Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91DA2D5/5F861EE6B89A11E3B4AC7E785911EA32/5F2A9412249D11EEBA491E2FC4F9AE02.roa
File: 5F2A9412249D11EEBA491E2FC4F9AE02.roa (raw, json)
Hash identifier: fdcKKCiRBEYyImdCm83ma4epg2M7G+PRuOZRYkLBGGM=
Subject key identifier: 16:C7:A7:17:78:10:D0:37:45:57:A7:13:1A:EB:26:2E:FC:2A:CB:5E
Certificate issuer: /CN=A91DA2D5/serialNumber=3C1C877347EE82729636AF0F3A375D391090F921
Certificate serial: 2C4F
Authority key identifier: 3C:1C:87:73:47:EE:82:72:96:36:AF:0F:3A:37:5D:39:10:90:F9:21
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PByHc0fugnKWNq8POjddORCQ-SE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91DA2D5/5F861EE6B89A11E3B4AC7E785911EA32/5F2A9412249D11EEBA491E2FC4F9AE02.roa
Signing time: Mon 23 Sep 2024 10:13:00 +0000
ROA not before: Mon 23 Sep 2024 10:13:00 +0000
ROA not after: Mon 01 Dec 2025 00:00:00 +0000
asID: 58717
IP address blocks: 43.245.140.0/22 maxlen: 22
43.245.140.0/22 maxlen: 24
43.245.140.0/23 maxlen: 23
43.245.140.0/24 maxlen: 24
43.245.141.0/24 maxlen: 24
43.245.142.0/23 maxlen: 23
43.245.142.0/24 maxlen: 24
43.245.143.0/24 maxlen: 24
103.15.244.0/22 maxlen: 24
103.15.246.64/26 maxlen: 26
103.75.238.0/23 maxlen: 24
103.96.70.0/23 maxlen: 24
103.108.144.0/22 maxlen: 24
103.199.84.0/22 maxlen: 24
103.242.216.0/24 maxlen: 24
103.242.217.0/24 maxlen: 24
103.242.218.0/23 maxlen: 24
144.48.148.0/23 maxlen: 23
144.48.148.0/24 maxlen: 24
144.48.149.0/24 maxlen: 24
2405:1500::/30 maxlen: 31
2405:1500::/32 maxlen: 32
2405:1500::/32 maxlen: 48
2405:1500::/48 maxlen: 48
2405:1500:12::/48 maxlen: 48
2405:1500:30::/48 maxlen: 48
2405:1500:40::/48 maxlen: 48
2405:1500:60::/48 maxlen: 48
2405:1500:70::/48 maxlen: 48
2405:1500:80::/48 maxlen: 48
2405:1500:82::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91DA2D5/5F861EE6B89A11E3B4AC7E785911EA32/PByHc0fugnKWNq8POjddORCQ-SE.crl
rsync://rpki.apnic.net/member_repository/A91DA2D5/5F861EE6B89A11E3B4AC7E785911EA32/PByHc0fugnKWNq8POjddORCQ-SE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PByHc0fugnKWNq8POjddORCQ-SE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 29 Nov 2024 15:22:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 11343 (0x2c4f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91DA2D5/serialNumber=3C1C877347EE82729636AF0F3A375D391090F921
Validity
Not Before: Sep 23 10:13:00 2024 GMT
Not After : Dec 1 00:00:00 2025 GMT
Subject: CN=66f13f2c-29f6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:b7:71:8f:a6:a7:ca:71:d5:62:0e:c6:4a:d2:
2e:9e:61:9c:aa:19:c7:21:03:0b:90:47:59:08:52:
48:09:4c:27:a6:0f:21:ff:f2:64:45:fd:82:ad:3c:
a2:68:1c:38:be:00:9d:b0:94:11:a0:1a:36:ad:07:
49:52:ed:28:71:2a:5c:b5:38:dd:f4:75:db:d1:20:
0c:44:11:ce:59:26:5e:13:92:70:5d:63:20:49:21:
b3:ec:47:60:61:5f:ad:d7:f8:a5:5b:2a:80:65:0d:
11:a2:f9:64:96:9d:4d:22:ba:75:45:c2:3e:b1:02:
d6:e6:eb:e8:a1:54:c5:4d:40:80:27:b1:bc:9d:be:
f4:d2:21:ef:4f:90:41:ec:24:f0:1b:ef:66:fb:84:
9b:57:7c:70:d7:b3:76:11:1e:46:39:b7:e6:d9:18:
cd:37:37:f8:00:e0:57:cb:0e:61:cf:37:aa:1a:b5:
84:f8:e6:d2:46:5a:85:b4:1f:c7:62:41:3c:72:06:
11:99:6a:e7:0c:cf:cb:81:5e:97:6c:53:b2:72:39:
17:11:b2:63:fb:70:ec:ed:78:b5:e3:38:7d:9a:27:
3c:bc:16:be:c4:11:75:06:81:0b:9c:23:3b:a6:65:
2d:49:fa:69:6e:f4:e1:ae:12:40:7f:f6:4b:0f:88:
8c:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:C7:A7:17:78:10:D0:37:45:57:A7:13:1A:EB:26:2E:FC:2A:CB:5E
X509v3 Authority Key Identifier:
keyid:3C:1C:87:73:47:EE:82:72:96:36:AF:0F:3A:37:5D:39:10:90:F9:21
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91DA2D5/5F861EE6B89A11E3B4AC7E785911EA32/PByHc0fugnKWNq8POjddORCQ-SE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PByHc0fugnKWNq8POjddORCQ-SE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DA2D5/5F861EE6B89A11E3B4AC7E785911EA32/5F2A9412249D11EEBA491E2FC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
43.245.140.0/22
103.15.244.0/22
103.75.238.0/23
103.96.70.0/23
103.108.144.0/22
103.199.84.0/22
103.242.216.0/22
144.48.148.0/23
IPv6:
2405:1500::/30
Signature Algorithm: sha256WithRSAEncryption
9e:10:9f:7b:27:a4:78:85:d3:37:54:b5:81:d2:36:47:c2:ff:
42:f0:00:cd:13:f3:ad:24:fd:e3:b4:df:94:3c:b5:9a:ae:65:
01:75:a3:35:c9:fb:03:73:b6:ae:13:0b:60:a6:a9:e6:61:25:
6d:73:19:5b:26:e1:13:fd:83:cf:fc:ef:1e:b3:56:6f:b8:a5:
24:d0:3c:f5:e2:c4:0f:c3:c4:8c:8a:f3:ac:71:e1:e2:cf:e3:
83:d5:2a:d3:74:1e:9b:f2:ef:72:37:c7:06:1b:01:35:e5:1b:
3a:46:7d:b2:fc:5b:3d:70:96:b9:8e:fb:05:30:f4:6d:03:10:
6f:7e:6d:be:39:57:88:d0:eb:c9:59:8d:84:4e:d3:ff:9e:69:
0a:ea:4a:f6:85:b6:07:ab:35:6f:15:f1:a0:9e:ed:75:45:47:
52:7b:14:25:03:9a:b6:d8:44:8e:00:bf:fc:0b:78:be:89:07:
f7:b1:9c:b1:32:a9:cb:16:a5:fb:d6:01:15:e6:7d:ea:82:0e:
e3:51:a4:78:d6:a8:ca:1c:fc:46:d6:54:b3:e9:05:1a:11:e9:
1d:d7:25:d7:e5:7d:87:17:3b:9f:88:c9:27:29:6e:3a:72:4b:
ad:a2:3b:47:7d:e6:e9:1a:c4:0d:f1:02:ef:09:59:14:67:c6:
f8:bf:af:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 16:50:04 2024 by rpki-client on console-ams.rpki-client.org