Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A911C362/6A08F492257711EFBB0B8251C4F9AE02/90C05DD633A111EF862DBF10C4F9AE02.roa
File: 90C05DD633A111EF862DBF10C4F9AE02.roa (raw, json)
Hash identifier: xnGbCBgPXY4F/fgFAEYRN9dsh6A0F9wHpHXallGErko=
Subject key identifier: 72:13:4C:9F:B9:92:1E:A2:60:7D:ED:1F:2E:15:AE:E0:72:4E:02:02
Certificate issuer: /CN=A911C362/serialNumber=EA83AF4A21CBC2071F56956E5DDD584C7638FA5B
Certificate serial: 49
Authority key identifier: EA:83:AF:4A:21:CB:C2:07:1F:56:95:6E:5D:DD:58:4C:76:38:FA:5B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6oOvSiHLwgcfVpVuXd1YTHY4-ls.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911C362/6A08F492257711EFBB0B8251C4F9AE02/90C05DD633A111EF862DBF10C4F9AE02.roa
Signing time: Fri 16 Aug 2024 05:28:19 +0000
ROA not before: Fri 16 Aug 2024 05:28:19 +0000
ROA not after: Sun 31 Aug 2025 00:00:00 +0000
asID: 132335
IP address blocks: 43.230.200.0/24 maxlen: 24
43.230.201.0/24 maxlen: 24
43.230.202.0/24 maxlen: 24
45.64.104.0/22 maxlen: 24
45.113.225.0/24 maxlen: 24
45.120.136.0/22 maxlen: 22
45.120.136.0/24 maxlen: 24
45.120.137.0/24 maxlen: 24
45.120.138.0/24 maxlen: 24
45.120.139.0/24 maxlen: 24
103.12.211.0/24 maxlen: 24
103.13.112.0/24 maxlen: 24
103.13.113.0/24 maxlen: 24
103.13.114.0/24 maxlen: 24
103.13.115.0/24 maxlen: 24
103.26.204.0/22 maxlen: 24
103.250.184.0/23 maxlen: 24
103.250.186.0/24 maxlen: 24
157.119.40.0/24 maxlen: 24
2001:df2:1000::/48 maxlen: 48
2001:df2:1001::/48 maxlen: 48
2405:7140::/48 maxlen: 48
2405:7140:1::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A911C362/6A08F492257711EFBB0B8251C4F9AE02/6oOvSiHLwgcfVpVuXd1YTHY4-ls.crl
rsync://rpki.apnic.net/member_repository/A911C362/6A08F492257711EFBB0B8251C4F9AE02/6oOvSiHLwgcfVpVuXd1YTHY4-ls.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6oOvSiHLwgcfVpVuXd1YTHY4-ls.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 24 Sep 2024 04:46:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 73 (0x49)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911C362/serialNumber=EA83AF4A21CBC2071F56956E5DDD584C7638FA5B
Validity
Not Before: Aug 16 05:28:19 2024 GMT
Not After : Aug 31 00:00:00 2025 GMT
Subject: CN=66bee372-c2dd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:31:85:cf:84:d3:06:5a:c8:34:66:e7:d7:76:
3b:48:d1:09:95:11:82:7c:e2:27:36:c3:ed:2c:50:
ef:4a:2c:dd:7d:f2:b9:55:a1:55:f5:2f:08:d1:37:
4e:e7:06:77:18:13:52:12:8a:bc:bc:b0:7f:92:06:
b8:06:f4:c3:ce:6f:47:6d:5f:3c:8a:1a:74:1e:18:
a2:07:e6:c4:48:96:b1:ce:9f:99:8e:0c:e2:c6:29:
f7:58:31:62:58:66:70:c1:ae:b8:05:af:3f:7d:bf:
b3:3b:9a:4e:62:d9:45:a7:43:70:17:21:5d:84:1b:
78:73:0b:1a:36:97:6a:9d:02:34:f1:a3:dd:8b:99:
c8:eb:4b:0c:f1:43:35:4e:9f:4f:96:c9:4b:31:13:
80:60:ee:0a:ae:94:a0:45:02:25:be:67:4a:2c:1f:
c2:bb:8f:ab:de:86:76:c8:90:f3:c8:c6:9f:f5:a2:
40:6f:94:97:26:fd:80:69:63:62:c3:98:f4:ea:2d:
86:7f:07:5e:7b:97:d2:e4:ea:ec:bf:1e:c1:07:bd:
85:14:ca:01:98:00:95:b9:4c:1c:1a:71:68:fd:92:
aa:2d:37:a6:e7:16:91:c1:0f:51:ad:dd:84:f9:dd:
0e:35:5c:94:43:f0:f4:0c:ab:cc:9b:f5:7a:b1:7d:
93:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:13:4C:9F:B9:92:1E:A2:60:7D:ED:1F:2E:15:AE:E0:72:4E:02:02
X509v3 Authority Key Identifier:
keyid:EA:83:AF:4A:21:CB:C2:07:1F:56:95:6E:5D:DD:58:4C:76:38:FA:5B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911C362/6A08F492257711EFBB0B8251C4F9AE02/6oOvSiHLwgcfVpVuXd1YTHY4-ls.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6oOvSiHLwgcfVpVuXd1YTHY4-ls.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911C362/6A08F492257711EFBB0B8251C4F9AE02/90C05DD633A111EF862DBF10C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
43.230.200.0-43.230.202.255
45.64.104.0/22
45.113.225.0/24
45.120.136.0/22
103.12.211.0/24
103.13.112.0/22
103.26.204.0/22
103.250.184.0-103.250.186.255
157.119.40.0/24
IPv6:
2001:df2:1000::/47
2405:7140::/47
Signature Algorithm: sha256WithRSAEncryption
97:56:3c:fe:fa:9e:c3:af:61:ac:e2:07:04:1f:3f:5c:2e:ba:
57:7c:f0:bd:ef:f0:ce:b7:0b:97:64:fa:5a:4e:a3:f3:04:c3:
50:8b:41:15:df:f1:e0:ab:56:55:72:1b:f9:3c:f6:8e:21:5e:
d7:6f:85:70:5e:b3:7d:4f:1c:30:db:e1:e4:f4:cc:73:a5:26:
c0:92:4e:f5:6e:b7:f7:d8:87:dd:7d:41:d6:cc:59:b3:8a:2e:
e3:2b:e5:6d:a6:fa:ca:1d:6d:0a:32:f1:36:dd:67:ef:ef:ed:
fe:c5:0b:ef:26:f3:63:6d:cd:cd:d7:fe:c7:86:2c:c7:a8:73:
46:76:ee:68:53:03:94:29:01:26:92:c7:6f:88:cd:c1:1c:6d:
c4:80:b7:5c:c9:d2:a6:b7:f9:42:23:3d:4c:d8:02:f4:ec:47:
47:5b:6d:ca:85:7d:bb:04:dd:b3:ec:7c:9c:28:0c:2e:44:27:
a7:49:c2:8f:ab:44:90:39:f8:b3:72:fc:86:9f:58:c7:82:a8:
b5:15:ec:9a:2e:1e:1a:da:2c:74:4a:d8:13:df:b1:72:78:13:
4d:a4:21:d3:5a:2a:5f:1a:0f:83:b1:6b:6b:11:fc:02:9a:09:
5f:8f:3f:f2:d7:a3:cb:99:4c:ac:c2:ee:9b:8f:2e:66:a0:5e:
a1:4d:c1:3a
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Tue Sep 17 06:07:25 2024 by rpki-client on console-fra.rpki-client.org