Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9134172/597612649E4D11EA9C23AF1FC4F9AE02/B6E538AED32011EB841D3A29C4F9AE02.roa
File: B6E538AED32011EB841D3A29C4F9AE02.roa (raw, json)
Hash identifier: O7vdAFT+talgOjCDVKxxO/R7800s84ZqUbBTcQKbF3E=
Subject key identifier: 46:03:B9:28:15:C6:96:28:0B:D8:20:C1:97:8E:EC:33:B9:DF:1F:51
Certificate issuer: /CN=A9134172/serialNumber=F45C0F4F467CE1576E5EE9E41E5576F0348C46A7
Certificate serial: 091D
Authority key identifier: F4:5C:0F:4F:46:7C:E1:57:6E:5E:E9:E4:1E:55:76:F0:34:8C:46:A7
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9FwPT0Z84VduXunkHlV28DSMRqc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9134172/597612649E4D11EA9C23AF1FC4F9AE02/B6E538AED32011EB841D3A29C4F9AE02.roa
Signing time: Thu 04 Apr 2024 22:00:37 +0000
ROA not before: Thu 04 Apr 2024 22:00:37 +0000
ROA not after: Wed 28 May 2025 00:00:00 +0000
asID: 9908
IP address blocks: 61.10.0.0/16 maxlen: 16
61.10.0.0/17 maxlen: 17
61.10.0.0/18 maxlen: 20
61.10.64.0/18 maxlen: 18
61.10.64.0/19 maxlen: 20
61.10.96.0/19 maxlen: 20
61.10.128.0/17 maxlen: 20
61.15.0.0/16 maxlen: 16
61.15.0.0/17 maxlen: 20
61.15.128.0/17 maxlen: 20
61.18.0.0/16 maxlen: 20
125.59.0.0/16 maxlen: 20
203.83.64.0/18 maxlen: 18
203.168.160.0/20 maxlen: 20
203.168.176.0/20 maxlen: 20
203.168.192.0/18 maxlen: 20
218.252.0.0/16 maxlen: 16
218.252.0.0/17 maxlen: 20
218.252.128.0/17 maxlen: 20
218.253.0.0/18 maxlen: 20
218.254.0.0/16 maxlen: 20
222.166.0.0/16 maxlen: 20
222.167.0.0/16 maxlen: 20
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9134172/597612649E4D11EA9C23AF1FC4F9AE02/9FwPT0Z84VduXunkHlV28DSMRqc.crl
rsync://rpki.apnic.net/member_repository/A9134172/597612649E4D11EA9C23AF1FC4F9AE02/9FwPT0Z84VduXunkHlV28DSMRqc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9FwPT0Z84VduXunkHlV28DSMRqc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 13 May 2024 21:43:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2333 (0x91d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9134172/serialNumber=F45C0F4F467CE1576E5EE9E41E5576F0348C46A7
Validity
Not Before: Apr 4 22:00:37 2024 GMT
Not After : May 28 00:00:00 2025 GMT
Subject: CN=660f2305-17dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:dd:3e:00:68:8d:4d:f3:18:8a:ae:75:6b:d3:
20:09:55:12:fe:34:95:dd:ed:fe:ca:9c:7e:2b:11:
9b:86:0b:88:76:46:b1:ce:9b:73:4d:0f:cb:30:eb:
53:a3:e1:e2:ac:c8:97:20:db:a0:73:b6:c7:87:e3:
01:dd:75:b8:a2:e3:7e:96:e2:ac:b5:42:9a:fc:cc:
58:27:b5:39:59:05:1c:d7:2d:8c:b7:5d:2a:23:ad:
b2:37:59:72:e0:43:00:0e:e3:a7:49:a2:e0:92:b9:
6e:f7:e6:e5:8f:7e:bd:2c:f6:fb:8a:02:33:a6:46:
7b:66:54:8c:0b:08:3e:39:b6:36:9c:2e:66:e2:cb:
95:99:d9:81:05:03:46:9b:12:f4:3d:dc:b5:a6:62:
01:6e:c4:86:63:65:18:d2:26:da:e0:26:52:c6:91:
51:df:bf:b7:7a:3d:1f:48:96:e5:4d:8a:76:a9:a9:
e3:48:fd:2d:39:8f:31:51:3e:d2:9b:97:94:ff:52:
2a:80:08:e2:29:f3:cb:03:e3:34:55:3a:1f:00:0e:
53:a6:a5:53:bf:96:5a:17:67:66:8b:07:31:e2:1e:
9c:53:67:1c:99:86:06:9d:99:6d:22:b7:d6:10:b8:
93:16:23:4d:6b:50:10:cf:a2:4f:ee:8f:24:90:3e:
ad:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:03:B9:28:15:C6:96:28:0B:D8:20:C1:97:8E:EC:33:B9:DF:1F:51
X509v3 Authority Key Identifier:
keyid:F4:5C:0F:4F:46:7C:E1:57:6E:5E:E9:E4:1E:55:76:F0:34:8C:46:A7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9134172/597612649E4D11EA9C23AF1FC4F9AE02/9FwPT0Z84VduXunkHlV28DSMRqc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9FwPT0Z84VduXunkHlV28DSMRqc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9134172/597612649E4D11EA9C23AF1FC4F9AE02/B6E538AED32011EB841D3A29C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
61.10.0.0/16
61.15.0.0/16
61.18.0.0/16
125.59.0.0/16
203.83.64.0/18
203.168.160.0-203.168.255.255
218.252.0.0-218.253.63.255
218.254.0.0/16
222.166.0.0/15
Signature Algorithm: sha256WithRSAEncryption
19:c0:d8:c7:be:95:a2:c1:25:3c:85:e0:5f:10:e8:ec:e9:43:
62:46:b1:c1:58:4c:f7:06:22:29:82:51:e7:3c:ab:4a:cc:0e:
25:9f:0b:8a:40:fd:6d:fd:7c:4e:9f:77:40:ec:98:05:26:89:
db:f6:f3:5a:80:ba:70:ac:5d:1e:51:68:8c:fa:c6:73:69:4e:
2d:1c:c3:c6:9f:6b:7f:16:35:d6:dd:c6:47:87:38:c9:ec:fa:
2d:91:b8:81:70:80:2b:09:e4:a2:be:73:4f:9a:52:cb:51:2f:
a3:0e:38:f7:a6:ca:ff:75:07:25:23:f3:36:49:d5:1d:f4:2b:
84:59:52:4d:d7:3d:b6:3a:7c:d9:4f:b1:71:86:0a:ac:9a:2d:
27:a6:0b:cf:ce:fa:99:4c:bd:40:0d:cf:b3:db:a3:b6:b2:ee:
d2:12:80:eb:f9:fb:50:7b:74:0d:e4:0a:bd:62:71:2b:0b:63:
76:b9:19:66:ea:d5:99:41:33:bc:d6:b5:5c:54:97:fd:fd:5b:
9b:b5:70:ec:7d:1b:67:c4:55:84:0a:59:65:15:6c:93:54:99:
2f:74:63:43:24:dc:d0:83:24:4f:18:5b:69:04:00:e3:aa:30:
3f:71:58:a9:67:7d:9b:d6:2b:4d:78:13:c5:35:ba:f3:51:1a:
13:3f:35:89
-----BEGIN CERTIFICATE-----
MIIFqTCCBJGgAwIBAgICCR0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MzQxNzIxMTAvBgNVBAUTKEY0NUMwRjRGNDY3Q0UxNTc2RTVFRTlFNDFFNTU3NkYw
MzQ4QzQ2QTcwHhcNMjQwNDA0MjIwMDM3WhcNMjUwNTI4MDAwMDAwWjAYMRYwFAYD
VQQDEw02NjBmMjMwNS0xN2RjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAn90+AGiNTfMYiq51a9MgCVUS/jSV3e3+ypx+KxGbhguIdkaxzptzTQ/LMOtT
o+HirMiXINugc7bHh+MB3XW4ouN+luKstUKa/MxYJ7U5WQUc1y2Mt10qI62yN1ly
4EMADuOnSaLgkrlu9+blj369LPb7igIzpkZ7ZlSMCwg+ObY2nC5m4suVmdmBBQNG
mxL0Pdy1pmIBbsSGY2UY0iba4CZSxpFR37+3ej0fSJblTYp2qanjSP0tOY8xUT7S
m5eU/1IqgAjiKfPLA+M0VTofAA5TpqVTv5ZaF2dmiwcx4h6cU2ccmYYGnZltIrfW
ELiTFiNNa1AQz6JP7o8kkD6teQIDAQABo4ICzTCCAskwHQYDVR0OBBYEFEYDuSgV
xpYoC9ggwZeO7DO53x9RMB8GA1UdIwQYMBaAFPRcD09GfOFXbl7p5B5VdvA0jEan
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzNDE3Mi81OTc2MTI2NDlF
NEQxMUVBOUMyM0FGMUZDNEY5QUUwMi85RndQVDBaODRWZHVYdW5rSGxWMjhEU01S
cWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzlGd1BUMFo4NFZkdVh1bmtIbFYyOERTTVJxYy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
MzQxNzIvNTk3NjEyNjQ5RTREMTFFQTlDMjNBRjFGQzRGOUFFMDIvQjZFNTM4QUVE
MzIwMTFFQjg0MUQzQTI5QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwVwYIKwYBBQUHAQcBAf8E
SDBGMEQEAgABMD4DAwA9CgMDAD0PAwMAPRIDAwB9OwMEBstTQDALAwQFy6igAwMA
y6gwCwMDAtr8AwQG2v0AAwMA2v4DAwHepjANBgkqhkiG9w0BAQsFAAOCAQEAGcDY
x76VosElPIXgXxDo7OlDYkaxwVhM9wYiKYJR5zyrSswOJZ8LikD9bf18Tp93QOyY
BSaJ2/bzWoC6cKxdHlFojPrGc2lOLRzDxp9rfxY11t3GR4c4yez6LZG4gXCAKwnk
or5zT5pSy1Evow4496bK/3UHJSPzNknVHfQrhFlSTdc9tjp82U+xcYYKrJotJ6YL
z876mUy9QA3Ps9ujtrLu0hKA6/n7UHt0DeQKvWJxKwtjdrkZZurVmUEzvNa1XFSX
/f1bm7Vw7H0bZ8RVhApZZRVsk1SZL3RjQyTc0IMkTxhbaQQA46owP3FYqWd9m9Yr
TXgTxTW681EaEz81iQ==
-----END CERTIFICATE-----
Generated at Mon May 6 23:05:37 2024 by rpki-client on console-fra.rpki-client.org