Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/DD42B126B75C11EDB5BD8751C4F9AE02.roa
File: DD42B126B75C11EDB5BD8751C4F9AE02.roa (raw, json)
Hash identifier: +WHmKNbrTEcxVfKQQtyZsKyKF+0CG7uqjiI3R7g7OdA=
Subject key identifier: 19:C4:15:94:67:BE:07:3C:2F:A8:18:3A:B5:61:6E:E5:07:A9:72:1A
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: 8B10
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/DD42B126B75C11EDB5BD8751C4F9AE02.roa
Signing time: Thu 30 May 2024 16:05:36 +0000
ROA not before: Thu 30 May 2024 16:05:36 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 136377
IP address blocks: 103.99.12.0/22 maxlen: 24
103.144.118.0/24 maxlen: 24
103.144.119.0/24 maxlen: 24
2405:27c0::/32 maxlen: 32
2405:27c0::/48 maxlen: 48
2405:27c0:1::/48 maxlen: 48
2405:27c0:2::/48 maxlen: 48
2405:27c0:3::/48 maxlen: 48
2405:27c0:4::/48 maxlen: 48
2405:27c0:5::/48 maxlen: 48
2405:27c0:6::/48 maxlen: 48
2405:27c0:7::/48 maxlen: 48
2405:27c0:8::/48 maxlen: 48
2405:27c0:9::/48 maxlen: 48
2405:27c0:a::/48 maxlen: 48
2405:27c0:b::/48 maxlen: 48
2405:27c0:c::/48 maxlen: 48
2405:27c0:d::/48 maxlen: 48
2405:27c0:e::/48 maxlen: 48
2405:27c0:f::/48 maxlen: 48
2405:27c0:10::/48 maxlen: 48
2405:27c0:11::/48 maxlen: 48
2405:27c0:12::/48 maxlen: 48
2405:27c0:13::/48 maxlen: 48
2405:27c0:14::/48 maxlen: 48
2405:27c0:15::/48 maxlen: 48
2405:27c0:16::/48 maxlen: 48
2405:27c0:17::/48 maxlen: 48
2405:27c0:18::/48 maxlen: 48
2405:27c0:19::/48 maxlen: 48
2405:27c0:1a::/48 maxlen: 48
2405:27c0:1b::/48 maxlen: 48
2405:27c0:1c::/48 maxlen: 48
2405:27c0:1d::/48 maxlen: 48
2405:27c0:1e::/48 maxlen: 48
2405:27c0:1f::/48 maxlen: 48
2405:27c0:20::/48 maxlen: 48
2405:27c0:21::/48 maxlen: 48
2405:27c0:22::/48 maxlen: 48
2405:27c0:23::/48 maxlen: 48
2405:27c0:24::/48 maxlen: 48
2405:27c0:25::/48 maxlen: 48
2405:27c0:26::/48 maxlen: 48
2405:27c0:27::/48 maxlen: 48
2405:27c0:28::/48 maxlen: 48
2405:27c0:29::/48 maxlen: 48
2405:27c0:2a::/48 maxlen: 48
2405:27c0:2b::/48 maxlen: 48
2405:27c0:2c::/48 maxlen: 48
2405:27c0:2d::/48 maxlen: 48
2405:27c0:2e::/48 maxlen: 48
2405:27c0:2f::/48 maxlen: 48
2405:27c0:30::/48 maxlen: 48
2405:27c0:31::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 29 Nov 2024 06:14:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 35600 (0x8b10)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Validity
Not Before: May 30 16:05:36 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6658a3cf-c205
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:95:81:f1:79:50:48:3f:d7:8b:0f:db:f8:34:
7f:8b:44:27:2e:bd:16:3d:17:2f:f0:5c:0e:0d:5c:
63:82:a6:46:86:24:6a:7b:95:5c:9c:35:4a:97:fb:
e5:68:b7:72:4d:12:50:7b:3b:3e:c1:41:83:5e:89:
e9:c5:37:8b:fa:3b:d3:33:b1:87:d6:d2:02:b7:34:
0f:8d:48:99:9b:a9:42:d0:49:32:e5:68:5c:54:c3:
18:6a:5e:b1:a4:d3:c0:53:f4:68:70:7c:c1:76:a1:
9e:a1:ac:b5:17:fd:80:00:70:09:92:7e:1b:4d:0f:
e0:24:a0:b2:7c:a0:11:63:32:30:01:1f:9c:3b:a9:
80:76:a8:c0:50:7f:4d:4d:57:c6:23:f4:c1:86:43:
64:62:67:c8:40:1e:4c:68:86:b6:87:c3:35:40:fe:
35:4b:e4:6e:4c:5d:fa:cc:18:6d:26:37:3d:98:c8:
5e:9b:5e:5e:92:6b:13:6f:c9:5b:1e:49:4b:24:29:
4c:cb:00:37:d3:1c:85:36:1c:49:e2:59:aa:6f:f4:
d7:4d:42:32:47:92:53:b2:48:05:ec:b1:7c:27:4e:
06:33:53:1d:e9:5f:f1:55:d7:fe:f1:a3:17:03:12:
39:51:b3:d2:9c:4b:fa:53:f6:d9:d3:cf:26:75:61:
7a:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:C4:15:94:67:BE:07:3C:2F:A8:18:3A:B5:61:6E:E5:07:A9:72:1A
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/DD42B126B75C11EDB5BD8751C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.99.12.0/22
103.144.118.0/23
IPv6:
2405:27c0::/32
Signature Algorithm: sha256WithRSAEncryption
97:f9:15:76:71:57:10:a9:8a:16:9c:0a:6d:7a:d3:f8:56:db:
90:7c:75:0f:d2:c3:a0:2e:c0:ce:fc:c3:06:d1:40:ce:ac:9d:
9b:a7:66:42:51:1d:b4:84:36:59:c1:b9:4c:c3:9e:cc:85:93:
39:e7:51:d2:c3:37:84:78:eb:d0:18:04:ff:33:3b:48:24:e1:
61:fe:16:10:53:c8:b1:c3:e5:73:04:18:ee:02:84:08:1e:d5:
8d:e9:a0:f6:59:4b:0a:7f:0f:25:c7:ad:9e:2e:0a:bb:11:65:
81:65:2c:4d:db:2b:bb:5c:72:c0:75:89:34:73:9b:5d:58:46:
c6:7b:df:94:ec:73:30:2d:54:43:72:95:c1:0d:bf:6d:59:f6:
13:db:3b:9e:c3:cc:8a:ee:6f:ae:df:c3:0c:bf:09:59:c0:96:
67:87:11:ff:88:82:d6:3e:f0:47:04:f1:05:ea:27:22:98:20:
f4:71:fe:ce:6e:bb:c7:11:68:a1:ba:36:ae:85:78:f3:ab:55:
54:01:40:63:d7:36:51:80:5d:1d:bc:95:24:80:10:7e:7f:3e:
bc:82:52:59:8d:d7:4e:33:e2:81:0b:b4:fc:27:25:6f:bd:1f:
4d:ea:cb:da:b2:8c:6b:0d:0c:14:5a:60:a9:2a:8a:d0:0a:19:
aa:5a:2b:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 11:17:53 2024 by rpki-client on console-fra.rpki-client.org