Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9148C7B/675208AE1D9311E2BCBDE5F608B02CD2/8F40C09ACCDB11EE9490B979C4F9AE02.roa
File: 8F40C09ACCDB11EE9490B979C4F9AE02.roa (raw, json)
Hash identifier: UGmd8QELWsu1xZPbv3EbMKtVWXhurjRGgVQ5D223B4s=
Subject key identifier: 68:38:05:79:36:4F:E6:AA:D7:3B:5B:52:AD:07:3B:5B:97:C5:64:FB
Certificate issuer: /CN=A9148C7B/serialNumber=17577F1E92EB33B2CDE6E489C0B9A99A2E02FDA3
Certificate serial: 3407
Authority key identifier: 17:57:7F:1E:92:EB:33:B2:CD:E6:E4:89:C0:B9:A9:9A:2E:02:FD:A3
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/F1d_HpLrM7LN5uSJwLmpmi4C_aM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9148C7B/675208AE1D9311E2BCBDE5F608B02CD2/8F40C09ACCDB11EE9490B979C4F9AE02.roa
Signing time: Fri 16 Feb 2024 14:56:27 +0000
ROA not before: Fri 16 Feb 2024 14:56:27 +0000
ROA not after: Mon 30 Dec 2024 00:00:00 +0000
asID: 38742
IP address blocks: 43.250.136.0/22 maxlen: 22
43.250.137.0/24 maxlen: 24
43.250.139.0/24 maxlen: 24
61.5.192.0/20 maxlen: 20
61.5.193.0/24 maxlen: 24
61.5.194.0/23 maxlen: 24
61.5.197.0/24 maxlen: 24
61.5.198.0/24 maxlen: 24
61.5.199.0/24 maxlen: 24
61.5.201.0/24 maxlen: 24
61.5.202.0/24 maxlen: 24
61.5.203.0/24 maxlen: 24
61.5.204.0/24 maxlen: 24
61.5.205.0/24 maxlen: 24
61.5.206.0/24 maxlen: 24
61.5.207.0/24 maxlen: 24
103.42.0.0/22 maxlen: 22
103.42.1.0/24 maxlen: 24
103.42.2.0/24 maxlen: 24
103.42.3.0/24 maxlen: 24
119.59.80.0/21 maxlen: 21
119.59.80.0/24 maxlen: 24
119.59.82.0/24 maxlen: 24
119.59.83.0/24 maxlen: 24
119.59.84.0/24 maxlen: 24
119.59.85.0/24 maxlen: 24
119.59.86.0/24 maxlen: 24
119.59.87.0/24 maxlen: 24
121.100.48.0/21 maxlen: 21
121.100.48.0/24 maxlen: 24
121.100.49.0/24 maxlen: 24
121.100.50.0/23 maxlen: 24
121.100.52.0/24 maxlen: 24
121.100.53.0/24 maxlen: 24
121.100.54.0/24 maxlen: 24
121.100.55.0/24 maxlen: 24
2400:e500::/32 maxlen: 32
2400:e500:1::/48 maxlen: 48
2400:e500:5::/48 maxlen: 48
2400:e500:d::/48 maxlen: 48
2400:e500:13::/48 maxlen: 48
2400:e500:23::/48 maxlen: 48
2400:e500:24::/48 maxlen: 48
2400:e500:2a::/48 maxlen: 48
2400:e500:2b::/48 maxlen: 48
2400:e500:30::/48 maxlen: 48
2400:e500:31::/48 maxlen: 48
2400:e500:32::/48 maxlen: 48
2400:e500:33::/48 maxlen: 48
2400:e500:34::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9148C7B/675208AE1D9311E2BCBDE5F608B02CD2/F1d_HpLrM7LN5uSJwLmpmi4C_aM.crl
