Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/BCC7DCE898FA11EE8BD1FF59C4F9AE02.roa
File: BCC7DCE898FA11EE8BD1FF59C4F9AE02.roa (raw, json)
Hash identifier: Iq6819rA7Ou10qpesf7u8wE2pdInz1cU/dWlQ8VH8uI=
Subject key identifier: AB:EF:FE:79:CD:F0:F3:E4:3D:E8:F1:7D:A6:56:F7:B6:D8:EC:41:2E
Certificate issuer: /CN=A91A560A/serialNumber=167C3B221775FEC05039468150CE814756AC6F0A
Certificate serial: 412B
Authority key identifier: 16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/BCC7DCE898FA11EE8BD1FF59C4F9AE02.roa
Signing time: Tue 12 Dec 2023 14:28:37 +0000
ROA not before: Tue 12 Dec 2023 14:28:37 +0000
ROA not after: Thu 31 Oct 2024 00:00:00 +0000
asID: 135967
IP address blocks: 42.96.4.0/23 maxlen: 23
42.96.12.0/22 maxlen: 22
45.124.84.0/24 maxlen: 24
103.3.244.0/22 maxlen: 22
103.3.244.0/24 maxlen: 24
103.3.245.0/24 maxlen: 24
103.3.246.0/24 maxlen: 24
103.3.247.0/24 maxlen: 24
103.74.120.0/23 maxlen: 23
103.74.122.0/23 maxlen: 23
103.79.140.0/23 maxlen: 23
103.79.142.0/23 maxlen: 23
103.121.88.0/23 maxlen: 23
103.121.90.0/23 maxlen: 23
103.147.126.0/23 maxlen: 23
103.161.16.0/23 maxlen: 23
103.161.170.0/23 maxlen: 24
103.162.30.0/23 maxlen: 23
103.163.216.0/23 maxlen: 23
103.176.22.0/23 maxlen: 23
103.176.250.0/23 maxlen: 23
103.179.174.0/23 maxlen: 23
103.180.138.0/23 maxlen: 23
103.187.168.0/23 maxlen: 23
103.188.242.0/23 maxlen: 23
2403:6a40::/48 maxlen: 48
2403:6a40:2::/48 maxlen: 48
2403:6a40:1000::/36 maxlen: 36
2403:6a40:2000::/36 maxlen: 36
2403:6a40:3000::/36 maxlen: 36
2403:6a40:4000::/36 maxlen: 36
2403:6a40:5000::/36 maxlen: 36
2407:2ec0::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl
rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 07 Jun 2024 14:37:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 16683 (0x412b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A560A/serialNumber=167C3B221775FEC05039468150CE814756AC6F0A
Validity
Not Before: Dec 12 14:28:37 2023 GMT
Not After : Oct 31 00:00:00 2024 GMT
Subject: CN=65786e15-8ecd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:8e:5a:3f:fc:1a:1a:64:28:a9:ae:ae:a9:72:
50:92:c9:4a:a9:b5:b8:c0:61:e2:8c:20:03:88:64:
f6:5a:1b:c4:96:20:b7:13:d0:96:8f:06:76:03:6e:
54:6d:6f:bd:fe:4e:a0:54:81:eb:e7:d2:9d:2c:8a:
8a:e6:07:82:69:a3:f5:00:e5:cc:2c:b1:b7:ba:a2:
67:c6:36:a3:90:a7:fe:1f:89:a2:f6:3f:79:9f:4f:
24:e7:1b:6f:a3:58:b8:f0:66:9e:8e:1e:34:53:61:
35:68:c7:58:38:84:a4:49:ab:96:18:3b:15:b1:01:
fd:f8:1e:ee:9e:d9:9d:ff:e5:94:de:a7:5c:32:d6:
a9:89:b8:e5:3e:ae:fd:20:78:47:5c:ad:e0:ac:ce:
03:4d:a6:13:20:8b:e8:48:32:db:0b:97:12:6a:c6:
ad:4f:80:c1:27:2b:b2:9d:3c:25:21:e0:6f:b9:d5:
4e:d9:2f:62:50:a5:be:3a:6e:74:43:c1:38:60:22:
66:55:7e:89:0f:15:57:a1:60:c5:54:04:46:07:5d:
68:1c:4a:c5:fd:a6:41:7e:c4:7e:db:8e:eb:50:bd:
54:b3:cc:96:eb:ff:24:56:7f:27:b7:35:c3:04:66:
ab:f4:8d:1f:d6:08:c8:ee:1a:83:ab:9d:57:8e:7f:
11:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:EF:FE:79:CD:F0:F3:E4:3D:E8:F1:7D:A6:56:F7:B6:D8:EC:41:2E
X509v3 Authority Key Identifier:
keyid:16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/BCC7DCE898FA11EE8BD1FF59C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
42.96.4.0/23
42.96.12.0/22
45.124.84.0/24
103.3.244.0/22
103.74.120.0/22
103.79.140.0/22
103.121.88.0/22
103.147.126.0/23
103.161.16.0/23
103.161.170.0/23
103.162.30.0/23
103.163.216.0/23
103.176.22.0/23
103.176.250.0/23
103.179.174.0/23
103.180.138.0/23
103.187.168.0/23
103.188.242.0/23
IPv6:
2403:6a40::/48
2403:6a40:2::/48
2403:6a40:1000::-2403:6a40:5fff:ffff:ffff:ffff:ffff:ffff
2407:2ec0::/48
Signature Algorithm: sha256WithRSAEncryption
41:40:fb:ae:4c:c0:52:f0:37:70:a6:3c:a4:a0:3c:11:a3:ac:
7f:13:4d:b5:18:98:34:29:59:9e:c5:3c:21:f0:3d:4f:65:b8:
00:65:f9:93:bc:73:e2:bb:a3:14:0e:20:01:69:36:56:95:21:
2b:9f:1a:85:41:85:ab:be:b1:45:3d:b8:36:e7:a5:ec:b7:d1:
c8:cb:a7:7a:88:42:b3:a9:0c:be:95:57:ad:7d:d4:4b:30:ad:
9f:60:5b:14:10:01:2f:1d:fc:d4:c3:67:52:22:64:3d:49:c7:
f6:b4:2d:e5:19:bc:8f:5a:d8:70:6f:ce:d6:83:db:dc:8a:59:
81:8b:af:01:27:70:74:31:54:a5:14:7f:bf:0f:d2:b3:d2:53:
c8:2f:4d:03:98:50:0a:94:01:98:6d:a9:37:1d:1e:09:ce:0a:
dc:fa:c0:92:02:da:cb:c7:02:2c:75:6f:13:f9:7a:03:9b:73:
d5:71:d9:34:53:98:97:b3:dd:4e:d0:77:bd:5a:45:3e:3a:4d:
c1:79:53:b4:41:f1:25:26:81:3a:0d:54:12:c8:5a:d1:31:3e:
d1:31:e1:aa:eb:07:60:65:b5:c0:6d:38:fa:5f:40:b8:9c:e4:
58:e4:86:40:fd:a4:c6:c4:2d:78:80:95:32:13:43:c6:e2:2f:
a6:01:07:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 31 16:41:41 2024 by rpki-client on console-ams.rpki-client.org