Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91BC269/BA676E30CFE511EC94BBC75AC4F9AE02/FF651336509D11EEA33AE874C4F9AE02.roa
File: FF651336509D11EEA33AE874C4F9AE02.roa (raw, json)
Hash identifier: 7gBV/6QVMIKFLejm1t2ChtlEox7P+S/R2HxCBgXjBDo=
Subject key identifier: 5B:A4:A5:9C:A4:AF:B9:2D:16:94:3B:22:9F:1D:09:14:E5:3F:1C:C7
Certificate issuer: /CN=A91BC269/serialNumber=30E2061F7C20BD843BEE5372C1321C35FBB1D3EF
Certificate serial: 02FB
Authority key identifier: 30:E2:06:1F:7C:20:BD:84:3B:EE:53:72:C1:32:1C:35:FB:B1:D3:EF
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MOIGH3wgvYQ77lNywTIcNfux0-8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91BC269/BA676E30CFE511EC94BBC75AC4F9AE02/FF651336509D11EEA33AE874C4F9AE02.roa
Signing time: Wed 23 Oct 2024 01:35:30 +0000
ROA not before: Wed 23 Oct 2024 01:35:30 +0000
ROA not after: Tue 30 Dec 2025 00:00:00 +0000
asID: 55850
IP address blocks: 14.137.0.0/19 maxlen: 19
101.53.192.0/19 maxlen: 19
101.53.220.0/22 maxlen: 22
103.8.140.0/22 maxlen: 22
103.15.126.0/23 maxlen: 23
103.26.202.0/24 maxlen: 24
103.173.251.0/24 maxlen: 24
103.241.56.0/22 maxlen: 22
115.69.160.0/19 maxlen: 19
116.251.128.0/18 maxlen: 18
116.251.192.0/21 maxlen: 21
116.251.200.0/22 maxlen: 22
124.155.224.0/20 maxlen: 20
150.107.172.0/22 maxlen: 22
163.47.236.0/22 maxlen: 22
180.148.96.0/19 maxlen: 19
202.56.32.0/20 maxlen: 20
202.56.48.0/21 maxlen: 21
202.74.33.0/24 maxlen: 24
202.137.240.0/21 maxlen: 21
203.94.32.0/19 maxlen: 19
203.124.16.0/21 maxlen: 21
2401:2f40::/32 maxlen: 32
2406:5a00::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91BC269/BA676E30CFE511EC94BBC75AC4F9AE02/MOIGH3wgvYQ77lNywTIcNfux0-8.crl
rsync://rpki.apnic.net/member_repository/A91BC269/BA676E30CFE511EC94BBC75AC4F9AE02/MOIGH3wgvYQ77lNywTIcNfux0-8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MOIGH3wgvYQ77lNywTIcNfux0-8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 27 Nov 2024 20:33:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 763 (0x2fb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91BC269/serialNumber=30E2061F7C20BD843BEE5372C1321C35FBB1D3EF
Validity
Not Before: Oct 23 01:35:30 2024 GMT
Not After : Dec 30 00:00:00 2025 GMT
Subject: CN=671852e2-e7cf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:7a:3d:ac:4b:be:14:b9:c0:2a:c5:50:3a:b0:
71:f6:81:cd:64:af:6a:08:e3:ea:59:8f:80:97:8a:
1a:10:7d:b9:57:88:66:7f:fa:92:3a:93:2b:51:16:
73:da:80:2b:8c:86:24:19:97:a8:67:88:ce:6c:a1:
