Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91EE03B/AF9671660B6E11EEB29BB170C4F9AE02/AE0A263AB00411EF95939E11C4F9AE02.roa
File: AE0A263AB00411EF95939E11C4F9AE02.roa (raw, json)
Hash identifier: Hb3S2H5mvG6APMmAW4C0vTeaq85iORr/31KWRV1IZtk=
Subject key identifier: A7:9C:49:35:D3:5F:9C:B9:59:B8:AE:72:FD:6F:63:5D:8D:4E:A1:71
Certificate issuer: /CN=A91EE03B/serialNumber=B9E60CF179F4EACBDB9492BA5F7CACF45239CCF4
Certificate serial: 016E
Authority key identifier: B9:E6:0C:F1:79:F4:EA:CB:DB:94:92:BA:5F:7C:AC:F4:52:39:CC:F4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ueYM8Xn06svblJK6X3ys9FI5zPQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91EE03B/AF9671660B6E11EEB29BB170C4F9AE02/AE0A263AB00411EF95939E11C4F9AE02.roa
Signing time: Sun 01 Dec 2024 16:52:42 +0000
ROA not before: Sun 01 Dec 2024 16:52:42 +0000
ROA not after: Tue 30 Sep 2025 00:00:00 +0000
asID: 202662
IP address blocks: 2401:b60::/48 maxlen: 48
2401:b60:1::/48 maxlen: 48
2401:b60:2::/48 maxlen: 48
2401:b60:3::/48 maxlen: 48
2401:b60:4::/48 maxlen: 48
2401:b60:8::/48 maxlen: 48
2401:b60:9::/48 maxlen: 48
2401:b60:10::/48 maxlen: 48
2401:b60:11::/48 maxlen: 48
2401:b60:12::/48 maxlen: 48
2401:b60:13::/48 maxlen: 48
2401:b60:14::/48 maxlen: 48
2401:b60:15::/48 maxlen: 48
2401:b60:16::/48 maxlen: 48
2401:b60:17::/48 maxlen: 48
2401:b60:18::/48 maxlen: 48
2401:b60:19::/48 maxlen: 48
2401:b60:22::/48 maxlen: 48
2401:b60:23::/48 maxlen: 48
2401:b60:24::/48 maxlen: 48
2401:b60:25::/48 maxlen: 48
2401:b60:26::/48 maxlen: 48
2401:b60:27::/48 maxlen: 48
2401:b60:28::/48 maxlen: 48
2401:b60:29::/48 maxlen: 48
2401:b60:30::/48 maxlen: 48
2401:b60:31::/48 maxlen: 48
2401:b60:32::/48 maxlen: 48
2401:b60:33::/48 maxlen: 48
2401:b60:34::/48 maxlen: 48
2401:b60:35::/48 maxlen: 48
2401:b60:36::/48 maxlen: 48
2401:b60:39::/48 maxlen: 48
2401:b60:3a::/48 maxlen: 48
2401:b60:3b::/48 maxlen: 48
2401:b60:3c::/48 maxlen: 48
2401:b60:3d::/48 maxlen: 48
2401:b60:3e::/48 maxlen: 48
2401:b60:3f::/48 maxlen: 48
2401:b60:e000::/40 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91EE03B/AF9671660B6E11EEB29BB170C4F9AE02/ueYM8Xn06svblJK6X3ys9FI5zPQ.crl
rsync://rpki.apnic.net/member_repository/A91EE03B/AF9671660B6E11EEB29BB170C4F9AE02/ueYM8Xn06svblJK6X3ys9FI5zPQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ueYM8Xn06svblJK6X3ys9FI5zPQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 26 Feb 2025 05:37:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 366 (0x16e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91EE03B
Validity
Not Before: Dec 1 16:52:42 2024 GMT
Not After : Sep 30 00:00:00 2025 GMT
