Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B527E/E8A88CBAAB7211E4B8BBB81CC4F9AE02/C22BA9D094E411EA9076F758C4F9AE02.roa
File: C22BA9D094E411EA9076F758C4F9AE02.roa (raw, json)
Hash identifier: IgwhRGzkUSBDQMKcII70Dlgk2iFbA7Ss/RSC/5v2m40=
Subject key identifier: 88:CD:BC:7D:5B:69:16:D5:93:20:2E:DC:9D:02:E5:66:E1:2F:1E:A6
Certificate issuer: /CN=A91B527E/serialNumber=57B687274B3319ED9071B966158F9B8AB64AE6F7
Certificate serial: 26C9
Authority key identifier: 57:B6:87:27:4B:33:19:ED:90:71:B9:66:15:8F:9B:8A:B6:4A:E6:F7
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/V7aHJ0szGe2QcblmFY-birZK5vc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B527E/E8A88CBAAB7211E4B8BBB81CC4F9AE02/C22BA9D094E411EA9076F758C4F9AE02.roa
Signing time: Thu 02 May 2024 16:02:54 +0000
ROA not before: Thu 02 May 2024 16:02:54 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 38553
IP address blocks: 103.123.40.0/24 maxlen: 24
103.123.41.0/24 maxlen: 24
103.123.42.0/24 maxlen: 24
103.123.43.0/24 maxlen: 24
120.72.16.0/24 maxlen: 24
120.72.17.0/24 maxlen: 24
120.72.18.0/24 maxlen: 24
120.72.19.0/24 maxlen: 24
120.72.20.0/24 maxlen: 24
120.72.21.0/24 maxlen: 24
120.72.22.0/24 maxlen: 24
120.72.23.0/24 maxlen: 24
120.72.24.0/24 maxlen: 24
120.72.25.0/24 maxlen: 24
120.72.26.0/24 maxlen: 24
120.72.27.0/24 maxlen: 24
120.72.28.0/24 maxlen: 24
120.72.29.0/24 maxlen: 24
120.72.30.0/24 maxlen: 24
120.72.31.0/24 maxlen: 24
202.137.112.0/24 maxlen: 24
202.137.113.0/24 maxlen: 24
202.137.114.0/24 maxlen: 24
202.137.115.0/24 maxlen: 24
202.137.116.0/24 maxlen: 24
202.137.117.0/24 maxlen: 24
202.137.118.0/24 maxlen: 24
202.137.119.0/24 maxlen: 24
202.137.120.0/24 maxlen: 24
202.137.121.0/24 maxlen: 24
202.137.122.0/24 maxlen: 24
202.137.123.0/24 maxlen: 24
202.137.124.0/24 maxlen: 24
202.137.125.0/24 maxlen: 24
202.137.126.0/24 maxlen: 24
202.137.127.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B527E/E8A88CBAAB7211E4B8BBB81CC4F9AE02/V7aHJ0szGe2QcblmFY-birZK5vc.crl
rsync://rpki.apnic.net/member_repository/A91B527E/E8A88CBAAB7211E4B8BBB81CC4F9AE02/V7aHJ0szGe2QcblmFY-birZK5vc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/V7aHJ0szGe2QcblmFY-birZK5vc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 23 May 2024 16:01:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 9929 (0x26c9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B527E/serialNumber=57B687274B3319ED9071B966158F9B8AB64AE6F7
Validity
Not Before: May 2 16:02:54 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6633b92d-80bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:bf:e4:a9:54:d0:b8:e6:e3:35:6f:b5:29:32:
89:55:f8:fa:69:b5:88:74:28:05:16:f4:7e:60:bf:
61:78:91:8e:29:5c:ba:52:d3:58:61:e8:fe:2f:f1:
8a:a2:f3:45:4c:70:24:2f:8e:45:63:e6:91:9f:9c:
05:25:ff:9b:67:1b:c6:c2:fd:3e:d2:96:9e:7a:90:
d3:0b:69:a5:1a:ee:86:eb:db:c7:1c:f3:df:18:2d:
ab:8c:c9:0f:04:a0:0d:a4:09:29:44:e5:5a:c7:73:
04:1a:c6:af:a7:c3:df:36:22:65:51:70:e5:a9:e5:
be:c2:ea:73:24:a4:d8:4d:6c:ac:75:ec:4c:dd:a3:
e3:9a:df:b0:0c:72:4c:cf:75:68:79:72:91:5d:6e:
d2:09:54:27:ff:6e:17:b7:cc:41:ac:55:bc:22:ff:
e3:10:26:c0:b1:85:85:d1:c6:64:42:d4:bb:e1:0c:
41:6b:39:d1:00:c1:72:42:c9:06:12:da:0a:1c:22:
9e:93:0e:67:91:2e:16:b5:39:14:ce:62:0b:1a:00:
39:48:0d:3c:26:75:f3:b7:be:5d:a6:4e:e6:80:a5:
d5:14:4b:cc:dc:5c:6d:08:40:f1:14:77:17:73:a2:
7f:88:b2:6e:3d:dd:f4:84:8f:c5:0c:0d:02:04:b3:
46:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:CD:BC:7D:5B:69:16:D5:93:20:2E:DC:9D:02:E5:66:E1:2F:1E:A6
X509v3 Authority Key Identifier:
keyid:57:B6:87:27:4B:33:19:ED:90:71:B9:66:15:8F:9B:8A:B6:4A:E6:F7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B527E/E8A88CBAAB7211E4B8BBB81CC4F9AE02/V7aHJ0szGe2QcblmFY-birZK5vc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/V7aHJ0szGe2QcblmFY-birZK5vc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B527E/E8A88CBAAB7211E4B8BBB81CC4F9AE02/C22BA9D094E411EA9076F758C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.123.40.0/22
120.72.16.0/20
202.137.112.0/20
Signature Algorithm: sha256WithRSAEncryption
07:5f:7b:09:2b:ea:f2:1c:8e:ec:44:1a:7f:7a:e0:56:c0:bd:
eb:ab:7e:7a:c5:6d:9a:11:e8:e1:a2:21:a5:15:6e:59:68:47:
ae:fe:29:59:35:3a:34:a2:ea:4e:36:df:d0:5d:6e:0a:dd:9a:
f1:6f:16:87:58:32:3f:b8:b2:f0:8d:53:65:84:19:53:c9:f2:
51:53:41:98:ab:2e:fa:93:84:b5:1a:90:0b:ff:07:8c:29:1d:
05:96:07:d1:71:cb:76:db:84:9b:af:40:1f:66:8a:ec:45:2c:
df:06:c2:c3:fa:58:4a:c3:20:3f:56:d1:b8:52:3b:2f:f5:3f:
91:95:3b:d8:15:74:a1:fa:f3:06:bc:35:02:41:59:8d:09:55:
48:ba:90:0d:48:ec:e1:f5:3c:ab:95:3c:d6:c7:8f:34:3a:6d:
a7:7d:b6:cf:2a:b9:51:1f:ec:a9:64:bc:9a:0a:a6:77:bd:c4:
01:7d:e3:22:f7:c5:f9:db:5f:0f:a0:8f:5f:6a:44:f2:5a:75:
ae:8b:e9:15:c4:5b:83:2d:40:67:a1:db:ad:f2:96:8b:bf:af:
85:a0:94:66:1c:6f:9e:b3:73:19:b6:b3:e1:25:40:bc:40:de:
e7:3b:ca:b2:c9:90:15:c8:13:f9:6b:d8:da:27:5c:41:5e:b1:
a9:be:64:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 16 18:26:08 2024 by rpki-client on console-fra.rpki-client.org