Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A913F6DE/87AAE74A1B3A11EAB4CDC659C4F9AE02/8C1F014E911411EF84279055C4F9AE02.roa
File: 8C1F014E911411EF84279055C4F9AE02.roa (raw, json)
Hash identifier: TMxfkcL9ayQa9n8D6d2gJxA8lVX/wJpwW1/0Wnd0x6g=
Subject key identifier: F4:13:67:91:FD:BA:BD:7E:7E:53:80:91:53:8B:6F:1B:C9:C5:87:DA
Certificate issuer: /CN=A913F6DE/serialNumber=5D428682E89E9FED962BE9C4432B34C45E2E09C9
Certificate serial: 0B9B
Authority key identifier: 5D:42:86:82:E8:9E:9F:ED:96:2B:E9:C4:43:2B:34:C4:5E:2E:09:C9
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XUKGguien-2WK-nEQys0xF4uCck.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A913F6DE/87AAE74A1B3A11EAB4CDC659C4F9AE02/8C1F014E911411EF84279055C4F9AE02.roa
Signing time: Mon 28 Oct 2024 07:43:25 +0000
ROA not before: Mon 28 Oct 2024 07:43:25 +0000
ROA not after: Tue 30 Sep 2025 00:00:00 +0000
asID: 131464
IP address blocks: 103.69.148.0/22 maxlen: 22
103.69.148.0/23 maxlen: 23
103.69.148.0/24 maxlen: 24
103.69.149.0/24 maxlen: 24
103.69.150.0/23 maxlen: 23
103.69.150.0/24 maxlen: 24
103.69.151.0/24 maxlen: 24
180.149.232.0/22 maxlen: 22
180.149.232.0/23 maxlen: 23
180.149.232.0/24 maxlen: 24
180.149.233.0/24 maxlen: 24
180.149.234.0/23 maxlen: 23
180.149.234.0/24 maxlen: 24
180.149.235.0/24 maxlen: 24
2405:f280::/32 maxlen: 32
2405:f280::/33 maxlen: 33
2405:f280::/34 maxlen: 34
2405:f280::/35 maxlen: 35
2405:f280::/36 maxlen: 36
2405:f280:1::/48 maxlen: 48
2405:f280:3::/48 maxlen: 48
2405:f280:14::/48 maxlen: 48
2405:f280:34::/48 maxlen: 48
2405:f280:5c::/48 maxlen: 48
2405:f280:1000::/36 maxlen: 36
2405:f280:1000::/48 maxlen: 48
2405:f280:1001::/48 maxlen: 48
2405:f280:1038::/48 maxlen: 48
2405:f280:1039::/48 maxlen: 48
2405:f280:2000::/35 maxlen: 35
2405:f280:2000::/36 maxlen: 36
2405:f280:3000::/36 maxlen: 36
2405:f280:4000::/34 maxlen: 34
2405:f280:4000::/35 maxlen: 35
2405:f280:4000::/36 maxlen: 36
2405:f280:5000::/36 maxlen: 36
2405:f280:6000::/35 maxlen: 35
2405:f280:6000::/36 maxlen: 36
2405:f280:7000::/36 maxlen: 36
2405:f280:8000::/33 maxlen: 33
2405:f280:8000::/34 maxlen: 34
2405:f280:8000::/35 maxlen: 35
2405:f280:8000::/36 maxlen: 36
2405:f280:9000::/36 maxlen: 36
2405:f280:9000::/48 maxlen: 48
2405:f280:9001::/48 maxlen: 48
2405:f280:a000::/35 maxlen: 35
2405:f280:a000::/36 maxlen: 36
2405:f280:b000::/36 maxlen: 36
2405:f280:c000::/34 maxlen: 34
2405:f280:c000::/35 maxlen: 35
2405:f280:c000::/36 maxlen: 36
2405:f280:d000::/36 maxlen: 36
2405:f280:e000::/35 maxlen: 35
2405:f280:e000::/36 maxlen: 36
2405:f280:e000::/48 maxlen: 48
2405:f280:e004::/48 maxlen: 48
2405:f280:e005::/48 maxlen: 48
2405:f280:e006::/48 maxlen: 48
2405:f280:e007::/48 maxlen: 48
2405:f280:e008::/48 maxlen: 48
2405:f280:e009::/48 maxlen: 48
2405:f280:e00a::/48 maxlen: 48
2405:f280:e00b::/48 maxlen: 48
2405:f280:e00c::/48 maxlen: 48
2405:f280:e00d::/48 maxlen: 48
2405:f280:e034::/48 maxlen: 48
2405:f280:ef00::/48 maxlen: 48
2405:f280:f000::/36 maxlen: 36
2405:f280:ff00::/40 maxlen: 40
2405:f280:ff00::/48 maxlen: 48
2405:f280:ff01::/48 maxlen: 48
2405:f280:ff02::/48 maxlen: 48
2405:f280:ff03::/48 maxlen: 48
