Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/960C5D5EE35111EDB7F6B44EC4F9AE02.roa
File: 960C5D5EE35111EDB7F6B44EC4F9AE02.roa (raw, json)
Hash identifier: KN8iw7sUSbxg+9w9JoTD1InfRBnmhcMNljjQOGLEfjQ=
Subject key identifier: 24:7D:A5:3B:44:F5:28:DE:D6:1F:5F:01:E6:F6:99:65:57:9E:AC:C2
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: 73BE
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/960C5D5EE35111EDB7F6B44EC4F9AE02.roa
Signing time: Mon 12 Jun 2023 05:52:03 +0000
ROA not before: Mon 12 Jun 2023 05:52:03 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 137655
IP address blocks: 103.121.174.0/24 maxlen: 24
103.140.2.0/24 maxlen: 24
103.141.133.0/24 maxlen: 24
103.148.43.0/24 maxlen: 24
103.152.134.0/24 maxlen: 24
103.154.105.0/24 maxlen: 24
103.164.198.0/23 maxlen: 24
103.171.193.0/24 maxlen: 24
103.176.214.0/24 maxlen: 24
103.214.2.0/24 maxlen: 24
2001:df1:a180::/48 maxlen: 48
2001:df2:8c80::/48 maxlen: 48
2001:df6:5080::/48 maxlen: 48
2001:df6:d880::/48 maxlen: 48
2001:df7:5080::/48 maxlen: 48
2401:7a0::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 03 May 2024 15:38:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 29630 (0x73be)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Validity
Not Before: Jun 12 05:52:03 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=6486b283-e20f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:64:fc:99:54:95:05:b8:b6:e0:8f:33:53:40:
64:85:2c:32:49:a6:30:93:fc:13:1d:45:01:ad:01:
9c:32:86:f2:36:79:e0:18:13:af:e8:19:6d:89:51:
be:f5:20:bd:57:ba:ce:2b:e6:2d:15:01:7c:b6:60:
42:d5:e0:87:5d:e7:f8:a1:4a:a3:96:aa:d5:97:26:
a1:53:34:e0:c0:18:21:81:0e:c5:5f:09:27:08:5d:
fc:78:43:90:11:c5:53:b3:99:57:67:28:62:f5:9c:
f4:4c:bd:a3:a3:fd:cb:96:a2:61:3e:a6:64:b5:17:
97:2b:20:b9:cf:77:92:07:04:d7:a5:2e:0b:4f:56:
4d:0e:ae:30:a3:3b:be:dc:a8:0f:fa:6c:17:0e:74:
76:e7:d5:4f:d9:66:f5:cd:80:f2:10:ad:fb:de:c4:
b7:1b:97:cf:a7:70:00:bc:58:15:96:8d:45:ed:25:
7b:b1:2e:fd:1c:0b:5b:81:54:25:58:41:0a:22:34:
d4:7d:f0:89:c7:08:e7:1c:e8:d1:c5:96:c5:db:80:
8f:64:4b:fd:2b:74:ac:0b:ab:5a:99:83:f5:c3:87:
16:e1:3d:de:12:92:4f:b9:db:d7:4f:d8:70:a6:b8:
98:a0:dd:57:54:26:6f:67:ef:93:0d:29:d8:50:e5:
95:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:7D:A5:3B:44:F5:28:DE:D6:1F:5F:01:E6:F6:99:65:57:9E:AC:C2
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/960C5D5EE35111EDB7F6B44EC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.121.174.0/24
103.140.2.0/24
103.141.133.0/24
103.148.43.0/24
103.152.134.0/24
103.154.105.0/24
103.164.198.0/23
103.171.193.0/24
103.176.214.0/24
103.214.2.0/24
IPv6:
2001:df1:a180::/48
2001:df2:8c80::/48
2001:df6:5080::/48
2001:df6:d880::/48
2001:df7:5080::/48
2401:7a0::/32
Signature Algorithm: sha256WithRSAEncryption
a2:43:31:e4:0a:48:eb:e3:6f:92:f6:28:7b:07:87:fd:c3:ea:
aa:95:88:3a:d4:ff:70:fe:b8:c5:22:f4:4f:35:75:e4:a8:07:
02:a2:c6:99:ee:8a:9f:0e:f9:55:90:1c:6c:6d:92:b0:4f:71:
62:4a:f4:f6:b7:29:02:a9:b6:e4:ca:23:3e:40:14:02:df:46:
05:27:59:f4:1f:86:3f:0c:1a:f9:e5:50:3e:25:d9:22:b6:09:
6e:42:5c:b3:bf:ce:a3:53:4c:3f:bd:1b:1d:8e:31:82:f3:05:
1a:8e:45:c3:7b:07:84:e7:e4:38:93:ef:be:cb:c8:b7:5f:08:
eb:38:51:3d:6f:04:de:df:a1:60:6b:70:fe:66:93:bc:a9:1c:
a6:12:7f:1e:ba:05:62:ab:bc:f8:1e:e8:82:7f:c5:9e:f5:87:
f3:ed:c7:12:47:9d:bf:94:ea:13:53:eb:f5:64:39:99:c0:22:
04:33:bd:8c:13:16:30:91:48:e5:ed:fe:a8:86:85:2e:45:c4:
54:4b:97:78:0d:25:ce:d3:a5:7b:67:75:a7:a0:7f:07:47:1e:
ab:0c:b4:6f:3b:f3:3c:f8:71:aa:b5:bf:cd:bd:9b:a0:65:1f:
fe:5f:52:36:1b:5d:bb:9d:97:5e:9b:2b:a5:d0:bf:03:55:b2:
5c:29:a9:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 27 10:19:39 2024 by rpki-client on console-ams.rpki-client.org