Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/ADF4E2B4E23611EC930AF21FC4F9AE02.roa
File: ADF4E2B4E23611EC930AF21FC4F9AE02.roa (raw, json)
Hash identifier: 1cKT5FA6ZTt8vT7KGdtIHYetw+zY9ZB10jeyFFALWI0=
Subject key identifier: 5D:5B:F4:11:0E:5B:7A:8C:9F:E8:95:37:91:AC:69:FE:C4:5E:C7:52
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: 93C9
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/ADF4E2B4E23611EC930AF21FC4F9AE02.roa
Signing time: Fri 05 Jul 2024 09:20:15 +0000
ROA not before: Fri 05 Jul 2024 09:20:15 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 139560
IP address blocks: 103.183.44.0/23 maxlen: 24
180.188.234.0/23 maxlen: 24
180.188.240.0/24 maxlen: 24
203.76.177.0/24 maxlen: 24
203.76.179.0/24 maxlen: 24
203.76.184.0/24 maxlen: 24
203.76.186.0/24 maxlen: 24
203.76.189.0/24 maxlen: 24
203.115.64.0/22 maxlen: 24
203.115.69.0/24 maxlen: 24
203.115.70.0/23 maxlen: 24
203.115.72.0/24 maxlen: 24
203.115.74.0/23 maxlen: 24
203.115.78.0/23 maxlen: 24
203.115.80.0/23 maxlen: 24
203.115.87.0/24 maxlen: 24
203.115.88.0/23 maxlen: 24
203.115.90.0/24 maxlen: 24
203.115.92.0/24 maxlen: 24
203.115.95.0/24 maxlen: 24
210.89.33.0/24 maxlen: 24
210.89.38.0/24 maxlen: 24
210.89.41.0/24 maxlen: 24
210.89.46.0/24 maxlen: 24
210.89.48.0/24 maxlen: 24
210.89.51.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 02 Dec 2024 10:54:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 37833 (0x93c9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Validity
Not Before: Jul 5 09:20:15 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6687bace-2887
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:62:ed:c9:f0:99:24:50:8f:68:ac:f9:6d:f5:
15:91:06:42:68:d5:fc:07:5f:ba:03:df:cd:44:ea:
80:56:e3:68:67:9e:20:78:a9:aa:df:d7:66:8c:32:
86:27:6d:57:5d:e0:5c:d8:8a:9a:b3:4b:b3:f4:08:
6a:fe:69:2b:b9:41:3e:6b:b7:da:89:d9:ba:f2:0b:
66:1f:f7:93:6c:d8:be:db:de:20:28:fe:13:9d:96:
5c:e5:41:7d:08:64:b1:b9:08:40:ca:82:48:80:60:
ff:8c:d8:25:6f:97:04:dd:19:18:39:80:cf:f5:fa:
ef:10:9c:f6:ad:b8:78:28:98:ec:06:45:e3:f1:86:
69:23:8e:43:3a:23:b3:0c:f3:fb:03:d5:b3:d1:df:
1d:de:82:c7:8e:ce:1a:2d:90:c5:49:7b:f6:f0:28:
ea:73:ef:43:32:62:e9:51:50:1f:a5:3e:80:75:12:
ba:10:6f:04:b6:2b:28:1d:9b:9c:61:c3:a9:13:aa:
a9:fb:e6:92:5f:25:64:fe:7b:4c:70:c4:62:c1:3e:
ce:34:20:36:99:35:67:09:e2:6c:82:20:b5:86:c4:
d7:20:82:ce:d9:c5:d9:ce:a9:af:ab:56:4c:9c:ee:
a3:e3:a6:35:1a:26:8f:50:c6:ee:51:b5:c1:2e:9e:
40:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:5B:F4:11:0E:5B:7A:8C:9F:E8:95:37:91:AC:69:FE:C4:5E:C7:52
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/ADF4E2B4E23611EC930AF21FC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.183.44.0/23
180.188.234.0/23
180.188.240.0/24
203.76.177.0/24
203.76.179.0/24
203.76.184.0/24
203.76.186.0/24
203.76.189.0/24
203.115.64.0/22
203.115.69.0-203.115.72.255
203.115.74.0/23
203.115.78.0-203.115.81.255
203.115.87.0-203.115.90.255
203.115.92.0/24
203.115.95.0/24
210.89.33.0/24
210.89.38.0/24
210.89.41.0/24
210.89.46.0/24
210.89.48.0/24
210.89.51.0/24
Signature Algorithm: sha256WithRSAEncryption
90:54:94:5a:93:f2:3c:81:cc:ca:11:16:c6:99:b4:d4:b9:2e:
07:44:b7:ac:eb:1e:8c:5e:27:e9:cc:72:8f:3c:8b:65:68:0f:
13:cb:75:d5:98:9d:7d:86:dc:fd:2d:0e:36:e1:13:7f:db:de:
a9:1c:5e:c2:48:d1:ec:5d:e8:a5:6d:28:b3:1a:33:14:92:28:
a7:dd:11:95:f5:7e:7c:69:b1:46:41:38:4a:df:19:ee:94:d4:
c2:5f:f8:46:d7:70:b8:f9:38:7f:a2:c4:ab:d5:83:5f:6f:0d:
93:c6:18:f5:97:8d:a7:c1:57:3b:7a:34:0c:c9:14:66:5e:b6:
04:9d:02:2d:5e:a7:f4:22:15:8d:0c:e8:d9:06:86:3a:7e:c1:
9d:82:cf:25:96:47:f7:3e:5b:ee:8c:2b:b4:d0:48:41:27:51:
bd:3d:48:0a:e3:1e:15:55:36:5d:99:ee:93:ca:97:ea:a8:f1:
6c:3e:fc:44:77:bd:c2:ca:c2:02:28:16:48:ab:af:51:21:e1:
66:d1:7c:32:6b:9b:03:46:53:4e:34:46:21:0e:b2:17:2b:9c:
9c:34:15:84:13:01:c8:9d:4f:7b:a7:fe:8b:27:29:46:25:1f:
cc:15:6e:8e:b3:ac:5b:70:e7:8c:9b:12:78:8a:4e:80:2b:c1:
d5:d3:d7:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 13:17:23 2024 by rpki-client on console-ams.rpki-client.org