Subject: CN=674c945a-f0cf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:0c:e0:b4:6a:b0:17:49:bb:6a:a8:4f:39:e4:
c6:8b:5b:81:38:01:10:92:6b:4e:e6:5c:ec:83:67:
82:a3:88:f5:8a:f7:56:81:50:69:20:4f:e6:c1:71:
5e:7f:33:e7:e5:1c:2a:b4:77:af:71:5d:33:2e:76:
d5:74:76:82:e3:7f:34:2b:70:bd:80:b4:c6:97:4e:
d8:4e:62:c2:16:0b:68:be:70:35:b2:d1:18:c8:44:
be:0a:7c:48:b8:c9:a1:3e:0e:b8:e1:76:a4:ce:3d:
c3:c9:72:80:6e:b7:3a:2c:23:e2:26:18:8e:0f:1b:
b4:6b:7d:5f:04:c9:d3:58:8a:5f:ca:5a:46:0e:0f:
40:1b:80:50:fe:20:05:77:df:7e:78:15:cb:08:77:
90:ec:73:9a:29:90:4c:ab:50:66:1a:16:d7:8a:09:
e3:9b:ed:0d:82:67:de:29:71:70:8b:cf:22:56:a2:
bb:fa:4a:8c:c0:0e:ed:f1:09:58:5d:a7:63:67:e5:
d3:77:75:c2:47:b4:ed:66:a4:55:8c:32:bf:94:ff:
a0:a7:1a:f2:dc:2e:0e:2d:22:ff:24:b0:6d:b2:f1:
82:02:dc:b1:c0:71:54:c4:d3:98:e2:ea:ec:f4:2f:
83:f1:2e:af:53:ff:b4:78:77:75:3e:96:ee:58:0d:
fa:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:9C:49:35:D3:5F:9C:B9:59:B8:AE:72:FD:6F:63:5D:8D:4E:A1:71
X509v3 Authority Key Identifier:
keyid:B9:E6:0C:F1:79:F4:EA:CB:DB:94:92:BA:5F:7C:AC:F4:52:39:CC:F4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91EE03B/AF9671660B6E11EEB29BB170C4F9AE02/ueYM8Xn06svblJK6X3ys9FI5zPQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ueYM8Xn06svblJK6X3ys9FI5zPQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EE03B/AF9671660B6E11EEB29BB170C4F9AE02/AE0A263AB00411EF95939E11C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv6:
2401:b60::-2401:b60:4:ffff:ffff:ffff:ffff:ffff
2401:b60:8::/47
2401:b60:10::-2401:b60:19:ffff:ffff:ffff:ffff:ffff
2401:b60:22::-2401:b60:29:ffff:ffff:ffff:ffff:ffff
2401:b60:30::-2401:b60:36:ffff:ffff:ffff:ffff:ffff
2401:b60:39::-2401:b60:3f:ffff:ffff:ffff:ffff:ffff
2401:b60:e000::/40
Signature Algorithm: sha256WithRSAEncryption
9f:4d:cd:42:8e:60:7c:14:76:22:f6:34:9f:3d:d9:37:09:6b:
e1:f4:96:04:72:15:10:ba:d5:03:60:02:91:52:3a:3d:30:93:
46:13:d7:40:2e:67:a7:f5:44:64:55:b0:a2:06:d2:0e:94:30:
12:09:58:dc:26:95:2f:c0:cf:d8:a9:f6:6c:a0:9f:1c:c2:d5:
ec:c3:86:7c:74:1e:0e:1e:d1:c2:ae:e8:43:77:7d:87:57:52:
fc:f8:ea:fb:0e:38:3c:d2:eb:37:2d:ac:51:e9:5e:76:6d:8b:
db:7e:2e:91:e2:a7:c6:7f:93:52:e1:b8:cb:37:87:dd:80:03:
c4:30:cc:67:8c:48:69:b5:52:f1:a1:4b:5e:b9:ae:85:89:e9:
d1:f9:19:fd:6d:4a:2d:50:b6:03:e0:73:2f:21:38:0f:70:a1:
6e:a2:89:b8:fd:b7:df:57:bd:00:52:cf:0f:59:62:e4:35:0d:
0f:14:12:96:84:11:35:ae:2a:c1:22:58:8b:23:30:67:fe:f1:
fb:d6:e5:6e:b2:08:f9:79:9e:72:a4:81:42:a2:56:e8:2e:5d:
c8:81:99:0b:e7:06:08:e3:ab:35:6f:45:3b:8f:3b:3c:d2:ef:
4d:2d:4a:00:5f:c5:fc:d0:04:a2:51:68:1b:e8:f8:11:ec:40:
ea:8f:b8:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 21:59:17 2025 by rpki-client