Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A917D9FC/C6B034AAB89911E7B269B850C4F9AE02/F49AA4A889C211EEADFCF27CC4F9AE02.roa
File: F49AA4A889C211EEADFCF27CC4F9AE02.roa (raw, json)
Hash identifier: d2SHnZ0bs3Ad8y5hDn3mylfyHabzy/8uFTs+4jhjfXE=
Subject key identifier: 2E:26:D0:14:FF:6F:29:9F:54:A9:79:8F:A8:19:20:41:0E:83:F5:76
Certificate issuer: /CN=A917D9FC/serialNumber=7A6E30210642CF4FBB4173F352748E1EA5C2C7C3
Certificate serial: 176C
Authority key identifier: 7A:6E:30:21:06:42:CF:4F:BB:41:73:F3:52:74:8E:1E:A5:C2:C7:C3
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/em4wIQZCz0-7QXPzUnSOHqXCx8M.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917D9FC/C6B034AAB89911E7B269B850C4F9AE02/F49AA4A889C211EEADFCF27CC4F9AE02.roa
Signing time: Tue 30 Apr 2024 17:25:30 +0000
ROA not before: Tue 30 Apr 2024 17:25:30 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 9287
IP address blocks: 45.125.128.0/22 maxlen: 22
45.125.128.0/24 maxlen: 24
45.125.129.0/24 maxlen: 24
45.125.131.0/24 maxlen: 24
45.252.52.0/22 maxlen: 22
45.252.52.0/24 maxlen: 24
45.252.53.0/24 maxlen: 24
45.252.54.0/24 maxlen: 24
45.252.55.0/24 maxlen: 24
103.55.1.0/24 maxlen: 24
103.55.2.0/24 maxlen: 24
103.76.196.0/22 maxlen: 22
103.76.196.0/24 maxlen: 24
103.76.197.0/24 maxlen: 24
103.76.198.0/24 maxlen: 24
103.76.199.0/24 maxlen: 24
103.115.132.0/22 maxlen: 22
103.115.132.0/24 maxlen: 24
103.115.133.0/24 maxlen: 24
103.115.134.0/24 maxlen: 24
103.115.135.0/24 maxlen: 24
2404:3280::/32 maxlen: 32
2404:3280:1::/48 maxlen: 48
2404:3280:a::/48 maxlen: 48
2404:3280:c::/48 maxlen: 48
2404:3280:f::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A917D9FC/C6B034AAB89911E7B269B850C4F9AE02/em4wIQZCz0-7QXPzUnSOHqXCx8M.crl
rsync://rpki.apnic.net/member_repository/A917D9FC/C6B034AAB89911E7B269B850C4F9AE02/em4wIQZCz0-7QXPzUnSOHqXCx8M.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/em4wIQZCz0-7QXPzUnSOHqXCx8M.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 29 Nov 2024 16:34:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5996 (0x176c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917D9FC/serialNumber=7A6E30210642CF4FBB4173F352748E1EA5C2C7C3
Validity
Not Before: Apr 30 17:25:30 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6631298a-6266
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:2c:d7:96:a1:2d:55:b8:aa:a0:8c:18:5b:d6:
fa:7d:a7:7b:c5:0d:9d:0a:66:b9:b1:ad:07:52:82:
e4:e8:bd:dc:1e:9e:34:7b:fe:5e:f6:5c:04:1d:ab:
5b:a8:8e:21:45:2b:84:ce:45:6a:36:27:f6:ee:24:
f6:5a:f2:f8:f4:2e:e8:bc:8a:bc:00:5e:f3:a2:fb:
9d:22:02:22:fa:31:ed:85:17:10:61:75:ef:5c:11:
d8:ff:d0:c4:6f:fc:46:78:70:75:46:6a:e2:dd:95:
68:26:b0:cb:5e:d4:17:7a:f5:16:5d:28:84:d2:d4:
48:a8:b2:d4:21:73:a3:76:0d:00:d7:e8:11:b9:75:
85:cf:92:24:f3:0a:b5:08:49:d6:3d:0d:28:d8:0f:
40:d1:49:1a:07:25:7c:ec:c4:01:28:f5:6b:b8:10:
17:35:03:a2:16:ca:20:08:89:a2:cc:52:71:9b:52:
ca:f9:56:70:cc:81:f0:a2:9b:ae:00:9f:a8:21:a1:
29:69:91:04:7f:04:bd:0f:bf:75:1f:9a:75:4a:22:
80:09:cc:f9:69:73:64:85:55:8f:73:15:b4:fd:d5:
03:78:c4:42:a1:da:64:e3:b5:03:aa:ae:21:79:8b:
3c:eb:e3:96:74:73:a3:f2:76:6e:29:85:e9:4e:45:
d5:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:26:D0:14:FF:6F:29:9F:54:A9:79:8F:A8:19:20:41:0E:83:F5:76
