Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B6F47/B4A86C381D8411E2969FC5DA08B02CD2/99CF729E221011ED980A6F47C4F9AE02.roa
File: 99CF729E221011ED980A6F47C4F9AE02.roa (raw, json)
Hash identifier: mwjKtwtE+fNTfwQX3IX0Xz7Ix8UAV8DMDOMwmyykmYc=
Subject key identifier: A2:C7:64:B6:51:0E:67:88:5A:EB:B7:5A:26:5A:A8:09:08:94:3D:09
Certificate issuer: /CN=A91B6F47/serialNumber=538B076E0AADD8FAE2970C9543E849A90FE73752
Certificate serial: 344F
Authority key identifier: 53:8B:07:6E:0A:AD:D8:FA:E2:97:0C:95:43:E8:49:A9:0F:E7:37:52
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/U4sHbgqt2PrilwyVQ-hJqQ_nN1I.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B6F47/B4A86C381D8411E2969FC5DA08B02CD2/99CF729E221011ED980A6F47C4F9AE02.roa
Signing time: Tue 09 Jan 2024 07:05:12 +0000
ROA not before: Tue 09 Jan 2024 07:05:12 +0000
ROA not after: Sun 01 Dec 2024 00:00:00 +0000
asID: 18042
IP address blocks: 58.114.0.0/15 maxlen: 16
58.114.0.0/17 maxlen: 17
58.114.0.0/18 maxlen: 18
58.114.64.0/18 maxlen: 18
58.114.128.0/18 maxlen: 18
58.114.192.0/18 maxlen: 18
58.115.0.0/18 maxlen: 21
58.115.64.0/18 maxlen: 18
58.115.128.0/18 maxlen: 18
58.115.192.0/18 maxlen: 18
61.70.0.0/15 maxlen: 15
61.70.0.0/16 maxlen: 24
61.71.0.0/16 maxlen: 24
111.184.0.0/15 maxlen: 24
182.233.0.0/16 maxlen: 24
182.234.0.0/15 maxlen: 24
202.2.52.0/22 maxlen: 24
203.133.0.0/17 maxlen: 24
203.187.80.0/20 maxlen: 24
203.203.0.0/16 maxlen: 24
203.204.0.0/16 maxlen: 24
219.68.0.0/16 maxlen: 24
219.69.0.0/17 maxlen: 24
219.69.128.0/17 maxlen: 24
219.70.0.0/15 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B6F47/B4A86C381D8411E2969FC5DA08B02CD2/U4sHbgqt2PrilwyVQ-hJqQ_nN1I.crl
rsync://rpki.apnic.net/member_repository/A91B6F47/B4A86C381D8411E2969FC5DA08B02CD2/U4sHbgqt2PrilwyVQ-hJqQ_nN1I.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/U4sHbgqt2PrilwyVQ-hJqQ_nN1I.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 07 Jun 2024 14:26:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13391 (0x344f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B6F47/serialNumber=538B076E0AADD8FAE2970C9543E849A90FE73752
Validity
Not Before: Jan 9 07:05:12 2024 GMT
Not After : Dec 1 00:00:00 2024 GMT
Subject: CN=659cf027-3115
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:22:cc:7e:d6:01:21:d7:58:90:0f:3d:1b:5d:
03:86:e2:d1:73:db:62:31:41:28:5c:b6:be:43:70:
59:93:42:ff:af:56:61:44:9c:4c:6f:02:78:3a:94:
22:db:87:27:95:85:40:27:7f:c9:2f:a3:84:f4:5c:
4d:9c:af:ab:d0:41:35:b1:ec:1b:5a:39:30:48:0b:
2b:aa:d9:ac:bd:e4:31:28:2d:d7:3a:3c:40:8e:d1:
59:be:44:3b:e5:63:c9:84:f2:66:db:e6:f5:a8:fd:
e7:a8:af:14:d5:0d:19:7d:47:67:5c:7b:49:99:b8:
26:e9:03:59:94:dd:b7:e3:5c:06:88:db:0b:93:ae:
5d:27:2e:4d:2c:47:06:ed:28:c8:94:75:ef:8a:bd:
bf:2c:3e:0c:7d:0b:a5:c5:37:6b:aa:0e:f6:92:64:
d8:38:58:2b:f6:9e:44:83:35:47:fa:42:2d:ad:82:
e3:11:b3:be:7e:9a:83:f8:02:17:69:cf:d9:a4:b5:
cf:97:97:f9:b2:d6:5b:d9:c9:72:64:94:2a:c3:c0:
d8:86:f1:b3:46:f8:8d:39:ba:48:7c:78:82:c7:46:
19:f8:17:4d:85:b8:7f:09:0d:92:de:f1:d2:76:0d:
a4:0e:78:fe:90:38:83:7e:e2:87:e1:53:d7:eb:4b:
9c:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:C7:64:B6:51:0E:67:88:5A:EB:B7:5A:26:5A:A8:09:08:94:3D:09
X509v3 Authority Key Identifier:
keyid:53:8B:07:6E:0A:AD:D8:FA:E2:97:0C:95:43:E8:49:A9:0F:E7:37:52
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B6F47/B4A86C381D8411E2969FC5DA08B02CD2/U4sHbgqt2PrilwyVQ-hJqQ_nN1I.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/U4sHbgqt2PrilwyVQ-hJqQ_nN1I.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B6F47/B4A86C381D8411E2969FC5DA08B02CD2/99CF729E221011ED980A6F47C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
58.114.0.0/15
61.70.0.0/15
111.184.0.0/15
182.233.0.0-182.235.255.255
202.2.52.0/22
203.133.0.0/17
203.187.80.0/20
203.203.0.0-203.204.255.255
219.68.0.0/14
Signature Algorithm: sha256WithRSAEncryption
54:29:99:59:24:68:30:48:25:80:16:00:2a:e3:2c:1d:47:3c:
9d:9b:51:3a:28:96:b9:27:37:e6:d7:54:e9:b7:ad:04:97:89:
1c:42:77:5f:0c:4f:92:df:2c:b8:02:32:c8:2e:6f:f5:92:f8:
66:eb:d7:40:2d:da:72:6c:d2:98:75:9c:5d:ab:b7:f2:5c:a4:
37:44:f9:fd:30:40:39:16:97:e2:11:1c:7d:ca:30:ec:1e:3e:
46:d6:d7:75:f2:e0:85:2c:9e:89:04:34:aa:d3:1a:db:20:64:
3a:15:78:b5:85:e2:06:e5:c4:55:95:48:06:e4:ce:e6:0b:d1:
5a:64:fa:42:8c:ef:94:40:ac:1f:7c:c6:1e:39:21:c5:a2:43:
da:d7:3d:cf:01:ee:c1:90:63:63:b5:78:f9:85:19:22:cf:bf:
dd:df:11:bb:de:a1:af:09:c6:66:21:b5:6c:ef:2a:1d:c7:86:
8d:4b:50:cc:f2:19:07:13:c6:91:8b:84:dc:56:b3:08:fe:8b:
23:85:2a:6f:bd:28:08:50:8d:b4:88:84:66:0c:eb:d5:82:33:
bb:b5:f6:b1:c8:79:57:e4:a4:7e:77:fa:05:bf:32:e7:30:09:
9b:ed:df:93:6d:ec:a2:ad:17:dc:5e:37:ab:95:89:0a:1d:20:
b0:16:a8:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 31 15:08:34 2024 by rpki-client on console-fra.rpki-client.org