Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A915EBC8/589820C2EF0211ED8C2DD91FC4F9AE02/AC61350A4E3C11EF9286040CC4F9AE02.roa
File: AC61350A4E3C11EF9286040CC4F9AE02.roa (raw, json)
Hash identifier: Jo4WABUEWPRcQSHlp0OZS00fwB0a0r3f/UDtxFI4TE8=
Subject key identifier: 2C:9A:29:37:1B:6F:D3:BF:61:F9:62:99:72:33:A4:E5:44:A6:D0:66
Certificate issuer: /CN=A915EBC8/serialNumber=C621848151F797BF723107F14D62C67A213A53E3
Certificate serial: 011D
Authority key identifier: C6:21:84:81:51:F7:97:BF:72:31:07:F1:4D:62:C6:7A:21:3A:53:E3
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/xiGEgVH3l79yMQfxTWLGeiE6U-M.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915EBC8/589820C2EF0211ED8C2DD91FC4F9AE02/AC61350A4E3C11EF9286040CC4F9AE02.roa
Signing time: Wed 31 Jul 2024 00:23:00 +0000
ROA not before: Wed 31 Jul 2024 00:23:00 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 10235
IP address blocks: 164.53.0.0/16 maxlen: 16
164.53.28.0/24 maxlen: 24
164.53.29.0/24 maxlen: 24
164.53.42.0/24 maxlen: 24
164.53.43.0/24 maxlen: 24
164.53.44.0/23 maxlen: 23
164.53.46.0/23 maxlen: 23
164.53.65.0/24 maxlen: 24
164.53.67.0/24 maxlen: 24
164.53.70.0/24 maxlen: 24
164.53.71.0/24 maxlen: 24
164.53.78.0/24 maxlen: 24
164.53.92.0/24 maxlen: 24
164.53.97.0/24 maxlen: 24
164.53.98.0/23 maxlen: 23
164.53.122.0/24 maxlen: 24
164.53.124.0/24 maxlen: 24
164.53.125.0/24 maxlen: 24
164.53.139.0/24 maxlen: 24
164.53.152.0/24 maxlen: 24
164.53.158.0/23 maxlen: 23
164.53.160.0/23 maxlen: 23
164.53.162.0/24 maxlen: 24
164.53.164.0/23 maxlen: 23
164.53.166.0/23 maxlen: 23
164.53.168.0/23 maxlen: 23
164.53.170.0/24 maxlen: 24
164.53.171.0/24 maxlen: 24
164.53.182.0/23 maxlen: 23
164.53.192.0/24 maxlen: 24
164.53.193.0/24 maxlen: 24
164.53.195.0/24 maxlen: 24
164.53.204.0/22 maxlen: 22
164.53.214.0/23 maxlen: 23
164.53.216.0/24 maxlen: 24
164.53.218.0/23 maxlen: 23
164.53.220.0/23 maxlen: 23
164.53.222.0/23 maxlen: 23
164.53.224.0/22 maxlen: 22
164.53.230.0/23 maxlen: 23
164.53.232.0/24 maxlen: 24
164.53.234.0/23 maxlen: 23
164.53.238.0/24 maxlen: 24
164.53.239.0/24 maxlen: 24
164.53.241.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A915EBC8/589820C2EF0211ED8C2DD91FC4F9AE02/xiGEgVH3l79yMQfxTWLGeiE6U-M.crl
rsync://rpki.apnic.net/member_repository/A915EBC8/589820C2EF0211ED8C2DD91FC4F9AE02/xiGEgVH3l79yMQfxTWLGeiE6U-M.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/xiGEgVH3l79yMQfxTWLGeiE6U-M.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 28 Nov 2024 02:50:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 285 (0x11d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915EBC8/serialNumber=C621848151F797BF723107F14D62C67A213A53E3
