Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91BB4C2/B17E95D6037011EE9BB62C2FC4F9AE02/CBF7E2CE2D3611EEA81A490BC4F9AE02.roa
File: CBF7E2CE2D3611EEA81A490BC4F9AE02.roa (raw, json)
Hash identifier: q2jyIpsgOSZMDylILKfsOrMIus5pnrAFZdrI/kJzgvw=
Subject key identifier: EC:A4:C7:BC:99:F5:DE:53:E9:A9:94:0B:35:D5:E4:49:66:61:87:29
Certificate issuer: /CN=A91BB4C2/serialNumber=DC23A69EA1EFC1A379492C13E9AC147C49F5AD04
Certificate serial: 0149
Authority key identifier: DC:23:A6:9E:A1:EF:C1:A3:79:49:2C:13:E9:AC:14:7C:49:F5:AD:04
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3COmnqHvwaN5SSwT6awUfEn1rQQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91BB4C2/B17E95D6037011EE9BB62C2FC4F9AE02/CBF7E2CE2D3611EEA81A490BC4F9AE02.roa
Signing time: Sun 01 Sep 2024 13:32:37 +0000
ROA not before: Sun 01 Sep 2024 13:32:37 +0000
ROA not after: Sun 31 Aug 2025 00:00:00 +0000
asID: 136395
IP address blocks: 103.213.36.0/23 maxlen: 23
103.213.36.0/24 maxlen: 24
103.213.37.0/24 maxlen: 24
2401:5e0::/32 maxlen: 32
2401:5e0::/36 maxlen: 36
2401:5e0:1::/48 maxlen: 48
2401:5e0:2::/48 maxlen: 48
2401:5e0:3::/48 maxlen: 48
2401:5e0:4::/48 maxlen: 48
2401:5e0:1000::/36 maxlen: 36
2401:5e0:1000::/48 maxlen: 48
2401:5e0:1001::/48 maxlen: 48
2401:5e0:1002::/48 maxlen: 48
2401:5e0:1003::/48 maxlen: 48
2401:5e0:1004::/48 maxlen: 48
2401:5e0:1005::/48 maxlen: 48
2401:5e0:1006::/48 maxlen: 48
2401:5e0:1007::/48 maxlen: 48
2401:5e0:1008::/48 maxlen: 48
2401:5e0:1009::/48 maxlen: 48
2401:5e0:100a::/48 maxlen: 48
2401:5e0:100b::/48 maxlen: 48
2401:5e0:100c::/48 maxlen: 48
2401:5e0:100d::/48 maxlen: 48
2401:5e0:100e::/48 maxlen: 48
2401:5e0:100f::/48 maxlen: 48
2401:5e0:1010::/48 maxlen: 48
2401:5e0:2000::/36 maxlen: 36
2401:5e0:2000::/48 maxlen: 48
2401:5e0:2001::/48 maxlen: 48
2401:5e0:2002::/48 maxlen: 48
2401:5e0:2003::/48 maxlen: 48
2401:5e0:2004::/48 maxlen: 48
2401:5e0:2005::/48 maxlen: 48
2401:5e0:3000::/36 maxlen: 36
2401:5e0:4000::/36 maxlen: 36
2401:5e0:5000::/36 maxlen: 36
2401:5e0:6000::/36 maxlen: 36
2401:5e0:7000::/36 maxlen: 36
2401:5e0:8000::/36 maxlen: 36
2401:5e0:9000::/36 maxlen: 36
2401:5e0:a000::/36 maxlen: 36
2401:5e0:b000::/36 maxlen: 36
2401:5e0:c000::/36 maxlen: 36
2401:5e0:d000::/36 maxlen: 36
2401:5e0:e000::/36 maxlen: 36
2401:5e0:f000::/36 maxlen: 36
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91BB4C2/B17E95D6037011EE9BB62C2FC4F9AE02/3COmnqHvwaN5SSwT6awUfEn1rQQ.crl
rsync://rpki.apnic.net/member_repository/A91BB4C2/B17E95D6037011EE9BB62C2FC4F9AE02/3COmnqHvwaN5SSwT6awUfEn1rQQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3COmnqHvwaN5SSwT6awUfEn1rQQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 30 Nov 2024 02:50:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 329 (0x149)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91BB4C2/serialNumber=DC23A69EA1EFC1A379492C13E9AC147C49F5AD04
