Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91BBA80/B98E81D605B911EA8208996EC4F9AE02/10F4726C368711EE86778E65C4F9AE02.roa
File: 10F4726C368711EE86778E65C4F9AE02.roa (raw, json)
Hash identifier: xFuZAslfvvvB6Kty6Y5FjYu5lz+E1X4gf6jyyfPXAQU=
Subject key identifier: 9B:47:86:99:CA:92:BE:2B:6B:0B:87:05:97:06:57:ED:E1:23:E9:0F
Certificate issuer: /CN=A91BBA80/serialNumber=060F7E77C00ACBE0868DC0B8FCA23D4A5F07D77A
Certificate serial: 0BDE
Authority key identifier: 06:0F:7E:77:C0:0A:CB:E0:86:8D:C0:B8:FC:A2:3D:4A:5F:07:D7:7A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Bg9-d8AKy-CGjcC4_KI9Sl8H13o.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91BBA80/B98E81D605B911EA8208996EC4F9AE02/10F4726C368711EE86778E65C4F9AE02.roa
Signing time: Wed 08 May 2024 19:57:45 +0000
ROA not before: Wed 08 May 2024 19:57:45 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 10214
IP address blocks: 103.6.208.0/22 maxlen: 23
103.6.208.0/23 maxlen: 24
103.6.210.0/24 maxlen: 24
103.46.212.0/22 maxlen: 22
103.46.212.0/24 maxlen: 24
103.46.213.0/24 maxlen: 24
103.46.214.0/24 maxlen: 24
103.46.215.0/24 maxlen: 24
103.89.80.0/22 maxlen: 24
103.225.228.0/22 maxlen: 24
113.30.224.0/22 maxlen: 24
121.200.32.0/20 maxlen: 20
121.200.32.0/21 maxlen: 24
121.200.40.0/22 maxlen: 24
121.200.44.0/24 maxlen: 24
121.200.46.0/23 maxlen: 24
160.20.72.0/22 maxlen: 24
163.47.56.0/22 maxlen: 22
163.47.56.0/24 maxlen: 24
163.47.57.0/24 maxlen: 24
163.47.58.0/24 maxlen: 24
163.47.59.0/24 maxlen: 24
203.57.126.0/23 maxlen: 24
2001:df1:b400::/48 maxlen: 48
2400:ec40::/32 maxlen: 32
2400:ec40::/36 maxlen: 36
2400:ec40:1000::/36 maxlen: 36
2400:ec40:2000::/36 maxlen: 36
2400:ec40:3000::/36 maxlen: 36
2400:ec40:4000::/36 maxlen: 36
2400:ec40:4000::/40 maxlen: 40
2400:ec40:5000::/36 maxlen: 36
2400:ec40:5100::/40 maxlen: 40
2400:ec40:5200::/40 maxlen: 40
2400:ec40:6000::/36 maxlen: 36
2400:ec40:7000::/36 maxlen: 36
2400:ec40:8000::/36 maxlen: 36
2400:ec40:9000::/36 maxlen: 36
2400:ec40:a000::/36 maxlen: 36
2400:ec40:b000::/36 maxlen: 36
2400:ec40:c000::/36 maxlen: 36
2400:ec40:d000::/36 maxlen: 36
2400:ec40:e000::/36 maxlen: 36
2400:ec40:f000::/36 maxlen: 36
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91BBA80/B98E81D605B911EA8208996EC4F9AE02/Bg9-d8AKy-CGjcC4_KI9Sl8H13o.crl
rsync://rpki.apnic.net/member_repository/A91BBA80/B98E81D605B911EA8208996EC4F9AE02/Bg9-d8AKy-CGjcC4_KI9Sl8H13o.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Bg9-d8AKy-CGjcC4_KI9Sl8H13o.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 23 May 2024 19:33:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3038 (0xbde)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91BBA80/serialNumber=060F7E77C00ACBE0868DC0B8FCA23D4A5F07D77A
