Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/F0AD15386E4211EEA90FD86EC4F9AE02.roa
File: F0AD15386E4211EEA90FD86EC4F9AE02.roa (raw, json)
Hash identifier: WlaSyqVX5fNcEEhYOg3AY2le0tJYoZSDWMi3BbQKARw=
Subject key identifier: 45:C9:8C:DB:C5:E3:E4:03:78:E9:B7:D7:17:7C:9F:01:94:65:9A:4B
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: 90E6
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/F0AD15386E4211EEA90FD86EC4F9AE02.roa
Signing time: Thu 30 May 2024 16:29:53 +0000
ROA not before: Thu 30 May 2024 16:29:53 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 45582
IP address blocks: 27.116.16.0/21 maxlen: 24
45.112.184.0/24 maxlen: 24
45.112.185.0/24 maxlen: 24
45.112.186.0/24 maxlen: 24
45.112.187.0/24 maxlen: 24
45.118.72.0/22 maxlen: 24
45.249.48.0/24 maxlen: 24
45.249.50.0/24 maxlen: 24
103.10.132.0/22 maxlen: 24
103.22.172.0/22 maxlen: 24
103.52.36.0/22 maxlen: 24
103.124.28.0/23 maxlen: 24
103.126.42.0/23 maxlen: 24
103.178.208.0/23 maxlen: 24
103.196.4.0/22 maxlen: 24
103.217.212.0/22 maxlen: 24
119.235.48.0/21 maxlen: 24
182.48.214.0/24 maxlen: 24
182.48.219.0/24 maxlen: 24
182.48.254.0/24 maxlen: 24
202.131.131.0/24 maxlen: 24
202.140.56.0/24 maxlen: 24
202.140.57.0/24 maxlen: 24
2400:3680::/32 maxlen: 32
2400:3680:700::/40 maxlen: 40
2400:3680:800::/40 maxlen: 40
2400:3680:900::/40 maxlen: 40
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 02 Dec 2024 10:54:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 37094 (0x90e6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Validity
Not Before: May 30 16:29:53 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6658a981-83b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:b7:97:9b:ab:b0:8d:f2:22:90:af:12:e4:4f:
44:da:de:a9:d5:f1:bd:9e:fd:65:55:33:b5:78:42:
5a:25:99:93:3b:76:7d:86:04:3a:7c:37:50:66:6a:
4f:b9:d1:58:07:0c:e3:2b:3a:29:09:8d:99:4e:df:
41:cc:fb:30:8e:84:32:f4:06:e0:6f:40:5b:89:e7:
74:55:86:ec:fd:d4:94:a1:55:13:1e:11:94:0a:81:
af:75:4c:04:46:ec:51:c9:da:6c:70:1a:be:71:99:
86:72:9d:33:eb:f9:0f:c5:c6:a6:f1:24:9f:6c:fe:
5c:70:3e:25:c6:2d:27:61:aa:00:1e:0b:c1:9d:34:
1f:b7:94:0d:39:99:16:f9:3e:5f:9d:67:19:ff:12:
44:67:0d:cd:6a:13:72:61:b2:e5:22:55:a3:4b:a0:
67:59:fb:7d:ca:34:b3:c7:d5:94:ca:7f:8d:b8:c0:
ff:94:2b:2e:a5:ff:b7:b0:8c:e6:e5:3d:99:8f:57:
ac:19:55:3b:bd:31:4c:08:cf:22:e5:a5:6f:e7:58:
17:7a:aa:92:44:24:ee:c5:50:6c:aa:4c:67:a1:f1:
b9:41:f5:a4:2d:69:56:35:e3:65:99:f3:35:ef:52:
ee:d8:2a:be:7e:86:b1:f9:2a:92:98:41:94:f1:74:
c3:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:C9:8C:DB:C5:E3:E4:03:78:E9:B7:D7:17:7C:9F:01:94:65:9A:4B
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/F0AD15386E4211EEA90FD86EC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
27.116.16.0/21
45.112.184.0/22
45.118.72.0/22
45.249.48.0/24
45.249.50.0/24
103.10.132.0/22
103.22.172.0/22
103.52.36.0/22
103.124.28.0/23
103.126.42.0/23
103.178.208.0/23
103.196.4.0/22
103.217.212.0/22
119.235.48.0/21
182.48.214.0/24
182.48.219.0/24
182.48.254.0/24
202.131.131.0/24
202.140.56.0/23
IPv6:
2400:3680::/32
Signature Algorithm: sha256WithRSAEncryption
99:3d:e8:db:3f:dc:ab:ef:cd:0e:3b:1b:a7:7c:ae:bf:59:36:
24:59:96:f2:c2:d7:02:e6:17:67:1e:04:d5:08:69:d8:b0:5d:
d6:1c:b1:17:68:15:e0:59:e0:c1:11:e0:f3:8b:63:51:5e:22:
25:d7:22:f9:d7:f1:51:79:d6:19:91:0a:3e:1b:37:78:e7:db:
1b:33:6e:e8:c3:24:c8:51:f3:e9:8a:f2:c5:de:2f:8e:ea:61:
b3:f1:4d:77:27:cd:b3:5a:e4:17:82:44:7f:48:00:75:ae:71:
bd:03:e7:10:37:9f:6a:df:40:e7:c4:62:b0:b8:f8:4b:b2:2f:
de:1e:91:d8:16:7b:ef:5a:83:cb:df:aa:29:07:9e:ea:e2:fd:
b0:c0:91:d1:f0:e7:06:87:49:de:52:ed:3c:9f:f9:76:c7:23:
6c:9b:b2:d7:6b:8f:a9:f5:7e:93:b7:6a:eb:ea:b7:bb:f5:b6:
00:2a:2c:b7:ff:09:45:22:c2:41:3e:82:12:84:11:48:6a:95:
f6:bb:c9:32:ed:42:43:24:44:d8:3b:6f:31:d9:8d:1a:a3:eb:
70:17:49:52:8e:19:98:fd:25:76:47:96:e4:b0:d6:d4:04:b5:
6d:bd:bb:80:23:53:17:41:e3:aa:60:dc:22:8c:e6:ad:32:3b:
6e:5a:34:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 13:17:30 2024 by rpki-client on console-ams.rpki-client.org