Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A914CE75/D22EF3D6FF4B11E281BE06625911EA32/997B7CFADEA011ED84E5D17BC4F9AE02.roa
File: 997B7CFADEA011ED84E5D17BC4F9AE02.roa (raw, json)
Hash identifier: n6J3lFAaIJdatXxciP20VhkBJmk/cgEYdscJZnx5wj8=
Subject key identifier: 35:46:FC:C9:25:BD:44:2E:40:2F:92:C9:6E:BF:CF:B7:71:D6:D7:6B
Certificate issuer: /CN=A914CE75/serialNumber=49892537D8B2C0325B7BE081FD9286C79BEA6A85
Certificate serial: 30FB
Authority key identifier: 49:89:25:37:D8:B2:C0:32:5B:7B:E0:81:FD:92:86:C7:9B:EA:6A:85
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SYklN9iywDJbe-CB_ZKGx5vqaoU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914CE75/D22EF3D6FF4B11E281BE06625911EA32/997B7CFADEA011ED84E5D17BC4F9AE02.roa
Signing time: Tue 30 Apr 2024 15:52:43 +0000
ROA not before: Tue 30 Apr 2024 15:52:43 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 9238
IP address blocks: 59.160.33.0/24 maxlen: 24
59.162.7.0/24 maxlen: 24
59.163.47.0/24 maxlen: 24
59.163.63.0/24 maxlen: 24
115.112.212.0/22 maxlen: 22
121.241.230.0/24 maxlen: 24
203.124.192.0/18 maxlen: 18
203.124.192.0/24 maxlen: 24
203.124.217.0/24 maxlen: 24
203.124.218.0/24 maxlen: 24
203.124.225.0/24 maxlen: 24
203.124.232.0/24 maxlen: 24
203.124.248.0/22 maxlen: 22
203.124.248.0/24 maxlen: 24
203.196.194.0/24 maxlen: 24
203.196.200.0/24 maxlen: 24
203.196.201.0/24 maxlen: 24
203.196.202.0/24 maxlen: 24
203.196.203.0/24 maxlen: 24
203.196.204.0/24 maxlen: 24
203.196.233.0/24 maxlen: 24
203.196.240.0/24 maxlen: 24
203.196.241.0/24 maxlen: 24
203.196.250.0/24 maxlen: 24
203.201.208.0/24 maxlen: 24
203.201.209.0/24 maxlen: 24
203.201.212.0/24 maxlen: 24
203.201.213.0/24 maxlen: 24
203.201.220.0/24 maxlen: 24
203.201.222.0/24 maxlen: 24
203.201.224.0/24 maxlen: 24
203.201.225.0/24 maxlen: 24
203.201.226.0/24 maxlen: 24
203.201.227.0/24 maxlen: 24
203.201.231.0/24 maxlen: 24
203.201.248.0/24 maxlen: 24
203.201.250.0/24 maxlen: 24
203.201.251.0/24 maxlen: 24
203.201.254.0/24 maxlen: 24
219.64.5.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A914CE75/D22EF3D6FF4B11E281BE06625911EA32/SYklN9iywDJbe-CB_ZKGx5vqaoU.crl
rsync://rpki.apnic.net/member_repository/A914CE75/D22EF3D6FF4B11E281BE06625911EA32/SYklN9iywDJbe-CB_ZKGx5vqaoU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SYklN9iywDJbe-CB_ZKGx5vqaoU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 27 Nov 2024 15:22:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 12539 (0x30fb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914CE75/serialNumber=49892537D8B2C0325B7BE081FD9286C79BEA6A85
Validity
Not Before: Apr 30 15:52:43 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=663113cb-619a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:e0:92:d6:31:be:61:e0:e8:f9:aa:9a:4d:3a:
