Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/B41A20C081D511ED9FFC1F2AC4F9AE02.roa
File: B41A20C081D511ED9FFC1F2AC4F9AE02.roa (raw, json)
Hash identifier: XXC2arUx9VPNy5PY29chq+v8Ja6MPhdm9MLAQinyep8=
Subject key identifier: 4C:2A:6A:6A:A3:99:27:AA:D0:5F:4F:14:1B:D8:BD:D8:63:CA:DF:BD
Certificate issuer: /CN=A91A560A/serialNumber=167C3B221775FEC05039468150CE814756AC6F0A
Certificate serial: 40C8
Authority key identifier: 16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/B41A20C081D511ED9FFC1F2AC4F9AE02.roa
Signing time: Thu 30 Nov 2023 07:01:45 +0000
ROA not before: Thu 30 Nov 2023 07:01:45 +0000
ROA not after: Thu 31 Oct 2024 00:00:00 +0000
asID: 38732
IP address blocks: 42.96.32.0/24 maxlen: 24
42.96.34.0/23 maxlen: 24
45.122.253.0/24 maxlen: 24
101.99.3.0/24 maxlen: 24
103.21.148.0/22 maxlen: 24
103.63.108.0/23 maxlen: 24
103.252.0.0/22 maxlen: 24
115.146.120.0/21 maxlen: 24
124.158.0.0/21 maxlen: 24
183.91.14.0/24 maxlen: 24
203.205.8.0/24 maxlen: 24
2402:5300:407::/48 maxlen: 48
2402:5300:7000::/40 maxlen: 48
2402:5300:7200::/40 maxlen: 48
2402:5300:7300::/40 maxlen: 48
2402:5300:7400::/40 maxlen: 48
2402:5300:7500::/40 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl
rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 07 Jun 2024 14:37:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 16584 (0x40c8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A560A/serialNumber=167C3B221775FEC05039468150CE814756AC6F0A
Validity
Not Before: Nov 30 07:01:45 2023 GMT
Not After : Oct 31 00:00:00 2024 GMT
Subject: CN=65683359-96de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:ff:c8:ac:40:34:ee:b8:8f:68:e2:94:76:de:
05:32:21:a9:ec:5f:4d:1c:e5:28:5a:1d:d8:1a:a6:
a4:50:c1:2d:a7:39:d7:5f:0c:b5:ed:5b:d4:b4:e2:
38:34:34:99:06:75:5a:4e:88:7e:a7:39:62:00:b8:
83:a5:66:27:09:c0:e8:69:fe:d7:4a:d2:76:12:83:
45:fc:a2:40:8a:21:61:85:99:39:a5:51:89:9f:ed:
fd:fc:29:a0:d6:a4:bc:e8:d9:ae:18:63:58:11:2c:
8f:1e:08:87:d4:dc:d5:bf:fc:70:e0:a3:3c:3f:87:
4b:57:cf:02:0e:4a:44:07:55:52:e7:48:3d:f5:80:
6f:49:1d:7f:d1:ef:8f:24:00:7d:ac:45:69:f2:26:
46:41:72:a4:ef:0b:e0:84:44:0e:41:7a:d6:df:d0:
bd:0c:06:6e:64:54:3b:93:70:2c:1a:cc:ed:ae:19:
18:52:88:b2:fa:8c:cf:36:fb:fe:e9:5e:e5:5d:83:
dd:db:02:cc:01:43:5e:4f:f0:c1:4c:b3:ec:44:d0:
1e:46:c3:05:2c:b9:91:3b:0f:a0:c4:2b:47:8a:cc:
0e:65:9a:e0:19:ee:fe:c4:ce:61:41:24:ea:50:8a:
f4:0d:60:0d:93:03:5e:e9:d0:36:f4:a3:da:5e:1d:
f9:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:2A:6A:6A:A3:99:27:AA:D0:5F:4F:14:1B:D8:BD:D8:63:CA:DF:BD
X509v3 Authority Key Identifier:
keyid:16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/B41A20C081D511ED9FFC1F2AC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
42.96.32.0/24
42.96.34.0/23
45.122.253.0/24
101.99.3.0/24
103.21.148.0/22
103.63.108.0/23
103.252.0.0/22
115.146.120.0/21
124.158.0.0/21
183.91.14.0/24
203.205.8.0/24
IPv6:
2402:5300:407::/48
2402:5300:7000::/40
2402:5300:7200::-2402:5300:75ff:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
0d:54:d8:12:22:3e:64:31:be:9e:10:b5:49:08:a7:ac:cd:dc:
ee:6d:fc:9c:20:e3:2d:85:14:ac:9b:7f:43:f6:c8:91:b0:0a:
82:35:de:94:f0:1d:16:3d:0e:8a:6a:2a:c6:3e:00:fc:82:ed:
c4:9d:f9:f5:29:3b:b6:58:d5:01:a4:43:08:11:cd:7a:51:23:
f3:8f:e4:4d:6e:b0:5d:ff:54:d1:2a:30:f2:73:79:e1:2b:70:
be:82:a2:22:c9:8d:49:64:e6:fe:71:9e:77:e2:11:35:47:d6:
a3:22:d1:60:e1:83:14:d9:a6:4e:e8:da:86:86:4f:ed:6d:ea:
64:c1:d6:48:ab:f5:d0:44:02:52:eb:d7:f4:f9:33:90:a5:56:
10:fc:83:39:a0:0e:4b:3c:cf:ce:fc:00:8a:ac:58:42:c5:25:
3f:1b:cd:cb:f8:c4:31:d5:e6:75:5c:d8:eb:f4:78:91:15:0a:
30:6f:50:ab:4a:fe:9a:09:8b:9c:ba:7a:97:5e:dc:bb:45:9f:
9e:bf:94:06:23:6c:80:d8:40:f6:26:3d:8c:1a:ea:a2:8a:bf:
86:37:17:e8:c0:4e:31:57:d8:0d:36:5c:9b:f3:17:f9:99:bb:
07:cd:c2:37:4d:53:ec:6c:99:7a:5e:05:b3:11:94:02:fa:e1:
87:16:e5:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 31 16:41:41 2024 by rpki-client on console-ams.rpki-client.org