Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B1FA8/E861FD3AAFD911E8B2ED4C7FC4F9AE02/538F7B12B1D711EBB3C0A24AC4F9AE02.roa
File: 538F7B12B1D711EBB3C0A24AC4F9AE02.roa (raw, json)
Hash identifier: lphxg6l5kCfwED0OWn5gQnqtc1lhTVAr6wMcBhF8yGk=
Subject key identifier: 88:80:DC:06:4A:96:9D:B4:F5:91:A4:56:E2:1E:87:B9:83:FD:E5:BA
Certificate issuer: /CN=A91B1FA8/serialNumber=1C4E9F3F800505A40BA165B6C020405A22C64B3B
Certificate serial: 127B
Authority key identifier: 1C:4E:9F:3F:80:05:05:A4:0B:A1:65:B6:C0:20:40:5A:22:C6:4B:3B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HE6fP4AFBaQLoWW2wCBAWiLGSzs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B1FA8/E861FD3AAFD911E8B2ED4C7FC4F9AE02/538F7B12B1D711EBB3C0A24AC4F9AE02.roa
Signing time: Mon 26 Feb 2024 17:55:39 +0000
ROA not before: Mon 26 Feb 2024 17:55:39 +0000
ROA not after: Thu 01 May 2025 00:00:00 +0000
asID: 4764
IP address blocks: 61.245.128.0/19 maxlen: 24
103.94.48.0/22 maxlen: 24
119.18.0.0/19 maxlen: 24
119.18.32.0/21 maxlen: 24
120.88.112.0/20 maxlen: 24
121.200.0.0/19 maxlen: 24
123.253.148.0/22 maxlen: 23
123.253.148.0/24 maxlen: 24
123.253.149.0/24 maxlen: 24
123.253.150.0/24 maxlen: 24
180.150.0.0/17 maxlen: 24
180.181.192.0/18 maxlen: 22
202.90.240.0/21 maxlen: 24
202.142.128.0/20 maxlen: 24
203.129.16.0/20 maxlen: 24
2403:5800::/27 maxlen: 27
2403:5800::/28 maxlen: 28
2403:5800::/32 maxlen: 36
2403:5800:1::/48 maxlen: 48
2403:5800:3::/48 maxlen: 48
2403:5800:5::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B1FA8/E861FD3AAFD911E8B2ED4C7FC4F9AE02/HE6fP4AFBaQLoWW2wCBAWiLGSzs.crl
rsync://rpki.apnic.net/member_repository/A91B1FA8/E861FD3AAFD911E8B2ED4C7FC4F9AE02/HE6fP4AFBaQLoWW2wCBAWiLGSzs.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HE6fP4AFBaQLoWW2wCBAWiLGSzs.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 23 May 2024 17:44:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4731 (0x127b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B1FA8/serialNumber=1C4E9F3F800505A40BA165B6C020405A22C64B3B
Validity
Not Before: Feb 26 17:55:39 2024 GMT
Not After : May 1 00:00:00 2025 GMT
Subject: CN=65dcd09b-d3ed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:68:f5:32:e6:5d:f5:86:12:ce:55:87:9b:5b:
7d:52:9c:13:14:91:c9:0c:e2:34:e4:e5:de:36:64:
0a:89:9c:8f:8a:18:e5:de:b6:83:86:e1:1e:90:a2:
41:48:56:6e:4a:92:22:e7:cd:87:da:a4:f5:b5:6c:
5c:49:f2:f3:04:ed:80:c2:a0:83:59:b6:34:83:9b:
c4:11:ec:62:66:39:d3:ff:be:a2:3a:12:4d:8d:e1:
55:14:ce:29:11:8e:3b:a4:02:8c:2d:3a:3c:e1:4c:
49:6e:88:29:2e:7e:8a:fd:d3:e4:36:d3:ee:11:6d:
88:b6:c2:df:e9:aa:34:6d:ca:51:e1:f0:4c:2f:58:
68:a8:2a:f2:86:19:2e:db:c6:84:14:29:29:54:42:
fe:b9:5d:79:5a:30:4c:b9:a1:f4:39:50:e9:e9:18:
03:a2:6e:22:61:54:55:6e:d9:09:f1:51:19:2e:fc:
f6:9f:6a:87:e5:5f:e5:26:34:ec:74:01:99:20:41:
b4:2c:95:ce:02:a6:98:a1:af:9f:c0:81:eb:38:d2:
51:0d:a9:96:89:8f:04:07:f7:17:91:2d:52:62:6b:
d8:50:d4:f9:2b:71:bc:ea:bc:d8:dd:8e:35:c7:9e:
1a:ab:50:1c:4e:36:7d:76:f3:4d:9c:5f:5a:19:fb:
4e:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:80:DC:06:4A:96:9D:B4:F5:91:A4:56:E2:1E:87:B9:83:FD:E5:BA
X509v3 Authority Key Identifier:
keyid:1C:4E:9F:3F:80:05:05:A4:0B:A1:65:B6:C0:20:40:5A:22:C6:4B:3B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B1FA8/E861FD3AAFD911E8B2ED4C7FC4F9AE02/HE6fP4AFBaQLoWW2wCBAWiLGSzs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HE6fP4AFBaQLoWW2wCBAWiLGSzs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B1FA8/E861FD3AAFD911E8B2ED4C7FC4F9AE02/538F7B12B1D711EBB3C0A24AC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
61.245.128.0/19
103.94.48.0/22
119.18.0.0-119.18.39.255
120.88.112.0/20
121.200.0.0/19
123.253.148.0/22
180.150.0.0/17
180.181.192.0/18
202.90.240.0/21
202.142.128.0/20
203.129.16.0/20
IPv6:
2403:5800::/27
Signature Algorithm: sha256WithRSAEncryption
21:6d:3b:15:75:f8:46:7c:a7:d5:fc:7e:3b:cb:a3:8c:7d:6d:
74:6f:3b:a4:2b:49:e0:c6:71:fe:41:5c:84:99:93:c0:b8:4f:
51:93:e5:91:70:07:85:05:f0:b6:33:31:9d:2b:aa:6c:3e:3f:
d1:89:ba:2c:ac:67:9b:c3:34:5c:8b:bd:c9:d0:9a:fd:3f:1d:
9f:78:dc:ad:c9:71:41:ee:0c:cc:b8:3b:ca:8f:24:b9:15:4a:
70:5b:9f:9b:c6:eb:db:7d:b8:7a:e5:43:25:50:71:24:ed:b0:
33:91:d8:1f:3d:da:62:de:58:88:c1:19:6b:e4:d9:e1:3f:63:
bc:36:80:3b:ec:57:e5:49:6f:01:88:f3:25:f8:96:88:e5:22:
da:fb:2f:9d:e9:4e:41:84:ec:ef:11:43:a1:9b:73:58:47:e8:
ee:17:5c:03:f3:d6:e2:74:d8:65:2c:52:ab:70:b6:2a:c9:dd:
25:82:61:1a:6a:ce:b9:34:ff:58:30:49:86:d5:52:eb:30:72:
a1:e0:68:58:7b:0f:dc:fc:71:bc:1d:7e:67:c1:ab:73:56:94:
2e:c8:da:2e:89:0d:eb:35:a0:13:9c:33:4d:82:37:23:52:7f:
fa:e4:a8:dd:9b:d4:f9:6c:22:60:b1:a0:b2:44:f2:a8:7a:4d:
35:3b:05:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 16 18:26:08 2024 by rpki-client on console-fra.rpki-client.org