Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9123072/0CEA495C0B5C11EB99A17562C4F9AE02/BEC701BAD18A11ECBBB3B038C4F9AE02.roa
File: BEC701BAD18A11ECBBB3B038C4F9AE02.roa (raw, json)
Hash identifier: ymyp7DEqmpICRtSo5Bb3pk6P5H2XS++eoOBMA7Ohlto=
Subject key identifier: DC:31:D6:7E:7F:5D:F5:FD:6D:5E:5F:57:89:9C:BC:A2:84:40:CD:F4
Certificate issuer: /CN=A9123072/serialNumber=E3BCBA88BEDC2A768A9865F416D68A7C3033F469
Certificate serial: 0691
Authority key identifier: E3:BC:BA:88:BE:DC:2A:76:8A:98:65:F4:16:D6:8A:7C:30:33:F4:69
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/47y6iL7cKnaKmGX0FtaKfDAz9Gk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9123072/0CEA495C0B5C11EB99A17562C4F9AE02/BEC701BAD18A11ECBBB3B038C4F9AE02.roa
Signing time: Thu 30 Nov 2023 23:10:53 +0000
ROA not before: Thu 30 Nov 2023 23:10:53 +0000
ROA not after: Fri 31 Jan 2025 00:00:00 +0000
asID: 55720
IP address blocks: 45.116.164.0/24 maxlen: 24
45.116.165.0/24 maxlen: 24
45.116.166.0/24 maxlen: 24
45.116.167.0/24 maxlen: 24
59.153.148.0/24 maxlen: 24
59.153.149.0/24 maxlen: 24
59.153.150.0/24 maxlen: 24
59.153.151.0/24 maxlen: 24
61.4.112.0/24 maxlen: 24
61.4.113.0/24 maxlen: 24
61.4.114.0/24 maxlen: 24
61.4.115.0/24 maxlen: 24
61.4.116.0/24 maxlen: 24
61.4.117.0/24 maxlen: 24
61.4.118.0/24 maxlen: 24
61.4.119.0/24 maxlen: 24
61.4.120.0/24 maxlen: 24
61.4.121.0/24 maxlen: 24
61.4.122.0/24 maxlen: 24
61.4.123.0/24 maxlen: 24
61.4.124.0/24 maxlen: 24
61.4.125.0/24 maxlen: 24
61.4.126.0/24 maxlen: 24
61.4.127.0/24 maxlen: 24
103.198.192.0/24 maxlen: 24
103.198.193.0/24 maxlen: 24
103.198.194.0/24 maxlen: 24
103.198.195.0/24 maxlen: 24
103.229.64.0/24 maxlen: 24
103.229.65.0/24 maxlen: 24
103.229.66.0/24 maxlen: 24
103.229.67.0/24 maxlen: 24
103.229.224.0/24 maxlen: 24
103.229.225.0/24 maxlen: 24
103.229.226.0/24 maxlen: 24
103.229.227.0/24 maxlen: 24
103.230.144.0/24 maxlen: 24
103.230.145.0/24 maxlen: 24
103.230.146.0/24 maxlen: 24
103.230.147.0/24 maxlen: 24
103.232.136.0/24 maxlen: 24
103.232.137.0/24 maxlen: 24
103.232.138.0/24 maxlen: 24
103.232.139.0/24 maxlen: 24
114.29.252.0/24 maxlen: 24
114.29.253.0/24 maxlen: 24
114.29.254.0/24 maxlen: 24
114.29.255.0/24 maxlen: 24
118.107.248.0/24 maxlen: 24
118.107.249.0/24 maxlen: 24
118.107.250.0/24 maxlen: 24
118.107.251.0/24 maxlen: 24
185.189.160.0/24 maxlen: 24
185.189.161.0/24 maxlen: 24
185.189.162.0/24 maxlen: 24
185.189.163.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9123072/0CEA495C0B5C11EB99A17562C4F9AE02/47y6iL7cKnaKmGX0FtaKfDAz9Gk.crl
rsync://rpki.apnic.net/member_repository/A9123072/0CEA495C0B5C11EB99A17562C4F9AE02/47y6iL7cKnaKmGX0FtaKfDAz9Gk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/47y6iL7cKnaKmGX0FtaKfDAz9Gk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 May 2024 21:46:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1681 (0x691)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9123072/serialNumber=E3BCBA88BEDC2A768A9865F416D68A7C3033F469
