Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9158E3F/C24322BA544611EA8C05651DC4F9AE02/CB67A9DC8D1311EF9895E61CC4F9AE02.roa
File: CB67A9DC8D1311EF9895E61CC4F9AE02.roa (raw, json)
Hash identifier: tp1tt+Dtvf110840P/Kz9iQzXzN2YXtDdeUW5fYofag=
Subject key identifier: 13:F8:6C:F5:92:04:54:B0:5E:F1:F4:64:24:F4:B1:40:9F:30:00:D9
Certificate issuer: /CN=A9158E3F/serialNumber=7E313AB7FF26E783E03C07851612751881AE4918
Certificate serial: 0B71
Authority key identifier: 7E:31:3A:B7:FF:26:E7:83:E0:3C:07:85:16:12:75:18:81:AE:49:18
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fjE6t_8m54PgPAeFFhJ1GIGuSRg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9158E3F/C24322BA544611EA8C05651DC4F9AE02/CB67A9DC8D1311EF9895E61CC4F9AE02.roa
Signing time: Fri 18 Oct 2024 05:42:43 +0000
ROA not before: Fri 18 Oct 2024 05:42:43 +0000
ROA not after: Fri 31 Oct 2025 00:00:00 +0000
asID: 15830
IP address blocks: 27.111.128.0/22 maxlen: 22
36.255.39.0/24 maxlen: 24
103.8.176.0/22 maxlen: 22
103.8.180.0/22 maxlen: 22
119.27.0.0/19 maxlen: 19
119.27.32.0/20 maxlen: 20
119.27.50.0/23 maxlen: 23
119.27.52.0/22 maxlen: 22
119.27.56.0/22 maxlen: 22
119.27.60.0/23 maxlen: 23
122.50.64.0/19 maxlen: 19
122.50.104.0/21 maxlen: 21
122.50.112.0/22 maxlen: 22
122.50.120.0/21 maxlen: 21
180.189.0.0/20 maxlen: 20
180.189.8.0/21 maxlen: 21
180.189.32.0/20 maxlen: 20
180.189.48.0/22 maxlen: 22
180.189.56.0/21 maxlen: 21
183.177.0.0/20 maxlen: 20
183.177.16.0/20 maxlen: 20
183.177.32.0/20 maxlen: 20
202.167.224.0/23 maxlen: 23
202.167.227.0/24 maxlen: 24
202.167.230.0/23 maxlen: 23
202.167.232.0/24 maxlen: 24
202.167.234.0/23 maxlen: 23
202.167.236.0/22 maxlen: 22
202.167.240.0/22 maxlen: 22
202.167.244.0/22 maxlen: 22
202.167.248.0/23 maxlen: 23
202.167.252.0/23 maxlen: 23
202.167.254.0/24 maxlen: 24
202.167.255.0/24 maxlen: 24
202.177.192.0/24 maxlen: 24
202.177.193.0/24 maxlen: 24
202.177.195.0/24 maxlen: 24
202.177.196.0/23 maxlen: 23
202.177.198.0/24 maxlen: 24
202.177.199.0/24 maxlen: 24
202.177.200.0/23 maxlen: 23
202.177.202.0/23 maxlen: 23
202.177.204.0/23 maxlen: 23
202.177.207.0/24 maxlen: 24
203.190.224.0/23 maxlen: 23
203.190.232.0/22 maxlen: 22
203.190.232.0/24 maxlen: 24
203.190.236.0/22 maxlen: 22
2407:b000::/32 maxlen: 32
2407:b001::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9158E3F/C24322BA544611EA8C05651DC4F9AE02/fjE6t_8m54PgPAeFFhJ1GIGuSRg.crl
rsync://rpki.apnic.net/member_repository/A9158E3F/C24322BA544611EA8C05651DC4F9AE02/fjE6t_8m54PgPAeFFhJ1GIGuSRg.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fjE6t_8m54PgPAeFFhJ1GIGuSRg.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 27 Nov 2024 19:26:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2929 (0xb71)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9158E3F/serialNumber=7E313AB7FF26E783E03C07851612751881AE4918
Validity
Not Before: Oct 18 05:42:43 2024 GMT
