Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91CD4DB/3A315DCECD0211E7B0442D28C4F9AE02/1615AC3AD9E911EC9017DD21C4F9AE02.roa
File: 1615AC3AD9E911EC9017DD21C4F9AE02.roa (raw, json)
Hash identifier: tZ+n1rBeiFep27McDY+TR8Gj4nHp3eK0QyhamvlvTOk=
Subject key identifier: 8B:77:8D:CB:04:5D:D2:57:F2:25:64:0F:BB:56:DA:B1:D7:D7:5A:4C
Certificate issuer: /CN=A91CD4DB/serialNumber=3FB7855EF330BA77D9F3B72DFFDEC20712AC1407
Certificate serial: 173C
Authority key identifier: 3F:B7:85:5E:F3:30:BA:77:D9:F3:B7:2D:FF:DE:C2:07:12:AC:14:07
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P7eFXvMwunfZ87ct_97CBxKsFAc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91CD4DB/3A315DCECD0211E7B0442D28C4F9AE02/1615AC3AD9E911EC9017DD21C4F9AE02.roa
Signing time: Mon 30 Sep 2024 16:54:38 +0000
ROA not before: Mon 30 Sep 2024 16:54:38 +0000
ROA not after: Fri 31 Oct 2025 00:00:00 +0000
asID: 38614
IP address blocks: 103.158.38.0/24 maxlen: 24
103.158.39.0/24 maxlen: 24
117.103.80.0/24 maxlen: 24
117.103.81.0/24 maxlen: 24
117.103.82.0/24 maxlen: 24
117.103.83.0/24 maxlen: 24
117.103.84.0/24 maxlen: 24
117.103.85.0/24 maxlen: 24
117.103.86.0/24 maxlen: 24
117.103.87.0/24 maxlen: 24
2404:f380::/32 maxlen: 32
2404:f380::/36 maxlen: 36
2404:f380::/48 maxlen: 48
2404:f380:1::/48 maxlen: 48
2404:f380:2::/48 maxlen: 48
2404:f380:3::/48 maxlen: 48
2404:f380:4::/48 maxlen: 48
2404:f380:5::/48 maxlen: 48
2404:f380:6::/48 maxlen: 48
2404:f380:7::/48 maxlen: 48
2404:f380:8::/48 maxlen: 48
2404:f380:9::/48 maxlen: 48
2404:f380:a::/48 maxlen: 48
2404:f380:b::/48 maxlen: 48
2404:f380:c::/48 maxlen: 48
2404:f380:d::/48 maxlen: 48
2404:f380:e::/48 maxlen: 48
2404:f380:f::/48 maxlen: 48
2404:f380:1000::/36 maxlen: 36
2404:f380:2000::/36 maxlen: 36
2404:f380:3000::/36 maxlen: 36
2404:f380:4000::/36 maxlen: 36
2404:f380:5000::/36 maxlen: 36
2404:f380:6000::/36 maxlen: 36
2404:f380:7000::/36 maxlen: 36
2404:f380:8000::/36 maxlen: 36
2404:f380:9000::/36 maxlen: 36
2404:f380:a000::/36 maxlen: 36
2404:f380:b000::/36 maxlen: 36
2404:f380:c000::/36 maxlen: 36
2404:f380:d000::/36 maxlen: 36
2404:f380:e000::/36 maxlen: 36
2404:f380:f000::/36 maxlen: 36
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91CD4DB/3A315DCECD0211E7B0442D28C4F9AE02/P7eFXvMwunfZ87ct_97CBxKsFAc.crl
