Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E76B8/FF1508EE7E9A11E8B69FC02DC4F9AE02/ECBAA694826F11ED963DD626C4F9AE02.roa
File: ECBAA694826F11ED963DD626C4F9AE02.roa (raw, json)
Hash identifier: rFFoaRvcrZ4sz/eo1ZkC/3tujyf9NAOsxtd4sP/WXDg=
Subject key identifier: B0:D5:DD:83:FC:A7:97:4D:02:C6:E5:C4:6E:31:2E:B5:13:A9:CA:6C
Certificate issuer: /CN=A91E76B8/serialNumber=30E7DEB1C522E791598592B645308863CA000E18
Certificate serial: 1333
Authority key identifier: 30:E7:DE:B1:C5:22:E7:91:59:85:92:B6:45:30:88:63:CA:00:0E:18
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MOfescUi55FZhZK2RTCIY8oADhg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E76B8/FF1508EE7E9A11E8B69FC02DC4F9AE02/ECBAA694826F11ED963DD626C4F9AE02.roa
Signing time: Mon 22 Jan 2024 17:45:03 +0000
ROA not before: Mon 22 Jan 2024 17:45:03 +0000
ROA not after: Thu 01 May 2025 00:00:00 +0000
asID: 136210
IP address blocks: 103.83.188.0/22 maxlen: 22
103.83.188.0/24 maxlen: 24
103.83.189.0/24 maxlen: 24
103.83.190.0/24 maxlen: 24
103.83.191.0/24 maxlen: 24
2400:ecc0::/32 maxlen: 32
2400:ecc0::/36 maxlen: 36
2400:ecc0:1000::/36 maxlen: 36
2400:ecc0:1000::/48 maxlen: 48
2400:ecc0:1001::/48 maxlen: 48
2400:ecc0:1002::/48 maxlen: 48
2400:ecc0:1003::/48 maxlen: 48
2400:ecc0:1004::/48 maxlen: 48
2400:ecc0:1005::/48 maxlen: 48
2400:ecc0:1006::/48 maxlen: 48
2400:ecc0:1007::/48 maxlen: 48
2400:ecc0:1008::/48 maxlen: 48
2400:ecc0:1009::/48 maxlen: 48
2400:ecc0:100a::/48 maxlen: 48
2400:ecc0:100b::/48 maxlen: 48
2400:ecc0:100c::/48 maxlen: 48
2400:ecc0:100d::/48 maxlen: 48
2400:ecc0:100e::/48 maxlen: 48
2400:ecc0:100f::/48 maxlen: 48
2400:ecc0:2000::/36 maxlen: 36
2400:ecc0:3000::/36 maxlen: 36
2400:ecc0:4000::/36 maxlen: 36
2400:ecc0:5000::/36 maxlen: 36
2400:ecc0:6000::/36 maxlen: 36
2400:ecc0:7000::/36 maxlen: 36
2400:ecc0:8000::/36 maxlen: 36
2400:ecc0:9000::/36 maxlen: 36
2400:ecc0:9000::/48 maxlen: 48
2400:ecc0:9001::/48 maxlen: 48
2400:ecc0:9002::/48 maxlen: 48
2400:ecc0:9003::/48 maxlen: 48
2400:ecc0:9004::/48 maxlen: 48
2400:ecc0:9005::/48 maxlen: 48
2400:ecc0:9006::/48 maxlen: 48
2400:ecc0:903f::/48 maxlen: 48
2400:ecc0:a000::/36 maxlen: 36
2400:ecc0:b000::/36 maxlen: 36
2400:ecc0:c000::/36 maxlen: 36
2400:ecc0:d000::/36 maxlen: 36
2400:ecc0:e000::/36 maxlen: 36
2400:ecc0:f000::/36 maxlen: 36
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E76B8/FF1508EE7E9A11E8B69FC02DC4F9AE02/MOfescUi55FZhZK2RTCIY8oADhg.crl
rsync://rpki.apnic.net/member_repository/A91E76B8/FF1508EE7E9A11E8B69FC02DC4F9AE02/MOfescUi55FZhZK2RTCIY8oADhg.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MOfescUi55FZhZK2RTCIY8oADhg.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 07 Jun 2024 17:48:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4915 (0x1333)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E76B8/serialNumber=30E7DEB1C522E791598592B645308863CA000E18
