Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/0D64F45A766A11EEBC78572CC4F9AE02.roa
File: 0D64F45A766A11EEBC78572CC4F9AE02.roa (raw, json)
Hash identifier: ODyenvSBcxCTnogsx67nySiZOpUv5D9M8Q8mgV2eq9I=
Subject key identifier: F1:BD:5F:96:99:23:9D:86:00:49:C3:3B:6A:BC:CB:22:B2:A3:33:DD
Certificate issuer: /CN=A91A560A/serialNumber=167C3B221775FEC05039468150CE814756AC6F0A
Certificate serial: 4106
Authority key identifier: 16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/0D64F45A766A11EEBC78572CC4F9AE02.roa
Signing time: Fri 01 Dec 2023 17:30:06 +0000
ROA not before: Fri 01 Dec 2023 17:30:06 +0000
ROA not after: Thu 31 Oct 2024 00:00:00 +0000
asID: 45903
IP address blocks: 42.96.32.0/19 maxlen: 19
42.96.38.0/23 maxlen: 24
42.96.40.0/21 maxlen: 24
42.96.48.0/21 maxlen: 24
42.96.56.0/22 maxlen: 24
42.96.60.0/23 maxlen: 23
42.96.60.0/24 maxlen: 24
42.96.61.0/24 maxlen: 24
42.96.62.0/24 maxlen: 24
45.122.232.0/22 maxlen: 24
45.122.236.0/22 maxlen: 24
45.122.240.0/22 maxlen: 24
45.122.244.0/22 maxlen: 23
45.122.245.0/24 maxlen: 24
45.122.246.0/23 maxlen: 24
45.122.248.0/22 maxlen: 24
45.122.252.0/24 maxlen: 24
45.122.254.0/23 maxlen: 24
101.99.0.0/21 maxlen: 21
101.99.0.0/23 maxlen: 24
101.99.2.0/23 maxlen: 23
101.99.2.0/24 maxlen: 24
101.99.4.0/22 maxlen: 24
101.99.8.0/21 maxlen: 24
101.99.16.0/20 maxlen: 24
101.99.32.0/19 maxlen: 24
103.9.196.0/22 maxlen: 24
103.63.104.0/22 maxlen: 24
103.63.108.0/22 maxlen: 22
103.63.110.0/23 maxlen: 24
103.63.112.0/22 maxlen: 24
103.63.116.0/22 maxlen: 24
103.63.120.0/22 maxlen: 24
103.224.168.0/22 maxlen: 24
103.229.40.0/22 maxlen: 24
103.246.220.0/22 maxlen: 24
113.20.96.0/19 maxlen: 24
115.165.160.0/21 maxlen: 21
115.165.160.0/24 maxlen: 24
115.165.166.0/24 maxlen: 24
119.82.128.0/20 maxlen: 23
119.82.128.0/22 maxlen: 24
119.82.132.0/24 maxlen: 24
119.82.134.0/23 maxlen: 24
119.82.136.0/21 maxlen: 24
124.158.14.0/24 maxlen: 24
144.48.24.0/22 maxlen: 24
183.91.0.0/20 maxlen: 20
183.91.0.0/21 maxlen: 24
183.91.8.0/21 maxlen: 21
183.91.8.0/22 maxlen: 24
183.91.12.0/23 maxlen: 24
183.91.15.0/24 maxlen: 24
183.91.16.0/20 maxlen: 24
202.134.16.0/21 maxlen: 24
203.171.16.0/20 maxlen: 24
203.205.0.0/21 maxlen: 24
203.205.8.0/21 maxlen: 21
203.205.8.0/22 maxlen: 22
203.205.9.0/24 maxlen: 24
203.205.10.0/23 maxlen: 24
203.205.12.0/22 maxlen: 24
203.205.16.0/20 maxlen: 24
203.205.32.0/19 maxlen: 24
2402:5300::/35 maxlen: 35
2402:5300::/40 maxlen: 48
2402:5300:400::/42 maxlen: 42
2402:5300:400::/46 maxlen: 48
2402:5300:404::/48 maxlen: 48
2402:5300:405::/48 maxlen: 48
2402:5300:406::/48 maxlen: 48
2402:5300:408::/46 maxlen: 48
2402:5300:40c::/46 maxlen: 48
2402:5300:410::/44 maxlen: 48
2402:5300:420::/44 maxlen: 48
2402:5300:430::/44 maxlen: 48
2402:5300:440::/42 maxlen: 48
2402:5300:480::/42 maxlen: 48
2402:5300:4c0::/42 maxlen: 48
2402:5300:500::/40 maxlen: 48
2402:5300:600::/40 maxlen: 48
2402:5300:700::/40 maxlen: 48
2402:5300:800::/40 maxlen: 48
2402:5300:900::/40 maxlen: 48
2402:5300:1000::/36 maxlen: 48
2402:5300:2000::/35 maxlen: 35
2402:5300:2000::/36 maxlen: 48
2402:5300:4000::/35 maxlen: 35
2402:5300:4000::/42 maxlen: 42
2402:5300:4000::/44 maxlen: 48
2402:5300:4010::/44 maxlen: 48
2402:5300:4022::/48 maxlen: 48
2402:5300:4023::/48 maxlen: 48
2402:5300:4024::/46 maxlen: 48