rsync://rpki.apnic.net/member_repository/A91CD4DB/3A315DCECD0211E7B0442D28C4F9AE02/P7eFXvMwunfZ87ct_97CBxKsFAc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P7eFXvMwunfZ87ct_97CBxKsFAc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 29 Nov 2024 16:30:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5948 (0x173c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91CD4DB/serialNumber=3FB7855EF330BA77D9F3B72DFFDEC20712AC1407
Validity
Not Before: Sep 30 16:54:38 2024 GMT
Not After : Oct 31 00:00:00 2025 GMT
Subject: CN=66fad7ce-e48f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:07:40:47:0c:f8:ab:c2:3c:8b:39:01:35:8e:
c4:3e:5f:5e:71:17:d4:e9:d1:86:ec:c0:f6:d6:c5:
00:ee:49:93:00:41:5f:c8:e3:ee:61:8b:66:10:bb:
0e:d0:aa:0b:99:83:05:09:f8:67:b2:27:40:6a:6d:
93:f5:61:c1:49:30:20:8b:30:ff:a1:a9:ad:d4:c6:
b6:b8:63:19:ba:2b:b1:58:e8:1d:bd:01:0b:aa:f0:
e7:bb:7f:9c:e2:c0:77:7e:51:74:08:5c:66:31:bc:
77:f8:36:e2:f0:95:6e:93:24:31:34:20:ae:e7:39:
29:32:07:f9:1b:34:3e:45:e4:6c:7b:ac:ad:9a:2b:
23:18:65:aa:59:14:e8:e2:97:d8:b3:30:e4:0f:29:
46:39:d5:5d:6c:0c:23:8a:54:b2:4c:ff:25:50:83:
12:96:f4:a9:d0:d5:af:54:ec:eb:3b:85:78:c8:5e:
a0:d6:b8:54:9c:62:96:6b:54:55:b0:92:8f:e3:dd:
23:78:a9:19:8d:22:92:f8:28:eb:03:16:09:d6:41:
89:a9:fe:ef:03:75:53:82:3d:f7:72:96:80:ee:8e:
ae:53:4d:7e:26:f8:c2:5a:b1:e9:d6:5e:f3:81:f7:
35:8a:c4:dd:c0:18:63:34:e0:ca:ee:8c:34:b4:23:
06:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:77:8D:CB:04:5D:D2:57:F2:25:64:0F:BB:56:DA:B1:D7:D7:5A:4C
X509v3 Authority Key Identifier:
keyid:3F:B7:85:5E:F3:30:BA:77:D9:F3:B7:2D:FF:DE:C2:07:12:AC:14:07
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91CD4DB/3A315DCECD0211E7B0442D28C4F9AE02/P7eFXvMwunfZ87ct_97CBxKsFAc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P7eFXvMwunfZ87ct_97CBxKsFAc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CD4DB/3A315DCECD0211E7B0442D28C4F9AE02/1615AC3AD9E911EC9017DD21C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.158.38.0/23
117.103.80.0/21
IPv6:
2404:f380::/32
Signature Algorithm: sha256WithRSAEncryption
64:ef:b7:01:ce:6b:5a:08:49:0e:fa:33:42:a4:c4:17:e8:1a:
ad:e7:55:af:67:b7:41:ce:05:f7:8a:bf:13:b6:26:bf:72:f9:
cb:37:d3:a2:b5:af:b0:f6:5a:f3:aa:bb:bb:2b:f6:56:80:4d:
f2:d7:e6:37:b1:85:c6:38:1c:da:23:2e:94:1e:a3:7a:17:00:
7a:bd:00:7b:1b:5e:be:57:04:76:47:96:c4:3e:cc:ec:1c:1f:
ff:bc:f5:1a:34:5c:3f:d4:f5:cb:42:75:77:5b:3e:13:60:46:
70:f0:4d:3e:8c:d6:90:fc:28:aa:97:ef:5e:ce:fd:c3:36:ba:
a6:f9:75:44:97:20:bf:24:1f:bc:d4:82:63:fa:87:6d:dc:21:
84:66:d1:fc:f0:46:76:b5:93:7a:b1:92:f6:3a:86:71:9b:b3:
a4:e8:51:ab:4d:73:af:d6:b7:5d:d1:06:1c:6e:c7:ee:89:b3:
93:5e:53:47:46:a7:3d:6a:9d:c8:fb:ee:18:a1:a7:6a:39:4a:
d1:ec:bf:bc:01:d0:35:b7:52:fb:e4:3e:eb:4c:84:6e:9a:34:
89:2b:3f:0c:48:ad:03:3f:ec:bf:4a:1a:9f:1e:73:f7:ef:58:
19:a1:ec:c4:0d:4d:22:f2:d8:27:81:5a:68:8c:98:3e:7a:3d:
e5:6d:6a:2b
-----BEGIN CERTIFICATE-----
MIIFhjCCBG6gAwIBAgICFzwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
Q0Q0REIxMTAvBgNVBAUTKDNGQjc4NTVFRjMzMEJBNzdEOUYzQjcyREZGREVDMjA3
MTJBQzE0MDcwHhcNMjQwOTMwMTY1NDM4WhcNMjUxMDMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02NmZhZDdjZS1lNDhmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAwAdARwz4q8I8izkBNY7EPl9ecRfU6dGG7MD21sUA7kmTAEFfyOPuYYtmELsO
0KoLmYMFCfhnsidAam2T9WHBSTAgizD/oamt1Ma2uGMZuiuxWOgdvQELqvDnu3+c
4sB3flF0CFxmMbx3+Dbi8JVukyQxNCCu5zkpMgf5GzQ+ReRse6ytmisjGGWqWRTo
4pfYszDkDylGOdVdbAwjilSyTP8lUIMSlvSp0NWvVOzrO4V4yF6g1rhUnGKWa1RV
sJKP490jeKkZjSKS+CjrAxYJ1kGJqf7vA3VTgj33cpaA7o6uU01+JvjCWrHp1l7z
gfc1isTdwBhjNODK7ow0tCMGiQIDAQABo4ICqjCCAqYwHQYDVR0OBBYEFIt3jcsE
XdJX8iVkD7tW2rHX11pMMB8GA1UdIwQYMBaAFD+3hV7zMLp32fO3Lf/ewgcSrBQH
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRDREQi8zQTMxNURDRUNE
MDIxMUU3QjA0NDJEMjhDNEY5QUUwMi9QN2VGWHZNd3VuZlo4N2N0Xzk3Q0J4S3NG
QWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1A3ZUZYdk13dW5mWjg3Y3RfOTdDQnhLc0ZBYy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
Q0Q0REIvM0EzMTVEQ0VDRDAyMTFFN0IwNDQyRDI4QzRGOUFFMDIvMTYxNUFDM0FE
OUU5MTFFQzkwMTdERDIxQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwNAYIKwYBBQUHAQcBAf8E
JTAjMBIEAgABMAwDBAFnniYDBAN1Z1AwDQQCAAIwBwMFACQE84AwDQYJKoZIhvcN
AQELBQADggEBAGTvtwHOa1oISQ76M0KkxBfoGq3nVa9nt0HOBfeKvxO2Jr9y+cs3
06K1r7D2WvOqu7sr9laATfLX5jexhcY4HNojLpQeo3oXAHq9AHsbXr5XBHZHlsQ+
zOwcH/+89Ro0XD/U9ctCdXdbPhNgRnDwTT6M1pD8KKqX717O/cM2uqb5dUSXIL8k
H7zUgmP6h23cIYRm0fzwRna1k3qxkvY6hnGbs6ToUatNc6/Wt13RBhxux+6Js5Ne
U0dGpz1qncj77hihp2o5StHsv7wB0DW3UvvkPutMhG6aNIkrPwxIrQM/7L9KGp8e
c/fvWBmh7MQNTSLy2CeBWmiMmD56PeVtais=
-----END CERTIFICATE-----
Generated at Fri Nov 22 17:56:20 2024 by rpki-client on console-fra.rpki-client.org