Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A919DAF2/26EC6DDAD3DA11E58C5CD40FC4F9AE02/28A82AA6144A11EFBA3C7F27C4F9AE02.roa
File: 28A82AA6144A11EFBA3C7F27C4F9AE02.roa (raw, json)
Hash identifier: t2Vug4LYhrs1FXb6L0ft598k9PbMSSyhTQrf8Og7fWQ=
Subject key identifier: 17:8A:F5:CC:EE:DE:4C:BC:F7:19:6F:FC:7B:90:36:0A:71:BF:F0:2B
Certificate issuer: /CN=A919DAF2/serialNumber=139CC1DB6B9D24B93B14928A7518D04EB3B26A3A
Certificate serial: 2128
Authority key identifier: 13:9C:C1:DB:6B:9D:24:B9:3B:14:92:8A:75:18:D0:4E:B3:B2:6A:3A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/E5zB22udJLk7FJKKdRjQTrOyajo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A919DAF2/26EC6DDAD3DA11E58C5CD40FC4F9AE02/28A82AA6144A11EFBA3C7F27C4F9AE02.roa
Signing time: Fri 17 May 2024 12:37:01 +0000
ROA not before: Fri 17 May 2024 12:37:01 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 18196
IP address blocks: 45.117.128.0/22 maxlen: 22
45.117.128.0/24 maxlen: 24
45.117.129.0/24 maxlen: 24
45.117.130.0/24 maxlen: 24
45.117.131.0/24 maxlen: 24
103.255.112.0/24 maxlen: 24
103.255.113.0/24 maxlen: 24
103.255.114.0/24 maxlen: 24
202.134.154.0/24 maxlen: 24
202.134.155.0/24 maxlen: 24
202.134.156.0/24 maxlen: 24
202.134.160.0/24 maxlen: 24
202.134.161.0/24 maxlen: 24
202.134.162.0/24 maxlen: 24
202.134.163.0/24 maxlen: 24
202.134.164.0/24 maxlen: 24
202.134.165.0/24 maxlen: 24
202.134.166.0/24 maxlen: 24
202.134.167.0/24 maxlen: 24
202.134.169.0/24 maxlen: 24
202.134.170.0/24 maxlen: 24
202.134.171.0/24 maxlen: 24
202.134.172.0/24 maxlen: 24
202.134.173.0/24 maxlen: 24
202.134.174.0/24 maxlen: 24
202.134.175.0/24 maxlen: 24
202.134.176.0/24 maxlen: 24
202.134.177.0/24 maxlen: 24
202.134.178.0/24 maxlen: 24
202.134.180.0/24 maxlen: 24
202.134.182.0/24 maxlen: 24
202.134.183.0/24 maxlen: 24
202.134.184.0/24 maxlen: 24
202.134.185.0/24 maxlen: 24
202.134.186.0/24 maxlen: 24
202.134.187.0/24 maxlen: 24
202.134.189.0/24 maxlen: 24
202.134.190.0/24 maxlen: 24
202.134.191.0/24 maxlen: 24
2402:f200::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A919DAF2/26EC6DDAD3DA11E58C5CD40FC4F9AE02/E5zB22udJLk7FJKKdRjQTrOyajo.crl
rsync://rpki.apnic.net/member_repository/A919DAF2/26EC6DDAD3DA11E58C5CD40FC4F9AE02/E5zB22udJLk7FJKKdRjQTrOyajo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/E5zB22udJLk7FJKKdRjQTrOyajo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 09 Jun 2024 16:24:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8488 (0x2128)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A919DAF2/serialNumber=139CC1DB6B9D24B93B14928A7518D04EB3B26A3A
Validity
