Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E3E27/F38887666F3A11EA9840133DC4F9AE02/7BB34CF0902B11EFA6CE1B54C4F9AE02.roa
File: 7BB34CF0902B11EFA6CE1B54C4F9AE02.roa (raw, json)
Hash identifier: l9x6FIaFuZN5Pq5zzX5mei4/jjI9QD4zwCRUXOSB8yw=
Subject key identifier: D8:93:69:E3:56:DF:23:A8:7F:1F:C4:CE:F7:B2:9F:D6:0D:BC:24:30
Certificate issuer: /CN=A91E3E27/serialNumber=A272ACAFE8FAA4F2A9700A6FC11425908C743D4B
Certificate serial: 0A36
Authority key identifier: A2:72:AC:AF:E8:FA:A4:F2:A9:70:0A:6F:C1:14:25:90:8C:74:3D:4B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/onKsr-j6pPKpcApvwRQlkIx0PUs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E3E27/F38887666F3A11EA9840133DC4F9AE02/7BB34CF0902B11EFA6CE1B54C4F9AE02.roa
Signing time: Fri 22 Nov 2024 06:10:27 +0000
ROA not before: Fri 22 Nov 2024 06:10:27 +0000
ROA not after: Wed 30 Jul 2025 00:00:00 +0000
asID: 9229
IP address blocks: 202.174.128.0/19 maxlen: 19
202.174.130.0/24 maxlen: 24
202.174.144.0/24 maxlen: 24
202.174.145.0/24 maxlen: 24
202.174.146.0/23 maxlen: 23
202.174.148.0/24 maxlen: 24
202.174.149.0/24 maxlen: 24
202.174.150.0/24 maxlen: 24
202.174.151.0/24 maxlen: 24
202.174.155.0/24 maxlen: 24
202.174.156.0/24 maxlen: 24
202.174.157.0/24 maxlen: 24
202.174.159.0/24 maxlen: 24
203.88.64.0/19 maxlen: 19
203.88.64.0/24 maxlen: 24
203.88.65.0/24 maxlen: 24
203.88.66.0/24 maxlen: 24
203.88.67.0/24 maxlen: 24
203.88.68.0/24 maxlen: 24
203.88.69.0/24 maxlen: 24
203.88.70.0/24 maxlen: 24
203.88.71.0/24 maxlen: 24
203.88.72.0/24 maxlen: 24
203.88.73.0/24 maxlen: 24
203.88.74.0/24 maxlen: 24
203.88.76.0/24 maxlen: 24
203.88.77.0/24 maxlen: 24
203.88.78.0/24 maxlen: 24
203.88.79.0/24 maxlen: 24
203.88.80.0/24 maxlen: 24
203.88.81.0/24 maxlen: 24
203.88.82.0/24 maxlen: 24
203.88.95.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E3E27/F38887666F3A11EA9840133DC4F9AE02/onKsr-j6pPKpcApvwRQlkIx0PUs.crl
rsync://rpki.apnic.net/member_repository/A91E3E27/F38887666F3A11EA9840133DC4F9AE02/onKsr-j6pPKpcApvwRQlkIx0PUs.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/onKsr-j6pPKpcApvwRQlkIx0PUs.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 29 Nov 2024 06:14:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2614 (0xa36)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E3E27/serialNumber=A272ACAFE8FAA4F2A9700A6FC11425908C743D4B
Validity
Not Before: Nov 22 06:10:27 2024 GMT
Not After : Jul 30 00:00:00 2025 GMT
