Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B5D7E/ECA682341D8711E298322DE008B02CD2/39E64DFC558111EF9D0E0279C4F9AE02.roa
File: 39E64DFC558111EF9D0E0279C4F9AE02.roa (raw, json)
Hash identifier: ryV5JjbHfBXukmVJ7K0FGEhJZLDZLXGZSAWNaHVJvkI=
Subject key identifier: E8:96:0E:0A:7F:7A:0A:AA:B5:F5:63:0A:65:A0:B2:48:AA:9F:CA:77
Certificate issuer: /CN=A91B5D7E/serialNumber=4CAE3AEFB1AC8ABDDB99BCCEE4FA5A916D157B34
Certificate serial: 3540
Authority key identifier: 4C:AE:3A:EF:B1:AC:8A:BD:DB:99:BC:CE:E4:FA:5A:91:6D:15:7B:34
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TK4677Gsir3bmbzO5PpakW0VezQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B5D7E/ECA682341D8711E298322DE008B02CD2/39E64DFC558111EF9D0E0279C4F9AE02.roa
Signing time: Thu 08 Aug 2024 12:24:59 +0000
ROA not before: Thu 08 Aug 2024 12:24:59 +0000
ROA not after: Sun 02 Mar 2025 00:00:00 +0000
asID: 23750
IP address blocks: 103.207.84.0/24 maxlen: 24
103.207.86.0/24 maxlen: 24
103.207.87.0/24 maxlen: 24
116.90.100.0/24 maxlen: 24
116.90.106.0/24 maxlen: 24
116.90.107.0/24 maxlen: 24
116.90.108.0/24 maxlen: 24
116.90.109.0/24 maxlen: 24
116.90.110.0/24 maxlen: 24
116.90.111.0/24 maxlen: 24
116.90.115.0/24 maxlen: 24
116.90.120.0/24 maxlen: 24
116.90.123.0/24 maxlen: 24
116.90.124.0/24 maxlen: 24
116.90.125.0/24 maxlen: 24
116.90.126.0/24 maxlen: 24
116.90.127.0/24 maxlen: 24
121.46.64.0/24 maxlen: 24
121.46.66.0/24 maxlen: 24
121.46.67.0/24 maxlen: 24
202.69.32.0/24 maxlen: 24
202.69.33.0/24 maxlen: 24
202.69.34.0/24 maxlen: 24
202.69.35.0/24 maxlen: 24
202.69.36.0/24 maxlen: 24
202.69.37.0/24 maxlen: 24
202.69.38.0/24 maxlen: 24
202.69.39.0/24 maxlen: 24
202.69.40.0/24 maxlen: 24
202.69.41.0/24 maxlen: 24
202.69.42.0/24 maxlen: 24
202.69.43.0/24 maxlen: 24
202.69.44.0/24 maxlen: 24
202.69.45.0/24 maxlen: 24
202.69.46.0/24 maxlen: 24
202.69.47.0/24 maxlen: 24
202.69.48.0/24 maxlen: 24
202.69.49.0/24 maxlen: 24
202.69.50.0/24 maxlen: 24
202.69.51.0/24 maxlen: 24
202.69.52.0/24 maxlen: 24
202.69.53.0/24 maxlen: 24
202.69.54.0/24 maxlen: 24
202.69.55.0/24 maxlen: 24
202.69.56.0/24 maxlen: 24
202.69.57.0/24 maxlen: 24
202.69.58.0/24 maxlen: 24
202.69.59.0/24 maxlen: 24
202.69.60.0/24 maxlen: 24
202.69.61.0/24 maxlen: 24
202.69.62.0/24 maxlen: 24
202.69.63.0/24 maxlen: 24
202.142.144.0/24 maxlen: 24
202.142.145.0/24 maxlen: 24
202.142.146.0/24 maxlen: 24
202.142.147.0/24 maxlen: 24
202.142.148.0/24 maxlen: 24
202.142.149.0/24 maxlen: 24
202.142.150.0/24 maxlen: 24
202.142.152.0/24 maxlen: 24
202.142.153.0/24 maxlen: 24
202.142.154.0/24 maxlen: 24
202.142.156.0/24 maxlen: 24
202.142.157.0/24 maxlen: 24
202.142.158.0/24 maxlen: 24
202.142.159.0/24 maxlen: 24
2406:ac00:1::/48 maxlen: 48
2406:ac00:2::/48 maxlen: 48
2406:ac00:203::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B5D7E/ECA682341D8711E298322DE008B02CD2/TK4677Gsir3bmbzO5PpakW0VezQ.crl
