Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C2CC7/791C6A347B3811E9BC0D3B32C4F9AE02/3EC9B08E017211EE8B2BF635C4F9AE02.roa
File: 3EC9B08E017211EE8B2BF635C4F9AE02.roa (raw, json)
Hash identifier: d9PE/siXHPs1UfoVZ3IX1jeCP8+NqpKzTJ5SMM58NWc=
Subject key identifier: 8E:86:D1:A5:7B:0A:96:B7:20:57:4E:13:53:51:45:55:01:2E:29:7F
Certificate issuer: /CN=A91C2CC7/serialNumber=77486B610D333AEBDA8F255C501411B01F18FF49
Certificate serial: 0E66
Authority key identifier: 77:48:6B:61:0D:33:3A:EB:DA:8F:25:5C:50:14:11:B0:1F:18:FF:49
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d0hrYQ0zOuvajyVcUBQRsB8Y_0k.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C2CC7/791C6A347B3811E9BC0D3B32C4F9AE02/3EC9B08E017211EE8B2BF635C4F9AE02.roa
Signing time: Sat 20 Apr 2024 18:36:48 +0000
ROA not before: Sat 20 Apr 2024 18:36:48 +0000
ROA not after: Wed 28 May 2025 00:00:00 +0000
asID: 203
IP address blocks: 2401:df00:1::/48 maxlen: 48
2401:df00:2::/48 maxlen: 48
2401:df00:11::/48 maxlen: 48
2401:df00:12::/48 maxlen: 48
2401:df00:21::/48 maxlen: 48
2401:df00:22::/48 maxlen: 48
2401:df00:31::/48 maxlen: 48
2401:df00:32::/48 maxlen: 48
2401:df00:41::/48 maxlen: 48
2401:df00:42::/48 maxlen: 48
2401:df00:51::/48 maxlen: 48
2401:df00:52::/48 maxlen: 48
2401:df00:61::/48 maxlen: 48
2401:df00:62::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C2CC7/791C6A347B3811E9BC0D3B32C4F9AE02/d0hrYQ0zOuvajyVcUBQRsB8Y_0k.crl
rsync://rpki.apnic.net/member_repository/A91C2CC7/791C6A347B3811E9BC0D3B32C4F9AE02/d0hrYQ0zOuvajyVcUBQRsB8Y_0k.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d0hrYQ0zOuvajyVcUBQRsB8Y_0k.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 15 May 2024 02:42:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3686 (0xe66)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C2CC7/serialNumber=77486B610D333AEBDA8F255C501411B01F18FF49
Validity
Not Before: Apr 20 18:36:48 2024 GMT
Not After : May 28 00:00:00 2025 GMT
Subject: CN=66240b40-a5b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:f6:33:da:ae:54:60:49:9c:d5:5c:fc:ef:21:
3f:a7:44:3e:05:ff:0e:84:97:e5:ee:7d:42:e4:42:
20:1b:8c:45:7f:bf:58:4c:f4:84:5b:3d:56:f7:03:
92:76:90:8f:38:41:14:32:0a:3b:fb:1c:b0:a1:7b:
1d:13:3c:e9:4f:8b:c3:08:a1:3d:30:2d:11:98:0e:
e8:11:3e:b9:58:cb:6a:cb:f4:b3:da:06:63:0c:0d:
ea:79:49:37:ba:91:f1:e8:d1:7c:2f:4e:1f:b2:ab:
74:75:61:65:cd:97:b2:e4:0d:9a:ed:a8:36:4d:99:
41:0a:01:68:af:92:8c:a5:47:85:5f:8f:2f:38:f1:
f8:ed:0d:8b:5b:dd:65:e0:bd:51:b5:6e:ad:79:9d:
ee:47:01:2a:86:11:2d:48:e7:23:de:e1:de:89:c2:
8d:94:f8:42:95:03:3f:e0:ec:89:a4:09:0b:01:1a:
24:98:90:84:2f:ee:57:49:33:4e:9c:0e:2b:46:4a:
7d:43:50:a9:d0:c4:4e:31:e1:c0:e3:b7:42:6d:66:
f9:28:53:9f:96:c6:14:bc:df:74:00:b0:45:ec:66:
9b:9b:83:cc:56:ce:a1:ab:1e:0d:9a:ed:78:3e:7c:
e2:e2:63:5e:f8:bf:7f:db:e0:6f:98:a2:ff:bc:8d:
25:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:86:D1:A5:7B:0A:96:B7:20:57:4E:13:53:51:45:55:01:2E:29:7F
X509v3 Authority Key Identifier:
keyid:77:48:6B:61:0D:33:3A:EB:DA:8F:25:5C:50:14:11:B0:1F:18:FF:49
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C2CC7/791C6A347B3811E9BC0D3B32C4F9AE02/d0hrYQ0zOuvajyVcUBQRsB8Y_0k.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d0hrYQ0zOuvajyVcUBQRsB8Y_0k.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C2CC7/791C6A347B3811E9BC0D3B32C4F9AE02/3EC9B08E017211EE8B2BF635C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv6:
2401:df00:1::-2401:df00:2:ffff:ffff:ffff:ffff:ffff
2401:df00:11::-2401:df00:12:ffff:ffff:ffff:ffff:ffff
2401:df00:21::-2401:df00:22:ffff:ffff:ffff:ffff:ffff
2401:df00:31::-2401:df00:32:ffff:ffff:ffff:ffff:ffff
2401:df00:41::-2401:df00:42:ffff:ffff:ffff:ffff:ffff
2401:df00:51::-2401:df00:52:ffff:ffff:ffff:ffff:ffff
2401:df00:61::-2401:df00:62:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
74:82:2e:9e:5c:c3:4f:8b:d1:85:01:52:55:71:fe:7f:df:ab:
56:76:40:40:a8:cf:69:9b:9e:80:2c:1e:dd:55:39:15:ed:c8:
25:81:db:61:ac:fc:88:81:45:c3:f8:cd:08:da:87:3d:15:04:
47:9f:ba:ba:c9:c3:d8:d0:24:9e:fc:ca:04:32:3e:1b:b5:e5:
7e:a8:5d:d8:54:c7:a9:d3:31:79:e0:ed:68:c0:cb:d7:f5:90:
50:6b:c2:38:70:1f:16:ac:8e:46:cd:8d:9a:47:9c:ca:7a:9b:
a3:5f:c1:41:64:3c:3b:77:e1:07:05:00:db:02:55:23:81:5a:
60:02:61:cb:79:b0:b5:ca:ed:da:94:28:b1:7c:41:05:4d:84:
97:7e:3b:f4:91:b9:3a:2a:75:b7:ee:0f:82:f0:7f:e6:e1:0f:
61:b7:b4:c4:17:22:cc:31:34:c9:0a:bb:48:ba:b3:c8:41:44:
45:a2:3f:e8:55:08:0e:ba:01:dc:75:82:f2:79:05:d2:84:2c:
67:b4:0a:3d:c4:a0:42:c2:5a:4d:35:a9:0f:f7:a0:e8:b1:64:
10:53:40:07:5c:e4:47:1d:56:4e:00:cb:57:f7:53:0b:80:3b:
06:98:f2:8d:91:7a:7a:a0:ce:7a:21:b3:a0:a2:b3:50:9a:bf:
9f:9b:a1:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 8 20:36:04 2024 by rpki-client on console-ams.rpki-client.org