Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91853D3/6EC0E368000A11EC8C287252C4F9AE02/14A59A26E15B11ECA05C9236C4F9AE02.roa
File: 14A59A26E15B11ECA05C9236C4F9AE02.roa (raw, json)
Hash identifier: tCsPFlQbHjPtdKo2By1Yv1A/CwgH+Wy/z7j32R4zxhU=
Subject key identifier: C9:F1:10:DD:96:11:D1:AA:52:E1:88:F1:01:50:61:86:91:A4:CF:1D
Certificate issuer: /CN=A91853D3/serialNumber=FA045C6302B873E88365FA9A021499B4F3C58688
Certificate serial: 047C
Authority key identifier: FA:04:5C:63:02:B8:73:E8:83:65:FA:9A:02:14:99:B4:F3:C5:86:88
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-gRcYwK4c-iDZfqaAhSZtPPFhog.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91853D3/6EC0E368000A11EC8C287252C4F9AE02/14A59A26E15B11ECA05C9236C4F9AE02.roa
Signing time: Thu 23 May 2024 02:05:53 +0000
ROA not before: Thu 23 May 2024 02:05:53 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2697
IP address blocks: 202.41.64.0/18 maxlen: 24
202.141.0.0/17 maxlen: 24
202.141.128.0/19 maxlen: 24
2001:e30:1100::/40 maxlen: 40
2001:e30:1200::/40 maxlen: 40
2001:e30:1300::/40 maxlen: 40
2001:e30:1400::/40 maxlen: 40
2001:e30:1500::/40 maxlen: 40
2001:e30:1600::/40 maxlen: 40
2001:e30:1800::/40 maxlen: 40
2001:e30:187c::/48 maxlen: 48
2001:e30:1a00::/40 maxlen: 40
2001:e30:1b00::/40 maxlen: 40
2001:e30:1b06::/48 maxlen: 48
2001:e30:1c1e::/48 maxlen: 48
2001:e30:1e00::/40 maxlen: 40
2001:e30:1f00::/40 maxlen: 40
2001:e30:2000::/40 maxlen: 40
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91853D3/6EC0E368000A11EC8C287252C4F9AE02/-gRcYwK4c-iDZfqaAhSZtPPFhog.crl
rsync://rpki.apnic.net/member_repository/A91853D3/6EC0E368000A11EC8C287252C4F9AE02/-gRcYwK4c-iDZfqaAhSZtPPFhog.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-gRcYwK4c-iDZfqaAhSZtPPFhog.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 May 2024 02:06:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1148 (0x47c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91853D3/serialNumber=FA045C6302B873E88365FA9A021499B4F3C58688
Validity
Not Before: May 23 02:05:53 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=664ea480-1381
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:0d:76:40:df:bc:03:17:78:3a:98:7a:7b:55:
7e:af:c7:ba:05:66:4f:2c:23:45:81:fa:73:a7:92:
10:6c:ca:8e:c1:e3:12:64:37:41:24:5f:13:e3:44:
e3:90:2b:64:5b:b7:2c:2f:f1:f5:26:16:ca:1d:b9:
13:29:ea:a4:9b:66:3f:c6:88:d8:cd:95:56:e2:27:
82:cd:bd:aa:68:4b:fa:b3:17:11:a9:6f:01:95:95:
13:3f:6b:1e:e2:99:a3:ec:fa:87:78:12:e2:63:11:
f6:c3:b3:a8:37:3e:f7:43:0a:f1:d5:fb:86:a9:05:
68:4a:7d:00:6b:95:72:c2:29:0f:2d:ff:5a:03:02:
e3:19:76:69:52:70:65:aa:6b:14:4b:67:9d:44:53:
42:93:ed:54:85:4f:33:b1:6c:96:d9:d8:02:b2:bf:
8f:d5:d5:f2:1b:26:71:c2:bd:a9:a5:10:38:9a:4c:
28:dd:db:da:d4:51:cd:77:55:be:6a:e5:16:ed:6a:
ca:71:3b:30:9e:c8:83:8e:0a:c4:9d:7b:3d:5b:ea:
eb:b4:4d:b3:6a:1f:5a:18:ef:1c:45:f7:a4:9d:ad:
2e:52:4c:9d:55:9d:70:16:d9:ba:38:10:d0:4f:e2:
a4:fe:e6:f5:fe:ce:cd:ee:cf:39:d5:30:c6:20:e7:
bf:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:F1:10:DD:96:11:D1:AA:52:E1:88:F1:01:50:61:86:91:A4:CF:1D
X509v3 Authority Key Identifier:
keyid:FA:04:5C:63:02:B8:73:E8:83:65:FA:9A:02:14:99:B4:F3:C5:86:88
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91853D3/6EC0E368000A11EC8C287252C4F9AE02/-gRcYwK4c-iDZfqaAhSZtPPFhog.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-gRcYwK4c-iDZfqaAhSZtPPFhog.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91853D3/6EC0E368000A11EC8C287252C4F9AE02/14A59A26E15B11ECA05C9236C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
202.41.64.0/18
202.141.0.0-202.141.159.255
IPv6:
2001:e30:1100::-2001:e30:16ff:ffff:ffff:ffff:ffff:ffff
2001:e30:1800::/40
2001:e30:1a00::/39
2001:e30:1c1e::/48
2001:e30:1e00::-2001:e30:20ff:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
60:c3:a1:da:f6:52:23:50:0a:92:0a:3f:a8:b5:a1:2d:db:6a:
5e:c2:21:8b:8e:0f:65:d9:85:c6:79:67:c7:1f:16:7e:45:ec:
f4:e7:99:b2:cb:b1:4d:e0:dd:09:af:24:c4:d3:9d:c2:b9:c6:
39:82:17:56:ac:0e:1a:a4:81:be:4c:40:bd:29:1f:0a:84:65:
c9:9a:31:21:32:ba:45:5f:f9:e9:bb:19:27:a4:66:e5:30:0b:
06:5b:6d:e9:3b:94:80:59:62:df:39:6e:13:54:d1:52:23:04:
15:9d:ad:5b:d4:58:e3:ee:12:51:74:87:33:c8:82:7d:5e:c3:
e9:94:6e:48:84:18:73:15:02:5c:09:4e:59:fc:78:93:93:c8:
0c:c0:26:12:f6:87:f4:cb:44:86:04:a6:b3:09:2e:f0:c1:3b:
d1:25:31:b4:d4:5d:55:2c:67:14:79:74:c8:1a:ef:5d:db:ea:
dd:d5:26:28:05:b7:dc:8b:c7:d3:d5:aa:0c:b7:1b:30:41:82:
bb:e4:97:db:9a:fd:f3:79:dd:6c:ac:52:d9:87:c1:09:e0:8a:
5c:06:5d:81:fa:04:d0:73:a4:c7:82:2a:29:5b:f8:6d:51:b9:
5b:29:1b:f5:5c:d5:3c:d6:87:cb:cf:ab:4c:99:a1:f0:83:bf:
af:7f:a6:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 23 04:27:02 2024 by rpki-client on console-ams.rpki-client.org