Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9168B03/D118E678F99D11E6B8727013C4F9AE02/D3EAE1500B5911EA8CC1114BC4F9AE02.roa
File: D3EAE1500B5911EA8CC1114BC4F9AE02.roa (raw, json)
Hash identifier: FlF6pC5hcexFI1ynxGhRxmxYnReF8nnPqoWFCF/BAjI=
Subject key identifier: 57:99:80:CF:28:A9:67:A9:1A:55:8A:E9:E0:66:AB:91:17:07:E9:C8
Certificate issuer: /CN=A9168B03/serialNumber=BA51D09E1393E70A05873203FF7CC4E1FD7EA70F
Certificate serial: 1AB0
Authority key identifier: BA:51:D0:9E:13:93:E7:0A:05:87:32:03:FF:7C:C4:E1:FD:7E:A7:0F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ulHQnhOT5woFhzID_3zE4f1-pw8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9168B03/D118E678F99D11E6B8727013C4F9AE02/D3EAE1500B5911EA8CC1114BC4F9AE02.roa
Signing time: Mon 30 Oct 2023 16:43:27 +0000
ROA not before: Mon 30 Oct 2023 16:43:27 +0000
ROA not after: Mon 30 Dec 2024 00:00:00 +0000
asID: 9832
IP address blocks: 103.9.132.0/22 maxlen: 24
180.92.224.0/20 maxlen: 22
180.92.224.0/21 maxlen: 24
180.92.232.0/22 maxlen: 24
180.92.236.0/24 maxlen: 24
180.92.237.0/24 maxlen: 24
180.92.238.0/24 maxlen: 24
180.92.239.0/24 maxlen: 24
203.148.88.0/22 maxlen: 24
203.188.240.0/20 maxlen: 20
203.188.240.0/21 maxlen: 21
203.188.240.0/22 maxlen: 22
203.188.240.0/24 maxlen: 24
203.188.241.0/24 maxlen: 24
203.188.242.0/24 maxlen: 24
203.188.243.0/24 maxlen: 24
203.188.244.0/22 maxlen: 22
203.188.244.0/24 maxlen: 24
203.188.245.0/24 maxlen: 24
203.188.246.0/24 maxlen: 24
203.188.247.0/24 maxlen: 24
203.188.248.0/21 maxlen: 21
203.188.248.0/24 maxlen: 24
203.188.249.0/24 maxlen: 24
203.188.250.0/24 maxlen: 24
203.188.251.0/24 maxlen: 24
203.188.252.0/24 maxlen: 24
203.188.253.0/24 maxlen: 24
203.188.254.0/24 maxlen: 24
203.188.255.0/24 maxlen: 24
2403:bf80::/32 maxlen: 32
2403:bf80::/48 maxlen: 48
2403:bf80:1::/48 maxlen: 48
2403:bf80:2::/48 maxlen: 48
2403:bf80:3::/48 maxlen: 48
2403:bf80:a::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9168B03/D118E678F99D11E6B8727013C4F9AE02/ulHQnhOT5woFhzID_3zE4f1-pw8.crl
rsync://rpki.apnic.net/member_repository/A9168B03/D118E678F99D11E6B8727013C4F9AE02/ulHQnhOT5woFhzID_3zE4f1-pw8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ulHQnhOT5woFhzID_3zE4f1-pw8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 23 May 2024 16:01:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6832 (0x1ab0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9168B03/serialNumber=BA51D09E1393E70A05873203FF7CC4E1FD7EA70F
Validity
Not Before: Oct 30 16:43:27 2023 GMT