Validity
Not Before: Nov 30 23:10:53 2023 GMT
Not After : Jan 31 00:00:00 2025 GMT
Subject: CN=6569167d-8158
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:1e:86:c1:63:66:0d:ae:4b:18:4f:2b:5b:d3:
ca:9b:76:39:57:46:f4:11:a2:b1:d2:e9:c9:94:ca:
1a:58:f8:b8:20:2b:46:8b:a8:e8:83:8d:17:c5:08:
6c:da:8b:65:63:50:00:c3:d2:02:03:6e:d6:5b:1f:
cf:05:c8:e9:30:4b:2c:5c:01:d8:3c:cc:43:cd:63:
0c:2e:fe:be:a0:35:66:f8:01:17:39:00:d7:d1:a0:
ca:df:e1:f0:21:f4:14:18:60:b0:62:95:71:1c:ad:
3c:43:19:3f:78:45:f4:69:de:93:c4:13:2d:46:f9:
4d:08:11:8f:2a:65:da:3b:48:54:69:8b:1f:9f:6a:
cd:2b:9b:9b:26:86:07:b7:2b:4b:22:82:b6:e8:ed:
07:71:fd:a0:cb:77:a1:a8:8c:00:0d:34:17:1d:35:
36:41:e0:d6:f5:c6:c0:b6:47:78:5c:d0:27:49:f2:
08:65:62:52:1c:85:f2:ed:c6:c8:4c:a3:f7:e4:4c:
f2:22:19:5d:e8:e1:74:e8:00:db:be:2c:55:d9:b1:
db:98:b0:f0:19:a3:7e:82:1f:9f:32:b5:e2:6e:5f:
87:ba:a8:49:f2:d6:3b:96:e1:93:1e:28:aa:d6:7f:
0d:d4:b7:be:b9:41:86:1b:89:33:ae:5f:56:0e:c6:
3d:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:31:D6:7E:7F:5D:F5:FD:6D:5E:5F:57:89:9C:BC:A2:84:40:CD:F4
X509v3 Authority Key Identifier:
keyid:E3:BC:BA:88:BE:DC:2A:76:8A:98:65:F4:16:D6:8A:7C:30:33:F4:69
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9123072/0CEA495C0B5C11EB99A17562C4F9AE02/47y6iL7cKnaKmGX0FtaKfDAz9Gk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/47y6iL7cKnaKmGX0FtaKfDAz9Gk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9123072/0CEA495C0B5C11EB99A17562C4F9AE02/BEC701BAD18A11ECBBB3B038C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.116.164.0/22
59.153.148.0/22
61.4.112.0/20
103.198.192.0/22
103.229.64.0/22
103.229.224.0/22
103.230.144.0/22
103.232.136.0/22
114.29.252.0/22
118.107.248.0/22
185.189.160.0/22
Signature Algorithm: sha256WithRSAEncryption
a1:21:f5:64:4b:c9:b2:2f:2b:11:dc:21:88:d7:ea:a2:39:68:
32:af:72:54:a6:43:42:20:a0:7e:b3:aa:f8:6f:30:02:7a:31:
67:29:21:25:0c:f7:95:eb:32:b8:03:87:7a:54:7d:03:ae:b5:
ea:52:cb:d9:97:b5:db:bc:9e:e5:e1:55:67:c3:9e:8d:df:0c:
61:fc:15:bf:e0:7b:ca:c6:f0:2c:d1:da:c7:b7:46:84:ed:aa:
92:7b:b2:fe:97:5b:49:a5:04:ba:b1:40:17:20:1d:e5:bd:16:
7e:63:ea:73:d8:be:0c:72:a6:20:41:b8:56:8a:c9:fa:a3:dd:
5f:d7:d6:c6:71:78:ba:f6:c5:76:9d:bf:06:9c:27:cb:75:ad:
02:f3:3e:f9:cb:cc:8c:07:61:ae:15:20:d5:eb:1d:92:48:93:
49:99:b1:73:3c:51:1b:b6:e0:6d:95:d9:da:3a:d3:79:dd:fe:
8b:ec:5f:36:4f:7d:d6:9e:24:fe:29:a7:44:91:e7:9a:b6:a4:
96:15:28:0f:20:c7:99:2f:21:9d:e8:69:fe:0a:49:60:b1:b7:
f4:fe:4e:37:9d:82:18:0f:68:a1:cc:97:7e:94:ca:c0:55:63:
32:eb:62:5e:71:d9:32:0e:d1:44:70:7c:2b:bd:fe:e9:a8:d3:
ae:a2:72:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 24 23:34:22 2024 by rpki-client on console-ams.rpki-client.org