Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91AABB1/8874E9E81D9811E29788A98208B02CD2/BB8E79F23D7211ED80C24116C4F9AE02.roa
File: BB8E79F23D7211ED80C24116C4F9AE02.roa (raw, json)
Hash identifier: /UQcwZPg26VqsQtvRJJDSvHXzuNexFFzMoF+ofGjcoo=
Subject key identifier: 7F:0E:E6:D1:CF:A9:60:6A:13:44:C0:11:4C:9C:A0:86:2A:28:FA:93
Certificate issuer: /CN=A91AABB1/serialNumber=EB7FE9892DF000255FCF3AC0B2B4D12AEA6FF806
Certificate serial: 3534
Authority key identifier: EB:7F:E9:89:2D:F0:00:25:5F:CF:3A:C0:B2:B4:D1:2A:EA:6F:F8:06
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/63_piS3wACVfzzrAsrTRKupv-AY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91AABB1/8874E9E81D9811E29788A98208B02CD2/BB8E79F23D7211ED80C24116C4F9AE02.roa
Signing time: Tue 08 Oct 2024 14:11:27 +0000
ROA not before: Tue 08 Oct 2024 14:11:27 +0000
ROA not after: Wed 30 Jul 2025 00:00:00 +0000
asID: 132608
IP address blocks: 103.248.204.0/22 maxlen: 23
103.248.204.0/24 maxlen: 24
103.248.205.0/24 maxlen: 24
103.248.206.0/24 maxlen: 24
103.248.207.0/24 maxlen: 24
114.130.4.0/23 maxlen: 23
114.130.4.0/24 maxlen: 24
114.130.5.0/24 maxlen: 24
114.130.8.0/24 maxlen: 24
114.130.10.0/24 maxlen: 24
114.130.31.0/24 maxlen: 24
114.130.36.0/22 maxlen: 22
114.130.36.0/24 maxlen: 24
114.130.37.0/24 maxlen: 24
114.130.41.0/24 maxlen: 24
114.130.51.0/24 maxlen: 24
114.130.52.0/23 maxlen: 24
114.130.56.0/23 maxlen: 23
114.130.58.0/24 maxlen: 24
114.130.68.0/24 maxlen: 24
114.130.71.0/24 maxlen: 24
114.130.75.0/24 maxlen: 24
114.130.80.0/24 maxlen: 24
114.130.81.0/24 maxlen: 24
114.130.83.0/24 maxlen: 24
114.130.84.0/24 maxlen: 24
114.130.85.0/24 maxlen: 24
114.130.86.0/24 maxlen: 24
114.130.89.0/24 maxlen: 24
114.130.92.0/24 maxlen: 24
114.130.94.0/24 maxlen: 24
114.130.95.0/24 maxlen: 24
114.130.120.0/24 maxlen: 24
114.130.223.0/24 maxlen: 24
2403:ec00:45::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91AABB1/8874E9E81D9811E29788A98208B02CD2/63_piS3wACVfzzrAsrTRKupv-AY.crl
rsync://rpki.apnic.net/member_repository/A91AABB1/8874E9E81D9811E29788A98208B02CD2/63_piS3wACVfzzrAsrTRKupv-AY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/63_piS3wACVfzzrAsrTRKupv-AY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 29 Nov 2024 14:54:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13620 (0x3534)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91AABB1/serialNumber=EB7FE9892DF000255FCF3AC0B2B4D12AEA6FF806
Validity
Not Before: Oct 8 14:11:27 2024 GMT
Not After : Jul 30 00:00:00 2025 GMT
Subject: CN=67053d8e-7518
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fd:b0:0a:de:80:9d:50:13:6b:72:11:09:65:89:
28:8e:14:3f:8e:ba:a0:f5:6e:96:88:76:fa:b7:8d:
06:04:9a:8e:24:57:01:1b:ab:e5:8a:27:ec:af:d7:
52:10:5b:9b:db:b8:d2:67:49:00:74:b9:18:28:a6:
18:d0:70:18:7e:3f:c5:e0:76:a7:74:18:a4:5f:0a:
cf:d7:65:12:ac:b9:40:97:52:c8:a5:76:c2:f4:7f:
43:bd:9d:20:ae:1b:8e:b9:e2:20:e3:fc:8b:4c:32:
7e:da:b8:1b:f0:c5:bd:11:58:e9:4f:34:e0:b6:1e:
ee:00:80:f5:33:2e:c8:52:df:a0:55:05:81:4f:7c:
a2:f1:67:55:76:14:ce:99:02:49:05:63:cb:fe:be:
77:63:45:91:45:64:a4:07:19:41:5c:da:be:7f:d7:
eb:63:a9:e2:aa:78:0d:0c:7b:1e:04:19:7d:8e:48:
43:13:cc:21:a4:e8:52:fa:9f:1d:4e:3f:05:29:58:
ea:53:63:86:52:c3:b2:8a:6b:55:7b:d2:1c:51:4a:
ca:3f:00:68:b5:14:e5:ed:eb:7e:52:71:80:19:51:
f8:0f:d6:3b:80:ca:46:41:c6:df:35:fe:af:6d:85:
1e:e7:16:bb:e9:d7:2d:ff:7c:fc:d2:db:e2:ad:f8:
00:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:0E:E6:D1:CF:A9:60:6A:13:44:C0:11:4C:9C:A0:86:2A:28:FA:93
X509v3 Authority Key Identifier:
keyid:EB:7F:E9:89:2D:F0:00:25:5F:CF:3A:C0:B2:B4:D1:2A:EA:6F:F8:06
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91AABB1/8874E9E81D9811E29788A98208B02CD2/63_piS3wACVfzzrAsrTRKupv-AY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/63_piS3wACVfzzrAsrTRKupv-AY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AABB1/8874E9E81D9811E29788A98208B02CD2/BB8E79F23D7211ED80C24116C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.248.204.0/22
114.130.4.0/23
114.130.8.0/24
114.130.10.0/24
114.130.31.0/24
114.130.36.0/22
114.130.41.0/24
114.130.51.0-114.130.53.255
114.130.56.0-114.130.58.255
114.130.68.0/24
114.130.71.0/24
114.130.75.0/24
114.130.80.0/23
114.130.83.0-114.130.86.255
114.130.89.0/24
114.130.92.0/24
114.130.94.0/23
114.130.120.0/24
114.130.223.0/24
IPv6:
2403:ec00:45::/48
Signature Algorithm: sha256WithRSAEncryption
79:87:51:39:44:45:36:06:ff:ac:43:34:82:94:d2:dd:a0:44:
25:44:87:c0:14:2a:a6:b0:d2:10:34:8b:5f:87:9a:fe:ff:1a:
d8:20:bf:22:c2:ca:fa:5c:1b:d1:b1:29:61:76:ff:4e:4b:65:
19:31:2f:44:25:f4:c1:70:0f:fd:8b:37:f2:1b:e5:83:17:96:
3f:9a:08:0c:32:9c:f9:3d:72:c9:45:3f:f1:94:e8:ec:39:e8:
ce:c8:a3:b0:30:78:0c:a2:df:f6:2a:ed:b2:1b:21:d1:89:82:
97:28:30:48:ad:58:3a:ee:03:5e:44:31:08:98:f1:fd:95:8f:
3b:66:2e:4c:15:4d:8a:73:4a:16:86:cf:77:d7:d3:4e:54:b2:
70:a0:06:e9:5c:b7:86:d5:0a:5c:91:f0:10:23:37:a2:a2:d7:
e1:26:92:2b:6b:14:78:c2:7a:b5:29:c6:ad:1f:9d:3e:a2:f8:
9a:6f:20:c5:5a:77:78:a5:17:b6:80:fb:3c:cb:88:ed:58:ef:
72:e0:01:9c:a3:9c:b4:e7:ef:26:8b:f6:f3:82:39:08:7e:c6:
42:76:5c:29:f9:d1:69:99:cb:da:7a:57:0c:5f:de:4a:c5:81:
34:c4:54:85:cd:f1:da:06:14:56:ce:42:57:0c:c7:da:28:cd:
d6:2a:8b:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 17:56:19 2024 by rpki-client on console-fra.rpki-client.org