Validity
Not Before: Jan 22 17:45:03 2024 GMT
Not After : May 1 00:00:00 2025 GMT
Subject: CN=65aea99f-b52c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:c1:7a:62:e0:05:17:77:6e:4d:e1:8e:db:a3:
c3:23:f2:0a:20:4f:d0:cf:c7:7c:ad:39:df:d6:80:
57:87:15:68:78:2d:b7:c8:90:97:dd:0b:df:7e:8d:
f2:06:79:19:ca:17:21:d9:d1:ee:d0:ba:97:95:b7:
c1:b2:fd:e4:3b:5a:d6:5b:04:4e:93:91:62:2e:28:
06:2b:18:3b:01:df:db:db:37:42:ed:ff:c3:01:1f:
ce:04:9a:2f:1f:e5:43:fa:bb:94:f4:b7:91:bd:d9:
cd:f2:85:46:c8:cb:7b:3c:e7:22:ca:7a:a6:dd:b0:
c7:eb:bb:38:0d:ef:69:e8:e0:93:3d:a4:03:9d:9e:
b7:26:26:fe:08:0d:cb:9f:08:d2:12:e6:c0:07:cd:
86:6c:28:2d:95:e2:13:e5:a1:14:61:cf:bf:60:7c:
df:7b:80:69:6e:65:ac:84:c4:8a:ac:e8:5a:f5:09:
e9:91:82:8f:57:35:72:2d:71:a6:08:34:74:3b:76:
c3:47:79:e7:61:1b:20:e3:e6:c1:21:cf:a9:6c:93:
61:3e:3a:6a:9b:ff:ad:1f:ab:d0:2b:3a:9e:46:43:
9c:2b:0e:36:2d:97:3f:12:89:b1:c7:3f:26:02:5d:
d2:75:3e:b5:31:4f:29:fd:9e:de:a2:88:3c:8a:06:
97:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:D5:DD:83:FC:A7:97:4D:02:C6:E5:C4:6E:31:2E:B5:13:A9:CA:6C
X509v3 Authority Key Identifier:
keyid:30:E7:DE:B1:C5:22:E7:91:59:85:92:B6:45:30:88:63:CA:00:0E:18
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E76B8/FF1508EE7E9A11E8B69FC02DC4F9AE02/MOfescUi55FZhZK2RTCIY8oADhg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MOfescUi55FZhZK2RTCIY8oADhg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E76B8/FF1508EE7E9A11E8B69FC02DC4F9AE02/ECBAA694826F11ED963DD626C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.83.188.0/22
IPv6:
2400:ecc0::/32
Signature Algorithm: sha256WithRSAEncryption
5e:43:47:08:b1:fb:8c:13:45:14:d8:1f:7d:49:84:39:35:0d:
cf:11:ae:88:e7:bc:1a:97:4c:aa:cd:a6:01:4a:14:1c:23:fd:
38:91:6b:4c:ad:cf:21:5a:92:46:b7:4c:da:63:7e:96:b9:99:
64:5b:6e:01:9e:68:03:5a:3d:15:28:7f:f4:c9:da:69:29:e1:
5b:8b:ec:4d:95:40:30:12:c2:eb:34:1d:85:06:57:3f:18:a7:
db:78:10:95:45:70:d4:16:e8:b1:4e:2d:3d:1f:ae:8a:69:a4:
ec:ad:4c:c7:35:16:79:05:ad:5b:1f:cc:cd:d5:20:c5:45:42:
e5:5b:86:13:f4:9a:af:9b:7e:f2:1b:7f:25:97:6c:08:b6:20:
7e:c1:64:09:da:55:61:c5:d7:3a:88:7d:80:55:c8:9d:34:f5:
fd:7d:15:ef:ad:9c:db:1a:b4:8f:b2:36:95:97:11:de:ee:4f:
65:e7:97:bf:bf:6c:73:ef:82:f4:52:60:31:ed:47:b0:ab:81:
cd:49:1b:fa:5b:8f:94:18:e9:ba:da:75:3f:bd:3d:13:50:a8:
50:43:b2:b4:6b:ab:e1:44:ec:f7:5e:b2:cc:ee:49:ef:3c:c9:
8f:8a:21:3c:1d:0a:21:eb:d7:e6:4e:e7:83:c7:1d:09:1f:2b:
4e:a2:26:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 31 20:34:19 2024 by rpki-client on console-ams.rpki-client.org