Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A919F0DA/FC61E0081D6711E28C1828A408B02CD2/8272E36003BD11EBB416B77DC4F9AE02.roa
File: 8272E36003BD11EBB416B77DC4F9AE02.roa (raw, json)
Hash identifier: P6wRPuTbM4XQTVUEhxeqbPBR4ZVHv/+RVLcmAoyjIEs=
Subject key identifier: E6:83:7B:87:01:70:28:1C:82:E6:DB:C1:8C:24:1D:36:92:2F:A9:2B
Certificate issuer: /CN=A919F0DA/serialNumber=082F1EE92FEA6373FDA1D5AEC46E2F2D8AE8AC87
Certificate serial: 066F
Authority key identifier: 08:2F:1E:E9:2F:EA:63:73:FD:A1:D5:AE:C4:6E:2F:2D:8A:E8:AC:87
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/CC8e6S_qY3P9odWuxG4vLYrorIc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A919F0DA/FC61E0081D6711E28C1828A408B02CD2/8272E36003BD11EBB416B77DC4F9AE02.roa
Signing time: Thu 22 Jun 2023 14:40:07 +0000
ROA not before: Thu 22 Jun 2023 14:40:07 +0000
ROA not after: Sat 31 Aug 2024 00:00:00 +0000
asID: 55824
IP address blocks: 164.100.81.0/24 maxlen: 24
164.100.96.0/24 maxlen: 24
164.100.125.0/24 maxlen: 24
164.100.126.0/24 maxlen: 24
164.100.130.0/24 maxlen: 24
164.100.131.0/24 maxlen: 24
164.100.132.0/24 maxlen: 24
164.100.133.0/24 maxlen: 24
164.100.134.0/24 maxlen: 24
164.100.138.0/24 maxlen: 24
164.100.142.0/24 maxlen: 24
164.100.146.0/24 maxlen: 24
164.100.181.0/24 maxlen: 24
164.100.189.0/24 maxlen: 24
164.100.196.0/24 maxlen: 24
164.100.201.0/24 maxlen: 24
164.100.217.0/24 maxlen: 24
164.100.222.0/24 maxlen: 24
164.100.223.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A919F0DA/FC61E0081D6711E28C1828A408B02CD2/CC8e6S_qY3P9odWuxG4vLYrorIc.crl
rsync://rpki.apnic.net/member_repository/A919F0DA/FC61E0081D6711E28C1828A408B02CD2/CC8e6S_qY3P9odWuxG4vLYrorIc.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/CC8e6S_qY3P9odWuxG4vLYrorIc.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 25 May 2024 14:15:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1647 (0x66f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A919F0DA/serialNumber=082F1EE92FEA6373FDA1D5AEC46E2F2D8AE8AC87
Validity
Not Before: Jun 22 14:40:07 2023 GMT
Not After : Aug 31 00:00:00 2024 GMT
Subject: CN=64945d46-4a30
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:a7:f3:65:c9:3c:a6:85:2a:40:bf:73:e5:44:
a6:e8:e8:a5:3f:5d:d9:e1:9f:14:17:33:89:39:6d:
5a:af:f7:70:e1:20:c5:ee:c7:60:12:d2:d2:6f:e5:
b2:72:8c:3a:db:a2:1c:4b:86:7c:c6:a5:a3:49:c5:
58:1b:3d:21:57:5b:cb:70:30:58:94:05:32:27:9a:
6b:6d:90:6e:76:ed:95:16:ca:3d:34:7b:f0:a1:02:
6d:d3:60:e6:37:2b:37:6e:b0:16:86:b3:49:c1:c3:
84:db:b6:56:f6:0c:00:10:90:7f:2b:81:41:e2:7c:
18:f7:81:c4:81:13:30:fc:4c:5d:71:e6:62:71:41:
34:d9:0b:e6:22:a0:70:ea:cb:61:5b:b2:eb:80:6e:
b7:3e:c0:65:62:d6:d8:09:78:ee:d4:7c:d0:06:6b:
66:c1:3a:c0:29:c5:60:9c:a5:76:e2:96:2c:81:16:
85:b8:bd:8a:4c:09:33:6a:b1:bb:e5:ee:10:12:fb:
ea:d0:64:81:b2:98:b2:7c:91:ae:eb:37:44:d9:09:
79:03:a5:c1:2d:02:e1:dd:ca:ac:e9:27:f9:bd:2e:
ed:77:f4:78:d0:d7:8a:e1:8b:ed:db:12:10:4e:4a:
75:76:94:88:88:28:37:3e:b8:34:93:53:eb:99:fc:
ae:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:83:7B:87:01:70:28:1C:82:E6:DB:C1:8C:24:1D:36:92:2F:A9:2B
X509v3 Authority Key Identifier:
keyid:08:2F:1E:E9:2F:EA:63:73:FD:A1:D5:AE:C4:6E:2F:2D:8A:E8:AC:87
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A919F0DA/FC61E0081D6711E28C1828A408B02CD2/CC8e6S_qY3P9odWuxG4vLYrorIc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/CC8e6S_qY3P9odWuxG4vLYrorIc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919F0DA/FC61E0081D6711E28C1828A408B02CD2/8272E36003BD11EBB416B77DC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
164.100.81.0/24
164.100.96.0/24
164.100.125.0-164.100.126.255
164.100.130.0-164.100.134.255
164.100.138.0/24
164.100.142.0/24
164.100.146.0/24
164.100.181.0/24
164.100.189.0/24
164.100.196.0/24
164.100.201.0/24
164.100.217.0/24
164.100.222.0/23
Signature Algorithm: sha256WithRSAEncryption
2d:3e:d3:5b:48:df:1f:f0:c5:81:68:f9:7f:2f:28:f0:21:22:
5a:3c:c0:51:2c:68:d6:ff:48:ef:ec:6d:b9:91:1f:0d:a1:95:
cd:7e:ed:52:7d:41:65:5a:a1:1e:ef:56:eb:f7:aa:be:5d:a3:
41:b1:de:7a:7f:16:ea:8f:aa:2d:19:6c:8b:02:eb:27:3b:d7:
2b:18:a5:66:1e:74:76:c5:56:f6:19:cb:2d:ec:8a:42:8f:6b:
34:2b:fd:f5:15:09:c0:c2:ae:46:db:f5:dd:f2:e4:b1:00:51:
ab:28:b8:ee:2a:ec:e8:4d:f4:dd:75:7b:21:6e:76:a1:0d:7d:
76:22:f4:83:dc:d2:a0:c7:c7:f9:d6:0a:8f:e6:bc:4a:ef:45:
67:a9:6a:f7:26:40:9a:ca:71:be:36:48:ed:df:46:57:24:96:
40:f5:d9:ff:34:e8:d7:04:0e:78:70:1e:df:eb:4a:0f:9f:4f:
2d:4c:49:73:7e:9e:5e:ee:f6:f3:fc:cc:be:99:34:71:7c:d3:
db:f7:2c:66:ab:31:2f:fe:e3:da:3f:e0:11:fb:fe:90:69:fc:
8a:b7:7c:3e:28:f0:91:67:87:06:b5:fc:d6:68:0d:71:db:54:
fd:7e:9d:e1:8a:12:86:13:df:95:5a:e3:61:5f:4a:f2:c1:ff:
1b:21:67:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 15:26:05 2024 by rpki-client on console-fra.rpki-client.org