Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9191436/AAB802E8C78C11E8A76CD914C4F9AE02/4AC75BA8FFE311EBB4FA4965C4F9AE02.roa
File: 4AC75BA8FFE311EBB4FA4965C4F9AE02.roa (raw, json)
Hash identifier: IUvSWekqWUh8HEG1ptYkkfatRQfLQnnfHPYNX//TZNw=
Subject key identifier: 52:C7:88:FB:4D:0D:5C:38:50:D5:C2:13:5F:41:F8:27:0F:76:B3:38
Certificate issuer: /CN=A9191436/serialNumber=2DA251C11AC68814F527F22E55DE9AC8C57FD66C
Certificate serial: 12A8
Authority key identifier: 2D:A2:51:C1:1A:C6:88:14:F5:27:F2:2E:55:DE:9A:C8:C5:7F:D6:6C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LaJRwRrGiBT1J_IuVd6ayMV_1mw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9191436/AAB802E8C78C11E8A76CD914C4F9AE02/4AC75BA8FFE311EBB4FA4965C4F9AE02.roa
Signing time: Wed 31 Jul 2024 03:45:36 +0000
ROA not before: Wed 31 Jul 2024 03:45:36 +0000
ROA not after: Wed 28 May 2025 00:00:00 +0000
asID: 133200
IP address blocks: 103.23.136.0/24 maxlen: 24
103.23.138.0/24 maxlen: 24
103.23.139.0/24 maxlen: 24
103.25.92.0/24 maxlen: 24
103.25.94.0/24 maxlen: 24
103.244.251.0/24 maxlen: 24
110.235.223.0/24 maxlen: 24
123.108.252.0/24 maxlen: 24
124.199.112.0/24 maxlen: 24
124.199.113.0/24 maxlen: 24
124.199.115.0/24 maxlen: 24
124.199.116.0/24 maxlen: 24
124.199.121.0/24 maxlen: 24
124.199.122.0/24 maxlen: 24
124.199.123.0/24 maxlen: 24
124.199.124.0/24 maxlen: 24
163.53.196.0/24 maxlen: 24
163.53.198.0/24 maxlen: 24
163.53.199.0/24 maxlen: 24
202.124.32.0/24 maxlen: 24
202.124.33.0/24 maxlen: 24
202.124.36.0/24 maxlen: 24
202.124.37.0/24 maxlen: 24
202.124.38.0/24 maxlen: 24
202.124.44.0/24 maxlen: 24
203.80.160.0/24 maxlen: 24
203.80.162.0/24 maxlen: 24
203.80.163.0/24 maxlen: 24
203.80.164.0/24 maxlen: 24
203.80.165.0/24 maxlen: 24
203.80.166.0/24 maxlen: 24
203.80.167.0/24 maxlen: 24
203.167.18.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9191436/AAB802E8C78C11E8A76CD914C4F9AE02/LaJRwRrGiBT1J_IuVd6ayMV_1mw.crl
rsync://rpki.apnic.net/member_repository/A9191436/AAB802E8C78C11E8A76CD914C4F9AE02/LaJRwRrGiBT1J_IuVd6ayMV_1mw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LaJRwRrGiBT1J_IuVd6ayMV_1mw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 27 Nov 2024 17:05:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4776 (0x12a8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9191436/serialNumber=2DA251C11AC68814F527F22E55DE9AC8C57FD66C
Validity
Not Before: Jul 31 03:45:36 2024 GMT
Not After : May 28 00:00:00 2025 GMT
Subject: CN=66a9b360-42ae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:bb:3c:9c:8a:ad:ca:e2:7c:6b:e5:aa:ab:9d:
