Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/4A2EA7E86B8F11EB9B757C51C4F9AE02.roa
File: 4A2EA7E86B8F11EB9B757C51C4F9AE02.roa (raw, json)
Hash identifier: YJ0FXRDs1QOkct3Z+eMlItMk7IRUwWFiJhqFTGaMYBQ=
Subject key identifier: 13:59:0E:36:93:2D:D1:65:C9:B0:9D:9E:4E:EF:19:3E:92:E8:C9:3D
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: 6A9B
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/4A2EA7E86B8F11EB9B757C51C4F9AE02.roa
Signing time: Wed 10 May 2023 16:15:35 +0000
ROA not before: Wed 10 May 2023 16:15:35 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 133661
IP address blocks: 101.0.32.0/22 maxlen: 24
101.0.37.0/24 maxlen: 24
103.179.10.0/23 maxlen: 24
103.179.102.0/23 maxlen: 24
103.181.56.0/23 maxlen: 24
103.183.30.0/23 maxlen: 24
103.183.32.0/23 maxlen: 24
103.183.34.0/23 maxlen: 24
103.187.96.0/23 maxlen: 24
203.76.178.0/24 maxlen: 24
203.76.180.0/24 maxlen: 24
203.76.181.0/24 maxlen: 24
203.76.188.0/24 maxlen: 24
203.76.190.0/24 maxlen: 24
203.76.191.0/24 maxlen: 24
2001:df2:e200::/48 maxlen: 48
2001:df2:e600::/48 maxlen: 48
2400:7b20::/32 maxlen: 32
2404:7c80::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 03 May 2024 15:38:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 27291 (0x6a9b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Validity
Not Before: May 10 16:15:35 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=645bc327-357b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:9b:83:f4:2e:c5:09:82:51:dc:cf:92:89:7f:
c8:c2:e0:b0:21:db:d6:b3:78:3f:c4:99:d7:93:b1:
f1:4a:c3:9c:81:66:41:77:ef:64:7f:33:53:86:b5:
69:26:d5:9c:80:d3:13:0e:e5:87:29:43:5f:26:23:
75:96:19:be:fa:09:21:4c:b8:44:d5:2e:fa:27:e6:
a9:0d:64:b6:bb:58:0d:01:61:a3:b7:9e:d4:cd:91:
18:70:9d:a1:b9:e2:fb:ee:88:d3:ae:b5:a3:89:e0:
d7:3a:74:7f:6c:be:3c:f3:36:4a:d6:6a:b7:13:4b:
4e:80:59:d9:a5:6e:ff:34:2f:73:61:d4:23:37:ae:
81:d8:6a:ed:c7:fb:89:69:18:e0:9a:12:33:ff:3b:
74:aa:29:22:99:54:63:bb:56:10:ab:22:02:1a:e1:
5e:de:fe:ae:9c:e7:7e:94:1d:5e:4c:d3:21:63:de:
f0:2d:53:fb:30:bf:ba:9b:a0:2c:31:48:44:98:35:
8b:e8:93:d7:61:af:d4:44:4b:6a:44:c8:a3:e6:4b:
d7:f8:88:48:f8:9c:e0:ea:9a:79:67:1a:2b:a8:16:
6a:98:08:18:35:58:a8:ce:3a:25:ef:19:07:e1:d7:
b4:cf:20:ae:94:1b:46:53:77:8c:9d:7e:17:80:e1:
c6:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:59:0E:36:93:2D:D1:65:C9:B0:9D:9E:4E:EF:19:3E:92:E8:C9:3D
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/4A2EA7E86B8F11EB9B757C51C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
101.0.32.0/22
101.0.37.0/24
103.179.10.0/23
103.179.102.0/23
103.181.56.0/23
103.183.30.0-103.183.35.255
103.187.96.0/23
203.76.178.0/24
203.76.180.0/23
203.76.188.0/24
203.76.190.0/23
IPv6:
2001:df2:e200::/48
2001:df2:e600::/48
2400:7b20::/32
2404:7c80::/32
Signature Algorithm: sha256WithRSAEncryption
02:9b:d1:5f:ee:75:b9:d7:86:0c:63:06:de:2b:4d:82:e7:57:
be:2e:07:91:60:9c:5e:02:e5:fe:cb:d8:57:4f:b5:40:b3:69:
e8:4e:23:11:76:10:2a:81:f1:6b:c6:4d:12:37:49:cf:5b:e1:
f8:3a:49:f2:d4:c8:a8:35:3c:8d:b5:77:1c:b6:31:44:79:af:
4d:2f:95:27:af:32:0c:f2:a8:a9:f2:d9:24:90:c5:ac:2f:0b:
7a:bc:88:67:06:00:7c:0a:e5:c8:4d:09:52:50:0d:ee:ac:c7:
21:d0:ac:d2:f9:b4:cc:5b:9b:bc:eb:f5:03:8b:3d:20:42:94:
4e:bc:cb:7d:b8:79:fc:25:0d:09:d5:c8:67:df:78:17:a8:ef:
b8:c9:6d:46:e5:ab:4e:a6:a3:d5:c9:df:73:ed:6a:e1:cb:b1:
66:af:90:b3:ee:e1:dc:36:b5:d6:a5:2d:ba:4a:d9:06:ee:2c:
c4:ef:7b:8b:d8:c2:83:87:b9:00:7a:7c:ba:b8:b8:82:51:19:
b5:02:31:e6:59:84:26:fc:8a:6a:9f:1f:61:b4:c2:f9:14:cb:
05:3b:c5:d0:6a:9f:dc:90:4c:f0:0f:d9:b1:ea:2a:6b:11:a5:
52:51:ba:80:c6:a8:fd:d1:7d:ea:f8:6d:50:1f:82:64:72:be:
f1:26:00:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 27 10:19:31 2024 by rpki-client on console-ams.rpki-client.org