Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B2C43/DC2F546839E411EA96173374C4F9AE02/AD989788E05511EEADC7D67EC4F9AE02.roa
File: AD989788E05511EEADC7D67EC4F9AE02.roa (raw, json)
Hash identifier: bSu0/aJwqyDIpSQexz7gKeDLygCiwIxJotGQrEfJHow=
Subject key identifier: 4D:7C:75:E3:A9:30:C6:3D:2A:EE:3C:F1:F6:39:C1:30:76:D1:CB:EC
Certificate issuer: /CN=A91B2C43/serialNumber=CA0CE2CBA99CDE0D9027FCE4864F26C913D419E3
Certificate serial: 0A88
Authority key identifier: CA:0C:E2:CB:A9:9C:DE:0D:90:27:FC:E4:86:4F:26:C9:13:D4:19:E3
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ygziy6mc3g2QJ_zkhk8myRPUGeM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B2C43/DC2F546839E411EA96173374C4F9AE02/AD989788E05511EEADC7D67EC4F9AE02.roa
Signing time: Thu 04 Apr 2024 20:59:28 +0000
ROA not before: Thu 04 Apr 2024 20:59:28 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 55501
IP address blocks: 103.225.220.0/22 maxlen: 22
103.225.220.0/24 maxlen: 24
103.225.221.0/24 maxlen: 24
103.225.222.0/24 maxlen: 24
103.225.223.0/24 maxlen: 24
202.166.160.0/23 maxlen: 23
202.166.160.0/24 maxlen: 24
202.166.161.0/24 maxlen: 24
202.166.162.0/23 maxlen: 23
202.166.162.0/24 maxlen: 24
202.166.163.0/24 maxlen: 24
202.166.164.0/23 maxlen: 24
202.166.166.0/23 maxlen: 23
202.166.166.0/24 maxlen: 24
202.166.167.0/24 maxlen: 24
202.166.168.0/22 maxlen: 22
202.166.168.0/24 maxlen: 24
202.166.169.0/24 maxlen: 24
202.166.170.0/23 maxlen: 23
202.166.171.0/24 maxlen: 24
202.166.172.0/23 maxlen: 23
202.166.173.0/24 maxlen: 24
202.166.174.0/24 maxlen: 24
202.166.175.0/24 maxlen: 24
2401:ea00::/48 maxlen: 48
2401:ea00:1::/48 maxlen: 48
2401:ea00:2::/48 maxlen: 48
2401:ea00:3::/48 maxlen: 48
2401:ea00:4::/48 maxlen: 48
2401:ea00:5::/48 maxlen: 48
2401:ea00:6::/48 maxlen: 48
2401:ea00:7::/48 maxlen: 48
2401:ea00:8::/48 maxlen: 48
2401:ea00:9::/48 maxlen: 48
2401:ea00:a::/48 maxlen: 48
2401:ea00:b::/48 maxlen: 48
2401:ea00:c::/48 maxlen: 48
2401:ea00:d::/48 maxlen: 48
2401:ea00:e::/48 maxlen: 48
2401:ea00:f::/48 maxlen: 48
2401:ea00:10::/48 maxlen: 48
2401:ea00:11::/48 maxlen: 48
2401:ea00:12::/48 maxlen: 48
2401:ea00:13::/48 maxlen: 48
2401:ea00:20::/48 maxlen: 48
2401:ea00:25::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B2C43/DC2F546839E411EA96173374C4F9AE02/ygziy6mc3g2QJ_zkhk8myRPUGeM.crl
rsync://rpki.apnic.net/member_repository/A91B2C43/DC2F546839E411EA96173374C4F9AE02/ygziy6mc3g2QJ_zkhk8myRPUGeM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ygziy6mc3g2QJ_zkhk8myRPUGeM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 23 May 2024 20:05:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2696 (0xa88)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B2C43/serialNumber=CA0CE2CBA99CDE0D9027FCE4864F26C913D419E3
