Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6194/5F37B9EEEF6B11EBB376EC75C4F9AE02/EEF4F7A6EF6E11EBB1C02712C4F9AE02.roa
File: EEF4F7A6EF6E11EBB1C02712C4F9AE02.roa (raw, json)
Hash identifier: 0uI77WnMvgx38BJ7x5ctqph2jfLMtLeb4wieKz5xnjk=
Subject key identifier: 8E:72:67:38:44:2E:E2:2D:2A:24:76:38:D7:5E:E2:DE:7E:78:11:2E
Certificate issuer: /CN=A91E6194/serialNumber=67DD7747A9DB8B01A5E7CCA146C48965A2308091
Certificate serial: 049A
Authority key identifier: 67:DD:77:47:A9:DB:8B:01:A5:E7:CC:A1:46:C4:89:65:A2:30:80:91
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z913R6nbiwGl58yhRsSJZaIwgJE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E6194/5F37B9EEEF6B11EBB376EC75C4F9AE02/EEF4F7A6EF6E11EBB1C02712C4F9AE02.roa
Signing time: Sun 05 May 2024 02:04:19 +0000
ROA not before: Sun 05 May 2024 02:04:19 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 7628
IP address blocks: 103.68.202.0/24 maxlen: 24
103.212.217.0/24 maxlen: 24
103.212.218.0/24 maxlen: 24
103.212.219.0/24 maxlen: 24
203.56.23.0/24 maxlen: 24
2402:1b40:1001::/48 maxlen: 48
2402:1b40:1002::/48 maxlen: 48
2402:1b40:2000::/37 maxlen: 37
2402:1b40:2000::/48 maxlen: 48
2402:1b40:2004::/48 maxlen: 48
2402:1b40:2008::/48 maxlen: 48
2402:1b40:2800::/37 maxlen: 37
2402:1b40:3000::/37 maxlen: 37
2402:1b40:3000::/48 maxlen: 48
2402:1b40:3800::/37 maxlen: 37
2402:1b40:4000::/37 maxlen: 37
2402:1b40:4000::/48 maxlen: 48
2402:1b40:5000::/48 maxlen: 48
2402:1b40:8000::/36 maxlen: 36
2402:1b40:9000::/36 maxlen: 36
2402:1b40:a000::/36 maxlen: 36
2402:1b40:b000::/36 maxlen: 36
2402:1b40:c000::/36 maxlen: 36
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E6194/5F37B9EEEF6B11EBB376EC75C4F9AE02/Z913R6nbiwGl58yhRsSJZaIwgJE.crl
rsync://rpki.apnic.net/member_repository/A91E6194/5F37B9EEEF6B11EBB376EC75C4F9AE02/Z913R6nbiwGl58yhRsSJZaIwgJE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z913R6nbiwGl58yhRsSJZaIwgJE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 26 May 2024 01:19:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1178 (0x49a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E6194/serialNumber=67DD7747A9DB8B01A5E7CCA146C48965A2308091
Validity
Not Before: May 5 02:04:19 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6636e923-7f38
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:42:5e:dc:32:ea:0d:a7:59:41:b9:40:36:92:
9a:a6:1f:6d:62:a9:f2:33:1c:7a:87:3e:c6:80:66:
98:e8:7e:74:9b:29:d7:8d:fd:06:6d:00:b0:10:67:
c8:ee:12:53:69:03:15:b5:ea:43:70:2c:39:02:05:
17:77:45:bc:d2:a5:8b:c9:dc:c4:76:90:aa:32:55:
ed:9a:da:ae:07:a8:6d:01:2c:20:1e:9a:28:9c:0c:
20:f7:a4:6a:0b:20:6b:fe:8f:61:ad:bb:bb:e1:7b:
b3:b9:f2:22:63:9d:b9:54:63:f0:54:c2:e3:36:ff:
c5:0b:a7:e6:72:3d:d4:86:2a:e7:3a:d5:65:6f:66:
ba:21:58:34:7e:ee:86:8f:2c:9a:b2:d1:d8:1f:a5:
8c:63:b1:06:ce:6b:3e:4e:e0:f2:84:d8:6d:2f:74:
be:5d:15:33:6f:86:c3:01:cc:18:d1:45:c8:47:99:
5a:10:4c:e8:1c:11:9a:62:fb:aa:e4:b2:b0:97:c6:
7a:9f:1a:36:4b:3b:20:c5:95:d7:5e:59:74:14:0b:
f5:66:e4:6a:b6:2b:d9:1c:af:b1:11:1a:9d:50:98:
fb:b8:89:12:50:da:46:41:cd:b3:dd:ee:4a:45:f0:
aa:aa:38:0b:b6:8a:bd:9a:4a:67:03:2e:19:aa:b7:
6e:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:72:67:38:44:2E:E2:2D:2A:24:76:38:D7:5E:E2:DE:7E:78:11:2E
X509v3 Authority Key Identifier:
keyid:67:DD:77:47:A9:DB:8B:01:A5:E7:CC:A1:46:C4:89:65:A2:30:80:91
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E6194/5F37B9EEEF6B11EBB376EC75C4F9AE02/Z913R6nbiwGl58yhRsSJZaIwgJE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z913R6nbiwGl58yhRsSJZaIwgJE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6194/5F37B9EEEF6B11EBB376EC75C4F9AE02/EEF4F7A6EF6E11EBB1C02712C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.68.202.0/24
103.212.217.0-103.212.219.255
203.56.23.0/24
IPv6:
2402:1b40:1001::-2402:1b40:1002:ffff:ffff:ffff:ffff:ffff
2402:1b40:2000::-2402:1b40:47ff:ffff:ffff:ffff:ffff:ffff
2402:1b40:5000::/48
2402:1b40:8000::-2402:1b40:cfff:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
a8:8a:62:02:80:9b:bb:3e:52:b9:8c:26:e5:bf:54:ce:9a:7c:
32:f4:7a:03:96:12:7b:73:0c:88:e7:b4:7f:a1:10:a0:bc:bc:
91:49:b7:d1:e2:f7:eb:8e:75:71:15:47:ea:12:5a:96:d2:42:
27:2a:51:80:4e:c5:4a:5c:32:be:71:62:1d:b9:f8:64:b6:e4:
11:c7:3a:80:3d:78:9b:22:cb:77:e2:f0:92:72:8a:12:75:f6:
a1:21:02:db:14:43:ac:ff:0c:62:7a:74:4a:42:9e:5a:60:8a:
a8:24:ba:b5:9a:23:f4:f7:30:fa:35:9d:ae:e6:ba:6b:7d:30:
93:47:4d:26:b3:ec:5e:ae:16:cd:92:c0:88:db:57:04:41:a1:
90:0d:63:59:b7:3f:25:9f:ca:76:1a:33:23:08:b6:29:0b:4c:
73:00:93:e5:69:54:fc:c4:b6:5c:ab:91:92:07:13:ab:36:ef:
57:2a:7e:87:ed:8b:c1:ff:a7:74:62:04:14:56:d7:18:fc:72:
20:3a:b9:67:c3:06:22:39:1c:84:9d:02:2d:b2:8c:5b:d3:9f:
65:39:08:5b:0c:49:b2:6f:01:c0:26:28:4c:4e:46:21:46:4a:
d6:84:2b:79:8f:8e:4b:6e:96:a4:a2:dc:9c:9d:c8:f3:6c:0d:
93:27:e5:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 19 02:39:38 2024 by rpki-client on console-fra.rpki-client.org