2405:f280:ff04::/48 maxlen: 48
2405:f280:ff05::/48 maxlen: 48
2405:f280:ff06::/48 maxlen: 48
2405:f280:ff07::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A913F6DE/87AAE74A1B3A11EAB4CDC659C4F9AE02/XUKGguien-2WK-nEQys0xF4uCck.crl
rsync://rpki.apnic.net/member_repository/A913F6DE/87AAE74A1B3A11EAB4CDC659C4F9AE02/XUKGguien-2WK-nEQys0xF4uCck.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XUKGguien-2WK-nEQys0xF4uCck.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 27 Nov 2024 18:42:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2971 (0xb9b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A913F6DE/serialNumber=5D428682E89E9FED962BE9C4432B34C45E2E09C9
Validity
Not Before: Oct 28 07:43:25 2024 GMT
Not After : Sep 30 00:00:00 2025 GMT
Subject: CN=671f409d-c6f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:b1:33:69:63:f7:43:dd:0f:ec:42:7f:1d:1f:
87:59:d6:de:fa:63:91:93:cd:9c:2d:ad:4a:8d:2a:
fa:dc:b9:08:6c:e4:0e:17:b1:6c:54:e4:ed:cb:4f:
fd:80:62:2b:e7:22:7b:6b:21:19:99:2d:75:08:0e:
a8:ec:1b:b4:f1:86:df:15:ff:e4:e1:b5:78:67:08:
d8:33:11:90:1b:0c:51:ad:5e:cf:d9:42:64:49:fa:
0d:ca:da:8f:e3:74:1d:d2:87:e1:2b:e9:c5:4f:33:
8e:99:ee:b5:a0:cb:d4:c9:10:db:d7:a9:8c:23:4a:
f5:55:5f:67:33:14:95:7c:08:47:e3:c7:db:41:57:
c5:78:19:f6:31:31:a2:6b:67:07:b5:58:27:d2:ca:
f8:b6:aa:99:13:2d:8c:74:da:10:06:81:0d:6a:13:
37:71:16:8d:8b:e2:42:c3:9c:36:58:ce:f6:74:59:
17:33:e9:45:fd:13:67:be:ab:7c:2f:15:cb:a4:1e:
b7:b8:64:c5:50:d6:48:30:27:49:0d:2c:18:c2:74:
29:5f:0d:d7:09:44:be:8e:37:be:bd:b8:1a:f3:07:
87:78:ac:64:88:32:73:bc:6b:f0:44:ba:ec:7a:c3:
2c:4a:20:89:72:bc:aa:ed:c2:54:fb:09:c3:06:fb:
01:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:13:67:91:FD:BA:BD:7E:7E:53:80:91:53:8B:6F:1B:C9:C5:87:DA
X509v3 Authority Key Identifier:
keyid:5D:42:86:82:E8:9E:9F:ED:96:2B:E9:C4:43:2B:34:C4:5E:2E:09:C9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A913F6DE/87AAE74A1B3A11EAB4CDC659C4F9AE02/XUKGguien-2WK-nEQys0xF4uCck.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XUKGguien-2WK-nEQys0xF4uCck.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913F6DE/87AAE74A1B3A11EAB4CDC659C4F9AE02/8C1F014E911411EF84279055C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.69.148.0/22
180.149.232.0/22
IPv6:
2405:f280::/32
Signature Algorithm: sha256WithRSAEncryption
90:2e:44:e5:a3:5d:56:4f:f2:c2:19:af:7f:3f:8d:a2:cc:94:
e0:ae:2c:2e:f0:73:b5:91:1e:3e:cd:2c:fa:d3:44:d9:2c:4a:
7f:ce:38:0f:f4:b9:8f:7a:9b:7b:3f:ac:a6:48:18:e8:70:83:
7f:1e:4d:f0:7a:8c:dc:cf:fe:3b:a9:28:f4:5f:ec:2b:5b:2f:
ec:c2:30:4e:43:2a:4c:bb:c8:53:27:dd:3b:41:5d:fa:af:f6:
ce:33:75:2f:57:83:53:64:91:6f:70:c8:ed:64:82:f7:90:a5:
d1:d8:ed:74:0a:1d:78:25:92:3e:29:04:99:99:1e:8a:f4:35:
67:73:85:f6:c3:e0:4c:13:e6:c8:f9:91:f6:8f:6d:d8:7c:d0:
eb:8c:cf:ec:d7:43:23:35:68:b3:91:ac:2a:e9:de:4e:20:d7:
4a:8b:c2:e4:b8:fc:92:43:7a:ba:c6:4b:27:b4:19:c8:6e:08:
2e:83:1f:04:9a:ff:2e:e0:39:54:39:30:a7:eb:e6:d8:d3:db:
46:70:3f:79:08:a4:46:5f:da:1a:fd:e2:55:a8:8a:bd:e3:f2:
7c:a6:e7:56:14:80:dc:6c:78:29:30:07:f6:6d:c8:91:06:f6:
1e:7b:d1:fe:f8:d9:5c:31:03:b6:59:bc:b4:8e:eb:33:55:d0:
f2:20:4f:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----