Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A912AFA4/B67862FAAB9511EAB2559C5BC4F9AE02/52FF9944AB9711EAB2C00F5EC4F9AE02.roa
File: 52FF9944AB9711EAB2C00F5EC4F9AE02.roa (raw, json)
Hash identifier: 15x+UMCzso9Ct8gLB5gFTAcMB0xhn90nVaRk468yQ/U=
Subject key identifier: F9:E9:DD:AD:66:9B:65:DE:C1:DE:16:0B:1E:01:6A:9B:91:E9:57:E3
Certificate issuer: /CN=A912AFA4/serialNumber=51942D25EDBCA51DFA56CE09ED361EB7A26DBD25
Certificate serial: 08C0
Authority key identifier: 51:94:2D:25:ED:BC:A5:1D:FA:56:CE:09:ED:36:1E:B7:A2:6D:BD:25
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UZQtJe28pR36Vs4J7TYet6JtvSU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912AFA4/B67862FAAB9511EAB2559C5BC4F9AE02/52FF9944AB9711EAB2C00F5EC4F9AE02.roa
Signing time: Fri 08 Nov 2024 02:10:17 +0000
ROA not before: Fri 08 Nov 2024 02:10:17 +0000
ROA not after: Thu 01 May 2025 00:00:00 +0000
asID: 135060
IP address blocks: 103.93.150.0/24 maxlen: 24
103.93.151.0/24 maxlen: 24
103.208.4.0/22 maxlen: 22
103.208.4.0/24 maxlen: 24
103.208.5.0/24 maxlen: 24
103.208.6.0/24 maxlen: 24
103.208.7.0/24 maxlen: 24
116.206.128.0/24 maxlen: 24
116.206.129.0/24 maxlen: 24
123.100.140.0/23 maxlen: 24
123.100.143.0/24 maxlen: 24
123.100.144.0/24 maxlen: 24
123.100.145.0/24 maxlen: 24
123.100.146.0/24 maxlen: 24
123.100.147.0/24 maxlen: 24
123.100.148.0/22 maxlen: 22
123.100.148.0/24 maxlen: 24
123.100.149.0/24 maxlen: 24
123.100.150.0/24 maxlen: 24
123.100.151.0/24 maxlen: 24
123.100.152.0/24 maxlen: 24
202.86.52.0/24 maxlen: 24
202.86.53.0/24 maxlen: 24
202.86.54.0/24 maxlen: 24
202.86.55.0/24 maxlen: 24
2404:6a80::/41 maxlen: 41
2404:6a80:200::/41 maxlen: 41
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A912AFA4/B67862FAAB9511EAB2559C5BC4F9AE02/UZQtJe28pR36Vs4J7TYet6JtvSU.crl
rsync://rpki.apnic.net/member_repository/A912AFA4/B67862FAAB9511EAB2559C5BC4F9AE02/UZQtJe28pR36Vs4J7TYet6JtvSU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UZQtJe28pR36Vs4J7TYet6JtvSU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 29 Nov 2024 19:56:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2240 (0x8c0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912AFA4/serialNumber=51942D25EDBCA51DFA56CE09ED361EB7A26DBD25
Validity
Not Before: Nov 8 02:10:17 2024 GMT
Not After : May 1 00:00:00 2025 GMT
Subject: CN=672d7309-fd64
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:8c:5f:62:58:df:ca:9a:48:52:ab:25:24:4e:
