Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91803B8/3D6B5934539911EA9EAD4B6FC4F9AE02/378397D8539A11EAAA519470C4F9AE02.roa
File: 378397D8539A11EAAA519470C4F9AE02.roa (raw, json)
Hash identifier: 5sPE0GDdJo3Ltbgm1kQO4nonNwU2rYdaJuCo/tJetug=
Subject key identifier: A6:F3:75:FC:E5:0D:04:3D:58:F3:FA:83:02:FA:3B:BC:74:31:50:C1
Certificate issuer: /CN=A91803B8/serialNumber=7EDE2765365414EA5C1D9E49F1788D094EABFB74
Certificate serial: 0A2B
Authority key identifier: 7E:DE:27:65:36:54:14:EA:5C:1D:9E:49:F1:78:8D:09:4E:AB:FB:74
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ft4nZTZUFOpcHZ5J8XiNCU6r-3Q.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91803B8/3D6B5934539911EA9EAD4B6FC4F9AE02/378397D8539A11EAAA519470C4F9AE02.roa
Signing time: Sun 04 Aug 2024 20:17:51 +0000
ROA not before: Sun 04 Aug 2024 20:17:51 +0000
ROA not after: Tue 30 Sep 2025 00:00:00 +0000
asID: 134153
IP address blocks: 103.96.104.0/22 maxlen: 22
103.96.104.0/23 maxlen: 23
103.96.104.0/24 maxlen: 24
103.96.105.0/24 maxlen: 24
103.96.106.0/23 maxlen: 23
103.96.106.0/24 maxlen: 24
103.96.107.0/24 maxlen: 24
2401:7c40::/48 maxlen: 48
2401:7c40:1::/48 maxlen: 48
2401:7c40:2::/48 maxlen: 48
2401:7c40:3::/48 maxlen: 48
2401:7c40:4::/48 maxlen: 48
2401:7c40:5::/48 maxlen: 48
2401:7c40:6::/48 maxlen: 48
2401:7c40:7::/48 maxlen: 48
2401:7c40:8::/48 maxlen: 48
2401:7c40:9::/48 maxlen: 48
2401:7c40:a::/48 maxlen: 48
2401:7c40:b::/48 maxlen: 48
2401:7c40:c::/48 maxlen: 48
2401:7c40:d::/48 maxlen: 48
2401:7c40:e::/48 maxlen: 48
2401:7c40:f::/48 maxlen: 48
2401:7c40:10::/48 maxlen: 48
2401:7c40:11::/48 maxlen: 48
2401:7c40:12::/48 maxlen: 48
2401:7c40:13::/48 maxlen: 48
2401:7c40:14::/48 maxlen: 48
2401:7c40:15::/48 maxlen: 48
2401:7c40:16::/48 maxlen: 48
2401:7c40:17::/48 maxlen: 48
2401:7c40:18::/48 maxlen: 48
2401:7c40:19::/48 maxlen: 48
2401:7c40:1a::/48 maxlen: 48
2401:7c40:1b::/48 maxlen: 48
2401:7c40:1c::/48 maxlen: 48
2401:7c40:1d::/48 maxlen: 48
2401:7c40:1f::/48 maxlen: 48
2401:7c40:20::/48 maxlen: 48
2401:7c40:21::/48 maxlen: 48
2401:7c40:22::/48 maxlen: 48
2401:7c40:23::/48 maxlen: 48
2401:7c40:24::/48 maxlen: 48
2401:7c40:25::/48 maxlen: 48
2401:7c40:26::/48 maxlen: 48
2401:7c40:27::/48 maxlen: 48
2401:7c40:28::/48 maxlen: 48
2401:7c40:29::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91803B8/3D6B5934539911EA9EAD4B6FC4F9AE02/ft4nZTZUFOpcHZ5J8XiNCU6r-3Q.crl
rsync://rpki.apnic.net/member_repository/A91803B8/3D6B5934539911EA9EAD4B6FC4F9AE02/ft4nZTZUFOpcHZ5J8XiNCU6r-3Q.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ft4nZTZUFOpcHZ5J8XiNCU6r-3Q.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 29 Nov 2024 19:28:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2603 (0xa2b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91803B8/serialNumber=7EDE2765365414EA5C1D9E49F1788D094EABFB74
