Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9196E6C/426E3DBA1D8D11E293C4DAEA08B02CD2/DD5C8412E84511EB87AD6B49C4F9AE02.roa
File: DD5C8412E84511EB87AD6B49C4F9AE02.roa (raw, json)
Hash identifier: lP5NMv3I1CJOsA7UOND+xbg0rBaa2Avz8htJs1Lu9+0=
Subject key identifier: 0E:B3:1B:57:9D:8C:08:35:2F:F3:96:AC:6B:16:00:A0:EA:EE:70:8A
Certificate issuer: /CN=A9196E6C/serialNumber=8F31602F4EBE455E099C0049BB7B0066558B9D89
Certificate serial: 33CD
Authority key identifier: 8F:31:60:2F:4E:BE:45:5E:09:9C:00:49:BB:7B:00:66:55:8B:9D:89
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jzFgL06-RV4JnABJu3sAZlWLnYk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9196E6C/426E3DBA1D8D11E293C4DAEA08B02CD2/DD5C8412E84511EB87AD6B49C4F9AE02.roa
Signing time: Thu 04 Apr 2024 14:51:04 +0000
ROA not before: Thu 04 Apr 2024 14:51:04 +0000
ROA not after: Wed 28 May 2025 00:00:00 +0000
asID: 24028
IP address blocks: 43.251.136.0/22 maxlen: 22
43.251.136.0/23 maxlen: 24
43.251.139.0/24 maxlen: 24
103.21.152.0/22 maxlen: 24
182.54.192.0/19 maxlen: 23
182.54.192.0/20 maxlen: 24
182.54.208.0/21 maxlen: 24
182.54.217.0/24 maxlen: 24
182.54.218.0/23 maxlen: 24
182.54.220.0/22 maxlen: 24
202.46.112.0/20 maxlen: 24
203.142.32.0/19 maxlen: 24
2405:7c00:1000::/36 maxlen: 36
2405:7c00:2000::/36 maxlen: 36
2405:7c00:3000::/36 maxlen: 36
2405:7c00:4000::/36 maxlen: 36
2405:7c00:5000::/36 maxlen: 36
2405:7c00:6000::/36 maxlen: 36
2405:7c00:7000::/36 maxlen: 36
2405:7c00:8000::/36 maxlen: 36
2405:7c00:9000::/36 maxlen: 36
2405:7c00:b000::/36 maxlen: 36
2405:7c00:c000::/36 maxlen: 36
2405:7c00:d000::/36 maxlen: 36
2405:7c00:e000::/36 maxlen: 36
2405:7c00:f000::/36 maxlen: 36
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9196E6C/426E3DBA1D8D11E293C4DAEA08B02CD2/jzFgL06-RV4JnABJu3sAZlWLnYk.crl
rsync://rpki.apnic.net/member_repository/A9196E6C/426E3DBA1D8D11E293C4DAEA08B02CD2/jzFgL06-RV4JnABJu3sAZlWLnYk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jzFgL06-RV4JnABJu3sAZlWLnYk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 25 May 2024 14:41:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13261 (0x33cd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9196E6C/serialNumber=8F31602F4EBE455E099C0049BB7B0066558B9D89
Validity
Not Before: Apr 4 14:51:04 2024 GMT
Not After : May 28 00:00:00 2025 GMT
Subject: CN=660ebe57-cd70
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:a3:79:54:f8:a0:5f:cc:a4:c6:46:c5:7e:a2:
