Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A0832/9DAF780E1D9411E29901F3F808B02CD2/9E1F70A4844911EAA528AD63C4F9AE02.roa
File: 9E1F70A4844911EAA528AD63C4F9AE02.roa (raw, json)
Hash identifier: r7v3xSqKRg362nT6+bK/58sR5Z8YroSxwlVV2Uh5tfU=
Subject key identifier: 09:87:3A:BE:15:6A:CC:73:FD:81:29:70:2B:09:3E:1B:1A:58:D9:44
Certificate issuer: /CN=A91A0832/serialNumber=9ED9055107C70F85BB91A8DA0270B5CA760AEB54
Certificate serial: 35EF
Authority key identifier: 9E:D9:05:51:07:C7:0F:85:BB:91:A8:DA:02:70:B5:CA:76:0A:EB:54
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ntkFUQfHD4W7kajaAnC1ynYK61Q.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A0832/9DAF780E1D9411E29901F3F808B02CD2/9E1F70A4844911EAA528AD63C4F9AE02.roa
Signing time: Thu 04 Apr 2024 15:21:17 +0000
ROA not before: Thu 04 Apr 2024 15:21:17 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 56167
IP address blocks: 58.181.100.0/23 maxlen: 24
58.181.102.0/23 maxlen: 24
59.103.88.0/23 maxlen: 24
59.103.90.0/23 maxlen: 24
116.71.4.0/22 maxlen: 22
116.71.4.0/24 maxlen: 24
116.71.5.0/24 maxlen: 24
116.71.6.0/24 maxlen: 24
116.71.7.0/24 maxlen: 24
116.71.8.0/23 maxlen: 24
116.71.10.0/23 maxlen: 24
116.71.12.0/23 maxlen: 24
116.71.14.0/23 maxlen: 24
116.71.160.0/21 maxlen: 24
116.71.168.0/21 maxlen: 24
116.71.176.0/21 maxlen: 24
116.71.184.0/21 maxlen: 24
119.152.16.0/24 maxlen: 24
119.152.120.0/22 maxlen: 24
119.155.160.0/21 maxlen: 24
119.155.168.0/21 maxlen: 24
119.155.176.0/21 maxlen: 24
119.155.184.0/21 maxlen: 24
119.155.192.0/21 maxlen: 24
119.155.200.0/21 maxlen: 24
119.155.208.0/21 maxlen: 24
119.155.216.0/21 maxlen: 24
119.156.212.0/24 maxlen: 24
182.191.128.0/21 maxlen: 24
182.191.136.0/21 maxlen: 24
182.191.144.0/21 maxlen: 24
182.191.152.0/21 maxlen: 24
203.135.44.0/22 maxlen: 22
203.135.44.0/24 maxlen: 24
203.135.45.0/24 maxlen: 24
203.135.46.0/24 maxlen: 24
203.135.47.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A0832/9DAF780E1D9411E29901F3F808B02CD2/ntkFUQfHD4W7kajaAnC1ynYK61Q.crl
rsync://rpki.apnic.net/member_repository/A91A0832/9DAF780E1D9411E29901F3F808B02CD2/ntkFUQfHD4W7kajaAnC1ynYK61Q.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ntkFUQfHD4W7kajaAnC1ynYK61Q.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 11 May 2024 14:50:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13807 (0x35ef)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A0832/serialNumber=9ED9055107C70F85BB91A8DA0270B5CA760AEB54
Validity
