35118 (0x892e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Validity
Not Before: May 30 15:57:44 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6658a1f8-6d6a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:7a:10:a0:b6:ba:26:88:46:5b:ef:e5:94:25:
d8:8d:81:7b:d5:51:1e:d7:5f:8d:0c:cb:db:90:6b:
8a:04:29:46:1c:05:34:8d:cf:be:4c:78:b1:45:3b:
8b:eb:f1:ce:c6:40:1f:d7:93:e0:20:2d:44:ea:f7:
9b:4b:27:b7:c8:76:dc:2c:bd:73:42:61:75:07:46:
be:9e:2e:a9:74:20:0e:8a:53:f1:2a:27:66:b1:79:
42:40:04:fc:04:cf:d6:7a:3b:0a:74:24:e7:ab:f3:
6e:c7:1c:f1:05:8f:be:ab:e9:66:b1:92:32:e8:85:
34:74:88:64:b5:83:e7:f7:f2:57:c4:fe:02:a3:bb:
b2:98:f6:80:4f:81:0d:2d:84:93:2d:8a:a4:0d:64:
9c:43:10:7b:b2:e7:61:e9:0a:85:dc:52:10:c6:9d:
08:0d:48:72:72:39:f8:90:21:d9:05:25:fa:02:be:
09:ca:c9:c6:c4:0a:5b:57:34:49:4f:28:5d:ee:1e:
c4:69:07:33:7e:f4:94:05:84:4e:2c:a2:fc:68:9e:
16:19:63:e0:b2:f2:69:1b:ee:1e:e0:00:41:23:bc:
78:c2:2a:14:1a:2c:98:d8:77:7d:5e:6d:cd:5a:6d:
1c:09:80:37:c3:d3:db:a4:5d:4a:aa:4c:ce:79:6e:
b6:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:71:5D:E2:92:11:A4:98:40:91:D9:51:30:4B:55:BB:3C:A0:F0:04
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/9484C1028B6211EDB9F07D22C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
43.241.124.0/22
43.255.220.0/22
45.249.40.0/22
103.6.184.0/22
103.25.168.0/22
103.39.244.0/22
103.49.240.0/22
103.74.16.0/22
103.87.52.0/22
103.174.198.0/24
103.179.48.0/23
103.230.148.0/22
103.240.8.0/22
103.248.28.0/22
103.249.248.0/22
139.5.24.0/21
139.5.44.0/22
Signature Algorithm: sha256WithRSAEncryption
a8:2b:f6:7b:41:d4:f5:9f:ee:8d:48:4d:d6:bf:0b:c8:89:2a:
6c:0e:8a:a8:08:60:27:33:41:e5:c1:d2:71:28:33:99:ca:ef:
86:54:2e:9c:be:cb:bc:8b:0d:82:2e:7c:5f:bf:40:88:e7:af:
87:9a:b5:90:93:65:4f:9b:31:2a:d0:6c:54:bc:d2:cb:00:c8:
eb:cb:54:74:83:8f:9f:c2:e7:43:55:7b:ab:48:e5:bd:bd:5d:
1e:79:fd:6b:c5:b1:ce:c1:77:f7:22:0f:9a:17:78:94:a0:cf:
8d:95:6f:5a:5d:5d:37:9d:f6:9a:3b:16:23:6a:c4:0c:4a:80:
b1:19:ad:73:a7:c5:7c:5d:0d:6c:9e:99:78:e1:96:1e:4e:e0:
39:00:70:ba:1c:81:b7:3d:71:fb:83:d5:1b:da:35:8e:42:a1:
d9:6c:cf:35:7d:9b:cc:8f:f7:13:66:9e:40:aa:f9:7d:43:fa:
1b:60:20:ea:e6:2e:a2:df:06:1d:56:dd:3c:a6:69:5d:be:d0:
24:9b:f2:64:ca:c1:17:5e:24:8c:4a:16:88:9c:55:e0:1b:7e:
b1:70:8b:1e:c4:20:62:66:7d:d3:12:72:10:18:a4:e4:10:52:
10:25:ae:8e:42:71:29:b6:78:69:d9:0d:ea:ad:06:6d:55:d3:
d9:c8:82:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 13:17:20 2024 by rpki-client on console-ams.rpki-client.org