Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9194522/DE20FC96275C11ED8DAC6A68C4F9AE02/9995D8D6276011EDAF21D06DC4F9AE02.roa
File: 9995D8D6276011EDAF21D06DC4F9AE02.roa (raw, json)
Hash identifier: De/y5SymwOEb9D5+rzbdyyNd+/EfQtgf39FuJEq4RYk=
Subject key identifier: 6D:00:7B:EC:C1:5C:03:C6:C4:02:04:C1:59:78:69:19:6B:4E:83:A4
Certificate issuer: /CN=A9194522/serialNumber=A6389C774DAD65D88DF2E6D4F43DE2A0B572EE7A
Certificate serial: 01D3
Authority key identifier: A6:38:9C:77:4D:AD:65:D8:8D:F2:E6:D4:F4:3D:E2:A0:B5:72:EE:7A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pjicd02tZdiN8ubU9D3ioLVy7no.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9194522/DE20FC96275C11ED8DAC6A68C4F9AE02/9995D8D6276011EDAF21D06DC4F9AE02.roa
Signing time: Sat 05 Oct 2024 02:36:12 +0000
ROA not before: Sat 05 Oct 2024 02:36:12 +0000
ROA not after: Mon 01 Dec 2025 00:00:00 +0000
asID: 150178
IP address blocks: 103.198.94.0/23 maxlen: 23
103.198.94.0/24 maxlen: 24
103.198.95.0/24 maxlen: 24
2400:a3a0::/32 maxlen: 32
2400:a3a0::/48 maxlen: 48
2400:a3a0:1::/48 maxlen: 48
2400:a3a0:2::/48 maxlen: 48
2400:a3a0:3::/48 maxlen: 48
2400:a3a0:4::/48 maxlen: 48
2400:a3a0:5::/48 maxlen: 48
2400:a3a0:6::/48 maxlen: 48
2400:a3a0:94::/48 maxlen: 48
2400:a3a0:95::/48 maxlen: 48
2400:a3a0:fb::/48 maxlen: 48
2400:a3a0:3000::/48 maxlen: 48
2400:a3a0:4000::/42 maxlen: 42
2400:a3a0:4001::/48 maxlen: 48
2400:a3a0:4002::/48 maxlen: 48
2400:a3a0:4003::/48 maxlen: 48
2400:a3a0:4004::/48 maxlen: 48
2400:a3a0:4005::/48 maxlen: 48
2400:a3a0:4006::/48 maxlen: 48
2400:a3a0:4007::/48 maxlen: 48
2400:a3a0:4008::/48 maxlen: 48
2400:a3a0:4009::/48 maxlen: 48
2400:a3a0:400a::/48 maxlen: 48
2400:a3a0:400b::/48 maxlen: 48
2400:a3a0:400c::/48 maxlen: 48
2400:a3a0:400d::/48 maxlen: 48
2400:a3a0:400e::/48 maxlen: 48
2400:a3a0:400f::/48 maxlen: 48
2400:a3a0:4010::/48 maxlen: 48
2400:a3a0:4011::/48 maxlen: 48
2400:a3a0:4012::/48 maxlen: 48
2400:a3a0:4013::/48 maxlen: 48
2400:a3a0:4014::/48 maxlen: 48
2400:a3a0:4015::/48 maxlen: 48
2400:a3a0:4016::/48 maxlen: 48
2400:a3a0:4017::/48 maxlen: 48
2400:a3a0:4018::/48 maxlen: 48
2400:a3a0:4019::/48 maxlen: 48
2400:a3a0:401a::/48 maxlen: 48
2400:a3a0:401b::/48 maxlen: 48
2400:a3a0:401c::/48 maxlen: 48
2400:a3a0:401d::/48 maxlen: 48
2400:a3a0:401e::/48 maxlen: 48
2400:a3a0:401f::/48 maxlen: 48
2400:a3a0:4020::/48 maxlen: 48
2400:a3a0:4021::/48 maxlen: 48
2400:a3a0:4022::/48 maxlen: 48
2400:a3a0:4023::/48 maxlen: 48
2400:a3a0:4024::/48 maxlen: 48
2400:a3a0:4025::/48 maxlen: 48
2400:a3a0:4026::/48 maxlen: 48
2400:a3a0:4027::/48 maxlen: 48
2400:a3a0:4028::/48 maxlen: 48
2400:a3a0:4029::/48 maxlen: 48
2400:a3a0:402a::/48 maxlen: 48
2400:a3a0:402b::/48 maxlen: 48
2400:a3a0:402c::/48 maxlen: 48
2400:a3a0:402d::/48 maxlen: 48
2400:a3a0:402e::/48 maxlen: 48
2400:a3a0:402f::/48 maxlen: 48
2400:a3a0:4030::/48 maxlen: 48
2400:a3a0:4031::/48 maxlen: 48
2400:a3a0:4032::/48 maxlen: 48
2400:a3a0:4033::/48 maxlen: 48
2400:a3a0:4034::/48 maxlen: 48
2400:a3a0:4035::/48 maxlen: 48
2400:a3a0:4036::/48 maxlen: 48
2400:a3a0:4037::/48 maxlen: 48
2400:a3a0:4038::/48 maxlen: 48
2400:a3a0:4039::/48 maxlen: 48
2400:a3a0:403a::/48 maxlen: 48
2400:a3a0:403b::/48 maxlen: 48
