Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A917452D/AA42171E276811ED9A221730C4F9AE02/59942846D21811EE93095285C4F9AE02.roa
File: 59942846D21811EE93095285C4F9AE02.roa (raw, json)
Hash identifier: WKGoGCPF42uOFvWjDbePlTDvmtNNp0qAbQmIqMf1Y2s=
Subject key identifier: 01:B8:43:34:7E:0E:6A:A5:93:71:F7:A0:93:95:CB:8E:FF:C7:D2:0F
Certificate issuer: /CN=A917452D/serialNumber=E4AE80372A867987BB2A0ABBE110AB804370D5E3
Certificate serial: 019D
Authority key identifier: E4:AE:80:37:2A:86:79:87:BB:2A:0A:BB:E1:10:AB:80:43:70:D5:E3
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5K6ANyqGeYe7Kgq74RCrgENw1eM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917452D/AA42171E276811ED9A221730C4F9AE02/59942846D21811EE93095285C4F9AE02.roa
Signing time: Fri 23 Feb 2024 08:00:41 +0000
ROA not before: Fri 23 Feb 2024 08:00:41 +0000
ROA not after: Sun 02 Mar 2025 00:00:00 +0000
asID: 3758
IP address blocks: 202.166.0.0/17 maxlen: 17
202.166.0.0/19 maxlen: 19
202.166.1.0/24 maxlen: 24
202.166.32.0/19 maxlen: 19
202.166.64.0/18 maxlen: 18
202.166.123.0/24 maxlen: 24
202.166.128.0/19 maxlen: 19
2400:d800::/30 maxlen: 30
2400:d800::/31 maxlen: 31
2400:d800::/32 maxlen: 32
2400:d801::/32 maxlen: 32
2400:d801:3f00::/40 maxlen: 40
2400:d801:9000::/36 maxlen: 44
2400:d801:a000::/36 maxlen: 44
2400:d802::/31 maxlen: 31
2400:d802::/32 maxlen: 32
2400:d802:500::/40 maxlen: 44
2400:d802:800::/40 maxlen: 44
2400:d802:1100::/40 maxlen: 44
2400:d802:1310::/44 maxlen: 44
2400:d802:1410::/44 maxlen: 44
2400:d802:1480::/41 maxlen: 44
2400:d802:1800::/40 maxlen: 44
2400:d802:1900::/40 maxlen: 44
2400:d802:1a00::/40 maxlen: 44
2400:d802:1c00::/40 maxlen: 44
2400:d802:1d00::/40 maxlen: 44
2400:d802:1f00::/40 maxlen: 44
2400:d802:2100::/40 maxlen: 44
2400:d802:2300::/40 maxlen: 44
2400:d802:2600::/40 maxlen: 44
2400:d802:2900::/40 maxlen: 44
2400:d802:2a00::/40 maxlen: 44
2400:d802:2d00::/40 maxlen: 44
2400:d802:3200::/40 maxlen: 44
2400:d802:3300::/40 maxlen: 44
2400:d802:3600::/40 maxlen: 44
2400:d802:3a00::/40 maxlen: 44
2400:d802:9d00::/40 maxlen: 44
2400:d802:9f00::/40 maxlen: 44
2400:d802:a000::/36 maxlen: 44
2400:d803::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A917452D/AA42171E276811ED9A221730C4F9AE02/5K6ANyqGeYe7Kgq74RCrgENw1eM.crl
rsync://rpki.apnic.net/member_repository/A917452D/AA42171E276811ED9A221730C4F9AE02/5K6ANyqGeYe7Kgq74RCrgENw1eM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5K6ANyqGeYe7Kgq74RCrgENw1eM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 28 May 2024 04:12:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 413 (0x19d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917452D/serialNumber=E4AE80372A867987BB2A0ABBE110AB804370D5E3
