Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91803B8/3D6B5934539911EA9EAD4B6FC4F9AE02/378397D8539A11EAAA519470C4F9AE02.roa
File: 378397D8539A11EAAA519470C4F9AE02.roa (raw, json)
Hash identifier: GblOnvimhRhM9wmDAJ0TPkoEjzxIQCa4Y3teaol4cAg=
Subject key identifier: DA:18:EF:C0:80:F8:99:56:24:A2:48:69:7D:2A:B4:37:7C:F9:61:38
Certificate issuer: /CN=A91803B8/serialNumber=7EDE2765365414EA5C1D9E49F1788D094EABFB74
Certificate serial: 09CF
Authority key identifier: 7E:DE:27:65:36:54:14:EA:5C:1D:9E:49:F1:78:8D:09:4E:AB:FB:74
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ft4nZTZUFOpcHZ5J8XiNCU6r-3Q.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91803B8/3D6B5934539911EA9EAD4B6FC4F9AE02/378397D8539A11EAAA519470C4F9AE02.roa
Signing time: Tue 13 Feb 2024 06:14:49 +0000
ROA not before: Tue 13 Feb 2024 06:14:49 +0000
ROA not after: Mon 30 Sep 2024 00:00:00 +0000
asID: 134153
IP address blocks: 103.96.104.0/22 maxlen: 22
103.96.104.0/23 maxlen: 23
103.96.104.0/24 maxlen: 24
103.96.105.0/24 maxlen: 24
103.96.106.0/23 maxlen: 23
103.96.106.0/24 maxlen: 24
103.96.107.0/24 maxlen: 24
2401:7c40::/48 maxlen: 48
2401:7c40:1::/48 maxlen: 48
2401:7c40:2::/48 maxlen: 48
2401:7c40:3::/48 maxlen: 48
2401:7c40:4::/48 maxlen: 48
2401:7c40:5::/48 maxlen: 48
2401:7c40:6::/48 maxlen: 48
2401:7c40:7::/48 maxlen: 48
2401:7c40:8::/48 maxlen: 48
2401:7c40:9::/48 maxlen: 48
2401:7c40:a::/48 maxlen: 48
2401:7c40:b::/48 maxlen: 48
2401:7c40:c::/48 maxlen: 48
2401:7c40:d::/48 maxlen: 48
2401:7c40:e::/48 maxlen: 48
2401:7c40:f::/48 maxlen: 48
2401:7c40:10::/48 maxlen: 48
2401:7c40:11::/48 maxlen: 48
2401:7c40:12::/48 maxlen: 48
2401:7c40:13::/48 maxlen: 48
2401:7c40:14::/48 maxlen: 48
2401:7c40:15::/48 maxlen: 48
2401:7c40:16::/48 maxlen: 48
2401:7c40:17::/48 maxlen: 48
2401:7c40:18::/48 maxlen: 48
2401:7c40:19::/48 maxlen: 48
2401:7c40:1a::/48 maxlen: 48
2401:7c40:1b::/48 maxlen: 48
2401:7c40:1c::/48 maxlen: 48
2401:7c40:1d::/48 maxlen: 48
2401:7c40:1f::/48 maxlen: 48
2401:7c40:20::/48 maxlen: 48
2401:7c40:21::/48 maxlen: 48
2401:7c40:22::/48 maxlen: 48
2401:7c40:23::/48 maxlen: 48
2401:7c40:24::/48 maxlen: 48
2401:7c40:25::/48 maxlen: 48
2401:7c40:26::/48 maxlen: 48
2401:7c40:27::/48 maxlen: 48
2401:7c40:28::/48 maxlen: 48
2401:7c40:29::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91803B8/3D6B5934539911EA9EAD4B6FC4F9AE02/ft4nZTZUFOpcHZ5J8XiNCU6r-3Q.crl
rsync://rpki.apnic.net/member_repository/A91803B8/3D6B5934539911EA9EAD4B6FC4F9AE02/ft4nZTZUFOpcHZ5J8XiNCU6r-3Q.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ft4nZTZUFOpcHZ5J8XiNCU6r-3Q.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 21 May 2024 20:34:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2511 (0x9cf)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91803B8/serialNumber=7EDE2765365414EA5C1D9E49F1788D094EABFB74
