Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91269B8/4ABAFEDE839411E5B01B591CC4F9AE02/844E61B635B811EE96EDCC53C4F9AE02.roa
File: 844E61B635B811EE96EDCC53C4F9AE02.roa (raw, json)
Hash identifier: ZUEn5ZlRaiInxXBiSVZ7/rf4gJkd4uF1qxiteovD6sc=
Subject key identifier: 91:28:B9:DE:13:19:1A:EF:D5:FE:5D:BC:93:C7:C9:74:BE:21:4A:E7
Certificate issuer: /CN=A91269B8/serialNumber=6627CCAB6DC2E9586E2CC11B2795735A31FD9B8A
Certificate serial: 2282
Authority key identifier: 66:27:CC:AB:6D:C2:E9:58:6E:2C:C1:1B:27:95:73:5A:31:FD:9B:8A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZifMq23C6VhuLMEbJ5VzWjH9m4o.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91269B8/4ABAFEDE839411E5B01B591CC4F9AE02/844E61B635B811EE96EDCC53C4F9AE02.roa
Signing time: Wed 10 Apr 2024 16:24:24 +0000
ROA not before: Wed 10 Apr 2024 16:24:24 +0000
ROA not after: Wed 28 May 2025 00:00:00 +0000
asID: 9299
IP address blocks: 117.58.192.0/19 maxlen: 19
119.111.0.0/16 maxlen: 16
119.111.0.0/19 maxlen: 20
119.111.5.0/24 maxlen: 24
119.111.16.0/24 maxlen: 24
119.111.17.0/24 maxlen: 24
119.111.18.0/24 maxlen: 24
119.111.19.0/24 maxlen: 24
119.111.23.0/24 maxlen: 24
119.111.24.0/24 maxlen: 24
119.111.25.0/24 maxlen: 24
119.111.32.0/19 maxlen: 20
119.111.33.0/24 maxlen: 24
119.111.52.0/24 maxlen: 24
119.111.64.0/19 maxlen: 20
119.111.67.0/24 maxlen: 24
119.111.68.0/24 maxlen: 24
119.111.69.0/24 maxlen: 24
119.111.70.0/24 maxlen: 24
119.111.74.0/24 maxlen: 24
119.111.76.0/24 maxlen: 24
119.111.83.0/24 maxlen: 24
119.111.86.0/24 maxlen: 24
119.111.89.0/24 maxlen: 24
119.111.91.0/24 maxlen: 24
119.111.96.0/19 maxlen: 20
119.111.105.0/24 maxlen: 24
119.111.128.0/19 maxlen: 20
119.111.136.0/24 maxlen: 24
119.111.160.0/19 maxlen: 20
119.111.192.0/19 maxlen: 20
119.111.224.0/19 maxlen: 20
210.1.96.0/19 maxlen: 20
210.1.128.0/20 maxlen: 20
210.1.135.0/24 maxlen: 24
210.1.139.0/24 maxlen: 24
210.23.96.0/19 maxlen: 19
210.23.98.0/24 maxlen: 24
210.23.99.0/24 maxlen: 24
210.23.105.0/24 maxlen: 24
210.23.107.0/24 maxlen: 24
210.23.119.0/24 maxlen: 24
210.23.160.0/19 maxlen: 19
210.23.160.0/20 maxlen: 20
210.23.176.0/20 maxlen: 20
210.23.192.0/18 maxlen: 18
210.23.192.0/19 maxlen: 19
210.23.213.0/24 maxlen: 24
210.23.215.0/24 maxlen: 24
210.23.217.0/24 maxlen: 24
210.23.224.0/19 maxlen: 20
210.23.225.0/24 maxlen: 24
221.121.96.0/19 maxlen: 19
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91269B8/4ABAFEDE839411E5B01B591CC4F9AE02/ZifMq23C6VhuLMEbJ5VzWjH9m4o.crl
rsync://rpki.apnic.net/member_repository/A91269B8/4ABAFEDE839411E5B01B591CC4F9AE02/ZifMq23C6VhuLMEbJ5VzWjH9m4o.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZifMq23C6VhuLMEbJ5VzWjH9m4o.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 25 May 2024 14:50:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8834 (0x2282)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91269B8/serialNumber=6627CCAB6DC2E9586E2CC11B2795735A31FD9B8A
