Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A913387C/2C7D79E81D8911E28A693DE208B02CD2/08B3D71E068611EDA1C2070DC4F9AE02.roa
File: 08B3D71E068611EDA1C2070DC4F9AE02.roa (raw, json)
Hash identifier: 6dY5OZitAuFJsTTl2QNFuyBVW7OxNQFYNmxM4QvuXdk=
Subject key identifier: 08:30:F0:2F:DC:D5:44:F7:40:30:FB:D4:EE:AF:22:3C:F8:BA:AB:FE
Certificate issuer: /CN=A913387C/serialNumber=BDE1B3955F1625DF7625AF71CBB794B87C39DC67
Certificate serial: 3325
Authority key identifier: BD:E1:B3:95:5F:16:25:DF:76:25:AF:71:CB:B7:94:B8:7C:39:DC:67
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/veGzlV8WJd92Ja9xy7eUuHw53Gc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A913387C/2C7D79E81D8911E28A693DE208B02CD2/08B3D71E068611EDA1C2070DC4F9AE02.roa
Signing time: Tue 04 Jul 2023 14:40:44 +0000
ROA not before: Tue 04 Jul 2023 14:40:44 +0000
ROA not after: Sat 31 Aug 2024 00:00:00 +0000
asID: 4844
IP address blocks: 210.23.0.0/19 maxlen: 19
210.23.0.0/20 maxlen: 20
210.23.16.0/20 maxlen: 20
2406:f000::/32 maxlen: 32
2406:f000:1::/48 maxlen: 48
2406:f000:1:32::/64 maxlen: 64
2406:f000:1:e000::/64 maxlen: 64
2406:f000:1:e003::/64 maxlen: 64
2406:f000:2:e004::/64 maxlen: 64
2406:f000:3:e000::/64 maxlen: 64
2406:f000:3:e001::/64 maxlen: 64
2406:f000:3:e005::/64 maxlen: 64
2406:f000:3:e007::/64 maxlen: 64
2406:f000:3:e00a::/64 maxlen: 64
2406:f000:3:e00d::/64 maxlen: 64
2406:f000:20ff:200::/56 maxlen: 56
2406:f000:20ff:300::/56 maxlen: 56
2406:f000:30f0::/56 maxlen: 56
2406:f000:30f0:100::/56 maxlen: 56
2406:f000:30f0:300::/56 maxlen: 56
2406:f000:30f0:400::/56 maxlen: 56
2406:f000:30f0:600::/56 maxlen: 56
2406:f000:30f0:700::/56 maxlen: 56
2406:f000:30f0:800::/56 maxlen: 56
2406:f000:30f0:900::/56 maxlen: 56
2406:f000:30f1:ff00::/64 maxlen: 64
2406:f000:30f1:ff01::/64 maxlen: 64
2406:f000:30ff:1::/64 maxlen: 64
2406:f000:30ff:2::/64 maxlen: 64
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A913387C/2C7D79E81D8911E28A693DE208B02CD2/veGzlV8WJd92Ja9xy7eUuHw53Gc.crl
rsync://rpki.apnic.net/member_repository/A913387C/2C7D79E81D8911E28A693DE208B02CD2/veGzlV8WJd92Ja9xy7eUuHw53Gc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/veGzlV8WJd92Ja9xy7eUuHw53Gc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 04 Jun 2024 13:40:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13093 (0x3325)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A913387C/serialNumber=BDE1B3955F1625DF7625AF71CBB794B87C39DC67
Validity
Not Before: Jul 4 14:40:44 2023 GMT