Validity
Not Before: Feb 13 06:14:49 2024 GMT
Not After : Sep 30 00:00:00 2024 GMT
Subject: CN=65cb08d9-0761
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:8e:74:06:0c:8b:00:26:55:29:46:dc:b6:75:
ae:87:ef:8b:9c:84:d9:c6:31:36:d9:a4:c0:ac:0a:
ee:e6:38:de:66:b4:29:36:fa:2b:e4:71:be:2c:09:
85:6e:25:0f:07:44:19:e5:7d:21:14:87:40:62:a6:
58:3c:a4:49:77:34:d7:2a:9b:83:77:71:ba:95:b1:
85:e0:df:6a:ad:54:e8:f4:06:c1:1b:a5:6d:53:60:
ba:3e:5d:8c:f6:b2:0a:bc:58:25:56:29:a0:9e:2a:
4f:86:54:da:4f:04:d7:0c:2b:dd:f9:52:33:ae:61:
7f:6a:26:76:59:5e:a2:3a:0a:8b:a6:38:13:8f:5d:
99:36:70:7b:83:7f:60:66:ed:d5:e6:2e:4a:fc:bb:
dc:94:a9:f0:b5:3c:f1:a2:d7:14:e0:0d:0f:65:28:
de:3b:61:ea:28:52:5d:ee:15:24:4a:75:58:f5:6e:
a1:c5:dd:54:87:28:06:8c:f2:6a:58:c2:2d:7b:8f:
80:31:42:54:a0:f2:c4:0e:d9:b3:7f:ad:75:4b:81:
13:7e:ad:46:72:5a:70:3b:39:a8:4d:e8:f6:8d:0e:
f0:d2:06:d0:45:57:76:75:fe:34:c1:79:50:c9:76:
c1:44:9f:98:9e:f0:42:dc:a6:e1:7b:cc:33:de:b1:
a9:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:18:EF:C0:80:F8:99:56:24:A2:48:69:7D:2A:B4:37:7C:F9:61:38
X509v3 Authority Key Identifier:
keyid:7E:DE:27:65:36:54:14:EA:5C:1D:9E:49:F1:78:8D:09:4E:AB:FB:74
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91803B8/3D6B5934539911EA9EAD4B6FC4F9AE02/ft4nZTZUFOpcHZ5J8XiNCU6r-3Q.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ft4nZTZUFOpcHZ5J8XiNCU6r-3Q.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91803B8/3D6B5934539911EA9EAD4B6FC4F9AE02/378397D8539A11EAAA519470C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.96.104.0/22
IPv6:
2401:7c40::-2401:7c40:1d:ffff:ffff:ffff:ffff:ffff
2401:7c40:1f::-2401:7c40:29:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
82:9a:d0:50:2f:cd:e3:9f:51:b8:7f:ed:f4:4e:f2:98:1c:b3:
21:f3:80:d5:20:be:14:c8:e0:b2:4b:87:0b:a1:ec:b9:bc:b9:
c4:e5:a2:0e:e8:5f:40:ca:f7:92:6b:22:ae:36:f3:a3:29:9a:
97:bf:d7:a7:ac:a4:d0:26:88:2a:90:9f:56:b3:f9:1b:41:8a:
d1:bb:0d:f2:24:fe:2e:af:2b:07:66:97:e3:35:47:08:6d:62:
47:2d:68:89:f2:79:08:be:3c:1e:9c:7d:ec:1f:bc:24:67:db:
74:5b:dd:4e:d3:c4:46:ba:ef:11:07:cd:14:dc:51:ad:c9:48:
33:db:b9:47:b9:4b:04:5d:40:4c:fa:7e:29:eb:2d:d7:4c:02:
60:a8:33:c4:3b:d1:b3:be:c6:9d:0f:e8:bd:4d:2d:95:40:8c:
37:7b:7d:e4:ef:3a:43:56:71:4d:bb:29:47:ab:a2:4c:a7:e7:
1f:67:d7:b4:cf:6a:29:8c:dd:4d:0d:11:9a:db:fa:b2:ae:dd:
57:78:78:48:06:d8:55:e9:79:ee:23:34:7d:56:76:02:d4:ac:
04:6f:7c:82:1a:76:00:96:88:6c:25:95:2f:c1:fe:4c:d7:f3:
99:a4:16:f0:19:7a:85:c1:81:0a:3c:be:91:6d:04:7d:3e:cd:
6c:e7:24:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 14 21:48:33 2024 by rpki-client on console-ams.rpki-client.org