77:7e:79:b4:49:8c:2a:08:6c:56:27:d8:fc:bc:a3:
a9:89:04:ec:b3:97:0b:f7:b5:92:99:a9:a6:c7:63:
16:d8:0e:1d:06:2a:47:a0:b2:65:35:bd:13:ba:8a:
95:48:50:d1:4e:6c:1c:09:34:e3:9a:c2:01:70:e3:
30:c7:9d:66:d7:97:18:6a:b6:df:46:5e:9a:2a:f2:
d1:44:e4:86:47:f7:a4:cb:28:b0:df:20:4d:ea:13:
0b:fb:b0:ba:64:17:5f:39:80:e1:fd:ca:49:ee:07:
52:ba:69:cf:df:d2:e8:52:68:36:4c:9f:4e:91:1c:
5f:82:56:11:21:96:f5:3d:f6:e3:d5:35:5f:55:d8:
38:fb:fa:d6:35:75:42:58:27:fe:df:1a:5f:ca:ae:
7a:b5:91:c0:47:bd:77:f6:1c:cc:7a:51:5d:be:aa:
d0:a7:5d:34:f7:1e:4c:84:e9:07:30:03:2e:25:79:
bc:36:0f:c8:ea:8d:61:b2:3c:e9:0f:77:83:d3:a5:
af:5e:4e:c4:4b:87:ef:52:b3:37:c9:e6:20:07:b3:
47:2f:97:2f:84:1e:80:e9:f3:b6:38:a6:b9:1b:6e:
73:cc:70:bf:4c:41:4d:28:40:81:b7:f2:99:3c:89:
1f:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:C7:88:FB:4D:0D:5C:38:50:D5:C2:13:5F:41:F8:27:0F:76:B3:38
X509v3 Authority Key Identifier:
keyid:2D:A2:51:C1:1A:C6:88:14:F5:27:F2:2E:55:DE:9A:C8:C5:7F:D6:6C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9191436/AAB802E8C78C11E8A76CD914C4F9AE02/LaJRwRrGiBT1J_IuVd6ayMV_1mw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LaJRwRrGiBT1J_IuVd6ayMV_1mw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9191436/AAB802E8C78C11E8A76CD914C4F9AE02/4AC75BA8FFE311EBB4FA4965C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.23.136.0/24
103.23.138.0/23
103.25.92.0/24
103.25.94.0/24
103.244.251.0/24
110.235.223.0/24
123.108.252.0/24
124.199.112.0/23
124.199.115.0-124.199.116.255
124.199.121.0-124.199.124.255
163.53.196.0/24
163.53.198.0/23
202.124.32.0/23
202.124.36.0-202.124.38.255
202.124.44.0/24
203.80.160.0/24
203.80.162.0-203.80.167.255
203.167.18.0/24
Signature Algorithm: sha256WithRSAEncryption
02:25:db:06:52:f6:be:20:6e:3c:5a:04:ff:9b:0b:09:41:ee:
f2:6a:4a:d7:1f:4c:47:96:95:d0:f6:88:da:c8:ee:ed:19:c3:
f8:49:b2:6f:0d:2c:a8:db:7d:f1:89:39:bf:91:7a:ac:10:26:
30:18:0c:7b:50:f9:dc:12:86:15:c1:8a:9f:6e:f2:13:dd:0c:
23:f4:51:87:61:d7:a1:8d:be:cf:69:0f:a3:9a:c4:1c:71:3f:
f6:d0:d0:de:43:15:b8:b4:32:91:43:10:1d:69:87:4d:f2:b4:
27:64:d3:72:f4:7e:fc:41:1c:d8:26:cd:54:53:73:1b:4b:25:
55:c3:a8:c7:b2:c5:fd:f3:88:ec:bb:3d:79:ff:a0:23:70:cd:
f7:0a:db:98:ef:e4:55:d5:9f:0a:41:b2:2e:a0:48:bf:0b:2f:
aa:4c:ee:fa:b2:49:bb:fc:a9:30:69:12:7b:07:c3:ae:f9:6a:
25:87:c7:fd:83:5d:eb:3a:55:dc:6d:26:46:6a:7f:95:77:22:
e0:ae:bd:7d:39:d1:e6:d2:de:79:4f:47:3f:ae:78:08:53:d6:
a6:03:0e:2b:f1:8b:d4:84:38:ad:c5:2d:c0:bb:27:45:a4:f0:
4f:c3:f1:96:a8:bb:a1:bb:31:90:98:b6:0b:50:2d:51:7d:86:
4e:30:a3:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 19:06:01 2024 by rpki-client on console-ams.rpki-client.org