Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/3BF3900EA39911EEBDB0EE52C4F9AE02.roa
File: 3BF3900EA39911EEBDB0EE52C4F9AE02.roa (raw, json)
Hash identifier: KWK7zylSgRxH+atEBGtoeD+RxeDiWFE+uoOS5Ly94Qo=
Subject key identifier: D1:E7:A6:65:09:39:33:99:EB:B7:13:D2:43:5F:A4:B1:22:B4:C6:CE
Certificate issuer: /CN=A91A560A/serialNumber=167C3B221775FEC05039468150CE814756AC6F0A
Certificate serial: 416E
Authority key identifier: 16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/3BF3900EA39911EEBDB0EE52C4F9AE02.roa
Signing time: Tue 26 Dec 2023 02:48:23 +0000
ROA not before: Tue 26 Dec 2023 02:48:23 +0000
ROA not after: Thu 31 Oct 2024 00:00:00 +0000
asID: 140810
IP address blocks: 103.77.172.0/23 maxlen: 23
103.77.214.0/23 maxlen: 23
103.77.240.0/23 maxlen: 23
103.77.246.0/23 maxlen: 23
103.78.0.0/23 maxlen: 23
103.116.38.0/23 maxlen: 23
103.141.140.0/23 maxlen: 23
103.141.142.0/23 maxlen: 23
103.155.216.0/23 maxlen: 23
103.176.108.0/23 maxlen: 24
103.178.234.0/23 maxlen: 23
103.213.218.0/23 maxlen: 23
103.214.8.0/22 maxlen: 22
103.238.234.0/23 maxlen: 23
103.252.136.0/23 maxlen: 23
223.130.10.0/23 maxlen: 23
2001:df4:d880::/48 maxlen: 48
2400:ece0::/48 maxlen: 48
2401:1960::/48 maxlen: 48
2401:2420::/48 maxlen: 48
2401:3660::/48 maxlen: 48
2401:36a0::/48 maxlen: 48
2401:3760::/48 maxlen: 48
2401:37a0::/48 maxlen: 48
2401:3f20::/48 maxlen: 48
2401:45a0::/48 maxlen: 48
2405:19c0::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl
rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 07 Jun 2024 14:37:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 16750 (0x416e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A560A/serialNumber=167C3B221775FEC05039468150CE814756AC6F0A
Validity
Not Before: Dec 26 02:48:23 2023 GMT
Not After : Oct 31 00:00:00 2024 GMT
Subject: CN=658a3ef6-6f26
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:4a:53:b9:90:48:92:68:9b:26:47:9d:9c:e4:
06:69:cd:d3:43:12:7d:02:73:b0:b5:27:43:cc:63:
b7:ec:b4:ce:73:02:37:c8:1a:2e:5f:e0:a9:fa:62:
da:e4:53:bc:87:e7:c8:a7:23:26:09:09:17:42:5c:
b2:d2:1f:03:04:8c:22:5d:19:0d:bf:b7:f6:a7:7a:
df:a4:d3:1a:c4:70:b1:46:fd:e3:bd:b2:98:80:21:
52:c4:73:e8:a0:e2:18:79:97:da:8e:e9:bd:c1:dc:
c4:2f:92:95:49:c6:8e:2f:98:40:6b:3b:65:0b:a1:
96:c3:66:e8:13:e8:c8:ab:64:42:11:ab:d7:3e:38:
c5:a5:4f:a2:bf:05:22:e2:b3:3d:ae:c2:a3:86:f4:
38:33:08:de:f4:f8:f6:ec:e4:56:26:9a:27:b8:60:
11:5d:d5:85:5e:34:13:d9:35:79:4b:e7:83:c3:49:
ed:64:8d:50:e0:15:b6:75:fa:53:9f:f5:40:94:52:
9c:85:fd:dd:f8:43:d5:b9:76:97:39:6b:16:0c:68:
98:91:af:ba:df:dd:ce:bd:c0:1b:ea:cf:d0:6f:51:
09:39:d3:d1:67:3f:fc:87:fa:75:92:c5:bf:c6:e8:
7f:9d:d7:3e:a2:42:d9:44:85:4a:ba:45:26:5f:07:
5f:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:E7:A6:65:09:39:33:99:EB:B7:13:D2:43:5F:A4:B1:22:B4:C6:CE
X509v3 Authority Key Identifier:
keyid:16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/3BF3900EA39911EEBDB0EE52C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.77.172.0/23
103.77.214.0/23
103.77.240.0/23
103.77.246.0/23
103.78.0.0/23
103.116.38.0/23
103.141.140.0/22
103.155.216.0/23
103.176.108.0/23
103.178.234.0/23
