Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9132EC7/2934726AFA7811E79CB6087DC4F9AE02/0D4F5906FA7911E7B85F4E7EC4F9AE02.roa
File: 0D4F5906FA7911E7B85F4E7EC4F9AE02.roa (raw, json)
Hash identifier: r+Jy/09gWn+YH8JSigsRKi6Ce/gD70dgb0f2iF1VSsE=
Subject key identifier: BB:48:39:DC:BF:44:43:41:96:1E:10:4A:AA:5C:5F:E0:64:73:08:1A
Certificate issuer: /CN=A9132EC7/serialNumber=010B407B75F6E338F3AFB59A8D62715C3C02ECF4
Certificate serial: 166E
Authority key identifier: 01:0B:40:7B:75:F6:E3:38:F3:AF:B5:9A:8D:62:71:5C:3C:02:EC:F4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AQtAe3X24zjzr7WajWJxXDwC7PQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9132EC7/2934726AFA7811E79CB6087DC4F9AE02/0D4F5906FA7911E7B85F4E7EC4F9AE02.roa
Signing time: Sat 23 Nov 2024 10:31:56 +0000
ROA not before: Sat 23 Nov 2024 10:31:56 +0000
ROA not after: Thu 01 May 2025 00:00:00 +0000
asID: 137403
IP address blocks: 103.107.160.0/22 maxlen: 22
103.107.160.0/23 maxlen: 23
103.107.160.0/24 maxlen: 24
103.107.161.0/24 maxlen: 24
103.107.162.0/23 maxlen: 23
103.107.162.0/24 maxlen: 24
103.107.163.0/24 maxlen: 24
2402:5840::/32 maxlen: 32
2402:5840::/48 maxlen: 48
2402:5840::/64 maxlen: 64
2402:5840:0:1::/64 maxlen: 64
2402:5840:0:2::/64 maxlen: 64
2402:5840:1::/48 maxlen: 48
2402:5840:2::/48 maxlen: 48
2402:5840:3::/48 maxlen: 48
2402:5840:4::/48 maxlen: 48
2402:5840:5::/48 maxlen: 48
2402:5840:6::/48 maxlen: 48
2402:5840:7::/48 maxlen: 48
2402:5840:8::/48 maxlen: 48
2402:5840:9::/48 maxlen: 48
2402:5840:a::/48 maxlen: 48
2402:5840:70::/48 maxlen: 48
2402:5840:71::/48 maxlen: 48
2402:5840:72::/48 maxlen: 48
2402:5840:73::/48 maxlen: 48
2402:5840:100::/48 maxlen: 48
2402:5840:2001::/48 maxlen: 48
2402:5840:2002::/48 maxlen: 48
2402:5840:2003::/48 maxlen: 48
2402:5840:2004::/48 maxlen: 48
2402:5840:5840::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9132EC7/2934726AFA7811E79CB6087DC4F9AE02/AQtAe3X24zjzr7WajWJxXDwC7PQ.crl
rsync://rpki.apnic.net/member_repository/A9132EC7/2934726AFA7811E79CB6087DC4F9AE02/AQtAe3X24zjzr7WajWJxXDwC7PQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AQtAe3X24zjzr7WajWJxXDwC7PQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 30 Nov 2024 02:50:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5742 (0x166e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9132EC7/serialNumber=010B407B75F6E338F3AFB59A8D62715C3C02ECF4
Validity
Not Before: Nov 23 10:31:56 2024 GMT
