Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A915F89C/5B07F3AC1D8311E29B35A5D808B02CD2/964F254A4AEC11EF91EC775FC4F9AE02.roa
File: 964F254A4AEC11EF91EC775FC4F9AE02.roa (raw, json)
Hash identifier: 4sO+Kf2WaaDXEC/1X4RERNKVRvAzlJHXuYZYU7/KNho=
Subject key identifier: C3:0F:17:1B:17:0C:1B:D8:4F:E1:27:54:C4:25:0A:EB:ED:01:F3:29
Certificate issuer: /CN=A915F89C/serialNumber=D697BB6F3F99E94480EE0BBAD3D26800AB416260
Certificate serial: 348E
Authority key identifier: D6:97:BB:6F:3F:99:E9:44:80:EE:0B:BA:D3:D2:68:00:AB:41:62:60
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1pe7bz-Z6USA7gu609JoAKtBYmA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915F89C/5B07F3AC1D8311E29B35A5D808B02CD2/964F254A4AEC11EF91EC775FC4F9AE02.roa
Signing time: Fri 13 Sep 2024 07:29:01 +0000
ROA not before: Fri 13 Sep 2024 07:29:01 +0000
ROA not after: Fri 31 Oct 2025 00:00:00 +0000
asID: 3758
IP address blocks: 128.106.0.0/18 maxlen: 24
128.106.64.0/18 maxlen: 24
128.106.128.0/17 maxlen: 24
165.21.0.0/16 maxlen: 16
165.21.12.0/24 maxlen: 24
165.21.18.0/24 maxlen: 24
165.21.19.0/24 maxlen: 24
165.21.31.0/24 maxlen: 24
165.21.36.0/23 maxlen: 23
165.21.39.0/24 maxlen: 24
165.21.49.0/24 maxlen: 24
165.21.50.0/24 maxlen: 24
165.21.52.0/24 maxlen: 24
165.21.70.0/24 maxlen: 24
165.21.71.0/24 maxlen: 24
165.21.72.0/24 maxlen: 24
165.21.74.0/24 maxlen: 24
165.21.84.0/24 maxlen: 24
165.21.88.0/24 maxlen: 24
165.21.91.0/24 maxlen: 24
165.21.93.0/24 maxlen: 24
165.21.94.0/24 maxlen: 24
165.21.95.0/24 maxlen: 24
165.21.100.0/24 maxlen: 24
165.21.101.0/24 maxlen: 24
165.21.104.0/24 maxlen: 24
165.21.108.0/24 maxlen: 24
165.21.109.0/24 maxlen: 24
165.21.122.0/24 maxlen: 24
165.21.123.0/24 maxlen: 24
165.21.138.0/24 maxlen: 24
165.21.139.0/24 maxlen: 24
165.21.238.0/24 maxlen: 24
165.21.244.0/24 maxlen: 24
165.21.246.0/24 maxlen: 24
165.21.254.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A915F89C/5B07F3AC1D8311E29B35A5D808B02CD2/1pe7bz-Z6USA7gu609JoAKtBYmA.crl
rsync://rpki.apnic.net/member_repository/A915F89C/5B07F3AC1D8311E29B35A5D808B02CD2/1pe7bz-Z6USA7gu609JoAKtBYmA.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1pe7bz-Z6USA7gu609JoAKtBYmA.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 27 Nov 2024 14:22:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13454 (0x348e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915F89C/serialNumber=D697BB6F3F99E94480EE0BBAD3D26800AB416260
Validity
Not Before: Sep 13 07:29:01 2024 GMT