Subject: CN=67402053-8185
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:bd:85:f5:8b:b3:e1:d2:1f:63:c4:e7:ef:d9:
4e:fa:c4:ee:65:d6:ad:32:1b:7d:f4:c3:51:9f:ba:
d1:3c:8e:17:51:5e:68:2c:86:6f:85:c9:80:a7:15:
32:f7:71:49:74:3c:92:65:a3:bf:6b:12:fe:6a:3d:
3e:1c:87:fa:89:a0:06:29:57:4e:48:6d:b6:a3:a3:
e2:ec:5e:45:4b:77:01:4a:94:32:5c:14:f0:f1:f9:
66:6a:4f:f0:23:4e:73:17:3d:02:e2:4a:ed:ae:5f:
ab:59:77:22:46:f6:94:b5:98:17:3f:f9:7c:86:2c:
9d:52:74:46:b2:18:d8:1a:aa:f1:ff:66:ab:22:ae:
cc:85:40:c7:02:c1:7c:f8:97:1d:e3:2f:c8:0d:83:
34:2f:2b:81:eb:b5:ea:eb:92:82:60:b1:cd:d2:89:
57:fd:19:2a:e8:ca:88:94:71:ae:83:0c:31:8f:f0:
b8:e8:68:33:fa:84:f8:09:99:24:73:00:44:a8:56:
12:ff:75:e4:6c:43:9d:39:8a:c8:be:ef:ff:4c:0d:
1f:9b:6d:86:38:3c:ee:09:ed:ea:ed:56:e0:ea:f0:
e3:55:c4:1d:ae:19:43:27:c6:18:f7:c6:37:8d:28:
67:4d:32:01:e1:e8:fa:c7:a3:fc:b7:51:67:e3:68:
4a:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:93:69:E3:56:DF:23:A8:7F:1F:C4:CE:F7:B2:9F:D6:0D:BC:24:30
X509v3 Authority Key Identifier:
keyid:A2:72:AC:AF:E8:FA:A4:F2:A9:70:0A:6F:C1:14:25:90:8C:74:3D:4B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E3E27/F38887666F3A11EA9840133DC4F9AE02/onKsr-j6pPKpcApvwRQlkIx0PUs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/onKsr-j6pPKpcApvwRQlkIx0PUs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E3E27/F38887666F3A11EA9840133DC4F9AE02/7BB34CF0902B11EFA6CE1B54C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
202.174.128.0/19
203.88.64.0/19
Signature Algorithm: sha256WithRSAEncryption
52:32:b8:68:96:86:2b:fc:0f:5e:e5:46:38:ec:27:5a:49:ab:
6b:35:e2:bd:36:c7:a4:6b:93:e0:91:20:0b:2e:4a:4f:d6:06:
78:01:53:60:84:fe:11:80:b1:88:85:59:e4:fc:6b:7f:73:66:
04:3e:fd:14:32:f8:16:9b:94:ec:21:f7:57:de:e2:c3:c8:87:
49:fc:1f:1c:da:c5:2a:c0:c0:71:00:a9:9f:8b:e2:d1:c9:99:
86:ab:1e:7c:ca:b6:e6:1e:19:f5:a1:4e:6f:d8:b4:20:e2:fe:
16:97:2e:cb:1b:9b:75:28:e2:80:07:3c:07:f3:a5:0e:10:55:
03:9f:3a:98:4b:8f:2b:c6:c8:42:7e:f6:38:79:a0:1a:12:be:
a2:54:fb:0e:f1:0d:a8:b7:d1:a0:2b:61:d7:c3:ce:00:65:4b:
a6:20:f8:b8:bd:be:7f:ff:23:fb:5f:4e:94:68:a5:39:59:6b:
82:ec:90:74:db:b2:57:cb:96:68:a4:79:c7:aa:93:7a:ed:59:
87:64:08:11:0e:13:d2:86:44:46:80:20:bd:63:b2:62:99:96:
3b:b4:de:c3:82:7f:8e:50:1c:8e:f2:43:3e:83:8a:f3:84:34:
de:54:45:28:da:68:cc:88:d5:48:85:ab:03:54:4e:2d:a5:dc:
db:0b:c8:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 06:58:20 2024 by rpki-client on console-fra.rpki-client.org