Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91EB2B8/3F44CBAE2F4D11ED8F5A6A64C4F9AE02/F88E6A60A58011EFA3FFCB4BC4F9AE02.roa
File: F88E6A60A58011EFA3FFCB4BC4F9AE02.roa (raw, json)
Hash identifier: p5nvDrb5T8fA8cepcjnioVkPaj0kaRwx4ySM+a4cbkw=
Subject key identifier: 12:63:BD:59:D3:A6:C3:E6:40:9F:9E:0B:E8:31:4F:3A:A1:9D:D3:C9
Certificate issuer: /CN=A91EB2B8/serialNumber=A69700E78D0C812AD2E2C114C82C655A0ACD447F
Certificate serial: 0214
Authority key identifier: A6:97:00:E7:8D:0C:81:2A:D2:E2:C1:14:C8:2C:65:5A:0A:CD:44:7F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ppcA540MgSrS4sEUyCxlWgrNRH8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91EB2B8/3F44CBAE2F4D11ED8F5A6A64C4F9AE02/F88E6A60A58011EFA3FFCB4BC4F9AE02.roa
Signing time: Mon 18 Nov 2024 07:44:42 +0000
ROA not before: Mon 18 Nov 2024 07:44:42 +0000
ROA not after: Sun 31 Aug 2025 00:00:00 +0000
asID: 139057
IP address blocks: 103.138.246.0/24 maxlen: 24
103.138.247.0/24 maxlen: 24
103.243.92.0/24 maxlen: 24
103.243.93.0/24 maxlen: 24
103.243.94.0/24 maxlen: 24
103.243.95.0/24 maxlen: 24
123.108.72.0/24 maxlen: 24
123.108.73.0/24 maxlen: 24
2407:2440:1::/48 maxlen: 48
2407:2440:2::/48 maxlen: 48
2407:2440:3::/48 maxlen: 48
2407:2440:4::/48 maxlen: 48
2407:2440:5::/48 maxlen: 48
2407:2440:6::/48 maxlen: 48
2407:2440:7::/48 maxlen: 48
2407:2440:8::/48 maxlen: 48
2407:2440:9::/48 maxlen: 48
2407:2440:a::/48 maxlen: 48
2407:2440:b::/48 maxlen: 48
2407:2440:c::/48 maxlen: 48
2407:2440:d::/48 maxlen: 48
2407:2440:e::/48 maxlen: 48
2407:2440:f::/48 maxlen: 48
2407:2440:10::/48 maxlen: 48
2407:2440:11::/48 maxlen: 48
2407:2440:12::/48 maxlen: 48
2407:2440:13::/48 maxlen: 48
2407:2440:14::/48 maxlen: 48
2407:2440:15::/48 maxlen: 48
2407:2440:16::/48 maxlen: 48
2407:2440:17::/48 maxlen: 48
2407:2440:18::/48 maxlen: 48
2407:2440:19::/48 maxlen: 48
2407:2440:1e::/48 maxlen: 48
2407:2440:1f::/48 maxlen: 48
2407:2440:20::/48 maxlen: 48
2407:2440:22::/48 maxlen: 48
2407:2440:23::/48 maxlen: 48
2407:2440:25::/48 maxlen: 48
2407:2440:28::/48 maxlen: 48
2407:2440:2a::/48 maxlen: 48
2407:2440:2b::/48 maxlen: 48
2407:2440:2c::/48 maxlen: 48
2407:2440:2d::/48 maxlen: 48
2407:2440:a001::/48 maxlen: 48
2407:2440:a002::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91EB2B8/3F44CBAE2F4D11ED8F5A6A64C4F9AE02/ppcA540MgSrS4sEUyCxlWgrNRH8.crl
rsync://rpki.apnic.net/member_repository/A91EB2B8/3F44CBAE2F4D11ED8F5A6A64C4F9AE02/ppcA540MgSrS4sEUyCxlWgrNRH8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ppcA540MgSrS4sEUyCxlWgrNRH8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 27 Nov 2024 20:33:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 532 (0x214)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91EB2B8/serialNumber=A69700E78D0C812AD2E2C114C82C655A0ACD447F
