Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9182502/DA16C63A73CC11EAA3995326C4F9AE02/0D8C94BAAB2811ECB3CF9363C4F9AE02.roa
File: 0D8C94BAAB2811ECB3CF9363C4F9AE02.roa (raw, json)
Hash identifier: nR6QCa+MB7YSDpak9XFs6VT7XUSfxtJwpnIkjVWImHM=
Subject key identifier: E6:F1:F4:E6:88:BA:FB:F4:AA:0E:26:EC:53:F6:F5:BA:87:9F:E0:37
Certificate issuer: /CN=A9182502/serialNumber=8C3CCB4FFB89189C6EF5B34DFDAABE1806A5218A
Certificate serial: 0923
Authority key identifier: 8C:3C:CB:4F:FB:89:18:9C:6E:F5:B3:4D:FD:AA:BE:18:06:A5:21:8A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jDzLT_uJGJxu9bNN_aq-GAalIYo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9182502/DA16C63A73CC11EAA3995326C4F9AE02/0D8C94BAAB2811ECB3CF9363C4F9AE02.roa
Signing time: Wed 02 Aug 2023 20:38:02 +0000
ROA not before: Wed 02 Aug 2023 20:38:02 +0000
ROA not after: Thu 31 Oct 2024 00:00:00 +0000
asID: 141768
IP address blocks: 39.109.66.0/23 maxlen: 23
39.109.66.0/24 maxlen: 24
39.109.67.0/24 maxlen: 24
39.109.68.0/24 maxlen: 24
39.109.69.0/24 maxlen: 24
39.109.70.0/24 maxlen: 24
39.109.71.0/24 maxlen: 24
39.109.72.0/21 maxlen: 21
39.109.72.0/24 maxlen: 24
39.109.73.0/24 maxlen: 24
39.109.74.0/24 maxlen: 24
39.109.75.0/24 maxlen: 24
39.109.77.0/24 maxlen: 24
39.109.79.0/24 maxlen: 24
39.109.80.0/21 maxlen: 21
39.109.80.0/24 maxlen: 24
39.109.81.0/24 maxlen: 24
39.109.83.0/24 maxlen: 24
39.109.86.0/24 maxlen: 24
39.109.87.0/24 maxlen: 24
39.109.88.0/22 maxlen: 22
39.109.88.0/24 maxlen: 24
39.109.89.0/24 maxlen: 24
39.109.90.0/24 maxlen: 24
39.109.91.0/24 maxlen: 24
103.98.14.0/24 maxlen: 24
103.119.132.0/24 maxlen: 24
103.119.133.0/24 maxlen: 24
2403:e840:8000::/33 maxlen: 33
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9182502/DA16C63A73CC11EAA3995326C4F9AE02/jDzLT_uJGJxu9bNN_aq-GAalIYo.crl
rsync://rpki.apnic.net/member_repository/A9182502/DA16C63A73CC11EAA3995326C4F9AE02/jDzLT_uJGJxu9bNN_aq-GAalIYo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jDzLT_uJGJxu9bNN_aq-GAalIYo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 09 Jun 2024 21:24:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2339 (0x923)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9182502/serialNumber=8C3CCB4FFB89189C6EF5B34DFDAABE1806A5218A
Validity
Not Before: Aug 2 20:38:02 2023 GMT
Not After : Oct 31 00:00:00 2024 GMT
Subject: CN=64cabea9-41ac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:a8:02:90:43:c3:65:23:5f:eb:13:60:e4:a5:
40:44:cb:4c:be:21:37:85:65:62:74:ac:7c:8f:60:
55:68:6d:16:c5:d8:4a:2a:51:83:dc:90:1f:0f:a3:
39:4e:be:4b:87:f1:48:e6:b5:e8:b3:bf:01:29:db:
e1:90:fd:12:8a:b6:9b:01:74:2a:67:c0:14:38:aa:
df:fb:fc:89:cf:58:47:9f:d3:8c:7e:f4:05:c3:07:
e4:f8:df:af:9f:f3:e8:74:06:8c:ef:92:f5:f9:3f:
62:42:ea:26:d1:3d:22:8d:2a:02:a5:fb:87:78:b8:
6e:88:c5:db:9b:be:f5:8a:a1:13:5d:8b:73:08:d5:
40:7f:db:1f:60:5e:71:0a:6e:c2:da:32:2e:c0:bc:
4d:60:18:98:7f:82:e4:52:d3:99:f3:bc:c4:5a:9a:
a1:f2:87:c2:26:e4:fa:ff:dd:ca:1b:a8:02:6c:b9:
8a:df:24:02:b9:30:e3:5e:1d:f5:36:61:0e:da:59:
50:28:03:48:54:46:f5:52:39:70:74:cf:8d:f6:ab:
89:88:f4:98:4c:23:cc:fc:37:d8:d9:54:a4:ca:ce:
ea:48:f4:9d:6e:ba:e3:aa:38:03:4f:6a:0f:5f:1b:
bf:a5:c5:89:76:7d:6a:d8:2b:47:78:c3:8c:81:95:
