Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B5486/856A249CA98211EA932DEC54C4F9AE02/5C0A4894F60D11EEADD2752BC4F9AE02.roa
File: 5C0A4894F60D11EEADD2752BC4F9AE02.roa (raw, json)
Hash identifier: H/NoPQuzUHx4Pz2NsHS1IxKvOouKPbRBspJCW/d+jBs=
Subject key identifier: F0:F8:EB:F4:B4:20:C4:CC:10:18:60:7F:EC:2E:65:51:71:EB:55:E5
Certificate issuer: /CN=A91B5486/serialNumber=2E304A3D92499D9D7D338A3EA02F7C5348425B17
Certificate serial: 086B
Authority key identifier: 2E:30:4A:3D:92:49:9D:9D:7D:33:8A:3E:A0:2F:7C:53:48:42:5B:17
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LjBKPZJJnZ19M4o-oC98U0hCWxc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B5486/856A249CA98211EA932DEC54C4F9AE02/5C0A4894F60D11EEADD2752BC4F9AE02.roa
Signing time: Tue 09 Apr 2024 01:10:54 +0000
ROA not before: Tue 09 Apr 2024 01:10:54 +0000
ROA not after: Wed 28 May 2025 00:00:00 +0000
asID: 41095
IP address blocks: 45.248.200.0/24 maxlen: 24
45.248.201.0/24 maxlen: 24
45.248.202.0/23 maxlen: 24
103.6.128.0/22 maxlen: 23
103.6.130.0/23 maxlen: 24
103.23.168.0/22 maxlen: 22
103.23.168.0/24 maxlen: 24
103.23.169.0/24 maxlen: 24
103.23.170.0/24 maxlen: 24
103.23.171.0/24 maxlen: 24
103.217.160.0/22 maxlen: 22
103.217.160.0/24 maxlen: 24
103.217.161.0/24 maxlen: 24
103.217.162.0/24 maxlen: 24
103.217.163.0/24 maxlen: 24
103.242.72.0/22 maxlen: 24
220.158.132.0/22 maxlen: 24
2401:47c0::/32 maxlen: 32
2401:47c0:1000::/36 maxlen: 36
2401:47c0:1000::/40 maxlen: 40
2401:47c0:1100::/40 maxlen: 40
2401:47c0:1200::/40 maxlen: 40
2401:47c0:1300::/40 maxlen: 40
2401:47c0:1400::/40 maxlen: 40
2401:47c0:1500::/40 maxlen: 40
2401:47c0:1600::/40 maxlen: 40
2401:47c0:1700::/40 maxlen: 40
2401:47c0:1800::/40 maxlen: 40
2401:47c0:1a00::/40 maxlen: 40
2401:47c0:1b00::/40 maxlen: 40
2401:47c0:1c00::/40 maxlen: 40
2401:47c0:1d00::/40 maxlen: 40
2401:47c0:f000::/36 maxlen: 40
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B5486/856A249CA98211EA932DEC54C4F9AE02/LjBKPZJJnZ19M4o-oC98U0hCWxc.crl
rsync://rpki.apnic.net/member_repository/A91B5486/856A249CA98211EA932DEC54C4F9AE02/LjBKPZJJnZ19M4o-oC98U0hCWxc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LjBKPZJJnZ19M4o-oC98U0hCWxc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 13 May 2024 21:50:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2155 (0x86b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B5486/serialNumber=2E304A3D92499D9D7D338A3EA02F7C5348425B17
Validity
Not Before: Apr 9 01:10:54 2024 GMT
Not After : May 28 00:00:00 2025 GMT
Subject: CN=6614959e-9689
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:40:db:ac:56:68:49:0f:46:5c:e5:be:0a:74:
d2:83:c5:a5:88:e3:1d:94:89:45:4a:73:74:a9:00:
13:ff:20:9c:5c:bc:ad:b3:42:d2:5c:a5:d3:ca:c9:
95:86:64:16:c6:f1:b7:19:3d:d5:87:1e:60:48:a4:
b1:f4:99:7b:72:27:a8:b3:89:33:31:e1:55:c7:c0:
38:83:f3:fa:b8:4f:f6:c5:d7:48:51:32:0c:71:90:
53:30:74:54:64:7e:10:9c:cb:40:77:ec:61:c0:bd:
00:57:5c:1d:5d:f0:e5:ac:16:cb:95:9b:5d:65:a2:
d6:b0:89:7c:f5:2f:72:83:3a:60:de:4d:22:00:de:
7e:32:50:81:29:13:6f:52:a1:97:7e:27:39:35:4c:
61:c3:47:63:2a:7d:dd:ae:40:af:5e:e0:d5:3a:04:
3c:e8:ed:a6:40:b6:a6:ae:32:b8:78:49:89:cf:af:
b6:07:13:93:75:c3:15:d3:c5:27:95:6f:30:51:55:
ea:58:7e:36:32:98:e4:23:f9:c2:a6:62:c1:40:43:
68:8f:59:56:71:cb:48:8b:33:d2:dd:13:a2:63:25:
c9:2a:69:09:19:46:24:86:87:06:2a:46:af:26:a2:
