Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9179F22/CF9BF5FE8F2F11EE9CBFD961C4F9AE02/4120F6A28F3011EEA61ACF62C4F9AE02.roa
File: 4120F6A28F3011EEA61ACF62C4F9AE02.roa (raw, json)
Hash identifier: Ot9cpLYOpRPaFsp3xYibZwM51C9pmXOqK219ZE/jTZk=
Subject key identifier: 07:50:DE:26:69:25:21:7B:82:9A:3B:A6:0F:E5:4A:38:F4:30:73:C5
Certificate issuer: /CN=A9179F22/serialNumber=FCF753D346AAAB95AB14C6267515CDF13F80FBBB
Certificate serial: 5D
Authority key identifier: FC:F7:53:D3:46:AA:AB:95:AB:14:C6:26:75:15:CD:F1:3F:80:FB:BB
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_PdT00aqq5WrFMYmdRXN8T-A-7s.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9179F22/CF9BF5FE8F2F11EE9CBFD961C4F9AE02/4120F6A28F3011EEA61ACF62C4F9AE02.roa
Signing time: Fri 26 Apr 2024 05:08:18 +0000
ROA not before: Fri 26 Apr 2024 05:08:18 +0000
ROA not after: Thu 01 May 2025 00:00:00 +0000
asID: 14618
IP address blocks: 103.150.252.0/24 maxlen: 24
2400:a4a0:1::/48 maxlen: 48
2400:a4a0:30::/48 maxlen: 48
2400:a4a0:40::/48 maxlen: 48
2400:a4a0:41::/48 maxlen: 48
2400:a4a0:42::/48 maxlen: 48
2400:a4a0:90::/48 maxlen: 48
2400:a4a0:100::/48 maxlen: 48
2400:a4a0:101::/48 maxlen: 48
2400:a4a0:115::/48 maxlen: 48
2400:a4a0:a100::/48 maxlen: 48
2400:a4a0:aaa2::/48 maxlen: 48
2400:a4a0:aaa3::/48 maxlen: 48
2400:a4a0:aaa4::/48 maxlen: 48
2400:a4a0:aaa5::/48 maxlen: 48
2400:a4a0:b100::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9179F22/CF9BF5FE8F2F11EE9CBFD961C4F9AE02/_PdT00aqq5WrFMYmdRXN8T-A-7s.crl
rsync://rpki.apnic.net/member_repository/A9179F22/CF9BF5FE8F2F11EE9CBFD961C4F9AE02/_PdT00aqq5WrFMYmdRXN8T-A-7s.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_PdT00aqq5WrFMYmdRXN8T-A-7s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 08 May 2024 08:12:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 93 (0x5d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9179F22/serialNumber=FCF753D346AAAB95AB14C6267515CDF13F80FBBB
Validity
Not Before: Apr 26 05:08:18 2024 GMT
Not After : May 1 00:00:00 2025 GMT
Subject: CN=662b36c1-80dd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:b6:ab:99:90:e1:c9:89:b7:ad:91:22:2a:6b:
b2:53:7b:ba:54:07:f0:a3:e5:b5:b9:02:5b:05:be:
3f:1c:71:63:de:08:b7:a0:6c:27:02:50:ab:eb:73:
66:0c:32:c0:71:74:88:66:63:1b:69:39:ad:fa:8f:
90:7f:87:64:43:32:ae:c8:61:94:bc:42:d2:1e:47:
7b:63:d2:c5:3f:c9:13:ff:df:28:af:db:62:17:2b:
9e:28:8b:8e:31:6f:53:f4:1c:b2:99:9d:ba:55:56:
5d:8d:a2:c7:ab:69:f0:73:c9:ff:7b:69:06:17:d3:
50:8b:3a:17:12:e2:f0:01:8a:72:2a:23:7b:df:85:
dc:f1:3c:d1:08:8c:4c:bf:1d:41:78:fb:b1:01:4f:
57:d6:ba:9b:eb:b0:c8:21:4e:75:f8:1d:99:f1:50:
27:85:94:80:34:d8:c7:32:33:fc:40:b8:ba:f4:62:
ea:27:4a:13:1d:6d:0f:99:21:c5:c1:de:9f:1e:fc:
fd:4f:ea:22:03:81:76:32:cf:0a:5b:23:f7:0e:42:
38:c5:8b:e9:53:bc:68:d7:7b:17:70:ea:8a:91:37:
76:ba:c8:d8:4d:bc:b6:5f:1e:e1:08:ce:b3:50:8e:
8a:73:c1:f9:8e:c2:1b:3a:4b:11:68:1d:c6:e0:12:
c7:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:50:DE:26:69:25:21:7B:82:9A:3B:A6:0F:E5:4A:38:F4:30:73:C5
X509v3 Authority Key Identifier:
keyid:FC:F7:53:D3:46:AA:AB:95:AB:14:C6:26:75:15:CD:F1:3F:80:FB:BB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9179F22/CF9BF5FE8F2F11EE9CBFD961C4F9AE02/_PdT00aqq5WrFMYmdRXN8T-A-7s.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_PdT00aqq5WrFMYmdRXN8T-A-7s.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9179F22/CF9BF5FE8F2F11EE9CBFD961C4F9AE02/4120F6A28F3011EEA61ACF62C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.150.252.0/24
IPv6:
2400:a4a0:1::/48
2400:a4a0:30::/48
2400:a4a0:40::-2400:a4a0:42:ffff:ffff:ffff:ffff:ffff
2400:a4a0:90::/48
2400:a4a0:100::/47
2400:a4a0:115::/48
2400:a4a0:a100::/48
2400:a4a0:aaa2::-2400:a4a0:aaa5:ffff:ffff:ffff:ffff:ffff
2400:a4a0:b100::/48
Signature Algorithm: sha256WithRSAEncryption
7f:d5:fe:25:1a:0a:22:54:ee:e9:26:72:30:a1:40:1f:dc:b6:
8b:c2:df:31:c1:80:47:a0:35:4d:6e:80:14:64:5e:f8:ab:3b:
52:2e:75:8e:41:3b:c9:9b:e0:3f:41:23:e5:cc:38:f9:47:d2:
34:d1:bd:bb:48:db:e8:e3:d6:1a:69:10:06:76:c5:9c:ed:31:
41:4c:36:29:e1:87:70:5d:1f:4a:c3:52:af:95:23:45:42:b5:
a6:e0:21:52:72:fc:7c:8f:5e:12:10:6f:d6:1c:bf:b4:02:2d:
53:8a:d5:aa:a0:02:0b:e7:8b:7a:ab:7c:24:13:fd:a0:e9:2e:
aa:fc:49:9a:9c:ca:6a:0b:85:43:59:7c:ff:c8:0a:c2:91:31:
2b:62:9f:7c:6e:cb:56:22:f3:6e:bf:c9:33:0a:8c:6b:72:dc:
4f:de:20:eb:23:85:50:2a:07:5e:6e:7b:1c:64:11:41:59:da:
50:92:27:30:ca:93:f9:dd:d3:5e:8d:07:ec:bf:b1:5d:ac:7b:
ef:6f:02:21:94:56:21:fd:23:aa:c3:c5:0a:7b:e7:49:63:9d:
bf:29:96:c6:83:ef:ce:38:d3:cc:2e:1c:6e:47:5b:5a:af:b9:
f4:6b:4b:5b:f3:21:a5:fb:dc:aa:58:62:d0:a3:21:60:39:67:
57:78:0a:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 1 10:10:29 2024 by rpki-client on console-ams.rpki-client.org