Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/77F054DE682F11EEBE5A2B3CC4F9AE02.roa
File: 77F054DE682F11EEBE5A2B3CC4F9AE02.roa (raw, json)
Hash identifier: Iwtpa9C8b2GIe73RbGAp44GHjJ1vJm8a2XXGeoPj0BY=
Subject key identifier: 81:CA:A3:44:9A:BD:94:21:3A:A9:FC:F9:8D:F7:4C:8E:9F:B1:54:28
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: 868E
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/77F054DE682F11EEBE5A2B3CC4F9AE02.roa
Signing time: Mon 22 Apr 2024 10:33:10 +0000
ROA not before: Mon 22 Apr 2024 10:33:10 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 139490
IP address blocks: 103.88.236.0/22 maxlen: 24
103.143.168.0/23 maxlen: 24
103.164.70.0/23 maxlen: 24
103.171.76.0/24 maxlen: 24
103.186.128.0/23 maxlen: 24
103.203.172.0/22 maxlen: 22
103.203.172.0/24 maxlen: 24
103.203.173.0/24 maxlen: 24
103.203.174.0/24 maxlen: 24
103.203.175.0/24 maxlen: 24
103.220.224.0/24 maxlen: 24
2001:df6:4180::/48 maxlen: 48
2400:7120::/32 maxlen: 32
2400:7120::/48 maxlen: 48
2400:7120:1::/48 maxlen: 48
2400:7120:2::/48 maxlen: 48
2400:7120:3::/48 maxlen: 48
2400:7120:4::/48 maxlen: 48
2400:7120:5::/48 maxlen: 48
2400:7120:6::/48 maxlen: 48
2400:7120:7::/48 maxlen: 48
2400:7120:8::/48 maxlen: 48
2400:7120:9::/48 maxlen: 48
2400:7120:a::/48 maxlen: 48
2400:7120:b::/48 maxlen: 48
2400:7120:c::/48 maxlen: 48
2400:7120:d::/48 maxlen: 48
2400:7120:e::/48 maxlen: 48
2400:7120:f::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 03 May 2024 15:38:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 34446 (0x868e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Validity
Not Before: Apr 22 10:33:10 2024 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=66263ce6-ffef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:d3:ea:7b:ec:f5:00:e9:13:7e:19:25:80:3c:
76:e2:0d:a5:aa:e2:f6:15:13:b6:f4:59:c5:e4:bf:
25:14:db:78:3a:b3:cf:05:53:d7:24:75:39:b3:b3:
69:13:83:76:f2:cf:84:1b:65:7b:0f:f2:d1:31:2a:
50:1d:96:58:78:88:53:46:6a:98:18:21:27:6d:22:
22:d7:0a:38:ca:90:0b:8c:b0:2d:ea:33:f3:64:f1:
e3:f2:0c:b3:5b:f7:38:a5:8e:6e:7e:f3:07:a7:ae:
62:10:f7:de:61:18:66:43:c3:a1:8a:fe:96:76:29:
03:3d:dd:f3:2c:23:2f:da:f9:85:96:4f:5a:28:dc:
cb:38:62:fa:02:ae:0c:6b:89:bf:d4:f2:5a:8a:94:
18:61:11:e7:06:c1:c5:8e:bd:ee:8c:bb:6f:0d:6e:
1a:a5:42:69:69:33:b2:7e:c9:4e:63:27:db:23:46:
0e:69:a9:50:77:3f:5c:4f:8e:22:9a:ce:9a:bc:28:
1e:54:d9:e5:4b:fe:82:66:12:52:d6:e5:c4:cd:bc:
ee:58:ad:a0:94:37:44:0a:19:df:df:e3:77:86:77:
d9:08:26:79:cd:5e:cb:04:53:d4:63:67:d2:88:49:
26:bc:39:a0:e5:5b:f1:21:bb:65:28:5f:15:d2:9f:
fb:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:CA:A3:44:9A:BD:94:21:3A:A9:FC:F9:8D:F7:4C:8E:9F:B1:54:28
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/77F054DE682F11EEBE5A2B3CC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.88.236.0/22
103.143.168.0/23
103.164.70.0/23
103.171.76.0/24
103.186.128.0/23
103.203.172.0/22
103.220.224.0/24
IPv6:
2001:df6:4180::/48
2400:7120::/32
Signature Algorithm: sha256WithRSAEncryption
95:3c:94:42:03:c9:05:fc:2e:25:94:1f:2c:cc:fb:dd:19:01:
0a:7a:f8:97:2c:c1:af:2a:86:e0:51:b0:8a:ed:17:14:f0:d7:
69:7e:8a:9b:7a:f4:81:e7:4a:22:5f:b7:a6:d7:88:28:1e:75:
08:55:3b:3d:42:d0:2f:6a:9f:57:2d:36:b8:c2:9e:1f:b4:3d:
8c:3e:93:96:57:8f:6d:72:50:d1:2d:c0:21:09:74:3c:98:1e:
bf:dd:9a:eb:61:77:8c:7a:e2:b8:59:c7:6a:e7:09:fa:02:f6:
71:cd:22:c1:b5:09:f6:ae:b1:07:a8:36:82:dc:eb:63:18:2d:
c9:9d:d5:29:23:c5:4f:bf:fa:7a:0a:c2:7a:46:82:2f:08:33:
1c:d7:c5:98:45:fc:4c:39:a5:3e:06:eb:0b:d8:a0:54:a2:63:
f4:82:9d:90:80:a7:bc:e5:f7:a0:49:15:24:d3:cd:c7:33:81:
58:c1:04:84:9b:95:e8:4d:06:d5:43:10:3a:d3:3f:0f:62:15:
08:f9:92:4b:5d:7b:f3:c6:eb:8e:6f:eb:a3:c5:46:e1:75:06:
8a:ff:c2:b1:3a:b8:ea:9e:23:23:ce:9d:18:0e:7d:0b:d9:bb:
af:e4:5d:33:6e:b3:6d:33:b7:46:79:75:3e:74:b1:62:ea:c9:
76:f8:7e:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 27 10:19:37 2024 by rpki-client on console-ams.rpki-client.org