Not Before: Apr 4 15:21:17 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=660ec56c-4fe7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:62:e3:1b:e1:cd:e7:72:89:3c:52:68:a9:86:
f7:fc:61:55:b0:43:f3:a2:6e:cf:d8:05:83:9c:70:
3b:92:4f:e3:d5:de:ec:91:93:31:33:43:02:d0:1f:
01:e0:2c:28:a5:42:5e:f8:1d:1c:60:fa:64:e5:79:
8e:b9:3f:4a:9b:d4:b6:4f:6a:93:09:3f:17:da:bf:
c2:7d:c1:8b:3c:cd:a9:ae:f0:83:53:0d:80:f1:13:
b7:01:69:ed:57:df:08:be:34:7a:2d:5d:56:cf:80:
cf:f2:bf:d7:0d:9c:c3:95:fa:46:f0:4f:5c:17:11:
0f:9e:f2:8f:87:f6:8a:e6:05:34:70:ca:e4:15:be:
a3:01:f3:e3:37:9f:fe:95:90:96:ae:05:e9:d6:8f:
68:fc:07:93:12:f2:17:c1:d1:74:66:4c:ff:3b:78:
62:e1:07:08:3e:3a:ff:48:5f:99:81:45:b5:53:fb:
e3:09:fd:44:3f:3b:3b:18:25:b7:87:18:65:14:5a:
15:46:91:a7:5b:62:f3:75:1f:50:16:56:01:66:21:
a3:fb:7b:83:5c:ce:5c:da:c7:d5:14:24:a6:b8:4c:
c6:fd:89:7c:8c:e2:26:12:60:51:6f:fa:19:58:2b:
5c:03:38:16:8d:1d:96:3a:61:d0:af:11:53:ff:3b:
3f:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:87:3A:BE:15:6A:CC:73:FD:81:29:70:2B:09:3E:1B:1A:58:D9:44
X509v3 Authority Key Identifier:
keyid:9E:D9:05:51:07:C7:0F:85:BB:91:A8:DA:02:70:B5:CA:76:0A:EB:54
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A0832/9DAF780E1D9411E29901F3F808B02CD2/ntkFUQfHD4W7kajaAnC1ynYK61Q.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ntkFUQfHD4W7kajaAnC1ynYK61Q.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A0832/9DAF780E1D9411E29901F3F808B02CD2/9E1F70A4844911EAA528AD63C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
58.181.100.0/22
59.103.88.0/22
116.71.4.0-116.71.15.255
116.71.160.0/19
119.152.16.0/24
119.152.120.0/22
119.155.160.0-119.155.223.255
119.156.212.0/24
182.191.128.0/19
203.135.44.0/22
Signature Algorithm: sha256WithRSAEncryption
a2:20:0e:1f:ee:21:ac:7b:3a:4e:2a:be:aa:43:30:6c:7c:76:
8e:0d:7e:a5:27:ca:79:e7:ee:70:18:e2:8c:fd:a3:de:a5:27:
27:1c:a1:1e:c0:f3:a7:f2:2c:5a:cf:3e:01:58:38:46:1d:a9:
bf:a7:f0:0d:af:aa:b1:72:72:a5:d9:20:d0:1e:ac:6c:5a:d4:
2b:3e:d6:a3:9f:aa:32:96:8b:e8:b2:47:50:31:88:69:82:fe:
29:87:09:7a:51:a5:f8:f1:2b:24:4a:94:3a:d0:bf:ee:d6:c2:
7f:71:52:00:26:fe:0e:3f:dc:0b:c5:46:02:07:82:b4:52:30:
49:5c:1d:bd:61:d4:2e:7d:29:59:90:3e:f3:78:33:db:ac:a4:
40:8a:81:50:f5:d9:ae:a6:30:e6:e7:fc:31:37:20:72:44:5b:
b9:ff:56:55:b4:c6:a6:1c:bf:a3:0d:25:d3:ce:63:90:73:d5:
98:04:0a:ad:3f:3a:74:06:d1:e3:00:b6:b6:1f:fa:21:0e:e3:
6a:70:28:e3:e4:e2:b1:95:f5:87:06:20:db:00:46:65:a7:64:
65:1c:2f:d3:e7:2a:06:c1:37:86:89:e8:2b:91:a1:b6:c4:61:
3c:34:f9:3a:b1:11:9c:e4:a7:46:27:06:41:c6:ad:b9:48:ce:
90:fc:18:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 4 15:45:47 2024 by rpki-client on console-fra.rpki-client.org