Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A918F550/8B9BD2021D8511E2B41230DC08B02CD2/19FC767E33FF11EDB747A054C4F9AE02.roa
File: 19FC767E33FF11EDB747A054C4F9AE02.roa (raw, json)
Hash identifier: VEHIwaTJOXdH0dS1VED7m8GNR+0upJRphZ7uU6TVShI=
Subject key identifier: 31:7A:80:E2:85:4B:D5:7F:1F:DA:CC:47:AE:69:24:CE:C3:DB:5F:D8
Certificate issuer: /CN=A918F550/serialNumber=A24B6A62044B70065F0506388460E4AF2F17F3FF
Certificate serial: 339D
Authority key identifier: A2:4B:6A:62:04:4B:70:06:5F:05:06:38:84:60:E4:AF:2F:17:F3:FF
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oktqYgRLcAZfBQY4hGDkry8X8_8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918F550/8B9BD2021D8511E2B41230DC08B02CD2/19FC767E33FF11EDB747A054C4F9AE02.roa
Signing time: Thu 10 Aug 2023 14:30:31 +0000
ROA not before: Thu 10 Aug 2023 14:30:31 +0000
ROA not after: Mon 30 Sep 2024 00:00:00 +0000
asID: 45845
IP address blocks: 43.245.236.0/22 maxlen: 22
43.245.236.0/23 maxlen: 23
43.245.236.0/24 maxlen: 24
43.245.237.0/24 maxlen: 24
43.245.238.0/23 maxlen: 23
43.245.238.0/24 maxlen: 24
43.245.239.0/24 maxlen: 24
45.117.152.0/22 maxlen: 22
45.117.152.0/23 maxlen: 24
45.117.154.0/23 maxlen: 23
45.117.154.0/24 maxlen: 24
45.117.155.0/24 maxlen: 24
103.235.196.0/22 maxlen: 24
103.250.132.0/22 maxlen: 22
103.250.132.0/23 maxlen: 23
103.250.132.0/24 maxlen: 24
103.250.133.0/24 maxlen: 24
103.250.134.0/23 maxlen: 23
103.250.134.0/24 maxlen: 24
103.250.135.0/24 maxlen: 24
163.53.24.0/22 maxlen: 24
202.51.64.0/19 maxlen: 24
2405:6600::/32 maxlen: 32
2405:6600:201::/48 maxlen: 48
2405:6600:600::/48 maxlen: 48
2405:6600:701::/48 maxlen: 48
2405:6600:702::/48 maxlen: 48
2405:6600:703::/48 maxlen: 48
2405:6600:709::/48 maxlen: 48
2405:6600:c00::/48 maxlen: 48
2405:6600:c43::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918F550/8B9BD2021D8511E2B41230DC08B02CD2/oktqYgRLcAZfBQY4hGDkry8X8_8.crl
rsync://rpki.apnic.net/member_repository/A918F550/8B9BD2021D8511E2B41230DC08B02CD2/oktqYgRLcAZfBQY4hGDkry8X8_8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oktqYgRLcAZfBQY4hGDkry8X8_8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 23 May 2024 14:26:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13213 (0x339d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918F550/serialNumber=A24B6A62044B70065F0506388460E4AF2F17F3FF
Validity
Not Before: Aug 10 14:30:31 2023 GMT
Not After : Sep 30 00:00:00 2024 GMT
Subject: CN=64d4f486-e1a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:66:f7:3b:9e:da:bd:1b:39:76:96:e3:b0:c5:
96:ca:fb:a5:39:c6:4e:33:0d:ee:d4:8f:4f:af:f2:
62:25:98:6a:9a:fa:8a:b9:e2:47:1a:2f:54:53:0d:
55:9f:5f:6d:e8:89:cc:a9:28:c8:10:4d:27:08:5c:
05:41:83:af:02:a6:f4:5a:2f:51:a1:a2:22:89:b1:
dc:56:0c:1c:9c:94:ea:37:2e:21:af:8c:6a:d7:37:
b2:40:b1:f5:2b:43:93:84:52:14:06:ca:d3:1a:25:
c9:fa:6a:a6:c8:74:84:08:cd:7f:a9:9d:bf:a5:13:
f0:87:4b:26:f3:ce:d6:6a:99:bf:3f:c3:d3:61:c2:
f9:eb:33:5b:a8:30:a5:a5:64:f4:ed:3a:5c:ac:ca:
0c:08:e4:55:52:bc:47:94:29:89:bb:4e:11:62:37:
e1:c6:14:0e:ec:5e:1f:8b:8b:f9:69:27:e7:88:d7:
b4:05:fc:18:89:33:4b:9e:a7:e5:eb:44:60:68:e6:
9f:b5:18:20:93:c8:f0:5c:4f:d8:a7:b6:18:a9:90:
bd:6f:f4:7e:4f:8c:52:5c:f7:12:99:2b:6a:49:82:
18:a8:ab:64:80:a4:aa:1d:b5:59:7a:76:fd:ac:83:
d7:72:19:8b:86:cc:25:f1:8d:94:87:3a:b0:82:67:
97:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:7A:80:E2:85:4B:D5:7F:1F:DA:CC:47:AE:69:24:CE:C3:DB:5F:D8
X509v3 Authority Key Identifier:
keyid:A2:4B:6A:62:04:4B:70:06:5F:05:06:38:84:60:E4:AF:2F:17:F3:FF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918F550/8B9BD2021D8511E2B41230DC08B02CD2/oktqYgRLcAZfBQY4hGDkry8X8_8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oktqYgRLcAZfBQY4hGDkry8X8_8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918F550/8B9BD2021D8511E2B41230DC08B02CD2/19FC767E33FF11EDB747A054C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
43.245.236.0/22
45.117.152.0/22
103.235.196.0/22
103.250.132.0/22
163.53.24.0/22
202.51.64.0/19
IPv6:
2405:6600::/32
Signature Algorithm: sha256WithRSAEncryption
0d:3b:e6:10:82:69:10:de:a5:4a:a6:9a:b9:e3:7d:49:9b:26:
a2:6a:b6:97:73:75:5c:99:4e:3b:17:55:c5:39:5d:df:b8:73:
f1:ca:a4:09:99:d2:3e:59:e1:b9:e3:41:29:16:b6:37:a4:0a:
a3:7d:10:ef:f9:c7:02:77:9f:ca:0a:bd:af:65:0b:4e:96:3d:
71:3b:03:d4:63:2a:ea:9c:75:66:e8:9c:f6:20:3b:6d:bb:36:
f7:24:10:02:0a:96:b1:07:88:4f:62:2c:5b:d4:fb:3a:4e:b3:
b2:0e:1f:af:19:94:9d:46:65:4e:46:41:2a:0f:98:c1:85:a2:
04:f7:75:3d:aa:aa:c7:02:5a:b7:d7:00:15:7d:57:31:c6:a3:
b2:cd:a3:40:00:5c:37:55:22:44:23:52:bf:c3:5c:59:21:4c:
9d:49:96:76:cd:b3:bc:91:5e:69:f7:a3:31:c8:71:c7:de:2f:
70:77:1c:50:5c:07:a9:c2:41:58:3f:20:af:13:80:ca:df:4e:
d5:aa:6d:84:d3:c4:25:d6:90:2d:e0:2f:7c:29:2f:d8:2d:88:
5d:89:38:c3:91:ad:c4:71:5a:c1:d7:b9:10:dc:c9:24:fd:1b:
b9:2d:a3:77:1f:05:d8:90:f9:f6:ce:57:54:e2:cf:93:00:a5:
c0:b3:dc:84
-----BEGIN CERTIFICATE-----
MIIFnjCCBIagAwIBAgICM50wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OEY1NTAxMTAvBgNVBAUTKEEyNEI2QTYyMDQ0QjcwMDY1RjA1MDYzODg0NjBFNEFG
MkYxN0YzRkYwHhcNMjMwODEwMTQzMDMxWhcNMjQwOTMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02NGQ0ZjQ4Ni1lMWE1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA12b3O57avRs5dpbjsMWWyvulOcZOMw3u1I9Pr/JiJZhqmvqKueJHGi9UUw1V
n19t6InMqSjIEE0nCFwFQYOvAqb0Wi9RoaIiibHcVgwcnJTqNy4hr4xq1zeyQLH1
K0OThFIUBsrTGiXJ+mqmyHSECM1/qZ2/pRPwh0sm887Wapm/P8PTYcL56zNbqDCl
pWT07TpcrMoMCORVUrxHlCmJu04RYjfhxhQO7F4fi4v5aSfniNe0BfwYiTNLnqfl
60RgaOaftRggk8jwXE/Yp7YYqZC9b/R+T4xSXPcSmStqSYIYqKtkgKSqHbVZenb9
rIPXchmLhswl8Y2UhzqwgmeXTQIDAQABo4ICwjCCAr4wHQYDVR0OBBYEFDF6gOKF
S9V/H9rMR65pJM7D21/YMB8GA1UdIwQYMBaAFKJLamIES3AGXwUGOIRg5K8vF/P/
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RjU1MC84QjlCRDIwMjFE
ODUxMUUyQjQxMjMwREMwOEIwMkNEMi9va3RxWWdSTGNBWmZCUVk0aEdEa3J5OFg4
XzguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL29rdHFZZ1JMY0FaZkJRWTRoR0Rrcnk4WDhfOC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
OEY1NTAvOEI5QkQyMDIxRDg1MTFFMkI0MTIzMERDMDhCMDJDRDIvMTlGQzc2N0Uz
M0ZGMTFFREI3NDdBMDU0QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwTAYIKwYBBQUHAQcBAf8E
PTA7MCoEAgABMCQDBAIr9ewDBAItdZgDBAJn68QDBAJn+oQDBAKjNRgDBAXKM0Aw
DQQCAAIwBwMFACQFZgAwDQYJKoZIhvcNAQELBQADggEBAA075hCCaRDepUqmmrnj
fUmbJqJqtpdzdVyZTjsXVcU5Xd+4c/HKpAmZ0j5Z4bnjQSkWtjekCqN9EO/5xwJ3
n8oKva9lC06WPXE7A9RjKuqcdWbonPYgO227NvckEAIKlrEHiE9iLFvU+zpOs7IO
H68ZlJ1GZU5GQSoPmMGFogT3dT2qqscCWrfXABV9VzHGo7LNo0AAXDdVIkQjUr/D
XFkhTJ1JlnbNs7yRXmn3ozHIccfeL3B3HFBcB6nCQVg/IK8TgMrfTtWqbYTTxCXW
kC3gL3wpL9gtiF2JOMORrcRxWsHXuRDcyST9G7kto3cfBdiQ+fbOV1Tiz5MApcCz
3IQ=
-----END CERTIFICATE-----
Generated at Thu May 16 15:21:29 2024 by rpki-client on console-ams.rpki-client.org