Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91CD4DB/3A315DCECD0211E7B0442D28C4F9AE02/1615AC3AD9E911EC9017DD21C4F9AE02.roa
File: 1615AC3AD9E911EC9017DD21C4F9AE02.roa (raw, json)
Hash identifier: cu7wnZWG2QCQARWSCZlDCkdY4NqxVTtM35LKYc28sLE=
Subject key identifier: 7F:06:74:F0:37:06:C8:7B:AB:31:5F:C5:14:15:53:39:5E:72:0A:12
Certificate issuer: /CN=A91CD4DB/serialNumber=3FB7855EF330BA77D9F3B72DFFDEC20712AC1407
Certificate serial: 1669
Authority key identifier: 3F:B7:85:5E:F3:30:BA:77:D9:F3:B7:2D:FF:DE:C2:07:12:AC:14:07
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P7eFXvMwunfZ87ct_97CBxKsFAc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91CD4DB/3A315DCECD0211E7B0442D28C4F9AE02/1615AC3AD9E911EC9017DD21C4F9AE02.roa
Signing time: Tue 22 Aug 2023 17:14:09 +0000
ROA not before: Tue 22 Aug 2023 17:14:09 +0000
ROA not after: Thu 31 Oct 2024 00:00:00 +0000
asID: 38614
IP address blocks: 103.158.38.0/24 maxlen: 24
103.158.39.0/24 maxlen: 24
117.103.80.0/24 maxlen: 24
117.103.81.0/24 maxlen: 24
117.103.82.0/24 maxlen: 24
117.103.83.0/24 maxlen: 24
117.103.84.0/24 maxlen: 24
117.103.85.0/24 maxlen: 24
117.103.86.0/24 maxlen: 24
117.103.87.0/24 maxlen: 24
2404:f380::/32 maxlen: 32
2404:f380::/36 maxlen: 36
2404:f380::/48 maxlen: 48
2404:f380:1::/48 maxlen: 48
2404:f380:2::/48 maxlen: 48
2404:f380:3::/48 maxlen: 48
2404:f380:4::/48 maxlen: 48
2404:f380:5::/48 maxlen: 48
2404:f380:6::/48 maxlen: 48
2404:f380:7::/48 maxlen: 48
2404:f380:8::/48 maxlen: 48
2404:f380:9::/48 maxlen: 48
2404:f380:a::/48 maxlen: 48
2404:f380:b::/48 maxlen: 48
2404:f380:c::/48 maxlen: 48
2404:f380:d::/48 maxlen: 48
2404:f380:e::/48 maxlen: 48
2404:f380:f::/48 maxlen: 48
2404:f380:1000::/36 maxlen: 36
2404:f380:2000::/36 maxlen: 36
2404:f380:3000::/36 maxlen: 36
2404:f380:4000::/36 maxlen: 36
2404:f380:5000::/36 maxlen: 36
2404:f380:6000::/36 maxlen: 36
2404:f380:7000::/36 maxlen: 36
2404:f380:8000::/36 maxlen: 36
2404:f380:9000::/36 maxlen: 36
2404:f380:a000::/36 maxlen: 36
2404:f380:b000::/36 maxlen: 36
2404:f380:c000::/36 maxlen: 36
2404:f380:d000::/36 maxlen: 36
2404:f380:e000::/36 maxlen: 36
2404:f380:f000::/36 maxlen: 36
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91CD4DB/3A315DCECD0211E7B0442D28C4F9AE02/P7eFXvMwunfZ87ct_97CBxKsFAc.crl
rsync://rpki.apnic.net/member_repository/A91CD4DB/3A315DCECD0211E7B0442D28C4F9AE02/P7eFXvMwunfZ87ct_97CBxKsFAc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P7eFXvMwunfZ87ct_97CBxKsFAc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 09 Jun 2024 17:10:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5737 (0x1669)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91CD4DB/serialNumber=3FB7855EF330BA77D9F3B72DFFDEC20712AC1407
