Route Origin Authorization
$ rpki-client -vvf rpki.akrn.net/repo/AKRN/0/323430373a636463303a656666663a3a2f34382d3438203d3e20313339323939.roa
File: 323430373a636463303a656666663a3a2f34382d3438203d3e20313339323939.roa (raw, json)
Hash identifier: B5NEWkwR0yS/6298bmWpvkhprAyXeahKdOoffRebZLg=
Subject key identifier: 53:F7:49:B5:AC:0B:39:0C:C3:66:93:34:C1:A2:2F:DD:E5:28:F2:7F
Certificate issuer: /CN=A916C75D0000/serialNumber=90884A3F57AC46FA63A71BD993E4E8AD788187AF
Certificate serial: 16DC5D03DCAAA8C60F09BE172BE28B8196570158
Authority key identifier: 90:88:4A:3F:57:AC:46:FA:63:A7:1B:D9:93:E4:E8:AD:78:81:87:AF
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kIhKP1esRvpjpxvZk-TorXiBh68.cer
Subject info access: rsync://rpki.akrn.net/repo/AKRN/0/323430373a636463303a656666663a3a2f34382d3438203d3e20313339323939.roa
Signing time: Mon 23 Oct 2023 06:07:55 +0000
ROA not before: Mon 23 Oct 2023 06:02:55 +0000
ROA not after: Mon 21 Oct 2024 06:07:55 +0000
asID: 139299
IP address blocks: 2407:cdc0:efff::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.akrn.net/repo/AKRN/0/90884A3F57AC46FA63A71BD993E4E8AD788187AF.crl
rsync://rpki.akrn.net/repo/AKRN/0/90884A3F57AC46FA63A71BD993E4E8AD788187AF.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kIhKP1esRvpjpxvZk-TorXiBh68.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 12 May 2024 11:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
16:dc:5d:03:dc:aa:a8:c6:0f:09:be:17:2b:e2:8b:81:96:57:01:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916C75D0000/serialNumber=90884A3F57AC46FA63A71BD993E4E8AD788187AF
Validity
Not Before: Oct 23 06:02:55 2023 GMT
Not After : Oct 21 06:07:55 2024 GMT
Subject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
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:46:a1:4a:68:e5:02:7a:0c:19:06:f0:cf:68:
7b:70:21:9e:6c:b6:d8:60:92:e6:10:c6:f9:60:72:
97:90:b9:10:d6:3b:70:7f:77:1e:bd:97:42:59:83:
74:66:00:9e:9e:35:bd:98:3a:13:91:39:7f:eb:3e:
06:50:07:bd:39:db:8f:38:21:7e:6f:05:55:90:d2:
5f:79:bf:b4:72:3f:7b:b8:5b:4b:0f:4b:68:d0:bb:
d0:36:6e:4d:4a:36:79:c6:50:60:11:d0:fa:99:59:
05:d1:06:91:39:c1:06:87:7a:30:4e:e4:8c:88:e1:
b2:60:3c:d5:7b:67:84:9a:79:02:05:f0:20:fe:e8:
4c:2b:23:82:6a:1c:b3:b6:ba:31:f1:39:cb:b6:e6:
fb:be:5e:76:88:dd:23:d2:80:75:38:37:a0:32:77:
d4:b6:2f:cd:dd:de:ef:5a:87:a2:92:bd:1e:48:78:
f9:ff:a9:58:f4:f4:fb:2b:52:30:e7:82:ad:99:94:
d5:0b:1b:ca:69:a2:9b:0b:bb:a7:af:41:c8:86:c5:
fa:07:75:90:52:17:92:2d:14:d1:87:e0:ef:07:93:
b5:b4:5f:96:c6:e4:ab:2d:ed:a4:5b:5a:79:b7:9a:
5e:13:30:b4:f4:fe:f2:be:f3:96:04:a5:1d:7c:57:
9c:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:F7:49:B5:AC:0B:39:0C:C3:66:93:34:C1:A2:2F:DD:E5:28:F2:7F
X509v3 Authority Key Identifier:
keyid:90:88:4A:3F:57:AC:46:FA:63:A7:1B:D9:93:E4:E8:AD:78:81:87:AF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.akrn.net/repo/AKRN/0/90884A3F57AC46FA63A71BD993E4E8AD788187AF.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kIhKP1esRvpjpxvZk-TorXiBh68.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.akrn.net/repo/AKRN/0/323430373a636463303a656666663a3a2f34382d3438203d3e20313339323939.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2407:cdc0:efff::/48
Signature Algorithm: sha256WithRSAEncryption
68:9f:91:b9:3c:cd:a4:8a:cf:5e:b5:39:f1:4f:b5:e0:da:04:
6e:19:95:75:1f:24:6f:23:b6:23:e3:aa:f2:3e:29:0a:f8:cb:
9d:34:7e:be:45:27:27:b6:4e:80:a2:d1:ef:00:f4:6f:26:35:
e9:b8:fb:3a:22:e3:d5:b0:6e:de:16:39:af:c4:ae:5e:e4:d7:
f2:12:0d:94:69:3f:1d:06:4d:38:e2:40:c0:ad:59:c7:dd:98:
09:ca:27:61:1b:1c:1d:aa:2b:e5:16:c3:d9:c4:a7:e5:60:3b:
05:d1:f5:35:73:a0:04:ec:cf:4f:cb:fc:d8:5f:67:e1:e4:a5:
63:12:b6:7c:e4:17:53:c6:e6:00:12:6b:3a:17:46:df:fb:bf:
17:08:e5:a9:d8:9c:d0:b3:e3:6a:08:03:1e:1e:26:ef:82:72:
73:6e:f7:c0:cb:90:47:05:aa:7e:a3:7e:89:0c:ee:e7:3a:00:
37:30:86:f7:09:0d:75:35:c5:be:9a:b8:d5:ea:37:2f:34:bb:
12:09:f7:f1:85:ce:66:43:0c:6b:44:64:2f:95:03:0d:49:70:
9e:a8:1d:69:87:af:cd:f5:c7:92:74:4b:78:fc:3d:d5:5b:f9:
ac:b6:fd:52:1e:97:f7:28:f6:7b:6b:49:f5:7a:a3:c5:b8:62:
8f:15:19:4b
-----BEGIN CERTIFICATE-----
MIIHATCCBemgAwIBAgIUFtxdA9yqqMYPCb4XK+KLgZZXAVgwDQYJKoZIhvcNAQEL
BQAwSjEVMBMGA1UEAxMMQTkxNkM3NUQwMDAwMTEwLwYDVQQFEyg5MDg4NEEzRjU3
QUM0NkZBNjNBNzFCRDk5M0U0RThBRDc4ODE4N0FGMB4XDTIzMTAyMzA2MDI1NVoX
DTI0MTAyMTA2MDc1NVowggItMYICKTCCAiUGA1UEAxOCAhwzMDgyMDEwQTAyODIw
MTAxMDBEODQ2QTE0QTY4RTUwMjdBMEMxOTA2RjBDRjY4N0I3MDIxOUU2Q0I2RDg2
MDkyRTYxMEM2Rjk2MDcyOTc5MEI5MTBENjNCNzA3Rjc3MUVCRDk3NDI1OTgzNzQ2