f6:ca:83:6a:d4:78:97:d2:6b:c4:ba:88:48:47:76:
6c:51:7c:7a:8b:ba:1e:3a:15:b0:aa:ee:fb:21:bc:
f3:1f:01:f1:35:f7:0c:ec:e1:92:02:0b:c6:e3:12:
49:05:d7:16:75:ab:90:de:b1:06:12:34:fc:0c:09:
ee:c9:6f:6f:2f:96:10:02:37:a5:a8:fa:1b:51:be:
7a:fe:3f:42:a4:25:95:ee:fa:1e:f1:fd:91:a4:15:
fc:dd:ea:d5:fb:b2:82:2b:6e:ad:03:92:6c:d4:31:
25:2b:bb:9b:51:04:ed:f5:2c:46:ba:82:42:3d:45:
83:07:30:9d:3d:bc:0a:8d:c2:4e:0f:a3:24:94:d1:
82:ca:dd:41:a3:8d:e8:62:c3:23:ba:d0:58:48:b6:
bb:13:9e:22:0d:70:f5:dc:21:e0:79:7c:30:46:1f:
5a:e7:bd:9d:28:9e:b0:e9:78:23:20:09:07:5a:7b:
b7:f7:1b:ff:b2:ff:83:d7:2b:b7:c3:51:17:da:ba:
90:93:cd:ec:f6:6f:8a:49:ab:62:ed:80:57:15:63:
cd:7d:ee:59:2d:d1:38:0f:55:ed:52:a3:6c:0f:6b:
ba:a2:39:47:c0:0c:8b:d5:c4:b1:64:b7:5e:36:9f:
b7:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:B3:1B:57:9D:8C:08:35:2F:F3:96:AC:6B:16:00:A0:EA:EE:70:8A
X509v3 Authority Key Identifier:
keyid:8F:31:60:2F:4E:BE:45:5E:09:9C:00:49:BB:7B:00:66:55:8B:9D:89
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9196E6C/426E3DBA1D8D11E293C4DAEA08B02CD2/jzFgL06-RV4JnABJu3sAZlWLnYk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jzFgL06-RV4JnABJu3sAZlWLnYk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9196E6C/426E3DBA1D8D11E293C4DAEA08B02CD2/DD5C8412E84511EB87AD6B49C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
43.251.136.0/22
103.21.152.0/22
182.54.192.0/19
202.46.112.0/20
203.142.32.0/19
IPv6:
2405:7c00:1000::-2405:7c00:9fff:ffff:ffff:ffff:ffff:ffff
2405:7c00:b000::-2405:7c00:ffff:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
3f:8c:ba:20:1c:ac:4c:97:b0:fb:38:a0:26:2b:a4:4f:cb:79:
dd:47:47:de:d0:b8:0e:1c:3d:4f:29:d8:d6:8d:f0:95:ab:84:
c9:0a:ea:9a:47:06:de:7e:67:2d:80:88:27:40:3c:a8:71:cf:
db:1c:ce:69:51:2a:26:24:5b:06:d7:70:70:05:0c:f8:47:4c:
ba:11:6b:83:cb:a7:3e:3e:2d:1f:ee:7f:7a:d0:06:06:64:cc:
e7:c0:e2:1f:dd:fe:6b:85:e3:3a:7e:6a:ee:65:51:ad:05:f0:
af:a1:e6:97:28:37:3b:a3:05:a3:b6:27:ab:d9:b8:da:ac:91:
3c:e4:d8:42:cd:aa:49:6c:19:25:30:ca:14:ee:14:7d:c4:52:
b0:84:3d:71:5b:ea:2e:84:ed:27:c3:d7:f0:ae:ad:38:3a:16:
07:a9:04:59:3c:37:94:32:03:39:cb:f1:8c:7b:7a:28:12:5a:
69:10:35:01:3a:5b:f6:9f:fb:cc:d8:09:b6:06:a0:3b:a8:68:
a6:0f:f9:f6:d5:6c:89:81:4d:65:9f:d3:37:56:8f:38:1f:7c:
52:19:e0:c4:04:6b:57:a7:d6:69:8b:66:74:a2:5f:e6:ad:76:
6c:1c:8a:0a:94:92:6e:bb:ca:53:cb:b9:c4:52:13:ba:29:ff:
b9:0a:da:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 15:58:23 2024 by rpki-client on console-ams.rpki-client.org