Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/7E942068764511EDAB3DDE6EC4F9AE02.roa
File: 7E942068764511EDAB3DDE6EC4F9AE02.roa (raw, json)
Hash identifier: pu2Nh84c3tvi1IHQHjuDpX/dY0RUrE0O3LlVaK1JmhM=
Subject key identifier: 9A:6D:A1:17:54:9E:86:A2:F8:98:9E:09:4D:B7:DB:AA:0F:18:CE:48
Certificate issuer: /CN=A91A560A/serialNumber=167C3B221775FEC05039468150CE814756AC6F0A
Certificate serial: 4691
Authority key identifier: 16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/7E942068764511EDAB3DDE6EC4F9AE02.roa
Signing time: Thu 05 Sep 2024 03:36:51 +0000
ROA not before: Thu 05 Sep 2024 03:36:50 +0000
ROA not after: Fri 31 Oct 2025 00:00:00 +0000
asID: 7643
IP address blocks: 103.171.92.0/24 maxlen: 24
103.171.93.0/24 maxlen: 24
123.30.70.0/23 maxlen: 24
123.30.72.0/23 maxlen: 24
123.30.94.0/23 maxlen: 24
123.30.104.0/23 maxlen: 24
123.30.108.0/23 maxlen: 24
123.30.127.0/24 maxlen: 24
123.30.128.0/23 maxlen: 24
123.30.132.0/22 maxlen: 24
123.30.136.0/22 maxlen: 24
123.30.140.0/24 maxlen: 24
123.30.142.0/23 maxlen: 24
123.30.160.0/23 maxlen: 24
123.30.163.0/24 maxlen: 24
123.30.164.0/23 maxlen: 24
123.30.230.0/24 maxlen: 24
123.30.244.0/24 maxlen: 24
123.30.250.0/24 maxlen: 24
123.30.253.0/24 maxlen: 24
203.162.2.0/24 maxlen: 24
203.162.36.0/23 maxlen: 23
203.162.36.0/24 maxlen: 24
203.162.37.0/24 maxlen: 24
203.162.49.0/24 maxlen: 24
203.162.51.0/24 maxlen: 24
203.162.53.0/24 maxlen: 24
203.162.55.0/24 maxlen: 24
203.162.56.0/24 maxlen: 24
203.162.59.0/24 maxlen: 24
203.162.68.0/23 maxlen: 23
203.162.68.0/24 maxlen: 24
203.162.69.0/24 maxlen: 24
203.162.76.0/23 maxlen: 24
203.162.78.0/23 maxlen: 24
203.162.80.0/23 maxlen: 24
203.162.96.0/24 maxlen: 24
203.162.100.0/23 maxlen: 24
203.162.102.0/23 maxlen: 24
203.162.153.0/24 maxlen: 24
203.162.155.0/24 maxlen: 24
203.162.163.0/24 maxlen: 24
222.255.102.0/23 maxlen: 24
222.255.121.0/24 maxlen: 24
222.255.122.0/24 maxlen: 24
222.255.210.0/24 maxlen: 24
222.255.211.0/24 maxlen: 24
222.255.234.0/23 maxlen: 24
222.255.237.0/24 maxlen: 24
222.255.239.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl
rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 02 Dec 2024 11:15:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 18065 (0x4691)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A560A/serialNumber=167C3B221775FEC05039468150CE814756AC6F0A
Validity
Not Before: Sep 5 03:36:50 2024 GMT
Not After : Oct 31 00:00:00 2025 GMT
Subject: CN=66d92752-a7aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:44:78:28:34:f7:61:ee:4c:ed:59:e1:7c:10:
ef:86:33:1a:ae:0d:64:96:6a:17:be:44:e1:e1:6b:
ea:7a:26:a3:27:4a:b7:ee:eb:8d:54:07:56:c2:80:
08:a9:29:e4:3a:8f:aa:8e:f3:2c:11:f4:cd:ff:b8:
65:88:a1:6a:02:91:60:a0:59:a7:c0:3c:dd:5d:a5:
6c:0b:a9:1b:f2:73:d2:33:19:f3:fb:19:32:a3:9b:
8a:27:52:0a:43:99:01:9a:82:a7:86:0c:4f:54:f0:
6f:c9:9d:51:de:a7:7f:d9:ad:dd:2b:34:47:12:f2:
50:82:be:09:31:55:0f:06:18:84:eb:a2:ca:99:60:
83:9a:6a:3d:84:2a:f8:0b:6e:86:28:05:c2:b7:c2:
9f:b7:f4:bf:59:57:1a:57:28:69:ca:da:86:36:40:
e5:37:4e:2e:15:27:65:c6:fb:ea:01:18:09:5b:8e:
1f:09:c2:7c:67:52:32:d8:99:b8:60:d7:b0:30:b9:
fd:b9:e7:c7:33:57:df:ba:6b:28:d9:33:1e:c6:57:
34:92:e4:dc:21:c5:c4:79:8a:7c:d5:b7:dc:13:70:
e0:b5:12:5e:b0:1e:03:e2:21:46:21:ce:4f:32:39:
74:4c:17:44:29:e0:84:46:3a:0b:85:d3:59:94:8e:
1a:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:6D:A1:17:54:9E:86:A2:F8:98:9E:09:4D:B7:DB:AA:0F:18:CE:48
X509v3 Authority Key Identifier:
keyid:16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/7E942068764511EDAB3DDE6EC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.171.92.0/23
123.30.70.0-123.30.73.255
123.30.94.0/23
123.30.104.0/23
123.30.108.0/23
123.30.127.0-123.30.129.255
123.30.132.0-123.30.140.255
123.30.142.0/23
123.30.160.0/23
123.30.163.0-123.30.165.255
123.30.230.0/24
123.30.244.0/24
123.30.250.0/24
123.30.253.0/24
203.162.2.0/24
203.162.36.0/23
203.162.49.0/24
203.162.51.0/24
203.162.53.0/24
203.162.55.0-203.162.56.255
203.162.59.0/24
203.162.68.0/23
203.162.76.0-203.162.81.255
203.162.96.0/24
203.162.100.0/22
203.162.153.0/24
203.162.155.0/24
203.162.163.0/24
222.255.102.0/23
222.255.121.0-222.255.122.255
222.255.210.0/23
222.255.234.0/23
222.255.237.0/24
222.255.239.0/24
Signature Algorithm: sha256WithRSAEncryption
b6:3a:ba:56:a4:79:5f:bd:8d:2c:a0:c9:47:d1:bd:bc:58:da:
1e:ba:f1:73:ce:38:02:34:40:5a:65:f7:a2:3a:db:ab:88:4c:
f2:53:b4:05:a7:11:f6:3c:60:ad:ad:25:6d:d7:ef:4e:b8:1f:
62:ae:b9:73:98:d8:ce:e2:a4:06:9b:50:a3:af:63:2f:83:e5:
e9:72:77:fd:ca:60:b8:1a:ab:0e:da:09:0f:8a:bf:72:d1:93:
94:53:70:bf:05:77:f2:50:23:2a:0d:75:3c:ad:ec:82:4d:59:
56:16:48:6e:cb:db:a3:29:f9:cc:8e:ee:e8:6f:b2:48:64:24:
40:24:0a:7c:12:62:25:67:2c:93:59:ce:36:45:85:e4:d3:97:
ed:83:a9:e0:f6:8a:9c:56:70:8b:8b:9e:85:7e:73:4b:67:ad:
a4:20:c4:e3:af:69:48:e7:63:49:b4:32:ee:41:fc:87:38:b0:
6e:ad:38:3c:c6:aa:8a:16:6c:e9:3e:60:ad:52:a8:cb:5d:cf:
25:0c:59:de:1b:40:47:2b:57:18:1a:77:82:17:50:c6:38:e3:
5b:67:54:ce:f5:14:3c:f2:b9:e4:7e:01:33:68:83:78:db:be:
42:85:d0:14:2f:ac:af:74:16:91:d8:3c:67:a8:d2:f4:fc:96:
8d:1d:32:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 13:05:15 2024 by rpki-client on console-fra.rpki-client.org