Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/5C8CB1EC854D11EF8B462113C4F9AE02.roa
File: 5C8CB1EC854D11EF8B462113C4F9AE02.roa (raw, json)
Hash identifier: iK86BnyCQZ/e/vzhukPeORRKRlrySKYH+mrR3u5qpa0=
Subject key identifier: E1:51:4E:37:4A:87:57:4F:73:31:FE:92:17:44:91:75:66:A9:1C:01
Certificate issuer: /CN=A91A560A/serialNumber=167C3B221775FEC05039468150CE814756AC6F0A
Certificate serial: 4753
Authority key identifier: 16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/5C8CB1EC854D11EF8B462113C4F9AE02.roa
Signing time: Fri 11 Oct 2024 08:10:49 +0000
ROA not before: Fri 11 Oct 2024 08:10:49 +0000
ROA not after: Fri 31 Oct 2025 00:00:00 +0000
asID: 45903
IP address blocks: 42.96.32.0/19 maxlen: 19
42.96.38.0/23 maxlen: 24
42.96.40.0/21 maxlen: 24
42.96.48.0/21 maxlen: 24
42.96.56.0/22 maxlen: 24
42.96.60.0/23 maxlen: 23
42.96.60.0/24 maxlen: 24
42.96.61.0/24 maxlen: 24
45.122.232.0/22 maxlen: 24
45.122.236.0/22 maxlen: 24
45.122.240.0/22 maxlen: 24
45.122.244.0/22 maxlen: 23
45.122.245.0/24 maxlen: 24
45.122.246.0/23 maxlen: 24
45.122.248.0/22 maxlen: 24
45.122.252.0/24 maxlen: 24
45.122.254.0/23 maxlen: 24
101.99.0.0/21 maxlen: 21
101.99.0.0/23 maxlen: 24
101.99.2.0/23 maxlen: 23
101.99.2.0/24 maxlen: 24
101.99.4.0/22 maxlen: 24
101.99.8.0/21 maxlen: 24
101.99.16.0/20 maxlen: 24
101.99.32.0/19 maxlen: 24
103.9.196.0/22 maxlen: 24
103.63.104.0/22 maxlen: 24
103.63.108.0/22 maxlen: 22
103.63.110.0/23 maxlen: 24
103.63.112.0/22 maxlen: 24
103.63.116.0/22 maxlen: 24
103.63.120.0/22 maxlen: 24
103.108.132.0/22 maxlen: 24
103.224.168.0/22 maxlen: 24
103.229.40.0/22 maxlen: 24
103.246.220.0/22 maxlen: 24
113.20.96.0/19 maxlen: 24
115.165.160.0/21 maxlen: 21
115.165.160.0/24 maxlen: 24
115.165.166.0/24 maxlen: 24
119.82.128.0/20 maxlen: 23
119.82.128.0/22 maxlen: 24
119.82.132.0/24 maxlen: 24
119.82.134.0/23 maxlen: 24
119.82.136.0/21 maxlen: 24
124.158.14.0/24 maxlen: 24
144.48.24.0/22 maxlen: 24
183.91.0.0/20 maxlen: 20
183.91.0.0/21 maxlen: 24
183.91.8.0/21 maxlen: 21
183.91.8.0/22 maxlen: 24
183.91.12.0/23 maxlen: 24
183.91.15.0/24 maxlen: 24
183.91.16.0/20 maxlen: 24
202.134.16.0/21 maxlen: 24
203.171.16.0/20 maxlen: 24
203.205.0.0/21 maxlen: 24
203.205.8.0/21 maxlen: 21
203.205.8.0/22 maxlen: 22
203.205.9.0/24 maxlen: 24
203.205.10.0/23 maxlen: 24
203.205.12.0/22 maxlen: 24
203.205.16.0/20 maxlen: 24
203.205.32.0/19 maxlen: 24
2402:5300::/35 maxlen: 35
2402:5300::/40 maxlen: 48
2402:5300:400::/42 maxlen: 42
2402:5300:400::/46 maxlen: 48
2402:5300:404::/48 maxlen: 48
2402:5300:405::/48 maxlen: 48
2402:5300:406::/48 maxlen: 48
2402:5300:408::/46 maxlen: 48
2402:5300:40c::/46 maxlen: 48
2402:5300:410::/44 maxlen: 48
2402:5300:420::/44 maxlen: 48
2402:5300:430::/44 maxlen: 48
2402:5300:440::/42 maxlen: 48
2402:5300:480::/42 maxlen: 48
2402:5300:4c0::/42 maxlen: 48
2402:5300:500::/40 maxlen: 48
2402:5300:600::/40 maxlen: 48
2402:5300:700::/40 maxlen: 48
2402:5300:800::/40 maxlen: 48
2402:5300:900::/40 maxlen: 48
2402:5300:1000::/36 maxlen: 48
2402:5300:2000::/35 maxlen: 35
2402:5300:2000::/36 maxlen: 48
2402:5300:4000::/35 maxlen: 35
2402:5300:4000::/42 maxlen: 42
2402:5300:4000::/44 maxlen: 48
2402:5300:4010::/44 maxlen: 48
2402:5300:4022::/48 maxlen: 48
2402:5300:4023::/48 maxlen: 48
2402:5300:4024::/46 maxlen: 48
