Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/DD42B126B75C11EDB5BD8751C4F9AE02.roa
File: DD42B126B75C11EDB5BD8751C4F9AE02.roa (raw, json)
Hash identifier: J/bL4ZkskYXZHmtqtmGvDc8Mt/Y5YYxIqCKX11b85AQ=
Subject key identifier: E6:84:4F:0A:21:E2:97:F7:C6:65:60:C1:2E:8F:12:9F:F5:0D:39:13
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: 751C
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/DD42B126B75C11EDB5BD8751C4F9AE02.roa
Signing time: Wed 05 Jul 2023 13:21:24 +0000
ROA not before: Wed 05 Jul 2023 13:21:24 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 136377
IP address blocks: 103.99.12.0/22 maxlen: 24
103.144.118.0/24 maxlen: 24
103.144.119.0/24 maxlen: 24
2405:27c0::/32 maxlen: 32
2405:27c0::/48 maxlen: 48
2405:27c0:1::/48 maxlen: 48
2405:27c0:2::/48 maxlen: 48
2405:27c0:3::/48 maxlen: 48
2405:27c0:4::/48 maxlen: 48
2405:27c0:5::/48 maxlen: 48
2405:27c0:6::/48 maxlen: 48
2405:27c0:7::/48 maxlen: 48
2405:27c0:8::/48 maxlen: 48
2405:27c0:9::/48 maxlen: 48
2405:27c0:a::/48 maxlen: 48
2405:27c0:b::/48 maxlen: 48
2405:27c0:c::/48 maxlen: 48
2405:27c0:d::/48 maxlen: 48
2405:27c0:e::/48 maxlen: 48
2405:27c0:f::/48 maxlen: 48
2405:27c0:10::/48 maxlen: 48
2405:27c0:11::/48 maxlen: 48
2405:27c0:12::/48 maxlen: 48
2405:27c0:13::/48 maxlen: 48
2405:27c0:14::/48 maxlen: 48
2405:27c0:15::/48 maxlen: 48
2405:27c0:16::/48 maxlen: 48
2405:27c0:17::/48 maxlen: 48
2405:27c0:18::/48 maxlen: 48
2405:27c0:19::/48 maxlen: 48
2405:27c0:1a::/48 maxlen: 48
2405:27c0:1b::/48 maxlen: 48
2405:27c0:1c::/48 maxlen: 48
2405:27c0:1d::/48 maxlen: 48
2405:27c0:1e::/48 maxlen: 48
2405:27c0:1f::/48 maxlen: 48
2405:27c0:20::/48 maxlen: 48
2405:27c0:21::/48 maxlen: 48
2405:27c0:22::/48 maxlen: 48
2405:27c0:23::/48 maxlen: 48
2405:27c0:24::/48 maxlen: 48
2405:27c0:25::/48 maxlen: 48
2405:27c0:26::/48 maxlen: 48
2405:27c0:27::/48 maxlen: 48
2405:27c0:28::/48 maxlen: 48
2405:27c0:29::/48 maxlen: 48
2405:27c0:2a::/48 maxlen: 48
2405:27c0:2b::/48 maxlen: 48
2405:27c0:2c::/48 maxlen: 48
2405:27c0:2d::/48 maxlen: 48
2405:27c0:2e::/48 maxlen: 48
2405:27c0:2f::/48 maxlen: 48
2405:27c0:30::/48 maxlen: 48
2405:27c0:31::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 03 May 2024 15:38:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 29980 (0x751c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Validity
Not Before: Jul 5 13:21:24 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=64a56e54-2375
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:2b:9c:84:e7:9c:28:fd:43:96:f1:51:5d:5a:
2c:e4:58:b8:a8:91:4f:26:b8:41:e7:02:82:f5:8e:
03:42:fe:f2:72:32:8a:4c:8c:bb:41:93:8c:53:be:
44:4b:c6:61:17:91:90:df:f7:d3:92:a5:47:3e:d6:
8b:29:75:fc:08:c8:ee:ad:2f:db:f7:9b:bd:bb:0f:
3c:65:05:a4:f2:0e:9a:8b:51:7b:df:c6:35:f4:4b:
f1:f6:90:61:0a:74:9d:86:9d:ed:a8:38:1f:78:1a:
4f:86:ee:ce:e8:4c:c3:61:fa:01:58:16:f6:7a:84:
ae:90:1c:6a:98:1e:e3:0f:42:2d:7b:1e:fd:a0:b4:
fa:b2:3a:56:76:50:71:2d:6a:88:ba:c7:f4:ad:db:
2c:fe:39:bb:23:6b:d2:0d:63:8e:db:59:42:87:ea:
19:a6:44:52:d4:ed:66:6a:7b:02:80:d4:c1:5f:82:
48:e2:b6:57:08:db:25:29:09:af:9d:5a:84:9c:ce:
67:48:92:15:1d:5d:ba:4d:83:46:f2:a4:03:e3:18:
40:30:ec:6d:59:50:ae:fc:77:f6:af:76:6f:bf:2e:
f5:10:4b:83:e9:fa:2f:ec:1a:f8:b2:67:8b:aa:96:
a0:82:83:62:c0:1b:b3:8f:1c:31:ba:e9:6e:1b:61:
11:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:84:4F:0A:21:E2:97:F7:C6:65:60:C1:2E:8F:12:9F:F5:0D:39:13
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/DD42B126B75C11EDB5BD8751C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.99.12.0/22
103.144.118.0/23
IPv6:
2405:27c0::/32
Signature Algorithm: sha256WithRSAEncryption
7c:95:c7:2a:f1:e2:b1:03:59:f2:a1:62:df:02:cc:8f:d1:bc:
59:17:3a:98:8a:ab:1c:40:e2:fc:47:45:81:49:68:68:ac:09:
f4:4e:78:06:94:c6:82:1c:d1:ad:8b:b6:5d:c0:2e:c7:c5:61:
d1:3d:b1:56:be:0c:87:59:14:be:ca:e1:e0:10:f1:ba:6d:c8:
ad:ab:c2:1f:d0:a8:2e:6f:67:6d:3b:cf:25:8d:d2:d5:21:d8:
39:c9:0d:1c:af:97:93:14:74:c2:11:12:fd:0f:7c:cf:2a:43:
77:85:43:a3:72:3f:ec:02:68:cb:dd:a6:07:5a:bf:d5:72:c8:
5c:da:12:39:9f:f5:58:cc:d6:68:71:29:ac:3e:89:69:58:9f:
16:68:67:20:45:37:8c:e6:40:24:1f:74:1d:1e:81:87:ff:87:
cc:d9:70:9d:12:c4:07:28:69:90:ae:62:c0:4e:68:4e:70:34:
01:66:ff:1d:d9:35:cd:58:af:6d:a0:d9:87:2e:6c:1f:09:e6:
bb:82:80:69:cb:fd:4d:e1:87:0b:12:30:b8:2b:5a:d7:a8:b1:
50:ee:63:1a:08:da:88:0f:e1:31:11:16:0f:28:23:0a:3c:95:
4d:05:63:a5:71:1d:a2:09:ba:d0:03:b6:c1:f5:61:e8:d3:e7:
2a:e2:b5:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 27 10:19:47 2024 by rpki-client on console-ams.rpki-client.org