Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C2168/24C62C061D9111E2924430F308B02CD2/2251B910AC7411EBBE196180C4F9AE02.roa
File: 2251B910AC7411EBBE196180C4F9AE02.roa (raw, json)
Hash identifier: w2iJK14g08nIllF1mgyk0i3/HIWF7w73TP3S/nc8620=
Subject key identifier: 7C:29:04:BD:11:BC:5F:C4:49:A4:44:D4:E0:5F:E0:81:8C:EA:AC:D1
Certificate issuer: /CN=A91C2168/serialNumber=9D346E6DB39C3D330C1AFF94060E15055FF4ED1C
Certificate serial: 344B
Authority key identifier: 9D:34:6E:6D:B3:9C:3D:33:0C:1A:FF:94:06:0E:15:05:5F:F4:ED:1C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nTRubbOcPTMMGv-UBg4VBV_07Rw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C2168/24C62C061D9111E2924430F308B02CD2/2251B910AC7411EBBE196180C4F9AE02.roa
Signing time: Mon 09 Dec 2024 21:30:09 +0000
ROA not before: Mon 09 Dec 2024 21:30:09 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 24324
IP address blocks: 122.200.176.0/20 maxlen: 20
124.157.64.0/19 maxlen: 19
124.157.68.0/22 maxlen: 22
124.157.96.0/19 maxlen: 19
202.36.132.0/24 maxlen: 24
202.49.128.0/21 maxlen: 21
202.49.129.0/24 maxlen: 24
202.49.131.0/24 maxlen: 24
202.49.132.0/24 maxlen: 24
202.49.133.0/24 maxlen: 24
203.14.20.0/24 maxlen: 24
203.161.187.0/24 maxlen: 24
203.195.124.0/24 maxlen: 24
2404:6c00::/32 maxlen: 32
2404:6c00:a000::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C2168/24C62C061D9111E2924430F308B02CD2/nTRubbOcPTMMGv-UBg4VBV_07Rw.crl
rsync://rpki.apnic.net/member_repository/A91C2168/24C62C061D9111E2924430F308B02CD2/nTRubbOcPTMMGv-UBg4VBV_07Rw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nTRubbOcPTMMGv-UBg4VBV_07Rw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 19 Apr 2025 14:41:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13387 (0x344b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C2168, serialNumber=9D346E6DB39C3D330C1AFF94060E15055FF4ED1C
Validity
Not Before: Dec 9 21:30:09 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=67576161-ffe0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:61:bc:0e:ac:8a:07:71:0e:19:c8:4a:ad:53:
ad:e9:70:e4:c5:d1:d0:13:1f:52:a5:41:66:ef:59:
52:db:0c:1d:4f:f0:f4:2b:8b:34:18:c5:23:31:3c:
7f:f9:5c:18:77:2d:db:91:4f:43:05:a5:5a:ff:35:
e0:97:d3:c0:9b:0b:27:ee:1f:c2:f7:3e:6f:85:5c:
50:ad:73:07:cf:10:3d:cc:e7:7f:40:f7:40:f1:2e:
c6:8e:73:f5:98:44:f6:a4:7a:a8:e0:c3:06:40:79:
8d:05:34:fc:7f:72:a1:6a:c3:c9:c7:4f:31:e2:96:
7b:fd:de:a6:68:90:67:b6:8d:d5:db:89:0a:d3:07:
47:7e:38:e2:5f:38:7a:49:0e:ff:ad:e3:0d:4d:3b:
1e:1f:12:b5:f0:10:74:81:e4:33:15:c5:51:c4:8e:
50:82:c6:49:4f:6c:b2:6c:cd:d6:87:dc:4b:52:a5:
a2:2b:09:67:30:93:17:9c:57:58:e2:27:9c:a2:f1:
0b:b2:24:59:89:83:aa:e7:87:fe:82:9c:60:a2:f9:
69:1a:f2:64:a6:29:0b:17:b1:82:cf:01:65:09:1f:
a6:14:f1:3a:36:2d:61:9d:b8:e8:3a:fd:e6:ee:fc:
88:fd:a0:b0:50:06:cc:e1:18:db:0b:3f:85:c7:bc:
76:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:29:04:BD:11:BC:5F:C4:49:A4:44:D4:E0:5F:E0:81:8C:EA:AC:D1
X509v3 Authority Key Identifier:
keyid:9D:34:6E:6D:B3:9C:3D:33:0C:1A:FF:94:06:0E:15:05:5F:F4:ED:1C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C2168/24C62C061D9111E2924430F308B02CD2/nTRubbOcPTMMGv-UBg4VBV_07Rw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nTRubbOcPTMMGv-UBg4VBV_07Rw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C2168/24C62C061D9111E2924430F308B02CD2/2251B910AC7411EBBE196180C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
122.200.176.0/20
124.157.64.0/18
202.36.132.0/24
202.49.128.0/21
203.14.20.0/24
203.161.187.0/24
203.195.124.0/24
IPv6:
2404:6c00::/32
Signature Algorithm: sha256WithRSAEncryption
21:3a:aa:2d:78:f0:90:d6:7f:f4:66:2a:51:35:19:c3:66:c2:
2f:80:c7:28:f5:ff:3c:79:25:e7:d1:68:08:57:7b:8c:1f:ba:
ca:ec:1c:5d:94:31:e6:f1:00:45:36:ab:89:b3:e2:17:27:22:
72:d3:07:f3:34:97:d8:a0:8b:b2:7a:f5:57:0a:95:45:fd:96:
f1:c8:91:6e:5e:42:c4:d7:14:8f:80:b2:c4:d7:3c:a5:5d:73:
cb:c2:d1:91:11:1b:7b:ea:8c:ca:7f:a8:16:6f:34:8c:90:96:
33:04:25:4c:01:79:6b:3d:98:34:53:51:68:6a:d5:ee:8f:79:
fa:29:d4:56:6f:8d:28:95:31:ed:ba:8f:b5:7e:29:93:8d:24:
76:56:68:1a:56:69:46:29:9a:e3:7e:aa:74:ef:2d:bc:a3:d8:
2c:e5:ac:e7:c9:c5:8d:f7:9f:ed:c4:0d:9f:44:df:7c:27:40:
45:af:58:69:cb:bc:c9:bd:b9:f5:04:89:93:9b:84:09:e9:32:
c5:82:d2:02:6b:d4:11:30:92:e5:71:be:17:af:72:7a:dc:3c:
cc:80:df:69:a2:33:59:6a:f6:6c:14:84:02:cf:32:52:2a:38:
e6:13:16:c4:12:a4:bf:f8:a8:9e:12:bd:8b:66:62:d8:e9:9b:
53:3b:3c:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 13 10:11:16 2025 by rpki-client