X509v3 Authority Key Identifier:
keyid:7A:6E:30:21:06:42:CF:4F:BB:41:73:F3:52:74:8E:1E:A5:C2:C7:C3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917D9FC/C6B034AAB89911E7B269B850C4F9AE02/em4wIQZCz0-7QXPzUnSOHqXCx8M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/em4wIQZCz0-7QXPzUnSOHqXCx8M.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917D9FC/C6B034AAB89911E7B269B850C4F9AE02/F49AA4A889C211EEADFCF27CC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.125.128.0/22
45.252.52.0/22
103.55.1.0-103.55.2.255
103.76.196.0/22
103.115.132.0/22
IPv6:
2404:3280::/32
Signature Algorithm: sha256WithRSAEncryption
72:b6:13:24:2f:9c:1f:ea:69:84:03:dd:10:52:9b:d2:3a:67:
4a:01:f9:1d:23:d8:6c:73:c4:40:09:53:3d:69:f3:fb:30:8b:
3a:13:65:1e:a8:d3:3c:8f:03:05:a1:f2:13:bd:11:50:90:e2:
5b:38:86:cb:c2:53:56:c2:fe:57:79:75:d2:60:19:93:0e:b4:
97:61:5d:8c:42:9b:f3:9b:b3:5b:2b:26:b3:d4:bf:65:46:53:
5b:96:b2:88:ce:7a:59:e2:04:a4:04:f1:5f:c7:4f:43:f0:ad:
eb:0a:92:26:08:01:f2:35:1f:67:ff:6b:0b:60:fc:5c:52:1e:
7e:a3:1f:26:87:90:f2:c6:c4:c2:0b:f9:ff:78:d1:fa:c3:9f:
e0:17:a5:2d:71:33:a2:2c:9c:d6:12:1b:29:16:1f:64:5b:92:
37:9e:6f:d7:55:07:08:93:f5:37:8c:e1:fb:1b:63:46:4e:be:
16:fc:5d:bb:a0:b6:a0:1c:be:16:57:50:ec:f8:ca:20:28:ed:
30:c4:d8:ad:d5:e8:0a:e5:29:c7:28:f0:27:ed:59:0a:0c:63:
2c:ae:f3:35:4a:ba:3e:e2:04:4b:e1:30:d5:5e:76:bd:cd:02:
51:c2:50:44:4f:eb:84:a8:dc:9b:68:34:03:b7:c7:43:8e:de:
c2:da:8c:ca
-----BEGIN CERTIFICATE-----
MIIFoDCCBIigAwIBAgICF2wwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
N0Q5RkMxMTAvBgNVBAUTKDdBNkUzMDIxMDY0MkNGNEZCQjQxNzNGMzUyNzQ4RTFF
QTVDMkM3QzMwHhcNMjQwNDMwMTcyNTMwWhcNMjUwNzAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02NjMxMjk4YS02MjY2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEApSzXlqEtVbiqoIwYW9b6fad7xQ2dCma5sa0HUoLk6L3cHp40e/5e9lwEHatb
qI4hRSuEzkVqNif27iT2WvL49C7ovIq8AF7zovudIgIi+jHthRcQYXXvXBHY/9DE
b/xGeHB1Rmri3ZVoJrDLXtQXevUWXSiE0tRIqLLUIXOjdg0A1+gRuXWFz5Ik8wq1
CEnWPQ0o2A9A0UkaByV87MQBKPVruBAXNQOiFsogCImizFJxm1LK+VZwzIHwopuu
AJ+oIaEpaZEEfwS9D791H5p1SiKACcz5aXNkhVWPcxW0/dUDeMRCodpk47UDqq4h
eYs86+OWdHOj8nZuKYXpTkXVPwIDAQABo4ICxDCCAsAwHQYDVR0OBBYEFC4m0BT/
bymfVKl5j6gZIEEOg/V2MB8GA1UdIwQYMBaAFHpuMCEGQs9Pu0Fz81J0jh6lwsfD
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3RDlGQy9DNkIwMzRBQUI4
OTkxMUU3QjI2OUI4NTBDNEY5QUUwMi9lbTR3SVFaQ3owLTdRWFB6VW5TT0hxWEN4
OE0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2VtNHdJUVpDejAtN1FYUHpVblNPSHFYQ3g4TS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
N0Q5RkMvQzZCMDM0QUFCODk5MTFFN0IyNjlCODUwQzRGOUFFMDIvRjQ5QUE0QTg4
OUMyMTFFRUFERkNGMjdDQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwTgYIKwYBBQUHAQcBAf8E
PzA9MCwEAgABMCYDBAItfYADBAIt/DQwDAMEAGc3AQMEAGc3AgMEAmdMxAMEAmdz
hDANBAIAAjAHAwUAJAQygDANBgkqhkiG9w0BAQsFAAOCAQEAcrYTJC+cH+pphAPd
EFKb0jpnSgH5HSPYbHPEQAlTPWnz+zCLOhNlHqjTPI8DBaHyE70RUJDiWziGy8JT
VsL+V3l10mAZkw60l2FdjEKb85uzWysms9S/ZUZTW5ayiM56WeIEpATxX8dPQ/Ct
6wqSJggB8jUfZ/9rC2D8XFIefqMfJoeQ8sbEwgv5/3jR+sOf4BelLXEzoiyc1hIb
KRYfZFuSN55v11UHCJP1N4zh+xtjRk6+Fvxdu6C2oBy+FldQ7PjKICjtMMTYrdXo
CuUpxyjwJ+1ZCgxjLK7zNUq6PuIES+Ew1V52vc0CUcJQRE/rhKjcm2g0A7fHQ47e
wtqMyg==
-----END CERTIFICATE-----
Generated at Fri Nov 22 19:50:06 2024 by rpki-client on console-ams.rpki-client.org