Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A915DB10/E4FED3A8B37511E8B25D8F6BC4F9AE02/22A36DA64FC311E98C78721DC4F9AE02.roa
File: 22A36DA64FC311E98C78721DC4F9AE02.roa (raw, json)
Hash identifier: cGE0Mgb+mLXWzXjCskyx9cXK19bNqRcvRwpbgUj956Y=
Subject key identifier: 18:9A:B9:C6:5C:63:EB:F9:AB:1C:82:C4:E7:AF:72:21:62:C0:9D:A0
Certificate issuer: /CN=A915DB10/serialNumber=7DE430264D6AB461F6A4FFCA2E4075E8A67415C9
Certificate serial: 1245
Authority key identifier: 7D:E4:30:26:4D:6A:B4:61:F6:A4:FF:CA:2E:40:75:E8:A6:74:15:C9
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/feQwJk1qtGH2pP_KLkB16KZ0Fck.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915DB10/E4FED3A8B37511E8B25D8F6BC4F9AE02/22A36DA64FC311E98C78721DC4F9AE02.roa
Signing time: Sat 04 May 2024 17:55:46 +0000
ROA not before: Sat 04 May 2024 17:55:46 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 135817
IP address blocks: 103.110.164.0/23 maxlen: 23
103.110.164.0/24 maxlen: 24
103.110.165.0/24 maxlen: 24
103.123.234.0/23 maxlen: 23
103.123.234.0/24 maxlen: 24
103.123.235.0/24 maxlen: 24
2403:8940::/48 maxlen: 48
2403:8940:1::/48 maxlen: 48
2403:8940:2::/48 maxlen: 48
2403:8940:3::/48 maxlen: 48
2403:8940:100::/48 maxlen: 48
2403:8940:101::/48 maxlen: 48
2403:8940:102::/47 maxlen: 47
2403:8940:200::/48 maxlen: 48
2403:8940:300::/40 maxlen: 40
2403:8940:400::/40 maxlen: 40
2403:8940:1000::/36 maxlen: 36
2403:8940:ffff::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A915DB10/E4FED3A8B37511E8B25D8F6BC4F9AE02/feQwJk1qtGH2pP_KLkB16KZ0Fck.crl
rsync://rpki.apnic.net/member_repository/A915DB10/E4FED3A8B37511E8B25D8F6BC4F9AE02/feQwJk1qtGH2pP_KLkB16KZ0Fck.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/feQwJk1qtGH2pP_KLkB16KZ0Fck.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 07 Jun 2024 18:01:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4677 (0x1245)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915DB10/serialNumber=7DE430264D6AB461F6A4FFCA2E4075E8A67415C9
Validity
Not Before: May 4 17:55:46 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=663676a2-f53b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:1f:97:45:e5:e6:bb:4d:8d:5b:03:8d:b3:50:
7e:56:97:9e:90:61:a9:79:ee:52:1e:98:cd:95:97:
f4:72:f0:a3:c9:b9:55:d3:bd:75:b7:85:0f:aa:5f:
46:75:72:92:6a:b2:68:2c:e6:42:ca:b2:58:0d:8b:
6c:87:77:0e:9c:81:80:d6:aa:78:ee:3e:a9:0a:72:
5a:31:fb:18:13:19:1d:fc:ef:50:f6:9c:f2:58:20:
0c:49:fb:f8:2b:30:cf:0f:bd:43:04:47:f7:6c:1e:
14:4c:a8:8c:c1:7a:6a:05:ff:9a:0e:f3:23:4b:d9:
42:85:9f:33:82:e7:fe:6a:bc:d1:a7:33:09:86:32:
c6:f3:02:c4:fc:3a:7a:56:4a:1e:ad:4d:86:79:8d:
b1:f9:74:3d:c3:de:e1:13:c2:6e:b7:90:b3:9f:ea:
18:94:8d:f8:c4:b0:19:1e:e9:b9:0d:2d:bc:a1:4d:
7a:01:4f:82:70:c5:03:0b:5f:68:33:b5:0e:50:14:
cc:ee:f4:a8:05:e8:b5:70:a0:14:e1:77:24:ff:84:
35:e0:27:e9:b9:98:31:24:7b:a6:ce:7e:d5:88:17:
54:79:8f:7f:99:c2:06:62:1f:f1:45:7b:46:5e:96:
d4:d8:a1:8e:3a:57:8f:f2:13:db:aa:ac:ac:65:6d:
6f:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:9A:B9:C6:5C:63:EB:F9:AB:1C:82:C4:E7:AF:72:21:62:C0:9D:A0
X509v3 Authority Key Identifier:
keyid:7D:E4:30:26:4D:6A:B4:61:F6:A4:FF:CA:2E:40:75:E8:A6:74:15:C9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915DB10/E4FED3A8B37511E8B25D8F6BC4F9AE02/feQwJk1qtGH2pP_KLkB16KZ0Fck.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/feQwJk1qtGH2pP_KLkB16KZ0Fck.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915DB10/E4FED3A8B37511E8B25D8F6BC4F9AE02/22A36DA64FC311E98C78721DC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.110.164.0/23
103.123.234.0/23
IPv6:
2403:8940::/46
2403:8940:100::/46
2403:8940:200::/48
2403:8940:300::-2403:8940:4ff:ffff:ffff:ffff:ffff:ffff
2403:8940:1000::/36
2403:8940:ffff::/48
Signature Algorithm: sha256WithRSAEncryption
d0:1d:9a:23:7b:f5:ac:41:1c:fb:fb:a8:ff:43:c8:70:b5:d9:
f4:c2:16:fc:73:0e:c7:4e:31:34:41:ac:7d:4f:68:1d:a2:b5:
d6:52:f9:bf:60:d3:4b:fd:55:37:67:f5:ca:9e:3c:70:f3:a7:
9e:84:7b:6e:a0:4d:62:a3:9e:bc:9d:fd:0f:8d:90:1c:70:eb:
b1:2c:1b:93:92:25:4e:dc:93:aa:ac:51:09:c6:89:a0:ad:11:
0b:f5:05:ef:da:6b:ca:ae:1d:ee:a8:64:94:6f:97:f6:15:3b:
b4:17:8f:d1:bd:4d:2a:6e:85:a9:dc:22:e1:8b:aa:8b:38:85:
1b:6f:e5:71:af:c1:bd:d8:d3:b6:ee:c8:f1:82:05:00:a9:4a:
e9:39:3d:f5:0b:20:be:97:27:2e:34:e1:58:a9:e4:a5:8f:6a:
1c:e3:30:bd:16:5c:13:2a:3e:d3:7e:78:ef:a3:a7:82:7d:38:
a4:ae:4c:c9:f1:5b:d9:f5:2a:ff:26:fb:94:cf:ea:b0:7a:12:
ee:b7:78:01:fd:5c:33:2e:ba:d7:b8:31:b1:3c:ed:78:c2:b2:
05:8c:76:25:c0:15:91:70:41:5a:5d:4d:bf:8c:e7:9d:72:85:
f0:d2:87:2f:5d:7c:3c:ea:dc:28:fc:af:c8:b3:82:6c:95:81:
3f:e2:4f:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 31 19:47:48 2024 by rpki-client on console-fra.rpki-client.org