Validity
Not Before: Apr 10 16:24:24 2024 GMT
Not After : May 28 00:00:00 2025 GMT
Subject: CN=6616bd38-0268
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:ce:81:a1:09:37:56:d7:46:a7:a1:eb:11:fe:
21:ae:6a:51:2c:82:c7:5c:b8:09:33:9a:4d:f7:28:
e3:91:75:d3:89:ef:51:6a:af:f4:0d:62:85:aa:13:
1b:41:8e:49:6e:4b:61:bd:50:78:6a:de:3e:c9:32:
87:a3:cf:3b:30:c3:fb:22:3c:84:68:b2:d4:b9:79:
2b:0c:6b:21:f1:ce:af:10:8c:30:72:10:f8:51:89:
a5:67:4b:f8:15:77:e8:60:e9:86:d2:d8:da:c5:a0:
a7:eb:5e:f4:39:6f:1d:87:d7:1d:2e:00:0a:7c:0b:
56:7a:a2:2d:4d:38:9e:ad:b7:2f:84:24:19:ba:58:
57:24:5b:a2:3e:d6:ad:39:47:0e:90:98:5f:ad:5a:
6c:2b:40:e8:1e:b5:30:e3:38:41:b6:9f:ef:4b:8a:
1b:ee:26:4e:7e:1f:d3:bb:77:14:43:df:1e:c8:c7:
9c:b2:c2:1b:5e:a8:05:af:a1:5b:11:0e:92:3f:0c:
03:3f:6c:e6:c8:7e:6f:fb:d7:9d:14:af:4a:1c:ce:
b5:67:7b:53:05:ba:fd:83:4e:79:3e:99:fe:3a:d8:
10:83:12:e4:e7:bc:56:7d:81:18:f2:60:ba:8c:74:
66:95:f7:91:33:19:82:93:cf:e6:91:e9:3b:27:1e:
eb:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:28:B9:DE:13:19:1A:EF:D5:FE:5D:BC:93:C7:C9:74:BE:21:4A:E7
X509v3 Authority Key Identifier:
keyid:66:27:CC:AB:6D:C2:E9:58:6E:2C:C1:1B:27:95:73:5A:31:FD:9B:8A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91269B8/4ABAFEDE839411E5B01B591CC4F9AE02/ZifMq23C6VhuLMEbJ5VzWjH9m4o.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZifMq23C6VhuLMEbJ5VzWjH9m4o.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91269B8/4ABAFEDE839411E5B01B591CC4F9AE02/844E61B635B811EE96EDCC53C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
117.58.192.0/19
119.111.0.0/16
210.1.96.0-210.1.143.255
210.23.96.0/19
210.23.160.0-210.23.255.255
221.121.96.0/19
Signature Algorithm: sha256WithRSAEncryption
c4:71:5f:47:33:b9:ea:b5:0e:4e:15:b6:ea:11:18:ab:35:c8:
f4:db:12:f4:2b:98:38:03:6a:8e:77:6a:da:d7:ad:4e:f4:f3:
db:39:e9:f5:1d:0f:d7:70:b1:4f:ae:c5:27:b1:a3:43:5b:e2:
4c:b7:d1:ff:46:6c:0f:c2:01:84:25:23:69:33:bb:49:a6:de:
82:cd:6a:91:9f:bb:1f:e1:b3:ea:62:32:96:06:39:91:0b:96:
eb:6c:99:4f:12:f2:ca:c4:62:3a:4c:1c:63:a6:0f:ea:d7:1d:
08:fc:d7:3b:4a:3b:99:c8:4a:38:30:c4:27:09:9f:1f:1d:23:
e4:2a:dc:b1:f9:e0:8f:69:c9:a4:73:ec:91:db:65:5b:c9:ab:
fe:3b:d3:c9:ba:e4:f5:4e:10:bf:36:0b:58:61:83:e4:8e:fa:
97:ed:89:93:0d:12:67:b1:85:b9:cb:33:c3:0b:8c:7d:d8:e3:
dc:11:02:55:2f:9a:2e:e0:28:ea:d3:d4:88:f6:83:fd:4e:5e:
29:c6:48:a4:a4:a0:21:73:a9:c4:3e:40:44:c4:7c:38:de:8f:
f2:a1:7b:94:d8:d9:c9:42:14:81:54:f9:13:c7:90:fb:5c:98:
c9:da:10:44:98:5c:37:a1:a2:ff:ad:ba:db:1f:a7:85:2e:ef:
ca:41:08:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 17:20:03 2024 by rpki-client on console-ams.rpki-client.org