Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/B6A539468BB011EB925D216EC4F9AE02.roa
File: B6A539468BB011EB925D216EC4F9AE02.roa (raw, json)
Hash identifier: A6EwOEQP9KW7pFF/+aQ2SDgDlaFL1gadfa+bc4zayo8=
Subject key identifier: F4:F0:D7:35:4B:2A:B9:7E:F5:04:F0:43:F5:3B:F2:87:A7:63:A2:06
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: 85FF
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/B6A539468BB011EB925D216EC4F9AE02.roa
Signing time: Fri 05 Apr 2024 12:44:16 +0000
ROA not before: Fri 05 Apr 2024 12:44:16 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 132996
IP address blocks: 43.243.212.0/22 maxlen: 24
43.252.32.0/22 maxlen: 24
103.69.112.0/22 maxlen: 24
103.129.206.0/24 maxlen: 24
103.166.119.0/24 maxlen: 24
103.172.226.0/23 maxlen: 24
103.252.4.0/22 maxlen: 24
103.253.200.0/22 maxlen: 24
2402:540::/48 maxlen: 48
2402:540:1::/48 maxlen: 48
2402:540:2::/48 maxlen: 48
2402:540:3::/48 maxlen: 48
2402:540:4::/48 maxlen: 48
2402:540:5::/48 maxlen: 48
2402:540:6::/48 maxlen: 48
2402:540:7::/48 maxlen: 48
2402:540:8::/48 maxlen: 48
2402:540:9::/48 maxlen: 48
2402:540:a::/48 maxlen: 48
2402:540:b::/48 maxlen: 48
2402:540:c::/48 maxlen: 48
2402:540:d::/48 maxlen: 48
2402:540:e::/48 maxlen: 48
2402:540:f::/48 maxlen: 48
2402:540:10::/48 maxlen: 48
2407:da40::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 03 May 2024 15:38:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 34303 (0x85ff)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Validity
Not Before: Apr 5 12:44:16 2024 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=660ff220-5999
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:c0:0d:2e:6a:44:da:65:2d:83:cf:d2:0e:9d:
58:ca:92:1f:6d:2b:1a:bd:14:68:a9:28:93:c2:4d:
b3:5e:b0:92:89:27:9b:86:48:e9:11:2f:b7:26:4f:
1f:53:15:66:40:8b:62:04:57:41:9d:33:8e:08:38:
d1:2e:15:3f:5f:ac:ec:29:4a:7c:aa:93:3b:e2:10:
f9:d5:4c:4f:9e:c4:1f:d8:7c:a8:be:74:45:fd:50:
77:b1:23:e7:94:70:64:b0:43:c1:8e:90:76:f4:ed:
95:1c:5d:da:b8:11:00:d5:f8:da:31:bb:dc:14:1d:
10:10:59:d8:c8:38:c2:9b:6b:1d:94:8d:ef:f2:1e:
f9:79:26:9c:57:5c:90:32:8d:e4:d5:61:89:49:a9:
34:dc:fe:6a:45:b3:30:52:e2:a0:e1:ea:87:d4:93:
af:c6:15:79:9c:7c:e7:cb:ae:a8:33:1f:d5:b0:a1:
85:5f:b2:4f:82:a4:c5:ef:c8:5b:e1:55:47:20:e4:
ad:70:90:00:94:1a:6c:c2:ab:c3:25:a8:7d:f4:52:
8d:21:69:d1:e1:80:60:15:21:7e:e7:85:01:45:b1:
ee:8b:72:0c:41:aa:05:54:11:2d:42:50:92:da:3c:
34:57:a2:90:ab:d2:df:b2:72:72:81:2e:76:70:b3:
9b:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:F0:D7:35:4B:2A:B9:7E:F5:04:F0:43:F5:3B:F2:87:A7:63:A2:06
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/B6A539468BB011EB925D216EC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
43.243.212.0/22
43.252.32.0/22
103.69.112.0/22
103.129.206.0/24
103.166.119.0/24
103.172.226.0/23
103.252.4.0/22
103.253.200.0/22
IPv6:
2402:540::-2402:540:10:ffff:ffff:ffff:ffff:ffff
2407:da40::/32
Signature Algorithm: sha256WithRSAEncryption
18:1b:45:40:51:0b:05:06:a2:85:94:46:ff:55:c2:86:85:4c:
c5:fb:4b:45:51:08:82:ab:38:ee:6c:2e:a3:1b:5f:3c:c3:b9:
3b:ea:46:52:66:80:23:ac:d9:c9:34:45:dd:50:72:fe:e0:d1:
9b:4a:84:3e:20:e3:3b:bc:1a:29:25:89:48:28:35:ba:ef:3c:
d0:a6:66:0a:87:06:5c:71:26:6f:1b:20:f5:78:aa:c4:d2:34:
ad:50:0f:78:bd:a2:08:86:aa:26:4d:6a:24:83:ff:e8:a2:1c:
2e:24:fb:ad:6f:7e:de:f1:56:d0:46:34:21:e0:c7:99:c3:50:
b2:b5:f3:9c:73:b5:ec:14:77:b9:41:51:f4:2b:7b:e0:93:60:
fc:62:4a:74:93:d4:bd:79:77:97:fc:a1:4c:3b:52:54:1f:96:
ab:13:d8:4a:17:fd:cb:5a:ab:b3:32:35:ac:61:68:bf:e3:bd:
ce:4e:8e:7f:7b:e3:7f:ba:ea:6a:2f:ec:98:91:4c:45:a6:23:
d7:6d:02:49:c9:40:0f:ce:3b:45:ff:ab:af:a6:32:09:aa:9b:
e8:8d:d9:c9:7b:9b:72:dd:68:43:2a:2f:b9:c5:9e:19:8f:e6:
cc:89:ad:e7:53:11:c2:fe:04:be:b7:e9:3f:bd:49:8c:ca:09:
2e:08:88:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 27 10:19:42 2024 by rpki-client on console-ams.rpki-client.org