Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9148C7B/675208AE1D9311E2BCBDE5F608B02CD2/8F40C09ACCDB11EE9490B979C4F9AE02.roa
File: 8F40C09ACCDB11EE9490B979C4F9AE02.roa (raw, json)
Hash identifier: yiAnHDFzUwZD8NgEs572n3xyr3663E+/9a3ArADXBpc=
Subject key identifier: D8:7D:89:09:78:6D:E3:B9:BF:C1:C3:D0:60:AB:AA:40:B8:25:1D:2D
Certificate issuer: /CN=A9148C7B/serialNumber=17577F1E92EB33B2CDE6E489C0B9A99A2E02FDA3
Certificate serial: 3495
Authority key identifier: 17:57:7F:1E:92:EB:33:B2:CD:E6:E4:89:C0:B9:A9:9A:2E:02:FD:A3
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/F1d_HpLrM7LN5uSJwLmpmi4C_aM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9148C7B/675208AE1D9311E2BCBDE5F608B02CD2/8F40C09ACCDB11EE9490B979C4F9AE02.roa
Signing time: Tue 22 Oct 2024 14:50:58 +0000
ROA not before: Tue 22 Oct 2024 14:50:58 +0000
ROA not after: Tue 30 Dec 2025 00:00:00 +0000
asID: 38742
IP address blocks: 43.250.136.0/22 maxlen: 22
43.250.137.0/24 maxlen: 24
43.250.139.0/24 maxlen: 24
61.5.192.0/20 maxlen: 20
61.5.193.0/24 maxlen: 24
61.5.194.0/23 maxlen: 24
61.5.197.0/24 maxlen: 24
61.5.198.0/24 maxlen: 24
61.5.199.0/24 maxlen: 24
61.5.201.0/24 maxlen: 24
61.5.202.0/24 maxlen: 24
61.5.203.0/24 maxlen: 24
61.5.204.0/24 maxlen: 24
61.5.205.0/24 maxlen: 24
61.5.206.0/24 maxlen: 24
61.5.207.0/24 maxlen: 24
103.42.0.0/22 maxlen: 22
103.42.1.0/24 maxlen: 24
103.42.2.0/24 maxlen: 24
103.42.3.0/24 maxlen: 24
119.59.80.0/21 maxlen: 21
119.59.80.0/24 maxlen: 24
119.59.82.0/24 maxlen: 24
119.59.83.0/24 maxlen: 24
119.59.84.0/24 maxlen: 24
119.59.85.0/24 maxlen: 24
119.59.86.0/24 maxlen: 24
119.59.87.0/24 maxlen: 24
121.100.48.0/21 maxlen: 21
121.100.48.0/24 maxlen: 24
121.100.49.0/24 maxlen: 24
121.100.50.0/23 maxlen: 24
121.100.52.0/24 maxlen: 24
121.100.53.0/24 maxlen: 24
121.100.54.0/24 maxlen: 24
121.100.55.0/24 maxlen: 24
2400:e500::/32 maxlen: 32
2400:e500:1::/48 maxlen: 48
2400:e500:5::/48 maxlen: 48
2400:e500:d::/48 maxlen: 48
2400:e500:13::/48 maxlen: 48
2400:e500:23::/48 maxlen: 48
2400:e500:24::/48 maxlen: 48
2400:e500:2a::/48 maxlen: 48
2400:e500:2b::/48 maxlen: 48
2400:e500:30::/48 maxlen: 48
2400:e500:31::/48 maxlen: 48
2400:e500:32::/48 maxlen: 48
2400:e500:33::/48 maxlen: 48
2400:e500:34::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9148C7B/675208AE1D9311E2BCBDE5F608B02CD2/F1d_HpLrM7LN5uSJwLmpmi4C_aM.crl