Validity
Not Before: Aug 4 20:17:51 2024 GMT
Not After : Sep 30 00:00:00 2025 GMT
Subject: CN=66afe1ef-34ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:b9:7d:c7:cf:6c:02:58:00:82:e5:9f:10:28:
25:97:51:07:00:64:25:37:28:c1:c7:56:25:dd:68:
6f:85:3a:cf:c7:e9:8d:37:21:22:a3:50:72:75:ff:
32:e1:63:1f:b3:f6:90:21:e5:fe:8d:25:dc:23:f0:
60:f7:18:24:f8:ca:39:38:da:76:bc:f2:59:32:76:
76:bf:c1:ce:af:b0:69:cc:29:4d:a8:a9:b5:f5:f3:
e3:1f:14:04:5a:4e:ca:b6:92:8e:03:6b:27:9f:ac:
22:a7:6e:e9:41:69:da:99:6b:7d:fb:d8:e1:40:5b:
4a:e4:5a:20:05:53:63:bd:2c:a1:24:9a:19:5e:86:
fc:a1:4a:0c:4b:62:12:b6:da:80:44:84:07:0d:df:
25:48:01:2f:02:93:34:2d:0b:1f:12:1c:da:29:f3:
60:cd:f8:27:52:e6:8c:d3:b2:ae:8f:bf:3a:8c:de:
00:fe:ec:d7:31:b1:10:e4:3e:66:db:5b:c3:54:7a:
04:6e:98:4a:7d:a9:d4:db:3a:04:32:4d:1f:00:12:
57:70:83:1d:70:11:81:8b:54:4f:32:ab:cd:97:b5:
ef:52:42:95:1e:d7:e4:5a:26:b1:b9:36:2b:e3:d5:
ac:26:91:fe:26:61:87:03:37:1e:df:35:9f:16:f8:
2e:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:F3:75:FC:E5:0D:04:3D:58:F3:FA:83:02:FA:3B:BC:74:31:50:C1
X509v3 Authority Key Identifier:
keyid:7E:DE:27:65:36:54:14:EA:5C:1D:9E:49:F1:78:8D:09:4E:AB:FB:74
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91803B8/3D6B5934539911EA9EAD4B6FC4F9AE02/ft4nZTZUFOpcHZ5J8XiNCU6r-3Q.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ft4nZTZUFOpcHZ5J8XiNCU6r-3Q.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91803B8/3D6B5934539911EA9EAD4B6FC4F9AE02/378397D8539A11EAAA519470C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.96.104.0/22
IPv6:
2401:7c40::-2401:7c40:1d:ffff:ffff:ffff:ffff:ffff
2401:7c40:1f::-2401:7c40:29:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
2a:fa:a0:89:a4:fa:bd:7b:a2:4a:8d:d3:e9:38:a6:f0:de:6c:
43:62:e2:ab:f8:bd:87:a9:e2:f0:0e:53:1a:ef:b1:f6:28:8e:
da:03:a5:86:0c:fa:1d:0f:63:ec:cb:d2:bb:58:dc:20:bf:18:
21:35:f8:8a:d5:10:1d:67:6d:d3:5c:16:bf:0b:e5:6b:b0:7a:
26:d3:00:96:27:f7:2b:f2:80:27:1c:16:b6:16:00:2a:b9:77:
24:92:69:13:9a:96:70:53:50:52:41:09:93:31:40:4a:99:8f:
a9:97:35:2b:fd:7b:0c:b1:a2:93:1a:1c:18:fa:4a:d9:e7:10:
c3:4b:60:b5:4c:b0:6c:54:01:f9:db:15:a5:7b:e8:f6:9d:84:
20:0c:f0:0b:96:ee:1b:93:59:55:50:f0:bd:4a:b3:78:1d:8b:
af:bf:b8:98:d6:09:9b:77:c4:a4:74:4c:15:ad:6d:f7:47:ec:
16:da:44:81:7f:3d:a7:4d:7c:46:93:81:62:90:7b:10:f7:f4:
17:f7:12:2f:fb:f4:ce:a2:9e:0c:c2:ea:66:b9:d6:e8:19:33:
cb:5d:94:a6:20:39:bf:6b:04:4a:d0:fd:f8:9f:11:31:f9:ed:
4b:be:74:f5:9e:fe:bc:55:c6:a5:af:49:50:6c:8f:be:7c:96:
a7:ef:0c:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 21:05:30 2024 by rpki-client on console-fra.rpki-client.org