rsync://rpki.apnic.net/member_repository/A91B5D7E/ECA682341D8711E298322DE008B02CD2/TK4677Gsir3bmbzO5PpakW0VezQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TK4677Gsir3bmbzO5PpakW0VezQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 29 Nov 2024 14:28:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13632 (0x3540)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B5D7E/serialNumber=4CAE3AEFB1AC8ABDDB99BCCEE4FA5A916D157B34
Validity
Not Before: Aug 8 12:24:59 2024 GMT
Not After : Mar 2 00:00:00 2025 GMT
Subject: CN=66b4b91a-26c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:d4:c5:3d:e2:e5:43:34:54:27:19:9f:03:76:
ba:2a:b3:89:e4:f2:04:ef:72:d7:9a:1a:83:01:f4:
72:fb:34:a5:1d:be:f8:d9:17:3a:3a:f3:cc:3c:fb:
16:7c:0d:0c:48:c6:8c:58:b9:ad:be:cc:28:8b:22:
4e:17:53:1f:30:b5:b1:8a:2f:dd:89:4d:cd:a3:11:
6e:72:39:37:84:bf:2d:10:54:51:14:76:64:a3:85:
b3:80:39:0a:28:77:95:f6:67:17:31:32:f6:4e:6f:
7d:af:6e:8f:11:9e:64:ef:dd:32:f0:05:b1:c9:60:
1b:5f:e9:58:8d:37:46:39:0d:ea:49:b0:ae:5e:df:
b3:c0:20:66:74:b3:0f:e7:87:5f:d1:b7:6b:97:eb:
e6:68:cb:7e:ca:35:84:35:c4:62:aa:0e:55:a0:85:
4c:bb:59:28:86:f3:71:e5:86:9c:99:0e:67:90:9f:
2c:29:c0:a3:19:f7:85:23:6d:3c:70:f5:73:9e:44:
b0:df:68:57:4b:ca:8f:c4:8e:4b:3b:b5:d5:d4:02:
a2:74:7f:fc:86:5d:71:57:a0:1e:14:c3:19:d5:e1:
0b:8f:f3:e8:df:e6:4a:d2:18:4d:d6:98:e9:b9:9d:
7a:1c:01:00:67:2e:61:ba:8e:0f:ad:92:9b:46:80:
1d:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:96:0E:0A:7F:7A:0A:AA:B5:F5:63:0A:65:A0:B2:48:AA:9F:CA:77
X509v3 Authority Key Identifier:
keyid:4C:AE:3A:EF:B1:AC:8A:BD:DB:99:BC:CE:E4:FA:5A:91:6D:15:7B:34
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B5D7E/ECA682341D8711E298322DE008B02CD2/TK4677Gsir3bmbzO5PpakW0VezQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TK4677Gsir3bmbzO5PpakW0VezQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B5D7E/ECA682341D8711E298322DE008B02CD2/39E64DFC558111EF9D0E0279C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.207.84.0/24
103.207.86.0/23
116.90.100.0/24
116.90.106.0-116.90.111.255
116.90.115.0/24
116.90.120.0/24
116.90.123.0-116.90.127.255
121.46.64.0/24
121.46.66.0/23
202.69.32.0/19
202.142.144.0-202.142.150.255
202.142.152.0-202.142.154.255
202.142.156.0/22
IPv6:
2406:ac00:1::-2406:ac00:2:ffff:ffff:ffff:ffff:ffff
2406:ac00:203::/48
Signature Algorithm: sha256WithRSAEncryption
09:07:81:7a:a0:c5:62:12:cf:6d:a5:29:b9:76:2b:ad:8c:b6:
5b:f5:e1:13:2e:96:42:3f:9d:bf:9d:3f:56:d0:04:57:16:69:
6c:66:64:3f:18:07:46:50:77:24:b5:b2:4b:25:a5:27:17:88:
d3:fa:73:5b:7d:99:bc:e4:99:ff:e1:7e:8c:6f:ab:94:61:52:
51:fe:20:3b:f8:21:05:75:1b:b4:18:3c:68:24:de:18:d2:b7:
02:2b:ff:cf:d3:95:1b:77:99:e4:a6:31:78:34:0e:00:3d:47:
e2:b8:f8:0f:db:23:96:75:29:73:25:ec:61:cb:fa:f0:ec:5c:
a0:09:8d:f0:6e:dd:9e:d5:52:43:a4:f7:a5:4e:ca:22:ce:cc:
ea:32:04:d1:31:66:5c:34:70:c9:44:78:b3:89:85:e8:98:58:
1c:74:41:8c:73:b6:b0:bf:ea:ec:32:d3:8f:43:6f:a7:83:7e:
57:db:bf:06:eb:c5:72:30:b1:fa:ea:64:78:1d:f8:a2:9b:c2:
a2:87:35:03:ce:7b:4e:fa:68:5c:f8:32:bc:06:25:d0:f3:12:
b3:de:e4:83:55:e6:a7:2c:9b:cf:13:4d:28:75:29:87:6e:4a:
3a:f6:c3:5c:48:28:81:8d:08:06:6c:2a:d0:ee:54:54:e8:89:
f0:cd:dd:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 16:50:03 2024 by rpki-client on console-ams.rpki-client.org