Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/5E0E98488B6511EDB611CA3CC4F9AE02.roa
File: 5E0E98488B6511EDB611CA3CC4F9AE02.roa (raw, json)
Hash identifier: xTX8nsgBnkzDjgqMnTmNhD/IT5blq0cHurTpe/8izrU=
Subject key identifier: F9:35:78:9E:CF:29:19:14:4B:A6:64:D3:22:A3:FD:4E:AA:DB:7B:2D
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: 6CDA
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/5E0E98488B6511EDB611CA3CC4F9AE02.roa
Signing time: Wed 10 May 2023 16:26:32 +0000
ROA not before: Wed 10 May 2023 16:26:32 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 137109
IP address blocks: 103.109.12.0/22 maxlen: 24
103.137.48.0/24 maxlen: 24
103.137.49.0/24 maxlen: 24
103.137.50.0/24 maxlen: 24
103.137.51.0/24 maxlen: 24
103.152.180.0/24 maxlen: 24
103.160.166.0/24 maxlen: 24
103.160.167.0/24 maxlen: 24
103.161.148.0/24 maxlen: 24
103.173.50.0/24 maxlen: 24
103.173.51.0/24 maxlen: 24
103.176.212.0/23 maxlen: 24
103.176.238.0/24 maxlen: 24
103.176.239.0/24 maxlen: 24
103.186.246.0/24 maxlen: 24
103.186.247.0/24 maxlen: 24
103.187.36.0/23 maxlen: 24
103.189.98.0/23 maxlen: 24
2405:95c0::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 03 May 2024 15:38:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 27866 (0x6cda)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Validity
Not Before: May 10 16:26:32 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=645bc5b8-06a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:21:5c:2a:d4:31:66:37:b1:43:f8:67:75:09:
ff:13:b5:39:06:71:64:89:6d:d8:78:14:28:bc:7c:
ed:c5:d7:e9:86:33:81:9d:0d:62:69:64:a2:64:a2:
56:5f:bf:16:d9:79:5e:38:32:6d:3b:f7:88:fa:5a:
aa:2b:c0:b7:78:1e:48:fa:df:f3:6e:0e:5f:a3:3c:
13:51:20:b2:b8:61:14:bc:61:94:ce:6f:18:eb:cc:
ed:23:c0:53:1b:a9:ca:84:3e:ed:5e:4d:d8:dc:39:
16:9a:35:fe:f5:b9:f8:b3:87:eb:dd:03:f7:bf:5c:
c3:3b:69:63:95:c4:09:8a:4a:db:a4:61:e6:b1:69:
65:6b:a0:33:fc:af:3a:16:49:bf:25:ab:87:40:66:
c6:1d:6b:54:d9:08:27:64:f4:aa:ef:a7:e1:77:15:
38:06:10:74:93:db:ae:b1:8a:98:da:60:1f:83:db:
4e:01:a7:3e:96:66:8c:65:2a:dc:09:f8:04:4c:03:
e0:55:90:f5:bd:ed:d2:aa:ea:f3:4b:fa:04:08:59:
04:5d:ac:5b:50:65:05:59:c0:8c:0c:0b:eb:eb:0a:
14:64:25:9f:56:18:f3:29:fe:7f:71:9c:30:a5:8e:
5f:2e:d4:4c:ef:e3:36:fa:2f:ce:a1:99:74:ac:25:
1b:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:35:78:9E:CF:29:19:14:4B:A6:64:D3:22:A3:FD:4E:AA:DB:7B:2D
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/5E0E98488B6511EDB611CA3CC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.109.12.0/22
103.137.48.0/22
103.152.180.0/24
103.160.166.0/23
103.161.148.0/24
103.173.50.0/23
103.176.212.0/23
103.176.238.0/23
103.186.246.0/23
103.187.36.0/23
103.189.98.0/23
IPv6:
2405:95c0::/32
Signature Algorithm: sha256WithRSAEncryption
83:4e:20:0d:67:2b:58:f2:d6:b0:8c:ee:0d:35:c0:24:c9:81:
e3:6f:a6:22:1b:e6:de:5b:9c:c8:12:f9:75:75:ad:c9:6f:78:
c4:ab:c5:02:4f:99:60:ca:4a:6f:4d:21:1f:87:f0:ca:87:42:
10:c7:f5:33:38:ea:12:e1:e3:23:73:ea:29:c3:84:ad:e7:48:
d9:fb:c2:ab:64:c9:d3:89:cc:a7:29:fe:d1:fb:7c:b6:18:12:
e5:89:12:8a:e2:02:89:6a:d6:03:b5:ea:6e:09:87:10:44:b6:
a4:f8:04:f8:24:68:71:3a:35:9d:db:e6:6e:a0:46:f6:c6:50:
96:60:bd:2f:7f:d2:fd:91:bf:93:81:04:c7:6e:94:d0:14:14:
23:27:eb:e0:0c:a1:f4:7d:a5:a0:ac:1d:49:c0:42:a7:89:43:
d7:5c:50:ba:12:23:93:02:a2:5a:ce:db:e0:28:a6:06:5a:82:
b8:7f:16:77:4c:21:80:52:3a:8b:40:45:96:6e:2e:44:e9:7c:
43:63:97:ea:b3:7d:cd:57:4b:f0:7f:05:32:62:4c:2f:03:c5:
cf:3b:c9:b4:3b:b2:ab:a8:10:65:4f:1d:b9:49:b5:d3:e9:02:
c0:c3:22:8e:f5:76:dc:0c:0e:ee:93:45:dd:f4:dc:38:ce:02:
ca:74:21:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 27 10:19:34 2024 by rpki-client on console-ams.rpki-client.org