Validity
Not Before: Feb 23 08:00:41 2024 GMT
Not After : Mar 2 00:00:00 2025 GMT
Subject: CN=65d850a9-6dd4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:8c:34:69:2c:2a:a1:4d:18:93:40:46:14:9e:
19:c3:83:7b:f4:7f:93:47:65:e2:14:0a:50:77:8c:
b4:33:1e:f5:00:e2:38:ea:01:1b:d7:b4:cd:bc:76:
5c:8f:5b:16:a8:3f:56:1f:d3:ad:d8:0b:49:00:01:
65:d0:96:76:8a:55:71:90:9a:14:4e:79:5b:11:ea:
65:d3:8c:a7:a7:42:36:48:22:46:21:52:16:82:92:
be:30:a8:b1:30:e8:53:96:1a:29:d0:19:88:6f:9f:
42:42:41:d7:26:ad:40:bc:a6:37:6a:99:33:93:0b:
79:de:c6:cf:98:15:c5:e0:e4:b6:8d:c0:05:ad:34:
72:f1:99:06:23:40:6e:00:ba:ae:98:5f:be:98:9a:
1f:8e:f2:ac:ec:4b:bd:c3:f6:a5:e4:c7:4d:e5:75:
b8:fd:49:17:f5:be:09:a5:0a:22:a1:24:e4:cc:d3:
4d:ee:ee:5d:5e:d8:ea:c1:e9:5d:2f:c8:2c:1f:49:
c2:33:b1:1b:44:35:a8:d4:a0:15:b3:17:ed:c1:4d:
8b:8c:18:b1:74:18:e9:f5:45:c0:3d:f8:b2:ee:2e:
bc:0a:0b:f1:3a:9e:f6:52:a3:2f:59:68:a1:2d:23:
98:0c:5c:9e:61:a9:83:cd:84:18:16:b7:38:26:02:
a5:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:B8:43:34:7E:0E:6A:A5:93:71:F7:A0:93:95:CB:8E:FF:C7:D2:0F
X509v3 Authority Key Identifier:
keyid:E4:AE:80:37:2A:86:79:87:BB:2A:0A:BB:E1:10:AB:80:43:70:D5:E3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917452D/AA42171E276811ED9A221730C4F9AE02/5K6ANyqGeYe7Kgq74RCrgENw1eM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5K6ANyqGeYe7Kgq74RCrgENw1eM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917452D/AA42171E276811ED9A221730C4F9AE02/59942846D21811EE93095285C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
202.166.0.0-202.166.159.255
IPv6:
2400:d800::/30
Signature Algorithm: sha256WithRSAEncryption
66:60:95:48:ea:ef:cb:52:59:6e:20:bf:d7:05:ee:88:ea:74:
b2:b0:67:57:0e:19:a6:a2:fa:f4:8d:99:a9:ec:4b:39:f2:08:
0b:40:73:2b:c6:ee:87:14:f4:13:b1:15:c7:1e:ac:60:08:3d:
2a:96:b9:ba:64:d7:ae:6f:24:f9:39:85:3e:ab:05:64:26:a2:
ad:80:37:7c:4c:e8:fb:0e:03:0b:d0:e2:15:90:78:2d:26:5b:
9c:62:76:5e:50:3c:6f:0d:51:a4:db:4d:62:bf:09:5a:80:95:
2f:01:0b:22:13:db:86:99:53:cd:6f:a9:2c:11:40:d9:b8:0f:
1b:bf:31:81:bf:f5:88:94:38:e9:e2:a6:04:da:5c:21:40:e8:
b1:0d:28:a0:7e:e8:79:d6:88:98:1b:f4:60:4d:3c:ac:72:83:
2c:ef:25:85:18:2e:c9:02:50:4a:d1:67:9e:54:f9:97:a0:84:
b4:d5:ba:20:2f:cd:17:d6:db:96:23:5d:be:8b:2b:f0:2a:71:
e5:d6:3c:a8:f3:6c:2a:8b:cf:ed:26:29:31:14:df:90:a3:5c:
f0:ef:97:72:ae:ad:fc:18:6c:7e:37:b9:9d:9b:a4:b2:46:67:
3b:ed:4a:e1:f5:54:f2:51:a9:1d:b6:67:2c:03:a0:6a:bb:79:
91:6e:ca:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 21 05:24:56 2024 by rpki-client on console-fra.rpki-client.org