Validity
Not Before: Jul 31 00:23:00 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=66a983e3-e6a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:95:a9:be:0e:1d:a2:e5:7a:77:e3:c1:19:bd:
f3:0f:13:99:9c:6b:d7:ad:10:9c:c7:17:aa:7b:5c:
30:9b:bf:9a:74:7b:bb:00:d2:1b:25:51:b2:f4:0e:
7b:df:4c:8d:65:aa:c1:b2:9f:0f:32:0c:62:6c:95:
3d:10:56:37:02:a2:e0:dc:68:fa:60:d8:bb:2e:63:
16:99:1d:40:7c:8c:f1:0f:60:d7:2f:21:b7:cd:b7:
f8:f9:46:5c:56:fa:06:b3:66:d5:53:3a:1a:34:ac:
bf:c1:96:f9:39:c4:8e:79:39:b3:d2:07:62:c0:61:
e1:6b:58:0b:09:a4:57:db:61:9c:f9:fb:9f:a4:8c:
80:bb:7d:29:e1:9c:44:82:6c:9d:6c:58:80:5b:04:
4c:47:eb:04:98:2e:0e:ab:1b:03:05:91:95:12:0e:
28:ac:0c:f6:8a:1f:00:13:4b:42:8f:f5:0c:86:50:
71:2d:b7:02:19:73:d1:69:b7:29:c4:eb:9a:69:0c:
5f:18:9b:35:5c:99:d0:7a:ab:7f:a2:95:4d:2b:9f:
d9:17:af:0e:29:4b:57:ef:79:37:94:58:ee:c9:31:
25:a5:d4:0a:18:d4:ee:95:46:66:75:19:86:3b:bf:
11:32:21:03:e5:88:6c:4f:c5:01:dd:8a:cc:73:92:
6a:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:9A:29:37:1B:6F:D3:BF:61:F9:62:99:72:33:A4:E5:44:A6:D0:66
X509v3 Authority Key Identifier:
keyid:C6:21:84:81:51:F7:97:BF:72:31:07:F1:4D:62:C6:7A:21:3A:53:E3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915EBC8/589820C2EF0211ED8C2DD91FC4F9AE02/xiGEgVH3l79yMQfxTWLGeiE6U-M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/xiGEgVH3l79yMQfxTWLGeiE6U-M.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915EBC8/589820C2EF0211ED8C2DD91FC4F9AE02/AC61350A4E3C11EF9286040CC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
164.53.0.0/16
Signature Algorithm: sha256WithRSAEncryption
93:85:a1:5c:c8:54:2c:45:4b:93:50:73:9a:9f:54:9b:b5:19:
e7:3f:b9:05:5d:f1:1c:72:44:9a:80:44:eb:c8:3f:6e:e6:22:
af:ce:2a:a9:c7:29:78:fb:96:6d:23:c0:21:db:c1:46:c0:42:
d0:df:cb:62:6a:78:d3:ef:fc:9a:c9:9c:29:d8:0f:e2:5e:ad:
60:c7:1a:f7:c8:16:57:02:f0:f7:a7:26:97:e6:68:43:09:72:
74:fb:65:0d:6e:08:dd:55:cd:12:9a:5f:69:83:d8:63:41:4e:
d2:f2:d5:63:e9:64:0a:b5:68:ff:ac:38:d1:41:77:c5:42:fc:
07:ca:3f:ea:10:5d:d4:8f:03:42:91:2d:89:cc:d0:a6:ca:ae:
60:ec:10:8f:61:33:10:55:2e:91:52:20:10:40:c7:18:5a:ac:
ad:ef:0e:51:07:96:51:e5:8c:75:64:a6:77:c0:c0:ff:2a:0c:
15:da:42:e5:6d:5c:f8:47:8d:77:5b:5b:b4:2b:be:7e:c6:4b:
12:b9:af:fa:b3:4e:fe:69:31:2c:b5:e9:fd:48:cd:1e:b8:ee:
63:9d:27:b0:46:19:50:48:f5:09:c0:fb:2f:57:79:f2:50:d5:
82:ac:69:d4:e5:e3:19:12:cb:17:25:32:df:f5:7f:52:99:c3:
4d:c4:e3:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 05:37:05 2024 by rpki-client on console-ams.rpki-client.org