Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A911B5D7/25872BBE03B411E7B811AA14C4F9AE02/C177A6728D2011EF97C11D3CC4F9AE02.roa
File: C177A6728D2011EF97C11D3CC4F9AE02.roa (raw, json)
Hash identifier: qqv99MidNMOt4MehbGZ8pvkQ6h/BMUNOb2r+cG35R9s=
Subject key identifier: 43:54:53:F7:60:E1:FF:17:E1:26:9C:A0:F1:F3:2C:CB:F7:13:1C:21
Certificate issuer: /CN=A911B5D7/serialNumber=41FE1D4135AB2D67623E76083398468AD4FAA1DC
Certificate serial: 1B82
Authority key identifier: 41:FE:1D:41:35:AB:2D:67:62:3E:76:08:33:98:46:8A:D4:FA:A1:DC
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Qf4dQTWrLWdiPnYIM5hGitT6odw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911B5D7/25872BBE03B411E7B811AA14C4F9AE02/C177A6728D2011EF97C11D3CC4F9AE02.roa
Signing time: Wed 23 Oct 2024 12:50:17 +0000
ROA not before: Wed 23 Oct 2024 12:50:17 +0000
ROA not after: Wed 30 Jul 2025 00:00:00 +0000
asID: 38713
IP address blocks: 103.25.136.0/22 maxlen: 22
103.25.136.0/24 maxlen: 24
103.25.137.0/24 maxlen: 24
103.25.138.0/24 maxlen: 24
103.25.139.0/24 maxlen: 24
103.205.176.0/24 maxlen: 24
103.205.177.0/24 maxlen: 24
103.205.178.0/24 maxlen: 24
103.205.179.0/24 maxlen: 24
116.206.140.0/24 maxlen: 24
116.206.141.0/24 maxlen: 24
116.206.142.0/24 maxlen: 24
116.206.143.0/24 maxlen: 24
202.143.112.0/24 maxlen: 24
202.143.113.0/24 maxlen: 24
202.143.114.0/24 maxlen: 24
202.143.115.0/24 maxlen: 24
202.143.116.0/24 maxlen: 24
202.143.117.0/24 maxlen: 24
202.143.118.0/24 maxlen: 24
202.143.119.0/24 maxlen: 24
202.143.120.0/24 maxlen: 24
202.143.121.0/24 maxlen: 24
202.143.122.0/24 maxlen: 24
202.143.123.0/24 maxlen: 24
202.143.124.0/24 maxlen: 24
202.143.125.0/24 maxlen: 24
202.143.126.0/24 maxlen: 24
202.143.127.0/24 maxlen: 24
2406:1300::/32 maxlen: 32
2406:1300:9000::/40 maxlen: 40
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A911B5D7/25872BBE03B411E7B811AA14C4F9AE02/Qf4dQTWrLWdiPnYIM5hGitT6odw.crl
rsync://rpki.apnic.net/member_repository/A911B5D7/25872BBE03B411E7B811AA14C4F9AE02/Qf4dQTWrLWdiPnYIM5hGitT6odw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Qf4dQTWrLWdiPnYIM5hGitT6odw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 29 Nov 2024 16:17:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7042 (0x1b82)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911B5D7/serialNumber=41FE1D4135AB2D67623E76083398468AD4FAA1DC
Validity
Not Before: Oct 23 12:50:17 2024 GMT
Not After : Jul 30 00:00:00 2025 GMT
Subject: CN=6718f109-5e74
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:74:57:aa:86:80:fc:27:85:2b:d0:44:56:4f:
4d:e7:e5:6a:b1:f7:94:f7:95:23:e3:84:d0:62:73:
99:00:4f:9b:80:09:fa:02:e4:59:1a:32:a9:8f:22:
ec:55:5b:6a:48:9e:d9:27:4d:38:c5:fd:0f:19:00:
5d:b6:92:14:eb:b5:e2:1c:7f:fc:b5:8d:f8:a4:75:
71:9d:06:6e:71:7e:1d:f5:e8:54:0d:3a:f9:a5:3d:
32:dc:1d:96:95:0d:c9:03:af:b4:f5:fb:5c:7b:d2:
06:76:0d:11:17:54:0e:fd:2d:ca:29:c9:3c:89:8b:
7a:42:3f:ab:ef:dd:49:d8:5d:b4:6e:34:a2:1c:cf:
4f:a1:c7:90:97:8c:28:4b:40:2b:51:57:b5:4d:f9:
65:de:0e:be:c6:b5:72:12:e7:cc:65:d6:1c:82:1e:
40:dd:37:d0:29:4b:4e:2c:c5:dc:cd:4c:7b:dd:aa:
95:0d:a5:a9:9c:af:66:67:5c:26:31:a8:8d:a5:2f:
78:8f:a3:00:4f:c5:c8:52:4b:b1:4d:8a:02:df:8d:
b6:ed:88:89:e8:84:8b:35:a4:a1:5a:e0:ba:c4:e7:
18:de:d9:1d:75:87:45:bd:8d:07:01:30:91:a3:e5:
86:d8:60:ca:10:18:45:3f:6e:ba:c1:af:cb:1d:37:
16:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:54:53:F7:60:E1:FF:17:E1:26:9C:A0:F1:F3:2C:CB:F7:13:1C:21
X509v3 Authority Key Identifier:
keyid:41:FE:1D:41:35:AB:2D:67:62:3E:76:08:33:98:46:8A:D4:FA:A1:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911B5D7/25872BBE03B411E7B811AA14C4F9AE02/Qf4dQTWrLWdiPnYIM5hGitT6odw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Qf4dQTWrLWdiPnYIM5hGitT6odw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911B5D7/25872BBE03B411E7B811AA14C4F9AE02/C177A6728D2011EF97C11D3CC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.25.136.0/22
103.205.176.0/22
116.206.140.0/22
202.143.112.0/20
IPv6:
2406:1300::/32
Signature Algorithm: sha256WithRSAEncryption
92:29:46:ee:27:80:b7:1c:31:65:64:17:29:bd:98:5c:36:bf:
20:37:ca:b3:0c:9c:6e:cd:9d:04:05:b2:5e:43:6f:6a:4f:55:
30:37:49:77:11:f4:85:71:5a:25:84:aa:dd:b0:a6:7d:7d:72:
fa:7d:84:c3:53:c4:2c:1b:77:ec:c0:a0:3d:2d:eb:20:93:92:
c3:15:3b:7d:93:ad:0a:17:bf:32:65:b5:54:76:5f:a7:1c:90:
89:25:b4:f5:13:60:64:b9:80:13:96:ba:8f:92:d0:a1:e2:8c:
7a:cc:d7:64:7e:5b:a3:16:5c:dd:85:0d:62:24:6e:b2:85:a9:
6a:28:ad:0c:f8:89:31:ba:ce:21:e1:4a:b1:67:35:4a:ed:6c:
e2:0a:48:c5:13:b1:a6:46:07:9d:e3:e2:27:e5:0e:64:5b:90:
42:5a:5f:92:f3:f9:e5:3b:4b:23:db:64:2c:1c:2e:57:11:a3:
56:f2:4b:5c:5a:78:4f:83:53:9a:40:93:74:2c:9f:58:0c:42:
55:45:ab:f7:d0:ac:79:61:64:8e:7d:1a:f1:4e:ff:c3:11:ab:
3a:58:98:74:72:7e:1d:6d:57:2c:94:90:3e:d9:f9:6e:f5:57:
6d:e7:ae:1c:84:43:03:80:88:30:fc:65:7f:12:11:f5:e6:9b:
09:71:41:b0
-----BEGIN CERTIFICATE-----
MIIFkjCCBHqgAwIBAgICG4IwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MUI1RDcxMTAvBgNVBAUTKDQxRkUxRDQxMzVBQjJENjc2MjNFNzYwODMzOTg0NjhB
RDRGQUExREMwHhcNMjQxMDIzMTI1MDE3WhcNMjUwNzMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02NzE4ZjEwOS01ZTc0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA0HRXqoaA/CeFK9BEVk9N5+VqsfeU95Uj44TQYnOZAE+bgAn6AuRZGjKpjyLs
VVtqSJ7ZJ004xf0PGQBdtpIU67XiHH/8tY34pHVxnQZucX4d9ehUDTr5pT0y3B2W
lQ3JA6+09ftce9IGdg0RF1QO/S3KKck8iYt6Qj+r791J2F20bjSiHM9PoceQl4wo
S0ArUVe1Tfll3g6+xrVyEufMZdYcgh5A3TfQKUtOLMXczUx73aqVDaWpnK9mZ1wm
MaiNpS94j6MAT8XIUkuxTYoC34227YiJ6ISLNaShWuC6xOcY3tkddYdFvY0HATCR
o+WG2GDKEBhFP266wa/LHTcW7QIDAQABo4ICtjCCArIwHQYDVR0OBBYEFENUU/dg
4f8X4SacoPHzLMv3ExwhMB8GA1UdIwQYMBaAFEH+HUE1qy1nYj52CDOYRorU+qHc
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQjVENy8yNTg3MkJCRTAz
QjQxMUU3QjgxMUFBMTRDNEY5QUUwMi9RZjRkUVRXckxXZGlQbllJTTVoR2l0VDZv
ZHcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1FmNGRRVFdyTFdkaVBuWUlNNWhHaXRUNm9kdy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
MUI1RDcvMjU4NzJCQkUwM0I0MTFFN0I4MTFBQTE0QzRGOUFFMDIvQzE3N0E2NzI4
RDIwMTFFRjk3QzExRDNDQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwQAYIKwYBBQUHAQcBAf8E
MTAvMB4EAgABMBgDBAJnGYgDBAJnzbADBAJ0zowDBATKj3AwDQQCAAIwBwMFACQG
EwAwDQYJKoZIhvcNAQELBQADggEBAJIpRu4ngLccMWVkFym9mFw2vyA3yrMMnG7N
nQQFsl5Db2pPVTA3SXcR9IVxWiWEqt2wpn19cvp9hMNTxCwbd+zAoD0t6yCTksMV
O32TrQoXvzJltVR2X6cckIkltPUTYGS5gBOWuo+S0KHijHrM12R+W6MWXN2FDWIk
brKFqWoorQz4iTG6ziHhSrFnNUrtbOIKSMUTsaZGB53j4iflDmRbkEJaX5Lz+eU7
SyPbZCwcLlcRo1byS1xaeE+DU5pAk3Qsn1gMQlVFq/fQrHlhZI59GvFO/8MRqzpY
mHRyfh1tVyyUkD7Z+W71V23nrhyEQwOAiDD8ZX8SEfXmmwlxQbA=
-----END CERTIFICATE-----
Generated at Fri Nov 22 17:55:37 2024 by rpki-client on console-fra.rpki-client.org