Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D58F6/56BE0C7CA6B211E9AACFB45BC4F9AE02/C0743AE8A6B611E9AB731B69C4F9AE02.roa
File: C0743AE8A6B611E9AB731B69C4F9AE02.roa (raw, json)
Hash identifier: D37r9NVjJKnakNKGV5eIbU09oK03s9VxPCDX7WRRtMs=
Subject key identifier: 95:1D:FF:E6:8B:58:C7:6A:C1:9C:64:A6:6E:A3:97:0F:D2:2F:84:ED
Certificate issuer: /CN=A91D58F6/serialNumber=65D9190FFC869C94F582190FAAD40F0514A5BA4E
Certificate serial: 0CC5
Authority key identifier: 65:D9:19:0F:FC:86:9C:94:F5:82:19:0F:AA:D4:0F:05:14:A5:BA:4E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZdkZD_yGnJT1ghkPqtQPBRSluk4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D58F6/56BE0C7CA6B211E9AACFB45BC4F9AE02/C0743AE8A6B611E9AB731B69C4F9AE02.roa
Signing time: Thu 22 Jun 2023 19:18:11 +0000
ROA not before: Thu 22 Jun 2023 19:18:11 +0000
ROA not after: Sat 31 Aug 2024 00:00:00 +0000
asID: 23881
IP address blocks: 45.121.196.0/24 maxlen: 24
45.121.197.0/24 maxlen: 24
45.121.198.0/24 maxlen: 24
45.121.199.0/24 maxlen: 24
103.15.196.0/24 maxlen: 24
103.15.197.0/24 maxlen: 24
103.15.198.0/24 maxlen: 24
103.15.199.0/24 maxlen: 24
103.19.24.0/24 maxlen: 24
103.19.25.0/24 maxlen: 24
103.19.26.0/24 maxlen: 24
103.19.27.0/24 maxlen: 24
203.135.128.0/24 maxlen: 24
203.135.129.0/24 maxlen: 24
203.135.130.0/24 maxlen: 24
203.135.131.0/24 maxlen: 24
203.135.132.0/24 maxlen: 24
203.135.133.0/24 maxlen: 24
203.135.134.0/24 maxlen: 24
203.135.135.0/24 maxlen: 24
203.135.136.0/24 maxlen: 24
203.135.137.0/24 maxlen: 24
203.135.138.0/24 maxlen: 24
203.135.139.0/24 maxlen: 24
203.135.140.0/24 maxlen: 24
203.135.141.0/24 maxlen: 24
203.135.142.0/24 maxlen: 24
203.135.143.0/24 maxlen: 24
203.135.144.0/24 maxlen: 24
203.135.145.0/24 maxlen: 24
203.135.146.0/24 maxlen: 24
203.135.147.0/24 maxlen: 24
203.135.148.0/24 maxlen: 24
203.135.149.0/24 maxlen: 24
203.135.150.0/24 maxlen: 24
203.135.151.0/24 maxlen: 24
203.135.152.0/24 maxlen: 24
203.135.153.0/24 maxlen: 24
203.135.154.0/24 maxlen: 24
203.135.155.0/24 maxlen: 24
203.135.156.0/24 maxlen: 24
203.135.157.0/24 maxlen: 24
203.135.158.0/24 maxlen: 24
203.135.159.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D58F6/56BE0C7CA6B211E9AACFB45BC4F9AE02/ZdkZD_yGnJT1ghkPqtQPBRSluk4.crl
rsync://rpki.apnic.net/member_repository/A91D58F6/56BE0C7CA6B211E9AACFB45BC4F9AE02/ZdkZD_yGnJT1ghkPqtQPBRSluk4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZdkZD_yGnJT1ghkPqtQPBRSluk4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 07 Jun 2024 19:07:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3269 (0xcc5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D58F6/serialNumber=65D9190FFC869C94F582190FAAD40F0514A5BA4E
