Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B1185/3EA9DD3A162311E892C4A940C4F9AE02/88FE530C09C111EDBB795459C4F9AE02.roa
File: 88FE530C09C111EDBB795459C4F9AE02.roa (raw, json)
Hash identifier: 8Q0foLkbfyJo/brnRiDH23CBEQA0zE9Ep41v6mU3An4=
Subject key identifier: 48:B1:4B:0E:BA:C0:44:24:14:55:BC:34:47:4C:EC:2E:93:33:BC:77
Certificate issuer: /CN=A91B1185/serialNumber=FE3CD37CEC0E382307B4F9D5FFD57E97F121F053
Certificate serial: 1564
Authority key identifier: FE:3C:D3:7C:EC:0E:38:23:07:B4:F9:D5:FF:D5:7E:97:F1:21:F0:53
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_jzTfOwOOCMHtPnV_9V-l_Eh8FM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B1185/3EA9DD3A162311E892C4A940C4F9AE02/88FE530C09C111EDBB795459C4F9AE02.roa
Signing time: Thu 22 Feb 2024 17:25:11 +0000
ROA not before: Thu 22 Feb 2024 17:25:11 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 24435
IP address blocks: 103.27.20.0/24 maxlen: 24
103.27.22.0/24 maxlen: 24
175.111.0.0/23 maxlen: 24
175.111.3.0/24 maxlen: 24
175.111.4.0/23 maxlen: 24
203.130.0.0/20 maxlen: 20
203.130.0.0/24 maxlen: 24
203.130.1.0/24 maxlen: 24
203.130.2.0/24 maxlen: 24
203.130.3.0/24 maxlen: 24
203.130.4.0/24 maxlen: 24
203.130.5.0/24 maxlen: 24
203.130.6.0/24 maxlen: 24
203.130.7.0/24 maxlen: 24
203.130.8.0/24 maxlen: 24
203.130.9.0/24 maxlen: 24
203.130.10.0/24 maxlen: 24
203.130.11.0/24 maxlen: 24
203.130.12.0/24 maxlen: 24
203.130.13.0/24 maxlen: 24
203.130.14.0/24 maxlen: 24
203.130.15.0/24 maxlen: 24
203.130.16.0/24 maxlen: 24
203.130.17.0/24 maxlen: 24
203.130.18.0/24 maxlen: 24
203.130.19.0/24 maxlen: 24
203.130.20.0/24 maxlen: 24
203.130.21.0/24 maxlen: 24
203.130.22.0/24 maxlen: 24
203.130.23.0/24 maxlen: 24
203.130.24.0/24 maxlen: 24
203.130.25.0/24 maxlen: 24
203.130.26.0/23 maxlen: 24
203.130.28.0/22 maxlen: 22
203.130.28.0/24 maxlen: 24
203.130.29.0/24 maxlen: 24
203.130.30.0/24 maxlen: 24
203.130.31.0/24 maxlen: 24
2001:fe8::/48 maxlen: 48
2001:fe8:1::/48 maxlen: 48
2001:fe8:2::/48 maxlen: 48
2001:fe8:10::/48 maxlen: 48
2001:fe8:4000::/48 maxlen: 48
2001:fe8:4001::/48 maxlen: 48
2001:fe8:4100::/48 maxlen: 48
2001:fe8:4101::/48 maxlen: 48
2001:fe8:8100::/48 maxlen: 48
2001:fe8:8101::/48 maxlen: 48
2001:fe8:8110::/48 maxlen: 48
2001:fe8:8111::/48 maxlen: 48
2001:fe8:8130::/48 maxlen: 48
2001:fe8:8131::/48 maxlen: 48
2001:fe8:c001::/48 maxlen: 48
2001:fe8:c100::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B1185/3EA9DD3A162311E892C4A940C4F9AE02/_jzTfOwOOCMHtPnV_9V-l_Eh8FM.crl
rsync://rpki.apnic.net/member_repository/A91B1185/3EA9DD3A162311E892C4A940C4F9AE02/_jzTfOwOOCMHtPnV_9V-l_Eh8FM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_jzTfOwOOCMHtPnV_9V-l_Eh8FM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 23 May 2024 17:24:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5476 (0x1564)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B1185/serialNumber=FE3CD37CEC0E382307B4F9D5FFD57E97F121F053
