Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/9484C1028B6211EDB9F07D22C4F9AE02.roa
File: 9484C1028B6211EDB9F07D22C4F9AE02.roa (raw, json)
Hash identifier: M6oRbQ+XUn7j6WWC6C5BY8JBMvlezEnk1fJ8FMU6rtU=
Subject key identifier: DA:40:2A:6B:E6:D9:8A:30:F5:51:38:A0:65:EF:EB:56:67:BB:9E:59
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: 6ABF
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/9484C1028B6211EDB9F07D22C4F9AE02.roa
Signing time: Wed 10 May 2023 16:16:17 +0000
ROA not before: Wed 10 May 2023 16:16:17 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 133720
IP address blocks: 43.241.124.0/24 maxlen: 24
43.241.125.0/24 maxlen: 24
43.241.126.0/24 maxlen: 24
43.241.127.0/24 maxlen: 24
43.255.220.0/22 maxlen: 24
45.249.40.0/22 maxlen: 24
103.6.184.0/22 maxlen: 24
103.25.168.0/22 maxlen: 24
103.39.244.0/22 maxlen: 24
103.49.240.0/22 maxlen: 24
103.74.16.0/22 maxlen: 24
103.87.52.0/22 maxlen: 24
103.174.198.0/24 maxlen: 24
103.179.48.0/23 maxlen: 24
103.230.148.0/22 maxlen: 24
103.240.8.0/22 maxlen: 24
103.248.28.0/22 maxlen: 24
103.249.248.0/22 maxlen: 24
139.5.24.0/22 maxlen: 24
139.5.28.0/22 maxlen: 24
139.5.44.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 03 May 2024 15:38:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 27327 (0x6abf)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Validity
Not Before: May 10 16:16:17 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=645bc351-74aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:7d:3a:e0:64:77:77:21:62:60:e9:cb:a4:bb:
54:34:ab:82:9d:e7:a3:d7:7b:dc:5f:ba:04:55:8f:
0e:f1:6d:b5:e0:33:0e:78:74:93:ae:8f:8a:ea:33:
3e:f6:11:73:6e:25:20:2e:97:44:61:58:4a:6b:3f:
dd:95:6d:7f:a7:f4:64:93:58:b2:b2:ed:ed:d9:9d:
fa:79:94:89:f1:45:2a:76:e5:76:4b:9b:88:bd:93:
a5:47:85:23:20:c9:1f:59:0d:8a:26:b3:40:79:07:
d0:79:f6:08:c2:c7:be:43:f2:12:50:0c:35:96:b9:
47:05:74:a0:0e:56:84:35:3f:59:f9:21:b1:50:03:
6c:32:ff:a4:f8:9c:b4:27:32:5c:0a:31:8b:d4:17:
63:ff:b2:70:e0:46:12:ed:47:e7:85:ad:20:67:29:
3d:8e:4c:37:41:2c:86:bc:53:ef:47:e1:ee:a1:56:
89:95:fe:89:50:b0:ca:2f:18:2e:d9:da:c4:2f:5e:
e5:11:66:b1:ab:63:58:72:3d:cf:9f:0f:7c:ef:c4:
7c:1f:4a:33:c7:7a:2a:17:7e:bb:56:89:6a:0f:e8:
15:70:49:ae:bd:09:5d:9f:9c:c0:48:de:83:7a:b0:
af:28:73:0c:df:b8:9d:f9:b7:e0:5d:ef:b7:b3:ae:
8b:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:40:2A:6B:E6:D9:8A:30:F5:51:38:A0:65:EF:EB:56:67:BB:9E:59
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/9484C1028B6211EDB9F07D22C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
43.241.124.0/22
43.255.220.0/22
45.249.40.0/22
103.6.184.0/22
103.25.168.0/22
103.39.244.0/22
103.49.240.0/22
103.74.16.0/22
103.87.52.0/22
103.174.198.0/24
103.179.48.0/23
103.230.148.0/22
103.240.8.0/22
103.248.28.0/22
103.249.248.0/22
