Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/28C57AAA686E11EC939F873AC4F9AE02.roa
File: 28C57AAA686E11EC939F873AC4F9AE02.roa (raw, json)
Hash identifier: aX9W0Mz1vT3mjgfL2vO53MMgPJdgsdXhRkpTQOzRKHw=
Subject key identifier: FA:63:AF:14:3C:90:35:C3:DC:CA:D8:C8:75:3B:2D:E7:A7:92:3A:68
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: 714C
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/28C57AAA686E11EC939F873AC4F9AE02.roa
Signing time: Wed 10 May 2023 16:47:33 +0000
ROA not before: Wed 10 May 2023 16:47:33 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 17483
IP address blocks: 45.123.24.0/24 maxlen: 24
45.123.25.0/24 maxlen: 24
45.123.26.0/24 maxlen: 24
45.123.27.0/24 maxlen: 24
49.156.128.0/24 maxlen: 24
49.156.129.0/24 maxlen: 24
49.156.130.0/24 maxlen: 24
49.156.131.0/24 maxlen: 24
49.156.132.0/22 maxlen: 22
49.156.136.0/23 maxlen: 23
49.156.138.0/23 maxlen: 23
49.156.140.0/24 maxlen: 24
49.156.141.0/24 maxlen: 24
49.156.142.0/24 maxlen: 24
49.156.143.0/24 maxlen: 24
49.156.144.0/24 maxlen: 24
49.156.145.0/24 maxlen: 24
49.156.146.0/24 maxlen: 24
49.156.147.0/24 maxlen: 24
49.156.148.0/24 maxlen: 24
49.156.149.0/24 maxlen: 24
49.156.150.0/24 maxlen: 24
49.156.151.0/24 maxlen: 24
49.156.152.0/24 maxlen: 24
49.156.153.0/24 maxlen: 24
49.156.154.0/24 maxlen: 24
49.156.155.0/24 maxlen: 24
49.156.156.0/24 maxlen: 24
49.156.157.0/24 maxlen: 24
49.156.158.0/24 maxlen: 24
49.156.159.0/24 maxlen: 24
103.5.16.0/24 maxlen: 24
103.5.17.0/24 maxlen: 24
103.5.18.0/24 maxlen: 24
103.5.19.0/24 maxlen: 24
103.152.179.0/24 maxlen: 24
103.158.242.0/24 maxlen: 24
202.62.64.0/24 maxlen: 24
202.62.65.0/24 maxlen: 24
202.62.66.0/24 maxlen: 24
202.62.67.0/24 maxlen: 24
202.62.68.0/24 maxlen: 24
202.62.69.0/24 maxlen: 24
202.62.70.0/24 maxlen: 24
202.62.71.0/24 maxlen: 24
202.62.72.0/24 maxlen: 24
202.62.73.0/24 maxlen: 24
202.62.74.0/24 maxlen: 24
202.62.75.0/24 maxlen: 24
202.62.76.0/24 maxlen: 24
202.62.77.0/24 maxlen: 24
202.62.78.0/24 maxlen: 24
202.62.79.0/24 maxlen: 24
202.62.80.0/24 maxlen: 24
202.62.81.0/24 maxlen: 24
202.62.82.0/24 maxlen: 24
202.62.83.0/24 maxlen: 24
202.62.84.0/24 maxlen: 24
202.62.85.0/24 maxlen: 24
202.62.86.0/24 maxlen: 24
202.62.87.0/24 maxlen: 24
202.62.88.0/24 maxlen: 24
202.62.89.0/24 maxlen: 24
202.62.90.0/24 maxlen: 24
202.62.91.0/24 maxlen: 24
202.62.92.0/24 maxlen: 24
202.62.93.0/24 maxlen: 24
202.62.94.0/24 maxlen: 24
202.62.95.0/24 maxlen: 24
2404:f100::/40 maxlen: 40
2404:f100:100::/40 maxlen: 40
2404:f100:200::/40 maxlen: 40
2404:f100:300::/40 maxlen: 40
2404:f100:400::/40 maxlen: 40