Not After : Dec 30 00:00:00 2024 GMT
Subject: CN=653fdd2e-8baa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:00:d8:2f:49:41:9b:3d:22:f1:97:f6:70:2b:
e2:af:1b:42:3a:a4:07:a1:32:5f:d8:3e:a7:2e:7a:
48:50:29:59:ca:7e:d5:74:2a:29:39:43:00:a7:fe:
12:ac:ed:32:71:26:1e:ce:f5:7c:b9:15:ce:ce:a9:
cd:0e:69:d0:33:e7:c7:3c:53:62:6e:61:03:86:ad:
be:25:30:ec:5a:b4:6a:52:2b:fa:35:22:e0:99:ae:
25:32:db:47:52:17:65:bc:bf:b2:81:0a:2d:02:31:
25:d3:67:da:2b:77:dd:b7:59:19:fc:46:ad:41:04:
62:6a:a5:a1:20:ad:c0:43:e5:6e:66:12:e9:73:ec:
e8:75:3b:9a:1a:09:cd:bb:d5:ac:fb:ae:eb:31:6b:
c1:ef:18:12:ac:94:03:ab:40:f2:d9:65:c6:b7:f5:
c6:fb:15:82:83:49:4c:4c:15:4d:78:05:73:d1:40:
3a:e6:08:ce:fa:49:76:22:8c:db:cf:3f:23:76:c3:
a3:86:13:28:94:a5:65:fa:89:5e:b9:63:c6:27:ac:
92:00:31:53:20:fa:bf:c6:1f:fe:4c:5a:21:4c:64:
49:94:9e:f0:1d:68:f1:ab:8d:7a:1a:63:1e:1d:ee:
b4:41:21:60:79:a0:d3:63:d2:4f:d7:ee:ee:1b:bd:
60:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:99:80:CF:28:A9:67:A9:1A:55:8A:E9:E0:66:AB:91:17:07:E9:C8
X509v3 Authority Key Identifier:
keyid:BA:51:D0:9E:13:93:E7:0A:05:87:32:03:FF:7C:C4:E1:FD:7E:A7:0F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9168B03/D118E678F99D11E6B8727013C4F9AE02/ulHQnhOT5woFhzID_3zE4f1-pw8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ulHQnhOT5woFhzID_3zE4f1-pw8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9168B03/D118E678F99D11E6B8727013C4F9AE02/D3EAE1500B5911EA8CC1114BC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.9.132.0/22
180.92.224.0/20
203.148.88.0/22
203.188.240.0/20
IPv6:
2403:bf80::/32
Signature Algorithm: sha256WithRSAEncryption
14:70:b7:60:ec:72:9a:fc:53:48:fb:8f:0d:38:bc:ee:04:8f:
9d:1e:86:a0:52:3f:11:07:75:2e:bd:23:80:23:81:b9:0c:1f:
48:51:ad:e3:78:1f:75:26:71:16:64:d4:ea:0d:1f:39:be:2d:
eb:7e:cc:a7:a7:38:06:ad:c5:45:61:be:c6:86:44:31:4f:f0:
cd:cd:f9:01:a5:37:ad:29:3b:e8:a5:e8:5d:86:1a:f5:40:30:
58:0e:f2:9c:e2:c2:db:75:51:c1:5e:d2:c9:03:58:b4:fc:b7:
0f:99:5f:7c:64:70:48:54:50:2f:1b:97:e6:58:8c:b6:6a:c8:
ea:70:a8:98:00:8c:01:00:31:31:0a:5b:c5:4b:e1:32:39:bf:
bc:09:de:1e:69:20:bf:9d:d0:1e:9c:28:56:33:7b:14:4c:34:
5a:65:8d:e6:f6:3a:da:02:d2:9d:03:4e:a7:59:3a:2c:d2:ee:
32:5f:19:c1:70:5d:be:f1:58:22:1c:ae:19:0a:39:a8:ea:9b:
b3:0b:cd:d9:5a:a9:ce:9c:b2:26:65:76:50:bf:39:e8:d2:fb:
3e:15:19:b4:45:ef:e7:f8:29:7a:e9:04:de:b7:ae:60:2f:e4:
f6:84:f7:bb:52:c2:9e:37:6d:e6:79:62:70:2c:3a:d9:15:3f:
92:4e:8f:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 16 17:51:21 2024 by rpki-client on console-ams.rpki-client.org