Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/71AFC49445B911EE87D51B7EC4F9AE02.roa
File: 71AFC49445B911EE87D51B7EC4F9AE02.roa (raw, json)
Hash identifier: Xq6vC9siYbePzNvIIDjwtVjRktdykyWlXA+eXc2mlbU=
Subject key identifier: 4B:35:D3:8E:62:F5:1A:B0:3A:82:57:E5:EF:4A:2C:5E:03:B3:7A:28
Certificate issuer: /CN=A91E6134/serialNumber=8308087911EA49E215DC4926B0226A521E5B39C4
Certificate serial: 1124
Authority key identifier: 83:08:08:79:11:EA:49:E2:15:DC:49:26:B0:22:6A:52:1E:5B:39:C4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/71AFC49445B911EE87D51B7EC4F9AE02.roa
Signing time: Fri 26 Apr 2024 11:05:44 +0000
ROA not before: Fri 26 Apr 2024 11:05:44 +0000
ROA not after: Tue 30 Jul 2024 00:00:00 +0000
asID: 7029
IP address blocks: 115.167.0.0/24 maxlen: 24
115.167.3.0/24 maxlen: 24
115.167.4.0/24 maxlen: 24
115.167.12.0/22 maxlen: 24
115.167.16.0/22 maxlen: 24
115.167.20.0/22 maxlen: 24
115.167.56.0/22 maxlen: 24
115.167.108.0/22 maxlen: 24
115.167.116.0/22 maxlen: 24
115.167.120.0/22 maxlen: 24
115.167.126.0/24 maxlen: 24
115.167.127.0/24 maxlen: 24
175.110.88.0/22 maxlen: 24
175.110.104.0/24 maxlen: 24
175.110.105.0/24 maxlen: 24
175.110.106.0/24 maxlen: 24
175.110.107.0/24 maxlen: 24
175.110.110.0/24 maxlen: 24
175.110.111.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.crl
rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 07 May 2024 22:17:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4388 (0x1124)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E6134/serialNumber=8308087911EA49E215DC4926B0226A521E5B39C4
Validity
Not Before: Apr 26 11:05:44 2024 GMT
Not After : Jul 30 00:00:00 2024 GMT
Subject: CN=662b8a88-a490
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:45:46:5f:04:78:48:a4:34:6d:18:f9:13:1d:
d1:41:b3:92:2d:c7:65:3a:9a:fa:fb:96:b4:6c:1a:
1f:84:16:8b:74:26:6f:40:62:bb:fa:8a:57:75:d3:
21:0c:25:ee:37:2d:2e:c3:f5:bf:55:9b:ef:d3:93:
5d:a3:5a:fc:65:20:75:14:87:bd:84:67:c3:04:0d:
6d:2e:1d:83:45:03:65:57:0d:48:6c:00:2c:56:cf:
9a:6d:db:28:31:2b:8e:27:c0:00:1e:30:37:65:c7:
b2:48:27:1d:13:aa:2f:f0:c6:d0:06:98:c9:69:2e:
e9:e1:27:b3:4b:03:f9:40:cc:b8:a9:d7:3a:b8:80:
06:da:bd:35:8e:a0:c6:a1:2c:a8:cc:bc:ab:d4:ec:
37:ae:04:ae:7b:77:f8:8d:f4:ea:27:6d:4f:02:59:
10:e6:23:e7:83:86:53:76:53:d7:46:46:fe:63:9c:
4e:32:92:68:e6:7b:b5:b4:c3:f9:07:cb:96:bf:57:
79:56:11:2c:b3:87:57:51:27:05:a7:39:20:5f:8c:
2f:89:4d:0b:f4:15:ef:a0:91:e5:5f:c9:bc:a4:e1:
91:98:f8:a7:ce:59:91:ca:d5:58:bf:ae:b4:3f:f5:
6a:49:34:b0:bc:00:8f:62:71:55:49:0b:45:62:0d:
c7:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:35:D3:8E:62:F5:1A:B0:3A:82:57:E5:EF:4A:2C:5E:03:B3:7A:28
X509v3 Authority Key Identifier:
keyid:83:08:08:79:11:EA:49:E2:15:DC:49:26:B0:22:6A:52:1E:5B:39:C4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/71AFC49445B911EE87D51B7EC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
115.167.0.0/24
115.167.3.0-115.167.4.255
115.167.12.0-115.167.23.255
115.167.56.0/22
115.167.108.0/22
115.167.116.0-115.167.123.255
115.167.126.0/23
175.110.88.0/22
175.110.104.0/22
175.110.110.0/23
Signature Algorithm: sha256WithRSAEncryption
91:2f:2a:be:58:fb:39:7e:94:fb:99:b2:ce:c8:b8:82:4f:14:
8e:14:68:cb:00:5d:c2:9a:54:a3:76:37:8b:80:63:46:01:85:
c4:d4:54:c2:0e:c0:85:31:23:18:70:ef:0a:f1:63:71:4f:81:
c9:ee:f8:e2:cd:69:d2:17:48:f8:0a:89:ae:2b:6a:57:16:b5:
e3:87:46:8a:31:a0:ea:06:3c:2f:33:e2:b8:8f:b4:d2:86:46:
5b:5f:7c:d5:30:9a:28:8d:4b:6d:eb:1f:ff:5b:39:c7:b2:a6:
05:7b:52:85:f6:36:db:9c:62:52:ca:9c:d8:bb:5a:81:94:c8:
fa:95:18:b5:7e:e3:8a:ca:97:cf:2d:7c:b9:71:72:30:4b:7b:
fe:0a:ca:f3:4e:4f:10:97:f8:4b:4d:fa:3b:d0:26:45:42:11:
a6:d5:52:07:1b:5f:60:aa:65:e6:e5:12:e4:ad:9e:98:53:fe:
e2:75:55:63:e0:79:2f:22:1d:f5:6a:36:83:ef:02:f0:df:48:
3e:8b:11:9a:8e:76:58:45:0e:5b:a1:c9:fa:22:bd:59:94:38:
9f:ba:8f:1f:cd:71:73:9f:1c:68:eb:35:61:12:84:81:62:8e:
39:02:b1:37:8d:e8:be:27:fa:c9:b2:de:7e:4c:81:c8:ee:43:
b8:ce:a1:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 30 23:05:10 2024 by rpki-client on console-ams.rpki-client.org