Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/5FFDDC76FE1A11EE8B52F05FC4F9AE02.roa
File: 5FFDDC76FE1A11EE8B52F05FC4F9AE02.roa (raw, json)
Hash identifier: vPEj2ki3gca5b+I/VsdkujxYHamiz2yEvvvIvut+GLY=
Subject key identifier: EB:05:70:14:8E:CF:52:95:80:BC:A1:D5:09:C2:07:64:08:0B:B3:85
Certificate issuer: /CN=A91E6134/serialNumber=8308087911EA49E215DC4926B0226A521E5B39C4
Certificate serial: 1083
Authority key identifier: 83:08:08:79:11:EA:49:E2:15:DC:49:26:B0:22:6A:52:1E:5B:39:C4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/5FFDDC76FE1A11EE8B52F05FC4F9AE02.roa
Signing time: Fri 19 Apr 2024 07:54:10 +0000
ROA not before: Fri 19 Apr 2024 07:54:10 +0000
ROA not after: Tue 30 Jul 2024 00:00:00 +0000
asID: 138241
IP address blocks: 103.151.27.0/24 maxlen: 24
113.203.208.0/24 maxlen: 24
113.203.216.0/24 maxlen: 24
113.203.231.0/24 maxlen: 24
113.203.250.0/24 maxlen: 24
115.167.49.0/24 maxlen: 24
115.167.78.0/24 maxlen: 24
175.110.68.0/22 maxlen: 24
175.110.80.0/22 maxlen: 24
175.110.88.0/22 maxlen: 24
175.110.104.0/24 maxlen: 24
175.110.105.0/24 maxlen: 24
175.110.106.0/24 maxlen: 24
175.110.109.0/24 maxlen: 24
175.110.110.0/24 maxlen: 24
175.110.111.0/24 maxlen: 24
180.178.152.0/21 maxlen: 21
202.92.18.0/24 maxlen: 24
202.92.20.0/24 maxlen: 24
223.29.227.0/24 maxlen: 24
223.29.235.0/24 maxlen: 24
223.29.236.0/24 maxlen: 24
223.29.238.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.crl
rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 27 Apr 2024 22:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4227 (0x1083)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E6134/serialNumber=8308087911EA49E215DC4926B0226A521E5B39C4
Validity
Not Before: Apr 19 07:54:10 2024 GMT
Not After : Jul 30 00:00:00 2024 GMT
Subject: CN=66222321-222c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:5d:4d:30:18:6c:7c:4b:15:8e:83:8c:63:6b:
2a:63:96:c8:4b:13:35:e2:9b:ae:8d:b3:78:fc:b9:
e3:c3:c7:65:cf:60:fb:6a:2f:a1:db:89:76:90:16:
52:55:a0:18:ed:ad:98:2d:c7:ef:92:14:cd:79:a2:
4f:fd:00:27:2e:5f:bc:48:f8:97:9c:be:e4:80:c9:
01:7e:c7:ec:ef:d3:46:24:0f:a7:89:5d:42:eb:45:
9a:ae:41:f0:8a:54:54:3c:06:eb:63:47:17:a0:11:
3d:fe:28:e1:55:09:ee:23:bb:c9:fe:fc:cd:11:ef:
bf:a3:07:58:e6:5b:5e:cd:0c:e5:db:31:49:55:07:
bf:0f:07:29:04:f3:68:ba:5a:ef:bc:21:28:cd:82:
b9:a8:8d:de:f5:cd:3f:35:e9:3b:0a:6e:c7:23:f5:
15:fd:85:d1:22:19:12:03:65:38:00:9a:5f:21:dd:
a4:19:33:66:70:1a:2a:bf:3b:18:fd:b6:31:60:aa:
d4:13:16:22:c5:f7:bd:12:1c:81:74:66:37:d0:05:
a7:69:c6:7b:f4:19:c0:b3:b6:e7:3d:76:ef:60:d8:
a3:7d:19:b1:4b:1f:c3:fa:98:a9:8b:29:fa:34:2d:
1e:b1:25:ba:c5:79:3a:9c:37:3e:d2:a1:d8:33:dd:
f1:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:05:70:14:8E:CF:52:95:80:BC:A1:D5:09:C2:07:64:08:0B:B3:85
X509v3 Authority Key Identifier:
keyid:83:08:08:79:11:EA:49:E2:15:DC:49:26:B0:22:6A:52:1E:5B:39:C4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/5FFDDC76FE1A11EE8B52F05FC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.151.27.0/24
113.203.208.0/24
113.203.216.0/24
113.203.231.0/24
