Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/C3A258EECF7611ECAE8B6836C4F9AE02.roa
File: C3A258EECF7611ECAE8B6836C4F9AE02.roa (raw, json)
Hash identifier: 25H/Y3gCZidvlkiOUiVOjtI9/XQvd+k6AxdjdtA/F/I=
Subject key identifier: DC:FA:5A:9C:31:89:73:E6:9F:6D:81:EF:88:48:7C:D6:79:A8:A9:08
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: 6AEA
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/C3A258EECF7611ECAE8B6836C4F9AE02.roa
Signing time: Wed 10 May 2023 16:17:07 +0000
ROA not before: Wed 10 May 2023 16:17:07 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 134021
IP address blocks: 45.251.80.0/22 maxlen: 24
103.43.65.0/24 maxlen: 24
103.54.220.0/22 maxlen: 24
103.66.14.0/23 maxlen: 24
103.83.58.0/24 maxlen: 24
103.96.44.0/22 maxlen: 24
103.155.136.0/23 maxlen: 24
103.159.100.0/23 maxlen: 24
103.166.68.0/23 maxlen: 24
103.210.106.0/23 maxlen: 24
103.220.36.0/22 maxlen: 24
202.168.156.0/22 maxlen: 24
2001:df4:a700::/48 maxlen: 48
2001:df5:2f80::/48 maxlen: 48
2001:df5:7a80::/48 maxlen: 48
2001:df6:7f80::/48 maxlen: 48
2405:6040::/32 maxlen: 40
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 03 May 2024 15:38:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 27370 (0x6aea)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Validity
Not Before: May 10 16:17:07 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=645bc383-98a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:7e:5d:4f:c9:7f:85:9f:a6:03:4d:77:fc:4c:
95:66:85:7d:08:ce:f0:47:02:2a:ad:8b:c4:02:b9:
2b:1e:bc:19:47:49:a1:ec:4f:af:a0:fb:19:99:37:
63:b3:be:61:15:b4:16:44:bc:f3:5c:c9:62:2e:cd:
de:b2:fa:75:3e:1b:77:61:8e:34:ef:91:2e:1f:27:
97:5c:7e:b7:54:6b:11:9c:84:79:4d:fd:79:16:17:
9e:d8:a7:76:8b:49:8b:ac:3b:39:e2:38:e2:a0:da:
0f:b1:1b:c4:9f:fe:a3:5f:7b:15:04:a2:cf:a5:9f:
dd:be:7e:1f:12:b8:d3:73:8d:f3:05:e5:13:b6:7e:
4b:d9:d1:9e:b8:f4:2d:69:80:58:8d:88:56:40:2e:
b6:91:41:a9:3a:4d:7f:56:3a:c3:ec:ca:08:e1:9b:
62:1a:bb:8d:56:83:53:5e:75:ca:26:d1:35:fc:a2:
44:2c:f0:81:8f:9b:34:d4:57:10:9d:74:0e:1b:96:
5c:06:c1:5b:46:46:9b:5f:a9:e7:3e:9d:9a:e0:eb:
46:07:16:1a:22:24:ab:f6:ea:2f:0c:8e:01:01:5d:
04:73:f3:f9:72:73:42:dc:90:9c:2d:59:94:8a:89:
2a:92:99:bf:77:71:06:49:2b:24:12:68:45:53:8c:
a4:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:FA:5A:9C:31:89:73:E6:9F:6D:81:EF:88:48:7C:D6:79:A8:A9:08
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/C3A258EECF7611ECAE8B6836C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.251.80.0/22
103.43.65.0/24
103.54.220.0/22
103.66.14.0/23
103.83.58.0/24
103.96.44.0/22
103.155.136.0/23
103.159.100.0/23
103.166.68.0/23
103.210.106.0/23
103.220.36.0/22
202.168.156.0/22
IPv6:
2001:df4:a700::/48
2001:df5:2f80::/48
2001:df5:7a80::/48
2001:df6:7f80::/48
2405:6040::/32
Signature Algorithm: sha256WithRSAEncryption
8c:5a:3b:f3:52:e8:b2:d3:6e:ea:90:6a:94:db:3e:ed:31:11:
2c:88:19:4a:d6:97:af:61:02:19:5d:79:0c:53:7e:0e:5f:fe:
7a:ca:2d:0d:1f:89:ee:8a:27:23:3e:1c:e0:f3:7e:2a:f1:0e:
ce:d8:bc:39:13:88:96:7b:ef:9a:41:76:a3:21:6e:57:ab:0e:
0a:ad:a9:a4:53:46:e9:d9:3d:1d:ae:df:c6:cc:53:05:6d:5c:
82:02:f6:fb:c2:12:13:01:a4:30:81:0c:86:52:71:b3:10:a2:
df:b0:57:1e:20:fd:1c:5e:46:33:b4:4f:c8:c0:54:41:4d:72:
3c:23:ac:42:49:ae:b8:4c:67:8c:3f:12:c2:f6:ff:16:c0:34:
eb:6d:18:2c:30:02:a7:6b:0b:2c:81:22:16:75:31:2e:a4:63:
b7:5b:fe:e7:ef:bb:98:aa:42:e9:41:b0:f2:14:c3:d5:72:76:
41:54:08:8f:20:c6:b2:41:7f:fb:6e:93:d6:83:15:fc:f9:28:
7a:88:81:30:a0:3e:13:b2:3d:23:b4:4c:8b:0f:92:00:8a:24:
b8:73:40:f9:e2:86:6f:0d:48:e7:a3:a2:32:e9:62:e7:46:6c:
1e:81:a9:7b:44:af:09:a1:11:19:60:51:0c:4a:4f:4b:01:93:
99:e0:7a:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 27 10:19:45 2024 by rpki-client on console-ams.rpki-client.org