Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9182502/DA16C63A73CC11EAA3995326C4F9AE02/F4FCC41E648311EC88370386C4F9AE02.roa
File: F4FCC41E648311EC88370386C4F9AE02.roa (raw, json)
Hash identifier: 5pNjF8ltrq+R6UIemPSBKYZleMRlldkXP45kIszCmRk=
Subject key identifier: F0:D9:71:DB:B6:EC:EE:28:27:CC:86:A5:A8:6D:B0:C4:AC:08:DA:53
Certificate issuer: /CN=A9182502/serialNumber=8C3CCB4FFB89189C6EF5B34DFDAABE1806A5218A
Certificate serial: 09F4
Authority key identifier: 8C:3C:CB:4F:FB:89:18:9C:6E:F5:B3:4D:FD:AA:BE:18:06:A5:21:8A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jDzLT_uJGJxu9bNN_aq-GAalIYo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9182502/DA16C63A73CC11EAA3995326C4F9AE02/F4FCC41E648311EC88370386C4F9AE02.roa
Signing time: Sat 24 Aug 2024 20:38:55 +0000
ROA not before: Sat 24 Aug 2024 20:38:55 +0000
ROA not after: Fri 31 Oct 2025 00:00:00 +0000
asID: 149175
IP address blocks: 39.109.67.0/24 maxlen: 24
39.109.68.0/24 maxlen: 24
39.109.69.0/24 maxlen: 24
39.109.70.0/24 maxlen: 24
39.109.71.0/24 maxlen: 24
39.109.72.0/24 maxlen: 24
39.109.73.0/24 maxlen: 24
39.109.74.0/24 maxlen: 24
39.109.75.0/24 maxlen: 24
39.109.76.0/24 maxlen: 24
39.109.78.0/24 maxlen: 24
39.109.79.0/24 maxlen: 24
39.109.80.0/24 maxlen: 24
39.109.82.0/24 maxlen: 24
39.109.84.0/24 maxlen: 24
39.109.85.0/24 maxlen: 24
39.109.88.0/24 maxlen: 24
39.109.89.0/24 maxlen: 24
103.98.14.0/24 maxlen: 24
103.98.15.0/24 maxlen: 24
103.119.132.0/24 maxlen: 24
103.119.133.0/24 maxlen: 24
2403:e840::/33 maxlen: 33
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9182502/DA16C63A73CC11EAA3995326C4F9AE02/jDzLT_uJGJxu9bNN_aq-GAalIYo.crl
rsync://rpki.apnic.net/member_repository/A9182502/DA16C63A73CC11EAA3995326C4F9AE02/jDzLT_uJGJxu9bNN_aq-GAalIYo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jDzLT_uJGJxu9bNN_aq-GAalIYo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 29 Nov 2024 19:46:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2548 (0x9f4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9182502/serialNumber=8C3CCB4FFB89189C6EF5B34DFDAABE1806A5218A
Validity
Not Before: Aug 24 20:38:55 2024 GMT
Not After : Oct 31 00:00:00 2025 GMT
Subject: CN=66ca44df-7b21
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:b9:29:f0:16:41:9f:bb:a8:78:c9:35:b0:58:
ea:b7:77:b8:35:f4:45:f6:e5:7b:14:56:e6:2c:06:
23:97:84:21:02:7f:7e:eb:b0:92:1b:b5:d0:83:31:
56:50:1f:e6:f8:43:5f:ab:d6:82:04:8e:08:e6:9a:
a1:02:cd:7f:6f:25:c1:e2:32:09:23:cd:e8:ac:e7:
21:47:74:3a:a6:b1:ae:e4:c5:17:43:2b:ad:fd:33:
12:e6:14:ba:aa:55:aa:8b:55:36:ce:27:c1:15:f8:
74:f5:f2:f1:6a:a6:e5:5b:a7:01:4b:bf:27:d3:b0:
58:37:47:ff:2e:5d:15:f5:2d:e1:14:50:ef:52:36:
44:ab:13:00:98:9c:cd:7b:55:f6:97:8f:8a:aa:1a:
e3:5b:62:2e:2e:ec:97:00:ce:ab:56:0a:c5:fc:9a:
64:cc:36:5b:8a:d2:1e:0a:bc:09:59:47:07:5b:7a:
dc:17:ea:64:47:08:74:fb:d0:21:7d:6c:35:79:21:
f1:e0:4b:cb:b5:30:e9:bf:a4:74:a0:be:3e:08:20:
d8:b8:ed:3e:85:cb:6f:db:9b:15:26:d3:a5:ac:fd:
09:8f:d3:b9:5b:3f:86:84:fb:7c:01:71:1a:81:a9:
98:2a:49:70:86:cd:af:92:20:a2:52:d0:c0:81:6a:
05:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:D9:71:DB:B6:EC:EE:28:27:CC:86:A5:A8:6D:B0:C4:AC:08:DA:53
X509v3 Authority Key Identifier:
keyid:8C:3C:CB:4F:FB:89:18:9C:6E:F5:B3:4D:FD:AA:BE:18:06:A5:21:8A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9182502/DA16C63A73CC11EAA3995326C4F9AE02/jDzLT_uJGJxu9bNN_aq-GAalIYo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jDzLT_uJGJxu9bNN_aq-GAalIYo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9182502/DA16C63A73CC11EAA3995326C4F9AE02/F4FCC41E648311EC88370386C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
39.109.67.0-39.109.76.255
39.109.78.0-39.109.80.255
39.109.82.0/24
39.109.84.0/23
39.109.88.0/23
103.98.14.0/23
103.119.132.0/23
IPv6:
2403:e840::/33
Signature Algorithm: sha256WithRSAEncryption
33:60:85:d6:cc:09:3e:95:28:af:04:72:13:27:cf:d1:11:3f:
e8:48:90:c0:b9:3b:af:aa:32:3d:69:57:86:2e:d2:0d:b7:13:
b0:03:90:59:8a:24:ee:13:a5:68:14:ad:87:45:ea:35:08:0a:
68:e7:54:f1:d1:67:d4:a3:51:a7:3f:5e:0a:26:17:f8:8e:d1:
b0:2c:fd:1d:12:b5:15:d0:37:26:48:88:9e:ae:f1:dd:de:aa:
aa:1e:21:e5:36:7c:f7:a7:c9:4f:9e:ce:f5:60:f5:0f:18:76:
7a:60:ec:69:1c:9a:b7:b2:f2:6c:4f:aa:18:63:0c:b9:56:bc:
26:1a:4e:89:5e:ca:52:21:32:db:82:a1:78:24:8d:4e:76:52:
4d:7a:d9:9b:c0:92:df:53:10:5f:f6:05:1b:df:21:9d:9e:6d:
a6:07:0c:4c:2e:80:32:a5:ae:13:eb:e2:b9:5b:54:72:db:b2:
87:a6:6c:ed:ae:79:0b:a4:00:cf:1e:33:d5:55:1c:ad:29:11:
73:c5:4d:69:a1:f4:5d:e2:44:a3:2c:7d:96:37:bd:75:52:0b:
ec:05:cf:a0:aa:75:d1:f9:d8:e0:24:f7:2f:65:fa:14:f2:cb:
67:1d:70:05:93:2c:4b:53:a0:d9:bc:90:0c:cf:5c:48:5e:fb:
ff:36:d6:b4
-----BEGIN CERTIFICATE-----
MIIFtTCCBJ2gAwIBAgICCfQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
ODI1MDIxMTAvBgNVBAUTKDhDM0NDQjRGRkI4OTE4OUM2RUY1QjM0REZEQUFCRTE4
MDZBNTIxOEEwHhcNMjQwODI0MjAzODU1WhcNMjUxMDMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02NmNhNDRkZi03YjIxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAy7kp8BZBn7uoeMk1sFjqt3e4NfRF9uV7FFbmLAYjl4QhAn9+67CSG7XQgzFW
UB/m+ENfq9aCBI4I5pqhAs1/byXB4jIJI83orOchR3Q6prGu5MUXQyut/TMS5hS6
qlWqi1U2zifBFfh09fLxaqblW6cBS78n07BYN0f/Ll0V9S3hFFDvUjZEqxMAmJzN
e1X2l4+KqhrjW2IuLuyXAM6rVgrF/JpkzDZbitIeCrwJWUcHW3rcF+pkRwh0+9Ah
fWw1eSHx4EvLtTDpv6R0oL4+CCDYuO0+hctv25sVJtOlrP0Jj9O5Wz+GhPt8AXEa
gamYKklwhs2vkiCiUtDAgWoFxwIDAQABo4IC2TCCAtUwHQYDVR0OBBYEFPDZcdu2
7O4oJ8yGpahtsMSsCNpTMB8GA1UdIwQYMBaAFIw8y0/7iRicbvWzTf2qvhgGpSGK
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4MjUwMi9EQTE2QzYzQTcz
Q0MxMUVBQTM5OTUzMjZDNEY5QUUwMi9qRHpMVF91SkdKeHU5Yk5OX2FxLUdBYWxJ
WW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2pEekxUX3VKR0p4dTliTk5fYXEtR0FhbElZby5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
ODI1MDIvREExNkM2M0E3M0NDMTFFQUEzOTk1MzI2QzRGOUFFMDIvRjRGQ0M0MUU2
NDgzMTFFQzg4MzcwMzg2QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwYwYIKwYBBQUHAQcBAf8E
VDBSMEAEAgABMDowDAMEACdtQwMEACdtTDAMAwQBJ21OAwQAJ21QAwQAJ21SAwQB
J21UAwQBJ21YAwQBZ2IOAwQBZ3eEMA4EAgACMAgDBgckA+hAADANBgkqhkiG9w0B
AQsFAAOCAQEAM2CF1swJPpUorwRyEyfP0RE/6EiQwLk7r6oyPWlXhi7SDbcTsAOQ
WYok7hOlaBSth0XqNQgKaOdU8dFn1KNRpz9eCiYX+I7RsCz9HRK1FdA3JkiInq7x
3d6qqh4h5TZ896fJT57O9WD1Dxh2emDsaRyat7LybE+qGGMMuVa8JhpOiV7KUiEy
24KheCSNTnZSTXrZm8CS31MQX/YFG98hnZ5tpgcMTC6AMqWuE+viuVtUctuyh6Zs
7a55C6QAzx4z1VUcrSkRc8VNaaH0XeJEoyx9lje9dVIL7AXPoKp10fnY4CT3L2X6
FPLLZx1wBZMsS1Og2byQDM9cSF77/zbWtA==
-----END CERTIFICATE-----
Generated at Fri Nov 22 21:05:30 2024 by rpki-client on console-fra.rpki-client.org