Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A915D03A/1B647710924611E79AAEBE10C4F9AE02/FBC5FF822EE711EF96610B4EC4F9AE02.roa
File: FBC5FF822EE711EF96610B4EC4F9AE02.roa (raw, json)
Hash identifier: mTOE4gvtfc/ZUlT+6OCphBY0P8zzfi363j5SRW8J++8=
Subject key identifier: 4F:6F:8B:63:38:54:DE:43:35:CF:47:A5:D9:DD:37:9B:BF:5B:4F:53
Certificate issuer: /CN=A915D03A/serialNumber=615ED84C44E657F7095E0212AFEA052C542A0D91
Certificate serial: 1903
Authority key identifier: 61:5E:D8:4C:44:E6:57:F7:09:5E:02:12:AF:EA:05:2C:54:2A:0D:91
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YV7YTETmV_cJXgISr-oFLFQqDZE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915D03A/1B647710924611E79AAEBE10C4F9AE02/FBC5FF822EE711EF96610B4EC4F9AE02.roa
Signing time: Fri 06 Sep 2024 10:15:10 +0000
ROA not before: Fri 06 Sep 2024 10:15:10 +0000
ROA not after: Sun 02 Mar 2025 00:00:00 +0000
asID: 16625
IP address blocks: 59.151.128.0/22 maxlen: 22
59.151.136.0/22 maxlen: 22
59.151.176.0/22 maxlen: 22
60.254.132.0/22 maxlen: 22
60.254.168.0/22 maxlen: 22
103.238.150.0/23 maxlen: 23
118.214.32.0/20 maxlen: 20
118.214.64.0/20 maxlen: 20
118.214.96.0/20 maxlen: 20
118.214.128.0/20 maxlen: 20
118.214.240.0/20 maxlen: 20
118.215.8.0/21 maxlen: 21
118.215.32.0/21 maxlen: 21
118.215.80.0/21 maxlen: 21
118.215.88.0/21 maxlen: 21
118.215.96.0/21 maxlen: 21
118.215.176.0/20 maxlen: 20
122.252.40.0/21 maxlen: 21
125.56.212.0/23 maxlen: 23
125.252.212.0/22 maxlen: 22
125.252.216.0/22 maxlen: 22
125.252.228.0/22 maxlen: 22
125.252.232.0/21 maxlen: 21
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A915D03A/1B647710924611E79AAEBE10C4F9AE02/YV7YTETmV_cJXgISr-oFLFQqDZE.crl
rsync://rpki.apnic.net/member_repository/A915D03A/1B647710924611E79AAEBE10C4F9AE02/YV7YTETmV_cJXgISr-oFLFQqDZE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YV7YTETmV_cJXgISr-oFLFQqDZE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 01 Dec 2024 15:54:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6403 (0x1903)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915D03A/serialNumber=615ED84C44E657F7095E0212AFEA052C542A0D91
Validity
Not Before: Sep 6 10:15:10 2024 GMT
Not After : Mar 2 00:00:00 2025 GMT
Subject: CN=66dad62e-f0cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:ed:35:4c:98:c3:04:83:58:bb:16:27:51:7f:
c1:5f:43:12:28:ba:03:4c:b9:75:70:21:c1:04:12:
dd:27:be:48:7d:27:bd:ee:da:14:4f:ce:5c:7f:fa:
24:c0:12:fe:44:3d:0a:d1:92:14:8d:2b:80:64:37:
48:5b:f1:c5:56:8b:4c:27:a2:cb:69:bd:c2:2c:59:
46:3e:df:5b:4a:cc:92:44:5b:c4:15:1e:b0:d9:9f:
05:70:7f:7f:3c:a7:ad:ae:7a:b5:38:f2:48:27:d2:
9f:ca:b7:da:7b:a9:80:35:67:96:5f:dd:15:6b:c5:
fa:10:14:18:bc:07:08:01:02:90:24:45:9e:25:9d:
53:dc:c8:ee:b5:99:35:a5:23:ba:1f:8b:a2:e4:59:
8f:2d:8f:1c:d0:a1:a1:f6:89:e6:6e:26:22:7c:2d:
df:b2:15:bb:91:d6:a0:d2:cf:d5:e2:6e:9a:5e:9c:
17:e6:08:f2:11:15:b2:31:81:3f:fd:ae:af:05:e1:
ac:36:58:11:2c:f2:99:b3:94:aa:78:7a:f4:21:c8:
3a:c3:61:ae:3a:6d:06:cb:ec:4a:f4:97:87:5d:86:
28:cc:68:ae:59:1e:1f:76:dc:e9:d3:b5:17:ac:d6:
f9:a2:aa:5f:04:1f:48:c5:27:a2:72:36:e6:df:fb:
7e:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:6F:8B:63:38:54:DE:43:35:CF:47:A5:D9:DD:37:9B:BF:5B:4F:53
X509v3 Authority Key Identifier:
keyid:61:5E:D8:4C:44:E6:57:F7:09:5E:02:12:AF:EA:05:2C:54:2A:0D:91
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915D03A/1B647710924611E79AAEBE10C4F9AE02/YV7YTETmV_cJXgISr-oFLFQqDZE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YV7YTETmV_cJXgISr-oFLFQqDZE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915D03A/1B647710924611E79AAEBE10C4F9AE02/FBC5FF822EE711EF96610B4EC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
59.151.128.0/22
59.151.136.0/22
59.151.176.0/22
60.254.132.0/22
60.254.168.0/22
103.238.150.0/23
118.214.32.0/20
118.214.64.0/20
118.214.96.0/20
118.214.128.0/20
118.214.240.0/20
118.215.8.0/21
118.215.32.0/21
118.215.80.0-118.215.103.255
118.215.176.0/20
122.252.40.0/21
125.56.212.0/23
125.252.212.0-125.252.219.255
125.252.228.0-125.252.239.255
Signature Algorithm: sha256WithRSAEncryption
c2:af:57:d6:2b:cd:f6:9e:8a:27:7f:9e:9c:49:b2:d3:c6:f9:
78:d6:2d:be:56:2b:9a:2e:6a:dd:b4:ff:c2:90:9d:c4:bf:7b:
3d:11:91:55:4d:76:69:55:68:36:21:80:7c:17:f3:9d:8d:28:
a9:23:65:05:c2:66:2a:95:b5:61:83:ca:2a:41:c5:06:34:28:
a0:69:df:5f:cb:a6:4c:34:88:a3:42:ba:c8:a8:9c:d5:c8:f0:
f7:3f:7c:9e:7d:f7:10:38:36:dc:cc:2f:9b:40:08:e4:96:e8:
d9:82:24:53:7b:5c:58:d8:26:c5:6d:f4:a9:5a:d0:3b:4c:0c:
1e:20:4f:3c:25:d7:93:79:68:6c:68:55:fa:c2:02:55:73:1f:
45:d1:a3:51:a2:6c:35:e2:a9:57:31:84:33:e7:bc:a9:a7:8d:
36:57:d5:8e:69:c0:ef:97:73:a4:52:30:b2:2b:34:69:9c:de:
9f:dc:3c:60:fa:1d:d2:27:24:9d:86:71:11:18:2e:c7:79:b5:
54:ae:46:e6:06:c1:e2:cc:64:ed:22:f8:f1:62:f5:fd:c9:e3:
e5:26:53:27:3c:64:3b:d5:5a:bb:ba:4c:c8:74:1b:e4:96:3b:
f9:43:2d:09:f2:5a:f6:1e:d8:03:7c:b4:6d:21:77:87:93:04:
f7:a0:28:2a
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sun Nov 24 17:20:05 2024 by rpki-client on console-fra.rpki-client.org