Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A919536C/6DE3CE7C366011EE88E0F530C4F9AE02/80B19E569D2211EF9347847CC4F9AE02.roa
File: 80B19E569D2211EF9347847CC4F9AE02.roa (raw, json)
Hash identifier: 9ZtPkhQguMFKS+J3dbwsQGRe1bfxO+SzVsu3mqO53M8=
Subject key identifier: C4:DA:DD:CE:5C:81:8F:1F:E6:DE:3E:5F:75:01:60:BA:48:7E:2E:E8
Certificate issuer: /CN=A919536C/serialNumber=71F40218C1AF47C5E993A21A2B29284E4C32C934
Certificate serial: 012C
Authority key identifier: 71:F4:02:18:C1:AF:47:C5:E9:93:A2:1A:2B:29:28:4E:4C:32:C9:34
Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/cfQCGMGvR8Xpk6IaKykoTkwyyTQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A919536C/6DE3CE7C366011EE88E0F530C4F9AE02/80B19E569D2211EF9347847CC4F9AE02.roa
Signing time: Thu 07 Nov 2024 16:08:19 +0000
ROA not before: Thu 07 Nov 2024 16:08:19 +0000
ROA not after: Sun 31 Aug 2025 00:00:00 +0000
asID: 132280
IP address blocks: 83.118.0.0/17 maxlen: 18
83.118.0.0/21 maxlen: 23
83.118.8.0/21 maxlen: 23
83.118.16.0/21 maxlen: 23
83.118.24.0/21 maxlen: 23
83.118.26.0/23 maxlen: 24
83.118.32.0/21 maxlen: 23
83.118.32.0/24 maxlen: 24
83.118.35.0/24 maxlen: 24
83.118.36.0/24 maxlen: 24
83.118.40.0/21 maxlen: 23
83.118.45.0/24 maxlen: 24
83.118.48.0/21 maxlen: 23
83.118.52.0/24 maxlen: 24
83.118.55.0/24 maxlen: 24
83.118.56.0/21 maxlen: 23
83.118.56.0/23 maxlen: 24
83.118.61.0/24 maxlen: 24
83.118.64.0/21 maxlen: 23
83.118.65.0/24 maxlen: 24
83.118.72.0/21 maxlen: 23
83.118.75.0/24 maxlen: 24
83.118.80.0/21 maxlen: 23
83.118.88.0/21 maxlen: 23
83.118.92.0/24 maxlen: 24
83.118.96.0/21 maxlen: 23
83.118.98.0/24 maxlen: 24
83.118.104.0/21 maxlen: 23
83.118.105.0/24 maxlen: 24
83.118.109.0/24 maxlen: 24
83.118.111.0/24 maxlen: 24
83.118.112.0/21 maxlen: 23
83.118.112.0/24 maxlen: 24
83.118.114.0/24 maxlen: 24
83.118.118.0/24 maxlen: 24
83.118.120.0/21 maxlen: 23
83.118.120.0/23 maxlen: 24
83.118.124.0/24 maxlen: 24
83.118.126.0/24 maxlen: 24
87.124.0.0/17 maxlen: 23
87.124.1.0/24 maxlen: 24
87.124.2.0/23 maxlen: 24
87.124.4.0/22 maxlen: 24
87.124.8.0/21 maxlen: 24
87.124.16.0/20 maxlen: 24
87.124.32.0/19 maxlen: 24
87.124.64.0/18 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A919536C/6DE3CE7C366011EE88E0F530C4F9AE02/cfQCGMGvR8Xpk6IaKykoTkwyyTQ.crl
rsync://rpki.apnic.net/member_repository/A919536C/6DE3CE7C366011EE88E0F530C4F9AE02/cfQCGMGvR8Xpk6IaKykoTkwyyTQ.mft
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/cfQCGMGvR8Xpk6IaKykoTkwyyTQ.cer
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 28 Nov 2024 02:50:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 300 (0x12c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A919536C/serialNumber=71F40218C1AF47C5E993A21A2B29284E4C32C934
