Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E3E27/F38887666F3A11EA9840133DC4F9AE02/7069C1486FC511EAA442FE7AC4F9AE02.roa
File: 7069C1486FC511EAA442FE7AC4F9AE02.roa (raw, json)
Hash identifier: vzAvjoNVKbImsSv3skF8XDDaiy6Kwft4LeOvpWh+Y6k=
Subject key identifier: 7C:B4:AD:B6:89:C2:61:7C:0D:1A:E5:E0:F1:81:95:E5:E9:F6:E8:74
Certificate issuer: /CN=A91E3E27/serialNumber=A272ACAFE8FAA4F2A9700A6FC11425908C743D4B
Certificate serial: 09AA
Authority key identifier: A2:72:AC:AF:E8:FA:A4:F2:A9:70:0A:6F:C1:14:25:90:8C:74:3D:4B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/onKsr-j6pPKpcApvwRQlkIx0PUs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E3E27/F38887666F3A11EA9840133DC4F9AE02/7069C1486FC511EAA442FE7AC4F9AE02.roa
Signing time: Thu 30 May 2024 21:27:52 +0000
ROA not before: Thu 30 May 2024 21:27:52 +0000
ROA not after: Wed 30 Jul 2025 00:00:00 +0000
asID: 9229
IP address blocks: 103.13.188.0/22 maxlen: 22
103.13.188.0/24 maxlen: 24
103.13.189.0/24 maxlen: 24
103.13.190.0/24 maxlen: 24
175.176.224.0/24 maxlen: 24
175.176.225.0/24 maxlen: 24
175.176.226.0/24 maxlen: 24
175.176.227.0/24 maxlen: 24
175.176.228.0/24 maxlen: 24
175.176.229.0/24 maxlen: 24
175.176.230.0/24 maxlen: 24
175.176.231.0/24 maxlen: 24
175.176.232.0/24 maxlen: 24
175.176.233.0/24 maxlen: 24
175.176.234.0/24 maxlen: 24
175.176.235.0/24 maxlen: 24
175.176.236.0/24 maxlen: 24
175.176.237.0/24 maxlen: 24
175.176.238.0/24 maxlen: 24
175.176.239.0/24 maxlen: 24
175.176.240.0/24 maxlen: 24
175.176.241.0/24 maxlen: 24
175.176.242.0/24 maxlen: 24
175.176.243.0/24 maxlen: 24
175.176.245.0/24 maxlen: 24
175.176.247.0/24 maxlen: 24
175.176.248.0/24 maxlen: 24
175.176.249.0/24 maxlen: 24
175.176.250.0/24 maxlen: 24
175.176.251.0/24 maxlen: 24
175.176.252.0/24 maxlen: 24
175.176.253.0/24 maxlen: 24
175.176.254.0/24 maxlen: 24
175.176.255.0/24 maxlen: 24
202.174.128.0/19 maxlen: 19
202.174.129.0/24 maxlen: 24
202.174.130.0/24 maxlen: 24
202.174.131.0/24 maxlen: 24
202.174.132.0/24 maxlen: 24
202.174.133.0/24 maxlen: 24
202.174.134.0/24 maxlen: 24
202.174.135.0/24 maxlen: 24
202.174.136.0/24 maxlen: 24
202.174.137.0/24 maxlen: 24
202.174.138.0/24 maxlen: 24
202.174.139.0/24 maxlen: 24
202.174.140.0/24 maxlen: 24
202.174.141.0/24 maxlen: 24
202.174.142.0/24 maxlen: 24
202.174.143.0/24 maxlen: 24
202.174.144.0/24 maxlen: 24
202.174.145.0/24 maxlen: 24
202.174.146.0/24 maxlen: 24
202.174.147.0/24 maxlen: 24
202.174.148.0/24 maxlen: 24
202.174.149.0/24 maxlen: 24
202.174.150.0/24 maxlen: 24
202.174.151.0/24 maxlen: 24