2402:5300:4028::/46 maxlen: 48
2402:5300:402c::/46 maxlen: 48
2402:5300:4030::/44 maxlen: 48
2402:5300:4040::/42 maxlen: 48
2402:5300:4080::/42 maxlen: 48
2402:5300:40c0::/42 maxlen: 48
2402:5300:4100::/40 maxlen: 48
2402:5300:4200::/40 maxlen: 48
2402:5300:4300::/40 maxlen: 48
2402:5300:4400::/40 maxlen: 48
2402:5300:4500::/40 maxlen: 48
2402:5300:4600::/40 maxlen: 48
2402:5300:4700::/40 maxlen: 48
2402:5300:5000::/36 maxlen: 48
2402:5300:6000::/44 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl
rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 02 Dec 2024 11:15:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 18259 (0x4753)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A560A/serialNumber=167C3B221775FEC05039468150CE814756AC6F0A
Validity
Not Before: Oct 11 08:10:49 2024 GMT
Not After : Oct 31 00:00:00 2025 GMT
Subject: CN=6708dd88-272c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:6c:83:78:4c:56:0f:e9:8c:b7:f8:94:02:53:
2a:53:ee:ad:37:a1:21:d5:6c:84:7c:71:4d:93:c3:
c3:bc:81:35:d1:f7:6d:a2:95:35:4e:4e:92:33:ba:
c2:27:c7:5f:22:a5:42:b8:45:0a:ba:6a:f0:d4:fe:
d9:b8:d7:33:46:26:8b:5a:a5:8c:6e:89:61:f7:77:
06:64:64:37:56:ec:5d:e1:55:f9:34:3f:f9:81:fa:
6f:c2:9d:8e:a0:e0:6e:fa:5f:e7:64:ed:81:80:de:
04:6c:05:0d:50:5a:39:2d:2e:aa:74:94:77:99:40:
da:c7:98:ae:66:34:b6:fd:58:a0:26:49:65:cb:cf:
02:d9:be:34:a5:18:2e:47:d4:ea:42:50:48:2b:e1:
ac:4e:5b:1e:ad:c8:40:71:67:c1:e6:1c:10:df:4f:
7b:3e:83:5a:52:8d:5e:16:8e:f5:30:07:b8:ee:34:
20:4f:b9:8f:95:32:7a:0b:5c:a4:68:e0:01:db:5e:
4d:03:c5:f3:c6:1d:e6:1c:ee:51:22:19:81:30:7a:
16:a7:1d:de:7a:59:de:b5:78:6d:21:1f:ec:ad:65:
1c:3f:63:72:db:09:35:6c:d1:ca:21:55:eb:a9:7d:
cb:92:74:46:77:f8:e1:9a:86:3e:33:e4:b7:56:7c:
f6:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:51:4E:37:4A:87:57:4F:73:31:FE:92:17:44:91:75:66:A9:1C:01
X509v3 Authority Key Identifier:
keyid:16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/5C8CB1EC854D11EF8B462113C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
42.96.32.0/19
45.122.232.0-45.122.252.255
45.122.254.0/23
101.99.0.0/18
103.9.196.0/22
103.63.104.0-103.63.123.255
103.108.132.0/22
103.224.168.0/22
103.229.40.0/22
103.246.220.0/22
113.20.96.0/19
115.165.160.0/21
119.82.128.0/20
124.158.14.0/24
144.48.24.0/22
183.91.0.0/19
202.134.16.0/21
203.171.16.0/20
203.205.0.0/18
IPv6:
2402:5300::-2402:5300:600f:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
9e:69:46:cc:ba:02:03:32:b6:d3:c4:53:db:f5:0f:c1:17:10:
14:91:f4:61:79:81:58:a9:a5:68:a1:62:6b:58:cb:dc:4b:9c:
20:2e:da:66:b6:37:48:65:90:ee:53:ce:39:15:4a:3a:a9:40:
1b:b1:40:56:bc:f6:03:03:35:f7:00:c1:d9:61:60:09:80:86:
f9:4a:a2:42:06:50:b6:df:4b:9e:5b:f1:0c:4e:80:90:ef:1d:
19:96:56:09:24:9e:a3:45:05:eb:a3:07:78:4a:f7:94:91:9a:
3a:64:65:db:95:4b:64:62:83:0b:13:ad:0f:e5:ca:00:97:0f:
7d:14:29:83:5a:2f:8d:6b:f1:ea:b7:1c:44:58:eb:6b:56:7e:
27:20:34:48:3d:d3:a9:8f:29:40:58:43:ca:2f:27:a2:01:86:
7c:e7:d9:8f:d7:83:8a:25:44:20:ea:e6:20:17:5b:6f:05:d1:
7f:b4:2a:d4:c6:5b:8f:c0:9a:60:81:a0:cb:24:1e:c7:63:4c:
fa:47:f1:93:31:ad:46:64:c8:91:70:51:eb:3a:a4:1f:e0:b6:
7f:2c:70:da:81:b0:1b:80:b1:1a:61:54:f7:d2:a0:fb:68:c2:
59:8b:da:30:98:3c:52:04:e2:3d:72:cf:58:8a:96:42:36:ab:
c9:42:a8:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 13:17:32 2024 by rpki-client on console-ams.rpki-client.org