NjAwOUU5RTM1QkQ5ODNBMTM5MTM5N0ZFQjNFMDY1MDA3QkQzOURCOEYzODIxN0U2
RjA1NTU5MEQyNUY3OUJGQjQ3MjNGN0JCODVCNEIwRjRCNjhEMEJCRDAzNjZFNEQ0
QTM2NzlDNjUwNjAxMUQwRkE5OTU5MDVEMTA2OTEzOUMxMDY4NzdBMzA0RUU0OEM4
OEUxQjI2MDNDRDU3QjY3ODQ5QTc5MDIwNUYwMjBGRUU4NEMyQjIzODI2QTFDQjNC
NkJBMzFGMTM5Q0JCNkU2RkJCRTVFNzY4OEREMjNEMjgwNzUzODM3QTAzMjc3RDRC
NjJGQ0RERERFRUY1QTg3QTI5MkJEMUU0ODc4RjlGRkE5NThGNEY0RkIyQjUyMzBF
NzgyQUQ5OTk0RDUwQjFCQ0E2OUEyOUIwQkJCQTdBRjQxQzg4NkM1RkEwNzc1OTA1
MjE3OTIyRDE0RDE4N0UwRUYwNzkzQjVCNDVGOTZDNkU0QUIyREVEQTQ1QjVBNzlC
NzlBNUUxMzMwQjRGNEZFRjJCRUYzOTYwNEE1MUQ3QzU3OUMyNTAyMDMwMTAwMDEw
ggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDYRqFKaOUCegwZBvDPaHtw
IZ5stthgkuYQxvlgcpeQuRDWO3B/dx69l0JZg3RmAJ6eNb2YOhOROX/rPgZQB705
2484IX5vBVWQ0l95v7RyP3u4W0sPS2jQu9A2bk1KNnnGUGAR0PqZWQXRBpE5wQaH
ejBO5IyI4bJgPNV7Z4SaeQIF8CD+6EwrI4JqHLO2ujHxOcu25vu+XnaI3SPSgHU4
N6Ayd9S2L83d3u9ah6KSvR5IePn/qVj09PsrUjDngq2ZlNULG8ppopsLu6evQciG
xfoHdZBSF5ItFNGH4O8Hk7W0X5bG5Kst7aRbWnm3ml4TMLT0/vK+85YEpR18V5wl
AgMBAAGjggH4MIIB9DAdBgNVHQ4EFgQUU/dJtawLOQzDZpM0waIv3eUo8n8wHwYD
VR0jBBgwFoAUkIhKP1esRvpjpxvZk+TorXiBh68wDgYDVR0PAQH/BAQDAgeAMF8G
A1UdHwRYMFYwVKBSoFCGTnJzeW5jOi8vcnBraS5ha3JuLm5ldC9yZXBvL0FLUk4v
MC85MDg4NEEzRjU3QUM0NkZBNjNBNzFCRDk5M0U0RThBRDc4ODE4N0FGLmNybDB+
BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5u
ZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9r
SWhLUDFlc1J2cGpweHZaay1Ub3JYaUJoNjguY2VyMIGCBggrBgEFBQcBCwR2MHQw
cgYIKwYBBQUHMAuGZnJzeW5jOi8vcnBraS5ha3JuLm5ldC9yZXBvL0FLUk4vMC8z
MjM0MzAzNzNhNjM2NDYzMzAzYTY1NjY2NjY2M2EzYTJmMzQzODJkMzQzODIwM2Qz
ZTIwMzEzMzM5MzIzOTM5LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIG
CCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJAfNwO//MA0GCSqGSIb3DQEBCwUA
A4IBAQBon5G5PM2kis9etTnxT7Xg2gRuGZV1HyRvI7Yj46ryPikK+MudNH6+RScn
tk6AotHvAPRvJjXpuPs6IuPVsG7eFjmvxK5e5NfyEg2UaT8dBk044kDArVnH3ZgJ
yidhGxwdqivlFsPZxKflYDsF0fU1c6AE7M9Py/zYX2fh5KVjErZ85BdTxuYAEms6
F0bf+78XCOWp2JzQs+NqCAMeHibvgnJzbvfAy5BHBap+o36JDO7nOgA3MIb3CQ11
NcW+mrjV6jcvNLsSCffxhc5mQwxrRGQvlQMNSXCeqB1ph6/N9ceSdEt4/D3VW/ms
tv1SHpf3KPZ7a0n1eqPFuGKPFRlL
-----END CERTIFICATE-----
Generated at Sat May 11 12:05:49 2024 by rpki-client on console-ams.rpki-client.org