Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A916413C/9DD8201AA07311E4A8BB6F44C4F9AE02/4481013CA1A111EFBF3B451FC4F9AE02.roa
File: 4481013CA1A111EFBF3B451FC4F9AE02.roa (raw, json)
Hash identifier: NtFvd4bIYVKfPkxPdL/WgD5pP0Id53dN8FiRpPqCxPc=
Subject key identifier: D2:DA:6E:24:16:CC:16:C7:4E:5E:B8:ED:69:9D:90:13:90:E3:15:7D
Certificate issuer: /CN=A916413C/serialNumber=365D71B2682F56B0EEFF1154755D279B8F9AFB33
Certificate serial: 27E6
Authority key identifier: 36:5D:71:B2:68:2F:56:B0:EE:FF:11:54:75:5D:27:9B:8F:9A:FB:33
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Nl1xsmgvVrDu_xFUdV0nm4-a-zM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916413C/9DD8201AA07311E4A8BB6F44C4F9AE02/4481013CA1A111EFBF3B451FC4F9AE02.roa
Signing time: Wed 13 Nov 2024 09:25:48 +0000
ROA not before: Wed 13 Nov 2024 09:25:48 +0000
ROA not after: Fri 31 Jan 2025 00:00:00 +0000
asID: 18001
IP address blocks: 43.228.108.0/22 maxlen: 22
43.228.108.0/24 maxlen: 24
43.228.109.0/24 maxlen: 24
43.228.110.0/24 maxlen: 24
43.228.111.0/24 maxlen: 24
101.2.176.0/20 maxlen: 20
101.2.176.0/21 maxlen: 21
101.2.176.0/22 maxlen: 22
101.2.176.0/24 maxlen: 24
101.2.177.0/24 maxlen: 24
101.2.178.0/24 maxlen: 24
101.2.179.0/24 maxlen: 24
101.2.180.0/22 maxlen: 22
101.2.180.0/24 maxlen: 24
101.2.181.0/24 maxlen: 24
101.2.182.0/24 maxlen: 24
101.2.183.0/24 maxlen: 24
101.2.184.0/21 maxlen: 21
101.2.184.0/22 maxlen: 22
101.2.184.0/24 maxlen: 24
101.2.185.0/24 maxlen: 24
101.2.186.0/24 maxlen: 24
101.2.187.0/24 maxlen: 24
101.2.188.0/24 maxlen: 24
101.2.189.0/24 maxlen: 24
101.2.190.0/24 maxlen: 24
101.2.191.0/24 maxlen: 24
103.227.244.0/22 maxlen: 22
103.227.244.0/24 maxlen: 24
103.227.245.0/24 maxlen: 24
103.227.246.0/24 maxlen: 24
103.227.247.0/24 maxlen: 24
203.153.220.0/22 maxlen: 22
203.153.220.0/24 maxlen: 24
203.153.221.0/24 maxlen: 24
203.153.222.0/24 maxlen: 24
203.153.223.0/24 maxlen: 24
223.224.0.0/19 maxlen: 19
223.224.0.0/22 maxlen: 22
223.224.1.0/24 maxlen: 24
223.224.4.0/22 maxlen: 22
223.224.8.0/22 maxlen: 22
223.224.12.0/22 maxlen: 22
223.224.16.0/22 maxlen: 22
223.224.19.0/24 maxlen: 24
223.224.20.0/22 maxlen: 22
223.224.20.0/24 maxlen: 24
223.224.21.0/24 maxlen: 24
223.224.22.0/24 maxlen: 24
223.224.23.0/24 maxlen: 24
223.224.24.0/22 maxlen: 22
223.224.28.0/22 maxlen: 22
2400:ff00::/32 maxlen: 32
2400:ff00:5::/48 maxlen: 48
2400:ff00:8::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A916413C/9DD8201AA07311E4A8BB6F44C4F9AE02/Nl1xsmgvVrDu_xFUdV0nm4-a-zM.crl
rsync://rpki.apnic.net/member_repository/A916413C/9DD8201AA07311E4A8BB6F44C4F9AE02/Nl1xsmgvVrDu_xFUdV0nm4-a-zM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Nl1xsmgvVrDu_xFUdV0nm4-a-zM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 29 Nov 2024 15:22:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 10214 (0x27e6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916413C/serialNumber=365D71B2682F56B0EEFF1154755D279B8F9AFB33
