Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9144F59/44A6FF6400CB11E8BEB1EF10C4F9AE02/CB91C8D2514D11EEADBDDC4DC4F9AE02.roa
File: CB91C8D2514D11EEADBDDC4DC4F9AE02.roa (raw, json)
Hash identifier: bTTt1DvpxuFx5YZflQWK2Y/CXtgXfthc+RWEVSQ2v+c=
Subject key identifier: 00:D0:57:C7:BA:A5:C1:5B:0C:A8:C5:7C:11:C7:E4:BD:31:B3:E4:43
Certificate issuer: /CN=A9144F59/serialNumber=26743B1E4E0E90A19B240C0936979CA237688DF2
Certificate serial: 15AE
Authority key identifier: 26:74:3B:1E:4E:0E:90:A1:9B:24:0C:09:36:97:9C:A2:37:68:8D:F2
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/JnQ7Hk4OkKGbJAwJNpecojdojfI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9144F59/44A6FF6400CB11E8BEB1EF10C4F9AE02/CB91C8D2514D11EEADBDDC4DC4F9AE02.roa
Signing time: Sat 02 Dec 2023 17:24:39 +0000
ROA not before: Sat 02 Dec 2023 17:24:39 +0000
ROA not after: Fri 31 Jan 2025 00:00:00 +0000
asID: 55821
IP address blocks: 146.88.64.0/20 maxlen: 20
146.88.64.0/22 maxlen: 22
146.88.64.0/24 maxlen: 24
146.88.65.0/24 maxlen: 24
146.88.66.0/24 maxlen: 24
146.88.67.0/24 maxlen: 24
146.88.68.0/22 maxlen: 22
146.88.68.0/24 maxlen: 24
146.88.69.0/24 maxlen: 24
146.88.70.0/24 maxlen: 24
146.88.71.0/24 maxlen: 24
146.88.72.0/22 maxlen: 22
146.88.72.0/24 maxlen: 24
146.88.73.0/24 maxlen: 24
146.88.74.0/24 maxlen: 24
146.88.75.0/24 maxlen: 24
146.88.76.0/22 maxlen: 22
146.88.76.0/24 maxlen: 24
146.88.77.0/24 maxlen: 24
146.88.78.0/24 maxlen: 24
146.88.79.0/24 maxlen: 24
155.137.64.0/18 maxlen: 22
155.137.94.0/23 maxlen: 23
155.137.104.0/21 maxlen: 23
155.137.115.0/24 maxlen: 24
209.141.0.0/20 maxlen: 20
209.141.0.0/22 maxlen: 22
209.141.4.0/23 maxlen: 23
209.141.5.0/24 maxlen: 24
209.141.6.0/23 maxlen: 23
209.141.8.0/23 maxlen: 23
209.141.10.0/23 maxlen: 24
209.141.12.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9144F59/44A6FF6400CB11E8BEB1EF10C4F9AE02/JnQ7Hk4OkKGbJAwJNpecojdojfI.crl
rsync://rpki.apnic.net/member_repository/A9144F59/44A6FF6400CB11E8BEB1EF10C4F9AE02/JnQ7Hk4OkKGbJAwJNpecojdojfI.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/JnQ7Hk4OkKGbJAwJNpecojdojfI.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 23 May 2024 15:56:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5550 (0x15ae)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9144F59/serialNumber=26743B1E4E0E90A19B240C0936979CA237688DF2
Validity
Not Before: Dec 2 17:24:39 2023 GMT
Not After : Jan 31 00:00:00 2025 GMT
