Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/5A35FEC6DC4711EEAD6F7F64C4F9AE02.roa
File: 5A35FEC6DC4711EEAD6F7F64C4F9AE02.roa (raw, json)
Hash identifier: WqeXY7yjZIfpCOtsp4/I9UJaocT6GWEGWz6fPelnya4=
Subject key identifier: 5E:10:2F:7F:6C:C8:B3:BD:BC:AA:7E:75:1F:CD:7B:27:43:8A:9C:0D
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: 8442
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/5A35FEC6DC4711EEAD6F7F64C4F9AE02.roa
Signing time: Thu 07 Mar 2024 05:55:51 +0000
ROA not before: Thu 07 Mar 2024 05:55:51 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 17754
IP address blocks: 103.48.71.0/24 maxlen: 24
103.105.102.0/24 maxlen: 24
103.187.78.0/24 maxlen: 24
175.101.0.0/16 maxlen: 24
202.133.48.0/20 maxlen: 24
202.153.32.0/20 maxlen: 24
2401:fb00::/33 maxlen: 33
2401:fb00::/40 maxlen: 48
2401:fb00:100::/40 maxlen: 48
2401:fb00:200::/40 maxlen: 48
2401:fb00:300::/40 maxlen: 48
2401:fb00:400::/40 maxlen: 48
2401:fb00:500::/40 maxlen: 48
2401:fb00:600::/40 maxlen: 48
2401:fb00:700::/40 maxlen: 48
2401:fb00:800::/40 maxlen: 48
2401:fb00:900::/40 maxlen: 48
2401:fb00:7600::/40 maxlen: 48
2401:fb00:7700::/40 maxlen: 48
2401:fb00:7800::/40 maxlen: 48
2401:fb00:7900::/40 maxlen: 48
2401:fb00:7a00::/40 maxlen: 48
2401:fb00:7b00::/40 maxlen: 48
2401:fb00:7c00::/40 maxlen: 48
2401:fb00:7d00::/40 maxlen: 48
2401:fb00:7e00::/40 maxlen: 48
2401:fb00:7f00::/40 maxlen: 48
2401:fb00:8000::/33 maxlen: 33
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 03 May 2024 15:38:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 33858 (0x8442)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Validity
Not Before: Mar 7 05:55:51 2024 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=65e956e7-eb3b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:3f:2c:9a:5d:cc:c3:ee:55:24:28:0f:35:52:
3a:91:e7:dc:55:33:a2:56:55:25:1c:1d:0c:da:23:
d1:33:38:ac:e2:55:af:94:62:c9:9a:3a:bb:d6:75:
3e:45:82:75:cf:a5:14:eb:9a:92:4f:e9:87:7d:5f:
18:ec:75:94:aa:fd:fa:79:1c:fd:61:d1:40:87:bb:
d0:43:d2:a1:49:13:8d:d1:db:7b:22:86:5d:0d:36:
ab:82:7e:6e:94:8d:97:dc:39:84:d0:6d:c7:f9:66:
c4:1b:22:39:75:4e:53:1c:f0:c7:1f:0e:13:1b:75:
60:90:4f:64:22:0c:19:5f:53:46:e0:e6:df:22:28:
d8:9d:0c:1f:13:d1:b8:65:e9:10:e4:dc:a7:52:49:
ba:2c:27:ae:b7:5f:69:c1:6e:d9:66:ce:8f:87:7f:
79:e9:29:5a:cc:4d:c2:9e:49:73:56:7a:86:56:f9:
ca:4d:89:3f:d8:b3:7f:91:bb:50:54:53:cb:57:ee:
f4:04:30:88:f3:87:4e:38:90:ef:b5:fd:7f:d6:bf:
84:d0:ba:9d:72:6b:a5:96:b4:1a:09:34:8c:77:17:
38:9f:0d:dd:55:31:93:3b:21:28:de:30:22:32:65:
8e:e1:fe:59:56:a9:6d:bd:91:a3:a2:be:4a:cf:4e:
67:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:10:2F:7F:6C:C8:B3:BD:BC:AA:7E:75:1F:CD:7B:27:43:8A:9C:0D
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/5A35FEC6DC4711EEAD6F7F64C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.48.71.0/24
103.105.102.0/24
103.187.78.0/24
175.101.0.0/16
202.133.48.0/20
202.153.32.0/20
IPv6:
2401:fb00::/32
Signature Algorithm: sha256WithRSAEncryption
05:e1:d2:d3:38:f2:f5:18:09:41:56:ee:62:23:8e:ff:6c:9f:
00:40:76:d3:42:52:91:8f:d3:28:7a:56:34:ac:ec:71:27:9a:
3f:a8:2d:05:07:4d:6c:dc:c5:dc:ec:d7:f3:37:46:69:c9:19:
fa:14:f7:38:7b:6f:ad:87:9b:17:76:9d:44:eb:e7:3f:0f:5d:
fc:0d:43:29:d0:55:1f:78:bb:ac:b1:29:80:51:6e:fe:49:1d:
f3:53:a7:07:ec:e6:85:83:27:8a:97:23:ec:52:9f:b1:19:87:
95:75:8e:2c:a2:a9:e5:1b:c2:50:49:af:74:13:c4:ce:c9:0b:
c7:31:89:52:24:22:38:fc:19:6d:b2:7f:99:e4:a6:3e:3c:78:
c3:f4:8e:28:ab:c6:c4:cc:c9:ba:90:3c:c6:cf:a8:26:68:88:
1c:ec:66:04:db:76:b6:a4:2d:1f:d5:83:26:00:d5:54:9d:30:
95:44:ad:fd:84:46:84:4a:f9:29:f9:b6:9b:17:e9:20:a2:04:
97:47:a8:d0:bc:33:d3:e8:1f:d0:c0:6a:d2:ce:e9:c0:ac:9e:
65:7e:e9:ca:3a:42:92:74:46:49:11:1b:3d:56:6e:6b:e8:ad:
a2:29:32:a3:4a:86:6f:a1:26:8d:ce:ca:b6:02:98:a9:49:e5:
e5:94:61:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 27 10:19:33 2024 by rpki-client on console-ams.rpki-client.org