2400:a3a0:403c::/48 maxlen: 48
2400:a3a0:403d::/48 maxlen: 48
2400:a3a0:403e::/48 maxlen: 48
2400:a3a0:403f::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9194522/DE20FC96275C11ED8DAC6A68C4F9AE02/pjicd02tZdiN8ubU9D3ioLVy7no.crl
rsync://rpki.apnic.net/member_repository/A9194522/DE20FC96275C11ED8DAC6A68C4F9AE02/pjicd02tZdiN8ubU9D3ioLVy7no.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pjicd02tZdiN8ubU9D3ioLVy7no.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 01 Dec 2024 23:39:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 467 (0x1d3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9194522/serialNumber=A6389C774DAD65D88DF2E6D4F43DE2A0B572EE7A
Validity
Not Before: Oct 5 02:36:12 2024 GMT
Not After : Dec 1 00:00:00 2025 GMT
Subject: CN=6700a61c-c3dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:cd:6d:7f:61:bc:8a:2f:95:f3:3e:83:30:50:
7a:d2:77:3d:d9:08:84:63:bf:a1:e7:20:f7:20:37:
2a:69:01:26:90:7f:b3:b8:a0:ce:c9:46:d8:88:68:
8f:79:d4:81:e7:fa:a2:16:a8:d4:b8:c5:ab:1c:eb:
a0:e3:41:9f:98:85:0d:f9:65:e8:75:8e:e4:8f:ad:
b4:5b:68:77:e7:11:af:bc:08:19:56:36:8c:8e:61:
ba:a2:ee:ff:45:5e:a2:e3:62:93:11:e4:b1:9a:4b:
9a:58:73:43:c5:6a:49:5b:b9:d5:08:b7:fe:97:ac:
b1:1c:24:69:cb:82:67:44:7e:40:60:da:1d:e5:14:
5b:90:12:1e:21:20:06:81:02:00:c2:ab:fb:a8:5c:
89:f8:1c:5c:94:55:dd:75:ad:d3:ce:74:d8:52:58:
5e:c2:41:75:b7:b6:51:8a:e9:8f:33:b8:29:55:9c:
de:98:cf:41:0a:25:85:d0:d1:63:74:d0:0f:0d:1d:
b3:d3:f2:ff:82:2a:2e:d8:65:74:1b:df:d8:4c:72:
32:ba:ac:2d:99:60:4b:d2:1e:33:9e:06:3c:77:58:
f3:bf:e5:65:8d:dd:1f:ca:92:22:c7:70:27:7c:84:
db:f2:b9:e6:be:c7:38:0d:4e:fe:69:fb:b2:5a:dc:
bc:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:00:7B:EC:C1:5C:03:C6:C4:02:04:C1:59:78:69:19:6B:4E:83:A4
X509v3 Authority Key Identifier:
keyid:A6:38:9C:77:4D:AD:65:D8:8D:F2:E6:D4:F4:3D:E2:A0:B5:72:EE:7A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9194522/DE20FC96275C11ED8DAC6A68C4F9AE02/pjicd02tZdiN8ubU9D3ioLVy7no.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pjicd02tZdiN8ubU9D3ioLVy7no.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9194522/DE20FC96275C11ED8DAC6A68C4F9AE02/9995D8D6276011EDAF21D06DC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.198.94.0/23
IPv6:
2400:a3a0::/32
Signature Algorithm: sha256WithRSAEncryption
a9:f5:70:9f:eb:a2:cc:61:cb:13:96:2e:b6:20:e0:56:26:99:
fa:7a:1f:f7:6c:0d:6d:46:17:23:47:ae:c1:db:fb:00:fc:18:
eb:1e:60:34:47:4c:58:1c:1e:be:d2:85:26:a6:25:5f:e1:85:
3a:37:12:3a:73:96:8e:bf:66:0d:8c:29:df:83:62:fa:87:a6:
d9:29:fe:a3:e3:ad:d1:bf:d9:07:cf:01:30:cb:a2:8c:3f:05:
ca:6e:d8:c5:fd:d7:6c:c5:ad:80:ab:3b:e3:a1:68:0d:ab:7b:
34:da:7b:6a:b6:ae:33:e7:c3:6e:23:11:28:23:40:ee:d1:9d:
df:37:18:71:45:09:f5:80:8c:b7:0f:60:70:6b:79:3c:b5:4e:
08:d1:8c:28:44:45:fb:fd:be:80:93:3a:97:88:a8:5f:f4:70:
bd:2d:f4:94:2d:cb:0f:0c:b7:55:25:57:67:ad:93:ba:56:ec:
8e:9d:7b:12:11:e6:b6:cc:16:81:89:dc:a6:31:ad:05:23:b1:
07:af:cb:9a:d8:4d:4c:40:f7:c2:8d:01:91:d7:49:fc:7c:99:
15:20:c7:2f:9f:59:14:8f:2c:ea:64:6c:21:c0:ba:4d:98:e7:
fa:6c:44:96:c0:54:a8:b1:f7:e6:ef:0c:c4:fe:6b:04:d9:a1:
82:d3:d4:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 03:00:24 2024 by rpki-client on console-fra.rpki-client.org