Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A911FDBA/077851A41D9D11E2987CEE8B08B02CD2/CD692AAEF65311EAA7E5A684C4F9AE02.roa
File: CD692AAEF65311EAA7E5A684C4F9AE02.roa (raw, json)
Hash identifier: Oc/bMSswVfr/wYFlUVP/9t9KMCo/4mSIiUmjz3/ulyw=
Subject key identifier: 9E:DB:D8:E0:28:CC:E9:9B:35:86:21:E5:45:C9:25:4D:6E:2C:18:4C
Certificate issuer: /CN=A911FDBA/serialNumber=FEF9143B1616CDA1159B59ECD5E3993E982654FE
Certificate serial: 33AF
Authority key identifier: FE:F9:14:3B:16:16:CD:A1:15:9B:59:EC:D5:E3:99:3E:98:26:54:FE
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_vkUOxYWzaEVm1ns1eOZPpgmVP4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911FDBA/077851A41D9D11E2987CEE8B08B02CD2/CD692AAEF65311EAA7E5A684C4F9AE02.roa
Signing time: Fri 29 Sep 2023 03:56:25 +0000
ROA not before: Fri 29 Sep 2023 03:56:25 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 45671
IP address blocks: 27.50.64.0/19 maxlen: 24
27.111.80.0/24 maxlen: 24
27.111.85.0/24 maxlen: 24
27.111.87.0/24 maxlen: 24
27.111.90.0/23 maxlen: 24
43.242.68.0/22 maxlen: 24
43.250.204.0/22 maxlen: 24
45.65.12.0/24 maxlen: 24
103.2.196.0/22 maxlen: 24
103.11.52.0/22 maxlen: 24
103.12.8.0/23 maxlen: 24
103.12.10.0/24 maxlen: 24
103.13.100.0/22 maxlen: 24
103.13.186.0/23 maxlen: 24
103.24.14.0/24 maxlen: 24
103.227.28.0/23 maxlen: 24
103.227.30.0/23 maxlen: 24
103.235.52.0/22 maxlen: 24
103.248.189.0/24 maxlen: 24
103.248.190.0/24 maxlen: 24
103.248.191.0/24 maxlen: 24
103.255.249.0/24 maxlen: 24
114.141.192.0/24 maxlen: 24
114.141.193.0/24 maxlen: 24
114.141.194.0/24 maxlen: 24
114.141.195.0/24 maxlen: 24
114.141.196.0/22 maxlen: 24
114.141.200.0/22 maxlen: 24
117.20.0.0/20 maxlen: 24
117.120.8.0/21 maxlen: 24
118.127.0.0/18 maxlen: 24
163.53.232.0/22 maxlen: 24
180.92.192.0/21 maxlen: 24
202.60.64.0/20 maxlen: 24
202.60.80.0/20 maxlen: 24
202.125.32.0/20 maxlen: 20
202.130.32.0/22 maxlen: 24
202.131.88.0/24 maxlen: 24
202.131.89.0/24 maxlen: 24
202.131.90.0/24 maxlen: 24
202.131.91.0/24 maxlen: 24
202.131.92.0/24 maxlen: 24
202.131.93.0/24 maxlen: 24
202.131.94.0/24 maxlen: 24
203.26.196.0/22 maxlen: 24
203.28.51.0/24 maxlen: 24
221.121.128.0/19 maxlen: 24
223.252.0.0/18 maxlen: 24
223.252.96.0/20 maxlen: 24
2400:8100::/32 maxlen: 32
2400:8100:6afc::/48 maxlen: 48
2400:d400:1::/48 maxlen: 48
2400:d400:2::/48 maxlen: 48
2400:d400:6::/48 maxlen: 48
2400:d400:18::/48 maxlen: 48
2400:d400:b97::/48 maxlen: 48
2400:d400:d51::/48 maxlen: 48
2400:d400:1008::/48 maxlen: 48
2400:d400:1337::/48 maxlen: 48
2400:d400:5648::/48 maxlen: 48
2400:d400:9897::/48 maxlen: 48
2400:d400:9898::/48 maxlen: 48
2400:d400:b00b::/48 maxlen: 48
2400:d400:ffff::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A911FDBA/077851A41D9D11E2987CEE8B08B02CD2/_vkUOxYWzaEVm1ns1eOZPpgmVP4.crl
rsync://rpki.apnic.net/member_repository/A911FDBA/077851A41D9D11E2987CEE8B08B02CD2/_vkUOxYWzaEVm1ns1eOZPpgmVP4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_vkUOxYWzaEVm1ns1eOZPpgmVP4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 May 2024 15:10:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13231 (0x33af)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911FDBA/serialNumber=FEF9143B1616CDA1159B59ECD5E3993E982654FE
Validity