139.5.24.0/21
139.5.44.0/22
Signature Algorithm: sha256WithRSAEncryption
9c:0e:11:30:89:8c:81:4b:40:f1:71:d3:99:bd:4a:bb:23:e8:
30:e6:da:7b:34:d0:b2:b2:a4:d3:99:87:be:3f:27:40:e4:61:
53:1b:9e:5f:0e:8a:ac:62:b2:50:64:0f:24:ce:af:d6:ab:94:
3b:cd:7f:0f:de:b2:20:ee:a0:03:3f:49:aa:9d:b5:7f:f1:02:
5f:68:e7:7b:96:1d:e7:20:26:76:e4:15:a7:72:6e:9b:9c:d2:
fc:8e:28:5d:b5:e5:06:9e:74:b7:97:02:eb:cb:1a:38:27:0a:
7d:57:b0:8f:df:14:a8:6d:d4:84:61:e1:4e:20:dc:c6:26:83:
ad:13:06:81:4f:d2:9d:4e:59:5c:33:98:fa:17:e0:32:86:f2:
2f:a5:57:14:b2:8c:04:23:bf:0b:18:23:8f:da:a2:4f:c3:09:
3b:46:f1:8e:c0:55:60:b0:4b:47:bd:17:ef:a5:ee:8e:df:7d:
08:a9:39:4c:fe:43:17:a1:7e:ec:eb:6c:4c:c5:78:55:0d:cd:
48:a6:c5:f2:1e:db:89:82:ff:09:28:ad:ef:5a:a7:78:a5:d2:
3a:63:77:b2:48:41:8d:7e:d6:2a:73:78:00:c9:9a:a8:b8:40:
a2:88:08:00:32:87:4a:2a:d2:67:35:69:54:1c:fb:e8:b5:5a:
04:ef:aa:8e
-----BEGIN CERTIFICATE-----
MIIF0TCCBLmgAwIBAgICar8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OEVEQjIxMTAvBgNVBAUTKDI5NkVEQjY0RjNBRjZFOUQ5ODA5MzJFODE2Rjk1OTgz
RTNBQkM4MjMwHhcNMjMwNTEwMTYxNjE3WhcNMjQwNzAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02NDViYzM1MS03NGFhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA1n064GR3dyFiYOnLpLtUNKuCneej13vcX7oEVY8O8W214DMOeHSTro+K6jM+
9hFzbiUgLpdEYVhKaz/dlW1/p/Rkk1iysu3t2Z36eZSJ8UUqduV2S5uIvZOlR4Uj
IMkfWQ2KJrNAeQfQefYIwse+Q/ISUAw1lrlHBXSgDlaENT9Z+SGxUANsMv+k+Jy0
JzJcCjGL1Bdj/7Jw4EYS7Ufnha0gZyk9jkw3QSyGvFPvR+HuoVaJlf6JULDKLxgu
2drEL17lEWaxq2NYcj3Pnw9878R8H0ozx3oqF367VolqD+gVcEmuvQldn5zASN6D
erCvKHMM37id+bfgXe+3s66LUwIDAQABo4IC9TCCAvEwHQYDVR0OBBYEFNpAKmvm
2Yow9VE4oGXv61Znu55ZMB8GA1UdIwQYMBaAFClu22Tzr26dmAky6Bb5WYPjq8gj
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RURCMi8yQTQzRTMwQzcw
RTkxMUUyQjM2RDRCNkIyOTc5QkIyMC9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5
Q00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0tXN2JaUE92YnAyWUNUTG9GdmxaZy1PcnlDTS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
OEVEQjIvMkE0M0UzMEM3MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvOTQ4NEMxMDI4
QjYyMTFFREI5RjA3RDIyQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwfwYIKwYBBQUHAQcBAf8E
cDBuMGwEAgABMGYDBAIr8XwDBAIr/9wDBAIt+SgDBAJnBrgDBAJnGagDBAJnJ/QD
BAJnMfADBAJnShADBAJnVzQDBABnrsYDBAFnszADBAJn5pQDBAJn8AgDBAJn+BwD
BAJn+fgDBAOLBRgDBAKLBSwwDQYJKoZIhvcNAQELBQADggEBAJwOETCJjIFLQPFx
05m9Srsj6DDm2ns00LKypNOZh74/J0DkYVMbnl8OiqxislBkDyTOr9arlDvNfw/e
siDuoAM/SaqdtX/xAl9o53uWHecgJnbkFadybpuc0vyOKF215QaedLeXAuvLGjgn
Cn1XsI/fFKht1IRh4U4g3MYmg60TBoFP0p1OWVwzmPoX4DKG8i+lVxSyjAQjvwsY
I4/aok/DCTtG8Y7AVWCwS0e9F++l7o7ffQipOUz+QxehfuzrbEzFeFUNzUimxfIe
24mC/wkore9ap3il0jpjd7JIQY1+1ipzeADJmqi4QKKICAAyh0oq0mc1aVQc++i1
WgTvqo4=
-----END CERTIFICATE-----
Generated at Sat Apr 27 10:19:39 2024 by rpki-client on console-ams.rpki-client.org