Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E2454/D4C30B421D8711E2A19822E008B02CD2/9C193BAC08C511EDBC862E48C4F9AE02.roa
File: 9C193BAC08C511EDBC862E48C4F9AE02.roa (raw, json)
Hash identifier: qJyPntIEz/4gHNPJ1UvQwCvzPZ1Sc1npCHePSECjEec=
Subject key identifier: 20:89:23:64:20:27:E2:54:91:F8:48:04:B3:BC:60:6F:10:95:1A:EF
Certificate issuer: /CN=A91E2454/serialNumber=AB6262BC7D02EC1AD48B71DA98B73D22A362DAF0
Certificate serial: 34AA
Authority key identifier: AB:62:62:BC:7D:02:EC:1A:D4:8B:71:DA:98:B7:3D:22:A3:62:DA:F0
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q2JivH0C7BrUi3HamLc9IqNi2vA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E2454/D4C30B421D8711E2A19822E008B02CD2/9C193BAC08C511EDBC862E48C4F9AE02.roa
Signing time: Fri 08 Dec 2023 14:40:31 +0000
ROA not before: Fri 08 Dec 2023 14:40:31 +0000
ROA not after: Fri 31 Jan 2025 00:00:00 +0000
asID: 137226
IP address blocks: 111.125.108.0/22 maxlen: 22
111.125.108.0/24 maxlen: 24
111.125.109.0/24 maxlen: 24
111.125.110.0/24 maxlen: 24
111.125.111.0/24 maxlen: 24
111.125.120.0/22 maxlen: 22
111.125.120.0/24 maxlen: 24
111.125.121.0/24 maxlen: 24
111.125.122.0/24 maxlen: 24
111.125.123.0/24 maxlen: 24
120.29.67.0/24 maxlen: 24
120.29.70.0/23 maxlen: 24
120.29.81.0/24 maxlen: 24
120.29.83.0/24 maxlen: 24
120.29.93.0/24 maxlen: 24
120.29.104.0/22 maxlen: 22
120.29.104.0/24 maxlen: 24
120.29.105.0/24 maxlen: 24
120.29.106.0/24 maxlen: 24
120.29.107.0/24 maxlen: 24
120.29.112.0/24 maxlen: 24
120.29.117.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E2454/D4C30B421D8711E2A19822E008B02CD2/q2JivH0C7BrUi3HamLc9IqNi2vA.crl
rsync://rpki.apnic.net/member_repository/A91E2454/D4C30B421D8711E2A19822E008B02CD2/q2JivH0C7BrUi3HamLc9IqNi2vA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q2JivH0C7BrUi3HamLc9IqNi2vA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 01 Dec 2024 14:28:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13482 (0x34aa)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E2454/serialNumber=AB6262BC7D02EC1AD48B71DA98B73D22A362DAF0
Validity
Not Before: Dec 8 14:40:31 2023 GMT
Not After : Jan 31 00:00:00 2025 GMT
Subject: CN=65732adf-3026
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:85:62:44:bd:2b:35:34:b5:f9:66:70:1d:81:
c0:b4:c2:8b:ac:9d:41:8c:09:88:6d:d4:3e:5a:81:
a9:68:10:16:6b:b6:31:71:8e:58:5b:c1:f2:ad:6a:
65:04:b6:69:f8:70:d3:fb:55:0c:85:ab:7c:f7:14:
96:6a:2a:3c:c8:61:ce:1e:cb:e1:fe:51:b2:7b:f3:
1c:33:24:6c:db:94:64:79:ca:19:5f:b2:4f:7f:a1:
d9:e6:2c:44:13:f9:e1:89:93:fe:73:a5:88:73:0c:
5d:32:6c:15:0e:bc:56:52:ad:40:0a:28:47:7a:dd:
58:c9:fc:43:ae:17:b1:3a:e9:2e:ef:09:a8:21:4a:
60:bf:8f:ec:9e:7e:bc:9e:39:51:c4:ca:52:5e:8a:
b2:c4:1a:7e:b0:92:ff:f1:3c:8d:49:4e:68:67:4c:
70:9f:7c:e0:58:2c:97:01:73:80:fb:f6:a1:09:40:
fd:6a:16:3b:5f:5e:00:f8:df:5d:eb:f6:58:26:15:
aa:1a:40:86:ad:8e:0e:5f:0e:b8:91:ac:ee:48:ed:
6e:64:29:31:96:50:c6:34:d4:6a:95:1f:bb:a9:ec:
f8:b5:d0:d0:ae:4a:b7:72:81:f3:83:c2:37:61:e9:
eb:0d:9b:fa:27:53:a4:34:7a:85:60:5d:b2:a8:6d:
a1:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:89:23:64:20:27:E2:54:91:F8:48:04:B3:BC:60:6F:10:95:1A:EF
X509v3 Authority Key Identifier:
keyid:AB:62:62:BC:7D:02:EC:1A:D4:8B:71:DA:98:B7:3D:22:A3:62:DA:F0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E2454/D4C30B421D8711E2A19822E008B02CD2/q2JivH0C7BrUi3HamLc9IqNi2vA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q2JivH0C7BrUi3HamLc9IqNi2vA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E2454/D4C30B421D8711E2A19822E008B02CD2/9C193BAC08C511EDBC862E48C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
111.125.108.0/22
111.125.120.0/22
120.29.67.0/24
120.29.70.0/23
120.29.81.0/24
120.29.83.0/24
120.29.93.0/24
120.29.104.0/22
120.29.112.0/24
120.29.117.0/24
Signature Algorithm: sha256WithRSAEncryption
78:23:11:f7:a1:36:e7:75:53:a0:a6:73:99:f4:28:5b:4d:56:
ae:08:0a:01:d2:3f:4a:6a:55:b5:75:dc:d3:fb:72:80:49:50:
30:68:17:56:3a:c1:6e:8b:47:53:3b:c5:17:55:77:dc:7c:4f:
a2:3c:8a:f0:89:0f:be:18:82:49:78:7f:b5:49:d2:72:39:8f:
0a:6d:c6:55:6e:7f:45:5d:48:41:9b:3a:16:44:00:8c:4e:fe:
c9:b3:3e:bc:b9:4a:71:4d:25:6e:01:24:2d:f9:1a:f1:76:5c:
30:45:37:62:0a:0a:80:1d:e5:79:3c:44:7f:57:fd:a1:2f:ca:
9f:bf:ed:99:aa:49:36:89:9e:fb:2d:4d:35:93:09:56:3b:d0:
a5:6f:38:73:0e:81:ea:48:cb:78:ac:c2:54:de:93:bf:25:b6:
7c:1d:d3:14:d5:d5:71:61:b1:cf:25:bd:f9:aa:4b:8a:ce:fb:
71:b2:91:0d:97:f4:74:ef:a4:45:ad:96:03:a4:6e:eb:85:e8:
66:73:ab:06:02:43:70:71:d1:be:f8:72:37:3b:0f:e7:f5:4b:
9e:e1:f4:d9:9b:99:d5:c5:0f:b9:40:3b:4f:48:7f:b0:11:9b:
a7:33:13:7d:15:bb:78:a9:67:f5:64:f1:e6:ec:dc:fb:29:c8:
17:76:bc:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 24 17:20:53 2024 by rpki-client on console-fra.rpki-client.org