103.213.218.0/23
103.214.8.0/22
103.238.234.0/23
103.252.136.0/23
223.130.10.0/23
IPv6:
2001:df4:d880::/48
2400:ece0::/48
2401:1960::/48
2401:2420::/48
2401:3660::/48
2401:36a0::/48
2401:3760::/48
2401:37a0::/48
2401:3f20::/48
2401:45a0::/48
2405:19c0::/32
Signature Algorithm: sha256WithRSAEncryption
68:41:6f:17:f3:25:1a:ed:8a:4f:a2:a0:da:b2:bc:71:c6:64:
66:51:07:86:2c:84:e5:14:8e:63:8e:9f:5a:9d:71:1c:a5:30:
b6:dc:37:87:05:34:13:78:b8:92:ef:51:b7:48:72:6f:a0:e3:
9c:94:09:3e:75:92:d2:de:76:56:f1:a5:a1:1e:2e:e5:44:45:
ab:68:1f:21:b7:c2:c2:b1:08:49:97:d5:0d:6e:ba:b2:14:b5:
bc:25:60:c3:a5:7b:13:e6:30:55:56:dc:4c:d7:cf:c8:32:ab:
60:b7:7f:c9:ed:16:3e:e0:c3:fe:c7:61:e8:14:94:f0:21:fb:
c5:b3:41:3c:62:03:62:74:cb:c9:de:95:b4:b7:0f:f7:b2:16:
1b:65:f1:24:9d:12:d1:5f:55:4f:8e:40:da:7a:61:ce:dd:6d:
1f:34:41:72:13:aa:96:d8:1b:05:12:c5:4f:24:89:d5:21:8d:
bc:6d:45:78:03:81:c5:70:eb:ef:e6:06:de:90:00:ad:8c:3b:
52:40:67:d3:d4:80:5a:1f:8e:9d:78:a0:77:b5:e6:36:3f:12:
09:b3:5a:4d:c7:e5:ff:2c:97:b3:8d:e1:b1:7b:5d:35:ef:46:
a6:c5:61:9e:8f:0a:c4:dd:34:88:e2:46:31:50:67:1b:12:c3:
c3:71:0c:7a
-----BEGIN CERTIFICATE-----
MIIGMTCCBRmgAwIBAgICQW4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QTU2MEExMTAvBgNVBAUTKDE2N0MzQjIyMTc3NUZFQzA1MDM5NDY4MTUwQ0U4MTQ3
NTZBQzZGMEEwHhcNMjMxMjI2MDI0ODIzWhcNMjQxMDMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02NThhM2VmNi02ZjI2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAwEpTuZBIkmibJkednOQGac3TQxJ9AnOwtSdDzGO37LTOcwI3yBouX+Cp+mLa
5FO8h+fIpyMmCQkXQlyy0h8DBIwiXRkNv7f2p3rfpNMaxHCxRv3jvbKYgCFSxHPo
oOIYeZfajum9wdzEL5KVScaOL5hAaztlC6GWw2boE+jIq2RCEavXPjjFpU+ivwUi
4rM9rsKjhvQ4Mwje9Pj27ORWJponuGARXdWFXjQT2TV5S+eDw0ntZI1Q4BW2dfpT
n/VAlFKchf3d+EPVuXaXOWsWDGiYka+6393OvcAb6s/Qb1EJOdPRZz/8h/p1ksW/
xuh/ndc+okLZRIVKukUmXwdfhQIDAQABo4IDVTCCA1EwHQYDVR0OBBYEFNHnpmUJ
OTOZ67cT0kNfpLEitMbOMB8GA1UdIwQYMBaAFBZ8OyIXdf7AUDlGgVDOgUdWrG8K
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNTYwQS9BQUVCMTkxQTFE
OEExMUUyQTM4N0QwRTQwOEIwMkNEMi9Gbnc3SWhkMV9zQlFPVWFCVU02QlIxYXNi
d28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0ZudzdJaGQxX3NCUU9VYUJVTTZCUjFhc2J3by5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
QTU2MEEvQUFFQjE5MUExRDhBMTFFMkEzODdEMEU0MDhCMDJDRDIvM0JGMzkwMEVB
Mzk5MTFFRUJEQjBFRTUyQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwgd4GCCsGAQUFBwEHAQH/
BIHOMIHLMGAEAgABMFoDBAFnTawDBAFnTdYDBAFnTfADBAFnTfYDBAFnTgADBAFn
dCYDBAJnjYwDBAFnm9gDBAFnsGwDBAFnsuoDBAFn1doDBAJn1ggDBAFn7uoDBAFn
/IgDBAHfggowZwQCAAIwYQMHACABDfTYgAMHACQA7OAAAAMHACQBGWAAAAMHACQB
JCAAAAMHACQBNmAAAAMHACQBNqAAAAMHACQBN2AAAAMHACQBN6AAAAMHACQBPyAA
AAMHACQBRaAAAAMFACQFGcAwDQYJKoZIhvcNAQELBQADggEBAGhBbxfzJRrtik+i
oNqyvHHGZGZRB4YshOUUjmOOn1qdcRylMLbcN4cFNBN4uJLvUbdIcm+g45yUCT51
ktLedlbxpaEeLuVERatoHyG3wsKxCEmX1Q1uurIUtbwlYMOlexPmMFVW3EzXz8gy
q2C3f8ntFj7gw/7HYegUlPAh+8WzQTxiA2J0y8nelbS3D/eyFhtl8SSdEtFfVU+O
QNp6Yc7dbR80QXITqpbYGwUSxU8kidUhjbxtRXgDgcVw6+/mBt6QAK2MO1JAZ9PU
gFofjp14oHe15jY/EgmzWk3H5f8sl7ON4bF7XTXvRqbFYZ6PCsTdNIjiRjFQZxsS
w8NxDHo=
-----END CERTIFICATE-----
Generated at Fri May 31 16:41:40 2024 by rpki-client on console-ams.rpki-client.org