Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A912B600/C0B57422097511EB9D461B30C4F9AE02/5DE12890180311EBA311E181C4F9AE02.roa
File: 5DE12890180311EBA311E181C4F9AE02.roa (raw, json)
Hash identifier: F8xinTLI0D4YZKI6rrpI2+NEMkL5MZGo2LQqsqaOFZA=
Subject key identifier: 44:E6:74:4C:EA:87:76:43:00:56:D0:21:C4:1E:7F:97:22:9C:89:BA
Certificate issuer: /CN=A912B600/serialNumber=11940BB58344AA2C79C49539D6DF915196EFE826
Certificate serial: 071E
Authority key identifier: 11:94:0B:B5:83:44:AA:2C:79:C4:95:39:D6:DF:91:51:96:EF:E8:26
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/EZQLtYNEqix5xJU51t-RUZbv6CY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912B600/C0B57422097511EB9D461B30C4F9AE02/5DE12890180311EBA311E181C4F9AE02.roa
Signing time: Sat 24 Aug 2024 15:01:09 +0000
ROA not before: Sat 24 Aug 2024 15:01:08 +0000
ROA not after: Mon 01 Dec 2025 00:00:00 +0000
asID: 38466
IP address blocks: 66.23.160.0/19 maxlen: 19
66.23.160.0/24 maxlen: 24
66.23.161.0/24 maxlen: 24
66.23.162.0/24 maxlen: 24
66.23.163.0/24 maxlen: 24
66.23.164.0/24 maxlen: 24
66.23.165.0/24 maxlen: 24
66.23.166.0/24 maxlen: 24
66.23.167.0/24 maxlen: 24
66.23.168.0/24 maxlen: 24
66.23.169.0/24 maxlen: 24
66.23.170.0/24 maxlen: 24
66.23.171.0/24 maxlen: 24
66.23.172.0/24 maxlen: 24
66.23.173.0/24 maxlen: 24
66.23.174.0/24 maxlen: 24
66.23.175.0/24 maxlen: 24
66.23.176.0/24 maxlen: 24
66.23.177.0/24 maxlen: 24
66.23.178.0/24 maxlen: 24
66.23.179.0/24 maxlen: 24
66.23.180.0/24 maxlen: 24
66.23.181.0/24 maxlen: 24
66.23.182.0/24 maxlen: 24
66.23.183.0/24 maxlen: 24
66.23.184.0/24 maxlen: 24
66.23.185.0/24 maxlen: 24
66.23.186.0/24 maxlen: 24
66.23.187.0/24 maxlen: 24
66.23.188.0/24 maxlen: 24
66.23.189.0/24 maxlen: 24
66.23.190.0/24 maxlen: 24
66.23.191.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A912B600/C0B57422097511EB9D461B30C4F9AE02/EZQLtYNEqix5xJU51t-RUZbv6CY.crl
rsync://rpki.apnic.net/member_repository/A912B600/C0B57422097511EB9D461B30C4F9AE02/EZQLtYNEqix5xJU51t-RUZbv6CY.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/EZQLtYNEqix5xJU51t-RUZbv6CY.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 27 Nov 2024 14:46:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1822 (0x71e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912B600/serialNumber=11940BB58344AA2C79C49539D6DF915196EFE826
Validity
Not Before: Aug 24 15:01:08 2024 GMT
Not After : Dec 1 00:00:00 2025 GMT
Subject: CN=66c9f5b4-ab20
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:52:c4:0e:f9:8e:d1:5e:34:13:4a:9b:b2:92:
8d:9e:b4:9a:fc:89:ac:62:c2:e9:d1:73:2e:e6:37:
e3:85:6c:96:52:99:2a:2c:45:90:7f:83:6e:f5:55:
ce:06:89:46:f9:77:d5:8b:5a:12:e6:8b:6a:13:94:
c6:86:92:2e:4f:68:85:e2:10:a8:bf:99:2a:f8:05:
fb:a2:68:da:51:59:ef:f6:f3:ed:4f:d7:46:d2:6b:
3a:68:e3:7a:0b:e2:4b:26:ad:4c:e0:80:42:51:f8:
5d:75:f0:1f:f4:f1:b4:e1:33:e1:4f:b3:51:59:6f:
6f:4f:e9:2e:a7:81:f4:42:1a:75:6f:ec:7d:1f:4f:
72:87:cd:6a:7e:6d:c8:38:e9:b3:f6:73:93:c4:81:
71:9e:b5:c3:08:6c:62:72:47:a5:12:f3:55:0f:e7:
06:97:64:5e:db:f7:38:91:b5:6a:dc:be:4e:99:08:
8f:57:ac:3b:68:d8:e5:f0:44:1e:67:66:6d:6e:e4:
c2:fc:cc:58:a7:1f:ca:2d:37:92:b7:e4:44:02:a2:
8e:62:d3:59:e2:19:ec:92:aa:c9:af:5f:9a:9e:8f:
80:5d:e2:bc:17:39:e5:f4:39:18:bb:9b:0f:fe:19:
4b:75:3c:85:3a:de:2e:96:06:90:94:fe:e3:3c:e5:
86:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:E6:74:4C:EA:87:76:43:00:56:D0:21:C4:1E:7F:97:22:9C:89:BA
X509v3 Authority Key Identifier:
keyid:11:94:0B:B5:83:44:AA:2C:79:C4:95:39:D6:DF:91:51:96:EF:E8:26
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912B600/C0B57422097511EB9D461B30C4F9AE02/EZQLtYNEqix5xJU51t-RUZbv6CY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/EZQLtYNEqix5xJU51t-RUZbv6CY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912B600/C0B57422097511EB9D461B30C4F9AE02/5DE12890180311EBA311E181C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
66.23.160.0/19
Signature Algorithm: sha256WithRSAEncryption
93:00:d5:02:ae:61:c9:8b:a9:1f:83:a8:07:ff:a0:b9:72:19:
27:de:77:73:cd:43:c9:d5:7d:f8:f6:1e:a8:ce:47:a8:07:38:
0e:db:9a:f6:6d:a0:28:67:eb:ec:c7:b0:fd:31:4a:1d:03:13:
3b:bf:77:7a:63:c1:f4:e1:54:bd:1b:7b:b0:af:10:cd:d1:ed:
7b:73:bb:7c:3e:b9:fc:46:38:cc:d6:56:cd:3b:50:b8:15:5e:
cc:2f:b8:c8:d7:f9:a1:1a:a1:5e:c4:4c:4a:48:83:1a:53:f6:
26:57:22:02:27:2f:ca:ad:26:b3:41:2a:a6:7e:ae:b4:2b:30:
7f:b4:8e:81:0f:b3:d3:de:fe:e8:71:cf:46:d8:37:28:e2:06:
b3:d6:a7:19:3f:a0:4e:e7:eb:c5:cc:79:a8:00:81:c8:71:a4:
cf:98:08:cb:83:c3:9c:97:2e:8f:1f:95:66:5f:fa:0e:63:63:
dd:cc:98:ec:d0:c8:43:27:92:ab:2f:3a:34:34:6e:c6:25:31:
a5:8b:d8:5e:28:50:1a:69:71:56:0c:00:9f:cd:78:67:33:5a:
62:05:2d:45:e1:54:86:5c:0d:48:c4:05:62:92:37:45:3a:50:
d2:59:92:05:10:b4:81:b3:99:eb:bf:df:05:1e:18:af:8c:9b:
9c:b0:82:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 16:11:23 2024 by rpki-client on console-fra.rpki-client.org