Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B3558/0F21214E390511E99A330233C4F9AE02/97DCD534391211E99E31F655C4F9AE02.roa
File: 97DCD534391211E99E31F655C4F9AE02.roa (raw, json)
Hash identifier: u3zJLIBXmPMMaISzvvvs+ZsNk5/sWyDnDmAG1w53iqI=
Subject key identifier: D8:50:E5:BE:74:0D:58:FB:4D:50:70:DE:BA:6E:DE:3D:EB:34:5C:CF
Certificate issuer: /CN=A91B3558/serialNumber=C8909254F69666D585E310ACD8DFF2B1FB9A5F2A
Certificate serial: 0F9A
Authority key identifier: C8:90:92:54:F6:96:66:D5:85:E3:10:AC:D8:DF:F2:B1:FB:9A:5F:2A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yJCSVPaWZtWF4xCs2N_ysfuaXyo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B3558/0F21214E390511E99A330233C4F9AE02/97DCD534391211E99E31F655C4F9AE02.roa
Signing time: Wed 08 May 2024 18:36:40 +0000
ROA not before: Wed 08 May 2024 18:36:40 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 46489
IP address blocks: 45.113.128.0/22 maxlen: 22
103.53.48.0/22 maxlen: 22
103.53.48.0/23 maxlen: 23
2402:2a80::/32 maxlen: 32
2402:2a80:1000::/36 maxlen: 36
2402:2a80:1000::/40 maxlen: 40
2402:2a80:1100::/40 maxlen: 40
2402:2a80:1200::/40 maxlen: 40
2402:2a80:1300::/40 maxlen: 40
2402:2a80:1400::/40 maxlen: 40
2402:2a80:1500::/40 maxlen: 40
2402:2a80:2000::/36 maxlen: 36
2402:2a80:2000::/40 maxlen: 40
2402:2a80:2100::/40 maxlen: 40
2402:2a80:3000::/36 maxlen: 36
2402:2a80:3000::/40 maxlen: 40
2402:2a80:3100::/40 maxlen: 40
2402:2a80:3200::/40 maxlen: 40
2402:2a80:3300::/40 maxlen: 40
2402:2a80:4000::/36 maxlen: 36
2402:2a80:4000::/40 maxlen: 40
2402:2a80:4100::/40 maxlen: 40
2402:2a80:4200::/40 maxlen: 40
2402:2a80:5000::/36 maxlen: 36
2402:2a80:6000::/36 maxlen: 36
2402:2a80:b000::/36 maxlen: 36
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B3558/0F21214E390511E99A330233C4F9AE02/yJCSVPaWZtWF4xCs2N_ysfuaXyo.crl
rsync://rpki.apnic.net/member_repository/A91B3558/0F21214E390511E99A330233C4F9AE02/yJCSVPaWZtWF4xCs2N_ysfuaXyo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yJCSVPaWZtWF4xCs2N_ysfuaXyo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 21 Jun 2024 17:53:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3994 (0xf9a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B3558/serialNumber=C8909254F69666D585E310ACD8DFF2B1FB9A5F2A
Validity
Not Before: May 8 18:36:40 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=663bc638-1e59
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:03:65:81:70:5e:3f:08:a2:a6:40:77:78:b2:
c6:bf:a6:ee:47:d1:e5:10:b7:94:e4:d9:9e:a0:76:
d2:32:f4:11:96:d0:69:0e:51:13:87:13:b8:a2:4b:
5e:47:9a:ed:e4:b7:34:42:36:fd:2e:c4:c7:dc:62:
7e:56:1e:a6:a2:20:1f:b5:25:98:e2:67:ab:a4:ae:
79:ae:ed:ad:1d:07:b9:43:35:27:e2:60:b8:c2:df:
09:ea:a8:c2:dc:bb:d6:e1:76:aa:51:77:a3:75:82:
e2:d0:7a:08:46:6c:8a:52:70:9f:e1:2d:ae:38:1c:
77:bb:58:73:a5:11:ee:f6:fd:c5:48:23:d3:fe:a0:
cb:57:fa:b7:33:ea:3b:5f:d9:20:46:c3:a4:2c:d7:
88:99:54:84:12:ea:0e:bb:67:c1:a1:44:99:39:6a:
b9:f1:51:a4:85:c6:ee:54:80:a1:b1:7e:9e:57:78:
1c:22:bf:83:c4:ae:d7:d0:db:4e:10:ca:99:08:ac:
6e:e0:18:e1:32:76:5a:c5:37:af:95:23:cc:d2:c0:
73:4f:b7:fe:3c:98:34:5c:97:47:ab:29:2b:de:1c:
4f:77:d3:5e:53:63:2d:ba:6d:b0:47:62:47:31:44:
35:d6:15:5c:da:5d:12:ff:34:cf:f7:a0:c0:b8:f3:
95:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:50:E5:BE:74:0D:58:FB:4D:50:70:DE:BA:6E:DE:3D:EB:34:5C:CF
X509v3 Authority Key Identifier:
keyid:C8:90:92:54:F6:96:66:D5:85:E3:10:AC:D8:DF:F2:B1:FB:9A:5F:2A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B3558/0F21214E390511E99A330233C4F9AE02/yJCSVPaWZtWF4xCs2N_ysfuaXyo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yJCSVPaWZtWF4xCs2N_ysfuaXyo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B3558/0F21214E390511E99A330233C4F9AE02/97DCD534391211E99E31F655C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.113.128.0/22
103.53.48.0/22
IPv6:
2402:2a80::/32
Signature Algorithm: sha256WithRSAEncryption
1d:6c:fa:ad:da:b8:0e:dd:c3:be:cf:c2:b1:9c:e1:2c:4b:26:
95:8c:b0:0e:d5:49:ed:ad:0a:34:b6:4d:97:b8:de:0f:eb:a4:
42:52:ec:25:65:fb:2d:e8:b9:6c:e6:dd:51:71:40:d1:c0:7a:
b8:e4:f7:f7:30:f4:95:4b:91:80:bd:66:dc:1a:22:53:bb:7a:
2a:ac:42:b4:81:22:4b:10:64:a6:03:31:fa:8a:dd:a9:26:d1:
13:c1:55:30:6a:99:c1:92:94:37:d9:1d:a2:96:a1:fd:7d:21:
4a:c1:2e:18:c2:23:8c:c1:da:34:84:c3:aa:71:83:f7:c4:a6:
6d:1f:7e:cb:a3:e2:9d:b0:24:b8:f2:79:a6:84:de:aa:77:3b:
2c:6b:a3:73:8e:a9:ea:64:1b:85:bc:39:13:d5:a8:d5:4b:78:
14:97:09:c1:da:76:d6:67:e8:7f:6f:ed:0a:4a:05:ef:1d:10:
c0:9f:2d:d6:2b:f7:d3:4f:8d:9f:59:7b:2d:a6:23:72:5c:56:
2e:07:f9:c5:68:4d:c2:dc:67:3b:8e:2e:23:cf:62:48:db:55:
a9:36:9f:f4:fa:ea:f5:f4:63:47:e3:09:08:eb:d5:57:bf:52:
a0:5b:c9:90:04:68:0c:76:02:64:83:51:6f:7a:f6:d9:8c:9f:
c2:ed:6e:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 14 18:52:12 2024 by rpki-client on console-fra.rpki-client.org