Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9176AFD/5BB2230A92F811E784CA0E5CC4F9AE02/D6D99A3EBE3711EDA6617C5DC4F9AE02.roa
File: D6D99A3EBE3711EDA6617C5DC4F9AE02.roa (raw, json)
Hash identifier: i+oJi6jpDEgYGCAfWO68s9CmpJ8yXleP5d3NPE288zQ=
Subject key identifier: 01:0B:2E:24:9D:EE:6C:37:29:C3:54:78:A5:38:43:F0:17:91:7E:6A
Certificate issuer: /CN=A9176AFD/serialNumber=0A422A6397D8EB6CB35775297CEB55A5E18FE1E2
Certificate serial: 1844
Authority key identifier: 0A:42:2A:63:97:D8:EB:6C:B3:57:75:29:7C:EB:55:A5:E1:8F:E1:E2
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CkIqY5fY62yzV3UpfOtVpeGP4eI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9176AFD/5BB2230A92F811E784CA0E5CC4F9AE02/D6D99A3EBE3711EDA6617C5DC4F9AE02.roa
Signing time: Wed 28 Aug 2024 16:54:14 +0000
ROA not before: Wed 28 Aug 2024 16:54:14 +0000
ROA not after: Fri 31 Oct 2025 00:00:00 +0000
asID: 9934
IP address blocks: 103.242.44.0/22 maxlen: 22
202.179.0.0/19 maxlen: 19
202.179.0.0/24 maxlen: 24
202.179.1.0/24 maxlen: 24
202.179.2.0/24 maxlen: 24
202.179.3.0/24 maxlen: 24
202.179.4.0/24 maxlen: 24
202.179.5.0/24 maxlen: 24
202.179.6.0/24 maxlen: 24
202.179.7.0/24 maxlen: 24
202.179.8.0/24 maxlen: 24
202.179.9.0/24 maxlen: 24
202.179.10.0/24 maxlen: 24
202.179.11.0/24 maxlen: 24
202.179.12.0/24 maxlen: 24
202.179.13.0/24 maxlen: 24
202.179.14.0/23 maxlen: 23
202.179.16.0/24 maxlen: 24
202.179.17.0/24 maxlen: 24
202.179.18.0/24 maxlen: 24
202.179.19.0/24 maxlen: 24
202.179.20.0/24 maxlen: 24
202.179.21.0/24 maxlen: 24
202.179.22.0/24 maxlen: 24
202.179.23.0/24 maxlen: 24
202.179.24.0/24 maxlen: 24
202.179.25.0/24 maxlen: 24
202.179.26.0/24 maxlen: 24
202.179.27.0/24 maxlen: 24
202.179.28.0/24 maxlen: 24
202.179.29.0/24 maxlen: 24
202.179.30.0/24 maxlen: 24
202.179.31.0/24 maxlen: 24
2400:7480::/32 maxlen: 32
2400:7480::/36 maxlen: 36
2400:7480:1000::/36 maxlen: 36
2400:7480:2000::/36 maxlen: 36
2400:7480:3000::/36 maxlen: 36
2400:7480:4000::/35 maxlen: 36
2400:7480:6000::/36 maxlen: 36
2400:7480:7000::/36 maxlen: 36
2400:7480:8000::/36 maxlen: 36
2400:7480:9000::/36 maxlen: 36
2400:7480:a000::/36 maxlen: 36
2400:7480:b000::/36 maxlen: 36
2400:7480:c000::/35 maxlen: 36
2400:7480:e000::/36 maxlen: 36
2400:7480:f000::/36 maxlen: 36
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9176AFD/5BB2230A92F811E784CA0E5CC4F9AE02/CkIqY5fY62yzV3UpfOtVpeGP4eI.crl
