Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91AABB1/8874E9E81D9811E29788A98208B02CD2/355461A4372C11EDB1059640C4F9AE02.roa
File: 355461A4372C11EDB1059640C4F9AE02.roa (raw, json)
Hash identifier: kUDuCUYicrGvgRITJrTBq20wuNFvXeR0OMNP5dDOXv4=
Subject key identifier: F9:9F:87:44:C7:DA:7A:8A:1B:3E:BF:EE:3E:20:70:40:62:B6:73:82
Certificate issuer: /CN=A91AABB1/serialNumber=EB7FE9892DF000255FCF3AC0B2B4D12AEA6FF806
Certificate serial: 349A
Authority key identifier: EB:7F:E9:89:2D:F0:00:25:5F:CF:3A:C0:B2:B4:D1:2A:EA:6F:F8:06
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/63_piS3wACVfzzrAsrTRKupv-AY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91AABB1/8874E9E81D9811E29788A98208B02CD2/355461A4372C11EDB1059640C4F9AE02.roa
Signing time: Wed 31 Jan 2024 06:51:49 +0000
ROA not before: Wed 31 Jan 2024 06:51:49 +0000
ROA not after: Tue 30 Jul 2024 00:00:00 +0000
asID: 58778
IP address blocks: 114.130.10.0/24 maxlen: 24
114.130.36.0/24 maxlen: 24
114.130.46.0/24 maxlen: 24
114.130.47.0/24 maxlen: 24
114.130.48.0/24 maxlen: 24
114.130.50.0/24 maxlen: 24
114.130.101.0/24 maxlen: 24
114.130.112.0/24 maxlen: 24
114.130.113.0/24 maxlen: 24
114.130.115.0/24 maxlen: 24
114.130.121.0/24 maxlen: 24
114.130.122.0/24 maxlen: 24
2403:ec00:36::/48 maxlen: 48
2403:ec00:37::/48 maxlen: 48
2403:ec00:40::/48 maxlen: 48
2403:ec00:41::/48 maxlen: 48
2403:ec00:51::/48 maxlen: 48
2403:ec00:112::/48 maxlen: 48
2403:ec00:113::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91AABB1/8874E9E81D9811E29788A98208B02CD2/63_piS3wACVfzzrAsrTRKupv-AY.crl
rsync://rpki.apnic.net/member_repository/A91AABB1/8874E9E81D9811E29788A98208B02CD2/63_piS3wACVfzzrAsrTRKupv-AY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/63_piS3wACVfzzrAsrTRKupv-AY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 27 May 2024 15:01:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13466 (0x349a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91AABB1/serialNumber=EB7FE9892DF000255FCF3AC0B2B4D12AEA6FF806
Validity
Not Before: Jan 31 06:51:49 2024 GMT
Not After : Jul 30 00:00:00 2024 GMT
Subject: CN=65b9ee05-0db3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:69:6b:46:7b:6a:80:ea:3e:35:82:32:a1:a2:
91:59:47:40:70:a5:6f:6e:69:c9:65:2a:cc:ba:60:
c6:5b:30:a7:45:f8:0a:8e:e9:f0:0d:21:d7:cd:55:
c6:65:f7:f6:ec:34:8c:82:28:55:2b:9a:e4:9c:0d:
cc:d5:b9:02:9a:f7:b8:5d:8a:16:89:73:27:3b:34:
b1:83:5c:7c:65:6c:f0:c1:0c:94:b0:98:7e:0e:ca:
b7:59:69:4b:b1:56:d8:4b:92:6c:60:ff:b7:e9:9c:
dc:d0:f9:d8:27:e2:37:83:a0:63:32:9b:32:67:ae:
1e:c4:c2:5a:db:0a:7f:1b:4f:31:fc:84:5c:86:05:
43:f2:b9:c5:5d:23:f7:7a:0d:e4:bc:ec:64:39:d0:
ed:a2:18:c0:af:7b:02:4b:fe:8a:11:fa:23:a1:fa:
f5:ef:73:a0:75:23:1a:0a:89:42:5b:7e:55:82:11:
83:31:a8:49:d0:10:b5:3e:27:c2:93:b6:3b:c6:aa:
f9:7b:26:48:84:c1:73:e6:a7:36:00:15:06:3c:d0:
30:ee:5b:16:eb:b0:7f:4f:98:22:00:05:c7:c9:d8:
89:16:5c:d3:71:53:5d:72:0f:51:1a:33:74:b2:1a:
eb:07:06:4c:a7:d4:d0:c1:cc:b7:cc:d3:b0:c3:61:
25:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:9F:87:44:C7:DA:7A:8A:1B:3E:BF:EE:3E:20:70:40:62:B6:73:82
X509v3 Authority Key Identifier:
keyid:EB:7F:E9:89:2D:F0:00:25:5F:CF:3A:C0:B2:B4:D1:2A:EA:6F:F8:06