Validity
Not Before: May 8 19:57:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=663bd938-1b9d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:aa:ac:dc:8f:d3:cd:9f:02:5f:74:00:3c:cd:
85:4c:c6:c5:3e:7c:00:84:79:5d:a4:e0:aa:fe:51:
de:28:9a:48:64:2a:df:19:d1:a5:db:8e:c0:a7:74:
3a:a1:cb:12:fb:6c:a5:fc:b4:26:1d:eb:57:84:00:
8e:f8:8e:4a:b3:05:1f:4b:15:65:7d:7a:ed:ea:56:
9a:fe:32:c5:66:09:35:d1:5b:d9:fd:36:01:65:de:
d4:1c:cd:34:da:c9:82:e0:5f:f6:4e:8b:1f:a6:84:
bf:ec:ad:da:f7:ea:67:84:90:57:6a:09:98:48:11:
7d:db:58:95:04:9f:28:1c:4f:f3:f4:b5:7d:b2:7f:
03:71:a9:f4:fb:ea:ee:6c:31:ea:0d:4b:5f:55:85:
63:34:b7:b8:0c:d1:8e:e3:c3:ef:77:21:cc:11:22:
27:26:3a:b8:08:4b:0e:d2:99:da:b7:31:d8:e0:14:
73:34:af:bd:16:69:8d:12:b1:47:d9:dc:6d:cf:0d:
46:68:82:48:f4:01:b2:14:e4:2a:67:6c:ba:bd:4c:
5e:ad:ca:40:f7:e1:b7:6f:e3:87:64:55:5c:ef:6b:
20:9c:30:40:f5:57:2a:5c:a2:b3:ab:e3:49:43:9c:
b4:49:c5:f9:ef:74:08:70:e2:60:03:89:55:59:1f:
11:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:47:86:99:CA:92:BE:2B:6B:0B:87:05:97:06:57:ED:E1:23:E9:0F
X509v3 Authority Key Identifier:
keyid:06:0F:7E:77:C0:0A:CB:E0:86:8D:C0:B8:FC:A2:3D:4A:5F:07:D7:7A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91BBA80/B98E81D605B911EA8208996EC4F9AE02/Bg9-d8AKy-CGjcC4_KI9Sl8H13o.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Bg9-d8AKy-CGjcC4_KI9Sl8H13o.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BBA80/B98E81D605B911EA8208996EC4F9AE02/10F4726C368711EE86778E65C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.6.208.0/22
103.46.212.0/22
103.89.80.0/22
103.225.228.0/22
113.30.224.0/22
121.200.32.0/20
160.20.72.0/22
163.47.56.0/22
203.57.126.0/23
IPv6:
2001:df1:b400::/48
2400:ec40::/32
Signature Algorithm: sha256WithRSAEncryption
90:4f:69:c9:95:f0:1d:ef:8f:f1:03:fb:79:0a:a6:44:17:81:
05:02:60:96:15:4b:99:75:4b:55:49:66:34:3a:10:d9:7c:6f:
86:f3:67:c5:a2:5d:25:43:cf:cf:d0:96:0e:c1:23:f9:65:65:
ed:a2:d5:29:82:57:f2:fb:c7:ba:88:7f:d7:89:8e:55:4b:93:
b5:6e:d6:88:ec:79:03:ce:86:a2:8f:89:dc:03:59:00:3e:ce:
e5:f6:e3:a2:f4:f0:c1:da:31:5b:ca:04:ba:cc:35:68:a5:7c:
77:e9:36:7b:c9:45:11:27:2e:6c:0e:f3:2d:32:f7:9b:14:9a:
19:e0:fa:6d:47:8c:f2:99:25:33:c8:3e:fb:97:a8:8b:7f:ea:
f1:89:da:5c:b1:01:01:ca:5b:f4:2c:25:3d:6e:84:57:54:17:
ad:b8:9e:d2:be:cb:cb:27:47:de:f7:59:86:f4:23:d6:8a:91:
eb:f1:a5:47:2e:b7:1b:16:aa:49:26:3f:61:cb:a7:6c:13:a7:
6f:0c:42:45:35:d9:7b:21:61:c0:36:f5:b2:3b:16:de:8f:9c:
d5:41:5e:2d:e5:fa:9a:07:37:d9:c1:9f:ae:a5:ac:c5:3b:80:
37:50:c0:42:e0:ef:ed:92:1d:80:f1:1a:29:a7:9f:cc:6f:d9:
30:71:2f:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 16 21:45:30 2024 by rpki-client on console-fra.rpki-client.org