Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/F0AD15386E4211EEA90FD86EC4F9AE02.roa
File: F0AD15386E4211EEA90FD86EC4F9AE02.roa (raw, json)
Hash identifier: kQmc+m4GfTOWOksP91NW1IRP9gqkwzi/47Q+0uToDIo=
Subject key identifier: 1F:C4:97:75:89:F8:6C:A6:66:B5:9F:38:45:E2:7E:41:B7:FE:27:74
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: 7CFB
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/F0AD15386E4211EEA90FD86EC4F9AE02.roa
Signing time: Thu 02 Nov 2023 04:52:49 +0000
ROA not before: Thu 02 Nov 2023 04:52:49 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 45582
IP address blocks: 27.116.16.0/21 maxlen: 24
45.112.184.0/24 maxlen: 24
45.112.185.0/24 maxlen: 24
45.112.186.0/24 maxlen: 24
45.112.187.0/24 maxlen: 24
45.118.72.0/22 maxlen: 24
45.249.48.0/24 maxlen: 24
45.249.50.0/24 maxlen: 24
103.10.132.0/22 maxlen: 24
103.22.172.0/22 maxlen: 24
103.52.36.0/22 maxlen: 24
103.124.28.0/23 maxlen: 24
103.178.208.0/23 maxlen: 24
103.196.4.0/22 maxlen: 24
103.217.212.0/22 maxlen: 24
119.235.48.0/21 maxlen: 24
182.48.214.0/24 maxlen: 24
182.48.219.0/24 maxlen: 24
182.48.254.0/24 maxlen: 24
202.131.131.0/24 maxlen: 24
202.140.56.0/24 maxlen: 24
202.140.57.0/24 maxlen: 24
2400:3680::/32 maxlen: 32
2400:3680:900::/40 maxlen: 40
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 03 May 2024 15:38:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 31995 (0x7cfb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Validity
Not Before: Nov 2 04:52:49 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=65432b21-72f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:1a:42:d9:e6:ba:b7:0f:54:7d:e0:5d:27:bf:
87:8d:39:d0:c9:bf:d7:75:c2:f3:c7:d7:85:23:c9:
08:12:7a:e0:db:eb:e0:6c:44:46:9b:9a:86:a6:ee:
a4:62:d6:f1:08:7f:37:64:09:ed:9a:a8:32:ca:71:
52:7a:9a:75:1a:4d:7f:cf:0a:8e:a2:f6:12:f6:53:
03:42:25:95:9f:49:6c:04:60:39:e9:8a:32:99:f0:
0d:fb:cf:09:c8:d6:16:2e:28:0a:b9:64:d0:ea:01:
0e:84:05:3f:7e:e5:e6:48:9c:a5:8f:cf:29:54:d3:
09:f8:2c:96:c0:4c:8f:62:36:d3:4a:4c:ec:88:1d:
de:20:78:fb:31:aa:67:92:02:49:80:e9:99:7c:d2:
74:d7:c1:32:c8:d2:31:14:3b:d4:c6:c5:57:fa:88:
73:e9:3a:7d:41:85:ca:9e:dc:07:c7:00:42:2c:cd:
c8:e8:28:25:ce:2f:5f:e6:ef:fd:24:2d:1a:71:34:
fd:bd:60:1e:01:89:66:6d:68:88:8e:46:6d:22:59:
10:30:b7:b0:49:8f:25:df:2a:15:55:b2:5c:a2:99:
51:bb:d2:28:ba:4b:ae:9d:11:17:57:1b:5d:bf:b1:
cf:3a:7a:e8:6a:cd:d4:7b:8f:52:60:ae:c9:f9:e0:
a9:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:C4:97:75:89:F8:6C:A6:66:B5:9F:38:45:E2:7E:41:B7:FE:27:74
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/F0AD15386E4211EEA90FD86EC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
27.116.16.0/21
45.112.184.0/22
45.118.72.0/22
45.249.48.0/24
45.249.50.0/24
103.10.132.0/22
103.22.172.0/22
103.52.36.0/22
103.124.28.0/23
103.178.208.0/23
103.196.4.0/22
103.217.212.0/22
119.235.48.0/21
182.48.214.0/24
182.48.219.0/24
