Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A914DA2D/72B5F292D27D11ECA73EF154C4F9AE02/E2392F5C55A811EFAFC5A33FC4F9AE02.roa
File: E2392F5C55A811EFAFC5A33FC4F9AE02.roa (raw, json)
Hash identifier: 2hJdGIM/CmGHjDo8JpZdWsWXLXNE94J7sd1ySAnfqTc=
Subject key identifier: 85:0E:48:17:00:EC:B3:6A:DC:81:95:19:88:29:7F:E1:D4:2A:B8:34
Certificate issuer: /CN=A914DA2D/serialNumber=D7CB6D1DDCF934A1F59E4FFE4982F0B4C52C35F5
Certificate serial: 0295
Authority key identifier: D7:CB:6D:1D:DC:F9:34:A1:F5:9E:4F:FE:49:82:F0:B4:C5:2C:35:F5
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/18ttHdz5NKH1nk_-SYLwtMUsNfU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914DA2D/72B5F292D27D11ECA73EF154C4F9AE02/E2392F5C55A811EFAFC5A33FC4F9AE02.roa
Signing time: Thu 08 Aug 2024 17:26:42 +0000
ROA not before: Thu 08 Aug 2024 17:26:42 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 17882
IP address blocks: 64.119.16.0/24 maxlen: 24
64.119.17.0/24 maxlen: 24
64.119.18.0/24 maxlen: 24
64.119.19.0/24 maxlen: 24
64.119.20.0/24 maxlen: 24
64.119.21.0/24 maxlen: 24
64.119.22.0/24 maxlen: 24
64.119.23.0/24 maxlen: 24
64.119.24.0/24 maxlen: 24
64.119.25.0/24 maxlen: 24
64.119.26.0/24 maxlen: 24
64.119.27.0/24 maxlen: 24
64.119.28.0/24 maxlen: 24
64.119.29.0/24 maxlen: 24
64.119.30.0/24 maxlen: 24
64.119.31.0/24 maxlen: 24
66.181.160.0/24 maxlen: 24
66.181.161.0/24 maxlen: 24
66.181.162.0/24 maxlen: 24
66.181.163.0/24 maxlen: 24
66.181.164.0/24 maxlen: 24
66.181.165.0/24 maxlen: 24
66.181.166.0/24 maxlen: 24
66.181.167.0/24 maxlen: 24
66.181.168.0/24 maxlen: 24
66.181.169.0/24 maxlen: 24
66.181.170.0/24 maxlen: 24
66.181.171.0/24 maxlen: 24
66.181.172.0/24 maxlen: 24
66.181.173.0/24 maxlen: 24
66.181.174.0/24 maxlen: 24
66.181.175.0/24 maxlen: 24
66.181.176.0/24 maxlen: 24
66.181.177.0/24 maxlen: 24
66.181.178.0/24 maxlen: 24
66.181.179.0/24 maxlen: 24
66.181.180.0/24 maxlen: 24
66.181.181.0/24 maxlen: 24
66.181.182.0/24 maxlen: 24
66.181.183.0/24 maxlen: 24
66.181.184.0/24 maxlen: 24
66.181.185.0/24 maxlen: 24
66.181.186.0/24 maxlen: 24
66.181.187.0/24 maxlen: 24
66.181.188.0/24 maxlen: 24
66.181.189.0/24 maxlen: 24
66.181.190.0/24 maxlen: 24
66.181.191.0/24 maxlen: 24
192.82.64.0/24 maxlen: 24
192.82.65.0/24 maxlen: 24
192.82.66.0/24 maxlen: 24
192.82.67.0/24 maxlen: 24
192.82.68.0/24 maxlen: 24
192.82.69.0/24 maxlen: 24
192.82.70.0/24 maxlen: 24
192.82.71.0/24 maxlen: 24
192.82.72.0/24 maxlen: 24
192.82.73.0/24 maxlen: 24
192.82.74.0/24 maxlen: 24
192.82.75.0/24 maxlen: 24
192.82.76.0/24 maxlen: 24
192.82.77.0/24 maxlen: 24
192.82.78.0/24 maxlen: 24
192.82.79.0/24 maxlen: 24
192.82.80.0/24 maxlen: 24
192.82.81.0/24 maxlen: 24
192.82.82.0/24 maxlen: 24
192.82.83.0/24 maxlen: 24
192.82.84.0/24 maxlen: 24
192.82.85.0/24 maxlen: 24
192.82.86.0/24 maxlen: 24
192.82.87.0/24 maxlen: 24
192.82.92.0/24 maxlen: 24
192.82.94.0/24 maxlen: 24
192.82.95.0/24 maxlen: 24
192.82.100.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A914DA2D/72B5F292D27D11ECA73EF154C4F9AE02/18ttHdz5NKH1nk_-SYLwtMUsNfU.crl