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91AABB1/8874E9E81D9811E29788A98208B02CD2/63_piS3wACVfzzrAsrTRKupv-AY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/63_piS3wACVfzzrAsrTRKupv-AY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AABB1/8874E9E81D9811E29788A98208B02CD2/355461A4372C11EDB1059640C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
114.130.10.0/24
114.130.36.0/24
114.130.46.0-114.130.48.255
114.130.50.0/24
114.130.101.0/24
114.130.112.0/23
114.130.115.0/24
114.130.121.0-114.130.122.255
IPv6:
2403:ec00:36::/47
2403:ec00:40::/47
2403:ec00:51::/48
2403:ec00:112::/47
Signature Algorithm: sha256WithRSAEncryption
2d:f8:f7:54:f0:45:e7:65:ee:b3:c6:f3:54:65:b6:70:e4:cc:
a2:34:77:3a:1a:c1:ac:f4:1f:e2:3a:d5:cf:3f:17:82:60:32:
d3:74:f8:f9:8c:4b:0f:96:e3:c0:55:b3:15:03:f7:6c:4b:83:
e5:72:3a:25:c1:87:f3:a8:0d:2d:66:d0:85:f0:86:4e:ca:a8:
b3:cb:5d:c7:b9:d8:96:cf:6d:5e:86:be:a4:26:f9:86:2b:f8:
2f:76:7c:7e:0e:8b:23:0b:9b:ca:1d:50:d9:99:8b:a6:bf:16:
b1:92:58:a0:e6:50:3f:3e:70:fb:e9:61:d2:ca:f3:67:95:4b:
fd:6c:cb:43:a4:ff:c4:55:70:5b:73:5a:ea:9a:6d:a8:79:f6:
aa:2e:02:37:6f:87:07:31:21:94:a7:ec:e2:08:0d:d8:3a:1d:
de:e3:35:07:14:95:9d:1e:a0:c6:11:22:7d:5b:de:f2:1b:15:
a0:cf:b4:62:b5:e1:84:e7:87:98:82:7c:72:f2:9f:ab:ed:8b:
d7:80:cc:ff:a0:c0:d9:22:05:66:97:65:ac:70:99:9c:d8:44:
6c:e9:ad:83:2e:70:07:96:43:5e:09:7f:59:bf:40:ed:b3:25:
fc:2a:33:e8:80:29:6f:a3:4e:b8:d9:1a:0e:9f:89:16:a0:88:
8e:5c:ee:3f
-----BEGIN CERTIFICATE-----
MIIF2DCCBMCgAwIBAgICNJowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QUFCQjExMTAvBgNVBAUTKEVCN0ZFOTg5MkRGMDAwMjU1RkNGM0FDMEIyQjREMTJB
RUE2RkY4MDYwHhcNMjQwMTMxMDY1MTQ5WhcNMjQwNzMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02NWI5ZWUwNS0wZGIzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAqWlrRntqgOo+NYIyoaKRWUdAcKVvbmnJZSrMumDGWzCnRfgKjunwDSHXzVXG
Zff27DSMgihVK5rknA3M1bkCmve4XYoWiXMnOzSxg1x8ZWzwwQyUsJh+Dsq3WWlL
sVbYS5JsYP+36Zzc0PnYJ+I3g6BjMpsyZ64exMJa2wp/G08x/IRchgVD8rnFXSP3
eg3kvOxkOdDtohjAr3sCS/6KEfojofr173OgdSMaColCW35VghGDMahJ0BC1PifC
k7Y7xqr5eyZIhMFz5qc2ABUGPNAw7lsW67B/T5giAAXHydiJFlzTcVNdcg9RGjN0
shrrBwZMp9TQwcy3zNOww2ElhwIDAQABo4IC/DCCAvgwHQYDVR0OBBYEFPmfh0TH
2nqKGz6/7j4gcEBitnOCMB8GA1UdIwQYMBaAFOt/6Ykt8AAlX886wLK00Srqb/gG
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBQUJCMS84ODc0RTlFODFE
OTgxMUUyOTc4OEE5ODIwOEIwMkNEMi82M19waVMzd0FDVmZ6enJBc3JUUkt1cHYt
QVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzYzX3BpUzN3QUNWZnp6ckFzclRSS3Vwdi1BWS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
QUFCQjEvODg3NEU5RTgxRDk4MTFFMjk3ODhBOTgyMDhCMDJDRDIvMzU1NDYxQTQz
NzJDMTFFREIxMDU5NjQwQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwgYUGCCsGAQUFBwEHAQH/
BHYwdDBGBAIAATBAAwQAcoIKAwQAcoIkMAwDBAFygi4DBABygjADBABygjIDBABy
gmUDBAFygnADBABygnMwDAMEAHKCeQMEAHKCejAqBAIAAjAkAwcBJAPsAAA2AwcB
JAPsAABAAwcAJAPsAABRAwcBJAPsAAESMA0GCSqGSIb3DQEBCwUAA4IBAQAt+PdU
8EXnZe6zxvNUZbZw5MyiNHc6GsGs9B/iOtXPPxeCYDLTdPj5jEsPluPAVbMVA/ds
S4PlcjolwYfzqA0tZtCF8IZOyqizy13HudiWz21ehr6kJvmGK/gvdnx+DosjC5vK
HVDZmYumvxaxklig5lA/PnD76WHSyvNnlUv9bMtDpP/EVXBbc1rqmm2oefaqLgI3
b4cHMSGUp+ziCA3YOh3e4zUHFJWdHqDGESJ9W97yGxWgz7RiteGE54eYgnxy8p+r
7YvXgMz/oMDZIgVml2WscJmc2ERs6a2DLnAHlkNeCX9Zv0DtsyX8KjPogClvo064
2RoOn4kWoIiOXO4/
-----END CERTIFICATE-----
Generated at Mon May 20 17:23:56 2024 by rpki-client on console-ams.rpki-client.org