Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C6833/F3D480EC83B311E69DD86730C4F9AE02/3F1BB7A09BC011EF995CBB11C4F9AE02.roa
File: 3F1BB7A09BC011EF995CBB11C4F9AE02.roa (raw, json)
Hash identifier: ppVaHDx1dLxEzXzKs4B/Bei6naIiQDjP+g7Sivk4L7g=
Subject key identifier: F9:9E:B8:77:E9:A9:38:5F:A1:AB:83:5B:BC:F5:94:80:13:B2:6B:6A
Certificate issuer: /CN=A91C6833/serialNumber=45C808A8ACDE24AC9613E01A49596100ED5E8CF1
Certificate serial: 1DE6
Authority key identifier: 45:C8:08:A8:AC:DE:24:AC:96:13:E0:1A:49:59:61:00:ED:5E:8C:F1
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RcgIqKzeJKyWE-AaSVlhAO1ejPE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C6833/F3D480EC83B311E69DD86730C4F9AE02/3F1BB7A09BC011EF995CBB11C4F9AE02.roa
Signing time: Tue 05 Nov 2024 21:52:27 +0000
ROA not before: Tue 05 Nov 2024 21:52:27 +0000
ROA not after: Mon 01 Dec 2025 00:00:00 +0000
asID: 58893
IP address blocks: 43.242.176.0/24 maxlen: 24
43.242.177.0/24 maxlen: 24
43.242.178.0/24 maxlen: 24
43.242.179.0/24 maxlen: 24
103.11.220.0/24 maxlen: 24
103.12.58.0/24 maxlen: 24
103.18.243.0/24 maxlen: 24
103.29.163.0/24 maxlen: 24
103.75.244.0/22 maxlen: 22
103.75.244.0/24 maxlen: 24
103.75.245.0/24 maxlen: 24
103.75.246.0/24 maxlen: 24
103.75.247.0/24 maxlen: 24
103.93.95.0/24 maxlen: 24
103.97.154.0/24 maxlen: 24
103.97.168.0/23 maxlen: 24
116.206.64.0/22 maxlen: 22
116.206.64.0/24 maxlen: 24
116.206.65.0/24 maxlen: 24
116.206.66.0/24 maxlen: 24
116.206.67.0/24 maxlen: 24
203.80.128.0/24 maxlen: 24
203.80.130.0/24 maxlen: 24
2407:5b80::/32 maxlen: 32
2407:5b80::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C6833/F3D480EC83B311E69DD86730C4F9AE02/RcgIqKzeJKyWE-AaSVlhAO1ejPE.crl
rsync://rpki.apnic.net/member_repository/A91C6833/F3D480EC83B311E69DD86730C4F9AE02/RcgIqKzeJKyWE-AaSVlhAO1ejPE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RcgIqKzeJKyWE-AaSVlhAO1ejPE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 29 Nov 2024 16:06:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7654 (0x1de6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C6833/serialNumber=45C808A8ACDE24AC9613E01A49596100ED5E8CF1
Validity
Not Before: Nov 5 21:52:27 2024 GMT
Not After : Dec 1 00:00:00 2025 GMT
Subject: CN=672a939a-bfaa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:35:ba:32:d4:09:ce:90:a5:f8:e3:3a:1b:9d:
69:25:83:51:fe:8e:d3:3c:3d:e5:9f:d4:de:d2:55:
e7:cd:10:7a:cd:ab:09:9a:ea:08:d7:7c:7e:31:ef:
ca:5c:24:68:51:1c:c8:a1:7e:da:89:a6:a7:5f:6b:
30:fa:7e:6b:30:b4:2b:1d:18:0e:ac:01:42:d6:69:
eb:2d:c6:fc:49:6d:e2:ae:5c:8c:07:db:77:70:b8:
80:dd:99:20:4f:15:1e:56:31:ea:46:09:80:01:b3:
19:65:21:34:71:7a:95:a5:44:07:2d:d1:26:61:cc:
4b:b0:df:95:0f:0a:03:6f:3a:a7:e1:9b:02:cb:88:
53:94:79:d7:f3:0d:82:51:f6:57:02:77:30:82:44:
1d:84:9a:0c:2b:03:7b:54:d5:91:31:51:37:0c:22:
31:24:2d:bb:3d:1c:29:b5:e1:2a:f8:1f:5a:94:d5:
48:a9:be:59:c4:cf:9f:31:c3:2f:57:b8:54:d1:51:
f5:4d:8c:d7:86:93:87:95:84:f1:0c:6c:41:15:fa:
7c:47:25:f4:7c:6f:b1:30:dd:47:50:eb:5f:21:6b:
d2:3f:e0:95:a4:9c:75:f4:85:83:1f:8d:63:a0:38:
cc:80:10:08:d3:11:2b:72:ac:02:f1:38:84:8d:67:
90:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:9E:B8:77:E9:A9:38:5F:A1:AB:83:5B:BC:F5:94:80:13:B2:6B:6A
X509v3 Authority Key Identifier:
keyid:45:C8:08:A8:AC:DE:24:AC:96:13:E0:1A:49:59:61:00:ED:5E:8C:F1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C6833/F3D480EC83B311E69DD86730C4F9AE02/RcgIqKzeJKyWE-AaSVlhAO1ejPE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RcgIqKzeJKyWE-AaSVlhAO1ejPE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C6833/F3D480EC83B311E69DD86730C4F9AE02/3F1BB7A09BC011EF995CBB11C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
43.242.176.0/22
103.11.220.0/24
103.12.58.0/24
103.18.243.0/24
103.29.163.0/24
103.75.244.0/22
103.93.95.0/24
103.97.154.0/24
103.97.168.0/23
116.206.64.0/22
203.80.128.0/24
203.80.130.0/24
IPv6:
2407:5b80::/32
Signature Algorithm: sha256WithRSAEncryption
a3:82:2c:81:12:ae:e5:82:75:95:6c:ed:27:d1:8e:5a:0b:e2:
f1:14:ba:43:52:33:c5:89:b4:47:0d:af:ee:c2:6e:be:fe:03:
30:8c:a6:14:d2:60:eb:00:bb:c8:bf:22:2e:f5:ab:df:f4:80:
54:c8:2f:0c:1f:03:c3:ba:f1:d5:b1:70:da:2d:72:fd:8f:2a:
00:6f:03:48:ed:b9:3d:0f:78:43:9e:19:5d:95:c9:22:d0:07:
97:61:95:ad:cf:d7:3a:af:57:b0:f8:45:7c:73:a0:d7:25:e6:
79:77:5c:10:c2:bf:d3:f6:1c:9e:97:a8:74:4a:1e:01:7b:ef:
ba:f1:a9:20:82:15:28:fc:e2:44:60:1a:93:2f:8a:ee:9b:b1:
c7:fd:c7:a5:0a:33:d5:59:e9:5a:fb:69:b4:fd:b6:a5:bd:d4:
2a:3e:31:0f:76:36:d3:64:bb:93:d5:eb:43:f8:73:58:94:26:
ec:5d:2c:61:89:93:78:90:62:e9:e5:37:91:d8:5e:1b:1b:58:
27:4c:86:0e:9d:73:67:9b:0f:ed:a1:db:e1:40:cc:44:d0:54:
07:d3:6f:ce:ab:6a:f8:fb:99:1c:98:25:99:f2:97:57:b0:bd:
e3:58:34:01:46:a0:20:e2:9e:c7:93:f3:f4:4f:23:89:62:9d:
94:c9:a1:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 19:50:17 2024 by rpki-client on console-ams.rpki-client.org