Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/DC75DE2A87BD11EFB9F96667C4F9AE02.roa
File: DC75DE2A87BD11EFB9F96667C4F9AE02.roa (raw, json)
Hash identifier: qGapROobUVGCrEESCVEkZxi6AWx+01plIIYiCM3WiLw=
Subject key identifier: C8:58:D8:F8:84:4C:5A:59:DB:B6:42:80:2A:8D:AC:C1:3B:BE:9D:4C
Certificate issuer: /CN=A91E6134/serialNumber=8308087911EA49E215DC4926B0226A521E5B39C4
Certificate serial: 17DF
Authority key identifier: 83:08:08:79:11:EA:49:E2:15:DC:49:26:B0:22:6A:52:1E:5B:39:C4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/DC75DE2A87BD11EFB9F96667C4F9AE02.roa
Signing time: Fri 11 Oct 2024 17:03:18 +0000
ROA not before: Fri 11 Oct 2024 17:03:18 +0000
ROA not after: Wed 30 Jul 2025 00:00:00 +0000
asID: 9387
IP address blocks: 103.11.60.0/24 maxlen: 24
113.203.234.0/24 maxlen: 24
113.203.235.0/24 maxlen: 24
113.203.236.0/24 maxlen: 24
113.203.237.0/24 maxlen: 24
113.203.238.0/24 maxlen: 24
113.203.239.0/24 maxlen: 24
113.203.240.0/24 maxlen: 24
113.203.253.0/24 maxlen: 24
180.178.128.0/24 maxlen: 24
180.178.129.0/24 maxlen: 24
180.178.132.0/24 maxlen: 24
180.178.133.0/24 maxlen: 24
180.178.134.0/24 maxlen: 24
180.178.135.0/24 maxlen: 24
180.178.136.0/24 maxlen: 24
180.178.137.0/24 maxlen: 24
180.178.138.0/24 maxlen: 24
180.178.139.0/24 maxlen: 24
180.178.172.0/24 maxlen: 24
180.178.174.0/24 maxlen: 24
180.178.175.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.crl
rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 02 Dec 2024 06:59:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6111 (0x17df)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E6134/serialNumber=8308087911EA49E215DC4926B0226A521E5B39C4
Validity
Not Before: Oct 11 17:03:18 2024 GMT
Not After : Jul 30 00:00:00 2025 GMT
Subject: CN=67095a56-919b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:ff:c9:71:7b:4a:fc:9e:79:de:82:6a:e9:d0:
11:40:71:6f:f3:a5:ae:a9:14:77:d1:6d:87:5b:47:
0e:c4:ca:b7:0b:14:85:ec:e3:85:fb:77:01:0a:f4:
98:76:fb:64:29:85:9f:2b:c1:71:b4:85:da:a3:7f:
8f:64:ac:f4:52:4f:d2:6e:dd:ee:5a:3f:8f:56:72:
d0:b8:e3:af:20:47:d3:36:86:7b:2b:31:3e:f2:ed:
e2:d4:1a:45:6b:19:94:9f:53:f0:25:94:ed:af:88:
a8:23:24:f0:0a:af:07:a7:0c:1f:1e:73:85:1f:1e:
99:38:3f:58:96:30:c1:9d:33:e9:21:dd:73:ed:21:
ca:f9:8d:fe:25:85:b4:c9:cf:f1:b9:e9:c7:c8:38:
5c:66:f2:f9:93:87:d4:63:b9:f2:62:b0:8d:a0:60:
1e:fb:d5:d8:cb:37:77:f9:91:d7:37:5d:38:ba:f3:
e5:df:54:15:a8:8a:05:58:3d:4e:ae:ae:c3:50:a5:
07:74:c7:0c:db:3c:09:fb:c6:68:00:2f:a6:3a:ba:
82:5c:73:c1:61:04:e7:94:dc:0c:f3:ff:9d:46:2a:
49:25:c2:6d:53:06:d9:b3:8e:cc:3d:36:9e:13:95:
dc:07:81:9a:f1:4f:96:1f:ce:fc:d6:36:72:8a:fe:
d9:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:58:D8:F8:84:4C:5A:59:DB:B6:42:80:2A:8D:AC:C1:3B:BE:9D:4C
X509v3 Authority Key Identifier:
keyid:83:08:08:79:11:EA:49:E2:15:DC:49:26:B0:22:6A:52:1E:5B:39:C4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/DC75DE2A87BD11EFB9F96667C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.11.60.0/24
113.203.234.0-113.203.240.255
113.203.253.0/24
180.178.128.0/23
180.178.132.0-180.178.139.255
180.178.172.0/24
180.178.174.0/23
Signature Algorithm: sha256WithRSAEncryption
85:eb:60:c4:64:16:87:cb:a5:ac:7d:24:a7:4c:30:7b:93:64:
b0:c1:3d:62:95:34:d6:86:89:28:dd:78:45:07:7d:55:20:1f:
55:ab:44:dd:dc:4b:f3:82:df:d3:d7:fd:7b:d8:7d:4c:3b:f8:
16:78:32:ff:a1:52:ac:c0:20:96:d9:32:d7:b9:60:d4:f4:6a:
61:29:20:24:54:42:22:d3:1b:82:c6:a3:bf:e0:a5:ab:e8:87:
b0:89:f9:63:00:32:fd:46:d1:bd:65:dc:98:ee:7b:33:e5:6f:
01:12:77:1a:b1:da:02:b5:7e:3c:c8:c1:99:f6:03:f2:8a:8e:
09:94:e5:4b:7b:c6:77:cd:bb:bb:2f:cc:62:83:1c:0c:9b:55:
30:cc:b7:db:38:f7:6a:88:ce:57:cd:b6:8e:6f:9d:07:cd:99:
fb:45:24:3c:2f:6f:84:eb:a9:6a:06:a5:5a:b5:28:17:7b:2f:
f3:fb:3c:f6:d1:69:e7:b1:00:3f:1f:e4:0c:ae:22:88:07:bf:
98:81:a5:58:8a:cb:48:3c:57:f1:95:82:92:3d:2c:60:10:ac:
45:c8:f1:4e:b4:c2:fa:ed:44:e8:8e:69:9c:a8:ba:47:03:0f:
f8:c2:ab:ee:db:14:94:b6:47:a8:6e:78:e9:fc:37:19:c1:ac:
20:9b:69:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 09:06:06 2024 by rpki-client on console-ams.rpki-client.org