f8:72:6a:6d:b1:2c:61:0a:76:11:8d:00:d9:4d:29:
1e:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:F8:EB:F4:B4:20:C4:CC:10:18:60:7F:EC:2E:65:51:71:EB:55:E5
X509v3 Authority Key Identifier:
keyid:2E:30:4A:3D:92:49:9D:9D:7D:33:8A:3E:A0:2F:7C:53:48:42:5B:17
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B5486/856A249CA98211EA932DEC54C4F9AE02/LjBKPZJJnZ19M4o-oC98U0hCWxc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LjBKPZJJnZ19M4o-oC98U0hCWxc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B5486/856A249CA98211EA932DEC54C4F9AE02/5C0A4894F60D11EEADD2752BC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.248.200.0/22
103.6.128.0/22
103.23.168.0/22
103.217.160.0/22
103.242.72.0/22
220.158.132.0/22
IPv6:
2401:47c0::/32
Signature Algorithm: sha256WithRSAEncryption
bf:19:45:07:26:0c:d5:c3:5e:8a:34:cd:9b:98:54:35:48:70:
43:4c:10:c9:bf:d9:18:ae:2d:e2:d3:32:26:49:b4:ab:2b:68:
30:ea:ea:cc:1b:34:66:f4:91:ca:07:ec:9b:82:81:0a:a4:8d:
07:ba:83:7f:da:b0:be:c4:e7:96:82:e6:00:66:e4:bc:d0:1b:
ef:c9:05:2d:ca:f6:c4:87:df:0f:3f:e5:41:86:10:22:52:e1:
f5:6b:54:dd:27:54:62:f0:a9:67:d6:c8:be:64:63:b5:6b:1e:
77:eb:f0:3b:82:c7:5e:06:8e:24:4b:70:9e:7e:c6:f7:8d:80:
b5:11:ef:60:b2:f6:ee:7f:2c:d3:cf:02:d8:4d:43:d2:3c:3b:
a8:c7:7e:0f:5b:e7:70:75:ea:f4:97:c1:82:bf:6f:57:68:ae:
0e:02:41:82:f8:3a:6c:e8:5c:e3:14:f9:2a:0e:1e:8d:b3:23:
02:9f:6d:69:33:02:0f:63:f8:e5:30:60:fa:11:cb:79:f5:29:
c8:04:88:58:dd:de:3d:5b:e3:eb:a8:da:80:c7:d6:4e:9c:5b:
b2:ed:a0:b7:e5:a1:38:1d:90:dd:39:ff:23:a5:91:75:ff:50:
bb:c8:18:aa:5f:51:7a:3f:6f:87:6d:77:ad:4e:79:07:4d:84:
69:fc:79:cd
-----BEGIN CERTIFICATE-----
MIIFnjCCBIagAwIBAgICCGswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QjU0ODYxMTAvBgNVBAUTKDJFMzA0QTNEOTI0OTlEOUQ3RDMzOEEzRUEwMkY3QzUz
NDg0MjVCMTcwHhcNMjQwNDA5MDExMDU0WhcNMjUwNTI4MDAwMDAwWjAYMRYwFAYD
VQQDEw02NjE0OTU5ZS05Njg5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAx0DbrFZoSQ9GXOW+CnTSg8WliOMdlIlFSnN0qQAT/yCcXLyts0LSXKXTysmV
hmQWxvG3GT3Vhx5gSKSx9Jl7cieos4kzMeFVx8A4g/P6uE/2xddIUTIMcZBTMHRU
ZH4QnMtAd+xhwL0AV1wdXfDlrBbLlZtdZaLWsIl89S9ygzpg3k0iAN5+MlCBKRNv
UqGXfic5NUxhw0djKn3drkCvXuDVOgQ86O2mQLamrjK4eEmJz6+2BxOTdcMV08Un
lW8wUVXqWH42MpjkI/nCpmLBQENoj1lWcctIizPS3ROiYyXJKmkJGUYkhocGKkav
JqL4cmptsSxhCnYRjQDZTSkekwIDAQABo4ICwjCCAr4wHQYDVR0OBBYEFPD46/S0
IMTMEBhgf+wuZVFx61XlMB8GA1UdIwQYMBaAFC4wSj2SSZ2dfTOKPqAvfFNIQlsX
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNTQ4Ni84NTZBMjQ5Q0E5
ODIxMUVBOTMyREVDNTRDNEY5QUUwMi9MakJLUFpKSm5aMTlNNG8tb0M5OFUwaENX
eGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0xqQktQWkpKbloxOU00by1vQzk4VTBoQ1d4Yy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
QjU0ODYvODU2QTI0OUNBOTgyMTFFQTkzMkRFQzU0QzRGOUFFMDIvNUMwQTQ4OTRG
NjBEMTFFRUFERDI3NTJCQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwTAYIKwYBBQUHAQcBAf8E
PTA7MCoEAgABMCQDBAIt+MgDBAJnBoADBAJnF6gDBAJn2aADBAJn8kgDBALcnoQw
DQQCAAIwBwMFACQBR8AwDQYJKoZIhvcNAQELBQADggEBAL8ZRQcmDNXDXoo0zZuY
VDVIcENMEMm/2RiuLeLTMiZJtKsraDDq6swbNGb0kcoH7JuCgQqkjQe6g3/asL7E
55aC5gBm5LzQG+/JBS3K9sSH3w8/5UGGECJS4fVrVN0nVGLwqWfWyL5kY7VrHnfr
8DuCx14GjiRLcJ5+xveNgLUR72Cy9u5/LNPPAthNQ9I8O6jHfg9b53B16vSXwYK/
b1dorg4CQYL4OmzoXOMU+SoOHo2zIwKfbWkzAg9j+OUwYPoRy3n1KcgEiFjd3j1b
4+uo2oDH1k6cW7LtoLfloTgdkN05/yOlkXX/ULvIGKpfUXo/b4dtd61OeQdNhGn8
ec0=
-----END CERTIFICATE-----
Generated at Mon May 6 23:05:48 2024 by rpki-client on console-fra.rpki-client.org