113.203.250.0/24
115.167.49.0/24
115.167.78.0/24
175.110.68.0/22
175.110.80.0/22
175.110.88.0/22
175.110.104.0-175.110.106.255
175.110.109.0-175.110.111.255
180.178.152.0/21
202.92.18.0/24
202.92.20.0/24
223.29.227.0/24
223.29.235.0-223.29.236.255
223.29.238.0/24
Signature Algorithm: sha256WithRSAEncryption
4a:5b:23:ed:e2:8f:3b:7c:d6:5f:e5:e8:86:66:af:12:79:87:
70:5f:12:94:a1:3f:91:1f:9c:57:59:c9:34:54:17:64:f2:f4:
66:3d:03:f3:a4:ec:57:ab:b1:d9:4b:19:94:c4:65:6f:ad:db:
89:b5:a8:52:a8:dc:cd:4d:1f:66:6a:f8:c5:d0:be:28:dd:34:
6c:01:3c:ec:d0:b4:ef:15:0a:05:bf:34:26:0c:86:92:97:56:
75:a8:be:ee:50:3c:a1:b7:a8:58:9f:de:83:a1:35:46:c4:15:
21:c8:3a:fe:69:ce:a5:14:82:c5:b4:a8:b7:5b:a0:49:41:2e:
4e:e2:21:92:ff:91:27:60:98:19:3f:77:0b:0a:3c:02:4d:11:
5b:3a:05:c3:5f:db:b6:01:6b:5d:c5:2f:5a:1c:be:9d:68:6c:
3c:43:64:fa:72:f9:f1:13:52:5c:93:c6:b4:51:d3:fc:ac:05:
09:48:f7:ee:b0:02:4d:4c:a9:be:c0:f4:d3:91:22:fe:1d:d8:
4b:d3:15:60:76:33:a4:cc:b9:17:db:98:e1:ea:f2:c4:8d:22:
fb:12:df:0c:c7:db:fd:3a:cc:e7:62:4f:06:72:93:f4:a1:c0:
a0:01:28:e4:e3:89:ce:0f:52:ab:43:0b:d8:ce:31:fd:ee:4f:
b8:9c:8e:ef
-----BEGIN CERTIFICATE-----
MIIF9DCCBNygAwIBAgICEIMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RTYxMzQxMTAvBgNVBAUTKDgzMDgwODc5MTFFQTQ5RTIxNURDNDkyNkIwMjI2QTUy
MUU1QjM5QzQwHhcNMjQwNDE5MDc1NDEwWhcNMjQwNzMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02NjIyMjMyMS0yMjJjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA5V1NMBhsfEsVjoOMY2sqY5bISxM14puujbN4/Lnjw8dlz2D7ai+h24l2kBZS
VaAY7a2YLcfvkhTNeaJP/QAnLl+8SPiXnL7kgMkBfsfs79NGJA+niV1C60WarkHw
ilRUPAbrY0cXoBE9/ijhVQnuI7vJ/vzNEe+/owdY5ltezQzl2zFJVQe/DwcpBPNo
ulrvvCEozYK5qI3e9c0/Nek7Cm7HI/UV/YXRIhkSA2U4AJpfId2kGTNmcBoqvzsY
/bYxYKrUExYixfe9EhyBdGY30AWnacZ79BnAs7bnPXbvYNijfRmxSx/D+pipiyn6
NC0esSW6xXk6nDc+0qHYM93xFwIDAQABo4IDGDCCAxQwHQYDVR0OBBYEFOsFcBSO
z1KVgLyh1QnCB2QIC7OFMB8GA1UdIwQYMBaAFIMICHkR6kniFdxJJrAialIeWznE
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNjEzNC81RjlBQTRCRUMy
QTgxMUVBQTc5MThBMkVDNEY5QUUwMi9nd2dJZVJIcVNlSVYzRWttc0NKcVVoNWJP
Y1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2d3Z0llUkhxU2VJVjNFa21zQ0pxVWg1Yk9jUS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
RTYxMzQvNUY5QUE0QkVDMkE4MTFFQUE3OTE4QTJFQzRGOUFFMDIvNUZGRERDNzZG
RTFBMTFFRThCNTJGMDVGQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwgaEGCCsGAQUFBwEHAQH/
BIGRMIGOMIGLBAIAATCBhAMEAGeXGwMEAHHL0AMEAHHL2AMEAHHL5wMEAHHL+gME
AHOnMQMEAHOnTgMEAq9uRAMEAq9uUAMEAq9uWDAMAwQDr25oAwQAr25qMAwDBACv
bm0DBASvbmADBAO0spgDBADKXBIDBADKXBQDBADfHeMwDAMEAN8d6wMEAN8d7AME
AN8d7jANBgkqhkiG9w0BAQsFAAOCAQEASlsj7eKPO3zWX+XohmavEnmHcF8SlKE/
kR+cV1nJNFQXZPL0Zj0D86TsV6ux2UsZlMRlb63bibWoUqjczU0fZmr4xdC+KN00
bAE87NC07xUKBb80JgyGkpdWdai+7lA8obeoWJ/eg6E1RsQVIcg6/mnOpRSCxbSo
t1ugSUEuTuIhkv+RJ2CYGT93Cwo8Ak0RWzoFw1/btgFrXcUvWhy+nWhsPENk+nL5
8RNSXJPGtFHT/KwFCUj37rACTUypvsD005Ei/h3YS9MVYHYzpMy5F9uY4eryxI0i
+xLfDMfb/TrM52JPBnKT9KHAoAEo5OOJzg9Sq0ML2M4x/e5PuJyO7w==
-----END CERTIFICATE-----
Generated at Sun Apr 21 03:31:04 2024 by rpki-client on console-fra.rpki-client.org