Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/ECEF5CE6CA1C11EDA694E286C4F9AE02.roa
File: ECEF5CE6CA1C11EDA694E286C4F9AE02.roa (raw, json)
Hash identifier: jYnBUkYtuSih5pMjRM/qTbIiXyr+n1qf/tHpn0X+V+Q=
Subject key identifier: 17:A0:23:2B:B4:31:1A:E9:AB:02:F8:0C:38:D6:F8:5F:90:75:76:D1
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: 83E3
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/ECEF5CE6CA1C11EDA694E286C4F9AE02.roa
Signing time: Fri 01 Mar 2024 04:18:43 +0000
ROA not before: Fri 01 Mar 2024 04:18:43 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 133275
IP address blocks: 43.228.220.0/22 maxlen: 24
43.248.236.0/22 maxlen: 24
43.249.52.0/22 maxlen: 24
45.115.4.0/22 maxlen: 24
45.119.136.0/22 maxlen: 24
45.119.140.0/22 maxlen: 24
45.125.60.0/22 maxlen: 24
103.13.104.0/22 maxlen: 24
103.36.124.0/22 maxlen: 24
103.46.192.0/23 maxlen: 24
103.46.194.0/23 maxlen: 24
103.47.168.0/22 maxlen: 24
103.47.236.0/22 maxlen: 24
103.59.192.0/22 maxlen: 24
103.59.196.0/22 maxlen: 24
103.73.92.0/22 maxlen: 24
103.86.40.0/22 maxlen: 24
103.95.120.0/22 maxlen: 24
103.176.162.0/23 maxlen: 24
103.193.196.0/22 maxlen: 24
103.196.52.0/22 maxlen: 24
103.208.200.0/22 maxlen: 24
103.215.248.0/22 maxlen: 24
103.243.4.0/24 maxlen: 24
103.248.116.0/22 maxlen: 24
116.204.188.0/22 maxlen: 24
137.59.240.0/22 maxlen: 24
157.119.124.0/22 maxlen: 24
157.119.216.0/24 maxlen: 24
157.119.217.0/24 maxlen: 24
157.119.218.0/24 maxlen: 24
157.119.219.0/24 maxlen: 24
2404:4340::/32 maxlen: 32
2404:4340::/33 maxlen: 33
2404:4340::/48 maxlen: 48
2404:4340:1::/48 maxlen: 48
2404:4340:2::/48 maxlen: 48
2404:4340:3::/48 maxlen: 48
2404:4340:4::/48 maxlen: 48
2404:4340:5::/48 maxlen: 48
2404:4340:6::/48 maxlen: 48
2404:4340:7::/48 maxlen: 48
2404:4340:8000::/33 maxlen: 33
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 03 May 2024 15:38:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 33763 (0x83e3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Validity
Not Before: Mar 1 04:18:43 2024 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=65e15723-23da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:6a:c6:66:59:66:c9:d1:2f:f2:96:f6:11:1c:
cf:be:36:50:23:cc:ae:b1:45:12:77:71:a2:24:6f:
97:3b:0c:0c:c3:64:14:18:9f:3a:bd:b1:aa:ce:66:
89:2b:09:bd:2e:29:d9:be:e3:02:e9:ca:19:f8:12:
8b:db:7e:f5:d1:05:17:2f:7d:46:7c:c2:6e:94:e2:
f1:ac:62:96:45:61:3d:f8:80:ab:08:f7:2f:cb:68:
29:68:b5:cf:70:52:07:c9:0a:c1:5f:8a:21:7f:03:
ca:d7:0a:16:ea:98:fa:aa:c5:0b:cb:84:3c:fa:29:
9b:7b:5f:ca:3a:69:1b:24:4c:e1:ed:4e:75:57:74:
af:ba:b4:30:2b:02:3a:06:56:2b:b6:2f:30:58:c2:
25:4c:3a:9c:fb:9b:24:c1:ca:c7:0d:d1:1e:fc:30:
96:10:2d:d2:48:e8:00:b1:51:18:c3:ba:3d:55:4a:
59:19:43:ed:eb:40:d2:c6:85:01:61:56:da:13:be:
ae:33:84:0c:34:e9:5c:4e:74:ab:b9:75:84:c3:e2:
8f:38:12:08:5d:2b:25:16:0e:1e:ce:fc:b8:6e:17:
0a:25:ea:31:3a:e5:23:3a:08:41:0c:e0:23:68:6d:
53:45:3c:46:3d:50:65:16:62:ce:e4:63:6d:e9:45:
72:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:A0:23:2B:B4:31:1A:E9:AB:02:F8:0C:38:D6:F8:5F:90:75:76:D1
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/ECEF5CE6CA1C11EDA694E286C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
43.228.220.0/22
43.248.236.0/22
43.249.52.0/22
45.115.4.0/22
45.119.136.0/21
45.125.60.0/22
103.13.104.0/22
103.36.124.0/22
103.46.192.0/22
103.47.168.0/22
103.47.236.0/22
103.59.192.0/21
103.73.92.0/22
103.86.40.0/22
103.95.120.0/22
103.176.162.0/23
103.193.196.0/22
103.196.52.0/22
103.208.200.0/22
103.215.248.0/22
103.243.4.0/24
103.248.116.0/22
116.204.188.0/22
137.59.240.0/22
157.119.124.0/22
157.119.216.0/22
IPv6:
2404:4340::/32
Signature Algorithm: sha256WithRSAEncryption
bb:8d:0e:3b:9d:28:25:f3:08:82:4a:3a:88:1e:a6:40:b4:cc:
a2:c4:a9:f3:ec:69:1a:36:e4:64:bd:56:2b:c2:bb:32:39:02:
74:81:fa:34:89:4b:10:32:8f:1d:6f:0e:88:d4:d9:5e:dc:71:
34:86:7a:f9:89:cf:81:e2:5e:a9:03:fa:54:6d:4d:d7:5a:ad:
51:89:52:4e:80:41:7c:23:38:1b:ea:5f:92:ef:d0:64:50:f8:
3a:03:d5:b6:e7:35:9d:7e:4d:df:44:ac:f2:b4:5b:b2:10:65:
20:e1:01:05:2a:1c:7a:f8:5e:e9:6d:b4:c7:ad:83:e8:22:77:
35:25:dc:6b:e0:69:57:09:b0:ea:50:1d:0f:36:f5:67:81:af:
f4:1c:11:e5:a5:b2:bc:3f:2a:f0:ce:22:21:7d:02:93:71:10:
c3:a8:13:8c:2e:34:68:eb:e4:a7:bf:b3:9f:ef:dd:dd:0b:13:
7a:9a:2d:87:f1:03:5a:d6:51:b1:d2:c4:e1:da:57:49:8d:70:
1d:d4:fc:be:28:a4:6d:57:03:7c:43:9c:37:f8:b4:c2:21:bf:
36:0a:18:88:21:e1:b0:2b:f7:0a:a4:a2:df:fa:ad:ff:50:ed:
ce:7b:d9:b2:f3:72:66:c3:84:e8:a8:13:b3:45:a8:5f:fd:a3:
f6:d2:75:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 27 10:19:49 2024 by rpki-client on console-ams.rpki-client.org