Validity
Not Before: Apr 4 20:59:28 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=660f14b0-8f08
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:a8:9f:7c:5a:8b:6d:5b:d3:6a:a7:b3:23:dc:
9f:dd:c3:29:5a:fd:83:89:eb:e0:1f:a0:51:b2:04:
05:33:98:a3:6a:97:c9:fc:39:8e:c0:88:b4:f7:97:
cb:2a:00:ab:43:01:7d:31:c9:f6:b2:7b:a5:83:11:
92:82:ed:40:6f:03:0a:aa:4a:82:60:62:f2:f0:96:
96:66:66:e5:22:61:10:85:c9:9c:ce:f7:19:2d:32:
f6:62:b7:b0:e8:33:45:56:5b:cb:04:fe:4e:f6:38:
11:3b:29:89:8f:43:af:f6:2e:80:98:42:84:ad:59:
0a:a5:9c:28:60:e1:83:70:2d:f2:a8:1b:13:ce:d7:
e4:8a:ca:56:84:dc:8a:8f:5f:3e:4a:6c:05:cb:85:
b3:23:97:9e:81:c6:b0:e3:4e:0e:b7:0b:20:0a:1e:
2d:2e:12:3e:7c:f8:5c:78:56:b1:15:64:bb:f1:3c:
7f:ec:b3:62:e0:7a:3d:f1:71:f4:91:99:1d:3d:2c:
ec:0d:2a:2a:de:99:c3:a0:27:1a:b1:97:cb:0f:db:
8f:dc:6f:6d:fc:8b:95:8c:6e:16:4a:7c:d8:45:57:
e3:75:01:2a:8a:c4:6f:6b:fb:f3:bc:f8:ab:16:ab:
27:39:b7:81:8d:3d:39:d1:5e:46:5d:0c:c8:fe:d8:
56:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:7C:75:E3:A9:30:C6:3D:2A:EE:3C:F1:F6:39:C1:30:76:D1:CB:EC
X509v3 Authority Key Identifier:
keyid:CA:0C:E2:CB:A9:9C:DE:0D:90:27:FC:E4:86:4F:26:C9:13:D4:19:E3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B2C43/DC2F546839E411EA96173374C4F9AE02/ygziy6mc3g2QJ_zkhk8myRPUGeM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ygziy6mc3g2QJ_zkhk8myRPUGeM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B2C43/DC2F546839E411EA96173374C4F9AE02/AD989788E05511EEADC7D67EC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.225.220.0/22
202.166.160.0/20
IPv6:
2401:ea00::-2401:ea00:13:ffff:ffff:ffff:ffff:ffff
2401:ea00:20::/48
2401:ea00:25::/48
Signature Algorithm: sha256WithRSAEncryption
91:86:28:5e:b5:6e:e2:3b:2d:61:dd:e4:81:d3:ce:55:d2:14:
c1:5c:ce:72:1a:61:f2:bb:a7:83:ad:b4:f9:13:6b:76:3c:c4:
dc:62:49:d2:4e:0c:f8:50:f7:d7:c8:7f:46:22:24:48:be:5a:
81:b4:b3:59:d8:9a:1e:91:25:9e:22:82:30:42:fb:e2:c0:38:
11:85:cb:86:ab:61:9b:ec:5c:97:c4:a1:3f:55:54:22:aa:57:
6f:f0:39:83:b0:09:39:4c:b2:6c:43:84:31:98:1d:eb:a1:9c:
05:8e:96:1d:61:52:e2:a2:46:7b:d1:1b:2e:1c:c6:36:4d:6f:
f6:25:9a:1d:54:69:0a:a2:cb:5e:81:55:8f:2e:ec:eb:5e:3a:
5b:67:71:1a:99:2d:b7:7c:36:c3:86:9e:99:72:f1:63:12:e6:
37:0e:94:2e:06:36:d1:06:6f:2e:bb:e5:44:0b:bc:64:59:55:
2e:58:28:79:43:b9:51:d6:c9:70:71:e1:e7:db:fb:c2:3e:45:
5f:c3:9e:79:5c:07:30:de:c5:e7:dd:dc:b3:a5:96:9e:e5:b0:
7c:a6:fe:69:04:f0:1b:19:ac:1b:0e:06:bf:8d:60:75:c1:96:
c0:82:38:4c:ec:7b:31:2f:90:23:f4:70:4e:ce:d2:69:39:94:
65:ac:09:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 16 22:34:52 2024 by rpki-client on console-ams.rpki-client.org