f6:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:F1:F4:E6:88:BA:FB:F4:AA:0E:26:EC:53:F6:F5:BA:87:9F:E0:37
X509v3 Authority Key Identifier:
keyid:8C:3C:CB:4F:FB:89:18:9C:6E:F5:B3:4D:FD:AA:BE:18:06:A5:21:8A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9182502/DA16C63A73CC11EAA3995326C4F9AE02/jDzLT_uJGJxu9bNN_aq-GAalIYo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jDzLT_uJGJxu9bNN_aq-GAalIYo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9182502/DA16C63A73CC11EAA3995326C4F9AE02/0D8C94BAAB2811ECB3CF9363C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
39.109.66.0-39.109.91.255
103.98.14.0/24
103.119.132.0/23
IPv6:
2403:e840:8000::/33
Signature Algorithm: sha256WithRSAEncryption
5d:e0:a7:6c:54:37:79:79:69:96:e8:6b:f4:f8:32:fe:c9:91:
51:f5:6c:ef:fa:95:12:d6:53:4e:12:ba:52:22:e3:b6:4a:ca:
d7:d8:20:16:ab:60:01:03:d3:8f:1a:ad:3f:15:a7:fe:c5:53:
ba:af:88:93:4e:be:43:16:da:6d:6d:84:f3:72:48:7e:0c:ff:
8a:69:55:a5:a7:b8:b3:24:65:c9:62:98:cf:b1:66:d4:08:40:
5a:71:87:11:fb:1e:cf:64:cc:15:87:c0:63:13:14:f5:f6:b4:
4d:e1:fe:61:60:40:f0:89:49:0f:cf:38:0f:a3:a6:9f:0a:46:
4d:7d:a1:94:92:e7:aa:55:ee:07:d9:d9:de:fa:18:b0:6f:e1:
a7:0f:2a:40:63:40:d0:bc:72:8a:38:43:3f:1d:36:f7:4e:bb:
93:35:f0:d0:9f:a2:bf:0e:d3:f7:4e:cd:fa:d4:59:0a:ff:b6:
16:b5:b0:a7:6a:31:75:72:18:17:c9:1d:92:df:27:35:13:86:
9d:1c:6e:27:20:63:64:d1:fb:5c:df:b5:66:31:5c:e5:06:11:
34:b5:e4:fd:35:78:e2:1f:99:e9:22:ed:2f:1f:52:4e:70:34:
79:4b:34:c2:20:86:e4:d8:43:98:94:20:6a:e2:29:fd:ee:de:
80:af:cf:c9
-----BEGIN CERTIFICATE-----
MIIFlTCCBH2gAwIBAgICCSMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
ODI1MDIxMTAvBgNVBAUTKDhDM0NDQjRGRkI4OTE4OUM2RUY1QjM0REZEQUFCRTE4
MDZBNTIxOEEwHhcNMjMwODAyMjAzODAyWhcNMjQxMDMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02NGNhYmVhOS00MWFjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAwagCkEPDZSNf6xNg5KVARMtMviE3hWVidKx8j2BVaG0WxdhKKlGD3JAfD6M5
Tr5Lh/FI5rXos78BKdvhkP0SirabAXQqZ8AUOKrf+/yJz1hHn9OMfvQFwwfk+N+v
n/PodAaM75L1+T9iQuom0T0ijSoCpfuHeLhuiMXbm771iqETXYtzCNVAf9sfYF5x
Cm7C2jIuwLxNYBiYf4LkUtOZ87zEWpqh8ofCJuT6/93KG6gCbLmK3yQCuTDjXh31
NmEO2llQKANIVEb1UjlwdM+N9quJiPSYTCPM/DfY2VSkys7qSPSdbrrjqjgDT2oP
Xxu/pcWJdn1q2CtHeMOMgZX2qQIDAQABo4ICuTCCArUwHQYDVR0OBBYEFObx9OaI
uvv0qg4m7FP29bqHn+A3MB8GA1UdIwQYMBaAFIw8y0/7iRicbvWzTf2qvhgGpSGK
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4MjUwMi9EQTE2QzYzQTcz
Q0MxMUVBQTM5OTUzMjZDNEY5QUUwMi9qRHpMVF91SkdKeHU5Yk5OX2FxLUdBYWxJ
WW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2pEekxUX3VKR0p4dTliTk5fYXEtR0FhbElZby5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
ODI1MDIvREExNkM2M0E3M0NDMTFFQUEzOTk1MzI2QzRGOUFFMDIvMEQ4Qzk0QkFB
QjI4MTFFQ0IzQ0Y5MzYzQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwQwYIKwYBBQUHAQcBAf8E
NDAyMCAEAgABMBowDAMEASdtQgMEAidtWAMEAGdiDgMEAWd3hDAOBAIAAjAIAwYH
JAPoQIAwDQYJKoZIhvcNAQELBQADggEBAF3gp2xUN3l5aZboa/T4Mv7JkVH1bO/6
lRLWU04SulIi47ZKytfYIBarYAED048arT8Vp/7FU7qviJNOvkMW2m1thPNySH4M
/4ppVaWnuLMkZclimM+xZtQIQFpxhxH7Hs9kzBWHwGMTFPX2tE3h/mFgQPCJSQ/P
OA+jpp8KRk19oZSS56pV7gfZ2d76GLBv4acPKkBjQNC8coo4Qz8dNvdOu5M18NCf
or8O0/dOzfrUWQr/tha1sKdqMXVyGBfJHZLfJzUThp0cbicgY2TR+1zftWYxXOUG
ETS15P01eOIfmeki7S8fUk5wNHlLNMIghuTYQ5iUIGriKf3u3oCvz8k=
-----END CERTIFICATE-----
Generated at Sun Jun 2 22:26:08 2024 by rpki-client on console-fra.rpki-client.org