Validity
Not Before: Aug 22 17:14:09 2023 GMT
Not After : Oct 31 00:00:00 2024 GMT
Subject: CN=64e4ece1-2baf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:d1:b9:4c:a6:00:60:5d:c0:4b:13:42:30:06:
cd:f0:05:8f:c5:24:ed:e4:c0:00:1b:78:ff:75:8a:
29:53:37:d0:c9:b2:df:32:9d:9c:a1:73:ef:fd:a7:
09:d6:c2:e8:e9:03:eb:2d:0d:94:a3:02:98:34:14:
f4:e0:77:54:c3:60:7d:0d:c0:18:ca:f0:6e:3c:3a:
c8:32:28:8a:2d:76:54:7c:f3:2d:51:a5:18:99:10:
e3:c6:10:83:ca:ec:40:ac:3f:27:15:8e:dc:7b:2a:
8d:1e:60:0a:2b:c8:3f:d7:c4:d5:6c:04:d8:33:14:
6f:d2:1f:b0:4c:0c:b1:56:48:9e:d5:8c:13:4b:d0:
c9:66:d9:b6:a3:4f:d1:14:94:8f:f7:0d:54:fc:7d:
d0:a9:5a:bd:6d:6f:d8:6c:e7:0e:3a:62:91:b9:73:
41:31:7a:bd:52:83:b1:46:c7:16:c7:18:80:9a:89:
82:f8:fa:5e:7a:15:d2:ee:27:98:59:f2:3f:69:25:
0c:02:d1:4c:48:31:f2:a7:18:20:ec:b6:ba:0a:bf:
b3:28:d5:dd:bd:70:6a:18:98:e6:d4:9c:5b:2a:28:
16:3a:86:3a:e3:d6:7c:19:d6:81:ab:34:26:61:10:
17:ed:db:83:36:5a:55:86:54:46:34:29:ad:3e:d6:
89:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:06:74:F0:37:06:C8:7B:AB:31:5F:C5:14:15:53:39:5E:72:0A:12
X509v3 Authority Key Identifier:
keyid:3F:B7:85:5E:F3:30:BA:77:D9:F3:B7:2D:FF:DE:C2:07:12:AC:14:07
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91CD4DB/3A315DCECD0211E7B0442D28C4F9AE02/P7eFXvMwunfZ87ct_97CBxKsFAc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P7eFXvMwunfZ87ct_97CBxKsFAc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CD4DB/3A315DCECD0211E7B0442D28C4F9AE02/1615AC3AD9E911EC9017DD21C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.158.38.0/23
117.103.80.0/21
IPv6:
2404:f380::/32
Signature Algorithm: sha256WithRSAEncryption
1b:a0:7c:28:de:b3:6d:97:d5:d6:17:cd:82:50:b5:98:60:77:
c9:0c:ba:d4:f9:1c:52:f0:3e:de:ac:03:b6:8c:39:32:34:7e:
b8:a4:9d:8d:fb:cb:1c:f7:77:53:1f:d4:ca:73:d1:52:70:4e:
5e:33:f6:6e:93:b7:b4:6e:9c:01:0b:15:4d:dd:50:b0:d0:95:
0e:aa:1c:29:1b:5e:82:25:b1:cc:7e:99:d5:d7:23:fa:c4:b5:
dc:fb:2e:89:13:ea:e7:8c:69:d4:85:1e:a6:87:94:65:3e:99:
9f:01:cd:7b:ee:e8:91:89:eb:f3:7e:78:c9:9e:c4:81:a3:b9:
64:73:11:ca:51:c0:48:ee:4a:19:43:b9:a1:4e:84:09:d2:0b:
04:01:9a:c4:0d:c8:5b:56:a0:61:35:6f:b2:1c:e3:9e:db:69:
19:f9:19:56:b7:be:6f:fe:aa:9c:44:d4:08:87:5c:05:d4:00:
0d:fa:d0:63:75:f6:65:21:ba:a6:d3:e6:a3:16:82:0b:93:b8:
d9:f5:32:93:ab:e8:8c:d5:a2:c1:42:1e:77:4e:99:7b:b8:4e:
ed:29:a8:a5:78:44:22:43:9b:3f:43:9d:7c:be:5b:c5:af:08:
46:64:1e:3e:81:65:a6:91:19:3a:9d:46:55:01:e2:c3:34:0a:
f3:d2:1b:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 2 17:59:45 2024 by rpki-client on console-fra.rpki-client.org