7a:41:8b:2c:39:02:f2:18:0b:0d:aa:0d:ce:8c:30:
ff:c0:33:42:26:15:7c:6d:f4:66:66:e2:cb:c1:94:
7d:c7:ad:e4:54:7d:3c:58:9e:dc:3e:c6:c3:73:10:
de:07:4c:01:90:8b:3f:51:bc:cf:58:ad:d4:b3:fd:
6c:f6:7c:d4:15:cb:d4:6a:51:ef:6d:fc:ed:9e:49:
73:6f:9b:7a:f6:a3:0e:7d:d9:25:ef:c8:0f:88:a5:
86:2b:b7:da:0f:b3:49:70:bb:0a:d7:d7:f9:a4:9a:
7b:57:58:34:1c:2d:f6:53:b9:01:fa:34:ff:a5:f2:
d4:84:f0:5a:7b:d0:24:33:38:99:11:19:61:03:2c:
b6:df:57:f9:a5:1b:96:85:04:1f:0e:99:58:67:44:
f6:d0:e2:ff:f4:95:78:d8:90:02:36:63:f5:6a:83:
ea:2b:8e:5d:15:30:44:54:60:65:f5:29:99:3c:2e:
7c:80:b3:d4:f7:32:b6:3f:2a:01:32:05:80:1d:b3:
19:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:A4:A5:9C:A4:AF:B9:2D:16:94:3B:22:9F:1D:09:14:E5:3F:1C:C7
X509v3 Authority Key Identifier:
keyid:30:E2:06:1F:7C:20:BD:84:3B:EE:53:72:C1:32:1C:35:FB:B1:D3:EF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91BC269/BA676E30CFE511EC94BBC75AC4F9AE02/MOIGH3wgvYQ77lNywTIcNfux0-8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MOIGH3wgvYQ77lNywTIcNfux0-8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BC269/BA676E30CFE511EC94BBC75AC4F9AE02/FF651336509D11EEA33AE874C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
14.137.0.0/19
101.53.192.0/19
103.8.140.0/22
103.15.126.0/23
103.26.202.0/24
103.173.251.0/24
103.241.56.0/22
115.69.160.0/19
116.251.128.0-116.251.203.255
124.155.224.0/20
150.107.172.0/22
163.47.236.0/22
180.148.96.0/19
202.56.32.0-202.56.55.255
202.74.33.0/24
202.137.240.0/21
203.94.32.0/19
203.124.16.0/21
IPv6:
2401:2f40::/32
2406:5a00::/32
Signature Algorithm: sha256WithRSAEncryption
9e:94:7d:fe:2a:4c:5c:ab:f1:99:57:6e:69:40:6e:50:6b:5d:
d7:52:c6:0f:24:cb:61:ca:22:83:8b:9b:1f:3e:c6:88:67:e2:
89:c7:01:16:73:06:b8:c2:91:25:11:a8:ac:db:82:de:f8:38:
da:f7:b5:39:32:77:1d:79:35:b0:fc:97:07:75:29:59:1b:2f:
b0:01:3e:33:08:cd:71:ec:53:f9:50:28:00:53:13:79:ee:85:
1c:a2:b3:18:86:e4:94:0d:92:fd:70:ab:86:47:0b:48:5f:8e:
ab:3b:cd:79:07:39:e1:60:6a:07:aa:c7:6f:f4:03:2d:56:1c:
22:ed:f9:12:f4:7b:b2:53:74:be:62:e3:27:dc:cb:b2:76:4d:
6f:81:c0:54:fe:c2:57:bf:17:32:33:cd:8e:da:ab:ed:db:50:
f9:ad:74:8c:69:7d:c6:52:62:5c:54:da:3f:e1:80:37:28:d6:
10:b8:75:a9:55:91:0a:96:a6:6d:1a:87:b6:f2:f7:62:85:19:
68:0c:48:2c:2a:c1:80:24:31:e8:a3:1c:ab:b0:3b:3a:7b:d9:
a1:b8:8f:11:10:8a:09:26:d7:c4:8b:a4:77:52:35:d1:e5:e7:
b3:11:f9:df:d6:cd:3b:33:8e:a3:b3:a7:9c:13:b9:8a:db:8a:
13:c1:3c:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 03:21:50 2024 by rpki-client on console-ams.rpki-client.org