Validity
Not Before: Jun 22 19:18:11 2023 GMT
Not After : Aug 31 00:00:00 2024 GMT
Subject: CN=64949e73-1b32
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:16:33:0a:cc:27:0f:2a:b2:fe:0e:29:08:74:
96:3c:d5:1d:81:8d:7f:b5:36:fd:af:3c:00:31:7c:
d5:5a:94:43:e4:0f:7c:fb:ae:76:d7:99:71:a1:b5:
6c:0e:d6:5f:af:c6:3e:ea:b5:74:4d:a6:ba:39:d1:
16:b9:b3:9e:41:bc:d3:49:b3:a7:e3:0a:59:4b:e3:
9d:39:2d:6f:ab:f3:b4:27:d4:5f:c6:47:30:20:8b:
f8:b8:c6:4f:ea:d0:f0:73:aa:a4:ce:36:b4:74:f2:
74:8e:01:fe:ac:78:2f:d5:f7:a8:76:81:ab:fc:6f:
26:b1:13:c7:f2:21:87:14:7f:ab:b6:58:24:59:c9:
81:8a:e5:29:65:86:69:40:ca:4c:42:24:95:58:08:
4b:df:6a:1a:df:5e:31:aa:82:e4:a4:d9:1e:3c:1d:
4e:9a:89:3c:a2:62:62:c2:a9:57:64:35:7f:5a:6b:
a3:5b:bc:36:d4:50:35:7a:92:3c:38:7b:aa:6a:d2:
34:a0:a2:ae:65:3e:1b:99:af:a6:4d:7b:55:c6:de:
3d:f7:15:79:17:d2:9b:63:4d:40:76:97:52:5c:ae:
98:bf:2c:64:fb:c8:58:50:40:5b:55:71:14:19:c6:
15:40:fb:df:ee:51:b9:61:3e:7b:d3:b6:f7:2a:00:
dc:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:1D:FF:E6:8B:58:C7:6A:C1:9C:64:A6:6E:A3:97:0F:D2:2F:84:ED
X509v3 Authority Key Identifier:
keyid:65:D9:19:0F:FC:86:9C:94:F5:82:19:0F:AA:D4:0F:05:14:A5:BA:4E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D58F6/56BE0C7CA6B211E9AACFB45BC4F9AE02/ZdkZD_yGnJT1ghkPqtQPBRSluk4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZdkZD_yGnJT1ghkPqtQPBRSluk4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D58F6/56BE0C7CA6B211E9AACFB45BC4F9AE02/C0743AE8A6B611E9AB731B69C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.121.196.0/22
103.15.196.0/22
103.19.24.0/22
203.135.128.0/19
Signature Algorithm: sha256WithRSAEncryption
a4:8d:16:ef:dd:73:23:0d:48:9e:7f:2e:0e:96:52:44:43:c9:
27:e7:ef:4a:ca:c7:7e:94:04:cf:55:b5:60:73:3e:59:b0:b9:
90:5d:13:81:10:2b:7d:cd:96:fe:d3:06:22:15:3e:8a:29:14:
65:a5:ec:c2:e4:28:a8:a7:a1:23:e5:05:e0:a4:9a:78:9c:c7:
c6:6f:03:3a:9a:f8:12:31:7b:24:24:71:6d:10:4c:85:5b:28:
6b:a2:9a:e0:db:98:a3:60:36:c6:94:0e:0f:15:4a:be:61:3f:
50:4d:67:6f:06:24:c6:3b:0c:92:77:61:0f:1f:d2:67:34:23:
46:ad:c2:44:af:06:b9:b0:9f:15:4c:55:8a:fe:e8:10:41:8d:
cb:0d:7f:13:aa:16:40:91:67:2c:3a:ca:64:dd:55:22:a8:60:
54:0b:5c:96:99:83:c1:a3:61:df:48:19:4a:db:dc:b1:04:e9:
fd:1e:7b:7a:1d:d4:eb:b9:8f:cf:59:32:c6:aa:87:05:28:5e:
51:be:76:27:9f:85:ca:b1:2d:3d:56:e9:f3:12:56:f7:1b:a6:
5e:6d:32:21:ba:53:ed:10:49:94:a1:4a:26:a7:d4:71:7d:3f:
b9:35:38:42:2a:1e:db:1b:68:b8:6e:aa:35:4c:4e:8d:37:12:
58:1e:ad:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 31 20:34:17 2024 by rpki-client on console-ams.rpki-client.org