Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9191436/AAB802E8C78C11E8A76CD914C4F9AE02/4AC75BA8FFE311EBB4FA4965C4F9AE02.roa
File: 4AC75BA8FFE311EBB4FA4965C4F9AE02.roa (raw, json)
Hash identifier: uiXqFpe7p03t8q4amaNnILB2dP35qSvpEy2rduPSvWw=
Subject key identifier: C7:C6:E9:8D:23:84:D2:F7:F5:EA:5E:3C:FC:87:18:B1:29:8D:2E:4F
Certificate issuer: /CN=A9191436/serialNumber=2DA251C11AC68814F527F22E55DE9AC8C57FD66C
Certificate serial: 1264
Authority key identifier: 2D:A2:51:C1:1A:C6:88:14:F5:27:F2:2E:55:DE:9A:C8:C5:7F:D6:6C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LaJRwRrGiBT1J_IuVd6ayMV_1mw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9191436/AAB802E8C78C11E8A76CD914C4F9AE02/4AC75BA8FFE311EBB4FA4965C4F9AE02.roa
Signing time: Tue 02 Apr 2024 17:55:54 +0000
ROA not before: Tue 02 Apr 2024 17:55:54 +0000
ROA not after: Wed 28 May 2025 00:00:00 +0000
asID: 133200
IP address blocks: 103.23.136.0/24 maxlen: 24
103.23.138.0/24 maxlen: 24
103.23.139.0/24 maxlen: 24
103.25.92.0/24 maxlen: 24
103.25.94.0/24 maxlen: 24
103.244.251.0/24 maxlen: 24
110.235.223.0/24 maxlen: 24
123.108.252.0/24 maxlen: 24
124.199.112.0/24 maxlen: 24
124.199.113.0/24 maxlen: 24
124.199.115.0/24 maxlen: 24
163.53.196.0/24 maxlen: 24
163.53.198.0/24 maxlen: 24
163.53.199.0/24 maxlen: 24
202.124.32.0/24 maxlen: 24
202.124.33.0/24 maxlen: 24
202.124.36.0/24 maxlen: 24
202.124.37.0/24 maxlen: 24
202.124.38.0/24 maxlen: 24
202.124.44.0/24 maxlen: 24
203.80.160.0/24 maxlen: 24
203.80.162.0/24 maxlen: 24
203.80.163.0/24 maxlen: 24
203.80.164.0/24 maxlen: 24
203.80.165.0/24 maxlen: 24
203.80.166.0/24 maxlen: 24
203.80.167.0/24 maxlen: 24
203.167.18.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9191436/AAB802E8C78C11E8A76CD914C4F9AE02/LaJRwRrGiBT1J_IuVd6ayMV_1mw.crl
rsync://rpki.apnic.net/member_repository/A9191436/AAB802E8C78C11E8A76CD914C4F9AE02/LaJRwRrGiBT1J_IuVd6ayMV_1mw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LaJRwRrGiBT1J_IuVd6ayMV_1mw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 23 May 2024 17:44:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4708 (0x1264)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9191436/serialNumber=2DA251C11AC68814F527F22E55DE9AC8C57FD66C
Validity
Not Before: Apr 2 17:55:54 2024 GMT
Not After : May 28 00:00:00 2025 GMT
Subject: CN=660c46aa-39c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:4b:c3:25:8e:13:95:e4:82:50:a7:1a:ff:48:
15:a3:7c:eb:11:ac:62:96:9d:b5:75:d6:98:75:d6:
86:e1:3b:83:cd:2c:56:07:bf:4f:dc:32:5c:37:58:
ae:ba:7e:63:79:24:b8:c8:51:d1:bb:fc:57:c3:04:
d4:de:5f:ef:33:97:26:ec:6c:0a:e8:dd:b9:5b:3e:
39:f4:cf:f9:94:95:13:dc:d3:c8:db:0a:30:40:fe:
45:90:94:7a:c3:68:fe:4f:b7:1d:ac:d0:e3:58:c7:
0e:96:3d:81:11:10:ea:16:35:d7:99:9c:59:84:6a:
46:55:2e:2a:5c:5f:e8:79:c9:8b:29:04:6f:97:d6:
1b:c6:cf:78:73:21:26:e5:93:3d:2c:31:83:82:27:
71:a6:23:c9:a3:78:e8:a6:b9:a9:ea:a8:96:b5:d8:
ef:64:25:e9:d7:48:2c:e9:05:cb:cd:fd:5a:a4:af:
12:46:60:53:cf:fa:93:d6:7d:a4:34:21:3b:c3:2c:
73:a7:7b:d8:aa:ea:38:f0:d4:ef:e3:fe:e2:1b:f4:
b8:03:b2:4e:89:2d:e6:21:a8:3c:c4:ad:3c:36:92:
b9:d7:e9:48:e9:24:01:7e:a9:81:5a:ca:c7:40:12:
f3:60:13:4d:f6:e8:dc:24:8a:d6:cf:a3:c6:aa:d4:
c8:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:C6:E9:8D:23:84:D2:F7:F5:EA:5E:3C:FC:87:18:B1:29:8D:2E:4F
X509v3 Authority Key Identifier:
keyid:2D:A2:51:C1:1A:C6:88:14:F5:27:F2:2E:55:DE:9A:C8:C5:7F:D6:6C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9191436/AAB802E8C78C11E8A76CD914C4F9AE02/LaJRwRrGiBT1J_IuVd6ayMV_1mw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LaJRwRrGiBT1J_IuVd6ayMV_1mw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9191436/AAB802E8C78C11E8A76CD914C4F9AE02/4AC75BA8FFE311EBB4FA4965C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.23.136.0/24
103.23.138.0/23
103.25.92.0/24
103.25.94.0/24
103.244.251.0/24
110.235.223.0/24
123.108.252.0/24
124.199.112.0/23
124.199.115.0/24
163.53.196.0/24
163.53.198.0/23
202.124.32.0/23
202.124.36.0-202.124.38.255
202.124.44.0/24
203.80.160.0/24
203.80.162.0-203.80.167.255
203.167.18.0/24
Signature Algorithm: sha256WithRSAEncryption
74:fb:91:43:80:81:ee:10:80:7e:5a:7f:fc:34:fe:63:a5:f1:
2a:ee:af:48:b4:1d:c3:e6:28:0c:6c:61:e1:35:c0:11:f8:80:
80:ff:bd:9c:21:c6:0e:9a:7d:fe:86:0d:ca:be:e7:26:69:92:
59:dc:06:da:40:3a:3e:f9:6c:97:1d:b8:60:82:21:b9:8e:82:
d2:1d:a8:96:59:84:cc:00:98:62:a7:d0:a1:07:1a:e0:9d:09:
c1:db:2e:4d:a5:8d:07:06:b7:08:3a:6f:7c:08:45:e5:e4:a3:
83:a6:86:8d:c1:23:d0:1d:0e:dc:b4:5d:1b:77:aa:dc:97:8c:
9c:c5:07:6c:e2:20:3d:91:51:65:9f:97:49:69:98:73:4e:bf:
85:11:15:27:47:34:21:68:33:ee:7c:54:42:1b:2a:75:de:5c:
46:d2:33:a4:c7:55:96:cc:af:53:87:f6:6b:27:68:63:d9:ae:
d9:3a:bc:89:cb:be:52:1b:2f:fd:d1:51:45:53:5e:8d:c5:ef:
93:91:3b:60:26:8d:f0:b7:d0:bb:c8:ce:1a:ad:8d:a1:84:1c:
f3:47:93:71:04:fe:5a:20:74:08:46:08:c3:eb:bb:13:c9:7a:
4d:43:a7:95:2e:2f:0b:3f:ba:79:e5:32:3c:73:72:21:3c:58:
f1:33:33:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 16 18:26:07 2024 by rpki-client on console-fra.rpki-client.org