Not After : Aug 31 00:00:00 2024 GMT
Subject: CN=64a42f6c-129f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:af:9e:e8:02:ff:de:ba:80:a4:28:c4:88:ec:
7c:fb:75:1a:6a:7f:d5:c9:4b:2c:bf:d5:ed:f4:ad:
81:3c:bb:c5:f7:82:05:58:b1:20:15:c5:74:2f:a5:
bc:71:0e:cd:38:9e:7c:ab:e7:a4:eb:8d:c9:85:8b:
25:84:e2:b3:db:29:91:40:13:d5:f2:47:e8:5d:1b:
56:b2:b5:a7:27:aa:3d:1c:68:7e:e0:1f:05:7f:9b:
d4:39:bf:16:36:ec:e9:70:67:28:ee:28:92:c2:6f:
e4:99:fb:d9:67:57:2f:73:6f:5e:2d:b1:6a:4f:6d:
a1:86:71:4d:40:4e:b5:cb:22:b8:86:98:2e:7b:32:
c2:2c:58:5f:2f:23:e0:68:fb:64:aa:fd:c1:64:e4:
fd:80:1f:b2:f8:29:d8:b2:bc:60:99:52:cd:2c:1a:
cc:23:1a:f6:ec:1c:cc:b7:c2:d0:93:07:06:ea:70:
a2:e3:5a:f0:7b:0f:2d:7a:3a:0b:c6:be:77:71:17:
b5:b6:fa:10:81:33:c5:09:97:d7:80:06:fa:2e:f9:
32:c2:7f:db:7b:6d:f4:44:28:46:2a:25:9d:d7:c4:
62:cd:0e:88:38:75:0b:58:35:8b:ba:c4:81:7a:67:
d6:44:25:ad:12:9e:9b:6d:3c:ff:f4:16:db:be:17:
15:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:30:F0:2F:DC:D5:44:F7:40:30:FB:D4:EE:AF:22:3C:F8:BA:AB:FE
X509v3 Authority Key Identifier:
keyid:BD:E1:B3:95:5F:16:25:DF:76:25:AF:71:CB:B7:94:B8:7C:39:DC:67
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A913387C/2C7D79E81D8911E28A693DE208B02CD2/veGzlV8WJd92Ja9xy7eUuHw53Gc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/veGzlV8WJd92Ja9xy7eUuHw53Gc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913387C/2C7D79E81D8911E28A693DE208B02CD2/08B3D71E068611EDA1C2070DC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
210.23.0.0/19
IPv6:
2406:f000::/32
Signature Algorithm: sha256WithRSAEncryption
40:17:a3:6d:10:e4:f2:9b:58:23:ec:88:7b:8d:dd:72:ae:8e:
7d:e5:3e:cd:fb:70:08:99:fd:3f:5c:67:a9:f4:f0:83:d3:a7:
07:49:30:1c:61:d6:37:6f:31:62:7b:66:d9:04:a5:9c:ee:91:
60:3d:57:74:e3:d1:6d:b6:de:2c:2b:8e:24:fb:77:22:17:e1:
4f:65:48:f1:21:b6:bb:27:f0:87:6c:34:a0:41:f8:d1:68:be:
92:f4:46:4a:1c:cb:6c:3c:5e:dc:92:b9:3e:27:64:c7:c8:9e:
ba:f2:30:50:cb:0d:6d:a5:13:5e:11:1b:4c:6e:9f:0d:52:a4:
df:ba:a8:b7:00:8c:f3:f0:07:b6:46:22:29:dd:06:4e:c0:73:
1a:67:02:b9:f6:bc:b2:dd:3f:12:cf:42:62:a0:3d:7b:c5:82:
a3:e6:6c:dd:7c:cd:e5:c9:ac:05:cd:43:4e:98:81:03:eb:68:
74:46:19:d0:6b:f1:37:c5:d9:64:3a:b9:10:db:52:b9:01:97:
87:f7:83:65:38:62:13:08:09:d1:10:87:47:2e:93:31:8f:79:
69:fc:3a:4e:49:a8:0d:c2:8f:85:27:e2:d7:a9:23:bd:8e:37:
12:2b:3e:90:22:01:f5:b0:ba:96:ea:e5:b1:c0:07:d8:df:ad:
3b:8c:98:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 28 15:19:42 2024 by rpki-client on console-ams.rpki-client.org