Validity
Not Before: Nov 7 16:08:19 2024 GMT
Not After : Aug 31 00:00:00 2025 GMT
Subject: CN=672ce5f2-dd8c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:1c:8b:80:8a:17:be:d1:61:72:79:73:fb:2d:
d3:00:5b:98:11:13:9a:f5:46:23:45:1e:ae:e2:25:
a8:68:d5:58:1d:b3:f2:61:a3:5e:df:bd:c4:ea:83:
43:95:e5:cc:ec:8a:03:cf:db:b8:c3:e2:72:49:87:
75:5f:b5:fe:14:cc:4b:58:5f:1d:03:f3:b9:7a:97:
19:3e:e2:b6:13:87:81:82:76:70:e1:c3:f9:43:dc:
48:00:16:e6:75:f6:bf:88:0d:39:c5:45:ff:ac:0e:
60:ba:f9:6c:14:d7:6f:74:b5:bf:c1:77:35:76:98:
35:ed:ca:d7:5a:58:eb:ea:90:fc:0a:03:22:77:74:
42:ed:5e:ff:6a:2a:da:76:37:ae:0a:e3:72:cc:a3:
4c:e9:e5:09:83:5a:ac:c1:8c:e8:b8:5b:9f:f6:cf:
6d:35:15:24:61:e1:ed:1c:10:43:c9:26:bd:99:15:
4b:86:7e:d0:68:e5:7d:ed:65:4a:7d:56:93:f5:4c:
74:7e:88:2b:fb:4f:bc:bd:66:aa:4a:c1:3a:9e:b3:
c7:9c:8a:e0:e3:ce:1f:e1:e0:6a:be:c5:76:07:9b:
da:f5:2c:3d:e6:47:83:a4:c9:41:f2:7a:43:fe:08:
a2:8b:c0:69:6e:c6:1f:5e:7e:b4:cc:14:b1:ff:49:
76:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:DA:DD:CE:5C:81:8F:1F:E6:DE:3E:5F:75:01:60:BA:48:7E:2E:E8
X509v3 Authority Key Identifier:
keyid:71:F4:02:18:C1:AF:47:C5:E9:93:A2:1A:2B:29:28:4E:4C:32:C9:34
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A919536C/6DE3CE7C366011EE88E0F530C4F9AE02/cfQCGMGvR8Xpk6IaKykoTkwyyTQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/cfQCGMGvR8Xpk6IaKykoTkwyyTQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919536C/6DE3CE7C366011EE88E0F530C4F9AE02/80B19E569D2211EF9347847CC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
83.118.0.0/17
87.124.0.0/17
Signature Algorithm: sha256WithRSAEncryption
38:5b:95:8d:2a:90:86:16:f5:e0:39:a3:85:41:f2:14:9f:b7:
cd:49:78:8b:5c:c3:58:be:5e:c9:e8:2f:cc:e5:2e:b9:f6:3e:
c3:49:4b:c4:8c:f1:b2:14:ca:ef:7a:1d:3a:c7:2b:87:9b:76:
2a:33:25:35:28:bc:b3:46:c1:1f:a3:29:af:f8:53:6c:c1:3b:
9a:45:10:80:55:50:d2:2e:a9:71:6a:99:b2:97:bc:a3:7b:05:
a6:28:7a:5f:ea:3a:33:de:c7:3b:44:2a:77:60:8b:95:7e:b9:
c0:91:b3:1c:da:f0:02:10:be:84:e5:c0:42:54:be:3e:64:de:
fe:4b:0a:92:9c:e3:98:c2:28:66:3b:9b:95:05:81:f7:fe:f7:
83:e9:35:92:a3:99:b4:39:ff:f1:4e:28:d9:3b:af:3b:2b:3f:
27:6d:58:8f:9e:3c:88:64:99:d7:c3:5e:f7:f9:26:57:03:f3:
19:86:3d:b6:98:f0:72:e4:65:0f:22:71:8c:e2:85:32:52:55:
54:22:db:0b:e9:e1:88:a2:2c:da:12:2b:3a:4e:4e:2b:af:9f:
87:c1:d0:0d:02:96:c9:57:fa:6a:de:4b:c8:66:c2:ad:5e:4f:
b4:01:a7:59:b5:1c:95:4c:1b:cc:0d:43:ee:d3:fa:94:df:c6:
79:47:c1:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 05:37:13 2024 by rpki-client on console-ams.rpki-client.org