Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9191FA5/08056CE41D8711E29DD3C6DE08B02CD2/FF09B6BEC2E511EBBDB1B180C4F9AE02.roa
File: FF09B6BEC2E511EBBDB1B180C4F9AE02.roa (raw, json)
Hash identifier: lXhXYqP3YCYqbCzUXFx0HIgOh74Hog3CKrdukwf8E9w=
Subject key identifier: 8B:73:46:6B:49:D1:E5:3E:4D:85:40:47:2A:4C:D0:22:91:5D:33:44
Certificate issuer: /CN=A9191FA5/serialNumber=AB11E809F2BC66B0D1E60B8A31F86B5B82E00E39
Certificate serial: 3463
Authority key identifier: AB:11:E8:09:F2:BC:66:B0:D1:E6:0B:8A:31:F8:6B:5B:82:E0:0E:39
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qxHoCfK8ZrDR5guKMfhrW4LgDjk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9191FA5/08056CE41D8711E29DD3C6DE08B02CD2/FF09B6BEC2E511EBBDB1B180C4F9AE02.roa
Signing time: Tue 02 Jan 2024 14:50:28 +0000
ROA not before: Tue 02 Jan 2024 14:50:28 +0000
ROA not after: Sat 31 Aug 2024 00:00:00 +0000
asID: 18101
IP address blocks: 115.248.0.0/16 maxlen: 16
115.248.0.0/19 maxlen: 19
115.248.0.0/22 maxlen: 22
115.248.2.0/24 maxlen: 24
115.248.4.0/22 maxlen: 22
115.248.8.0/22 maxlen: 22
115.248.12.0/22 maxlen: 22
115.248.16.0/22 maxlen: 22
115.248.18.0/24 maxlen: 24
115.248.20.0/22 maxlen: 22
115.248.24.0/22 maxlen: 22
115.248.28.0/22 maxlen: 22
115.248.32.0/19 maxlen: 19
115.248.32.0/22 maxlen: 22
115.248.36.0/22 maxlen: 22
115.248.40.0/22 maxlen: 22
115.248.42.0/24 maxlen: 24
115.248.44.0/22 maxlen: 22
115.248.48.0/22 maxlen: 22
115.248.50.0/24 maxlen: 24
115.248.52.0/22 maxlen: 22
115.248.56.0/24 maxlen: 24
115.248.59.0/24 maxlen: 24
115.248.64.0/19 maxlen: 19
115.248.64.0/24 maxlen: 24
115.248.66.0/24 maxlen: 24
115.248.84.0/24 maxlen: 24
115.248.85.0/24 maxlen: 24
115.248.86.0/24 maxlen: 24
115.248.87.0/24 maxlen: 24
115.248.88.0/24 maxlen: 24
115.248.90.0/24 maxlen: 24
115.248.96.0/19 maxlen: 19
115.248.96.0/24 maxlen: 24
115.248.116.0/24 maxlen: 24
115.248.117.0/24 maxlen: 24
115.248.118.0/24 maxlen: 24
115.248.119.0/24 maxlen: 24
115.248.128.0/17 maxlen: 17
115.248.130.0/24 maxlen: 24
115.248.131.0/24 maxlen: 24
115.248.134.0/24 maxlen: 24
115.248.164.0/24 maxlen: 24
115.248.165.0/24 maxlen: 24
115.248.166.0/24 maxlen: 24
115.248.167.0/24 maxlen: 24
115.248.228.0/22 maxlen: 22
115.249.0.0/16 maxlen: 16
115.249.172.0/22 maxlen: 22
115.249.206.0/24 maxlen: 24
115.250.0.0/16 maxlen: 16
115.251.0.0/16 maxlen: 16
115.252.0.0/16 maxlen: 16
115.253.0.0/16 maxlen: 16
115.254.0.0/16 maxlen: 16
115.254.92.0/22 maxlen: 22
123.236.0.0/16 maxlen: 24
123.237.0.0/16 maxlen: 24
123.238.0.0/16 maxlen: 24
123.239.0.0/16 maxlen: 24
124.124.0.0/16 maxlen: 24
124.125.0.0/16 maxlen: 24
202.138.96.0/20 maxlen: 24
202.138.112.0/20 maxlen: 24
220.224.0.0/14 maxlen: 22
220.224.145.0/24 maxlen: 24
220.225.7.0/24 maxlen: 24
220.225.120.0/24 maxlen: 24
220.225.121.0/24 maxlen: 24
220.225.149.0/24 maxlen: 24
220.225.156.0/24 maxlen: 24
220.225.177.0/24 maxlen: 24
220.225.196.0/24 maxlen: 24
220.227.17.0/24 maxlen: 24
220.227.52.0/23 maxlen: 23
220.227.52.0/24 maxlen: 24
220.227.138.0/24 maxlen: 24
220.227.194.0/24 maxlen: 24
220.227.205.0/24 maxlen: 24