182.48.254.0/24
202.131.131.0/24
202.140.56.0/23
IPv6:
2400:3680::/32
Signature Algorithm: sha256WithRSAEncryption
52:52:b6:ab:e2:e2:9d:f7:33:68:d3:1c:e9:41:e1:bf:c3:ab:
29:5b:09:bc:77:62:d6:15:3a:e5:78:eb:b3:f6:96:36:81:35:
61:27:25:f6:b6:08:27:2e:cf:2c:27:0d:7a:66:44:22:b1:74:
ae:ed:ca:1b:0a:95:67:31:42:02:55:aa:f9:2d:a5:c8:37:2d:
5d:83:ec:40:db:73:21:2c:5e:b4:31:b6:7b:b0:e6:b2:dd:27:
d0:cd:07:40:f8:09:ae:cf:15:d5:20:72:eb:18:fa:e6:ad:b3:
95:7c:49:f8:85:fd:a6:1e:1a:66:39:d4:2e:04:fd:06:94:9d:
4f:d0:4a:f8:97:ca:08:7d:b9:d2:09:42:f2:28:9f:fc:12:49:
e9:4e:b6:f9:af:b3:20:e2:66:ab:fe:b4:cc:4d:bb:cc:42:14:
e3:1c:cf:b0:5c:f1:59:af:3c:06:50:6f:e8:d1:f2:25:86:bb:
37:e6:94:ff:27:2c:10:9c:79:8d:78:2d:08:72:fb:3a:8e:4b:
37:79:7a:a7:63:df:29:2d:44:e8:fa:ce:74:dc:e0:78:9a:58:
a7:da:be:92:b8:c1:47:08:5c:a8:92:c1:97:f4:36:2e:06:63:
81:ec:2a:a2:b5:66:4b:62:5f:b9:be:df:69:4c:99:2b:88:eb:
85:d3:e1:f7
-----BEGIN CERTIFICATE-----
MIIF6TCCBNGgAwIBAgICfPswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OEVEQjIxMTAvBgNVBAUTKDI5NkVEQjY0RjNBRjZFOUQ5ODA5MzJFODE2Rjk1OTgz
RTNBQkM4MjMwHhcNMjMxMTAyMDQ1MjQ5WhcNMjQwNzAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02NTQzMmIyMS03MmYyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAlxpC2ea6tw9UfeBdJ7+HjTnQyb/XdcLzx9eFI8kIEnrg2+vgbERGm5qGpu6k
YtbxCH83ZAntmqgyynFSepp1Gk1/zwqOovYS9lMDQiWVn0lsBGA56YoymfAN+88J
yNYWLigKuWTQ6gEOhAU/fuXmSJylj88pVNMJ+CyWwEyPYjbTSkzsiB3eIHj7Mapn
kgJJgOmZfNJ018EyyNIxFDvUxsVX+ohz6Tp9QYXKntwHxwBCLM3I6Cglzi9f5u/9
JC0acTT9vWAeAYlmbWiIjkZtIlkQMLewSY8l3yoVVbJcoplRu9IoukuunREXVxtd
v7HPOnroas3Ue49SYK7J+eCp9QIDAQABo4IDDTCCAwkwHQYDVR0OBBYEFB/El3WJ
+GymZrWfOEXifkG3/id0MB8GA1UdIwQYMBaAFClu22Tzr26dmAky6Bb5WYPjq8gj
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RURCMi8yQTQzRTMwQzcw
RTkxMUUyQjM2RDRCNkIyOTc5QkIyMC9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5
Q00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0tXN2JaUE92YnAyWUNUTG9GdmxaZy1PcnlDTS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
OEVEQjIvMkE0M0UzMEM3MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvRjBBRDE1Mzg2
RTQyMTFFRUE5MEZEODZFQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwgZYGCCsGAQUFBwEHAQH/
BIGGMIGDMHIEAgABMGwDBAMbdBADBAItcLgDBAItdkgDBAAt+TADBAAt+TIDBAJn
CoQDBAJnFqwDBAJnNCQDBAFnfBwDBAFnstADBAJnxAQDBAJn2dQDBAN36zADBAC2
MNYDBAC2MNsDBAC2MP4DBADKg4MDBAHKjDgwDQQCAAIwBwMFACQANoAwDQYJKoZI
hvcNAQELBQADggEBAFJStqvi4p33M2jTHOlB4b/DqylbCbx3YtYVOuV467P2ljaB
NWEnJfa2CCcuzywnDXpmRCKxdK7tyhsKlWcxQgJVqvktpcg3LV2D7EDbcyEsXrQx
tnuw5rLdJ9DNB0D4Ca7PFdUgcusY+uats5V8SfiF/aYeGmY51C4E/QaUnU/QSviX
ygh9udIJQvIon/wSSelOtvmvsyDiZqv+tMxNu8xCFOMcz7Bc8VmvPAZQb+jR8iWG
uzfmlP8nLBCceY14LQhy+zqOSzd5eqdj3yktROj6znTc4HiaWKfavpK4wUcIXKiS
wZf0Ni4GY4HsKqK1ZktiX7m+32lMmSuI64XT4fc=
-----END CERTIFICATE-----
Generated at Sat Apr 27 10:19:50 2024 by rpki-client on console-ams.rpki-client.org