Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/2DA4A73C9FCE11EE9B277179C4F9AE02.roa
File: 2DA4A73C9FCE11EE9B277179C4F9AE02.roa (raw, json)
Hash identifier: GHNufNrCyYCQhDdZP8y+qNaIjLt9yUNWpkwSHpUk0iw=
Subject key identifier: 42:B7:59:90:26:65:D4:D6:3C:24:1D:6C:3E:BF:9A:E5:D4:FC:A0:FD
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: 825B
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/2DA4A73C9FCE11EE9B277179C4F9AE02.roa
Signing time: Thu 01 Feb 2024 09:38:21 +0000
ROA not before: Thu 01 Feb 2024 09:38:21 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 132215
IP address blocks: 1.6.136.0/24 maxlen: 24
1.6.226.0/24 maxlen: 24
1.6.227.0/24 maxlen: 24
1.6.228.0/24 maxlen: 24
1.7.142.0/24 maxlen: 24
1.7.151.0/24 maxlen: 24
1.7.161.0/24 maxlen: 24
1.7.162.0/24 maxlen: 24
1.7.180.0/24 maxlen: 24
1.7.200.0/24 maxlen: 24
1.7.201.0/24 maxlen: 24
1.7.202.0/24 maxlen: 24
43.227.132.0/22 maxlen: 24
45.127.208.0/22 maxlen: 24
45.127.228.0/22 maxlen: 24
45.127.236.0/22 maxlen: 24
45.249.232.0/22 maxlen: 24
58.84.20.0/22 maxlen: 24
58.84.24.0/22 maxlen: 24
59.152.80.0/22 maxlen: 24
61.14.204.0/22 maxlen: 24
103.7.128.0/22 maxlen: 24
103.15.228.0/22 maxlen: 24
103.59.140.0/22 maxlen: 24
103.70.60.0/22 maxlen: 24
103.119.240.0/22 maxlen: 23
103.119.241.0/24 maxlen: 24
103.119.242.0/23 maxlen: 24
103.120.28.0/22 maxlen: 24
103.196.188.0/22 maxlen: 24
103.196.216.0/22 maxlen: 24
103.196.224.0/22 maxlen: 24
103.197.36.0/22 maxlen: 24
103.197.40.0/22 maxlen: 24
103.197.80.0/22 maxlen: 24
103.197.100.0/22 maxlen: 24
103.197.124.0/22 maxlen: 24
103.197.128.0/22 maxlen: 24
103.197.136.0/22 maxlen: 24
103.197.140.0/22 maxlen: 24
103.200.76.0/22 maxlen: 24
103.200.80.0/22 maxlen: 24
103.200.88.0/22 maxlen: 24
103.203.80.0/22 maxlen: 24
103.218.228.0/22 maxlen: 24
111.235.68.0/22 maxlen: 24
114.134.16.0/22 maxlen: 24
202.177.153.0/24 maxlen: 24
202.177.157.0/24 maxlen: 24
218.185.248.0/22 maxlen: 24
220.158.128.0/22 maxlen: 24
220.158.144.0/22 maxlen: 24
220.158.168.0/22 maxlen: 24
220.158.172.0/22 maxlen: 24
220.158.180.0/22 maxlen: 24
220.158.184.0/22 maxlen: 24
223.31.120.0/24 maxlen: 24
223.31.121.0/24 maxlen: 24
223.31.122.0/24 maxlen: 24
223.31.123.0/24 maxlen: 24
223.31.159.0/24 maxlen: 24
223.31.174.0/24 maxlen: 24
2407:f700::/32 maxlen: 36
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 03 May 2024 15:38:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 33371 (0x825b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Validity
Not Before: Feb 1 09:38:21 2024 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=65bb668d-7734
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:09:37:8b:99:ad:0b:9c:e2:ce:e2:f3:de:60:
12:61:42:62:30:dc:42:56:68:50:78:82:93:79:b4:
8b:43:01:85:c0:8d:5b:3f:11:34:e1:79:70:20:c4:
6f:cf:58:dc:31:ca:0a:64:8e:3d:71:f8:08:45:b6:
c1:fe:57:09:4f:37:fc:2d:b1:c5:be:ae:fe:16:9c:
94:21:31:e9:86:89:d9:91:fa:a1:11:25:69:fd:fc:
c7:a5:6c:6c:16:dc:23:d8:9d:bf:21:fe:af:ac:d8:
0a:0b:b9:c9:93:86:6c:61:3f:0f:7f:8d:21:0b:dd:
76:a6:2c:f6:c3:0e:db:c6:ea:08:0f:4b:21:f9:f8:
80:35:6e:76:67:95:81:6a:37:d2:4c:f0:25:d4:d9:
c4:bd:44:3b:52:56:36:6e:6b:03:cc:3c:70:f0:81:
18:8d:2e:b2:fa:71:9e:6d:51:c4:29:c6:75:c2:56:
f7:ca:c1:bf:65:25:73:fd:c6:1b:7b:38:5b:2f:8e:
44:c2:f8:b4:2d:54:5a:c9:1c:9d:bc:de:42:3b:cc:
50:de:cf:12:c9:82:6d:4d:e2:38:4c:a9:65:01:85:
f1:15:9d:73:49:f8:5b:2b:e8:0d:58:3c:7d:f7:05:
1f:06:48:06:a1:41:0f:3e:27:88:72:56:f3:ae:de:
7d:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:B7:59:90:26:65:D4:D6:3C:24:1D:6C:3E:BF:9A:E5:D4:FC:A0:FD
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/2DA4A73C9FCE11EE9B277179C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
1.6.136.0/24
1.6.226.0-1.6.228.255
1.7.142.0/24
1.7.151.0/24
1.7.161.0-1.7.162.255
1.7.180.0/24
1.7.200.0-1.7.202.255
43.227.132.0/22
45.127.208.0/22
45.127.228.0/22
45.127.236.0/22
45.249.232.0/22
58.84.20.0-58.84.27.255
59.152.80.0/22
61.14.204.0/22
103.7.128.0/22
103.15.228.0/22
103.59.140.0/22
103.70.60.0/22
103.119.240.0/22
103.120.28.0/22
103.196.188.0/22
103.196.216.0/22
103.196.224.0/22
103.197.36.0-103.197.43.255
103.197.80.0/22
103.197.100.0/22
103.197.124.0-103.197.131.255
103.197.136.0/21
103.200.76.0-103.200.83.255
103.200.88.0/22
103.203.80.0/22
103.218.228.0/22
111.235.68.0/22
114.134.16.0/22
202.177.153.0/24
202.177.157.0/24
218.185.248.0/22
220.158.128.0/22
220.158.144.0/22
220.158.168.0/21
220.158.180.0-220.158.187.255
223.31.120.0/22
223.31.159.0/24
223.31.174.0/24
IPv6:
2407:f700::/32
Signature Algorithm: sha256WithRSAEncryption
ba:91:22:95:c8:8c:d9:39:54:66:8a:1b:42:47:a0:2e:4e:11:
67:9c:e2:79:bf:ec:8e:df:25:bb:8b:1f:c6:f1:ee:da:8f:47:
d0:f6:78:a8:b9:11:14:10:24:d9:cd:75:0a:29:16:00:6a:d1:
32:3b:0d:d2:5f:a1:69:90:be:1c:4d:94:d5:21:b5:b9:46:3e:
64:9f:33:c4:5e:3b:0a:f5:c3:b3:14:77:0f:81:df:91:90:92:
94:6f:58:a5:4d:12:bf:cc:5c:0b:38:fb:56:95:3e:31:5c:9e:
cb:9c:da:2f:1d:46:f5:8c:e8:05:6c:8e:12:62:b0:29:99:0f:
24:2d:30:d6:bd:6e:9a:3a:8a:b1:88:ac:79:87:87:cd:85:b7:
55:cf:f7:ea:a2:77:93:be:fb:d5:71:5f:4d:9f:66:97:98:40:
e9:d0:4d:64:95:d3:81:e9:e9:f8:70:80:41:9a:fc:68:8a:ab:
0c:59:43:2a:d7:7b:54:9b:b4:75:70:de:f7:3d:ce:a6:db:29:
02:f7:9b:52:be:46:c7:a4:8d:21:ff:5d:ef:28:32:f3:60:60:
35:ac:9f:48:56:36:c1:b2:7c:ef:94:8b:91:47:5e:b0:b5:99:
69:11:f5:be:25:fb:09:10:ac:30:d5:fc:1d:8e:06:be:c5:07:
7a:71:f0:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 27 10:19:29 2024 by rpki-client on console-ams.rpki-client.org