Not After : May 1 00:00:00 2025 GMT
Subject: CN=6741af1c-74fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:33:5f:cb:fc:86:8c:35:7a:ca:0a:7a:44:35:
ef:98:6a:52:fb:09:fc:7c:16:a7:1a:4d:0f:c2:fb:
9f:b1:3e:63:0b:32:a2:1a:ce:43:4d:76:1e:d2:40:
24:81:2a:c1:a3:bb:6c:b0:f7:fe:b8:08:b7:13:36:
8b:e7:fe:1d:51:c6:25:08:24:5a:fa:59:fc:e3:1d:
2a:bd:76:c1:a4:1a:9a:c5:d3:b5:d3:80:80:f5:36:
45:8d:13:c9:38:24:f6:93:0f:0c:80:70:da:56:ed:
2c:45:e4:75:dd:02:e5:2d:77:d9:0e:44:70:5b:6a:
7a:2d:cd:5d:0c:c8:48:5b:f9:50:98:38:7a:3e:44:
ef:e4:87:3d:ab:7b:c1:37:e5:04:ba:6f:a7:84:6f:
f4:69:2d:76:ff:e9:5c:a2:98:bc:c0:0f:73:81:42:
e1:19:57:3c:9e:df:35:67:96:9d:53:4c:d6:4c:e8:
c9:c0:2c:80:9a:91:ad:2a:93:b7:45:3d:0c:1b:18:
f6:ef:d8:86:a2:27:42:ea:07:47:80:56:0e:d0:9a:
5a:24:71:6d:92:35:4e:f4:5f:cb:a9:d2:c4:74:69:
74:36:90:3a:97:c5:c8:7e:c0:d0:41:bb:52:b2:04:
f8:4c:20:ee:74:05:88:b7:cf:bd:d6:86:94:8d:4a:
da:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:48:39:DC:BF:44:43:41:96:1E:10:4A:AA:5C:5F:E0:64:73:08:1A
X509v3 Authority Key Identifier:
keyid:01:0B:40:7B:75:F6:E3:38:F3:AF:B5:9A:8D:62:71:5C:3C:02:EC:F4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9132EC7/2934726AFA7811E79CB6087DC4F9AE02/AQtAe3X24zjzr7WajWJxXDwC7PQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AQtAe3X24zjzr7WajWJxXDwC7PQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9132EC7/2934726AFA7811E79CB6087DC4F9AE02/0D4F5906FA7911E7B85F4E7EC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.107.160.0/22
IPv6:
2402:5840::/32
Signature Algorithm: sha256WithRSAEncryption
72:c4:b8:26:33:95:df:49:00:4d:b8:d4:b9:86:58:12:58:a7:
d1:fc:e1:f0:94:98:0b:64:2c:27:91:28:59:52:d3:7c:7e:4e:
45:60:29:9f:f9:f6:39:9d:69:15:9b:6f:04:45:4e:56:06:25:
a6:f1:44:51:1b:40:7b:3c:30:2e:01:9d:ed:02:b5:fe:f1:44:
9c:ef:4c:a0:26:83:80:48:07:90:87:e1:1e:ee:bd:f4:e6:22:
dd:6a:3e:fe:e0:0a:c7:79:c1:02:7b:54:c5:5c:59:fa:67:82:
68:10:5a:d2:7d:6c:1b:4f:53:72:ec:f9:74:83:cb:d2:6d:38:
9d:de:2b:43:a1:d3:b8:aa:ed:ec:00:21:fc:0d:94:a4:8a:6e:
b9:b5:46:ca:13:dc:bc:08:00:5b:9e:5b:61:0b:e5:f3:8e:5b:
20:11:09:f4:61:a9:0f:1f:5d:c3:71:f6:e1:6d:90:72:0d:36:
c0:30:1e:38:ac:f1:bc:fc:ef:27:3d:3d:01:a9:53:1a:9f:ae:
5d:78:96:55:76:19:70:c6:26:2f:d9:69:ba:50:ad:e6:9f:1e:
60:a7:7b:48:63:2a:1c:c6:06:6a:f7:40:21:73:05:9a:5b:3a:
e1:58:25:f2:01:d6:00:e9:78:07:8d:8b:e9:fc:86:a9:86:b5:
00:1a:14:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 11:33:20 2024 by rpki-client on console-fra.rpki-client.org