Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B37E3/0AFEA7CE03A011EAB4C5D27CC4F9AE02/24252532B84711EA8A7F036DC4F9AE02.roa
File: 24252532B84711EA8A7F036DC4F9AE02.roa (raw, json)
Hash identifier: xlVExDsT6dRqAOzeSQn/to87W/tI0sJTe5K+fPJ+qMo=
Subject key identifier: 9C:12:C3:ED:24:3A:30:BD:2D:4E:A2:46:29:C9:07:AB:81:33:C2:39
Certificate issuer: /CN=A91B37E3/serialNumber=A7570DCF3720A8D5A8856A4BB6583F1BAEAE0093
Certificate serial: 0BFB
Authority key identifier: A7:57:0D:CF:37:20:A8:D5:A8:85:6A:4B:B6:58:3F:1B:AE:AE:00:93
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p1cNzzcgqNWohWpLtlg_G66uAJM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B37E3/0AFEA7CE03A011EAB4C5D27CC4F9AE02/24252532B84711EA8A7F036DC4F9AE02.roa
Signing time: Tue 27 Aug 2024 11:20:08 +0000
ROA not before: Tue 27 Aug 2024 11:20:08 +0000
ROA not after: Thu 01 May 2025 00:00:00 +0000
asID: 24342
IP address blocks: 115.127.0.0/17 maxlen: 22
115.127.0.0/18 maxlen: 23
115.127.0.0/19 maxlen: 24
115.127.32.0/22 maxlen: 24
115.127.36.0/23 maxlen: 24
115.127.39.0/24 maxlen: 24
115.127.40.0/21 maxlen: 24
115.127.48.0/20 maxlen: 24
115.127.64.0/20 maxlen: 24
115.127.80.0/21 maxlen: 24
115.127.88.0/22 maxlen: 24
115.127.92.0/23 maxlen: 24
115.127.94.0/24 maxlen: 24
115.127.95.0/24 maxlen: 24
115.127.96.0/19 maxlen: 24
115.127.128.0/18 maxlen: 24
115.127.192.0/19 maxlen: 24
202.168.224.0/19 maxlen: 24
2406:1400::/32 maxlen: 32
2406:1400::/48 maxlen: 48
2406:1400:c00::/48 maxlen: 48
2406:1400:c07::/48 maxlen: 48
2406:1400:c6b::/48 maxlen: 48
2406:1400:8386::/48 maxlen: 48
2406:1400:8387::/48 maxlen: 48
2406:1400:c100::/48 maxlen: 48
2406:1400:c109::/48 maxlen: 48
2406:1400:c174::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B37E3/0AFEA7CE03A011EAB4C5D27CC4F9AE02/p1cNzzcgqNWohWpLtlg_G66uAJM.crl
rsync://rpki.apnic.net/member_repository/A91B37E3/0AFEA7CE03A011EAB4C5D27CC4F9AE02/p1cNzzcgqNWohWpLtlg_G66uAJM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p1cNzzcgqNWohWpLtlg_G66uAJM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 29 Nov 2024 18:22:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3067 (0xbfb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B37E3/serialNumber=A7570DCF3720A8D5A8856A4BB6583F1BAEAE0093
Validity
Not Before: Aug 27 11:20:08 2024 GMT
Not After : May 1 00:00:00 2025 GMT
Subject: CN=66cdb668-3911
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:13:b7:b5:93:a9:4b:7b:51:3c:cf:25:ac:ac:
81:3b:22:d6:70:ba:eb:e0:3f:fb:0b:2e:86:b0:a6:
48:29:44:90:47:e8:13:ab:55:a4:46:dd:fb:f3:cd:
92:3c:ad:06:43:93:ef:f0:51:09:dc:64:61:0e:99:
18:30:7f:93:27:22:6f:bf:76:e6:4b:14:d3:5b:a4:
4e:cf:30:07:d1:55:ca:83:a7:47:7d:b4:04:a8:dd:
23:1e:44:5f:08:5c:62:f7:9d:8d:ab:f2:1a:58:17:
a1:70:b5:2a:d8:50:a4:4c:e8:23:04:a1:7a:32:04:
3c:01:f5:bb:16:68:4a:ad:b6:03:f5:05:34:43:6a:
cc:bf:3a:07:4b:b7:6d:d0:98:83:ed:44:41:f7:a4:
ba:a8:94:6f:ee:ff:f9:d3:ed:b4:16:50:4e:a8:15:
06:97:ca:5c:17:06:be:5b:42:14:98:f3:66:b6:3e:
a8:64:9a:80:5b:df:8d:1d:2b:fb:2a:21:4f:30:54:
c5:ab:43:54:08:5c:5b:62:e0:9f:40:4c:96:be:2e:
7b:69:2b:bc:bf:fc:ba:de:e4:f1:43:28:57:c3:d7:
42:46:18:23:5e:00:ff:62:8d:b1:e3:a8:4b:05:7e:
e3:3f:c2:4c:7a:e3:a2:72:78:4f:dd:a5:d8:15:c0:
19:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:12:C3:ED:24:3A:30:BD:2D:4E:A2:46:29:C9:07:AB:81:33:C2:39
X509v3 Authority Key Identifier:
keyid:A7:57:0D:CF:37:20:A8:D5:A8:85:6A:4B:B6:58:3F:1B:AE:AE:00:93
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B37E3/0AFEA7CE03A011EAB4C5D27CC4F9AE02/p1cNzzcgqNWohWpLtlg_G66uAJM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p1cNzzcgqNWohWpLtlg_G66uAJM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B37E3/0AFEA7CE03A011EAB4C5D27CC4F9AE02/24252532B84711EA8A7F036DC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
115.127.0.0-115.127.223.255
202.168.224.0/19
IPv6:
2406:1400::/32
Signature Algorithm: sha256WithRSAEncryption
64:b9:27:75:b9:0e:69:06:f4:a0:76:95:7c:13:54:2e:4e:ff:
34:aa:13:ed:71:5f:a5:be:d9:73:57:c3:a0:55:7e:3e:1b:ab:
e2:80:fb:f4:f2:ac:04:e6:42:b2:80:b9:fb:8c:87:de:bf:2c:
1c:6b:9e:aa:fa:3a:6c:e6:9d:a7:3e:b8:1a:fb:95:a0:78:5d:
ac:91:ab:71:0f:9b:9b:30:a6:15:5d:4d:28:a4:d8:a0:34:5a:
76:bf:80:91:93:1a:98:20:97:17:f5:c2:02:6f:f0:8e:ee:1b:
52:2f:ad:67:66:4f:f1:74:0f:5f:27:12:da:c8:59:b4:58:4a:
ef:9d:2c:df:4f:22:b5:b6:6a:dc:9b:7b:79:74:c8:1a:7f:42:
5f:3a:f9:86:99:de:c9:e4:8c:85:e6:80:b1:f9:e8:32:f7:58:
de:aa:ae:29:70:54:88:b2:3e:96:e8:1b:1c:ae:81:c6:50:88:
c8:4d:fd:34:ee:f2:b4:ce:d0:bf:7a:7b:0f:ec:f9:22:5b:00:
22:88:60:e5:0d:e0:ad:53:78:42:97:87:cf:3a:9d:36:76:9a:
97:fd:4d:b4:ff:17:30:4f:4e:ea:03:ee:ea:9d:7e:b5:ee:c4:
68:ff:6a:80:61:1c:f2:45:70:9a:d3:56:cf:04:cf:c4:f9:f3:
b7:18:0e:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 19:45:02 2024 by rpki-client on console-fra.rpki-client.org