Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/AD65E91096A111EBB9C7C216C4F9AE02.roa
File: AD65E91096A111EBB9C7C216C4F9AE02.roa (raw, json)
Hash identifier: N7n9hurC+hmXJniA5yD1P9slI2EXxHH0sYaRGEIVaKg=
Subject key identifier: AF:4F:B4:B2:D6:1C:9D:D2:11:14:1E:26:A5:3D:E9:A4:16:E7:7F:DE
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: 8AC1
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/AD65E91096A111EBB9C7C216C4F9AE02.roa
Signing time: Thu 30 May 2024 16:04:20 +0000
ROA not before: Thu 30 May 2024 16:04:20 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 135872
IP address blocks: 103.135.228.0/23 maxlen: 24
103.151.156.0/23 maxlen: 24
103.165.114.0/23 maxlen: 24
103.170.182.0/23 maxlen: 24
103.171.246.0/23 maxlen: 24
103.175.62.0/23 maxlen: 24
103.175.139.0/24 maxlen: 24
103.175.168.0/23 maxlen: 24
103.177.156.0/23 maxlen: 24
103.178.210.0/23 maxlen: 24
103.179.16.0/23 maxlen: 24
103.186.36.0/23 maxlen: 24
103.188.162.0/23 maxlen: 24
103.211.20.0/22 maxlen: 24
103.211.132.0/22 maxlen: 24
146.196.44.0/22 maxlen: 24
160.238.92.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 02 Dec 2024 10:54:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 35521 (0x8ac1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Validity
Not Before: May 30 16:04:20 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6658a383-a9d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:44:d6:8c:6e:56:13:48:78:81:e7:c9:36:36:
2e:89:1e:3e:0a:75:ce:d4:a6:6e:31:75:38:4d:9a:
ee:1f:7f:66:2f:38:ae:0e:f4:01:3f:cd:f7:d5:c8:
15:01:55:78:f8:c2:8e:38:55:0c:a7:9f:f5:47:da:
13:61:7c:b6:32:b6:c9:04:f0:08:f0:3f:0d:5d:e1:
98:a9:fa:e9:7f:d3:b3:08:ca:96:f4:da:fe:e7:ac:
33:fa:4d:c3:9f:81:76:69:b1:05:44:79:3c:08:ca:
de:89:b4:4b:d6:79:00:9f:6d:78:7c:79:46:c1:3f:
da:f2:56:d7:40:56:6b:fa:68:93:5a:57:99:ad:43:
5a:92:14:ea:78:10:80:9c:ac:bd:e0:34:2d:5e:68:
36:72:ab:43:f9:a4:17:a5:84:a8:3b:64:5b:33:d1:
aa:c8:9f:72:ab:a7:f0:34:15:30:2e:e4:ad:f4:8d:
4f:83:2d:ea:cc:00:66:39:3d:88:10:ba:09:64:79:
e5:c0:85:4a:7a:f7:c3:72:5b:f7:2a:27:c5:43:37:
47:de:b9:e9:51:27:92:a9:61:92:89:f4:87:32:0d:
9c:08:4c:f3:d6:62:b4:23:13:55:7f:19:78:fe:2d:
93:f1:08:7d:55:ce:9c:43:ff:cd:29:d8:32:75:1d:
97:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:4F:B4:B2:D6:1C:9D:D2:11:14:1E:26:A5:3D:E9:A4:16:E7:7F:DE
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/AD65E91096A111EBB9C7C216C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.135.228.0/23
103.151.156.0/23
103.165.114.0/23
103.170.182.0/23
103.171.246.0/23
103.175.62.0/23
103.175.139.0/24
103.175.168.0/23
103.177.156.0/23
103.178.210.0/23
103.179.16.0/23
103.186.36.0/23
103.188.162.0/23
103.211.20.0/22
103.211.132.0/22
146.196.44.0/22
160.238.92.0/22
Signature Algorithm: sha256WithRSAEncryption
3e:cb:86:c9:fe:6c:97:70:f4:8a:7e:4d:9f:5f:9c:50:d5:07:
86:25:85:74:8a:ab:99:1b:f8:9b:2a:53:c0:15:16:24:a4:e3:
c9:5c:1f:86:49:74:fa:e8:0a:b1:07:c8:ab:fe:66:f4:c9:cf:
70:99:fa:53:88:b9:d9:4b:a6:9b:23:e6:ff:37:97:55:b1:e4:
3b:53:8f:e8:c6:f7:84:1b:57:be:f6:62:69:7c:ec:72:8d:6d:
23:df:1e:24:d6:c7:9c:ae:2a:f6:9e:6f:22:34:2a:cc:19:08:
0f:ec:77:97:cc:54:02:64:66:b0:30:71:5f:63:f8:34:cf:14:
60:9d:d6:6b:bf:4a:5c:ea:a8:67:4e:20:e1:e1:05:d2:ef:84:
f6:47:24:b8:78:10:2a:66:ea:3c:ee:42:87:3c:37:6c:4b:93:
99:ed:3d:73:1b:83:86:40:60:d3:47:7e:c0:19:35:94:2c:a6:
7a:51:37:21:d2:09:06:19:8f:b6:0b:ff:25:6e:1a:3c:f9:8d:
91:58:72:07:05:fd:d4:07:61:66:6b:09:f5:32:9b:8c:d6:d5:
6d:f3:3c:06:05:31:70:19:2a:49:6b:b0:4c:1e:1b:3e:30:75:
49:33:a8:ef:1e:4a:3e:35:11:23:66:d9:7a:25:e4:90:c3:5f:
f6:1f:6e:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 13:17:23 2024 by rpki-client on console-ams.rpki-client.org