Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9194522/DE20FC96275C11ED8DAC6A68C4F9AE02/9995D8D6276011EDAF21D06DC4F9AE02.roa
File: 9995D8D6276011EDAF21D06DC4F9AE02.roa (raw, json)
Hash identifier: ekmUpPiW79X0VGiL60ukNYN9VQblLqzAJqiA9hRHx2E=
Subject key identifier: CE:E6:59:FB:68:AF:B7:7F:DE:41:43:88:1D:D6:26:4F:7A:5B:1B:48
Certificate issuer: /CN=A9194522/serialNumber=A6389C774DAD65D88DF2E6D4F43DE2A0B572EE7A
Certificate serial: 0156
Authority key identifier: A6:38:9C:77:4D:AD:65:D8:8D:F2:E6:D4:F4:3D:E2:A0:B5:72:EE:7A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pjicd02tZdiN8ubU9D3ioLVy7no.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9194522/DE20FC96275C11ED8DAC6A68C4F9AE02/9995D8D6276011EDAF21D06DC4F9AE02.roa
Signing time: Wed 14 Feb 2024 16:59:16 +0000
ROA not before: Wed 14 Feb 2024 16:59:16 +0000
ROA not after: Sun 01 Dec 2024 00:00:00 +0000
asID: 150178
IP address blocks: 103.198.94.0/23 maxlen: 23
103.198.94.0/24 maxlen: 24
103.198.95.0/24 maxlen: 24
2400:a3a0::/32 maxlen: 32
2400:a3a0::/48 maxlen: 48
2400:a3a0:1::/48 maxlen: 48
2400:a3a0:2::/48 maxlen: 48
2400:a3a0:3::/48 maxlen: 48
2400:a3a0:4::/48 maxlen: 48
2400:a3a0:5::/48 maxlen: 48
2400:a3a0:6::/48 maxlen: 48
2400:a3a0:94::/48 maxlen: 48
2400:a3a0:fb::/48 maxlen: 48
2400:a3a0:3000::/48 maxlen: 48
2400:a3a0:4000::/42 maxlen: 42
2400:a3a0:4001::/48 maxlen: 48
2400:a3a0:4002::/48 maxlen: 48
2400:a3a0:4003::/48 maxlen: 48
2400:a3a0:4004::/48 maxlen: 48
2400:a3a0:4005::/48 maxlen: 48
2400:a3a0:4006::/48 maxlen: 48
2400:a3a0:4007::/48 maxlen: 48
2400:a3a0:4008::/48 maxlen: 48
2400:a3a0:4009::/48 maxlen: 48
2400:a3a0:400a::/48 maxlen: 48
2400:a3a0:400b::/48 maxlen: 48
2400:a3a0:400c::/48 maxlen: 48
2400:a3a0:400d::/48 maxlen: 48
2400:a3a0:400e::/48 maxlen: 48
2400:a3a0:400f::/48 maxlen: 48
2400:a3a0:4010::/48 maxlen: 48
2400:a3a0:4011::/48 maxlen: 48
2400:a3a0:4012::/48 maxlen: 48
2400:a3a0:4013::/48 maxlen: 48
2400:a3a0:4014::/48 maxlen: 48
2400:a3a0:4015::/48 maxlen: 48
2400:a3a0:4016::/48 maxlen: 48
2400:a3a0:4017::/48 maxlen: 48
2400:a3a0:4018::/48 maxlen: 48
2400:a3a0:4019::/48 maxlen: 48
2400:a3a0:401a::/48 maxlen: 48
2400:a3a0:401b::/48 maxlen: 48
2400:a3a0:401c::/48 maxlen: 48
2400:a3a0:401d::/48 maxlen: 48
2400:a3a0:401e::/48 maxlen: 48
2400:a3a0:401f::/48 maxlen: 48
2400:a3a0:4020::/48 maxlen: 48
2400:a3a0:4021::/48 maxlen: 48
2400:a3a0:4022::/48 maxlen: 48
2400:a3a0:4023::/48 maxlen: 48
2400:a3a0:4024::/48 maxlen: 48
2400:a3a0:4025::/48 maxlen: 48
2400:a3a0:4026::/48 maxlen: 48
2400:a3a0:4027::/48 maxlen: 48
2400:a3a0:4028::/48 maxlen: 48
2400:a3a0:4029::/48 maxlen: 48
2400:a3a0:402a::/48 maxlen: 48
2400:a3a0:402b::/48 maxlen: 48
2400:a3a0:402c::/48 maxlen: 48
2400:a3a0:402d::/48 maxlen: 48
2400:a3a0:402e::/48 maxlen: 48
2400:a3a0:402f::/48 maxlen: 48
2400:a3a0:4030::/48 maxlen: 48
2400:a3a0:4031::/48 maxlen: 48
2400:a3a0:4032::/48 maxlen: 48
2400:a3a0:4033::/48 maxlen: 48
2400:a3a0:4034::/48 maxlen: 48
2400:a3a0:4035::/48 maxlen: 48
2400:a3a0:4036::/48 maxlen: 48
2400:a3a0:4037::/48 maxlen: 48
2400:a3a0:4038::/48 maxlen: 48
2400:a3a0:4039::/48 maxlen: 48
2400:a3a0:403a::/48 maxlen: 48
2400:a3a0:403b::/48 maxlen: 48
