Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/1CF9E644FD8011EEA49B6E7CC4F9AE02.roa
File: 1CF9E644FD8011EEA49B6E7CC4F9AE02.roa (raw, json)
Hash identifier: RwukLMIdePToMHtPqQe1k5f7v05L2loUs957wqIFNKY=
Subject key identifier: 6D:EA:8F:D3:2E:68:91:32:62:8C:67:65:3B:4F:2F:23:08:3F:1A:13
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: 8654
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/1CF9E644FD8011EEA49B6E7CC4F9AE02.roa
Signing time: Thu 18 Apr 2024 12:35:18 +0000
ROA not before: Thu 18 Apr 2024 12:35:18 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 140171
IP address blocks: 103.38.182.0/23 maxlen: 24
103.53.30.0/24 maxlen: 24
103.53.31.0/24 maxlen: 24
103.72.218.0/24 maxlen: 24
103.72.219.0/24 maxlen: 24
103.77.14.0/24 maxlen: 24
103.80.152.0/24 maxlen: 24
103.80.153.0/24 maxlen: 24
103.80.154.0/23 maxlen: 24
103.134.132.0/24 maxlen: 24
103.144.192.0/24 maxlen: 24
103.156.200.0/23 maxlen: 24
103.159.162.0/24 maxlen: 24
103.160.186.0/24 maxlen: 24
103.160.187.0/24 maxlen: 24
103.161.32.0/24 maxlen: 24
103.161.33.0/24 maxlen: 24
103.163.42.0/23 maxlen: 24
103.163.158.0/24 maxlen: 24
103.169.154.0/24 maxlen: 24
103.169.155.0/24 maxlen: 24
103.169.167.0/24 maxlen: 24
103.175.0.0/23 maxlen: 24
103.176.142.0/24 maxlen: 24
103.187.166.0/23 maxlen: 24
103.190.100.0/23 maxlen: 24
103.191.202.0/23 maxlen: 24
103.209.62.0/24 maxlen: 24
103.209.63.0/24 maxlen: 24
103.209.174.0/23 maxlen: 24
202.61.108.0/24 maxlen: 24
2001:df1:1fc0::/48 maxlen: 48
2001:df1:2040::/48 maxlen: 48
2001:df1:20c0::/48 maxlen: 48
2001:df1:2240::/48 maxlen: 48
2001:df1:22c0::/48 maxlen: 48
2001:df1:2740::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 08 May 2024 08:14:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 34388 (0x8654)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Validity
Not Before: Apr 18 12:35:18 2024 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=66211386-1f91
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:83:41:2f:03:c2:05:2a:17:11:6b:52:25:55:
41:64:07:dd:95:db:20:26:ae:e9:27:6d:6c:c1:13:
fd:37:26:87:fd:00:90:b4:8c:b6:a9:cf:0c:de:c8:
89:fa:55:22:9e:68:17:b4:7a:87:d1:20:24:cd:02:
00:e0:f3:a4:24:e3:43:cc:b6:92:ea:01:9b:a7:5c:
01:39:2f:bf:ef:5c:12:4e:c8:75:98:d8:8d:48:6e:
8e:76:27:85:63:24:01:b5:7e:4b:98:1e:d0:1f:d6:
bd:9d:67:4a:89:9d:b5:14:29:ab:31:89:0a:1e:19:
50:04:4e:cd:fb:0f:98:53:08:01:bf:5d:2d:07:8d:
46:44:95:6a:4b:e1:2a:f9:24:df:39:6e:8b:3c:5b:
2e:a8:87:f7:cf:dd:08:b3:09:7c:fd:3e:25:a1:7d:
46:b2:31:ae:55:e1:52:66:e4:bf:7e:2f:52:09:fc:
92:7a:20:02:8f:41:42:39:ac:af:65:3d:ac:83:a3:
a4:d4:73:c0:07:f7:1d:39:75:72:9b:cd:75:aa:1a:
1f:a8:fc:2e:15:e5:63:54:67:35:69:eb:b8:a0:ec:
a8:ac:e5:4e:6f:2e:fd:fa:b2:bf:fa:42:f9:de:46:
2a:59:b0:0a:ae:2a:2f:0a:30:e1:61:7f:ba:ec:ce:
46:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:EA:8F:D3:2E:68:91:32:62:8C:67:65:3B:4F:2F:23:08:3F:1A:13
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/1CF9E644FD8011EEA49B6E7CC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.38.182.0/23
103.53.30.0/23
103.72.218.0/23
103.77.14.0/24
103.80.152.0/22
103.134.132.0/24
103.144.192.0/24
103.156.200.0/23
103.159.162.0/24
103.160.186.0/23
103.161.32.0/23
103.163.42.0/23
103.163.158.0/24
103.169.154.0/23
103.169.167.0/24
103.175.0.0/23
103.176.142.0/24
103.187.166.0/23
103.190.100.0/23
103.191.202.0/23
103.209.62.0/23
103.209.174.0/23
202.61.108.0/24
IPv6:
2001:df1:1fc0::/48
2001:df1:2040::/48
2001:df1:20c0::/48
2001:df1:2240::/48
2001:df1:22c0::/48
2001:df1:2740::/48
Signature Algorithm: sha256WithRSAEncryption
7c:7a:00:04:bd:bd:e1:b8:b8:ca:41:78:a7:63:73:6d:3e:25:
f7:59:f0:3a:c6:af:88:53:1e:53:a9:e0:0d:81:3d:47:ec:e0:
d8:ff:bb:a9:07:a7:43:ba:83:a2:4d:b5:e6:ef:a5:95:61:b6:
33:ba:86:aa:f1:10:8f:f9:24:dc:d6:31:d7:80:17:54:f1:8f:
a9:b0:9b:6b:12:46:3c:7a:24:ae:4f:49:09:33:b9:ea:ec:6a:
e0:db:5c:85:f0:1f:f1:19:98:fb:28:e6:77:2a:b5:e7:76:6c:
89:4b:a7:6f:c3:b1:00:04:cd:17:66:76:8d:78:62:c5:96:39:
8c:3f:a6:69:00:83:b1:1b:8e:74:8f:ea:9a:8c:cd:a6:c2:89:
3b:7d:cb:9e:68:4f:fa:91:31:78:ff:7b:79:bc:e6:1c:5d:7a:
09:23:f4:87:7d:0c:c6:5a:f9:52:95:db:24:74:d6:b9:db:27:
9d:0a:3e:4c:72:8d:d7:e3:6b:3e:0c:35:0a:ba:78:fd:98:5b:
2e:8f:f3:49:b2:49:31:8d:55:f5:71:05:d7:cf:71:46:d5:24:
85:de:a5:c7:b8:25:99:34:df:f3:a2:bd:98:36:23:07:f6:14:
e6:fb:c2:ab:62:92:a4:c2:96:87:23:1b:e2:26:76:ba:27:93:
6c:57:7e:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 1 10:10:33 2024 by rpki-client on console-ams.rpki-client.org