Not Before: May 17 12:37:01 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=66474f6d-1275
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:d3:ec:50:15:3b:dc:09:73:23:7f:d6:05:03:
0b:06:a5:4a:0a:2c:1d:bd:61:7a:4c:00:64:6c:7e:
c9:eb:dd:05:44:1e:74:57:13:39:13:12:d1:04:b6:
1e:7c:a1:ff:03:5e:14:f8:e6:ef:6c:25:10:58:0c:
63:1f:38:74:5a:3b:b2:6e:65:a8:0c:09:b7:12:1b:
c7:33:e7:f8:5d:b1:12:aa:5f:a1:f0:4f:49:2c:f2:
c5:f9:14:a8:8d:d4:e5:55:60:62:7f:0a:af:c6:49:
71:c2:b0:e1:e2:6a:96:1b:34:19:e9:08:bf:9f:c6:
de:0e:7b:dc:0d:48:aa:0f:fe:ab:52:84:5d:12:d9:
4a:21:4f:0c:43:8f:92:25:6f:e4:9e:64:5f:f8:42:
7c:c4:f0:77:1e:42:95:02:bb:8c:57:e6:e4:0b:99:
c2:21:9d:11:a0:74:8b:06:f8:0b:5b:9e:35:58:be:
f0:f7:e0:99:f8:90:8f:91:0c:c6:2e:d6:0f:11:2c:
cf:75:81:63:3d:5b:bc:a4:cd:38:78:6c:ad:d3:97:
45:16:ac:54:e4:52:81:13:d8:15:2a:1c:a4:8f:86:
37:6e:9b:90:46:44:cb:f1:28:54:a6:67:e8:55:98:
b8:ad:22:e3:25:b6:38:26:d3:3f:7b:41:d2:dd:49:
9c:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:8A:F5:CC:EE:DE:4C:BC:F7:19:6F:FC:7B:90:36:0A:71:BF:F0:2B
X509v3 Authority Key Identifier:
keyid:13:9C:C1:DB:6B:9D:24:B9:3B:14:92:8A:75:18:D0:4E:B3:B2:6A:3A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A919DAF2/26EC6DDAD3DA11E58C5CD40FC4F9AE02/E5zB22udJLk7FJKKdRjQTrOyajo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/E5zB22udJLk7FJKKdRjQTrOyajo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919DAF2/26EC6DDAD3DA11E58C5CD40FC4F9AE02/28A82AA6144A11EFBA3C7F27C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.117.128.0/22
103.255.112.0-103.255.114.255
202.134.154.0-202.134.156.255
202.134.160.0/21
202.134.169.0-202.134.178.255
202.134.180.0/24
202.134.182.0-202.134.187.255
202.134.189.0-202.134.191.255
IPv6:
2402:f200::/32
Signature Algorithm: sha256WithRSAEncryption
80:b0:26:a5:a0:24:81:b3:46:5a:e4:38:c2:2e:95:88:e2:b4:
47:0c:47:fb:8f:62:69:46:94:78:47:a5:df:de:e4:dd:be:28:
bb:36:7c:0a:66:6a:b5:22:e7:50:8c:78:af:12:37:49:be:e9:
65:8e:f6:65:84:bd:df:89:75:67:ef:38:f1:5e:6e:2f:02:e2:
c1:0e:f4:5a:dd:32:ff:23:bd:d0:81:4d:b2:6e:a4:78:03:12:
74:ec:62:f0:f4:06:ed:b9:82:3c:f8:84:73:5f:43:7a:d4:3a:
fb:bb:cb:b2:af:05:68:74:81:bf:97:c3:4e:d7:39:8a:72:43:
15:df:be:95:63:4d:c6:75:bf:75:14:e8:4e:09:1e:09:90:8f:
b7:da:de:54:68:0d:26:d9:14:29:2a:62:cf:c5:47:38:48:08:
5a:56:a8:0a:a1:c8:3c:c6:a8:4d:a0:89:38:b1:c1:63:ce:2f:
b1:31:26:a9:7e:4a:b4:67:0e:bf:c8:f9:97:70:59:2f:11:c0:
38:7e:60:8f:2c:ff:c5:cf:4b:d1:c4:f3:5b:99:a8:db:c1:b0:
8a:2b:b6:39:56:62:db:f0:64:b8:d2:a5:ac:a1:a8:a6:23:f3:
1e:28:95:eb:a5:05:dd:93:bc:d3:c7:3e:ce:be:1d:0d:c5:79:
55:2c:16:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 2 18:47:10 2024 by rpki-client on console-ams.rpki-client.org