Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91DA2D5/5F861EE6B89A11E3B4AC7E785911EA32/5F2A9412249D11EEBA491E2FC4F9AE02.roa
File: 5F2A9412249D11EEBA491E2FC4F9AE02.roa (raw, json)
Hash identifier: GPXB7cVru2oyiYFgoIb+7WIPpfAo3MZHDKwGOMmrhAU=
Subject key identifier: 5E:56:F1:0D:A8:F4:A1:FE:14:94:97:1D:FA:13:52:62:7E:9E:73:10
Certificate issuer: /CN=A91DA2D5/serialNumber=3C1C877347EE82729636AF0F3A375D391090F921
Certificate serial: 2BE4
Authority key identifier: 3C:1C:87:73:47:EE:82:72:96:36:AF:0F:3A:37:5D:39:10:90:F9:21
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PByHc0fugnKWNq8POjddORCQ-SE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91DA2D5/5F861EE6B89A11E3B4AC7E785911EA32/5F2A9412249D11EEBA491E2FC4F9AE02.roa
Signing time: Tue 16 Apr 2024 08:16:28 +0000
ROA not before: Tue 16 Apr 2024 08:16:28 +0000
ROA not after: Sun 01 Dec 2024 00:00:00 +0000
asID: 58717
IP address blocks: 43.245.140.0/22 maxlen: 22
43.245.140.0/22 maxlen: 24
43.245.140.0/23 maxlen: 23
43.245.140.0/24 maxlen: 24
43.245.141.0/24 maxlen: 24
43.245.142.0/23 maxlen: 23
43.245.142.0/24 maxlen: 24
43.245.143.0/24 maxlen: 24
103.15.244.0/22 maxlen: 24
103.15.246.64/26 maxlen: 26
103.75.238.0/23 maxlen: 24
103.96.70.0/23 maxlen: 24
103.199.84.0/22 maxlen: 24
103.242.216.0/24 maxlen: 24
103.242.217.0/24 maxlen: 24
103.242.218.0/23 maxlen: 24
144.48.148.0/23 maxlen: 23
144.48.148.0/24 maxlen: 24
144.48.149.0/24 maxlen: 24
2405:1500::/32 maxlen: 32
2405:1500::/32 maxlen: 48
2405:1500::/48 maxlen: 48
2405:1500:12::/48 maxlen: 48
2405:1500:30::/48 maxlen: 48
2405:1500:40::/48 maxlen: 48
2405:1500:60::/48 maxlen: 48
2405:1500:70::/48 maxlen: 48
2405:1500:80::/48 maxlen: 48
2405:1500:82::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91DA2D5/5F861EE6B89A11E3B4AC7E785911EA32/PByHc0fugnKWNq8POjddORCQ-SE.crl
rsync://rpki.apnic.net/member_repository/A91DA2D5/5F861EE6B89A11E3B4AC7E785911EA32/PByHc0fugnKWNq8POjddORCQ-SE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PByHc0fugnKWNq8POjddORCQ-SE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 15 May 2024 02:42:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 11236 (0x2be4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91DA2D5/serialNumber=3C1C877347EE82729636AF0F3A375D391090F921
Validity
Not Before: Apr 16 08:16:28 2024 GMT
Not After : Dec 1 00:00:00 2024 GMT
Subject: CN=661e33dc-7cfd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:43:b2:db:ec:8f:ba:1a:21:90:d1:fb:14:84:
69:b4:8b:96:05:b1:ad:a3:87:47:02:6f:d9:f5:6e:
0f:20:bb:13:83:40:d2:0f:bb:df:c8:6d:7c:55:c1:
d6:06:c6:8d:93:45:9d:71:a8:79:7f:89:24:0f:f6:
41:e1:af:cc:e7:ef:a0:cb:10:39:a1:f8:29:34:a4:
15:fc:60:ea:3e:a1:20:3e:12:c5:ed:7c:2f:83:6a:
a3:98:08:4b:fe:03:d3:91:7d:42:6d:02:00:95:a4:
17:60:45:38:b0:78:74:e0:20:45:b6:ad:c8:c9:02:
87:8a:06:19:0a:e1:11:c2:67:fd:6e:fe:f0:1d:e7:
67:67:5b:85:fa:e0:ef:96:51:61:b8:cd:6f:60:e4:
55:8d:4c:a3:6f:0e:3b:0c:74:9f:e3:9b:cb:31:68:
86:13:b7:97:b8:8e:dc:1f:32:68:74:d7:d2:93:cf:
a3:0e:21:b2:f7:38:f2:a5:04:2c:2f:d1:de:dc:2c:
e3:23:a1:05:b3:0a:34:80:08:91:fc:d8:ef:3f:59:
99:3f:99:a5:95:60:87:9a:ad:5d:f5:52:71:12:bf:
a8:80:e5:d7:8d:87:13:c8:c6:a0:c1:b1:3f:08:5c:
94:05:a9:15:df:0b:98:c7:fd:2e:95:3e:fb:ce:63:
ec:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:56:F1:0D:A8:F4:A1:FE:14:94:97:1D:FA:13:52:62:7E:9E:73:10