Not Before: Sep 29 03:56:25 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=65164ae9-a20b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:38:84:68:a5:8b:15:e8:38:cc:36:3f:d1:a5:
67:3a:29:24:c3:25:27:c0:33:72:e5:ad:b1:e6:73:
36:54:dd:62:39:b9:34:00:8e:9e:7a:89:56:92:e2:
6f:8f:32:e4:f4:1d:2d:f8:f9:06:82:83:ad:ba:e4:
f7:f4:43:40:1c:24:35:e5:0c:1b:8d:ed:58:c6:f6:
85:2f:80:3a:80:e6:9a:1f:ab:86:52:4b:0d:58:dd:
09:cc:9d:4f:1e:c5:e8:d5:6d:dd:3f:51:53:d5:12:
36:5f:95:23:94:ae:ce:0f:a9:4a:52:28:e1:12:46:
1a:ff:9d:ec:f2:ff:16:36:91:fd:ef:75:f0:89:53:
84:55:0f:45:b4:d7:0a:81:90:7e:4a:9c:87:56:56:
4a:7d:35:94:70:e5:c7:73:3a:51:3d:91:25:04:d8:
0a:95:ab:de:e0:ff:7f:b6:71:70:ec:b0:de:f0:69:
b1:6e:e2:5d:2b:8d:c6:0e:34:3d:ec:00:17:a5:24:
d7:06:fd:65:0e:65:4e:a0:4b:34:4f:84:a3:28:01:
0c:ae:c1:0c:97:42:35:e8:5c:8e:84:fa:28:84:1a:
d3:2e:df:7c:d9:1c:9f:d0:c2:47:24:49:15:cb:0f:
53:5a:85:4c:cd:34:44:41:87:41:a6:f4:5d:5f:b2:
42:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:DB:D8:E0:28:CC:E9:9B:35:86:21:E5:45:C9:25:4D:6E:2C:18:4C
X509v3 Authority Key Identifier:
keyid:FE:F9:14:3B:16:16:CD:A1:15:9B:59:EC:D5:E3:99:3E:98:26:54:FE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911FDBA/077851A41D9D11E2987CEE8B08B02CD2/_vkUOxYWzaEVm1ns1eOZPpgmVP4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_vkUOxYWzaEVm1ns1eOZPpgmVP4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911FDBA/077851A41D9D11E2987CEE8B08B02CD2/CD692AAEF65311EAA7E5A684C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
27.50.64.0/19
27.111.80.0/24
27.111.85.0/24
27.111.87.0/24
27.111.90.0/23
43.242.68.0/22
43.250.204.0/22
45.65.12.0/24
103.2.196.0/22
103.11.52.0/22
103.12.8.0-103.12.10.255
103.13.100.0/22
103.13.186.0/23
103.24.14.0/24
103.227.28.0/22
103.235.52.0/22
103.248.189.0-103.248.191.255
103.255.249.0/24
114.141.192.0-114.141.203.255
117.20.0.0/20
117.120.8.0/21
118.127.0.0/18
163.53.232.0/22
180.92.192.0/21
202.60.64.0/19
202.125.32.0/20
202.130.32.0/22
202.131.88.0-202.131.94.255
203.26.196.0/22
203.28.51.0/24
221.121.128.0/19
223.252.0.0/18
223.252.96.0/20
IPv6:
2400:8100::/32
2400:d400:1::-2400:d400:2:ffff:ffff:ffff:ffff:ffff
2400:d400:6::/48
2400:d400:18::/48
2400:d400:b97::/48
2400:d400:d51::/48
2400:d400:1008::/48
2400:d400:1337::/48
2400:d400:5648::/48
2400:d400:9897::-2400:d400:9898:ffff:ffff:ffff:ffff:ffff
2400:d400:b00b::/48
2400:d400:ffff::/48
Signature Algorithm: sha256WithRSAEncryption
9d:f1:ce:ba:9f:a4:3d:ff:a7:da:c8:6c:18:ee:eb:c9:ea:70:
31:1d:fc:2e:12:f1:24:fa:a0:d5:05:28:7a:7f:01:d0:d6:47:
0c:a3:0c:ac:60:78:0b:0b:74:30:af:18:04:bc:ec:a6:9b:09:
29:32:87:20:1e:45:34:58:ef:3b:7f:61:5b:ef:7a:1b:ff:1e:
61:6e:8e:79:9d:7d:5f:59:94:06:ee:8a:35:e1:3b:f8:fe:62:
17:19:6b:14:ac:76:a1:a6:a0:b5:dc:b6:54:0b:5e:d3:e8:28:
4b:05:52:b3:a4:66:5c:6d:60:fd:e8:30:9f:92:7a:c0:54:26:
e9:38:c3:c0:0b:4a:07:9c:f8:2e:63:ef:fb:fd:c2:d3:e6:a3:
d3:e0:5e:d6:34:0a:e7:98:99:9c:9c:3a:37:76:6d:f5:ff:69:
60:4c:d3:ad:72:c5:55:0d:f2:b0:74:87:ef:b2:3c:50:33:64:
d9:5c:2c:07:1f:0e:d3:05:7f:cf:e7:d8:1a:94:f2:7e:ce:dd:
0c:62:1f:d4:5c:c9:e4:44:88:7f:26:f9:52:47:73:05:96:52:
eb:fe:3a:fc:4d:63:f7:56:ab:de:73:f2:8d:b4:26:3e:86:51:
b3:02:72:a4:84:2e:a7:04:b6:d4:26:bb:cc:15:5c:a9:c1:eb:
4f:af:9d:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 24 16:35:44 2024 by rpki-client on console-fra.rpki-client.org