Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A915EBC8/589820C2EF0211ED8C2DD91FC4F9AE02/9BB3FAB6CCB511EE8612FB18C4F9AE02.roa
File: 9BB3FAB6CCB511EE8612FB18C4F9AE02.roa (raw, json)
Hash identifier: c9KG9vpN1QmGvwjTf9PDbnl/EQ1PMVZ2QmsDIyegpZw=
Subject key identifier: B3:4C:D5:47:CF:5B:A8:1B:E8:3A:5E:A4:E5:07:1D:FC:9F:D7:70:63
Certificate issuer: /CN=A915EBC8/serialNumber=C621848151F797BF723107F14D62C67A213A53E3
Certificate serial: BB
Authority key identifier: C6:21:84:81:51:F7:97:BF:72:31:07:F1:4D:62:C6:7A:21:3A:53:E3
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/xiGEgVH3l79yMQfxTWLGeiE6U-M.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915EBC8/589820C2EF0211ED8C2DD91FC4F9AE02/9BB3FAB6CCB511EE8612FB18C4F9AE02.roa
Signing time: Tue 09 Apr 2024 06:39:45 +0000
ROA not before: Tue 09 Apr 2024 06:39:45 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 8075
IP address blocks: 155.60.224.0/24 maxlen: 24
155.60.225.0/24 maxlen: 24
155.60.226.0/24 maxlen: 24
155.60.227.0/24 maxlen: 24
155.60.228.0/24 maxlen: 24
155.60.229.0/24 maxlen: 24
155.60.230.0/24 maxlen: 24
155.60.231.0/24 maxlen: 24
155.60.232.0/24 maxlen: 24
155.60.233.0/24 maxlen: 24
155.60.234.0/24 maxlen: 24
155.60.235.0/24 maxlen: 24
155.60.236.0/24 maxlen: 24
155.60.237.0/24 maxlen: 24
155.60.238.0/24 maxlen: 24
155.60.239.0/24 maxlen: 24
155.60.240.0/24 maxlen: 24
155.60.241.0/24 maxlen: 24
155.60.242.0/24 maxlen: 24
155.60.243.0/24 maxlen: 24
155.60.244.0/24 maxlen: 24
155.60.245.0/24 maxlen: 24
155.60.246.0/24 maxlen: 24
155.60.247.0/24 maxlen: 24
155.60.248.0/24 maxlen: 24
155.60.249.0/24 maxlen: 24
155.60.250.0/24 maxlen: 24
155.60.251.0/24 maxlen: 24
155.60.252.0/24 maxlen: 24
155.60.253.0/24 maxlen: 24
155.60.254.0/24 maxlen: 24
155.60.255.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A915EBC8/589820C2EF0211ED8C2DD91FC4F9AE02/xiGEgVH3l79yMQfxTWLGeiE6U-M.crl
rsync://rpki.apnic.net/member_repository/A915EBC8/589820C2EF0211ED8C2DD91FC4F9AE02/xiGEgVH3l79yMQfxTWLGeiE6U-M.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/xiGEgVH3l79yMQfxTWLGeiE6U-M.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 28 Nov 2024 02:50:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 187 (0xbb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915EBC8/serialNumber=C621848151F797BF723107F14D62C67A213A53E3
Validity
Not Before: Apr 9 06:39:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6614e2b1-9538
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:47:32:5a:2e:de:f5:2f:77:b4:6c:44:bb:a2:
b7:59:a9:a3:db:c1:4c:ea:de:07:ef:8f:37:9a:aa:
f6:5f:c4:ed:47:10:83:f3:11:cd:54:f4:1c:99:c4:
9f:2c:57:85:91:9b:41:4d:6b:6e:45:07:79:44:84:
36:0c:70:bb:a3:29:16:83:ff:b4:bc:cf:67:af:9d:
6f:83:ab:8d:9b:e8:9c:24:71:c1:e9:6c:e3:a3:95:
41:f6:d9:64:41:fe:a1:98:47:d1:6f:17:f3:b8:ba:
b6:23:66:51:a0:2b:f7:f2:9c:89:7b:d5:79:1b:cb:
d0:c1:bf:b5:72:98:6b:d9:10:b0:38:86:75:bd:71:
4f:23:72:2e:4b:39:7e:31:b2:09:bd:45:10:ff:42:
2e:e3:2e:44:20:cf:23:c4:44:54:4a:cf:c1:74:6b:
46:e0:0b:d6:4d:86:3b:ef:3f:45:02:e5:2c:aa:0f:
28:ab:e1:d8:38:a7:2e:fa:d8:38:6f:82:f1:0b:af:
ff:05:ff:be:0b:68:b2:16:c8:21:c0:da:f7:80:4a:
a0:4c:15:05:e2:c2:d1:fc:93:5a:d9:dc:86:7b:6b:
8e:d8:74:c1:3f:07:81:a0:19:d5:5b:a3:e9:c0:ae:
11:0a:87:a5:ad:0e:70:f3:1c:76:e8:11:b7:93:a6:
e0:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:4C:D5:47:CF:5B:A8:1B:E8:3A:5E:A4:E5:07:1D:FC:9F:D7:70:63
X509v3 Authority Key Identifier:
keyid:C6:21:84:81:51:F7:97:BF:72:31:07:F1:4D:62:C6:7A:21:3A:53:E3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915EBC8/589820C2EF0211ED8C2DD91FC4F9AE02/xiGEgVH3l79yMQfxTWLGeiE6U-M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/xiGEgVH3l79yMQfxTWLGeiE6U-M.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915EBC8/589820C2EF0211ED8C2DD91FC4F9AE02/9BB3FAB6CCB511EE8612FB18C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
155.60.224.0/19
Signature Algorithm: sha256WithRSAEncryption
57:98:0d:c2:33:b8:31:da:b4:3a:36:42:38:99:6a:68:95:12:
50:78:20:cb:6c:bb:8f:df:36:5d:0a:30:37:bb:c7:0c:8a:7f:
53:cb:21:94:f4:7a:8c:38:fd:83:a8:fd:c8:31:be:85:14:66:
fd:a2:d5:c0:88:b0:7d:ee:7d:f1:14:78:a6:7d:58:a7:38:7e:
29:ad:47:e4:29:c5:c6:ef:a7:e3:6e:d4:12:5c:71:94:00:d6:
d7:c3:a5:1b:80:7c:f2:48:00:a6:f2:17:ed:9e:11:23:f7:36:
54:54:8b:1c:8a:57:09:f7:d1:31:67:4f:9b:f7:ce:df:3e:ec:
69:15:f1:ab:f5:5d:03:46:04:99:12:15:58:33:4b:d1:a2:d5:
b5:88:1d:e2:33:37:8e:bb:83:30:aa:20:ca:37:14:fd:07:c0:
af:f7:fe:3c:45:58:60:37:ed:92:5b:6f:77:22:d9:72:ed:cb:
ed:6e:43:b4:e7:fe:ee:ff:eb:5e:6a:5a:f0:0e:27:fa:38:69:
17:77:20:82:36:cd:30:c6:10:74:ed:02:1b:9c:52:80:1b:23:
d3:c1:b5:1e:4b:16:02:79:35:e6:ff:3f:30:ad:03:7e:12:34:
9e:86:e7:6a:cd:83:93:b3:34:b8:1b:9a:bc:83:78:05:18:25:
36:34:78:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 05:37:05 2024 by rpki-client on console-ams.rpki-client.org