Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91871C2/DE61666855A911EB99AFDA5DC4F9AE02/3BCBA04AE97211ECB2067F31C4F9AE02.roa
File: 3BCBA04AE97211ECB2067F31C4F9AE02.roa (raw, json)
Hash identifier: 88i2lzZNQ+8crOnZHDBOrPxdDpKw7OWnX3U2476YNFs=
Subject key identifier: CB:11:47:03:EE:C0:C7:42:D4:47:D9:4E:90:43:DC:A0:19:95:98:FB
Certificate issuer: /CN=A91871C2/serialNumber=A9EABC2465116ED11D6C8CDAE2011237CF1F59DF
Certificate serial: 06CA
Authority key identifier: A9:EA:BC:24:65:11:6E:D1:1D:6C:8C:DA:E2:01:12:37:CF:1F:59:DF
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qeq8JGURbtEdbIza4gESN88fWd8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91871C2/DE61666855A911EB99AFDA5DC4F9AE02/3BCBA04AE97211ECB2067F31C4F9AE02.roa
Signing time: Thu 10 Oct 2024 22:19:45 +0000
ROA not before: Thu 10 Oct 2024 22:19:45 +0000
ROA not after: Thu 01 May 2025 00:00:00 +0000
asID: 139009
IP address blocks: 14.1.100.0/24 maxlen: 24
14.1.101.0/24 maxlen: 24
14.1.102.0/23 maxlen: 23
14.1.102.0/24 maxlen: 24
14.1.103.0/24 maxlen: 24
103.161.168.0/23 maxlen: 24
202.173.120.0/22 maxlen: 22
202.173.120.0/23 maxlen: 23
202.173.120.0/24 maxlen: 24
202.173.121.0/24 maxlen: 24
202.173.122.0/23 maxlen: 23
202.173.122.0/24 maxlen: 24
202.173.123.0/24 maxlen: 24
2407:d40::/32 maxlen: 32
2407:d40::/36 maxlen: 36
2407:d40::/48 maxlen: 48
2407:d40:f::/48 maxlen: 48
2407:d40:100::/48 maxlen: 48
2407:d40:101::/48 maxlen: 48
2407:d40:102::/48 maxlen: 48
2407:d40:103::/48 maxlen: 48
2407:d40:106::/48 maxlen: 48
2407:d40:107::/48 maxlen: 48
2407:d40:108::/48 maxlen: 48
2407:d40:109::/48 maxlen: 48
2407:d40:10f::/48 maxlen: 48
2407:d40:122::/48 maxlen: 48
2407:d40:126::/48 maxlen: 48
2407:d40:140::/48 maxlen: 48
2407:d40:142::/48 maxlen: 48
2407:d40:201::/48 maxlen: 48
2407:d40:202::/48 maxlen: 48
2407:d40:203::/48 maxlen: 48
2407:d40:204::/48 maxlen: 48
2407:d40:205::/48 maxlen: 48
2407:d40:8000::/48 maxlen: 48
2407:d40:8007::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91871C2/DE61666855A911EB99AFDA5DC4F9AE02/qeq8JGURbtEdbIza4gESN88fWd8.crl
rsync://rpki.apnic.net/member_repository/A91871C2/DE61666855A911EB99AFDA5DC4F9AE02/qeq8JGURbtEdbIza4gESN88fWd8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qeq8JGURbtEdbIza4gESN88fWd8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 27 Nov 2024 20:33:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1738 (0x6ca)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91871C2/serialNumber=A9EABC2465116ED11D6C8CDAE2011237CF1F59DF
Validity