2400:a3a0:403c::/48 maxlen: 48
2400:a3a0:403d::/48 maxlen: 48
2400:a3a0:403e::/48 maxlen: 48
2400:a3a0:403f::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9194522/DE20FC96275C11ED8DAC6A68C4F9AE02/pjicd02tZdiN8ubU9D3ioLVy7no.crl
rsync://rpki.apnic.net/member_repository/A9194522/DE20FC96275C11ED8DAC6A68C4F9AE02/pjicd02tZdiN8ubU9D3ioLVy7no.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pjicd02tZdiN8ubU9D3ioLVy7no.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 May 2024 04:38:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 342 (0x156)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9194522/serialNumber=A6389C774DAD65D88DF2E6D4F43DE2A0B572EE7A
Validity
Not Before: Feb 14 16:59:16 2024 GMT
Not After : Dec 1 00:00:00 2024 GMT
Subject: CN=65ccf164-0d3d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:34:ad:c0:b4:a2:f7:20:19:26:c1:54:de:6d:
9c:15:8e:d0:e4:b1:e5:df:33:17:f2:4e:cb:b9:09:
9a:64:1f:cc:c1:6e:28:5b:a3:f9:d8:3c:df:2d:57:
3f:7e:24:58:4a:70:40:76:8d:ee:b4:1e:5f:25:82:
a8:b7:26:8c:b1:81:b2:da:6e:23:77:28:62:b1:b8:
e6:16:a0:16:fc:f6:be:83:ce:a6:fc:c4:62:2d:84:
49:99:97:45:c3:75:73:17:e9:17:e6:26:18:e4:f0:
1b:7e:64:a5:eb:7e:47:35:ec:39:eb:31:7a:83:d5:
0e:d7:60:f5:4b:81:ce:c8:7e:1e:52:53:a8:2c:83:
da:ac:63:3a:58:5e:f7:8c:21:13:86:09:de:8a:73:
25:4f:68:b8:8e:2b:e2:d5:6f:4b:c1:77:31:b8:61:
d9:b5:ae:5c:f3:1f:71:9f:73:32:f2:87:e4:f7:c8:
65:6c:52:4b:f3:a8:18:78:df:8d:c2:e9:e2:55:9a:
fd:52:b5:66:2c:bc:c2:89:1a:98:48:e6:39:d5:e8:
c8:a9:e5:51:0a:d2:14:ca:5d:91:4c:c8:9c:b1:ab:
16:f9:9c:64:7f:45:d2:96:48:cf:0e:a6:f3:66:82:
5c:c1:57:fb:03:1f:a2:cb:68:7a:2e:0d:db:7e:9d:
74:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:E6:59:FB:68:AF:B7:7F:DE:41:43:88:1D:D6:26:4F:7A:5B:1B:48
X509v3 Authority Key Identifier:
keyid:A6:38:9C:77:4D:AD:65:D8:8D:F2:E6:D4:F4:3D:E2:A0:B5:72:EE:7A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9194522/DE20FC96275C11ED8DAC6A68C4F9AE02/pjicd02tZdiN8ubU9D3ioLVy7no.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pjicd02tZdiN8ubU9D3ioLVy7no.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9194522/DE20FC96275C11ED8DAC6A68C4F9AE02/9995D8D6276011EDAF21D06DC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.198.94.0/23
IPv6:
2400:a3a0::/32
Signature Algorithm: sha256WithRSAEncryption
1f:e6:64:88:b4:ba:96:13:1d:d5:11:bb:c7:0f:1f:b8:88:27:
b7:b1:08:8b:7c:49:f3:a8:e5:5f:a9:da:5b:f8:2d:8c:01:cc:
90:86:05:da:02:7b:f8:0f:18:fa:f6:9b:41:99:9a:4d:33:34:
59:bc:c0:72:09:e7:0a:d5:22:d0:89:bb:81:c4:99:96:24:cb:
0e:79:2e:50:4f:9b:d1:ba:12:ab:df:89:2b:63:d4:de:a5:02:
b7:dd:12:eb:e9:53:3a:ee:88:76:71:93:bc:ce:88:ea:3d:21:
e9:12:c5:1a:53:55:6d:7c:e0:e4:14:71:19:62:89:cc:0f:bc:
a0:3d:4a:d2:e9:af:35:ec:d6:7e:4f:69:68:f2:15:dd:32:f3:
03:be:9e:7a:80:5f:06:90:8b:6b:69:c5:f2:c3:aa:b5:ca:14:
f5:12:5f:27:5f:f3:d5:01:3c:24:43:30:e3:39:8a:31:93:18:
fc:95:4f:a2:22:c8:87:ff:6e:dc:6e:6f:23:73:f9:f5:bf:fc:
b3:4b:a3:08:51:0e:a4:2a:6e:b5:d1:8e:ae:ad:82:79:08:57:
6e:50:b6:02:52:89:ef:5f:2c:0e:22:9f:04:45:66:e8:cd:72:
ea:0d:90:85:85:01:74:3c:0b:a2:72:e9:2c:7e:fc:f2:75:5a:
18:cd:f9:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 23 05:07:07 2024 by rpki-client on console-fra.rpki-client.org