Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9181375/AED5831E1F0611EFA61ABA51C4F9AE02/A51B73A01F0711EFB7C30655C4F9AE02.roa
File: A51B73A01F0711EFB7C30655C4F9AE02.roa (raw, json)
Hash identifier: fXMxp55GhgjiLTAtD9inNemzkpyTVSNb7IqL37YYltM=
Subject key identifier: 35:78:59:E1:27:6A:59:5B:06:EC:A5:8B:B6:9F:86:74:36:42:64:89
Certificate issuer: /CN=A9181375/serialNumber=8DCDE52B9B8B0522BE26713A41865670A61EE86D
Certificate serial: 1C
Authority key identifier: 8D:CD:E5:2B:9B:8B:05:22:BE:26:71:3A:41:86:56:70:A6:1E:E8:6D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jc3lK5uLBSK-JnE6QYZWcKYe6G0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9181375/AED5831E1F0611EFA61ABA51C4F9AE02/A51B73A01F0711EFB7C30655C4F9AE02.roa
Signing time: Thu 11 Jul 2024 06:53:48 +0000
ROA not before: Thu 11 Jul 2024 06:53:48 +0000
ROA not after: Sun 31 Aug 2025 00:00:00 +0000
asID: 45701
IP address blocks: 43.224.168.0/24 maxlen: 24
43.224.169.0/24 maxlen: 24
43.224.170.0/24 maxlen: 24
43.224.171.0/24 maxlen: 24
59.153.128.0/24 maxlen: 24
59.153.129.0/24 maxlen: 24
59.153.130.0/24 maxlen: 24
59.153.131.0/24 maxlen: 24
103.89.76.0/24 maxlen: 24
103.89.77.0/24 maxlen: 24
103.89.78.0/24 maxlen: 24
103.89.79.0/24 maxlen: 24
103.225.148.0/24 maxlen: 24
103.225.149.0/24 maxlen: 24
103.225.150.0/24 maxlen: 24
103.225.151.0/24 maxlen: 24
202.58.192.0/24 maxlen: 24
202.58.193.0/24 maxlen: 24
202.58.194.0/24 maxlen: 24
202.58.195.0/24 maxlen: 24
202.58.196.0/24 maxlen: 24
202.58.197.0/24 maxlen: 24
202.58.198.0/24 maxlen: 24
202.58.199.0/24 maxlen: 24
202.58.200.0/24 maxlen: 24
202.58.201.0/24 maxlen: 24
202.58.203.0/24 maxlen: 24
202.58.204.0/24 maxlen: 24
202.58.205.0/24 maxlen: 24
202.58.206.0/24 maxlen: 24
202.58.207.0/24 maxlen: 24
2001:df0:a900::/48 maxlen: 48
2402:2900::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9181375/AED5831E1F0611EFA61ABA51C4F9AE02/jc3lK5uLBSK-JnE6QYZWcKYe6G0.crl
rsync://rpki.apnic.net/member_repository/A9181375/AED5831E1F0611EFA61ABA51C4F9AE02/jc3lK5uLBSK-JnE6QYZWcKYe6G0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jc3lK5uLBSK-JnE6QYZWcKYe6G0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 24 Oct 2024 05:43:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 28 (0x1c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9181375/serialNumber=8DCDE52B9B8B0522BE26713A41865670A61EE86D
Validity
Not Before: Jul 11 06:53:48 2024 GMT
Not After : Aug 31 00:00:00 2025 GMT
