Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D1136/CF3281C8215B11E5A7BF890EC4F9AE02/8F92939C46C711E9A5547325C4F9AE02.roa
File: 8F92939C46C711E9A5547325C4F9AE02.roa (raw, json)
Hash identifier: OMcalDpUDIv29WHDH5fBd3k9KPtvhZaxcTh0ykbSM4A=
Subject key identifier: A7:72:E0:51:48:48:7C:71:DF:97:C4:56:C6:DA:1A:00:BB:BB:DF:6A
Certificate issuer: /CN=A91D1136/serialNumber=B7B73E89B621081609CD689AB0AEF7FAF148926C
Certificate serial: 25AD
Authority key identifier: B7:B7:3E:89:B6:21:08:16:09:CD:68:9A:B0:AE:F7:FA:F1:48:92:6C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t7c-ibYhCBYJzWiasK73-vFIkmw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D1136/CF3281C8215B11E5A7BF890EC4F9AE02/8F92939C46C711E9A5547325C4F9AE02.roa
Signing time: Tue 24 Sep 2024 15:52:58 +0000
ROA not before: Tue 24 Sep 2024 15:52:58 +0000
ROA not after: Mon 01 Dec 2025 00:00:00 +0000
asID: 10089
IP address blocks: 115.67.0.0/21 maxlen: 21
115.67.0.0/24 maxlen: 24
115.67.1.0/24 maxlen: 24
115.67.2.0/24 maxlen: 24
115.67.3.0/24 maxlen: 24
115.67.4.0/24 maxlen: 24
115.67.5.0/24 maxlen: 24
115.67.6.0/24 maxlen: 24
115.67.7.0/24 maxlen: 24
115.67.100.0/24 maxlen: 24
115.67.101.0/24 maxlen: 24
115.67.108.0/24 maxlen: 24
2404:8d00::/29 maxlen: 29
2404:8d04::/31 maxlen: 32
2404:8d04::/36 maxlen: 36
2404:8d04:1000::/36 maxlen: 36
2404:8d04:2000::/36 maxlen: 36
2404:8d04:3000::/36 maxlen: 36
2404:8d04:4000::/36 maxlen: 36
2404:8d04:5000::/36 maxlen: 36
2404:8d04:6000::/36 maxlen: 36
2404:8d04:7000::/36 maxlen: 36
2404:8d04:8000::/36 maxlen: 36
2404:8d04:9000::/36 maxlen: 36
2404:8d04:a000::/36 maxlen: 36
2404:8d04:b000::/36 maxlen: 36
2404:8d04:c000::/36 maxlen: 36
2404:8d04:d000::/36 maxlen: 36
2404:8d04:e000::/36 maxlen: 36
2404:8d04:f000::/36 maxlen: 36
2404:8d05::/36 maxlen: 36
2404:8d05:1000::/36 maxlen: 36
2404:8d05:2000::/36 maxlen: 36
2404:8d05:3000::/36 maxlen: 36
2404:8d05:4000::/36 maxlen: 36
2404:8d05:5000::/36 maxlen: 36
2404:8d05:6000::/36 maxlen: 36
2404:8d05:7000::/36 maxlen: 36
2404:8d05:8000::/36 maxlen: 36
2404:8d05:9000::/36 maxlen: 36
2404:8d05:a000::/36 maxlen: 36
2404:8d05:b000::/36 maxlen: 36
2404:8d05:c000::/36 maxlen: 36
2404:8d05:d000::/36 maxlen: 36
2404:8d05:e000::/36 maxlen: 36
2404:8d05:f000::/36 maxlen: 36
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D1136/CF3281C8215B11E5A7BF890EC4F9AE02/t7c-ibYhCBYJzWiasK73-vFIkmw.crl
rsync://rpki.apnic.net/member_repository/A91D1136/CF3281C8215B11E5A7BF890EC4F9AE02/t7c-ibYhCBYJzWiasK73-vFIkmw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t7c-ibYhCBYJzWiasK73-vFIkmw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 01 Dec 2024 15:41:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 9645 (0x25ad)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D1136/serialNumber=B7B73E89B621081609CD689AB0AEF7FAF148926C