X509v3 Authority Key Identifier:
keyid:3C:1C:87:73:47:EE:82:72:96:36:AF:0F:3A:37:5D:39:10:90:F9:21
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91DA2D5/5F861EE6B89A11E3B4AC7E785911EA32/PByHc0fugnKWNq8POjddORCQ-SE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PByHc0fugnKWNq8POjddORCQ-SE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DA2D5/5F861EE6B89A11E3B4AC7E785911EA32/5F2A9412249D11EEBA491E2FC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
43.245.140.0/22
103.15.244.0/22
103.75.238.0/23
103.96.70.0/23
103.199.84.0/22
103.242.216.0/22
144.48.148.0/23
IPv6:
2405:1500::/32
Signature Algorithm: sha256WithRSAEncryption
30:6a:0a:bf:85:8f:32:56:ba:86:2c:06:c8:c0:59:b9:9d:db:
95:8a:55:74:d4:78:c8:02:07:4a:80:cb:f8:38:9a:b5:ef:86:
83:11:b1:43:54:a3:7c:b0:1f:49:70:64:87:9e:2d:c8:df:fd:
58:3a:39:2f:74:da:60:d4:25:98:26:e1:32:cc:aa:7a:ca:56:
96:2e:08:e7:d8:44:92:bf:12:b2:38:45:b8:ee:34:55:2c:d2:
1a:c2:18:03:33:d6:19:74:a7:c9:25:74:e5:86:16:1c:4b:14:
23:d5:55:64:b3:e8:93:5d:d5:cb:95:d2:7a:3e:de:d6:9d:88:
96:57:96:db:35:a2:46:8f:a2:49:ce:66:5d:19:8e:3e:71:de:
e5:fd:39:26:8b:d2:93:f7:8e:09:fa:60:f6:c1:ee:72:bd:dc:
fe:38:6e:33:38:2f:e7:de:2a:07:be:61:46:ed:e2:79:6e:c4:
d3:cf:4c:78:6a:7c:ea:7f:c2:21:da:f2:79:72:4e:ca:23:4e:
90:9d:92:36:55:f0:d4:38:fb:f2:2f:35:76:c7:0e:16:0f:32:
9c:2b:d7:67:ca:50:f6:7a:ba:17:d3:6b:7f:a2:83:4c:60:52:
3e:52:28:b3:98:2c:08:1f:55:81:54:aa:09:1c:04:78:ad:fd:
39:76:e3:88
-----BEGIN CERTIFICATE-----
MIIFpDCCBIygAwIBAgICK+QwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
REEyRDUxMTAvBgNVBAUTKDNDMUM4NzczNDdFRTgyNzI5NjM2QUYwRjNBMzc1RDM5
MTA5MEY5MjEwHhcNMjQwNDE2MDgxNjI4WhcNMjQxMjAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02NjFlMzNkYy03Y2ZkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAq0Oy2+yPuhohkNH7FIRptIuWBbGto4dHAm/Z9W4PILsTg0DSD7vfyG18VcHW
BsaNk0Wdcah5f4kkD/ZB4a/M5++gyxA5ofgpNKQV/GDqPqEgPhLF7Xwvg2qjmAhL
/gPTkX1CbQIAlaQXYEU4sHh04CBFtq3IyQKHigYZCuERwmf9bv7wHednZ1uF+uDv
llFhuM1vYORVjUyjbw47DHSf45vLMWiGE7eXuI7cHzJodNfSk8+jDiGy9zjypQQs
L9He3CzjI6EFswo0gAiR/NjvP1mZP5mllWCHmq1d9VJxEr+ogOXXjYcTyMagwbE/
CFyUBakV3wuYx/0ulT77zmPsKQIDAQABo4ICyDCCAsQwHQYDVR0OBBYEFF5W8Q2o
9KH+FJSXHfoTUmJ+nnMQMB8GA1UdIwQYMBaAFDwch3NH7oJyljavDzo3XTkQkPkh
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEQTJENS81Rjg2MUVFNkI4
OUExMUUzQjRBQzdFNzg1OTExRUEzMi9QQnlIYzBmdWduS1dOcThQT2pkZE9SQ1Et
U0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1BCeUhjMGZ1Z25LV05xOFBPamRkT1JDUS1TRS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
REEyRDUvNUY4NjFFRTZCODlBMTFFM0I0QUM3RTc4NTkxMUVBMzIvNUYyQTk0MTIy
NDlEMTFFRUJBNDkxRTJGQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwUgYIKwYBBQUHAQcBAf8E
QzBBMDAEAgABMCoDBAIr9YwDBAJnD/QDBAFnS+4DBAFnYEYDBAJnx1QDBAJn8tgD
BAGQMJQwDQQCAAIwBwMFACQFFQAwDQYJKoZIhvcNAQELBQADggEBADBqCr+FjzJW
uoYsBsjAWbmd25WKVXTUeMgCB0qAy/g4mrXvhoMRsUNUo3ywH0lwZIeeLcjf/Vg6
OS902mDUJZgm4TLMqnrKVpYuCOfYRJK/ErI4RbjuNFUs0hrCGAMz1hl0p8kldOWG
FhxLFCPVVWSz6JNd1cuV0no+3tadiJZXlts1okaPoknOZl0Zjj5x3uX9OSaL0pP3
jgn6YPbB7nK93P44bjM4L+feKge+YUbt4nluxNPPTHhqfOp/wiHa8nlyTsojTpCd
kjZV8NQ4+/IvNXbHDhYPMpwr12fKUPZ6uhfTa3+ig0xgUj5SKLOYLAgfVYFUqgkc
BHit/Tl244g=
-----END CERTIFICATE-----
Generated at Wed May 8 18:14:39 2024 by rpki-client on console-fra.rpki-client.org