220.227.249.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9191FA5/08056CE41D8711E29DD3C6DE08B02CD2/qxHoCfK8ZrDR5guKMfhrW4LgDjk.crl
rsync://rpki.apnic.net/member_repository/A9191FA5/08056CE41D8711E29DD3C6DE08B02CD2/qxHoCfK8ZrDR5guKMfhrW4LgDjk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qxHoCfK8ZrDR5guKMfhrW4LgDjk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 07 Jun 2024 14:30:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13411 (0x3463)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9191FA5/serialNumber=AB11E809F2BC66B0D1E60B8A31F86B5B82E00E39
Validity
Not Before: Jan 2 14:50:28 2024 GMT
Not After : Aug 31 00:00:00 2024 GMT
Subject: CN=659422b3-89dd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:4f:2f:39:74:96:ce:a9:1f:49:25:64:e6:fb:
2a:82:9c:71:77:cf:5e:3a:53:be:a2:db:64:a3:5b:
34:e8:78:84:fc:85:b6:2a:33:15:f5:cd:35:52:d6:
d2:54:f9:7d:ce:bc:ea:31:a2:40:8c:24:e8:8c:f5:
4d:16:3e:98:43:f6:14:63:70:ca:4e:4a:8b:f0:aa:
e6:60:a3:78:f6:85:4a:c7:8e:15:bf:06:12:cb:b0:
c3:11:a0:94:b0:ec:7d:a6:b8:15:7f:f8:57:fc:88:
23:a8:a7:d7:68:32:3a:05:2b:28:a4:2d:88:b3:b2:
93:a0:25:bb:19:77:c9:24:6f:62:95:49:72:3e:4b:
25:c1:ab:94:01:53:c7:d7:12:81:3a:15:fe:6e:d7:
b8:c1:82:40:ff:0a:f0:dc:61:6f:7f:0d:37:c4:3b:
35:1d:2c:43:f2:97:b2:48:7b:7f:73:8b:4f:b6:79:
6e:89:2f:54:6e:5e:82:01:6e:3c:74:ac:fe:64:7a:
c7:f3:09:ef:b7:27:7f:ff:a0:12:2e:19:1f:04:00:
e5:4b:b7:44:e8:41:11:e3:96:04:36:b8:df:4a:95:
61:d2:4b:6f:98:ee:c8:f3:2e:92:80:c1:4f:b7:4a:
a2:09:6b:45:d4:dc:bc:cf:92:c9:54:76:d6:72:ad:
20:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:73:46:6B:49:D1:E5:3E:4D:85:40:47:2A:4C:D0:22:91:5D:33:44
X509v3 Authority Key Identifier:
keyid:AB:11:E8:09:F2:BC:66:B0:D1:E6:0B:8A:31:F8:6B:5B:82:E0:0E:39
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9191FA5/08056CE41D8711E29DD3C6DE08B02CD2/qxHoCfK8ZrDR5guKMfhrW4LgDjk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qxHoCfK8ZrDR5guKMfhrW4LgDjk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9191FA5/08056CE41D8711E29DD3C6DE08B02CD2/FF09B6BEC2E511EBBDB1B180C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
115.248.0.0-115.254.255.255
123.236.0.0/14
124.124.0.0/15
202.138.96.0/19
220.224.0.0/14
Signature Algorithm: sha256WithRSAEncryption
e2:7d:72:ba:7b:49:8b:df:b2:18:3a:bc:da:ed:82:a3:62:f2:
00:ba:ab:d5:a2:8b:de:eb:50:cc:f3:e0:69:5d:3a:fb:93:3a:
db:bd:60:17:ad:c7:82:cb:9b:09:98:97:11:59:e9:5f:a4:8f:
25:0d:59:d7:d4:80:3d:db:31:9d:04:8c:a6:20:93:eb:7e:db:
c8:da:ec:5c:f8:bb:0e:52:90:b3:05:d4:7c:ce:56:e3:b2:ab:
47:aa:e7:ed:17:82:24:7e:3c:1a:e0:80:b4:a1:54:1c:27:35:
df:3e:b8:e0:e1:05:10:40:30:67:52:9e:a4:ea:a4:cc:82:9f:
21:40:23:9d:e7:ea:d8:22:f9:27:47:2a:b8:4a:91:8d:c2:1b:
9a:14:c6:44:e6:d5:5e:6b:61:61:93:9f:91:b3:cd:d9:01:47:
5a:1b:13:e9:88:2a:15:63:0e:26:8e:29:88:71:2f:c4:f1:45:
75:51:04:6e:dd:73:e0:72:48:cc:a4:f0:4b:41:83:53:ca:eb:
27:78:09:7f:f2:2e:7f:46:44:ff:0f:77:55:8f:53:a6:97:f9:
79:f6:25:ab:b0:72:4d:d4:4e:c5:3b:05:4f:3f:71:43:e2:ca:
f2:82:0d:32:12:e4:fb:a3:82:fc:f2:2c:e7:cb:2c:75:36:d6:
c7:82:a6:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 31 16:41:37 2024 by rpki-client on console-ams.rpki-client.org