Not Before: Oct 10 22:19:45 2024 GMT
Not After : May 1 00:00:00 2025 GMT
Subject: CN=67085301-6f11
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:c5:ee:8a:72:be:f4:63:b9:68:c4:50:e0:db:
fd:02:18:1f:e3:e4:16:f7:b9:f4:e8:90:dd:80:b5:
89:2e:1f:f8:3f:e0:44:88:02:1c:33:64:6b:fd:37:
93:59:2d:a0:94:7f:d2:96:35:b4:1b:d2:d9:37:d3:
b1:37:65:b0:4f:32:26:36:9b:5a:1e:50:99:00:13:
3d:a0:34:9f:39:22:6e:e8:5d:aa:03:b2:ff:81:89:
30:56:e9:89:1e:29:b4:88:2d:fb:d8:42:aa:41:4f:
fe:97:f2:38:f0:3d:61:5e:39:be:13:3a:47:8b:08:
b2:c7:fb:61:16:ee:40:44:0f:ea:fc:0f:2f:98:32:
f0:ca:8e:70:48:f7:4e:c8:20:01:bc:6b:d3:c7:28:
5d:7e:6c:26:7c:52:68:07:f7:4b:81:2d:1f:ff:7c:
9b:fc:34:5b:94:7f:80:74:29:6e:10:b7:26:84:6f:
ed:b5:87:e4:03:cc:1e:54:15:d0:b8:df:9e:36:a6:
34:7c:ae:89:bb:6f:49:e7:46:b8:91:b5:73:0f:a9:
97:f1:ab:8c:2f:e9:02:a7:f7:f1:34:df:32:a0:82:
d1:05:19:18:8a:c1:b1:82:ad:86:34:61:94:18:10:
df:96:ac:5b:7e:52:09:4d:bd:35:7c:85:66:fa:37:
66:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:11:47:03:EE:C0:C7:42:D4:47:D9:4E:90:43:DC:A0:19:95:98:FB
X509v3 Authority Key Identifier:
keyid:A9:EA:BC:24:65:11:6E:D1:1D:6C:8C:DA:E2:01:12:37:CF:1F:59:DF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91871C2/DE61666855A911EB99AFDA5DC4F9AE02/qeq8JGURbtEdbIza4gESN88fWd8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qeq8JGURbtEdbIza4gESN88fWd8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91871C2/DE61666855A911EB99AFDA5DC4F9AE02/3BCBA04AE97211ECB2067F31C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
14.1.100.0/22
103.161.168.0/23
202.173.120.0/22
IPv6:
2407:d40::/32
Signature Algorithm: sha256WithRSAEncryption
e6:4d:ca:ec:55:62:03:69:91:cd:01:22:97:11:51:92:26:bb:
84:e3:70:a1:a0:44:0b:22:5b:aa:c5:1a:8c:09:80:18:7c:46:
65:ab:7a:0c:64:34:4c:6e:5e:1f:51:04:d6:b0:6e:76:0b:60:
fa:1a:7f:11:07:c5:f6:a9:ac:97:d1:ae:4b:e1:c1:14:3a:5c:
c0:a1:46:36:ee:e5:02:fa:68:6a:97:4f:a6:bb:19:5f:56:8c:
11:31:2c:09:22:53:15:c1:27:64:76:bc:e3:76:34:b6:79:fa:
78:e6:c4:eb:40:c8:da:54:dd:87:dc:ae:4d:32:45:4a:a3:3a:
5a:24:d2:64:65:84:59:c6:4b:c6:47:6f:cb:26:b9:f7:26:11:
d4:92:f0:3e:91:6a:4b:17:92:54:7f:b7:92:94:8a:ee:d3:c8:
e7:28:1f:36:76:19:e8:9e:93:f6:7b:0c:f9:eb:47:fc:38:fe:
6a:67:c5:55:40:00:82:f2:c8:50:31:dd:38:1a:87:29:5f:ed:
f8:60:04:9f:63:23:11:94:50:8e:19:a2:5d:40:19:c1:18:95:
57:b1:e8:8b:0a:43:6d:d7:3a:44:da:01:8e:f2:24:96:6a:b3:
6e:bf:d4:4a:5c:01:4d:08:60:8d:d6:95:93:94:94:cd:bb:0d:
4d:4d:13:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 23:11:46 2024 by rpki-client on console-fra.rpki-client.org