Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D1136/CF3281C8215B11E5A7BF890EC4F9AE02/8F92939C46C711E9A5547325C4F9AE02.roa
File: 8F92939C46C711E9A5547325C4F9AE02.roa (raw, json)
Hash identifier: 7iARUiMPv3HLznOKtpkc9GZoAlJZeWaZcC4qfythbSE=
Subject key identifier: 89:A0:63:7A:EE:10:25:8C:D3:0F:6C:41:A7:1F:31:9A:A3:D8:E3:EB
Certificate issuer: /CN=A91D1136/serialNumber=B7B73E89B621081609CD689AB0AEF7FAF148926C
Certificate serial: 24D9
Authority key identifier: B7:B7:3E:89:B6:21:08:16:09:CD:68:9A:B0:AE:F7:FA:F1:48:92:6C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t7c-ibYhCBYJzWiasK73-vFIkmw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D1136/CF3281C8215B11E5A7BF890EC4F9AE02/8F92939C46C711E9A5547325C4F9AE02.roa
Signing time: Sat 30 Sep 2023 16:12:41 +0000
ROA not before: Sat 30 Sep 2023 16:12:41 +0000
ROA not after: Sun 01 Dec 2024 00:00:00 +0000
asID: 10089
IP address blocks: 115.67.0.0/21 maxlen: 21
115.67.0.0/24 maxlen: 24
115.67.1.0/24 maxlen: 24
115.67.2.0/24 maxlen: 24
115.67.3.0/24 maxlen: 24
115.67.4.0/24 maxlen: 24
115.67.5.0/24 maxlen: 24
115.67.6.0/24 maxlen: 24
115.67.7.0/24 maxlen: 24
115.67.100.0/24 maxlen: 24
115.67.101.0/24 maxlen: 24
115.67.108.0/24 maxlen: 24
2404:8d00::/29 maxlen: 29
2404:8d04::/31 maxlen: 32
2404:8d04::/36 maxlen: 36
2404:8d04:1000::/36 maxlen: 36
2404:8d04:2000::/36 maxlen: 36
2404:8d04:3000::/36 maxlen: 36
2404:8d04:4000::/36 maxlen: 36
2404:8d04:5000::/36 maxlen: 36
2404:8d04:6000::/36 maxlen: 36
2404:8d04:7000::/36 maxlen: 36
2404:8d04:8000::/36 maxlen: 36
2404:8d04:9000::/36 maxlen: 36
2404:8d04:a000::/36 maxlen: 36
2404:8d04:b000::/36 maxlen: 36
2404:8d04:c000::/36 maxlen: 36
2404:8d04:d000::/36 maxlen: 36
2404:8d04:e000::/36 maxlen: 36
2404:8d04:f000::/36 maxlen: 36
2404:8d05::/36 maxlen: 36
2404:8d05:1000::/36 maxlen: 36
2404:8d05:2000::/36 maxlen: 36
2404:8d05:3000::/36 maxlen: 36
2404:8d05:4000::/36 maxlen: 36
2404:8d05:5000::/36 maxlen: 36
2404:8d05:6000::/36 maxlen: 36
2404:8d05:7000::/36 maxlen: 36
2404:8d05:8000::/36 maxlen: 36
2404:8d05:9000::/36 maxlen: 36
2404:8d05:a000::/36 maxlen: 36
2404:8d05:b000::/36 maxlen: 36
2404:8d05:c000::/36 maxlen: 36
2404:8d05:d000::/36 maxlen: 36
2404:8d05:e000::/36 maxlen: 36
2404:8d05:f000::/36 maxlen: 36
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D1136/CF3281C8215B11E5A7BF890EC4F9AE02/t7c-ibYhCBYJzWiasK73-vFIkmw.crl
rsync://rpki.apnic.net/member_repository/A91D1136/CF3281C8215B11E5A7BF890EC4F9AE02/t7c-ibYhCBYJzWiasK73-vFIkmw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t7c-ibYhCBYJzWiasK73-vFIkmw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 15 May 2024 02:42:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 9433 (0x24d9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D1136/serialNumber=B7B73E89B621081609CD689AB0AEF7FAF148926C
