Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9115F15/FFED27943A9311EBABDE232FC4F9AE02/1E812B043A9611EB8CD4224BC4F9AE02.roa
File: 1E812B043A9611EB8CD4224BC4F9AE02.roa (raw, json)
Hash identifier: fDD6PNd18SUBagbiOq7X2uJd+1CNri3ku1XDWyzjcE4=
Subject key identifier: 23:91:54:A2:F8:43:6D:63:72:FA:2A:A4:C6:6C:D7:8D:2F:DE:9A:B9
Certificate issuer: /CN=A9115F15/serialNumber=AB535E132884BCA345F7AF6913AB0A397765E7A9
Certificate serial: 063D
Authority key identifier: AB:53:5E:13:28:84:BC:A3:45:F7:AF:69:13:AB:0A:39:77:65:E7:A9
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q1NeEyiEvKNF969pE6sKOXdl56k.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9115F15/FFED27943A9311EBABDE232FC4F9AE02/1E812B043A9611EB8CD4224BC4F9AE02.roa
Signing time: Mon 12 Feb 2024 23:41:42 +0000
ROA not before: Mon 12 Feb 2024 23:41:42 +0000
ROA not after: Mon 31 Mar 2025 00:00:00 +0000
asID: 18200
IP address blocks: 43.224.192.0/22 maxlen: 22
43.224.195.0/24 maxlen: 24
61.5.208.0/20 maxlen: 20
61.5.208.0/24 maxlen: 24
101.101.0.0/18 maxlen: 18
103.43.156.0/22 maxlen: 22
114.69.192.0/19 maxlen: 19
114.69.192.0/22 maxlen: 22
114.69.199.0/24 maxlen: 24
114.69.200.0/22 maxlen: 22
114.69.204.0/24 maxlen: 24
114.69.208.0/21 maxlen: 21
114.69.216.0/22 maxlen: 22
180.214.96.0/19 maxlen: 19
180.214.96.0/22 maxlen: 22
202.87.128.0/19 maxlen: 19
202.87.129.0/24 maxlen: 24
202.87.135.0/24 maxlen: 24
202.87.138.0/24 maxlen: 24
202.87.140.0/22 maxlen: 22
202.87.144.0/22 maxlen: 22
202.87.151.0/24 maxlen: 24
202.87.156.0/24 maxlen: 24
202.87.159.0/24 maxlen: 24
2404:2200::/32 maxlen: 32
2404:2200:10::/48 maxlen: 48
2404:2200:17::/48 maxlen: 48
2404:2200:22::/48 maxlen: 48
2404:2200:24::/46 maxlen: 46
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9115F15/FFED27943A9311EBABDE232FC4F9AE02/q1NeEyiEvKNF969pE6sKOXdl56k.crl
rsync://rpki.apnic.net/member_repository/A9115F15/FFED27943A9311EBABDE232FC4F9AE02/q1NeEyiEvKNF969pE6sKOXdl56k.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q1NeEyiEvKNF969pE6sKOXdl56k.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 29 Nov 2024 20:43:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1597 (0x63d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9115F15/serialNumber=AB535E132884BCA345F7AF6913AB0A397765E7A9
Validity
Not Before: Feb 12 23:41:42 2024 GMT
Not After : Mar 31 00:00:00 2025 GMT
Subject: CN=65caacb6-5099
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:7b:d6:9b:68:67:d7:b3:08:8b:65:6d:ae:09:
6c:95:39:78:14:99:c5:ba:e4:e5:cb:40:26:05:fd:
df:fb:32:05:91:33:41:fb:37:3a:5b:db:9b:58:59:
a6:1d:fc:ff:40:a0:65:6c:2c:fe:64:95:54:23:5b:
e1:72:77:48:c2:ab:0a:d1:15:be:da:a5:df:b0:75:
5c:2b:7f:08:9c:69:5c:19:2a:1b:10:fb:ca:96:76:
e7:9f:18:14:04:23:27:3a:1c:00:c0:da:38:04:ea:
df:38:48:57:6f:70:6a:b3:0c:5b:8b:a6:7b:32:ed:
54:40:12:83:fb:df:7f:cd:ee:3c:c9:bc:b9:1d:81:
b8:1f:12:a2:ab:43:32:d6:f3:78:5b:59:3b:cc:16:
73:0a:b3:f4:a8:93:b2:4e:26:3d:cb:ba:64:45:f1:
26:f9:34:22:8d:a9:0b:19:3e:39:75:10:ce:4a:02:
d3:ad:6f:cf:73:06:38:fb:70:b2:b2:e6:cc:35:e9:
45:4f:43:e6:5f:a0:6c:ce:26:a7:d4:e7:f9:df:d5:
71:bb:da:1c:53:34:0f:16:be:29:c0:58:26:14:e7:
c5:25:32:d3:dc:2e:f0:0c:31:d3:c4:ae:3e:4a:cb:
1c:a0:bf:79:d0:a4:f8:91:f5:d8:28:e9:94:b5:39:
bd:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:91:54:A2:F8:43:6D:63:72:FA:2A:A4:C6:6C:D7:8D:2F:DE:9A:B9
