Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9155AE4/E5D6D0AC065311ED827BEF54C4F9AE02/76494F6E146111ED83A8FB50C4F9AE02.roa
File: 76494F6E146111ED83A8FB50C4F9AE02.roa (raw, json)
Hash identifier: zRlw9jj+bfYIzSCYy5O/gBIxjqGEQu2ZfwozYl/ebWw=
Subject key identifier: B5:56:73:61:C3:32:55:00:56:8B:2D:33:AB:80:A9:10:EF:BA:A3:09
Certificate issuer: /CN=A9155AE4/serialNumber=3CF91608226819C3E9DA84D1195B5326F9249FBD
Certificate serial: 01D8
Authority key identifier: 3C:F9:16:08:22:68:19:C3:E9:DA:84:D1:19:5B:53:26:F9:24:9F:BD
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PPkWCCJoGcPp2oTRGVtTJvkkn70.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9155AE4/E5D6D0AC065311ED827BEF54C4F9AE02/76494F6E146111ED83A8FB50C4F9AE02.roa
Signing time: Sat 23 Mar 2024 04:06:21 +0000
ROA not before: Sat 23 Mar 2024 04:06:21 +0000
ROA not after: Thu 01 May 2025 00:00:00 +0000
asID: 133414
IP address blocks: 202.10.255.0/24 maxlen: 24
202.80.64.0/19 maxlen: 19
202.80.64.0/24 maxlen: 24
202.80.65.0/24 maxlen: 24
202.80.66.0/24 maxlen: 24
202.80.68.0/24 maxlen: 24
202.80.73.0/24 maxlen: 24
202.80.74.0/24 maxlen: 24
2405:7f00:3200::/48 maxlen: 48
2405:7f00:3201::/48 maxlen: 48
2405:7f00:3204::/48 maxlen: 48
2405:7f00:3250::/48 maxlen: 48
2405:7f00:3260::/48 maxlen: 48
2405:7f00:8000::/43 maxlen: 43
2405:7f00:8100::/43 maxlen: 43
2405:7f00:8120::/43 maxlen: 43
2405:7f00:8140::/43 maxlen: 43
2405:7f00:8160::/43 maxlen: 43
2405:7f00:8180::/43 maxlen: 43
2405:7f00:8200::/43 maxlen: 43
2405:7f00:8220::/43 maxlen: 43
2405:7f00:8240::/43 maxlen: 43
2405:7f00:8260::/43 maxlen: 43
2405:7f00:8280::/43 maxlen: 43
2405:7f00:8300::/43 maxlen: 43
2405:7f00:8320::/43 maxlen: 43
2405:7f00:8340::/43 maxlen: 43
2405:7f00:8500::/43 maxlen: 43
2405:7f00:8800::/40 maxlen: 40
2405:7f00:8a00::/40 maxlen: 40
2405:7f00:c100::/43 maxlen: 43
2405:7f00:c120::/43 maxlen: 43
2405:7f00:c140::/43 maxlen: 43
2405:7f00:c160::/43 maxlen: 43
2405:7f00:c180::/43 maxlen: 43
2405:7f00:c200::/43 maxlen: 43
2405:7f00:c800::/40 maxlen: 40
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9155AE4/E5D6D0AC065311ED827BEF54C4F9AE02/PPkWCCJoGcPp2oTRGVtTJvkkn70.crl
rsync://rpki.apnic.net/member_repository/A9155AE4/E5D6D0AC065311ED827BEF54C4F9AE02/PPkWCCJoGcPp2oTRGVtTJvkkn70.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PPkWCCJoGcPp2oTRGVtTJvkkn70.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 05 Jun 2024 04:50:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 472 (0x1d8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9155AE4/serialNumber=3CF91608226819C3E9DA84D1195B5326F9249FBD
Validity
Not Before: Mar 23 04:06:21 2024 GMT
Not After : May 1 00:00:00 2025 GMT
Subject: CN=65fe553d-49b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:5d:19:96:aa:90:ca:f8:82:b9:16:e0:22:f8:
a1:02:d0:7a:91:a6:8e:4b:c0:77:1c:76:17:7b:eb:
4d:bc:04:2c:78:bb:5e:d7:66:86:57:6a:e7:c8:ed:
a6:5b:c4:75:57:26:ec:52:23:dd:b6:e0:0f:a9:20:
e4:fd:6a:64:5d:e1:1e:a1:9e:7c:3f:3a:12:01:88:
51:bb:ae:7d:7a:47:6a:cd:04:cb:0c:0a:16:39:17:
8c:da:0f:03:43:5a:e7:f7:1b:e1:c6:e3:5a:10:a9:
c3:68:2e:60:29:1f:6d:af:ff:f5:f5:b1:07:7e:db:
00:dc:77:51:4b:77:ce:5e:86:a3:fb:0e:bd:c3:fe:
50:81:34:ce:e3:ea:67:0b:94:41:08:1a:71:98:90:
6e:1a:c8:f8:af:c1:3f:34:6d:b4:d4:dc:8b:b6:cb:
03:bd:a8:12:3b:8f:a8:c3:1f:1d:9c:3b:3a:37:c6:
59:c1:38:4f:34:67:01:3b:ae:5c:a7:01:a2:82:d0:
e6:0a:14:92:c1:e3:a6:db:25:9d:06:a4:a6:cb:a2:
f9:53:88:90:6f:37:06:51:ed:48:03:86:6b:80:cb:
90:96:bc:1f:5b:a3:97:f2:19:58:e5:3c:10:72:1f:
61:01:b5:87:38:e5:f1:be:2a:1b:8d:19:8a:cb:53:
94:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:56:73:61:C3:32:55:00:56:8B:2D:33:AB:80:A9:10:EF:BA:A3:09
X509v3 Authority Key Identifier:
keyid:3C:F9:16:08:22:68:19:C3:E9:DA:84:D1:19:5B:53:26:F9:24:9F:BD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9155AE4/E5D6D0AC065311ED827BEF54C4F9AE02/PPkWCCJoGcPp2oTRGVtTJvkkn70.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PPkWCCJoGcPp2oTRGVtTJvkkn70.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9155AE4/E5D6D0AC065311ED827BEF54C4F9AE02/76494F6E146111ED83A8FB50C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
202.10.255.0/24
202.80.64.0/19
IPv6:
2405:7f00:3200::/47
2405:7f00:3204::/48
2405:7f00:3250::/48
2405:7f00:3260::/48
2405:7f00:8000::/43
2405:7f00:8100::-2405:7f00:819f:ffff:ffff:ffff:ffff:ffff
2405:7f00:8200::-2405:7f00:829f:ffff:ffff:ffff:ffff:ffff
2405:7f00:8300::-2405:7f00:835f:ffff:ffff:ffff:ffff:ffff
2405:7f00:8500::/43
2405:7f00:8800::/40
2405:7f00:8a00::/40
2405:7f00:c100::-2405:7f00:c19f:ffff:ffff:ffff:ffff:ffff
2405:7f00:c200::/43
2405:7f00:c800::/40
Signature Algorithm: sha256WithRSAEncryption
82:44:f2:50:39:4d:c0:32:f4:70:c5:2f:3c:f3:0e:5a:a8:b8:
6e:46:8d:5e:d1:77:a5:a5:20:84:9f:36:67:2a:7e:d5:85:e9:
0b:0c:9e:4e:aa:7e:6a:3f:d8:8e:43:6a:b2:23:6d:c8:91:04:
30:aa:08:1f:f6:ce:44:a6:2d:01:84:25:89:a4:9f:15:f4:66:
fc:36:58:23:d4:92:f0:6d:5c:2e:dd:de:58:79:92:16:14:09:
30:b2:78:e8:52:5d:09:b3:4f:16:e1:e0:2b:68:dc:ef:4f:99:
93:9e:2b:e1:46:b1:0b:45:89:06:0a:ee:7e:aa:b2:0a:1e:b5:
53:bb:a0:af:24:d5:bd:a7:a2:de:fc:d4:95:20:48:bd:51:2a:
25:6b:3d:dc:8c:16:4e:e5:49:50:4b:fc:6d:71:89:88:a6:e2:
18:6b:72:42:07:e7:97:4d:c9:c6:a0:1e:5b:72:af:a1:85:60:
0c:ca:2b:32:cd:10:e3:51:94:bd:c8:12:cc:42:7d:d5:27:62:
f3:c0:76:bb:51:35:30:44:e2:2f:d8:b7:7c:0f:52:8d:b0:4b:
5e:3d:fe:f1:01:1a:95:aa:83:dc:5c:09:fd:32:ce:9a:3a:b2:
19:a4:09:07:d4:fe:bd:ed:e5:ec:a6:47:d7:2f:8f:a6:cb:a1:
ab:09:2f:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 29 05:26:28 2024 by rpki-client on console-fra.rpki-client.org