2404:f100:500::/40 maxlen: 40
2404:f100:e000::/40 maxlen: 40
2404:f100:e200::/40 maxlen: 40
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 03 May 2024 15:38:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 29004 (0x714c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Validity
Not Before: May 10 16:47:33 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=645bcaa5-3768
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:c3:20:aa:fc:78:dd:0e:7c:7b:3a:fa:1c:d3:
ba:c0:f8:1d:90:9e:66:78:bd:ee:de:3f:85:0a:35:
13:f0:a1:19:85:e8:29:a7:66:2b:2a:e7:b2:7e:e3:
b0:9b:d5:f1:1a:74:9b:a2:72:80:7d:7f:e8:ca:05:
9d:9e:e4:3e:8d:b1:a8:15:39:4b:dd:26:55:dd:18:
bd:fb:f3:0a:f9:1d:c7:8b:55:c2:4a:df:22:4c:7a:
a1:45:df:14:7d:fc:56:9e:db:85:88:7f:95:25:8b:
54:b0:64:9d:bb:ea:65:a7:1c:9a:c1:84:6d:46:1e:
7e:92:2e:dc:66:c8:a1:10:66:f1:ff:81:01:9a:b4:
7a:48:68:a5:e5:89:ae:1b:aa:92:c9:aa:9b:6b:c5:
f9:bf:df:3d:a4:35:61:e6:3a:e7:83:95:cf:07:51:
56:75:fe:95:a9:d9:00:54:a9:1f:fe:66:fc:46:d0:
80:42:af:ad:40:55:06:26:15:60:ca:10:eb:9a:9a:
53:7d:07:7b:ef:b6:6c:b0:e3:56:b9:e7:c2:03:64:
74:d1:f8:e2:a1:87:89:b3:fe:4e:93:c9:e8:d1:77:
c7:40:35:3a:65:99:8e:9a:93:52:2d:82:bd:65:a3:
37:aa:cd:2b:d8:7d:e0:a7:b8:61:1e:6b:05:89:e8:
d5:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:63:AF:14:3C:90:35:C3:DC:CA:D8:C8:75:3B:2D:E7:A7:92:3A:68
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/28C57AAA686E11EC939F873AC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.123.24.0/22
49.156.128.0/19
103.5.16.0/22
103.152.179.0/24
103.158.242.0/24
202.62.64.0/19
IPv6:
2404:f100::-2404:f100:5ff:ffff:ffff:ffff:ffff:ffff
2404:f100:e000::/40
2404:f100:e200::/40
Signature Algorithm: sha256WithRSAEncryption
41:a6:98:e9:9a:e2:5b:74:df:35:06:cd:6e:9e:00:0c:85:3d:
3f:c9:a5:b6:12:22:ad:91:73:f7:7f:e5:e7:ff:41:17:4a:2f:
f0:a0:a8:19:fd:6d:34:56:ed:1b:ad:27:80:f6:51:37:bc:df:
c9:2b:db:f8:84:d8:3b:05:af:29:22:58:3a:25:ff:a0:ad:19:
cb:d3:13:89:96:c9:47:28:23:64:e5:7c:d5:52:49:59:ca:cd:
6e:11:45:0c:55:d8:3f:c0:c9:ef:d2:80:0c:b1:0e:cd:b9:ce:
31:5b:79:4d:15:66:c5:21:ab:82:d5:8f:f6:d8:8a:26:fe:47:
27:6e:48:df:f3:d6:ea:da:5e:4b:a2:9f:d5:80:7c:2c:9a:c3:
9f:28:a7:7a:49:6e:05:a6:e0:46:6a:48:0d:90:60:94:11:7e:
f2:a5:c4:7d:6b:76:89:7e:0a:98:f0:9f:2c:15:cb:4e:1d:5b:
f0:10:8f:92:c7:38:bf:4e:43:cf:53:c1:a0:18:06:9b:f1:d3:
5d:7a:ec:74:25:26:01:cb:39:5a:fb:bc:9f:97:f5:95:e5:e7:
c4:f5:15:75:14:bf:e6:09:7e:fa:89:ec:c4:2a:33:a1:3a:06:
ce:a2:8e:0f:0d:63:22:b7:64:a0:d3:6d:74:18:fc:a8:c9:83:
50:5b:c8:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 27 10:19:28 2024 by rpki-client on console-ams.rpki-client.org