202.174.152.0/24 maxlen: 24
202.174.153.0/24 maxlen: 24
202.174.154.0/24 maxlen: 24
202.174.155.0/24 maxlen: 24
202.174.156.0/24 maxlen: 24
202.174.157.0/24 maxlen: 24
202.174.158.0/24 maxlen: 24
202.174.159.0/24 maxlen: 24
203.88.64.0/19 maxlen: 19
203.88.64.0/24 maxlen: 24
203.88.65.0/24 maxlen: 24
203.88.66.0/24 maxlen: 24
203.88.67.0/24 maxlen: 24
203.88.68.0/24 maxlen: 24
203.88.69.0/24 maxlen: 24
203.88.70.0/24 maxlen: 24
203.88.71.0/24 maxlen: 24
203.88.72.0/24 maxlen: 24
203.88.73.0/24 maxlen: 24
203.88.74.0/24 maxlen: 24
203.88.75.0/24 maxlen: 24
203.88.76.0/24 maxlen: 24
203.88.77.0/24 maxlen: 24
203.88.78.0/24 maxlen: 24
203.88.79.0/24 maxlen: 24
203.88.80.0/24 maxlen: 24
203.88.81.0/24 maxlen: 24
203.88.82.0/24 maxlen: 24
203.88.83.0/24 maxlen: 24
203.88.84.0/24 maxlen: 24
203.88.85.0/24 maxlen: 24
203.88.86.0/24 maxlen: 24
203.88.87.0/24 maxlen: 24
203.88.88.0/24 maxlen: 24
203.88.89.0/24 maxlen: 24
203.88.90.0/24 maxlen: 24
203.88.91.0/24 maxlen: 24
203.88.92.0/24 maxlen: 24
203.88.93.0/24 maxlen: 24
203.88.94.0/24 maxlen: 24
203.88.95.0/24 maxlen: 24
210.89.64.0/19 maxlen: 19
210.89.64.0/24 maxlen: 24
210.89.65.0/24 maxlen: 24
210.89.66.0/24 maxlen: 24
210.89.67.0/24 maxlen: 24
210.89.68.0/24 maxlen: 24
210.89.69.0/24 maxlen: 24
210.89.70.0/24 maxlen: 24
210.89.71.0/24 maxlen: 24
210.89.72.0/24 maxlen: 24
210.89.73.0/24 maxlen: 24
210.89.74.0/24 maxlen: 24
210.89.75.0/24 maxlen: 24
210.89.76.0/24 maxlen: 24
210.89.77.0/24 maxlen: 24
210.89.78.0/24 maxlen: 24
210.89.79.0/24 maxlen: 24
210.89.80.0/24 maxlen: 24
210.89.81.0/24 maxlen: 24
210.89.82.0/24 maxlen: 24
210.89.83.0/24 maxlen: 24
210.89.84.0/24 maxlen: 24
210.89.85.0/24 maxlen: 24
210.89.86.0/24 maxlen: 24
210.89.87.0/24 maxlen: 24
210.89.88.0/24 maxlen: 24
210.89.89.0/24 maxlen: 24
210.89.90.0/24 maxlen: 24
210.89.91.0/24 maxlen: 24
210.89.92.0/24 maxlen: 24
210.89.93.0/24 maxlen: 24
210.89.94.0/24 maxlen: 24
210.89.95.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E3E27/F38887666F3A11EA9840133DC4F9AE02/onKsr-j6pPKpcApvwRQlkIx0PUs.crl
rsync://rpki.apnic.net/member_repository/A91E3E27/F38887666F3A11EA9840133DC4F9AE02/onKsr-j6pPKpcApvwRQlkIx0PUs.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/onKsr-j6pPKpcApvwRQlkIx0PUs.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 23 Jun 2024 20:06:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2474 (0x9aa)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E3E27/serialNumber=A272ACAFE8FAA4F2A9700A6FC11425908C743D4B
Validity
Not Before: May 30 21:27:52 2024 GMT
