Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/EF79A5B4988711ED93434B2EC4F9AE02.roa
File: EF79A5B4988711ED93434B2EC4F9AE02.roa (raw, json)
Hash identifier: 6xB5ry8RUktOQORwn8NqrAvARRl+zcPU3Kq7XB2IWMU=
Subject key identifier: 58:4E:D2:F1:92:EA:24:4D:75:C9:6C:E2:DD:A7:D8:23:02:D8:EB:37
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: 85D1
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/EF79A5B4988711ED93434B2EC4F9AE02.roa
Signing time: Wed 03 Apr 2024 04:31:37 +0000
ROA not before: Wed 03 Apr 2024 04:31:37 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 45804
IP address blocks: 43.251.168.0/22 maxlen: 24
43.251.172.0/22 maxlen: 24
43.251.176.0/22 maxlen: 24
45.116.188.0/22 maxlen: 24
45.248.56.0/22 maxlen: 24
103.27.140.0/22 maxlen: 24
103.56.236.0/22 maxlen: 24
103.59.88.0/24 maxlen: 24
103.60.219.0/24 maxlen: 24
103.76.80.0/22 maxlen: 24
103.93.100.0/22 maxlen: 24
103.147.239.0/24 maxlen: 24
103.168.79.0/24 maxlen: 24
103.180.216.0/23 maxlen: 24
103.193.88.0/22 maxlen: 24
103.205.163.0/24 maxlen: 24
103.216.204.0/22 maxlen: 24
103.234.93.0/24 maxlen: 24
103.244.240.0/22 maxlen: 24
103.244.244.0/24 maxlen: 24
103.245.2.0/24 maxlen: 24
103.245.20.0/24 maxlen: 24
103.251.80.0/22 maxlen: 24
114.29.224.0/22 maxlen: 24
139.5.140.0/24 maxlen: 24
139.5.141.0/24 maxlen: 24
139.5.142.0/24 maxlen: 24
139.5.143.0/24 maxlen: 24
150.129.108.0/22 maxlen: 24
150.129.132.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 03 May 2024 15:38:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 34257 (0x85d1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Validity
Not Before: Apr 3 04:31:37 2024 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=660cdba9-c0f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f5:22:64:1d:00:25:0b:2b:6a:fe:cc:b5:81:6d:
48:d5:7b:95:91:f2:52:2c:27:2b:55:1b:49:e4:fe:
f2:8e:b4:fd:9a:17:6c:50:3a:98:eb:28:39:c6:fc:
d3:61:0a:a9:fc:38:50:6c:0f:b0:6a:55:db:6f:c3:
03:1e:47:f2:8c:9f:42:1f:28:5f:37:7e:12:4a:d7:
3d:dd:b7:9a:d5:f8:7e:da:bd:34:9e:48:1b:ed:5c:
12:fd:9c:5f:be:05:78:f6:3b:9f:7a:28:ed:61:46:
5c:d1:4e:6b:84:74:70:22:6c:b7:2d:46:be:0c:95:
9f:c0:31:72:4e:a6:9c:2c:2d:50:a6:0d:b2:0a:5b:
54:4c:e8:f6:ea:42:cb:ad:2a:64:8f:03:2d:3b:a6:
32:e5:0b:f8:63:04:60:97:57:7b:cc:07:cf:3c:c8:
54:70:a5:de:ca:72:8d:06:2d:c9:fd:21:c3:28:1a:
20:e8:57:c6:39:af:10:76:e9:e0:52:37:26:f7:12:
2b:09:87:8f:b0:2a:ba:53:87:89:1e:ef:fe:58:39:
08:19:2f:91:cd:72:ed:48:ce:60:a7:e1:1d:9c:b2:
b7:7a:28:14:23:f1:06:29:01:27:ed:2e:26:12:b3:
cc:cd:d4:02:b0:69:4c:11:23:8c:d4:c8:60:f5:f2:
d6:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:4E:D2:F1:92:EA:24:4D:75:C9:6C:E2:DD:A7:D8:23:02:D8:EB:37
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/EF79A5B4988711ED93434B2EC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
43.251.168.0-43.251.179.255
45.116.188.0/22
45.248.56.0/22
103.27.140.0/22
103.56.236.0/22
103.59.88.0/24
103.60.219.0/24
103.76.80.0/22
103.93.100.0/22
103.147.239.0/24
103.168.79.0/24
103.180.216.0/23
103.193.88.0/22
103.205.163.0/24
103.216.204.0/22
103.234.93.0/24
103.244.240.0-103.244.244.255
103.245.2.0/24
103.245.20.0/24
103.251.80.0/22
114.29.224.0/22
139.5.140.0/22
150.129.108.0/22
150.129.132.0/22
Signature Algorithm: sha256WithRSAEncryption
4e:1c:55:20:7c:53:34:ae:52:58:6d:71:f6:63:23:4c:88:12:
26:3b:24:4f:95:ff:e6:01:f9:f0:75:48:7c:e1:eb:00:49:ac:
e3:d6:76:3d:70:ee:8c:50:b1:56:19:bf:52:b6:fa:69:89:3a:
54:9d:c3:40:9a:39:bf:22:f3:be:99:bd:ee:1b:93:7d:67:93:
17:16:27:eb:12:47:d8:50:1f:01:d8:6a:07:d9:9d:bf:61:36:
13:82:07:36:85:9c:56:f0:48:79:6b:ac:34:bd:07:c7:40:4e:
23:34:75:7f:3a:4c:38:de:bb:01:6c:ad:58:79:66:52:d8:7f:
7d:03:8f:56:b8:12:4b:52:0c:c5:f1:40:b8:6e:4b:be:34:4a:
82:6d:71:c3:7a:56:91:90:41:14:44:8e:5f:f8:c3:5a:1a:00:
1e:8c:01:a7:08:1f:4f:ba:db:c7:72:03:0b:bb:a7:af:01:41:
93:e6:4d:86:03:55:97:97:90:81:81:76:7e:ee:d8:ca:da:74:
3b:cf:6f:11:49:7e:9f:c2:c1:29:6b:e1:55:55:33:4d:a1:c8:
a6:2f:5a:6e:e3:2d:02:5e:d9:83:7c:b5:3a:89:6c:b2:04:9d:
22:dd:f5:5f:44:4f:00:43:68:e0:64:9a:28:6e:30:96:75:51:
9a:27:3c:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 27 10:19:49 2024 by rpki-client on console-ams.rpki-client.org