Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/E40743E6FAAC11EBAB4C5D16C4F9AE02.roa
File: E40743E6FAAC11EBAB4C5D16C4F9AE02.roa (raw, json)
Hash identifier: rpPBTX5EYV0EPotGgRypAG9Jke98gOHP1PpFKojRLkw=
Subject key identifier: DD:1E:87:0B:87:65:7D:F0:4E:D0:AA:DE:46:9C:E8:11:03:D6:14:6D
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: 719F
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/E40743E6FAAC11EBAB4C5D16C4F9AE02.roa
Signing time: Wed 10 May 2023 16:49:10 +0000
ROA not before: Wed 10 May 2023 16:49:09 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 55341
IP address blocks: 45.116.148.0/22 maxlen: 22
45.116.148.0/24 maxlen: 24
45.116.149.0/24 maxlen: 24
45.116.150.0/24 maxlen: 24
45.116.151.0/24 maxlen: 24
103.56.196.0/22 maxlen: 22
103.56.196.0/24 maxlen: 24
103.56.197.0/24 maxlen: 24
103.56.198.0/24 maxlen: 24
103.56.199.0/24 maxlen: 24
103.73.212.0/24 maxlen: 24
103.73.213.0/24 maxlen: 24
103.73.214.0/24 maxlen: 24
103.73.215.0/24 maxlen: 24
103.171.80.0/23 maxlen: 24
103.171.196.0/23 maxlen: 24
103.229.24.0/22 maxlen: 22
103.229.24.0/24 maxlen: 24
103.229.25.0/24 maxlen: 24
103.229.26.0/24 maxlen: 24
103.229.27.0/24 maxlen: 24
183.177.124.0/24 maxlen: 24
183.177.125.0/24 maxlen: 24
183.177.126.0/24 maxlen: 24
183.177.127.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 03 May 2024 15:38:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 29087 (0x719f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Validity
Not Before: May 10 16:49:09 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=645bcb05-c9a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:b9:8a:25:fb:4e:88:ca:de:24:2c:63:f8:8a:
21:d1:18:4a:81:63:2f:3c:d2:15:24:3f:8d:99:88:
5b:83:f8:84:a9:0c:e0:4d:7c:13:1c:9e:33:c0:1b:
af:f8:d2:88:a8:42:db:5d:de:81:b5:93:e2:42:5a:
d3:cc:bd:66:9a:15:4a:9c:8a:75:a6:f2:75:ba:bf:
59:c4:85:ad:44:a1:41:00:3d:7e:9c:7b:a0:5a:6f:
16:0f:34:aa:9a:84:a4:d1:fd:b3:c6:fc:c3:65:d7:
09:f3:bb:19:4f:c1:8c:04:63:e8:fb:cb:12:f9:7e:
31:17:82:db:06:d1:d0:97:92:07:11:28:ea:9f:9d:
f7:39:45:5a:d2:19:95:49:65:bd:96:0a:3b:d5:eb:
19:29:0b:5d:ae:73:b9:0f:4e:db:bc:6e:01:2c:f6:
5d:f0:10:41:20:e4:e2:7d:da:b4:d2:e1:10:06:8d:
ce:4d:00:cb:45:2b:f9:dd:66:fe:24:9f:4f:2e:12:
75:c2:c5:f9:3a:86:cc:e2:0f:9e:70:db:70:fc:d8:
07:96:c4:bb:ee:f0:6c:d6:78:8c:be:e3:c6:7c:ea:
2a:cf:f6:92:6f:0e:ec:7a:f9:09:6b:9b:f2:18:59:
77:6b:68:eb:74:8a:a3:5c:1b:24:a9:01:16:cc:d4:
83:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:1E:87:0B:87:65:7D:F0:4E:D0:AA:DE:46:9C:E8:11:03:D6:14:6D
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/E40743E6FAAC11EBAB4C5D16C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.116.148.0/22
103.56.196.0/22
103.73.212.0/22
103.171.80.0/23
103.171.196.0/23
103.229.24.0/22
183.177.124.0/22
Signature Algorithm: sha256WithRSAEncryption
79:85:22:dc:fc:db:cc:06:ee:69:bd:03:39:ae:a0:58:57:5a:
30:4b:81:1f:9e:50:79:9e:9a:06:a9:28:a0:85:9b:7e:1e:12:
b3:f5:67:92:93:4a:02:79:eb:f7:fb:91:2a:9c:05:a7:51:83:
13:3e:ce:0f:1c:34:48:7e:48:2c:7c:e4:b6:84:c0:66:63:e1:
47:23:2e:19:e0:94:92:ba:a3:90:f8:87:75:db:e3:e0:d7:ba:
5e:a0:5b:bf:79:fa:4e:b1:db:89:9d:00:2b:a0:f6:38:12:0a:
08:a2:a9:2b:44:96:59:ae:30:92:26:d2:21:f0:fc:dd:9a:71:
20:ab:15:3b:37:da:83:48:16:98:92:26:2a:83:1e:5b:b6:d5:
c9:4a:57:84:56:b1:96:c3:a4:6f:ec:9c:93:03:d1:f3:36:03:
1f:0f:20:44:9e:a4:27:55:53:61:be:45:7d:6e:38:20:b3:86:
d1:58:b3:eb:6a:3b:aa:29:3e:7f:4c:8f:d8:26:35:82:8b:5a:
67:2b:6a:6f:0e:1f:40:03:2d:d1:1e:08:53:a0:2f:34:63:ea:
07:16:ee:66:44:c9:f6:c9:b0:54:4b:28:33:6f:04:95:15:46:
57:26:69:96:c1:a6:c7:13:31:31:cf:a0:33:99:1e:91:bb:cb:
26:f3:79:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 27 10:19:48 2024 by rpki-client on console-ams.rpki-client.org