Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/9E5313A470EF11EFA10BDC34C4F9AE02.roa
File: 9E5313A470EF11EFA10BDC34C4F9AE02.roa (raw, json)
Hash identifier: VsbMEY734LHBwsHdwTP0WFgORJwEGLjf9+cMkeC/dp0=
Subject key identifier: 86:A1:FE:93:5D:F7:FB:47:E1:5E:D3:0A:0B:E3:64:FB:C7:04:B1:D9
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: 987A
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/9E5313A470EF11EFA10BDC34C4F9AE02.roa
Signing time: Thu 12 Sep 2024 10:13:13 +0000
ROA not before: Thu 12 Sep 2024 10:13:13 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 135738
IP address blocks: 103.105.96.0/24 maxlen: 24
103.107.9.0/24 maxlen: 24
103.153.12.0/24 maxlen: 24
103.155.72.0/23 maxlen: 24
103.158.120.0/24 maxlen: 24
103.159.34.0/23 maxlen: 24
103.165.102.0/23 maxlen: 24
103.176.56.0/23 maxlen: 24
103.178.60.0/23 maxlen: 24
103.179.170.0/23 maxlen: 24
103.190.9.0/24 maxlen: 24
103.236.212.0/23 maxlen: 24
2001:df1:36c0::/48 maxlen: 48
2001:df6:2180::/48 maxlen: 48
2001:df6:2580::/48 maxlen: 48
2001:df6:2a80::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 02 Dec 2024 10:54:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 39034 (0x987a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Validity
Not Before: Sep 12 10:13:13 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=66e2beb9-62fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:4c:50:64:af:2f:c8:64:0b:dc:8b:e6:01:fc:
62:2b:2e:7c:7f:88:67:28:f7:d2:09:17:3d:dd:4d:
97:35:6a:7e:e6:89:fd:c1:a5:a0:59:ff:e4:2d:ca:
ac:9a:5a:46:98:cf:dc:71:3c:7b:bc:3c:e1:0b:c9:
ed:84:67:ab:4f:90:95:6e:67:b9:63:57:98:7d:c5:
eb:b6:6f:51:7d:08:2d:7d:ed:3d:af:8d:c9:65:ff:
cb:c1:52:2f:86:80:e5:58:61:62:d0:85:e3:ea:a1:
c3:92:8a:52:4f:26:7e:51:2b:30:9d:c0:99:0e:b9:
9d:62:f6:fe:b0:c6:5d:2a:d1:77:cc:a0:b1:56:60:
14:ca:78:c5:01:27:7e:f0:77:56:de:5e:c5:45:7d:
56:68:66:c2:70:49:9a:ee:d8:4a:b9:29:51:f7:c4:
75:82:06:43:aa:ac:14:7b:60:91:2e:18:1d:00:a4:
ef:00:bb:60:1f:48:57:80:59:70:07:37:7a:ad:b7:
30:55:ca:1c:df:ac:be:3c:37:26:c6:ab:31:c3:b0:
b7:0a:87:cf:07:65:33:c5:bb:f1:97:ee:df:c7:45:
eb:ea:d0:e2:23:f2:59:6f:8a:1f:d8:51:55:11:0c:
bc:00:66:e9:45:dc:c4:8f:ba:20:55:db:2e:10:d4:
52:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:A1:FE:93:5D:F7:FB:47:E1:5E:D3:0A:0B:E3:64:FB:C7:04:B1:D9
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/9E5313A470EF11EFA10BDC34C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.105.96.0/24
103.107.9.0/24
103.153.12.0/24
103.155.72.0/23
103.158.120.0/24
103.159.34.0/23
103.165.102.0/23
103.176.56.0/23
103.178.60.0/23
103.179.170.0/23
103.190.9.0/24
103.236.212.0/23
IPv6:
2001:df1:36c0::/48
2001:df6:2180::/48
2001:df6:2580::/48
2001:df6:2a80::/48
Signature Algorithm: sha256WithRSAEncryption
92:20:34:c9:85:fb:3d:6c:0f:d2:22:e5:b4:a2:8a:e1:08:32:
6a:0e:d3:ee:ca:61:9f:8f:c0:47:b7:33:0c:f2:8a:57:23:c3:
ea:83:41:a3:6b:d1:1e:45:2c:bc:11:79:a5:32:b7:c9:e4:35:
6a:35:0f:62:55:28:2c:8f:c2:70:8c:e6:e6:5b:88:e9:8b:7e:
f8:98:1c:6b:ea:aa:a8:5a:35:fd:b8:9b:fa:4c:89:47:9a:11:
0c:03:ca:9c:81:22:e1:a2:66:ab:c3:f6:25:bb:4a:fc:08:7c:
23:6a:65:1b:51:6d:f0:04:4e:bf:cc:03:b6:d2:cb:ac:5c:c1:
c2:c1:d8:d9:e8:95:41:5c:a3:6e:d0:54:4d:47:f8:d3:b7:6e:
f7:34:6e:d3:27:30:73:4a:04:d8:8f:48:4a:1e:9d:a6:57:9f:
e9:a3:55:42:c6:55:0a:b7:77:ac:6b:68:76:9d:95:96:a7:8c:
84:bb:dd:0c:7e:d3:ed:84:fa:20:d3:c7:45:dc:66:be:d8:5c:
de:e2:9b:79:86:a4:4e:7f:7c:15:11:b1:80:ed:dd:e2:02:21:
54:27:49:66:ad:7c:ac:a9:ee:f3:34:51:ae:99:6f:0a:df:b3:
29:00:ea:20:0c:84:c9:83:7e:a0:20:96:b0:7a:3d:46:a8:95:
95:fd:fe:bc
-----BEGIN CERTIFICATE-----
MIIF4TCCBMmgAwIBAgIDAJh6MA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5
MThFREIyMTEwLwYDVQQFEygyOTZFREI2NEYzQUY2RTlEOTgwOTMyRTgxNkY5NTk4
M0UzQUJDODIzMB4XDTI0MDkxMjEwMTMxM1oXDTI1MDcwMTAwMDAwMFowGDEWMBQG
A1UEAxMNNjZlMmJlYjktNjJmZTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAM9MUGSvL8hkC9yL5gH8YisufH+IZyj30gkXPd1NlzVqfuaJ/cGloFn/5C3K
rJpaRpjP3HE8e7w84QvJ7YRnq0+QlW5nuWNXmH3F67ZvUX0ILX3tPa+NyWX/y8FS
L4aA5VhhYtCF4+qhw5KKUk8mflErMJ3AmQ65nWL2/rDGXSrRd8ygsVZgFMp4xQEn
fvB3Vt5exUV9VmhmwnBJmu7YSrkpUffEdYIGQ6qsFHtgkS4YHQCk7wC7YB9IV4BZ
cAc3eq23MFXKHN+svjw3JsarMcOwtwqHzwdlM8W78Zfu38dF6+rQ4iPyWW+KH9hR
VREMvABm6UXcxI+6IFXbLhDUUvcCAwEAAaOCAwQwggMAMB0GA1UdDgQWBBSGof6T
Xff7R+Fe0woL42T7xwSx2TAfBgNVHSMEGDAWgBQpbttk869unZgJMugW+VmD46vI
IzAOBgNVHQ8BAf8EBAMCB4AwgYMGA1UdHwR8MHoweKB2oHSGcnJzeW5jOi8vcnBr
aS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkxOEVEQjIvMkE0M0UzMEM3
MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvS1c3YlpQT3ZicDJZQ1RMb0Z2bFpnLU9y
eUNNLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr
aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3
MkZEMUZGMi9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5Q00uY2VyMEoGA1UdIAEB
/wRAMD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBu
aWMubmV0L1JQS0kvQ1BTLnBkZjCBywYIKwYBBQUHAQsEgb4wgbswgYMGCCsGAQUF
BzALhndyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MThFREIyLzJBNDNFMzBDNzBFOTExRTJCMzZENEI2QjI5NzlCQjIwLzlFNTMxM0E0
NzBFRjExRUZBMTBCREMzNEM0RjlBRTAyLnJvYTAzBggrBgEFBQcwDYYnaHR0cHM6
Ly9ycmRwLmFwbmljLm5ldC9ub3RpZmljYXRpb24ueG1sMIGNBggrBgEFBQcBBwEB
/wR+MHwwTgQCAAEwSAMEAGdpYAMEAGdrCQMEAGeZDAMEAWebSAMEAGeeeAMEAWef
IgMEAWelZgMEAWewOAMEAWeyPAMEAWezqgMEAGe+CQMEAWfs1DAqBAIAAjAkAwcA
IAEN8TbAAwcAIAEN9iGAAwcAIAEN9iWAAwcAIAEN9iqAMA0GCSqGSIb3DQEBCwUA
A4IBAQCSIDTJhfs9bA/SIuW0oorhCDJqDtPuymGfj8BHtzMM8opXI8Pqg0Gja9Ee
RSy8EXmlMrfJ5DVqNQ9iVSgsj8JwjObmW4jpi374mBxr6qqoWjX9uJv6TIlHmhEM
A8qcgSLhomarw/Ylu0r8CHwjamUbUW3wBE6/zAO20susXMHCwdjZ6JVBXKNu0FRN
R/jTt273NG7TJzBzSgTYj0hKHp2mV5/po1VCxlUKt3esa2h2nZWWp4yEu90MftPt
hPog08dF3Ga+2Fze4pt5hqROf3wVEbGA7d3iAiFUJ0lmrXysqe7zNFGumW8K37Mp
AOogDITJg36gIJawej1GqJWV/f68
-----END CERTIFICATE-----
Generated at Mon Nov 25 13:17:21 2024 by rpki-client on console-ams.rpki-client.org