Validity
Not Before: Sep 1 13:32:37 2024 GMT
Not After : Aug 31 00:00:00 2025 GMT
Subject: CN=66d46cf5-8a78
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:ca:70:6e:7a:5c:53:de:91:06:10:31:3f:f3:
8c:52:ae:3c:94:aa:59:ec:b9:1d:ec:84:74:cc:3c:
75:53:47:a6:a3:6f:6c:70:f5:c8:11:a4:35:cc:20:
bf:8b:e6:69:e6:1c:af:d1:70:4e:ea:0c:9d:06:9d:
51:d6:7a:b6:30:67:d6:0b:a2:eb:e6:db:14:5d:89:
c9:73:45:35:bd:b2:2b:d8:f1:af:2a:bf:be:26:a7:
78:c0:85:a5:5b:70:2a:8c:54:d0:0a:32:0d:10:e7:
b4:c5:f0:da:08:d4:9c:7f:0f:b9:c0:7d:36:c1:17:
42:8c:2d:83:57:6b:bd:2e:c5:60:b5:d7:db:58:52:
e8:b3:51:cb:95:4f:ec:d0:d1:73:71:39:f5:15:c2:
f6:ce:dd:db:02:a5:e3:fc:3c:2f:a0:ec:04:76:ab:
d2:38:33:f3:6a:54:57:ca:d6:92:fa:59:11:5f:69:
2b:a8:ac:7c:64:f3:29:3f:61:8c:26:ca:ac:51:a1:
51:81:a8:e0:09:40:3c:73:40:e4:1d:b7:89:ac:29:
56:1b:2d:d6:27:b5:d4:b6:1f:c9:b1:46:94:0d:5e:
29:6e:f5:88:29:88:19:90:b6:26:e6:6a:3f:ce:48:
65:5b:1b:b2:d9:ec:c4:76:80:78:63:6b:cd:e5:95:
f2:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:A4:C7:BC:99:F5:DE:53:E9:A9:94:0B:35:D5:E4:49:66:61:87:29
X509v3 Authority Key Identifier:
keyid:DC:23:A6:9E:A1:EF:C1:A3:79:49:2C:13:E9:AC:14:7C:49:F5:AD:04
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91BB4C2/B17E95D6037011EE9BB62C2FC4F9AE02/3COmnqHvwaN5SSwT6awUfEn1rQQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3COmnqHvwaN5SSwT6awUfEn1rQQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BB4C2/B17E95D6037011EE9BB62C2FC4F9AE02/CBF7E2CE2D3611EEA81A490BC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.213.36.0/23
IPv6:
2401:5e0::/32
Signature Algorithm: sha256WithRSAEncryption
9f:d4:f0:74:7e:de:4e:35:16:62:d0:8b:19:20:19:bb:8b:81:
79:3c:a2:79:95:fe:6d:b2:3e:16:13:bd:23:3f:dd:db:15:bf:
74:ba:ed:12:0a:84:28:8b:88:12:64:2a:cd:4c:85:ff:8d:33:
54:2e:76:d2:d0:99:7a:6b:2a:8f:4d:c4:3c:8f:90:94:bf:9b:
9b:b7:6f:b3:a9:33:02:7c:13:0a:dd:6a:c5:ef:9b:bd:76:1b:
ab:fd:e0:81:ba:ac:07:a2:1e:dc:46:9c:33:46:b4:22:df:05:
00:12:c2:62:97:9e:68:db:1c:5c:28:f0:e8:3e:98:b3:d1:08:
2f:c3:bf:35:68:ed:10:3e:43:66:af:a5:32:c8:85:de:a4:5d:
72:2c:2c:50:c6:52:18:3a:fc:25:09:df:69:5b:d4:b7:c4:3c:
32:b0:9c:17:8b:d9:83:55:ef:c7:5a:3c:9a:05:f7:13:9d:60:
dc:73:fb:7f:8a:29:20:e1:80:c0:4a:bb:bb:7e:c1:e7:7f:e4:
90:13:13:be:1d:0f:5e:1a:36:9d:07:ea:c4:60:ec:30:cc:6f:
1e:ba:77:8d:06:b1:1f:7d:1b:d7:4b:dc:d2:21:c3:95:28:b7:
c9:09:cb:64:cb:71:07:2d:e7:fb:82:38:ee:cd:61:67:73:61:
80:1d:21:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 05:02:56 2024 by rpki-client on console-fra.rpki-client.org