rsync://rpki.apnic.net/member_repository/A914DA2D/72B5F292D27D11ECA73EF154C4F9AE02/18ttHdz5NKH1nk_-SYLwtMUsNfU.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/18ttHdz5NKH1nk_-SYLwtMUsNfU.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 27 Nov 2024 15:22:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 661 (0x295)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914DA2D/serialNumber=D7CB6D1DDCF934A1F59E4FFE4982F0B4C52C35F5
Validity
Not Before: Aug 8 17:26:42 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=66b4ffd2-80fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:5a:4f:5d:76:35:93:28:3a:5f:b0:7e:1a:86:
6e:0d:97:d8:c6:83:b9:83:e2:b7:de:96:d9:3b:48:
ad:ff:ef:3f:ce:ad:d3:1a:1a:3b:9b:10:58:82:89:
42:96:98:cc:98:10:6f:e0:39:12:d7:1c:74:4e:4c:
b6:65:18:15:03:ed:cb:bc:49:47:06:29:8c:6d:6d:
ec:db:02:76:54:a0:b9:2d:1b:f7:ed:c2:06:94:2d:
5b:15:44:34:37:63:70:10:ec:89:c1:38:83:61:6b:
36:0f:0e:a2:03:33:6d:4d:28:41:b5:30:a2:6b:7f:
21:6e:51:b3:a9:42:1e:39:3a:fa:8f:cd:cb:53:53:
fd:ea:f2:d6:2f:2a:86:52:35:97:df:75:64:c0:ac:
2f:1c:48:53:93:d5:2f:15:20:91:e6:d1:ab:c9:98:
0f:4a:ae:09:9e:75:2d:b0:3e:cd:e5:0d:4a:af:3d:
e5:af:58:73:bb:f1:b7:0b:c2:0e:74:33:46:08:87:
07:08:8a:3f:34:b2:15:26:6f:87:64:14:5d:9c:b6:
01:51:dd:ed:46:38:c7:0f:11:08:5f:19:b3:09:03:
c5:77:36:3b:3d:47:8e:75:27:74:25:f1:34:42:e8:
86:1f:df:e8:f3:5a:7a:6e:f3:b1:13:28:56:c7:01:
90:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:0E:48:17:00:EC:B3:6A:DC:81:95:19:88:29:7F:E1:D4:2A:B8:34
X509v3 Authority Key Identifier:
keyid:D7:CB:6D:1D:DC:F9:34:A1:F5:9E:4F:FE:49:82:F0:B4:C5:2C:35:F5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914DA2D/72B5F292D27D11ECA73EF154C4F9AE02/18ttHdz5NKH1nk_-SYLwtMUsNfU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/18ttHdz5NKH1nk_-SYLwtMUsNfU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914DA2D/72B5F292D27D11ECA73EF154C4F9AE02/E2392F5C55A811EFAFC5A33FC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
64.119.16.0/20
66.181.160.0/19
192.82.64.0-192.82.87.255
192.82.92.0/24
192.82.94.0/23
192.82.100.0/24
Signature Algorithm: sha256WithRSAEncryption
7e:d6:43:b4:84:be:c4:95:3e:62:2f:14:d0:e1:f3:1a:47:25:
52:25:9e:54:2a:ee:a7:22:11:cf:6b:88:83:07:41:27:4b:1e:
33:55:e2:cf:e3:60:68:32:dc:9b:9f:79:2f:c5:98:2c:11:cd:
63:6a:f2:d8:46:00:1e:2e:98:7a:4f:af:25:54:be:1a:3a:95:
a3:6a:d9:69:64:5f:cd:aa:29:cc:4f:0c:bf:aa:62:51:78:81:
16:a0:79:a9:41:8c:69:3b:a5:e9:b8:d3:21:3f:39:81:ec:ef:
a2:f3:0f:15:21:36:73:87:59:e0:a0:72:13:da:c3:6b:e6:22:
8f:bc:5a:fc:c4:65:80:73:e5:c4:e2:a4:a6:aa:a9:36:52:ea:
ea:50:e6:27:8c:98:ef:86:40:85:e6:bf:25:7c:e3:c4:c6:b9:
80:71:61:56:86:a9:40:f3:9b:ba:5b:f5:00:e6:17:d4:78:f5:
5c:8f:11:da:b5:d1:92:74:a1:dd:8c:fa:3c:0e:5f:1b:07:3f:
9f:34:8f:e8:4e:8c:fd:53:3f:c5:37:b7:46:1e:78:a0:fc:ed:
d2:2d:14:77:24:a1:f5:91:e0:4b:47:01:09:75:8d:32:af:1f:
dc:f6:c7:06:ea:07:11:10:59:96:d6:7e:f2:8e:ad:6c:5e:3c:
64:30:0c:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 18:44:53 2024 by rpki-client on console-fra.rpki-client.org