Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/D07E70300DED11EB9DC94950C4F9AE02.roa
File: D07E70300DED11EB9DC94950C4F9AE02.roa (raw, json)
Hash identifier: bkcyLlwNSanuJS6A1qO3/qttG5VRYFRkiouKcP0uzU8=
Subject key identifier: 31:67:B2:FA:5C:4A:85:07:12:36:EF:86:17:30:15:D8:08:8F:54:B0
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: 8708
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/D07E70300DED11EB9DC94950C4F9AE02.roa
Signing time: Mon 06 May 2024 06:47:30 +0000
ROA not before: Mon 06 May 2024 06:47:30 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 135738
IP address blocks: 103.105.96.0/24 maxlen: 24
103.107.9.0/24 maxlen: 24
103.153.12.0/24 maxlen: 24
103.155.72.0/23 maxlen: 24
103.158.120.0/24 maxlen: 24
103.159.34.0/23 maxlen: 24
103.165.102.0/23 maxlen: 24
103.176.56.0/23 maxlen: 24
103.178.60.0/23 maxlen: 24
103.179.170.0/23 maxlen: 24
103.190.9.0/24 maxlen: 24
103.236.212.0/23 maxlen: 24
2001:df6:2180::/48 maxlen: 48
2001:df6:2580::/48 maxlen: 48
2001:df6:2a80::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 23 May 2024 15:40:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 34568 (0x8708)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Validity
Not Before: May 6 06:47:30 2024 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=66387d01-a48d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:cd:35:04:33:a2:74:7c:ff:30:8e:9e:a4:ec:
45:77:7f:73:8c:ee:0c:e0:98:2a:1e:9f:32:d9:d5:
29:7b:86:07:2f:f0:6d:3b:7b:ca:f8:10:f5:29:39:
12:f9:97:07:bf:71:e2:ad:74:6a:52:ab:dd:19:33:
3e:07:c0:19:d5:7d:ec:30:e2:6b:2b:c1:ab:63:ad:
59:78:60:9f:21:8a:80:d8:05:1b:d7:ad:5e:17:be:
64:13:0e:6e:58:93:4b:93:91:90:1e:30:93:28:f3:
4b:b9:38:54:98:3d:97:ff:ad:86:e5:0d:34:e3:89:
18:82:8a:44:65:92:88:ae:5e:ce:b3:53:3a:c2:29:
54:2c:d8:7f:78:c2:8f:9b:93:00:53:90:ab:43:4f:
6e:2e:be:e6:ff:44:4e:05:9a:af:40:9b:5a:e1:ea:
79:99:97:a3:fc:fe:fa:a9:a6:b1:3f:22:60:77:78:
62:51:64:96:9b:03:16:40:43:b7:78:6a:f1:23:8e:
d4:61:af:78:08:31:ad:7f:92:98:e0:1f:cd:88:ce:
35:25:92:27:e9:83:16:be:4a:88:c2:01:55:67:67:
79:bb:a0:a3:dd:1d:b9:f9:d1:64:c2:ec:2d:04:67:
2e:5c:13:a8:72:33:25:68:ab:83:36:2e:e2:34:64:
22:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:67:B2:FA:5C:4A:85:07:12:36:EF:86:17:30:15:D8:08:8F:54:B0
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/D07E70300DED11EB9DC94950C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.105.96.0/24
103.107.9.0/24
103.153.12.0/24
103.155.72.0/23
103.158.120.0/24
103.159.34.0/23
103.165.102.0/23
103.176.56.0/23
103.178.60.0/23
103.179.170.0/23
103.190.9.0/24
103.236.212.0/23
IPv6:
2001:df6:2180::/48
2001:df6:2580::/48
2001:df6:2a80::/48
Signature Algorithm: sha256WithRSAEncryption
48:b7:72:ef:a7:4d:25:34:85:60:30:4e:a4:8c:9c:a8:15:3f:
00:33:29:3e:32:dd:35:eb:37:99:14:57:a6:2c:16:b5:b7:6b:
59:61:6a:5d:3e:b2:d5:5b:27:66:71:0e:5f:ca:4c:29:19:a6:
98:a8:34:90:f7:8e:37:f3:37:03:9d:ab:d0:3d:6e:4d:7e:4e:
2e:60:45:86:ce:39:c3:2e:d1:f7:77:fa:1a:d5:e3:04:54:3c:
4e:d8:9b:4b:cb:cd:2c:cd:b0:6c:6e:4b:47:c8:d9:ad:40:35:
00:b0:4a:a2:ac:51:12:16:6d:b2:b0:07:4c:d5:19:07:de:c3:
7c:27:cb:21:3a:fb:19:26:97:07:3c:8f:b0:92:76:14:e6:64:
30:fb:40:d3:ca:c7:87:4e:15:9a:a3:64:63:55:e7:c3:49:56:
8e:9f:52:d5:ae:ba:c1:d5:40:6b:34:ef:8a:0f:2d:83:aa:72:
af:04:31:af:e3:ff:5e:18:db:e3:e2:73:27:d7:2a:0b:bd:97:
db:e4:eb:84:dd:cd:34:ab:c9:7c:94:ea:00:00:74:10:a4:7e:
b3:1b:e0:22:7f:59:a6:2e:a1:4b:e4:94:e0:f4:8e:5e:d3:82:
f7:fc:01:06:4d:54:6e:5e:31:f5:86:a7:00:1c:6f:b5:f1:ca:
2f:aa:2e:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 16 17:51:43 2024 by rpki-client on console-ams.rpki-client.org