Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9199197/84B2EC98F27D11EA9456EE60C4F9AE02/FD72AA3CADE211EEA5C03933C4F9AE02.roa
File: FD72AA3CADE211EEA5C03933C4F9AE02.roa (raw, json)
Hash identifier: f9pG5IZm1U27Y8Pe53IPh55adUhbvwKttNQP+ocMu0M=
Subject key identifier: 16:9C:B0:96:43:38:64:09:07:A7:13:82:9A:C5:E2:9E:FB:D3:4E:0C
Certificate issuer: /CN=A9199197/serialNumber=6835DDFB8438D24BB6C5979316E54891066090A7
Certificate serial: 07D0
Authority key identifier: 68:35:DD:FB:84:38:D2:4B:B6:C5:97:93:16:E5:48:91:06:60:90:A7
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aDXd-4Q40ku2xZeTFuVIkQZgkKc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9199197/84B2EC98F27D11EA9456EE60C4F9AE02/FD72AA3CADE211EEA5C03933C4F9AE02.roa
Signing time: Fri 14 Jun 2024 23:12:28 +0000
ROA not before: Fri 14 Jun 2024 23:12:28 +0000
ROA not after: Wed 30 Jul 2025 00:00:00 +0000
asID: 45609
IP address blocks: 27.56.0.0/13 maxlen: 24
103.235.8.0/22 maxlen: 24
106.192.0.0/11 maxlen: 24
110.224.0.0/14 maxlen: 24
117.96.0.0/17 maxlen: 22
117.96.0.0/18 maxlen: 24
117.96.64.0/19 maxlen: 24
117.96.96.0/20 maxlen: 24
117.96.112.0/21 maxlen: 24
117.96.120.0/22 maxlen: 24
117.96.124.0/23 maxlen: 23
117.96.128.0/20 maxlen: 24
117.96.144.0/21 maxlen: 24
117.96.153.0/24 maxlen: 24
117.96.154.0/24 maxlen: 24
117.96.160.0/20 maxlen: 24
117.96.176.0/20 maxlen: 24
117.97.0.0/17 maxlen: 18
117.97.0.0/18 maxlen: 24
117.97.64.0/19 maxlen: 20
117.97.64.0/20 maxlen: 24
117.97.80.0/21 maxlen: 21
117.97.80.0/22 maxlen: 24
117.97.91.0/24 maxlen: 24
117.97.92.0/24 maxlen: 24
117.97.128.0/17 maxlen: 24
117.98.0.0/17 maxlen: 24
150.129.212.0/22 maxlen: 24
223.176.0.0/12 maxlen: 24
223.224.32.0/19 maxlen: 24
223.224.64.0/18 maxlen: 24
223.224.128.0/17 maxlen: 24
223.225.0.0/16 maxlen: 24
223.226.0.0/15 maxlen: 24
223.228.0.0/14 maxlen: 24
223.232.0.0/13 maxlen: 24
2401:4900:800::/37 maxlen: 48
2401:4900:1000::/37 maxlen: 48
2401:4900:1800::/37 maxlen: 48
2401:4900:2000::/37 maxlen: 48
2401:4900:2800::/37 maxlen: 48
2401:4900:3000::/37 maxlen: 48
2401:4900:3800::/37 maxlen: 48
2401:4900:4000::/37 maxlen: 48
2401:4900:4800::/37 maxlen: 48
2401:4900:5000::/37 maxlen: 48
2401:4900:5800::/37 maxlen: 48
2401:4900:6000::/37 maxlen: 48
2401:4900:7000::/37 maxlen: 48
2401:4900:7800::/37 maxlen: 48
2401:4900:8000::/37 maxlen: 48
2401:4900:9000::/37 maxlen: 48
2401:4900:a000::/37 maxlen: 48
2401:4900:a800::/37 maxlen: 44
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9199197/84B2EC98F27D11EA9456EE60C4F9AE02/aDXd-4Q40ku2xZeTFuVIkQZgkKc.crl
rsync://rpki.apnic.net/member_repository/A9199197/84B2EC98F27D11EA9456EE60C4F9AE02/aDXd-4Q40ku2xZeTFuVIkQZgkKc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aDXd-4Q40ku2xZeTFuVIkQZgkKc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 23 Jun 2024 22:47:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2000 (0x7d0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9199197/serialNumber=6835DDFB8438D24BB6C5979316E54891066090A7
