Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/CB90D944B7C211EB9171C27AC4F9AE02.roa
File: CB90D944B7C211EB9171C27AC4F9AE02.roa (raw, json)
Hash identifier: 1dGvTpXslRPCp9WZSN6kP2exgZpYFhkvYa8WTFGPVNA=
Subject key identifier: 4B:7F:E1:5B:98:88:82:B5:63:5A:59:F4:F5:29:5F:6B:5D:05:B3:2B
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: 6B2D
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/CB90D944B7C211EB9171C27AC4F9AE02.roa
Signing time: Wed 10 May 2023 16:18:23 +0000
ROA not before: Wed 10 May 2023 16:18:23 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 134326
IP address blocks: 43.246.136.0/22 maxlen: 24
45.249.120.0/22 maxlen: 24
103.81.32.0/22 maxlen: 24
103.114.248.0/22 maxlen: 24
103.118.164.0/22 maxlen: 24
103.139.224.0/23 maxlen: 24
103.144.232.0/23 maxlen: 24
103.145.110.0/24 maxlen: 24
103.150.70.0/24 maxlen: 24
103.154.202.0/23 maxlen: 24
103.169.244.0/23 maxlen: 24
103.194.240.0/22 maxlen: 24
103.218.112.0/22 maxlen: 24
113.30.176.0/22 maxlen: 24
2401:fa40::/32 maxlen: 32
2401:fa40::/34 maxlen: 34
2401:fa40::/36 maxlen: 36
2401:fa40:1000::/36 maxlen: 36
2401:fa40:2000::/36 maxlen: 36
2401:fa40:3000::/36 maxlen: 36
2401:fa40:4000::/34 maxlen: 34
2401:fa40:4000::/36 maxlen: 36
2401:fa40:5000::/36 maxlen: 36
2401:fa40:6000::/36 maxlen: 36
2401:fa40:7000::/36 maxlen: 36
2401:fa40:8000::/34 maxlen: 34
2401:fa40:8000::/36 maxlen: 36
2401:fa40:9000::/36 maxlen: 36
2401:fa40:a000::/36 maxlen: 36
2401:fa40:b000::/36 maxlen: 36
2401:fa40:c000::/34 maxlen: 34
2401:fa40:c000::/36 maxlen: 36
2401:fa40:d000::/36 maxlen: 36
2401:fa40:e000::/36 maxlen: 36
2401:fa40:f000::/36 maxlen: 36
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 03 May 2024 15:38:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 27437 (0x6b2d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Validity
Not Before: May 10 16:18:23 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=645bc3cf-5206
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:29:63:3d:99:52:16:41:56:cc:aa:98:85:7c:
53:6b:3c:84:6f:51:02:8b:52:6e:51:09:c9:df:62:
9c:42:ec:06:81:11:19:dc:3b:d0:c7:92:29:e2:0d:
63:c6:cf:0f:ac:18:17:3f:e2:a7:d7:e4:1d:9a:06:
93:ec:d6:9e:84:28:8e:0c:59:9a:c7:92:d7:d9:f0:
68:57:91:38:4e:97:c4:e0:24:1b:f3:d8:10:fd:ff:
65:8a:f4:b1:2c:1d:38:2c:e2:59:8b:f7:6f:d2:04:
f9:69:a0:c2:07:48:f4:b9:17:9c:30:f9:9c:14:6b:
03:23:20:3d:b3:63:fb:60:38:35:fb:bd:ae:0a:26:
db:0f:85:18:0e:f3:95:c3:bf:08:c9:20:f4:de:78:
39:1a:4a:a6:cd:19:11:fc:59:3d:a4:32:55:62:28:
77:89:c8:75:6a:87:db:da:df:29:f7:3b:99:49:4a:
60:b4:0a:e9:3a:73:93:72:65:a8:a9:88:aa:a8:fc:
45:f2:b5:7b:54:fc:df:ab:5a:21:d7:ea:7b:02:fd:
61:28:b2:34:a0:e2:86:6a:51:da:10:83:54:84:17:
8a:66:4e:bf:92:42:95:c0:85:6e:f2:96:da:53:fb:
c8:21:aa:35:20:e9:2c:87:f5:51:74:5b:25:3d:08:
1d:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:7F:E1:5B:98:88:82:B5:63:5A:59:F4:F5:29:5F:6B:5D:05:B3:2B
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/CB90D944B7C211EB9171C27AC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
43.246.136.0/22
45.249.120.0/22
103.81.32.0/22
103.114.248.0/22
103.118.164.0/22
103.139.224.0/23
103.144.232.0/23
103.145.110.0/24
103.150.70.0/24
103.154.202.0/23
103.169.244.0/23
103.194.240.0/22
103.218.112.0/22
113.30.176.0/22
IPv6:
2401:fa40::/32
Signature Algorithm: sha256WithRSAEncryption
25:eb:43:54:2c:4b:42:05:09:8d:f4:bc:a7:dd:68:ba:63:9d:
0b:b2:40:84:2b:bb:76:d5:8f:33:29:f2:7e:5f:70:d1:bc:a9:
fb:5c:e1:dd:dc:a2:33:38:a1:e5:30:1f:26:d1:ea:79:38:56:
55:53:25:2e:de:82:18:72:0d:35:3e:88:8e:34:c5:77:73:9c:
c8:1b:84:2d:fb:fd:2a:12:a6:c0:75:51:bc:f1:f8:85:1c:37:
ee:c1:50:b0:90:40:c8:9f:5a:b9:70:01:4e:a6:23:f1:00:ca:
f4:2d:3a:7d:7c:50:1c:e2:59:6b:ab:f3:6c:b5:48:7d:b0:6f:
e6:eb:de:92:c9:e7:aa:af:9f:9f:98:52:64:4a:02:92:7d:6d:
84:e2:5b:29:5a:b3:6b:8a:ec:5e:30:35:c9:7a:c7:de:4d:72:
61:cd:7f:70:6d:c8:9d:76:f2:61:a4:94:f9:a2:fb:d5:7d:48:
1f:45:f1:63:ff:14:e1:fb:b3:e8:bc:3d:0a:f0:69:3a:8e:23:
47:97:b5:8f:6f:cb:72:31:f3:76:75:27:00:b1:19:54:da:e7:
ef:e9:80:d7:15:2e:24:ff:35:f4:61:a1:47:76:76:85:19:32:
af:8e:ef:b2:35:57:af:f5:36:2c:37:ae:88:53:d2:51:aa:58:
69:94:28:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 27 10:19:46 2024 by rpki-client on console-ams.rpki-client.org