Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A911ABF4/EA87185C721B11E9BB748150C4F9AE02/9A6F15D6624311EFA06D813FC4F9AE02.roa
File: 9A6F15D6624311EFA06D813FC4F9AE02.roa (raw, json)
Hash identifier: cvyJpDKtEjYd0NNvfJQS1R5prVmYd7uPbRa+BmYqEmQ=
Subject key identifier: E7:FD:3F:71:34:5B:CF:61:70:D3:C7:27:B9:22:B6:19:FA:8B:03:C9
Certificate issuer: /CN=A911ABF4/serialNumber=693C8B4CBA26B06D2CFABA0F9BE4D37DF0DDFF3D
Certificate serial: 02
Authority key identifier: 69:3C:8B:4C:BA:26:B0:6D:2C:FA:BA:0F:9B:E4:D3:7D:F0:DD:FF:3D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aTyLTLomsG0s-roPm-TTffDd_z0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911ABF4/EA87185C721B11E9BB748150C4F9AE02/9A6F15D6624311EFA06D813FC4F9AE02.roa
Signing time: Sat 24 Aug 2024 18:06:36 +0000
ROA not before: Sat 24 Aug 2024 18:06:36 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 137542
IP address blocks: 103.112.128.0/22 maxlen: 22
103.112.128.0/24 maxlen: 24
103.112.129.0/24 maxlen: 24
103.112.130.0/24 maxlen: 24
103.112.131.0/24 maxlen: 24
2402:a940::/32 maxlen: 32
2402:a940::/36 maxlen: 36
2402:a940:1000::/36 maxlen: 36
2402:a940:2000::/36 maxlen: 36
2402:a940:3000::/36 maxlen: 36
2402:a940:4000::/36 maxlen: 36
2402:a940:5000::/36 maxlen: 36
2402:a940:6000::/36 maxlen: 36
2402:a940:7000::/36 maxlen: 36
2402:a940:8000::/36 maxlen: 36
2402:a940:9000::/36 maxlen: 36
2402:a940:a000::/36 maxlen: 36
2402:a940:b000::/36 maxlen: 36
2402:a940:c000::/36 maxlen: 36
2402:a940:d000::/36 maxlen: 36
2402:a940:e000::/36 maxlen: 36
2402:a940:f000::/36 maxlen: 36
2402:a940:f000::/48 maxlen: 48
2402:a940:f001::/48 maxlen: 48
2402:a940:f002::/48 maxlen: 48
2402:a940:f003::/48 maxlen: 48
2402:a940:f004::/48 maxlen: 48
2402:a940:f005::/48 maxlen: 48
2402:a940:f006::/48 maxlen: 48
2402:a940:f007::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A911ABF4/EA87185C721B11E9BB748150C4F9AE02/aTyLTLomsG0s-roPm-TTffDd_z0.crl
rsync://rpki.apnic.net/member_repository/A911ABF4/EA87185C721B11E9BB748150C4F9AE02/aTyLTLomsG0s-roPm-TTffDd_z0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aTyLTLomsG0s-roPm-TTffDd_z0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 03 Dec 2024 17:38:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2 (0x2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911ABF4/serialNumber=693C8B4CBA26B06D2CFABA0F9BE4D37DF0DDFF3D
Validity
Not Before: Aug 24 18:06:36 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=66ca212c-7729
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:c6:9d:70:ec:87:65:a1:4b:55:e4:29:87:6d:
39:23:11:f5:29:5e:d7:2b:2e:54:97:2e:f2:db:94:
cc:f8:b7:33:04:1f:46:ee:58:10:23:f1:8d:ea:ef:
61:e1:e2:76:f1:f9:82:cc:6d:ae:48:6f:9f:e6:04:
39:84:6e:c9:17:98:e2:19:60:78:1a:48:da:e9:bb:
a7:02:f2:3c:24:8d:71:a1:ff:6a:b9:23:17:d2:6c:
17:10:84:16:8a:4a:08:6f:ee:72:ea:01:7f:f5:4d:
87:56:ea:03:74:c3:24:c9:5f:b5:39:c2:ac:d9:2c:
1b:7e:bc:ea:7b:3f:23:14:d1:3d:06:1f:ff:a4:c4:
51:11:c8:64:79:49:ed:19:18:8b:3d:0d:c4:50:8c:
c0:e1:00:53:7e:b4:80:94:7e:69:f4:6f:2e:c2:d5:
cc:2e:26:89:bd:7c:e8:44:04:ac:95:cd:b8:8d:86:
f9:17:04:f6:8c:9b:f4:93:3f:90:22:19:8d:c9:02:
f5:87:36:29:7d:a0:1f:ca:40:ad:79:a3:f2:eb:79:
c4:72:36:10:ea:76:a1:37:51:a4:bf:f8:fe:99:33:
3f:10:c8:96:3f:c1:7f:9d:10:a3:bb:83:e2:b0:88:
83:1f:60:65:f9:ed:69:86:26:13:9e:70:1b:c4:4e:
13:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:FD:3F:71:34:5B:CF:61:70:D3:C7:27:B9:22:B6:19:FA:8B:03:C9
X509v3 Authority Key Identifier:
keyid:69:3C:8B:4C:BA:26:B0:6D:2C:FA:BA:0F:9B:E4:D3:7D:F0:DD:FF:3D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911ABF4/EA87185C721B11E9BB748150C4F9AE02/aTyLTLomsG0s-roPm-TTffDd_z0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aTyLTLomsG0s-roPm-TTffDd_z0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911ABF4/EA87185C721B11E9BB748150C4F9AE02/9A6F15D6624311EFA06D813FC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.112.128.0/22
IPv6:
2402:a940::/32
Signature Algorithm: sha256WithRSAEncryption
4d:40:0b:85:f8:e7:b1:a0:5a:f3:6b:87:6c:bc:b4:ad:27:e9:
58:fb:30:0d:e8:60:bb:f8:77:24:bf:0e:21:1b:17:fe:5d:7d:
0f:9e:50:49:43:ad:39:06:8f:e4:50:39:f2:14:e3:60:04:d2:
06:4b:c4:80:8e:a3:a9:f4:77:46:b2:fd:c5:50:61:54:94:5c:
13:fc:01:f3:f6:29:32:90:c5:22:df:b3:d9:98:44:ef:ba:96:
e1:1b:f6:84:7b:37:3e:2b:84:a1:e3:b7:fa:76:d4:83:53:bd:
72:7c:de:12:ee:6b:7c:b6:fc:e6:0c:eb:a1:c8:15:58:b5:7f:
16:32:1d:de:ca:ea:f5:20:f5:45:c4:96:b1:25:78:f5:6c:88:
ce:94:b7:c8:81:ea:9f:db:72:da:4f:0a:02:33:7c:07:fa:0f:
60:71:fc:55:a6:4a:5e:d2:d9:fd:e4:4e:fe:56:85:85:03:ee:
cc:a5:85:1f:63:21:a0:76:cb:73:74:a3:f5:d5:d0:f8:f0:b8:
b7:45:79:cc:26:5a:e0:ae:68:56:bb:36:77:ba:5a:b3:e8:79:
c6:48:43:ca:35:9b:e3:17:68:58:a2:aa:ed:11:b8:fb:17:b1:
df:94:2f:3f:af:1b:34:33:bc:f5:9b:67:92:26:b2:b4:78:4d:
c3:23:fd:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 26 19:07:06 2024 by rpki-client on console-fra.rpki-client.org