Not After : Jul 30 00:00:00 2025 GMT
Subject: CN=6658ef58-705e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:a0:90:c3:b9:0e:60:66:9a:e3:7e:d0:26:ee:
6f:1c:f3:c8:75:cd:bc:38:f6:9a:ed:1e:b6:c8:88:
2d:b3:9a:fd:2b:84:06:41:f4:ad:80:ab:73:bc:b9:
53:06:23:1b:ec:f4:ba:b7:c6:ea:35:97:f6:80:bb:
6c:ae:4c:75:f6:39:c7:15:48:f3:df:73:b5:00:52:
4a:8e:0f:25:75:f0:0c:6b:3f:f6:e6:93:84:7a:00:
93:75:19:e8:ce:ce:08:2e:fc:87:b7:a3:f4:cd:13:
5b:2d:ad:d9:53:61:2b:60:3c:9f:e7:56:1f:dd:e9:
1a:55:6c:2e:0c:79:10:e6:7c:56:8c:3c:5f:ef:4d:
b8:ac:c5:34:a1:8a:52:01:e7:75:50:68:9f:61:9c:
1f:03:12:3e:b0:e8:44:17:f2:97:06:38:ca:3d:b5:
70:f3:30:cb:44:d5:b0:9e:e0:b5:55:2b:6c:eb:5a:
26:8c:4b:ec:96:91:71:aa:bd:24:f0:36:2c:1a:23:
d4:69:f9:4a:0e:c9:84:f3:02:46:17:88:77:d9:cc:
4a:63:32:6e:d9:cc:09:82:ac:c2:c6:7c:1e:3f:8f:
87:38:4a:0d:63:9a:e9:76:b5:ab:0c:8b:7b:9a:01:
b3:b3:ec:fd:40:8c:8a:e0:f6:3c:04:92:89:5b:4d:
34:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:B4:AD:B6:89:C2:61:7C:0D:1A:E5:E0:F1:81:95:E5:E9:F6:E8:74
X509v3 Authority Key Identifier:
keyid:A2:72:AC:AF:E8:FA:A4:F2:A9:70:0A:6F:C1:14:25:90:8C:74:3D:4B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E3E27/F38887666F3A11EA9840133DC4F9AE02/onKsr-j6pPKpcApvwRQlkIx0PUs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/onKsr-j6pPKpcApvwRQlkIx0PUs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E3E27/F38887666F3A11EA9840133DC4F9AE02/7069C1486FC511EAA442FE7AC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.13.188.0/22
175.176.224.0-175.176.243.255
175.176.245.0/24
175.176.247.0-175.176.255.255
202.174.128.0/19
203.88.64.0/19
210.89.64.0/19
Signature Algorithm: sha256WithRSAEncryption
37:34:d3:f1:3a:6b:e1:e0:d7:ed:d8:50:b2:e4:59:ab:7b:37:
80:a4:49:98:64:90:b7:3a:9d:e8:f8:b8:f7:e4:e8:c4:86:87:
da:25:87:7b:88:a1:0e:f6:bd:e4:70:90:18:9d:3a:f6:fa:6a:
bc:e7:1a:d4:e1:74:63:17:2b:65:30:32:f3:15:73:8c:77:95:
be:39:cf:83:91:ba:89:d0:fd:b4:80:4e:51:9b:8d:2a:1d:20:
91:6f:33:62:bd:73:ec:75:84:18:9c:ed:c3:22:08:bc:8d:84:
15:b9:3a:d1:62:50:79:02:e2:68:04:9f:50:e3:6f:e7:08:71:
e9:2d:8f:6d:7f:10:85:8d:1a:f6:f8:bb:a4:36:3c:c1:28:46:
22:8b:8f:8a:d5:27:74:b9:b7:95:71:89:be:14:75:23:d5:97:
2d:36:94:e5:ea:5a:e4:b0:80:0f:24:f1:c7:2b:32:d4:df:7d:
81:6e:1d:04:4b:26:ca:43:6a:a7:2a:c2:b6:09:9a:fa:36:fb:
b4:cb:cc:2d:6d:42:78:b0:1c:d9:78:28:e3:7a:86:96:44:94:
32:14:d4:49:7b:40:18:5d:72:9e:23:26:a5:52:95:fe:7d:50:
dd:d2:52:69:16:ca:ff:ab:3b:ac:4a:e7:28:d0:7f:51:74:cb:
bf:0a:5b:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 23:13:13 2024 by rpki-client on console-ams.rpki-client.org