Validity
Not Before: Jun 14 23:12:28 2024 GMT
Not After : Jul 30 00:00:00 2025 GMT
Subject: CN=666cce5b-0c2e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:b5:2c:83:69:c6:6c:01:bb:90:b6:d3:f0:95:
85:d3:55:9c:0c:91:35:ba:2a:3c:77:d5:1e:fc:c1:
de:80:1e:93:26:41:f6:3e:48:68:1d:cc:f0:eb:30:
24:af:b5:e8:35:47:cb:a6:e6:ef:04:76:c8:c2:33:
19:41:4a:e8:e3:42:cf:f3:2c:e8:a3:15:79:18:1a:
f2:ef:95:bd:e0:0f:25:15:b9:ed:9a:94:81:9c:65:
7b:9b:2b:a5:d0:c7:ec:71:0b:31:21:6c:57:98:f9:
b4:33:96:6a:81:29:71:ba:26:ec:29:80:3b:b4:d5:
8e:14:8f:45:e6:2f:db:09:11:82:79:19:4b:c7:65:
34:88:29:75:0f:d8:5b:29:74:e3:fd:95:0c:34:ee:
63:60:4e:fe:6a:5c:32:a5:b3:63:dc:91:53:ab:6c:
e6:28:f9:2f:22:b3:59:f8:9e:62:e6:fc:be:1c:49:
d3:50:5b:14:26:dd:96:f4:e5:b8:9e:63:23:e8:59:
a3:38:ce:fe:e1:97:7f:90:17:79:5c:8b:cc:60:03:
bd:93:3b:81:83:24:4a:0f:2a:e6:04:19:74:52:8d:
c1:7f:8f:09:e7:15:ca:38:52:18:c8:a4:ce:ca:ed:
3a:f9:6d:40:8e:3a:95:06:7a:d7:4c:92:5e:44:5e:
16:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:9C:B0:96:43:38:64:09:07:A7:13:82:9A:C5:E2:9E:FB:D3:4E:0C
X509v3 Authority Key Identifier:
keyid:68:35:DD:FB:84:38:D2:4B:B6:C5:97:93:16:E5:48:91:06:60:90:A7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9199197/84B2EC98F27D11EA9456EE60C4F9AE02/aDXd-4Q40ku2xZeTFuVIkQZgkKc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aDXd-4Q40ku2xZeTFuVIkQZgkKc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9199197/84B2EC98F27D11EA9456EE60C4F9AE02/FD72AA3CADE211EEA5C03933C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
27.56.0.0/13
103.235.8.0/22
106.192.0.0/11
110.224.0.0/14
117.96.0.0-117.96.151.255
117.96.153.0-117.96.154.255
117.96.160.0/19
117.97.0.0-117.98.127.255
150.129.212.0/22
223.176.0.0/12
223.224.32.0-223.239.255.255
IPv6:
2401:4900:800::-2401:4900:67ff:ffff:ffff:ffff:ffff:ffff
2401:4900:7000::-2401:4900:87ff:ffff:ffff:ffff:ffff:ffff
2401:4900:9000::/37
2401:4900:a000::/36
Signature Algorithm: sha256WithRSAEncryption
04:ba:01:d1:1b:6c:c6:40:c4:87:0a:22:cc:ef:57:35:94:90:
0c:7c:f2:8e:d4:92:18:02:3f:7a:ed:db:95:6d:76:25:3b:f5:
78:3e:ca:ae:a5:2b:ad:56:d5:73:ab:eb:ee:48:f3:d3:14:e2:
83:0b:47:77:0d:18:a4:90:14:3d:3a:b4:13:6c:56:99:a9:e3:
90:7d:8c:8a:1b:5f:81:c9:80:66:cb:f2:41:2c:bb:d3:f3:eb:
1b:b6:57:a9:6c:26:e4:f4:bb:00:9f:bc:76:d7:e5:2e:8f:54:
0a:47:76:0e:1b:9e:f1:52:a9:83:1d:dd:a7:48:ae:b3:de:2d:
89:22:9f:7a:00:57:5c:d5:e4:cd:e9:14:52:60:28:3e:0f:d4:
f2:50:59:74:c6:97:06:cc:ef:4a:bb:3a:93:d9:ef:d3:a0:37:
bf:c6:b6:97:ed:d9:1a:28:9d:ef:99:41:b2:c6:34:56:77:40:
1d:f5:9a:6a:ed:31:e2:3b:56:aa:4b:5a:10:b7:ae:fe:35:3f:
9f:3c:21:75:24:85:b4:31:67:10:90:9e:c9:ba:fc:f1:5a:ca:
b3:91:76:00:7a:40:46:b5:45:da:12:cb:21:d6:f0:0c:c2:d6:
a1:3a:2d:8f:6e:d0:c5:3e:ef:89:46:83:f7:bd:95:05:bf:e1:
e9:da:b3:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 17 02:12:21 2024 by rpki-client on console-ams.rpki-client.org