rsync://rpki.apnic.net/member_repository/A9148C7B/675208AE1D9311E2BCBDE5F608B02CD2/F1d_HpLrM7LN5uSJwLmpmi4C_aM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/F1d_HpLrM7LN5uSJwLmpmi4C_aM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 29 Nov 2024 14:47:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13461 (0x3495)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9148C7B/serialNumber=17577F1E92EB33B2CDE6E489C0B9A99A2E02FDA3
Validity
Not Before: Oct 22 14:50:58 2024 GMT
Not After : Dec 30 00:00:00 2025 GMT
Subject: CN=6717bbd2-a8a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:75:8d:57:88:27:65:a5:2d:04:91:cc:07:cf:
f8:70:4f:4e:eb:85:c8:2e:56:4c:b7:f6:3d:48:e9:
8d:5f:2e:72:5c:35:3d:54:17:40:92:99:b9:98:4e:
af:c6:27:de:0a:69:9f:c2:7c:6a:94:c0:e2:94:5c:
d7:7d:2a:8b:b3:95:d9:b2:7c:62:5f:bd:6b:d6:eb:
e0:8a:2b:23:00:2e:c4:3c:2a:c1:32:ee:4b:7e:27:
e9:19:00:75:2e:33:86:b1:8f:4c:59:af:ac:34:d2:
ec:19:99:a8:59:81:e5:14:c9:a1:72:e7:24:0c:8f:
a6:46:87:ee:33:ca:ec:cf:42:4e:72:3c:be:de:ff:
c3:97:15:1f:08:ce:a0:8a:7f:c6:17:2c:b9:80:d0:
51:aa:41:5e:bc:49:ae:56:91:de:a5:41:6f:92:ef:
05:97:e3:02:5e:fc:c3:84:6e:5f:95:a7:a3:5f:82:
6b:27:14:b1:f6:8d:45:41:27:97:cd:04:e7:43:5e:
0b:af:47:e9:3c:97:13:4c:20:f1:10:fc:05:23:b5:
90:9f:90:1a:8d:bf:a8:e3:c0:6a:bc:0f:04:db:d7:
8a:08:8c:1f:02:44:86:6e:05:dd:38:70:25:c8:37:
7e:70:4c:96:ea:4d:ca:79:75:72:12:b3:de:9e:a1:
02:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:7D:89:09:78:6D:E3:B9:BF:C1:C3:D0:60:AB:AA:40:B8:25:1D:2D
X509v3 Authority Key Identifier:
keyid:17:57:7F:1E:92:EB:33:B2:CD:E6:E4:89:C0:B9:A9:9A:2E:02:FD:A3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9148C7B/675208AE1D9311E2BCBDE5F608B02CD2/F1d_HpLrM7LN5uSJwLmpmi4C_aM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/F1d_HpLrM7LN5uSJwLmpmi4C_aM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9148C7B/675208AE1D9311E2BCBDE5F608B02CD2/8F40C09ACCDB11EE9490B979C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
43.250.136.0/22
61.5.192.0/20
103.42.0.0/22
119.59.80.0/21
121.100.48.0/21
IPv6:
2400:e500::/32
Signature Algorithm: sha256WithRSAEncryption
31:7b:97:f6:7e:27:fa:53:54:e2:b6:92:e7:92:15:44:e0:3a:
28:89:d8:bc:5c:29:32:97:52:5f:de:3e:af:e3:61:fb:d4:a2:
c1:d0:03:a9:3d:10:4f:70:22:13:36:89:f8:d4:16:5a:ad:f2:
0b:19:f0:91:0f:a7:e5:9e:1e:7d:fe:ee:95:ea:52:38:84:a6:
d9:4f:7c:c9:0e:16:8b:47:73:cb:87:7a:cf:b7:cd:25:09:6c:
5c:99:9f:38:8f:8d:45:10:f1:ed:7e:c2:b5:03:62:c3:1b:f8:
eb:60:4b:f9:71:07:08:4e:ef:87:c4:61:8e:6a:83:8e:db:f8:
cb:b7:8c:b6:19:f0:da:36:4d:af:b2:b8:20:41:c2:12:35:e0:
93:d8:9e:be:17:2c:be:e6:46:b4:fb:50:c9:45:b6:9b:67:5f:
52:27:09:ef:da:5e:45:da:83:39:52:54:f7:c3:44:9a:35:15:
81:9b:43:d2:57:74:5c:fe:ca:2b:17:82:33:a8:64:d3:a0:fc:
60:80:a2:64:ac:c2:fc:7c:b9:7b:db:ee:d0:db:08:4c:de:b5:
62:98:27:80:f0:90:30:fd:1a:64:b8:27:5c:7a:55:75:21:3c:
9b:95:5f:8b:2d:4a:cb:a5:5d:d3:20:fb:77:5f:77:37:0d:a4:
69:80:db:df
-----BEGIN CERTIFICATE-----
MIIFmDCCBICgAwIBAgICNJUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NDhDN0IxMTAvBgNVBAUTKDE3NTc3RjFFOTJFQjMzQjJDREU2RTQ4OUMwQjlBOTlB
MkUwMkZEQTMwHhcNMjQxMDIyMTQ1MDU4WhcNMjUxMjMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02NzE3YmJkMi1hOGExMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA3nWNV4gnZaUtBJHMB8/4cE9O64XILlZMt/Y9SOmNXy5yXDU9VBdAkpm5mE6v
xifeCmmfwnxqlMDilFzXfSqLs5XZsnxiX71r1uvgiisjAC7EPCrBMu5LfifpGQB1
LjOGsY9MWa+sNNLsGZmoWYHlFMmhcuckDI+mRofuM8rsz0JOcjy+3v/DlxUfCM6g
in/GFyy5gNBRqkFevEmuVpHepUFvku8Fl+MCXvzDhG5flaejX4JrJxSx9o1FQSeX
zQTnQ14Lr0fpPJcTTCDxEPwFI7WQn5Aajb+o48BqvA8E29eKCIwfAkSGbgXdOHAl
yDd+cEyW6k3KeXVyErPenqEC+QIDAQABo4ICvDCCArgwHQYDVR0OBBYEFNh9iQl4
beO5v8HD0GCrqkC4JR0tMB8GA1UdIwQYMBaAFBdXfx6S6zOyzebkicC5qZouAv2j
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0OEM3Qi82NzUyMDhBRTFE
OTMxMUUyQkNCREU1RjYwOEIwMkNEMi9GMWRfSHBMck03TE41dVNKd0xtcG1pNENf
YU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0YxZF9IcExyTTdMTjV1U0p3TG1wbWk0Q19hTS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
NDhDN0IvNjc1MjA4QUUxRDkzMTFFMkJDQkRFNUY2MDhCMDJDRDIvOEY0MEMwOUFD
Q0RCMTFFRTk0OTBCOTc5QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwRgYIKwYBBQUHAQcBAf8E
NzA1MCQEAgABMB4DBAIr+ogDBAQ9BcADBAJnKgADBAN3O1ADBAN5ZDAwDQQCAAIw
BwMFACQA5QAwDQYJKoZIhvcNAQELBQADggEBADF7l/Z+J/pTVOK2kueSFUTgOiiJ
2LxcKTKXUl/ePq/jYfvUosHQA6k9EE9wIhM2ifjUFlqt8gsZ8JEPp+WeHn3+7pXq
UjiEptlPfMkOFotHc8uHes+3zSUJbFyZnziPjUUQ8e1+wrUDYsMb+OtgS/lxBwhO
74fEYY5qg47b+Mu3jLYZ8No2Ta+yuCBBwhI14JPYnr4XLL7mRrT7UMlFtptnX1In
Ce/aXkXagzlSVPfDRJo1FYGbQ9JXdFz+yisXgjOoZNOg/GCAomSswvx8uXvb7tDb
CEzetWKYJ4DwkDD9GmS4J1x6VXUhPJuVX4stSsulXdMg+3dfdzcNpGmA298=
-----END CERTIFICATE-----
Generated at Fri Nov 22 17:55:44 2024 by rpki-client on console-fra.rpki-client.org