Validity
Not Before: Nov 13 09:25:48 2024 GMT
Not After : Jan 31 00:00:00 2025 GMT
Subject: CN=6734709c-6975
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:df:33:55:cb:8b:a4:87:18:63:56:8f:1e:e9:
f4:55:01:5c:fa:7e:95:37:5a:f2:be:91:ad:6a:02:
00:e2:44:95:c8:05:99:4e:a0:48:a9:17:17:4c:78:
d5:a5:f7:b2:79:f0:28:66:26:3f:45:8c:f9:9b:64:
67:c2:6d:d4:c4:9e:d6:4d:77:fc:75:3b:dd:27:33:
9e:dd:5c:85:27:54:36:c4:5c:a3:e7:8a:38:47:bc:
5c:96:c0:73:50:6f:00:66:e3:d8:bf:73:7f:26:28:
ba:30:1b:99:88:ce:92:90:2e:50:1a:ec:94:4f:c7:
d7:5f:e9:37:35:c1:9b:0f:45:7a:a0:f7:f0:13:bc:
6f:a5:8c:f4:56:78:bc:5f:82:58:ce:b3:7f:c6:6b:
d6:19:9a:45:e4:fc:12:5d:4e:7f:60:43:55:46:3c:
bc:a8:17:ec:03:c5:c8:b3:d3:c0:11:ca:59:4f:38:
b3:d0:26:3b:44:75:5c:4e:c9:bb:5b:a9:7a:bd:08:
2d:0e:4e:e9:a6:0c:0f:b1:60:47:c6:9d:96:82:0f:
7f:37:66:37:b7:75:35:72:dd:a2:58:e0:c3:96:1e:
9b:e2:ca:89:9e:40:dc:38:d8:ae:e0:9f:45:dc:12:
4b:47:e8:d5:0c:54:62:77:fa:79:71:f2:63:e1:e1:
06:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:DA:6E:24:16:CC:16:C7:4E:5E:B8:ED:69:9D:90:13:90:E3:15:7D
X509v3 Authority Key Identifier:
keyid:36:5D:71:B2:68:2F:56:B0:EE:FF:11:54:75:5D:27:9B:8F:9A:FB:33
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916413C/9DD8201AA07311E4A8BB6F44C4F9AE02/Nl1xsmgvVrDu_xFUdV0nm4-a-zM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Nl1xsmgvVrDu_xFUdV0nm4-a-zM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916413C/9DD8201AA07311E4A8BB6F44C4F9AE02/4481013CA1A111EFBF3B451FC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
43.228.108.0/22
101.2.176.0/20
103.227.244.0/22
203.153.220.0/22
223.224.0.0/19
IPv6:
2400:ff00::/32
Signature Algorithm: sha256WithRSAEncryption
5a:dd:00:d3:5d:9a:24:c9:2a:00:33:67:c1:ba:5e:a8:10:60:
f6:32:f8:8d:f9:e1:99:58:c3:ab:04:27:72:81:76:e9:b1:6b:
48:ea:b5:8b:39:ce:1c:03:3f:4d:b3:56:92:8a:6e:16:f8:1d:
ae:fd:3f:6c:a6:62:5f:13:b4:d9:32:a4:35:82:d6:3a:9f:b4:
1e:e0:55:fc:fb:d1:84:79:9c:1a:47:ca:24:ea:a0:c5:d1:2d:
a7:2b:82:91:85:3b:13:e4:54:c8:c5:20:9c:b9:77:d7:3f:34:
a7:39:83:75:ec:0c:38:5e:a6:ca:3c:a7:17:26:a2:8b:1d:2c:
7b:d2:33:3e:a3:2d:c2:b7:36:a4:81:ed:37:91:61:d8:0a:dc:
dc:54:85:74:b4:cb:80:3c:db:94:a8:03:e0:dc:ee:ca:fb:f4:
d7:6c:53:a3:50:34:09:c8:7c:15:97:93:85:c7:f3:a0:6d:c1:
2a:16:45:e7:c4:1a:01:bd:e8:6d:21:b7:5b:79:6a:a6:e6:9c:
f4:de:33:5d:7a:83:e2:3d:8c:67:0f:52:d1:d8:55:79:73:f0:
43:3b:73:40:43:2a:24:05:7d:b4:68:d8:85:5f:9c:df:44:8b:
ce:ab:13:6f:34:97:14:38:ad:ea:99:5c:fd:11:04:1a:46:7a:
21:de:12:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 16:49:21 2024 by rpki-client on console-ams.rpki-client.org