Validity
Not Before: Sep 30 16:12:41 2023 GMT
Not After : Dec 1 00:00:00 2024 GMT
Subject: CN=651848f8-5387
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:bd:44:fd:7f:fa:3f:7e:0a:c1:56:34:33:fe:
90:88:70:ca:c3:63:af:41:bf:6a:b2:f2:30:96:77:
64:06:a6:36:9c:de:34:56:93:31:c5:8e:aa:68:db:
8c:6e:fd:0f:ce:55:c3:c3:be:f2:d7:dc:ca:f2:09:
f2:43:b9:c9:2c:bb:cb:3d:ca:de:da:99:25:cd:84:
2f:c8:ec:18:52:c2:64:70:f1:49:e7:be:18:56:fb:
62:5a:8a:1d:52:2a:c7:01:99:9e:56:33:96:7f:46:
a0:ab:ad:55:99:4d:9c:47:ab:5b:79:87:54:47:ff:
94:fc:88:7b:82:89:11:9c:3f:2d:b4:75:fa:c9:16:
de:02:bc:d6:fa:a5:f1:83:95:e2:77:8d:1b:56:de:
ec:67:ae:8f:93:8b:eb:d0:cb:5e:ab:f6:d7:d8:f7:
1e:a3:d6:ee:a5:60:1b:f1:47:b9:b0:a8:e8:77:4b:
15:42:39:e0:3e:49:ba:9b:62:9f:d1:b5:40:25:8a:
76:0b:ea:8c:da:2e:ea:91:50:18:3e:d3:6b:63:c3:
57:49:0f:81:38:e1:00:4c:c5:62:77:1b:08:47:d5:
8b:b6:89:66:b0:15:3c:ef:59:78:8e:8d:a6:f8:45:
93:ea:03:a1:3e:04:cf:de:f7:66:e9:9d:cb:b1:76:
42:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:A0:63:7A:EE:10:25:8C:D3:0F:6C:41:A7:1F:31:9A:A3:D8:E3:EB
X509v3 Authority Key Identifier:
keyid:B7:B7:3E:89:B6:21:08:16:09:CD:68:9A:B0:AE:F7:FA:F1:48:92:6C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D1136/CF3281C8215B11E5A7BF890EC4F9AE02/t7c-ibYhCBYJzWiasK73-vFIkmw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t7c-ibYhCBYJzWiasK73-vFIkmw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D1136/CF3281C8215B11E5A7BF890EC4F9AE02/8F92939C46C711E9A5547325C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
115.67.0.0/21
115.67.100.0/23
115.67.108.0/24
IPv6:
2404:8d00::/29
Signature Algorithm: sha256WithRSAEncryption
9d:bf:8d:87:5f:c2:f7:ed:ce:a4:f8:a5:80:5d:02:42:af:7f:
e3:ab:3a:e4:5f:2b:30:da:d1:5b:e5:94:48:3b:c2:45:5c:1f:
cb:a6:1f:0f:78:7d:7d:f1:e4:ac:3f:a2:a6:a6:4b:e0:b8:49:
d5:79:94:28:69:1a:27:6a:5d:0e:6b:96:29:dc:de:ae:ff:e3:
b3:14:ef:d0:4c:c3:f1:fe:a9:c1:ce:b3:bb:85:d1:08:c0:72:
8b:a5:7d:79:4f:22:86:60:b7:cb:67:9e:e3:d7:d5:89:5a:69:
94:09:44:2b:25:1c:c0:8f:69:e2:fd:45:f6:9a:87:83:52:92:
84:c2:e7:b1:ad:c7:c5:c1:9e:cd:85:4a:8f:2c:c5:72:29:31:
74:4c:29:6d:2e:42:2e:0b:3a:cc:80:f2:1a:00:e8:6c:86:c8:
3a:53:96:40:9a:05:2a:16:6e:dd:f5:0a:7f:c3:be:a9:14:cd:
34:71:23:2d:1f:2b:cc:e2:8d:69:51:57:fe:32:6c:98:08:c8:
f7:db:2f:8a:b3:e3:c7:d2:74:6c:72:1a:64:0f:92:fc:9e:06:
13:1e:a6:47:36:0e:39:fa:4d:2a:9c:b3:fe:e3:c0:34:11:f0:
f1:d2:21:00:f1:f5:45:d3:8e:ae:55:74:73:ed:ca:12:67:aa:
79:18:ab:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 8 18:14:38 2024 by rpki-client on console-fra.rpki-client.org