Validity
Not Before: Feb 22 17:25:11 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=65d78376-78b1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:3e:82:aa:8d:6f:7b:08:a2:fc:76:62:95:0f:
4e:5c:3f:05:50:52:96:48:a2:a9:4c:bd:3d:35:2c:
a8:4e:4e:f9:3f:93:73:28:bc:a3:00:27:c0:21:69:
40:ea:f8:14:65:97:e9:61:ad:ee:a5:e3:d4:32:ae:
68:0d:1e:be:d2:0e:3b:63:d1:13:8c:14:c7:10:3d:
2a:e4:56:bd:20:96:1c:3f:64:ec:d3:2c:4a:88:48:
11:75:08:09:a6:0c:6b:ff:ec:cd:54:59:fb:0f:f4:
b9:4a:b1:2d:52:b7:b8:7b:23:2b:10:e5:d3:ad:ac:
7c:c4:2d:27:ad:30:d2:c3:1d:e9:3c:e7:7c:bf:dc:
fb:70:c6:57:32:cb:59:3d:ca:fa:fb:63:c3:1f:22:
5f:29:87:61:79:3f:36:2b:71:ef:e3:26:87:f9:4a:
6c:24:ec:0b:f0:ec:04:2f:1b:5d:0c:51:ff:9a:ff:
c0:ce:72:0e:65:87:8b:44:fd:c2:2f:61:6b:83:2f:
b8:a6:21:f9:c3:44:21:d1:12:07:97:57:9b:63:be:
e1:cf:1d:af:2c:a1:99:dd:44:0c:fe:65:22:56:70:
93:f6:87:ca:08:f1:68:ff:d5:a6:ec:16:48:ab:dd:
ce:75:07:18:d9:29:21:05:f3:a3:b6:b0:1a:53:6c:
81:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:B1:4B:0E:BA:C0:44:24:14:55:BC:34:47:4C:EC:2E:93:33:BC:77
X509v3 Authority Key Identifier:
keyid:FE:3C:D3:7C:EC:0E:38:23:07:B4:F9:D5:FF:D5:7E:97:F1:21:F0:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B1185/3EA9DD3A162311E892C4A940C4F9AE02/_jzTfOwOOCMHtPnV_9V-l_Eh8FM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_jzTfOwOOCMHtPnV_9V-l_Eh8FM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B1185/3EA9DD3A162311E892C4A940C4F9AE02/88FE530C09C111EDBB795459C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.27.20.0/24
103.27.22.0/24
175.111.0.0/23
175.111.3.0-175.111.5.255
203.130.0.0/19
IPv6:
2001:fe8::-2001:fe8:2:ffff:ffff:ffff:ffff:ffff
2001:fe8:10::/48
2001:fe8:4000::/47
2001:fe8:4100::/47
2001:fe8:8100::/47
2001:fe8:8110::/47
2001:fe8:8130::/47
2001:fe8:c001::/48
2001:fe8:c100::/48
Signature Algorithm: sha256WithRSAEncryption
78:79:e5:63:17:70:29:39:7b:62:78:8c:8b:80:63:fb:ba:cd:
bd:4d:c7:d0:8b:a3:e5:28:6c:62:e2:aa:8a:6b:93:da:36:cb:
5e:e1:ad:0a:b7:28:15:67:9e:30:23:fb:b1:c2:71:a1:26:1b:
1e:d0:6b:11:6f:ce:36:da:f7:57:b1:a9:27:5c:57:05:6c:ef:
52:55:ff:f9:21:fa:e1:c1:c5:ae:08:37:87:79:4a:cb:40:d3:
1a:73:21:dd:1d:22:44:4a:b6:72:52:a9:e1:e3:41:03:04:ea:
de:fe:73:c8:81:48:87:01:0b:2e:4c:6b:c6:12:87:19:ff:68:
18:d4:de:32:05:8c:6f:6c:f9:77:35:70:87:90:81:56:c7:81:
7b:3e:4c:01:f1:38:f1:13:ed:42:1d:91:28:26:e1:9d:b7:eb:
4d:28:c4:76:f7:a3:18:4d:8e:b9:90:69:9b:62:c3:b1:04:1a:
ce:14:da:5b:a6:8a:ac:58:ff:11:40:5f:cf:b6:41:f3:4d:ad:
9e:0e:ce:15:c3:9d:53:6a:e8:83:93:e6:a1:2b:bf:ca:e4:44:
51:54:18:95:51:39:49:b0:c3:34:05:4f:53:52:b3:98:cf:7e:
90:88:dd:9e:20:dd:94:45:9e:df:0a:02:76:5c:6f:84:b0:95:
6a:56:1f:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 16 18:26:08 2024 by rpki-client on console-fra.rpki-client.org