Not After : Oct 31 00:00:00 2025 GMT
Subject: CN=6711f553-f0de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:7e:a5:3d:5d:e8:27:34:98:12:46:08:5e:ca:
0f:9b:74:a9:26:63:e5:66:95:70:b6:71:f6:50:4a:
97:34:58:7b:eb:88:c5:4a:98:5a:93:73:28:12:f5:
7c:55:8f:f4:d3:c9:fe:09:e1:6d:ad:e5:cd:2f:6a:
ed:f6:ae:f5:1d:3b:6c:a7:5b:ab:83:c1:a1:eb:e7:
49:ea:f3:57:d6:a9:79:55:78:0b:63:12:de:b9:2c:
d9:83:fa:f8:f9:15:43:42:7c:33:f0:4b:0a:da:3a:
c4:c5:de:48:8b:17:b5:c8:da:bd:d9:52:26:f6:15:
6a:c4:ed:66:be:6f:78:35:5e:36:2a:be:e6:70:77:
bf:ad:5e:b3:6f:d1:45:83:71:d1:4a:94:c1:48:a2:
2d:e2:df:23:38:c1:a7:40:99:8d:76:de:45:9d:d3:
05:2d:fe:08:ef:d8:87:e6:e7:da:4a:c9:3e:1e:fd:
f9:ac:7c:a6:48:e0:da:42:b0:66:ff:20:c9:3c:86:
fe:3e:66:2a:72:2b:e6:51:63:1a:84:30:1f:59:ec:
79:6d:44:f1:cf:00:8b:53:0d:07:8d:99:31:da:69:
f0:c2:c6:cc:16:5f:61:f3:16:b3:0d:da:0b:1e:0b:
7a:bf:89:b9:34:ff:72:16:7a:77:a8:51:4d:38:f9:
8f:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:F8:6C:F5:92:04:54:B0:5E:F1:F4:64:24:F4:B1:40:9F:30:00:D9
X509v3 Authority Key Identifier:
keyid:7E:31:3A:B7:FF:26:E7:83:E0:3C:07:85:16:12:75:18:81:AE:49:18
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9158E3F/C24322BA544611EA8C05651DC4F9AE02/fjE6t_8m54PgPAeFFhJ1GIGuSRg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fjE6t_8m54PgPAeFFhJ1GIGuSRg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9158E3F/C24322BA544611EA8C05651DC4F9AE02/CB67A9DC8D1311EF9895E61CC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
27.111.128.0/22
36.255.39.0/24
103.8.176.0/21
119.27.0.0-119.27.47.255
119.27.50.0-119.27.61.255
122.50.64.0/19
122.50.104.0-122.50.115.255
122.50.120.0/21
180.189.0.0/20
180.189.32.0-180.189.51.255
180.189.56.0/21
183.177.0.0-183.177.47.255
202.167.224.0/23
202.167.227.0/24
202.167.230.0-202.167.232.255
202.167.234.0-202.167.249.255
202.167.252.0/22
202.177.192.0/23
202.177.195.0-202.177.205.255
202.177.207.0/24
203.190.224.0/23
203.190.232.0/21
IPv6:
2407:b000::/31
Signature Algorithm: sha256WithRSAEncryption
25:13:6f:95:87:38:29:f9:e5:71:a5:f8:5c:76:5d:f1:40:4f:
0e:fe:6c:00:b6:a2:32:45:8a:74:75:bf:24:13:d1:62:e4:79:
67:14:2f:58:68:46:c6:33:31:65:24:9c:62:49:e2:8e:b4:1a:
52:84:e8:3f:db:16:37:d8:d4:3b:3d:c1:a0:48:f5:71:1e:e1:
a5:02:c0:b6:ea:fd:89:43:f4:61:85:09:fa:c1:69:60:8e:f9:
9e:da:5e:80:84:f7:66:a7:ec:61:06:de:4e:79:ff:80:4f:20:
2a:57:84:ca:97:93:82:ed:d4:7f:d4:cb:3d:26:9d:ce:03:44:
8c:f8:b1:df:60:2f:53:fe:1c:75:a6:0d:9c:2c:6a:6b:89:16:
ba:fc:96:04:1f:3c:12:2d:0f:0e:d0:fd:0d:7e:c1:6c:7a:5c:
99:e3:12:cb:c5:cf:68:f9:59:c0:d2:46:76:ab:76:50:d2:88:
08:1c:c5:44:28:f1:80:83:a7:b8:33:0b:08:66:34:9c:90:d0:
d2:97:d7:71:b7:38:83:ab:d6:5c:7b:0f:46:09:41:01:4a:ea:
59:31:f0:6b:40:5b:19:64:58:9a:88:9f:33:47:3e:db:b8:50:
99:6f:21:66:98:ae:04:10:8f:70:86:6d:3b:83:9f:c4:c2:dc:
d9:12:38:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 21:52:39 2024 by rpki-client on console-fra.rpki-client.org