Subject: CN=656b6857-66dd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:d7:81:ea:9f:9f:e4:7a:c8:08:b7:56:c5:a5:
d6:2a:41:80:53:8f:81:c9:13:78:4d:75:32:e2:be:
c9:e3:8d:04:cb:5b:1e:32:2a:54:95:48:7e:36:cf:
04:aa:58:4f:4d:b7:26:e3:2d:9b:2e:f0:fa:9f:31:
f4:3b:72:4c:e9:39:b6:cf:2a:fd:a9:eb:97:e2:af:
d0:7e:d0:4b:79:23:57:18:6c:de:41:76:f8:74:91:
9a:2f:0a:75:bc:a1:3e:fd:28:80:41:4e:3d:4a:35:
9a:a0:7e:b7:86:6a:17:e4:b7:0a:f9:5b:2a:aa:67:
46:0a:f1:14:60:d5:0d:11:dc:a9:79:c8:a6:9e:82:
e8:bb:ce:c0:0f:5e:4a:bf:e4:f8:cf:40:d6:c8:62:
45:4d:78:43:2a:2c:6a:36:d3:e5:3b:74:1d:0e:21:
bb:98:f0:ee:18:cc:88:e1:69:1d:07:9d:14:88:46:
11:98:37:ce:7c:b2:89:96:ab:d1:43:13:82:b9:d7:
c1:33:fe:33:da:81:e7:34:48:84:7c:46:4f:61:0e:
46:5b:7f:71:83:ae:a8:95:5f:ea:78:ee:bc:cf:84:
2c:84:c9:ae:25:bb:5c:5f:00:0d:22:de:ad:88:13:
26:26:66:94:a4:98:69:e2:7f:c5:d7:83:09:43:98:
81:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:D0:57:C7:BA:A5:C1:5B:0C:A8:C5:7C:11:C7:E4:BD:31:B3:E4:43
X509v3 Authority Key Identifier:
keyid:26:74:3B:1E:4E:0E:90:A1:9B:24:0C:09:36:97:9C:A2:37:68:8D:F2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9144F59/44A6FF6400CB11E8BEB1EF10C4F9AE02/JnQ7Hk4OkKGbJAwJNpecojdojfI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/JnQ7Hk4OkKGbJAwJNpecojdojfI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9144F59/44A6FF6400CB11E8BEB1EF10C4F9AE02/CB91C8D2514D11EEADBDDC4DC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
146.88.64.0/20
155.137.64.0/18
209.141.0.0/20
Signature Algorithm: sha256WithRSAEncryption
59:00:3a:c2:bf:f9:4b:5b:a5:2d:4f:a8:db:64:a3:94:af:8b:
40:33:64:ea:76:17:0b:27:50:b4:c2:fa:cf:ab:5c:29:67:5e:
ff:fc:b4:59:14:78:ad:73:cc:6e:46:07:03:fb:39:2f:31:11:
af:86:67:42:a0:0b:2c:27:c4:1b:c5:6d:cd:63:95:7b:73:b2:
08:60:d5:76:e1:57:6a:32:3e:41:6a:ad:91:38:0b:d8:81:2a:
db:b4:91:e0:d4:18:c2:5d:30:1b:a2:a7:e4:99:6d:9b:bc:46:
d5:78:59:0e:e4:29:02:7e:c8:36:58:22:9a:c3:b5:42:c4:62:
dc:4a:ce:5f:f4:58:ba:e3:e6:2a:f9:38:32:a9:17:6c:fa:cb:
6b:61:14:38:c9:ff:4a:17:20:b7:c7:0c:4f:e9:c2:18:f0:48:
d2:0f:eb:31:b5:fd:ec:43:db:07:66:a2:26:66:64:3b:51:f1:
21:28:1c:21:68:6c:4f:1e:3c:65:3c:09:71:ec:84:ab:4f:ff:
b3:a3:b1:fe:a4:ac:61:26:d1:c0:0c:91:ae:d9:80:da:5e:3b:
11:33:e0:5d:07:33:a2:a4:dd:61:d5:c7:5a:bd:d2:06:e2:2b:
7c:31:78:85:81:bf:1b:79:49:cc:90:27:05:bb:c0:10:9b:8b:
b5:ec:86:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 16 20:25:41 2024 by rpki-client on console-ams.rpki-client.org