rsync://rpki.apnic.net/member_repository/A9148C7B/675208AE1D9311E2BCBDE5F608B02CD2/F1d_HpLrM7LN5uSJwLmpmi4C_aM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/F1d_HpLrM7LN5uSJwLmpmi4C_aM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 23 May 2024 14:52:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13319 (0x3407)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9148C7B/serialNumber=17577F1E92EB33B2CDE6E489C0B9A99A2E02FDA3
Validity
Not Before: Feb 16 14:56:27 2024 GMT
Not After : Dec 30 00:00:00 2024 GMT
Subject: CN=65cf779b-3699
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:ca:c6:25:75:ce:05:7b:bb:29:89:e6:78:1d:
ba:f4:32:44:0e:5c:e2:e9:a8:f8:9d:d2:28:12:1c:
bb:d5:f9:4d:5f:ca:eb:74:3c:de:e9:f8:87:20:61:
45:73:42:48:23:78:ab:64:a2:14:bf:a8:b5:5a:3e:
60:a7:b0:f3:5c:16:95:7f:e9:2b:e8:08:de:0b:b2:
b2:72:b8:a5:d9:ef:da:31:5f:9b:54:34:11:81:64:
6b:b4:7d:2f:7b:6e:1a:49:a6:67:cd:2a:48:08:1d:
f1:7c:10:01:5f:7b:f3:8f:00:0c:68:e8:58:da:81:
23:08:cc:e2:57:a7:b2:be:06:ef:06:c9:11:5c:6f:
bf:f6:9d:a8:50:0f:74:54:71:87:a8:67:a8:96:a4:
42:64:c6:0c:65:e4:9c:f1:dc:f3:fb:a3:db:8e:23:
91:bd:cd:6d:c6:b9:ac:e1:9f:6f:9c:06:b2:60:1d:
2d:ca:de:cf:ae:bb:a9:c2:53:fb:bf:bc:8b:23:60:
f6:68:a7:4f:41:0f:58:ac:52:c5:e4:40:6f:ff:d0:
5f:e6:9c:6c:2c:a9:ea:57:54:17:0c:8c:ed:1f:29:
16:5a:0e:07:8f:6c:50:5c:d2:ce:e0:98:ad:2d:a9:
99:d5:ae:50:d9:d1:c7:f5:19:0f:f2:3f:ac:64:cf:
b9:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:38:05:79:36:4F:E6:AA:D7:3B:5B:52:AD:07:3B:5B:97:C5:64:FB
X509v3 Authority Key Identifier:
keyid:17:57:7F:1E:92:EB:33:B2:CD:E6:E4:89:C0:B9:A9:9A:2E:02:FD:A3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9148C7B/675208AE1D9311E2BCBDE5F608B02CD2/F1d_HpLrM7LN5uSJwLmpmi4C_aM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/F1d_HpLrM7LN5uSJwLmpmi4C_aM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9148C7B/675208AE1D9311E2BCBDE5F608B02CD2/8F40C09ACCDB11EE9490B979C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
43.250.136.0/22
61.5.192.0/20
103.42.0.0/22
119.59.80.0/21
121.100.48.0/21
IPv6:
2400:e500::/32
Signature Algorithm: sha256WithRSAEncryption
5d:e0:7b:e3:1e:c0:ce:5a:18:61:58:c3:ba:c5:8c:c4:49:d7:
f6:db:60:d2:f7:20:1b:ac:e2:10:37:7b:bf:6e:c7:9f:7f:a9:
56:bc:53:23:86:83:82:55:ba:7d:30:21:b9:32:68:3a:b5:13:
9f:67:f3:43:d4:61:e9:c8:41:65:1b:bc:28:92:e7:c4:1b:74:
de:0c:0f:76:94:e0:43:14:0f:41:fc:a5:21:8f:e8:98:60:0f:
ee:c5:c9:8e:1c:66:4e:68:0c:5a:aa:c1:7f:f0:49:61:12:c8:
f8:4e:3f:d2:ac:cf:b4:49:2b:e8:22:b6:07:82:21:56:c4:7d:
e2:e3:9c:81:38:cd:7c:cb:31:2c:e6:d1:f0:dd:8b:b3:42:6d:
fc:44:c6:ab:78:aa:5e:63:f4:e7:1b:c2:b9:dd:65:5a:f5:7e:
a0:7b:fd:9e:90:87:58:0f:29:5f:0a:32:53:ea:b0:30:05:74:
e7:cb:f2:f4:85:d4:97:ec:a3:86:c8:8d:f9:cb:99:b7:80:70:
fe:c2:16:9a:2a:b1:66:d0:19:dd:de:4e:26:d9:cd:6f:53:87:
38:6c:06:35:43:6b:c1:c8:ac:9c:c4:13:36:e4:2f:64:36:a7:
65:c5:2b:c3:10:c2:e4:16:bf:de:eb:db:eb:1e:64:c0:50:ab:
09:94:89:ee
-----BEGIN CERTIFICATE-----
MIIFmDCCBICgAwIBAgICNAcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NDhDN0IxMTAvBgNVBAUTKDE3NTc3RjFFOTJFQjMzQjJDREU2RTQ4OUMwQjlBOTlB
MkUwMkZEQTMwHhcNMjQwMjE2MTQ1NjI3WhcNMjQxMjMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02NWNmNzc5Yi0zNjk5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEApsrGJXXOBXu7KYnmeB269DJEDlzi6aj4ndIoEhy71flNX8rrdDze6fiHIGFF
c0JII3irZKIUv6i1Wj5gp7DzXBaVf+kr6AjeC7Kycril2e/aMV+bVDQRgWRrtH0v
e24aSaZnzSpICB3xfBABX3vzjwAMaOhY2oEjCMziV6eyvgbvBskRXG+/9p2oUA90
VHGHqGeolqRCZMYMZeSc8dzz+6PbjiORvc1txrms4Z9vnAayYB0tyt7PrrupwlP7
v7yLI2D2aKdPQQ9YrFLF5EBv/9Bf5pxsLKnqV1QXDIztHykWWg4Hj2xQXNLO4Jit
LamZ1a5Q2dHH9RkP8j+sZM+5lwIDAQABo4ICvDCCArgwHQYDVR0OBBYEFGg4BXk2
T+aq1ztbUq0HO1uXxWT7MB8GA1UdIwQYMBaAFBdXfx6S6zOyzebkicC5qZouAv2j
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0OEM3Qi82NzUyMDhBRTFE
OTMxMUUyQkNCREU1RjYwOEIwMkNEMi9GMWRfSHBMck03TE41dVNKd0xtcG1pNENf
YU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0YxZF9IcExyTTdMTjV1U0p3TG1wbWk0Q19hTS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
NDhDN0IvNjc1MjA4QUUxRDkzMTFFMkJDQkRFNUY2MDhCMDJDRDIvOEY0MEMwOUFD
Q0RCMTFFRTk0OTBCOTc5QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwRgYIKwYBBQUHAQcBAf8E
NzA1MCQEAgABMB4DBAIr+ogDBAQ9BcADBAJnKgADBAN3O1ADBAN5ZDAwDQQCAAIw
BwMFACQA5QAwDQYJKoZIhvcNAQELBQADggEBAF3ge+MewM5aGGFYw7rFjMRJ1/bb
YNL3IBus4hA3e79ux59/qVa8UyOGg4JVun0wIbkyaDq1E59n80PUYenIQWUbvCiS
58QbdN4MD3aU4EMUD0H8pSGP6JhgD+7FyY4cZk5oDFqqwX/wSWESyPhOP9Ksz7RJ
K+gitgeCIVbEfeLjnIE4zXzLMSzm0fDdi7NCbfxExqt4ql5j9OcbwrndZVr1fqB7
/Z6Qh1gPKV8KMlPqsDAFdOfL8vSF1Jfso4bIjfnLmbeAcP7CFpoqsWbQGd3eTibZ
zW9ThzhsBjVDa8HIrJzEEzbkL2Q2p2XFK8MQwuQWv97r2+seZMBQqwmUie4=
-----END CERTIFICATE-----
Generated at Thu May 16 16:14:31 2024 by rpki-client on console-fra.rpki-client.org