rsync://rpki.apnic.net/member_repository/A9176AFD/5BB2230A92F811E784CA0E5CC4F9AE02/CkIqY5fY62yzV3UpfOtVpeGP4eI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CkIqY5fY62yzV3UpfOtVpeGP4eI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 29 Nov 2024 16:30:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6212 (0x1844)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9176AFD/serialNumber=0A422A6397D8EB6CB35775297CEB55A5E18FE1E2
Validity
Not Before: Aug 28 16:54:14 2024 GMT
Not After : Oct 31 00:00:00 2025 GMT
Subject: CN=66cf5636-b7a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:fa:29:9f:58:9d:80:c8:52:37:ef:62:f6:c0:
a7:f0:96:8b:13:67:d8:49:cc:3e:5e:a0:d3:d1:f4:
ea:63:71:83:c6:f0:37:97:98:a8:bf:b2:7a:79:06:
47:dd:2d:5d:57:ee:48:76:62:58:a0:6e:4e:38:d4:
7a:b9:04:bd:89:01:b1:4a:1b:35:c4:6a:c9:64:c3:
c2:21:1d:8b:5c:c6:28:c1:f2:d8:00:81:2a:4d:3d:
a3:9e:2a:cb:b3:7e:ba:73:40:bb:b5:a7:a4:9d:ca:
0a:4a:d6:81:41:85:c1:cf:c7:55:09:71:82:fd:e7:
69:02:d0:32:cc:ef:79:0b:73:50:2e:07:ba:5f:9c:
46:36:54:2a:db:ff:c8:5d:a9:e6:25:df:81:85:65:
0b:7a:e4:d2:fd:b5:e7:d6:43:7a:d3:2b:a2:af:d1:
2d:28:f4:40:8f:30:15:31:2c:1a:5b:af:84:1c:53:
da:0a:38:85:b0:43:73:44:3c:3d:e2:d4:c9:11:24:
c7:05:cc:c8:27:a7:21:c2:04:c4:35:2a:fa:7e:b6:
8f:ce:6c:e9:a3:5f:9f:1d:9d:77:5d:99:f3:6e:6b:
39:3d:12:f2:40:87:8c:7c:54:13:30:ac:25:b9:02:
f7:d5:e5:03:90:d0:65:ee:18:bc:19:d1:12:38:05:
41:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:0B:2E:24:9D:EE:6C:37:29:C3:54:78:A5:38:43:F0:17:91:7E:6A
X509v3 Authority Key Identifier:
keyid:0A:42:2A:63:97:D8:EB:6C:B3:57:75:29:7C:EB:55:A5:E1:8F:E1:E2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9176AFD/5BB2230A92F811E784CA0E5CC4F9AE02/CkIqY5fY62yzV3UpfOtVpeGP4eI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CkIqY5fY62yzV3UpfOtVpeGP4eI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9176AFD/5BB2230A92F811E784CA0E5CC4F9AE02/D6D99A3EBE3711EDA6617C5DC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.242.44.0/22
202.179.0.0/19
IPv6:
2400:7480::/32
Signature Algorithm: sha256WithRSAEncryption
39:52:4f:d2:ba:ba:50:ee:1f:3e:56:f3:d8:8f:b0:47:9e:6e:
7a:46:26:5f:80:3e:2a:31:29:0a:9e:3e:a6:4a:95:f3:39:37:
e2:43:7b:4b:d1:6a:9b:6f:db:1a:9b:7f:6c:db:01:36:41:4b:
fd:40:35:8a:0c:ba:b8:44:cb:ab:40:d6:4d:b0:22:8a:81:0a:
d2:6a:5c:7c:52:cb:be:fa:d1:fe:79:a0:64:e5:4c:57:e3:07:
a1:67:1b:d7:b3:4d:14:89:b0:e1:6d:cb:56:03:05:d1:12:27:
84:49:d4:b4:e5:0c:2b:8a:79:4f:2d:b2:be:41:49:73:6c:1b:
e1:93:d0:63:ba:1a:d1:2d:ea:bd:1b:1f:80:e7:25:39:42:76:
b9:12:e5:a8:59:7d:cb:58:2e:b4:32:9a:bb:24:88:dd:b2:c7:
34:7b:a6:32:ab:79:27:43:b2:51:bf:66:25:54:a4:0b:80:cc:
5c:b4:20:fa:11:02:ad:66:a2:df:04:c6:f2:43:32:54:3f:81:
40:ae:ee:4c:da:9f:06:ab:e6:eb:91:f1:dc:40:b1:fb:39:4d:
56:f4:ea:06:24:c4:a9:75:9c:2c:1e:23:42:f4:8c:aa:b4:62:
45:e9:7a:3a:ee:2a:10:26:41:8b:a9:9a:28:c9:50:36:1f:04:
c0:33:75:80
-----BEGIN CERTIFICATE-----
MIIFhjCCBG6gAwIBAgICGEQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NzZBRkQxMTAvBgNVBAUTKDBBNDIyQTYzOTdEOEVCNkNCMzU3NzUyOTdDRUI1NUE1
RTE4RkUxRTIwHhcNMjQwODI4MTY1NDE0WhcNMjUxMDMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02NmNmNTYzNi1iN2E2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAyPopn1idgMhSN+9i9sCn8JaLE2fYScw+XqDT0fTqY3GDxvA3l5iov7J6eQZH
3S1dV+5IdmJYoG5OONR6uQS9iQGxShs1xGrJZMPCIR2LXMYowfLYAIEqTT2jnirL
s366c0C7taekncoKStaBQYXBz8dVCXGC/edpAtAyzO95C3NQLge6X5xGNlQq2//I
XanmJd+BhWULeuTS/bXn1kN60yuir9EtKPRAjzAVMSwaW6+EHFPaCjiFsENzRDw9
4tTJESTHBczIJ6chwgTENSr6fraPzmzpo1+fHZ13XZnzbms5PRLyQIeMfFQTMKwl
uQL31eUDkNBl7hi8GdESOAVBtwIDAQABo4ICqjCCAqYwHQYDVR0OBBYEFAELLiSd
7mw3KcNUeKU4Q/AXkX5qMB8GA1UdIwQYMBaAFApCKmOX2Otss1d1KXzrVaXhj+Hi
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NkFGRC81QkIyMjMwQTky
RjgxMUU3ODRDQTBFNUNDNEY5QUUwMi9Da0lxWTVmWTYyeXpWM1VwZk90VnBlR1A0
ZUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0NrSXFZNWZZNjJ5elYzVXBmT3RWcGVHUDRlSS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
NzZBRkQvNUJCMjIzMEE5MkY4MTFFNzg0Q0EwRTVDQzRGOUFFMDIvRDZEOTlBM0VC
RTM3MTFFREE2NjE3QzVEQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwNAYIKwYBBQUHAQcBAf8E
JTAjMBIEAgABMAwDBAJn8iwDBAXKswAwDQQCAAIwBwMFACQAdIAwDQYJKoZIhvcN
AQELBQADggEBADlST9K6ulDuHz5W89iPsEeebnpGJl+APioxKQqePqZKlfM5N+JD
e0vRaptv2xqbf2zbATZBS/1ANYoMurhEy6tA1k2wIoqBCtJqXHxSy7760f55oGTl
TFfjB6FnG9ezTRSJsOFty1YDBdESJ4RJ1LTlDCuKeU8tsr5BSXNsG+GT0GO6GtEt
6r0bH4DnJTlCdrkS5ahZfctYLrQymrskiN2yxzR7pjKreSdDslG/ZiVUpAuAzFy0
IPoRAq1mot8ExvJDMlQ/gUCu7kzanwar5uuR8dxAsfs5TVb06gYkxKl1nCweI0L0
jKq0YkXpejruKhAmQYupmijJUDYfBMAzdYA=
-----END CERTIFICATE-----
Generated at Fri Nov 22 17:55:49 2024 by rpki-client on console-fra.rpki-client.org