Validity
Not Before: Nov 18 07:44:42 2024 GMT
Not After : Aug 31 00:00:00 2025 GMT
Subject: CN=673af069-2e36
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:b3:e7:1f:c9:f9:74:12:e1:50:d5:3e:e3:95:
42:0a:3a:79:40:04:23:76:a0:1a:01:92:c1:98:99:
9c:ef:ca:6e:cc:78:cf:6f:0e:7b:37:51:f0:e8:89:
70:d8:f0:2c:8c:88:75:63:28:94:72:46:6e:e0:9f:
6d:85:87:bf:e9:78:0a:a6:19:d8:53:d7:1b:da:2a:
9a:a8:df:d9:30:f1:93:6a:ff:bf:33:24:eb:9d:13:
b9:99:9b:bf:19:11:81:87:25:7b:d7:1e:a3:51:ac:
9e:c8:cb:29:d7:f9:dd:e9:1f:d6:fc:62:75:21:d8:
2a:56:cc:41:e8:f8:07:ce:4b:3a:44:e3:3c:65:88:
87:61:c6:c0:07:0d:e2:61:9e:59:38:19:fc:ce:c1:
71:10:fc:e9:e9:b6:fb:fb:6b:70:2e:58:d7:78:2f:
16:b7:99:37:4c:20:31:3d:b8:ca:7b:59:90:d9:94:
7b:85:60:00:a4:30:ce:06:29:29:09:67:f2:7f:d6:
12:e9:80:83:89:ca:fe:00:d5:c9:e0:6d:51:95:59:
f2:03:b9:b0:74:e3:a4:d6:5c:6a:a3:52:28:ba:27:
b7:6c:f8:28:a6:42:75:31:71:44:4b:9a:a3:99:30:
5c:b4:e4:2a:0d:8e:01:34:26:8d:9a:0b:7a:c4:ac:
a0:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:63:BD:59:D3:A6:C3:E6:40:9F:9E:0B:E8:31:4F:3A:A1:9D:D3:C9
X509v3 Authority Key Identifier:
keyid:A6:97:00:E7:8D:0C:81:2A:D2:E2:C1:14:C8:2C:65:5A:0A:CD:44:7F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91EB2B8/3F44CBAE2F4D11ED8F5A6A64C4F9AE02/ppcA540MgSrS4sEUyCxlWgrNRH8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ppcA540MgSrS4sEUyCxlWgrNRH8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EB2B8/3F44CBAE2F4D11ED8F5A6A64C4F9AE02/F88E6A60A58011EFA3FFCB4BC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.138.246.0/23
103.243.92.0/22
123.108.72.0/23
IPv6:
2407:2440:1::-2407:2440:19:ffff:ffff:ffff:ffff:ffff
2407:2440:1e::-2407:2440:20:ffff:ffff:ffff:ffff:ffff
2407:2440:22::/47
2407:2440:25::/48
2407:2440:28::/48
2407:2440:2a::-2407:2440:2d:ffff:ffff:ffff:ffff:ffff
2407:2440:a001::-2407:2440:a002:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
1d:16:8a:9a:e6:41:32:97:43:8d:fc:b3:96:d7:33:00:70:93:
bb:d7:e5:12:3b:f3:7f:60:02:84:35:87:a1:5d:f4:ec:a1:ef:
f8:cf:11:5f:f0:6b:b9:e1:d7:97:5b:e4:c4:aa:6c:ec:e5:33:
f7:36:68:b3:bb:13:65:f3:32:8f:26:be:a0:c3:e6:a2:de:3d:
40:1f:a1:60:89:e8:14:53:13:bc:4b:ae:b9:9f:41:a6:8c:b3:
9a:43:62:92:bb:c4:96:60:6c:44:94:c1:0d:f0:4b:17:a2:e5:
ea:95:27:ce:87:84:df:f5:5b:39:56:53:0e:83:99:1a:50:bf:
06:33:1e:04:6b:6c:7e:49:67:ca:4e:ce:5d:e4:a3:4e:14:8d:
30:bc:ae:e4:bf:9c:87:f9:b8:0d:fc:9d:17:c7:4b:f7:ff:1e:
5c:19:d8:88:7d:bd:db:bb:3d:6e:f6:10:25:09:86:8e:01:bb:
de:49:9a:0e:0a:89:3b:8d:4a:6d:8e:a1:ac:c3:6b:a7:9e:4f:
a1:d6:99:4b:76:0d:22:68:89:fa:b4:cf:1c:50:a1:94:67:79:
c8:4b:01:7d:9f:ae:84:96:14:15:c6:53:eb:95:1e:d7:1e:89:
73:77:65:2a:84:4e:42:51:0e:21:1a:99:8f:44:fb:e4:21:75:
b3:58:60:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 03:12:07 2024 by rpki-client on console-fra.rpki-client.org