Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/4B237494B1E211ED84E4AC4FC4F9AE02.roa
File: 4B237494B1E211ED84E4AC4FC4F9AE02.roa (raw, json)
Hash identifier: vMT9zI0UcHStWao/6wnukMb/2YxKGtArDpUbd4JAyPI=
Subject key identifier: 94:19:46:DD:01:A5:E4:33:69:30:A0:7D:17:4F:55:5F:51:D7:D0:41
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: 7282
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/4B237494B1E211ED84E4AC4FC4F9AE02.roa
Signing time: Mon 22 May 2023 10:22:04 +0000
ROA not before: Mon 22 May 2023 10:22:04 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 134033
IP address blocks: 43.241.64.0/24 maxlen: 24
43.241.65.0/24 maxlen: 24
43.241.67.0/24 maxlen: 24
43.241.120.0/24 maxlen: 24
43.241.121.0/24 maxlen: 24
43.241.122.0/24 maxlen: 24
43.241.123.0/24 maxlen: 24
45.117.64.0/22 maxlen: 24
103.57.132.0/24 maxlen: 24
103.57.133.0/24 maxlen: 24
103.57.134.0/24 maxlen: 24
103.57.135.0/24 maxlen: 24
103.96.16.0/24 maxlen: 24
103.96.17.0/24 maxlen: 24
103.96.18.0/24 maxlen: 24
103.96.19.0/24 maxlen: 24
103.152.185.0/24 maxlen: 24
103.172.210.0/24 maxlen: 24
103.172.211.0/24 maxlen: 24
103.224.155.0/24 maxlen: 24
103.224.156.0/22 maxlen: 24
2400:7be0::/32 maxlen: 32
2400:7be0::/40 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 03 May 2024 15:38:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 29314 (0x7282)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Validity
Not Before: May 22 10:22:04 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=646b424b-5411
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:ad:6a:5c:08:7d:02:0c:94:96:fe:77:7a:3e:
db:7e:3a:dd:fc:f1:bc:ac:90:9c:f5:d9:eb:2e:60:
b8:7d:ef:e2:9c:eb:0f:0d:ed:fa:0b:6a:47:a2:4e:
4d:07:d7:c4:2a:b7:82:48:8c:e0:2f:be:33:8c:da:
6b:ef:48:1d:46:1c:11:f7:97:f9:1c:6b:5c:52:51:
05:c3:a3:6e:82:e3:3f:3b:49:86:dc:0c:0b:3d:c4:
9b:9a:ff:81:e2:68:d5:ae:29:a2:9c:ab:f1:65:a8:
0f:de:bc:2d:5f:dd:f2:c5:fb:9e:dd:c9:1d:a5:57:
a1:b8:04:45:08:20:6c:30:50:25:1d:6a:91:b3:e1:
f6:ff:ec:12:aa:b9:de:ed:c0:2c:66:a0:ec:9c:fd:
88:d5:c4:cc:4e:93:14:80:8a:d4:26:d1:c3:20:61:
24:6c:a3:a6:dc:44:90:fe:2d:36:49:64:70:1e:88:
a0:d5:26:24:1e:a1:64:0b:9c:13:4f:32:60:d9:2a:
98:a9:12:0a:41:15:70:b4:81:d8:da:d8:7b:28:87:
7b:2b:78:ff:52:b7:e2:45:31:f4:46:6b:aa:62:25:
f4:5f:69:68:f4:48:cc:1e:c8:c9:26:a1:9a:93:4a:
65:fd:52:01:b1:f8:78:b2:ac:ab:dd:7c:78:b6:f9:
40:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:19:46:DD:01:A5:E4:33:69:30:A0:7D:17:4F:55:5F:51:D7:D0:41
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/4B237494B1E211ED84E4AC4FC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
43.241.64.0/23
43.241.67.0/24
43.241.120.0/22
45.117.64.0/22
103.57.132.0/22
103.96.16.0/22
103.152.185.0/24
103.172.210.0/23
103.224.155.0-103.224.159.255
IPv6:
2400:7be0::/32
Signature Algorithm: sha256WithRSAEncryption
91:79:ea:3c:5c:13:5b:fd:6c:cc:4b:06:94:9b:a1:45:5a:e3:
d8:cb:29:3d:94:36:8c:28:8a:da:3e:73:02:78:83:bd:ff:18:
0b:2f:d9:fd:92:fa:13:5b:5f:ad:a4:4b:98:7b:dc:21:c9:8c:
af:3d:57:d3:93:2c:61:0d:9c:79:66:0f:14:24:ba:c5:53:f5:
66:41:a5:ee:9f:7b:b4:ad:51:63:80:83:c1:85:18:e5:ce:c2:
0a:de:d6:4c:e9:d0:71:92:28:ec:e9:a8:db:13:dc:ce:f9:a6:
e5:83:e4:d4:c1:cc:84:dc:65:5b:aa:e3:11:12:0c:db:6b:61:
9a:68:d1:71:32:86:b3:fe:d2:00:40:da:73:da:46:1a:4b:35:
ed:d0:dc:29:bc:51:60:05:33:e4:51:fe:fc:08:93:ce:92:76:
df:dc:d6:47:11:23:f1:d8:1a:c7:7f:09:6b:65:20:7d:d9:22:
65:cc:27:98:4a:40:9a:da:c3:3d:65:f0:95:bd:b2:b9:dd:c7:
e7:ab:54:58:48:28:ac:50:f0:47:bd:a3:3e:d2:d6:7e:38:d0:
a3:69:53:c7:71:11:d0:4b:2f:33:4a:54:fb:ec:63:69:df:4e:
2a:33:27:ec:4c:9b:ee:ff:53:35:a2:81:93:ee:4b:46:34:d3:
be:62:72:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 27 10:19:31 2024 by rpki-client on console-ams.rpki-client.org