Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/A2836372A1C011EB9CD78934C4F9AE02.roa
File: A2836372A1C011EB9CD78934C4F9AE02.roa (raw, json)
Hash identifier: WQi01W0Oti3hUsMAbtEDBI+u+Q4+Gb9gdO/Nmk6NmRg=
Subject key identifier: B8:64:00:0A:B0:9A:72:F5:04:91:D9:79:9B:46:32:4A:9B:4C:12:4E
Certificate issuer: /CN=A91A560A/serialNumber=167C3B221775FEC05039468150CE814756AC6F0A
Certificate serial: 4050
Authority key identifier: 16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/A2836372A1C011EB9CD78934C4F9AE02.roa
Signing time: Thu 02 Nov 2023 15:36:05 +0000
ROA not before: Thu 02 Nov 2023 15:36:05 +0000
ROA not after: Thu 31 Oct 2024 00:00:00 +0000
asID: 63737
IP address blocks: 36.50.52.0/23 maxlen: 23
42.96.10.0/23 maxlen: 23
103.14.154.0/23 maxlen: 23
103.15.94.0/23 maxlen: 23
103.30.10.0/23 maxlen: 23
103.39.124.0/23 maxlen: 23
103.57.128.0/23 maxlen: 23
103.57.130.0/23 maxlen: 24
103.74.104.0/22 maxlen: 22
103.122.140.0/23 maxlen: 23
103.149.136.0/23 maxlen: 23
103.167.84.0/23 maxlen: 23
103.167.90.0/23 maxlen: 23
103.167.92.0/23 maxlen: 23
103.170.254.0/23 maxlen: 23
103.171.0.0/23 maxlen: 23
103.176.110.0/23 maxlen: 23
103.176.112.0/23 maxlen: 23
103.177.108.0/23 maxlen: 23
103.180.150.0/23 maxlen: 23
103.180.152.0/23 maxlen: 23
103.182.18.0/23 maxlen: 23
103.183.114.0/23 maxlen: 23
103.183.118.0/23 maxlen: 23
103.186.66.0/23 maxlen: 23
103.187.4.0/23 maxlen: 23
103.190.80.0/23 maxlen: 23
103.209.60.0/23 maxlen: 23
103.232.52.0/22 maxlen: 22
103.253.22.0/23 maxlen: 24
202.55.132.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl
rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 05 Jul 2024 14:35:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 16464 (0x4050)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A560A/serialNumber=167C3B221775FEC05039468150CE814756AC6F0A
Validity
Not Before: Nov 2 15:36:05 2023 GMT
Not After : Oct 31 00:00:00 2024 GMT
Subject: CN=6543c1e5-5fcc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:90:6a:36:33:ca:19:1e:85:8b:40:31:45:5a:
d1:a6:ca:55:33:7b:4b:53:19:4c:12:3f:4d:79:76:
72:bf:12:86:d6:37:d7:20:9e:84:5e:9f:b1:26:ab:
71:de:84:f1:4b:2a:97:c2:16:8d:21:5a:da:b2:fd:
f5:3f:b9:b8:91:0c:4d:7d:4e:ff:9f:00:5b:a9:4d:
0f:ed:9f:60:22:59:68:80:11:a3:45:09:fb:40:d2:
b5:33:1a:92:9e:40:c4:46:d4:97:5e:ec:91:6f:0f:
26:30:09:4f:be:59:cf:18:18:fd:85:10:0e:23:63:
b0:85:27:be:8d:00:14:7c:57:00:37:5f:b0:26:8b:
02:d2:0a:86:28:a9:98:e2:04:7e:89:3a:9c:e8:d4:
15:fb:76:f1:4f:23:0b:be:c4:c7:9b:57:dd:b7:d9:
82:44:71:1f:ef:d7:55:70:a2:7b:07:df:a8:6d:34:
f8:9e:80:28:fb:44:91:7d:01:69:4a:89:4d:9c:31:
3f:8f:74:f9:96:29:79:b7:da:99:b1:8c:a9:87:2a:
d2:7c:f8:7d:e7:6b:ae:1c:12:de:7e:97:84:40:bd:
36:46:89:a6:47:2a:4c:c4:bb:97:4f:16:82:61:3a:
46:5c:3b:33:c6:16:33:a2:10:be:57:fb:8b:d5:24:
ad:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:64:00:0A:B0:9A:72:F5:04:91:D9:79:9B:46:32:4A:9B:4C:12:4E
X509v3 Authority Key Identifier:
keyid:16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/A2836372A1C011EB9CD78934C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
36.50.52.0/23
42.96.10.0/23
103.14.154.0/23
103.15.94.0/23
103.30.10.0/23
103.39.124.0/23
103.57.128.0/22
103.74.104.0/22
103.122.140.0/23
103.149.136.0/23
103.167.84.0/23
103.167.90.0-103.167.93.255
103.170.254.0-103.171.1.255
103.176.110.0-103.176.113.255
103.177.108.0/23
103.180.150.0-103.180.153.255
103.182.18.0/23
103.183.114.0/23
103.183.118.0/23
103.186.66.0/23
103.187.4.0/23
103.190.80.0/23
103.209.60.0/23
103.232.52.0/22
103.253.22.0/23
202.55.132.0/22
Signature Algorithm: sha256WithRSAEncryption
1d:6e:29:57:b1:ed:07:4e:5b:1b:b1:59:12:ed:b2:e9:a9:4e:
9d:5e:38:b3:6e:e7:72:24:52:f2:1b:73:e0:de:7f:f2:18:58:
ef:66:7f:a2:d3:3f:ff:3d:8a:c4:33:08:2f:67:f6:e6:9a:67:
88:e2:3e:de:d0:f5:ba:60:3c:e7:27:89:e9:9d:79:a4:ab:f2:
12:f6:8b:77:dd:81:18:16:a6:9f:da:d4:01:5a:fc:45:10:d2:
3c:04:9c:2a:c0:e8:7c:46:bb:a8:09:b2:9e:09:1f:bc:5f:26:
e1:17:81:65:45:45:dd:78:c5:94:ee:3e:4b:f1:ac:11:96:ff:
da:f1:b5:46:d8:00:c7:2f:73:75:2f:39:fa:52:9f:59:e7:28:
74:e2:00:a9:50:37:be:b6:69:b2:b0:81:72:a2:3c:38:fc:a3:
fb:4e:9d:63:b5:c0:ea:74:16:d9:3a:c1:50:55:95:90:43:eb:
23:32:e3:ed:a6:1e:81:53:4f:de:04:f7:16:30:2e:45:8b:52:
24:5f:ea:54:7e:d3:1b:bf:c6:2e:cb:da:27:34:d3:6b:29:62:
5a:5c:2f:12:89:98:ba:84:8d:e1:b8:04:ea:20:ef:cb:d6:29:
98:fb:16:e8:d0:8b:75:38:22:3a:96:52:d2:c6:9e:5e:fc:ae:
43:98:e7:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 28 17:11:35 2024 by rpki-client on console-ams.rpki-client.org