Subject: CN=668f817c-65a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:19:02:78:9d:24:60:0a:ce:b9:94:cf:aa:b0:
bd:35:5d:0e:b1:cb:88:d3:88:91:97:69:41:12:71:
18:6c:27:51:96:0e:9e:42:73:40:2e:7a:fb:41:fd:
8f:09:72:67:5b:f9:be:a0:04:14:f1:3f:2f:ad:2c:
a7:f6:1c:89:3a:1e:3a:2e:a5:c7:28:34:8a:0b:fc:
92:ea:de:26:0c:01:79:54:03:b7:b2:b4:f3:29:3a:
0b:64:96:0f:04:c0:a5:de:8f:fa:4c:15:96:61:c6:
59:85:1e:fd:00:9f:e2:a0:5f:f0:09:d5:04:b6:ea:
09:e4:d8:97:54:55:03:c4:6a:a9:38:9d:cb:49:e4:
13:fc:58:eb:12:17:7d:8b:12:e1:a7:4d:db:2e:d0:
05:00:86:61:1d:1f:97:2e:91:a2:ba:f2:d3:85:7d:
5a:3c:2b:28:3c:52:31:a5:a3:02:29:47:fc:c5:54:
4d:75:e2:6b:52:d9:d7:2a:1f:d9:5f:66:8a:a8:49:
eb:63:51:d3:a6:15:ac:e3:fd:96:b6:60:f8:01:b4:
a7:e1:5b:7b:16:9d:16:41:f3:35:14:bb:86:0b:92:
94:a9:c4:3d:fb:3b:9a:1b:87:a8:8f:81:3a:3a:4c:
ae:a9:f0:5d:1b:8c:13:62:e2:e8:a9:e6:ed:6b:61:
f6:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:78:59:E1:27:6A:59:5B:06:EC:A5:8B:B6:9F:86:74:36:42:64:89
X509v3 Authority Key Identifier:
keyid:8D:CD:E5:2B:9B:8B:05:22:BE:26:71:3A:41:86:56:70:A6:1E:E8:6D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9181375/AED5831E1F0611EFA61ABA51C4F9AE02/jc3lK5uLBSK-JnE6QYZWcKYe6G0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jc3lK5uLBSK-JnE6QYZWcKYe6G0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9181375/AED5831E1F0611EFA61ABA51C4F9AE02/A51B73A01F0711EFB7C30655C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
43.224.168.0/22
59.153.128.0/22
103.89.76.0/22
103.225.148.0/22
202.58.192.0-202.58.201.255
202.58.203.0-202.58.207.255
IPv6:
2001:df0:a900::/48
2402:2900::/32
Signature Algorithm: sha256WithRSAEncryption
61:77:16:3f:f9:f9:73:a6:5a:b6:c5:84:39:b2:9b:2d:bb:7a:
62:5b:64:26:01:5c:dc:c8:43:52:7f:c0:c8:cb:8f:cd:2c:63:
43:6b:7a:c6:0e:1a:35:48:84:8b:87:e6:de:d2:89:55:fb:f6:
88:83:2d:b5:96:6f:7a:5b:fd:33:f5:a1:af:5a:21:00:a9:cc:
1c:17:34:51:e0:96:b2:65:dd:35:81:0c:2c:e3:ca:4f:e5:cd:
6a:3d:22:c6:75:b7:16:97:c1:32:88:04:1b:da:8c:02:71:b8:
5b:32:ad:cf:9d:c2:ad:fe:80:04:bf:d2:3a:80:62:a0:09:ba:
64:e9:29:f5:77:d2:3f:bb:ee:ce:0a:0b:30:0f:85:5c:b8:fb:
48:52:2e:33:b0:33:87:90:ed:b2:9b:5f:4b:22:11:da:9f:dc:
73:a6:94:7b:62:3e:78:8d:c9:7e:71:6c:4b:b7:ff:a6:d4:2b:
40:4f:bc:16:71:27:4a:8e:27:cd:9c:34:16:28:3d:d9:64:81:
ad:1b:94:8a:ef:59:65:e6:e4:de:3d:2a:9c:e3:ea:9b:76:ea:
94:a5:ff:e1:c7:0c:ce:03:6d:e7:c1:72:2b:17:d5:3c:61:5d:
63:1c:fa:82:4e:a6:27:6b:a2:07:07:1f:92:ee:33:e2:bf:56:
b5:3b:2c:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 17 08:05:48 2024 by rpki-client on console-ams.rpki-client.org