d1:ee:4a:d6:a8:96:05:20:8d:96:a2:66:b4:e8:5c:
c6:d3:ab:a1:d4:ed:68:75:be:60:cd:99:a8:22:1f:
1c:ab:fd:d9:92:4a:51:4b:1d:40:5a:ac:f1:3e:d2:
7f:e8:b5:1c:54:e2:13:29:60:9e:a3:b3:c3:ef:5d:
e7:cf:42:0e:50:77:d2:aa:76:eb:01:a4:ab:e2:9a:
a1:50:e3:a5:ec:c5:4b:91:16:9d:bd:98:98:63:fc:
71:08:e3:10:a4:23:4a:98:cd:4e:de:0d:5a:f1:09:
31:95:8c:70:82:c9:3d:74:bd:49:d9:13:f3:52:5a:
6e:f2:ce:73:77:53:b2:ff:22:3d:ed:c1:16:1d:2b:
ab:5c:1f:5c:b1:bc:d6:93:82:35:8c:a6:bc:3e:21:
2b:4d:2c:c5:3b:53:57:b8:c0:99:92:c0:16:83:b6:
aa:a3:92:10:52:3b:93:1e:8e:fb:98:1f:70:bf:bd:
8d:b7:4e:07:a6:5b:cb:0f:f9:42:9f:1e:de:c1:85:
dd:ff:6e:a0:c0:72:0d:f1:d4:eb:f0:5c:4d:92:99:
97:aa:43:39:62:16:ee:1a:e3:6a:8c:d5:c0:66:9b:
f9:96:b4:1a:c2:09:bd:af:ab:c3:e9:e5:2c:59:97:
a9:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:E9:DD:AD:66:9B:65:DE:C1:DE:16:0B:1E:01:6A:9B:91:E9:57:E3
X509v3 Authority Key Identifier:
keyid:51:94:2D:25:ED:BC:A5:1D:FA:56:CE:09:ED:36:1E:B7:A2:6D:BD:25
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912AFA4/B67862FAAB9511EAB2559C5BC4F9AE02/UZQtJe28pR36Vs4J7TYet6JtvSU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UZQtJe28pR36Vs4J7TYet6JtvSU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912AFA4/B67862FAAB9511EAB2559C5BC4F9AE02/52FF9944AB9711EAB2C00F5EC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.93.150.0/23
103.208.4.0/22
116.206.128.0/23
123.100.140.0/23
123.100.143.0-123.100.152.255
202.86.52.0/22
IPv6:
2404:6a80::/41
2404:6a80:200::/41
Signature Algorithm: sha256WithRSAEncryption
24:ed:1d:6f:a9:6c:68:37:f5:60:11:ed:ef:43:bb:55:54:78:
58:b6:18:7e:38:5c:c1:a2:a5:9a:6b:1a:bb:43:b7:c1:d7:b8:
3e:6a:3f:95:21:23:d4:0d:12:7f:78:61:0e:f2:b2:19:27:1f:
ba:94:10:b9:62:c4:d0:68:ac:b7:2e:aa:21:1d:91:1c:23:0a:
52:06:06:3e:a2:d4:7e:1c:04:86:3c:ba:e0:02:7f:e6:69:0d:
90:aa:3d:e3:05:73:4b:3b:15:6e:5d:1d:7c:1c:5a:4d:7b:ca:
f6:8a:d3:a1:36:29:20:5d:0f:59:35:97:f2:af:ce:c2:0b:b7:
e2:4e:d6:8b:4a:f4:d9:6a:e1:af:06:bf:f5:2d:e5:1f:91:ba:
d4:3f:0e:25:6f:1b:32:21:84:1b:b3:85:21:e5:20:b8:c5:c5:
41:9f:15:ef:9b:d5:37:a5:a8:94:93:bf:86:0b:f0:8b:dc:2c:
c8:50:21:75:02:61:8c:fc:25:cb:67:08:fe:91:47:5c:a6:b5:
6a:29:71:62:15:e6:32:35:bc:dd:35:a4:5e:44:40:28:9b:c9:
b5:b2:cb:fa:80:9d:9a:4e:47:56:ff:30:ce:14:e1:33:c7:24:
bf:23:01:da:da:d2:5f:0a:91:c0:4c:28:66:4e:a4:00:0b:7a:
7b:73:2c:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 21:05:27 2024 by rpki-client on console-fra.rpki-client.org