Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9117394/4F59186A1D6F11E29B5446B108B02CD2/B8523F4AF31811EAB2A96159C4F9AE02.roa
File: B8523F4AF31811EAB2A96159C4F9AE02.roa (raw, json)
Hash identifier: 0duADiCduE39GDHGBV1uwGu/0tuX8LMEfGoe4r5RkJw=
Subject key identifier: EC:19:0D:C9:E1:2B:B4:C2:D5:D4:17:57:E4:73:96:A1:07:CE:DB:AC
Certificate issuer: /CN=A9117394/serialNumber=AAFAAE3C5703B39337FD3D7A9666C58CB8C3B509
Certificate serial: 3406
Authority key identifier: AA:FA:AE:3C:57:03:B3:93:37:FD:3D:7A:96:66:C5:8C:B8:C3:B5:09
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qvquPFcDs5M3_T16lmbFjLjDtQk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9117394/4F59186A1D6F11E29B5446B108B02CD2/B8523F4AF31811EAB2A96159C4F9AE02.roa
Signing time: Tue 12 Dec 2023 14:20:09 +0000
ROA not before: Tue 12 Dec 2023 14:20:09 +0000
ROA not after: Fri 31 Jan 2025 00:00:00 +0000
asID: 37997
IP address blocks: 103.224.196.0/22 maxlen: 22
103.224.196.0/24 maxlen: 24
103.224.197.0/24 maxlen: 24
103.224.198.0/24 maxlen: 24
103.224.199.0/24 maxlen: 24
124.195.128.0/20 maxlen: 20
124.195.128.0/22 maxlen: 22
124.195.128.0/24 maxlen: 24
124.195.129.0/24 maxlen: 24
124.195.130.0/24 maxlen: 24
124.195.131.0/24 maxlen: 24
124.195.132.0/22 maxlen: 22
124.195.132.0/24 maxlen: 24
124.195.133.0/24 maxlen: 24
124.195.134.0/24 maxlen: 24
124.195.135.0/24 maxlen: 24
124.195.136.0/22 maxlen: 22
124.195.136.0/24 maxlen: 24
124.195.137.0/24 maxlen: 24
124.195.138.0/24 maxlen: 24
124.195.139.0/24 maxlen: 24
124.195.140.0/22 maxlen: 22
124.195.140.0/24 maxlen: 24
124.195.141.0/24 maxlen: 24
124.195.142.0/24 maxlen: 24
124.195.143.0/24 maxlen: 24
203.158.24.0/21 maxlen: 21
203.158.24.0/24 maxlen: 24
203.158.25.0/24 maxlen: 24
203.158.28.0/24 maxlen: 24
203.158.29.0/24 maxlen: 24
203.158.30.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9117394/4F59186A1D6F11E29B5446B108B02CD2/qvquPFcDs5M3_T16lmbFjLjDtQk.crl
rsync://rpki.apnic.net/member_repository/A9117394/4F59186A1D6F11E29B5446B108B02CD2/qvquPFcDs5M3_T16lmbFjLjDtQk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qvquPFcDs5M3_T16lmbFjLjDtQk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 23 May 2024 14:19:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13318 (0x3406)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9117394/serialNumber=AAFAAE3C5703B39337FD3D7A9666C58CB8C3B509
Validity
Not Before: Dec 12 14:20:09 2023 GMT
Not After : Jan 31 00:00:00 2025 GMT
Subject: CN=65786c19-9e4b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:fd:ed:88:dd:f7:fa:ee:06:2b:39:72:e3:db:
59:94:c9:f3:6f:37:3b:53:74:6a:e5:ba:3d:cd:fc:
1f:36:31:09:7e:cc:89:8f:a8:91:3f:45:b7:e4:a4:
6d:fc:54:c9:ad:d5:9d:b0:9a:60:9a:65:17:01:d3:
41:61:ce:d2:f8:83:96:38:d4:22:00:08:e7:ce:82:
59:61:72:71:90:dd:68:60:08:c3:b8:c6:20:38:75:
1b:e2:03:7d:1f:ba:81:30:a4:ff:85:1d:3b:bc:75:
41:d3:84:c7:52:12:b9:0c:0b:f2:0c:23:77:be:f1:
71:d7:9c:e9:d7:de:53:8a:7d:4d:da:25:26:b0:d8:
e4:20:cd:93:af:08:af:3d:0a:14:6f:cc:fa:30:61:
e4:71:1e:54:bb:ce:a0:a7:70:31:51:b7:a9:39:56:
4f:98:2d:10:eb:45:22:42:4f:f8:07:6f:fe:fc:3e:
62:26:5b:24:cc:f3:4e:ca:73:1a:3c:1f:a9:e1:16:
73:b5:0e:c5:4b:74:0f:c5:57:2b:1d:ec:f4:4b:db:
2d:00:be:bf:55:10:d6:66:52:0a:3d:18:c9:30:95:
34:c2:8d:5b:22:72:13:45:e2:50:9d:5e:cd:65:22:
a4:9e:87:7f:7e:ca:2e:5b:d9:2c:61:ed:a7:d8:88:
0e:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:19:0D:C9:E1:2B:B4:C2:D5:D4:17:57:E4:73:96:A1:07:CE:DB:AC
X509v3 Authority Key Identifier:
keyid:AA:FA:AE:3C:57:03:B3:93:37:FD:3D:7A:96:66:C5:8C:B8:C3:B5:09
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9117394/4F59186A1D6F11E29B5446B108B02CD2/qvquPFcDs5M3_T16lmbFjLjDtQk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qvquPFcDs5M3_T16lmbFjLjDtQk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9117394/4F59186A1D6F11E29B5446B108B02CD2/B8523F4AF31811EAB2A96159C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.224.196.0/22
124.195.128.0/20
203.158.24.0/21
Signature Algorithm: sha256WithRSAEncryption
87:01:bc:31:59:d2:8f:0d:c5:8e:05:ab:9b:c3:d7:9e:9c:f6:
d8:2d:a4:fd:36:11:23:50:de:fb:57:7f:78:c1:0d:4b:d4:72:
2f:d3:63:e3:a8:53:48:44:f2:5d:6b:e5:cd:a4:df:99:d4:fb:
14:b9:cd:46:c4:32:d7:fc:b6:ed:27:52:f8:1a:fa:dc:bd:10:
e7:f9:e6:69:3e:10:41:2b:d9:df:93:3c:c4:ce:b7:d4:ea:34:
55:65:e7:db:bd:30:4d:da:71:a1:97:e0:c8:7d:ff:42:13:4b:
00:ca:60:41:f6:20:c3:66:ee:97:52:bf:72:08:1f:47:e1:b1:
ff:52:95:f3:d2:5b:e8:52:20:bc:45:6f:82:e8:c1:36:2e:3b:
09:78:8f:0f:f9:fc:cd:66:d9:21:e6:24:04:1c:13:8b:d2:02:
1e:c1:da:14:e3:ea:45:55:24:f1:a2:4f:98:7c:80:f3:f9:51:
3e:2e:5e:10:01:fa:e3:ed:21:93:c8:31:83:5c:b8:1e:fd:e3:
eb:5f:c4:cc:7e:95:c4:7f:90:ce:81:fe:e4:20:a5:e1:4b:6d:
eb:d9:30:09:1c:50:0e:84:4d:40:d6:71:0c:ff:c1:88:f3:fd:
f9:eb:e2:da:9d:86:49:f1:90:ce:0b:32:5a:99:23:7b:d0:0c:
ef:85:72:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 16 15:21:27 2024 by rpki-client on console-ams.rpki-client.org