Not After : Oct 31 00:00:00 2025 GMT
Subject: CN=66e3e9bd-a106
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:29:4a:53:e0:54:71:5f:e8:9f:9c:de:a7:01:
54:ab:6c:8f:40:5a:2e:7d:0d:8a:55:05:34:1d:be:
ed:4d:f2:f8:44:29:d3:ea:2b:00:7c:2e:95:fc:7e:
cb:b9:e9:69:1e:da:89:d9:ab:c9:23:64:b9:c9:54:
b1:9d:b5:d4:c8:b3:0d:60:fd:ab:5e:f3:8b:cc:59:
de:e0:81:b2:b8:08:f1:41:a2:ea:ab:0c:ee:ca:62:
c0:21:c2:47:ed:f4:77:d3:9b:2c:47:6e:82:e5:95:
fe:a1:7f:91:77:74:f0:fc:91:d7:d4:55:e3:1a:ba:
47:a2:ba:0f:50:00:0a:f8:5b:33:6e:ec:e9:55:5e:
83:59:4e:80:15:2b:12:74:a1:93:1a:20:d4:93:f9:
e0:ca:da:31:4d:d5:42:91:2c:4e:be:eb:bc:e9:92:
67:85:97:46:44:00:fe:cf:12:d3:e1:c3:ec:38:fa:
f1:9a:a5:5e:05:40:41:5f:9d:37:f0:f9:25:77:2e:
d7:4d:c3:8f:57:00:4e:c9:a0:bc:e9:07:60:02:1a:
73:42:06:07:4a:8b:a2:27:9f:d2:40:fa:8e:01:82:
c8:02:a5:0a:b0:e0:3c:b8:7b:eb:cd:97:c9:ee:ce:
90:c3:27:dc:43:7d:04:1b:fb:20:8e:c3:12:67:f9:
22:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:0F:17:1B:17:0C:1B:D8:4F:E1:27:54:C4:25:0A:EB:ED:01:F3:29
X509v3 Authority Key Identifier:
keyid:D6:97:BB:6F:3F:99:E9:44:80:EE:0B:BA:D3:D2:68:00:AB:41:62:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915F89C/5B07F3AC1D8311E29B35A5D808B02CD2/1pe7bz-Z6USA7gu609JoAKtBYmA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1pe7bz-Z6USA7gu609JoAKtBYmA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915F89C/5B07F3AC1D8311E29B35A5D808B02CD2/964F254A4AEC11EF91EC775FC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
128.106.0.0/16
165.21.0.0/16
Signature Algorithm: sha256WithRSAEncryption
0a:25:81:b8:a3:9d:44:0f:89:1b:98:0b:d3:81:53:ab:e7:9a:
b6:f8:56:d9:19:d0:72:b8:63:5f:fc:ff:6e:d8:97:5a:b4:da:
2f:6f:f5:f3:72:de:f3:10:45:6d:0d:9a:9e:06:d4:e4:e3:63:
51:e6:80:9b:b4:14:75:30:dc:4c:12:ab:50:4d:e5:54:19:23:
5c:07:d6:fe:32:96:c4:de:87:24:a7:1c:68:82:ec:8c:bb:4d:
4d:9d:54:c7:a1:e4:10:a9:d6:8b:ef:aa:48:3e:fa:3d:a1:95:
7a:7f:06:9c:10:22:52:b8:1e:8a:ab:3a:02:35:58:2e:e7:cf:
7a:a3:69:9b:c8:f4:4e:9f:54:18:ba:8b:82:68:06:18:5f:06:
8a:f5:1d:2f:6f:ce:02:e0:b1:a5:e5:65:e4:52:f7:ae:41:09:
af:fe:d8:f4:32:a0:33:e1:39:30:24:99:72:6b:dd:52:0b:13:
f7:f0:c2:5a:ac:44:b6:11:3b:72:04:fb:8e:4a:2d:75:f0:65:
96:b0:59:75:20:59:a8:9c:63:87:61:c4:71:d6:ad:da:fa:79:
eb:24:f3:0a:5a:09:40:74:91:26:ef:c7:61:ce:96:6d:b7:94:
59:0e:03:fe:a8:43:37:a3:96:92:ba:89:a0:3f:fa:c2:11:b4:
3e:49:cf:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 16:11:27 2024 by rpki-client on console-fra.rpki-client.org