Validity
Not Before: Sep 24 15:52:58 2024 GMT
Not After : Dec 1 00:00:00 2025 GMT
Subject: CN=66f2e05a-7464
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:c0:ea:40:94:f8:d9:17:af:f0:45:ca:8d:aa:
90:14:d4:08:28:97:da:89:9c:73:49:23:62:a8:21:
c6:03:53:4b:28:9a:0f:6e:61:17:0c:5a:84:54:8d:
82:09:b1:0c:92:c1:f6:c9:b7:67:e6:35:65:71:ea:
cf:60:0b:83:d3:8c:e0:f2:45:63:f9:ac:3a:e9:1f:
36:fa:84:03:49:6e:62:5c:27:56:0f:5d:da:3d:9c:
7e:2b:23:91:cf:21:9b:a1:a8:f4:31:c4:8c:72:a3:
c3:9f:65:36:90:d6:1f:a1:77:6a:83:78:d9:82:34:
34:69:31:51:dd:42:b3:b8:33:e1:9d:5f:26:0a:44:
60:15:45:06:e6:6f:5e:c7:68:84:ed:a7:28:3c:44:
94:68:32:6c:92:61:2e:4b:97:35:78:dc:7d:cf:17:
95:29:8a:8e:25:be:39:99:12:a4:12:c6:a9:17:45:
32:5a:e2:5b:5a:5e:95:64:c8:9d:b8:6b:1d:50:56:
96:55:1a:bb:c5:a1:e2:e6:90:2d:45:ac:5e:28:f0:
e4:6e:75:38:87:a4:66:7f:d3:33:8d:99:2f:72:ed:
f8:b9:a4:e6:4c:83:d8:16:b9:2f:e5:1c:9b:a4:ed:
35:27:9c:d6:fd:30:c8:82:fe:18:d3:9c:20:f0:d5:
0d:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:72:E0:51:48:48:7C:71:DF:97:C4:56:C6:DA:1A:00:BB:BB:DF:6A
X509v3 Authority Key Identifier:
keyid:B7:B7:3E:89:B6:21:08:16:09:CD:68:9A:B0:AE:F7:FA:F1:48:92:6C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D1136/CF3281C8215B11E5A7BF890EC4F9AE02/t7c-ibYhCBYJzWiasK73-vFIkmw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t7c-ibYhCBYJzWiasK73-vFIkmw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D1136/CF3281C8215B11E5A7BF890EC4F9AE02/8F92939C46C711E9A5547325C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
115.67.0.0/21
115.67.100.0/23
115.67.108.0/24
IPv6:
2404:8d00::/29
Signature Algorithm: sha256WithRSAEncryption
13:36:b3:7f:52:3c:43:2f:14:3e:18:b1:0d:25:6b:36:36:f0:
78:9a:f4:85:ea:3a:9c:01:cd:13:58:40:67:81:cd:c1:3a:9a:
ac:e7:e7:b8:a5:32:45:cb:39:5a:51:3c:6c:40:4a:e9:1f:da:
5e:ce:4e:e9:50:b3:a7:a2:a2:f6:01:db:87:14:67:58:94:5d:
f7:33:e1:8c:db:8b:f1:40:e0:97:fe:b2:ba:59:6e:c6:d2:3f:
b0:7f:99:56:34:3f:56:ef:cd:75:85:24:92:a6:03:d0:1a:01:
6c:7a:aa:6f:d5:cb:64:07:f5:b1:9a:06:d4:35:d1:2e:81:76:
9b:be:2a:76:81:54:37:fd:74:0a:3c:ce:14:24:68:4a:dc:65:
d9:81:7c:24:4b:47:b7:95:46:ea:f2:ad:37:6e:69:78:08:09:
aa:e4:20:10:8c:12:2c:10:09:1d:b3:e6:fc:0c:75:3d:d1:b0:
d4:f1:66:dc:67:a7:b2:04:37:2a:c7:1e:30:d1:0e:65:52:a7:
ab:d6:74:cf:84:d5:76:eb:e5:46:2d:25:e4:1c:a5:9c:c4:b2:
17:8d:2c:c5:61:20:49:82:3c:f5:76:33:ca:a8:2b:fc:82:69:
35:d4:59:eb:43:89:74:e5:53:6a:a1:20:6d:ff:07:23:41:9a:
c0:0b:45:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 24 17:20:52 2024 by rpki-client on console-fra.rpki-client.org