X509v3 Authority Key Identifier:
keyid:AB:53:5E:13:28:84:BC:A3:45:F7:AF:69:13:AB:0A:39:77:65:E7:A9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9115F15/FFED27943A9311EBABDE232FC4F9AE02/q1NeEyiEvKNF969pE6sKOXdl56k.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q1NeEyiEvKNF969pE6sKOXdl56k.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9115F15/FFED27943A9311EBABDE232FC4F9AE02/1E812B043A9611EB8CD4224BC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
43.224.192.0/22
61.5.208.0/20
101.101.0.0/18
103.43.156.0/22
114.69.192.0/19
180.214.96.0/19
202.87.128.0/19
IPv6:
2404:2200::/32
Signature Algorithm: sha256WithRSAEncryption
2c:70:ab:ec:74:54:1e:1d:26:57:99:e7:8f:d6:41:e4:b2:94:
31:12:63:cd:6f:2f:f2:7b:33:52:ad:3f:88:4f:3b:fe:36:df:
df:3c:91:25:1e:0d:a9:e5:f3:19:da:c1:3e:a7:27:43:c7:dc:
fc:86:78:c9:ab:a7:10:0e:ad:da:30:6f:3e:f3:9f:80:15:ee:
b2:41:7a:5a:8d:78:f8:24:8a:1c:d3:84:8e:8e:10:6d:bf:ff:
88:14:75:cb:a3:1d:90:9b:da:7c:bc:90:b6:4d:90:8c:39:9e:
9c:b9:b7:11:39:67:4c:1d:9b:1e:61:02:ac:67:f7:64:25:e5:
be:8e:dd:09:5f:01:52:26:29:b8:5c:fe:be:9f:6c:30:ca:35:
3c:fc:13:c1:24:40:fc:2e:49:a2:b7:e6:34:2d:e8:3d:08:5c:
d8:a2:98:6a:d1:f1:8c:94:3a:f0:12:48:bf:8e:31:1e:97:15:
ce:89:f1:64:d8:b7:20:34:d2:cb:0e:91:01:3f:f7:3b:2c:0e:
58:56:ea:5d:74:65:9d:9b:40:e5:c9:70:fd:e1:f4:ed:4a:5b:
19:f2:e3:b3:8c:db:b9:1d:e4:aa:a3:e0:e3:38:d7:3d:c3:00:
03:b1:87:fc:5b:67:f2:32:cc:d2:e4:43:96:3d:f8:00:07:3e:
72:3b:2d:31
-----BEGIN CERTIFICATE-----
MIIFpDCCBIygAwIBAgICBj0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MTVGMTUxMTAvBgNVBAUTKEFCNTM1RTEzMjg4NEJDQTM0NUY3QUY2OTEzQUIwQTM5
Nzc2NUU3QTkwHhcNMjQwMjEyMjM0MTQyWhcNMjUwMzMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02NWNhYWNiNi01MDk5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA6XvWm2hn17MIi2VtrglslTl4FJnFuuTly0AmBf3f+zIFkTNB+zc6W9ubWFmm
Hfz/QKBlbCz+ZJVUI1vhcndIwqsK0RW+2qXfsHVcK38InGlcGSobEPvKlnbnnxgU
BCMnOhwAwNo4BOrfOEhXb3Bqswxbi6Z7Mu1UQBKD+99/ze48yby5HYG4HxKiq0My
1vN4W1k7zBZzCrP0qJOyTiY9y7pkRfEm+TQijakLGT45dRDOSgLTrW/PcwY4+3Cy
subMNelFT0PmX6Bszian1Of539Vxu9ocUzQPFr4pwFgmFOfFJTLT3C7wDDHTxK4+
SsscoL950KT4kfXYKOmUtTm9tQIDAQABo4ICyDCCAsQwHQYDVR0OBBYEFCORVKL4
Q21jcvoqpMZs140v3pq5MB8GA1UdIwQYMBaAFKtTXhMohLyjRfevaROrCjl3Zeep
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExNUYxNS9GRkVEMjc5NDNB
OTMxMUVCQUJERTIzMkZDNEY5QUUwMi9xMU5lRXlpRXZLTkY5NjlwRTZzS09YZGw1
NmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3ExTmVFeWlFdktORjk2OXBFNnNLT1hkbDU2ay5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
MTVGMTUvRkZFRDI3OTQzQTkzMTFFQkFCREUyMzJGQzRGOUFFMDIvMUU4MTJCMDQz
QTk2MTFFQjhDRDQyMjRCQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwUgYIKwYBBQUHAQcBAf8E
QzBBMDAEAgABMCoDBAIr4MADBAQ9BdADBAZlZQADBAJnK5wDBAVyRcADBAW01mAD
BAXKV4AwDQQCAAIwBwMFACQEIgAwDQYJKoZIhvcNAQELBQADggEBACxwq+x0VB4d
JleZ54/WQeSylDESY81vL/J7M1KtP4hPO/423988kSUeDanl8xnawT6nJ0PH3PyG
eMmrpxAOrdowbz7zn4AV7rJBelqNePgkihzThI6OEG2//4gUdcujHZCb2ny8kLZN
kIw5npy5txE5Z0wdmx5hAqxn92Ql5b6O3QlfAVImKbhc/r6fbDDKNTz8E8EkQPwu
SaK35jQt6D0IXNiimGrR8YyUOvASSL+OMR6XFc6J8WTYtyA00ssOkQE/9zssDlhW
6l10ZZ2bQOXJcP3h9O1KWxny47OM27kd5Kqj4OM41z3DAAOxh/xbZ/IyzNLkQ5Y9
+AAHPnI7LTE=
-----END CERTIFICATE-----
Generated at Sat Nov 23 00:08:34 2024 by rpki-client on console-ams.rpki-client.org