Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/61A97D12E5E411EE8D9EAD54C4F9AE02.roa
File: 61A97D12E5E411EE8D9EAD54C4F9AE02.roa (raw, json)
Hash identifier: xAFzHnVy05VJ6E0LCZm/Bf0Hm+WiWm+UdcKkNFv1WYU=
Subject key identifier: 6B:1D:C1:5A:06:76:20:FD:DE:AC:FC:A7:ED:9C:0C:F2:D7:DE:DD:E9
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: 850F
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/61A97D12E5E411EE8D9EAD54C4F9AE02.roa
Signing time: Tue 19 Mar 2024 11:32:35 +0000
ROA not before: Tue 19 Mar 2024 11:32:35 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 134316
IP address blocks: 14.102.188.0/24 maxlen: 24
14.102.190.0/24 maxlen: 24
14.102.191.0/24 maxlen: 24
45.115.177.0/24 maxlen: 24
45.115.178.0/24 maxlen: 24
45.115.179.0/24 maxlen: 24
103.46.236.0/24 maxlen: 24
103.46.237.0/24 maxlen: 24
103.46.238.0/24 maxlen: 24
103.46.239.0/24 maxlen: 24
103.90.207.0/24 maxlen: 24
103.116.84.0/24 maxlen: 24
103.116.85.0/24 maxlen: 24
103.116.87.0/24 maxlen: 24
103.119.164.0/22 maxlen: 22
103.119.164.0/24 maxlen: 24
103.119.165.0/24 maxlen: 24
103.119.166.0/24 maxlen: 24
103.119.167.0/24 maxlen: 24
103.181.166.0/24 maxlen: 24
103.199.112.0/24 maxlen: 24
103.199.113.0/24 maxlen: 24
103.199.114.0/24 maxlen: 24
103.199.115.0/24 maxlen: 24
103.201.140.0/22 maxlen: 24
103.212.130.0/24 maxlen: 24
103.219.140.0/22 maxlen: 24
139.5.222.0/23 maxlen: 24
157.119.212.0/24 maxlen: 24
157.119.213.0/24 maxlen: 24
157.119.214.0/24 maxlen: 24
157.119.215.0/24 maxlen: 24
202.9.121.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 03 May 2024 15:38:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 34063 (0x850f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Validity
Not Before: Mar 19 11:32:35 2024 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=65f977d3-0886
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:97:3b:93:ac:23:2a:c6:73:7a:24:c0:75:ec:
eb:d5:1f:2a:0e:ae:21:c7:f3:c2:96:28:63:d4:45:
92:1c:13:f4:e6:7f:83:1b:f5:28:04:c7:ab:ec:99:
f7:ee:e7:e1:af:a9:e5:88:ed:d8:10:94:81:57:07:
52:43:7e:0b:28:05:78:87:8f:c1:db:42:e6:df:48:
f0:58:aa:83:4f:56:46:9d:5c:d8:0a:af:f3:28:fb:
85:14:30:40:a8:cb:d7:56:3e:cc:81:4f:74:90:c0:
c0:e0:ea:c4:f0:71:5c:31:cc:7a:90:86:bd:53:e6:
07:2d:2d:50:2b:68:78:8c:98:eb:ac:27:e5:94:48:
9b:01:9a:bb:dd:f4:00:de:27:bc:8e:e8:8a:72:73:
4c:ad:be:4c:99:e9:60:75:39:a1:69:3e:ea:4f:7c:
21:2f:75:9b:df:c9:eb:91:85:30:be:a9:6b:2e:ae:
43:69:45:d0:22:54:19:aa:d3:df:f5:87:23:0f:62:
a9:ad:a1:c7:43:5a:ea:18:be:d2:d5:fb:8e:92:42:
47:00:66:95:91:f8:29:61:71:89:88:7b:97:54:1c:
49:0b:d7:b3:03:b7:a9:be:12:c0:30:0c:f2:cc:3e:
81:67:7b:ae:f1:4b:de:22:6e:11:24:63:4a:e6:03:
99:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:1D:C1:5A:06:76:20:FD:DE:AC:FC:A7:ED:9C:0C:F2:D7:DE:DD:E9
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/61A97D12E5E411EE8D9EAD54C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
14.102.188.0/24
14.102.190.0/23
45.115.177.0-45.115.179.255
103.46.236.0/22
103.90.207.0/24
103.116.84.0/23
103.116.87.0/24
103.119.164.0/22
103.181.166.0/24
103.199.112.0/22
103.201.140.0/22
103.212.130.0/24
103.219.140.0/22
139.5.222.0/23
157.119.212.0/22
202.9.121.0/24
Signature Algorithm: sha256WithRSAEncryption
b2:57:84:26:34:b2:aa:02:79:76:ea:00:b0:4f:da:e6:c6:6a:
01:39:be:65:51:c9:6c:28:8d:b9:7b:c2:5d:f1:5d:c0:60:e3:
49:f7:d4:a7:01:a3:48:42:01:51:ba:31:f8:5e:4c:94:fe:7c:
3b:b8:73:05:86:93:4b:e3:01:45:cc:97:a2:29:9f:eb:00:62:
58:b8:44:19:86:75:9f:0a:d8:6b:b6:f1:29:b5:6a:cc:73:cf:
23:23:05:69:55:18:14:50:75:b4:35:51:e4:42:d2:c9:24:e7:
36:61:87:8f:ec:ab:c9:6a:46:90:2e:4b:90:74:4f:ab:20:16:
82:66:05:36:d9:ce:ce:ae:a0:c2:7d:7b:b1:93:f4:01:18:ff:
aa:16:f8:26:1e:fc:7b:a7:a1:17:55:15:04:c2:06:e1:90:62:
b6:fc:46:16:b9:25:94:1f:06:0c:d4:e6:a9:51:fd:e7:f3:fe:
1f:bf:01:ce:dd:c9:1f:08:4c:65:ff:ea:51:31:f1:f9:e2:76:
3a:18:c1:57:d9:bc:b3:81:95:e6:65:6c:7e:f9:c6:6f:fd:9f:
97:b3:d0:f3:46:f1:8b:70:34:aa:7f:71:10:88:f5:6e:b9:fd:
e0:bc:3c:23:e8:e6:39:67:bc:14:07:4a:00:60:95:a8:92:b1:
6b:0e:20:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 27 10:19:34 2024 by rpki-client on console-ams.rpki-client.org