2402:5300:4028::/46 maxlen: 48
2402:5300:402c::/46 maxlen: 48
2402:5300:4030::/44 maxlen: 48
2402:5300:4040::/42 maxlen: 48
2402:5300:4080::/42 maxlen: 48
2402:5300:40c0::/42 maxlen: 48
2402:5300:4100::/40 maxlen: 48
2402:5300:4200::/40 maxlen: 48
2402:5300:4300::/40 maxlen: 48
2402:5300:4400::/40 maxlen: 48
2402:5300:4500::/40 maxlen: 48
2402:5300:4600::/40 maxlen: 48
2402:5300:4700::/40 maxlen: 48
2402:5300:5000::/36 maxlen: 48
2402:5300:6000::/44 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl
rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 07 Jun 2024 14:26:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 16646 (0x4106)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A560A/serialNumber=167C3B221775FEC05039468150CE814756AC6F0A
Validity
Not Before: Dec 1 17:30:06 2023 GMT
Not After : Oct 31 00:00:00 2024 GMT
Subject: CN=656a181e-88c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:17:90:67:82:7b:96:ca:f0:9f:88:c9:b4:d4:
e6:b8:21:56:42:04:60:e6:68:31:c5:b4:a4:64:48:
8e:e6:cc:6f:cb:b5:74:ca:97:5d:f2:a2:7d:56:6a:
ee:84:03:6c:52:6b:e2:4b:19:66:a6:9a:91:d9:f9:
14:7c:9f:03:34:15:8f:e2:b7:f2:13:6c:01:4e:bb:
42:80:d3:a7:a2:47:79:32:e6:5e:cb:7b:c1:06:7c:
bc:96:d9:01:18:9c:a3:2e:fd:5b:98:75:36:61:94:
8a:16:42:e8:cc:e4:1a:8d:04:14:c6:1e:28:dc:93:
0e:75:43:96:d1:76:2d:68:34:14:3b:51:ef:0e:ba:
0d:b2:5f:c7:f3:90:79:2f:ef:1e:a2:18:21:ce:4f:
a5:e9:a4:b0:64:ac:7f:c3:0e:53:07:86:e6:47:fc:
b6:f2:bb:19:be:33:61:50:6a:57:9c:24:f2:bd:52:
02:cb:af:bc:be:0c:c4:bc:fb:e6:41:39:71:6c:1a:
0c:a9:8e:f1:bb:f5:d8:96:9f:e0:cd:b0:ae:7d:dd:
e8:ac:ca:06:c4:4f:a5:fb:19:dd:b4:92:67:b6:66:
09:eb:03:11:0e:97:69:24:87:20:f7:93:1b:23:f2:
b6:de:e8:17:a5:65:f8:d0:ad:01:c4:ed:22:2b:00:
fb:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:BD:5F:96:99:23:9D:86:00:49:C3:3B:6A:BC:CB:22:B2:A3:33:DD
X509v3 Authority Key Identifier:
keyid:16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/0D64F45A766A11EEBC78572CC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
42.96.32.0/19
45.122.232.0-45.122.252.255
45.122.254.0/23
101.99.0.0/18
103.9.196.0/22
103.63.104.0-103.63.123.255
103.224.168.0/22
103.229.40.0/22
103.246.220.0/22
113.20.96.0/19
115.165.160.0/21
119.82.128.0/20
124.158.14.0/24
144.48.24.0/22
183.91.0.0/19
202.134.16.0/21
203.171.16.0/20
203.205.0.0/18
IPv6:
2402:5300::-2402:5300:600f:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
6c:96:5f:6d:d8:49:b8:82:72:5f:08:a8:48:dc:b1:fe:87:7b:
11:3d:47:5e:49:84:59:76:3a:fd:27:1a:2a:89:21:e9:ee:eb:
60:a6:a1:17:36:c9:f1:d5:69:9e:1f:14:ee:01:ca:6f:cb:d2:
1c:b4:86:d4:84:b5:6f:22:99:17:40:a1:f9:7c:57:2a:4c:6e:
44:23:b9:b9:d4:7d:2a:a4:db:4a:11:d0:74:7c:db:f5:d0:ba:
2f:ef:52:4e:48:a7:72:25:01:97:f0:68:ec:50:da:9f:3d:fb:
07:e4:e2:eb:a0:1c:d2:ba:6b:27:00:f4:68:f5:1b:99:d0:4d:
d0:a1:89:72:a5:91:51:54:8c:b9:88:c8:e3:7d:e3:5a:bd:95:
e0:04:d6:58:f3:bc:5d:e1:ec:6b:5b:2a:21:e5:ac:f8:b6:fd:
39:0f:62:9b:52:6d:bc:8d:69:ac:7a:dd:90:a9:04:8a:72:f1:
94:45:7f:92:f5:cb:2b:1f:22:38:dd:cb:00:ca:bb:0a:e5:5c:
ea:9e:4b:a1:dd:5c:f4:a7:24:4a:79:03:c3:06:72:fc:63:9e:
33:32:92:2e:11:1d:b9:e1:75:0e:a4:f9:8e:2f:0a:5d:87:3a:
ba:e8:c0:ce:22:9a:16:8b:04:29:95:68:c5:c9:52:ae:01:ba:
35:c4:37:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 31 15:08:33 2024 by rpki-client on console-fra.rpki-client.org