d2:c7:4f:d9:87:fb:d9:e4:a1:e6:20:bf:8c:d7:9e:
b8:be:85:f3:34:fe:a7:e2:f4:00:07:51:43:06:43:
79:38:35:08:f1:e8:de:c3:ef:be:9f:aa:f7:12:ab:
30:9e:09:87:e4:75:85:4e:cd:d2:cc:87:11:fc:0f:
e7:27:cb:8b:10:a3:9f:14:51:7f:06:e4:77:a9:58:
c7:a0:49:4d:4c:bc:1f:20:06:d0:51:95:25:83:a1:
2b:a7:a9:c8:39:43:91:4c:21:9b:02:3f:ba:ff:09:
e7:fb:a8:c5:03:22:97:d6:02:d9:ac:f8:1a:f4:cf:
65:74:69:8b:ac:c6:d8:f0:1c:89:bd:29:66:32:a3:
cd:e4:22:8c:fc:47:db:dc:43:5a:1f:69:6e:31:91:
f1:ae:5a:ff:82:39:51:dd:ef:a4:29:86:c4:95:e2:
c7:f7:0a:dd:3a:62:28:29:ec:23:15:5c:aa:cc:bf:
b8:7d:78:8c:f5:c7:ff:b9:93:ff:df:f3:48:72:6f:
87:73:c7:0d:0b:f0:86:12:40:fb:cf:1f:b3:e6:ba:
f0:96:66:84:03:35:b0:2f:ac:8b:62:a1:f3:7f:01:
86:55:c8:28:48:8d:4c:be:38:38:eb:d4:18:6d:b6:
e4:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:46:FC:C9:25:BD:44:2E:40:2F:92:C9:6E:BF:CF:B7:71:D6:D7:6B
X509v3 Authority Key Identifier:
keyid:49:89:25:37:D8:B2:C0:32:5B:7B:E0:81:FD:92:86:C7:9B:EA:6A:85
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914CE75/D22EF3D6FF4B11E281BE06625911EA32/SYklN9iywDJbe-CB_ZKGx5vqaoU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SYklN9iywDJbe-CB_ZKGx5vqaoU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914CE75/D22EF3D6FF4B11E281BE06625911EA32/997B7CFADEA011ED84E5D17BC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
59.160.33.0/24
59.162.7.0/24
59.163.47.0/24
59.163.63.0/24
115.112.212.0/22
121.241.230.0/24
203.124.192.0/18
203.196.194.0/24
203.196.200.0-203.196.204.255
203.196.233.0/24
203.196.240.0/23
203.196.250.0/24
203.201.208.0/23
203.201.212.0/23
203.201.220.0/24
203.201.222.0/24
203.201.224.0/22
203.201.231.0/24
203.201.248.0/24
203.201.250.0/23
203.201.254.0/24
219.64.5.0/24
Signature Algorithm: sha256WithRSAEncryption
0c:f6:87:8a:a9:71:31:02:3a:58:33:df:11:bb:1e:11:e9:88:
88:16:8f:d7:da:32:bf:e2:d1:71:7f:94:9b:6b:92:da:6a:37:
f0:c3:fa:f5:30:65:2c:95:70:da:10:b9:e6:43:97:6f:f3:02:
14:3c:d5:e3:5d:49:15:ed:19:af:c9:9d:02:09:ca:29:dc:32:
e9:64:d4:6e:f9:88:13:44:5e:13:ad:52:af:6e:c2:d3:ec:f2:
e5:ed:f9:b7:73:c1:7a:99:cb:32:21:dd:1e:99:b8:48:56:0e:
4c:b9:ca:a0:54:c3:56:2d:9b:d4:50:22:28:4c:2b:03:10:3b:
91:d1:6b:8b:42:fd:72:97:b3:01:50:ce:a6:f3:a6:9d:62:1c:
83:96:c4:e4:4d:88:66:e4:c6:02:7d:1d:bb:f8:ad:61:8a:23:
a7:c7:d3:eb:87:b2:60:bb:6c:ce:54:de:67:26:14:c9:02:6f:
64:87:53:ec:a2:78:4c:7f:9e:84:af:bc:53:55:f4:c8:89:68:
d4:8f:4e:8d:af:bc:61:e9:57:b2:c8:72:2d:1c:0a:05:1f:6e:
f7:71:01:6d:74:23:70:72:07:33:67:70:3f:60:bd:71:e3:53:
9f:37:1c:f4:a7:87:cd:0a:69:b0:f8:e7:a8:25:ad:f6:b4:39:
40:c7:a9:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 16:11:26 2024 by rpki-client on console-fra.rpki-client.org