Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/10BDDBC4F58D11EE836BA35CC4F9AE02.roa
File: 10BDDBC4F58D11EE836BA35CC4F9AE02.roa (raw, json)
Hash identifier: p7an6mOqvsP8fJskOmWKzrRpXEGpeOV78HS/8DsjYZw=
Subject key identifier: 16:2E:FB:B4:3A:7B:A8:1D:0B:D3:87:01:00:60:95:7E:04:0A:A3:E3
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: 860E
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/10BDDBC4F58D11EE836BA35CC4F9AE02.roa
Signing time: Mon 08 Apr 2024 09:47:52 +0000
ROA not before: Mon 08 Apr 2024 09:47:52 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 149240
IP address blocks: 36.50.118.0/23 maxlen: 24
103.3.234.0/23 maxlen: 24
103.67.92.0/24 maxlen: 24
103.88.56.0/24 maxlen: 24
103.88.57.0/24 maxlen: 24
103.124.172.0/24 maxlen: 24
103.139.191.0/24 maxlen: 24
103.148.119.0/24 maxlen: 24
103.152.158.0/24 maxlen: 24
103.159.99.0/24 maxlen: 24
103.162.196.0/23 maxlen: 24
103.163.166.0/23 maxlen: 24
103.167.172.0/24 maxlen: 24
103.170.1.0/24 maxlen: 24
103.173.41.0/24 maxlen: 24
103.174.108.0/23 maxlen: 24
103.178.176.0/23 maxlen: 24
103.184.40.0/24 maxlen: 24
103.184.236.0/23 maxlen: 24
103.191.203.0/24 maxlen: 24
2001:df0:3bc0::/48 maxlen: 48
2001:df0:8640::/48 maxlen: 48
2001:df0:9340::/48 maxlen: 48
2001:df1:9c40::/48 maxlen: 48
2001:df2:c3c0::/48 maxlen: 48
2001:df3:2940::/48 maxlen: 48
2001:df3:4940::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 08 May 2024 08:14:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 34318 (0x860e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Validity
Not Before: Apr 8 09:47:52 2024 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=6613bd47-7fe2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:a7:be:ae:bc:95:c2:4d:51:b2:81:8d:24:8d:
fb:3c:7e:6b:9c:fe:b0:c8:cb:c5:c3:ff:74:6b:21:
ef:14:f5:62:59:42:e8:ef:cc:a3:05:14:e9:4c:57:
d4:ec:80:2f:4e:3b:54:cc:39:c3:a9:e1:52:9b:b4:
5f:0e:0f:41:e4:0d:d8:27:c7:78:83:18:46:80:34:
d9:43:a4:8b:02:18:05:43:50:92:55:10:f8:6f:78:
24:86:a2:99:1b:d4:b2:8f:4d:c2:0e:52:3c:0b:a3:
24:a3:5f:d1:ad:a1:7c:8d:8c:02:d8:a2:50:ad:7f:
31:da:cc:d3:5c:22:d9:ff:1b:0f:48:55:0d:0d:06:
f8:44:bf:1f:a1:5e:24:c7:83:b5:6b:6b:0d:d3:e0:
5f:be:62:cb:d0:c4:d8:af:0e:1b:ae:29:eb:b8:37:
23:3e:02:6e:14:77:e9:a4:75:b9:3b:d7:99:f5:4d:
06:70:4c:3f:3f:2e:bb:5b:29:eb:97:ff:d4:bf:34:
e0:fe:e1:c6:a8:81:51:62:2a:cb:eb:50:73:db:b1:
bb:60:cf:07:71:0f:66:b2:52:9d:55:da:78:37:82:
38:0b:2c:6b:3f:97:12:11:da:23:8a:34:ff:5b:ee:
ab:59:8f:16:b8:c6:81:8f:65:f6:12:bc:ee:de:23:
00:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:2E:FB:B4:3A:7B:A8:1D:0B:D3:87:01:00:60:95:7E:04:0A:A3:E3
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/10BDDBC4F58D11EE836BA35CC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
36.50.118.0/23
103.3.234.0/23
103.67.92.0/24
103.88.56.0/23
103.124.172.0/24
103.139.191.0/24
103.148.119.0/24
103.152.158.0/24
103.159.99.0/24
103.162.196.0/23
103.163.166.0/23
103.167.172.0/24
103.170.1.0/24
103.173.41.0/24
103.174.108.0/23
103.178.176.0/23
103.184.40.0/24
103.184.236.0/23
103.191.203.0/24
IPv6:
2001:df0:3bc0::/48
2001:df0:8640::/48
2001:df0:9340::/48
2001:df1:9c40::/48
2001:df2:c3c0::/48
2001:df3:2940::/48
2001:df3:4940::/48
Signature Algorithm: sha256WithRSAEncryption
69:9e:bf:f4:1d:0b:6a:e9:92:03:ef:fc:35:8f:7f:00:fd:55:
47:7e:8d:5e:3d:7f:70:a7:4d:ec:54:ef:3e:87:a3:88:2f:05:
68:b8:50:b2:35:56:8e:39:79:d8:46:ac:2c:ac:36:36:04:6b:
04:7f:4c:8c:7c:75:06:63:15:d7:19:2d:75:3e:da:74:e7:a7:
e1:d2:b6:54:cc:db:44:8e:47:b8:7a:17:ca:12:d8:50:bd:60:
11:67:de:45:33:5c:bc:b7:05:bb:4f:87:60:59:5c:38:1a:b3:
6f:fa:d3:b1:25:bb:da:36:90:79:a5:b7:39:2d:9e:a2:45:b3:
b9:9a:d6:12:34:27:88:a8:43:a0:88:6f:38:a7:4c:6f:2e:38:
9a:af:65:7f:d4:63:f8:ef:65:51:7d:59:1a:dd:fd:43:03:09:
94:3b:51:33:af:55:6a:9e:6a:d0:34:7c:95:3d:f5:31:5f:5d:
cd:7e:57:a4:32:68:7e:71:21:4c:ac:34:8d:b0:73:b4:e0:a2:
c9:a5:be:6f:5d:51:f2:47:7b:b8:41:a7:67:2b:2f:84:0b:90:
b7:af:0a:26:f8:55:d9:95:1a:77:b6:a9:27:c7:50:80:71:ef:
0a:49:d7:31:5a:9c:4b:6a:2f:42:52:66:66:26:c2:42:bf:5b:
17:22:61:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 1 10:10:32 2024 by rpki-client on console-ams.rpki-client.org