Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F2BD9/0481F786EC1911EA85B1E76FC4F9AE02/85A0A1086C9711EEA4941846C4F9AE02.roa
File: 85A0A1086C9711EEA4941846C4F9AE02.roa (raw, json)
Hash identifier: Luw/We75eG/rirHUsOqrwHt6bzrOeuG6Cw782K1mlaQ=
Subject key identifier: 2D:83:D5:6D:55:32:5B:38:25:E6:5E:26:91:F4:D2:14:0C:D5:6F:34
Certificate issuer: /CN=A91F2BD9/serialNumber=AFCD12F3409878CD4AB445C445544AE8DA851A84
Certificate serial: 070B
Authority key identifier: AF:CD:12:F3:40:98:78:CD:4A:B4:45:C4:45:54:4A:E8:DA:85:1A:84
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r80S80CYeM1KtEXERVRK6NqFGoQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F2BD9/0481F786EC1911EA85B1E76FC4F9AE02/85A0A1086C9711EEA4941846C4F9AE02.roa
Signing time: Tue 20 Feb 2024 22:41:04 +0000
ROA not before: Tue 20 Feb 2024 22:41:04 +0000
ROA not after: Sun 02 Mar 2025 00:00:00 +0000
asID: 7594
IP address blocks: 120.88.64.0/19 maxlen: 19
120.88.64.0/24 maxlen: 24
120.88.65.0/24 maxlen: 24
120.88.66.0/24 maxlen: 24
120.88.67.0/24 maxlen: 24
120.88.68.0/24 maxlen: 24
120.88.69.0/24 maxlen: 24
120.88.70.0/24 maxlen: 24
120.88.71.0/24 maxlen: 24
120.88.72.0/24 maxlen: 24
120.88.73.0/24 maxlen: 24
120.88.74.0/24 maxlen: 24
120.88.75.0/24 maxlen: 24
120.88.76.0/24 maxlen: 24
120.88.77.0/24 maxlen: 24
120.88.78.0/24 maxlen: 24
120.88.79.0/24 maxlen: 24
120.88.80.0/24 maxlen: 24
120.88.81.0/24 maxlen: 24
120.88.82.0/24 maxlen: 24
120.88.83.0/24 maxlen: 24
120.88.84.0/24 maxlen: 24
120.88.85.0/24 maxlen: 24
120.88.86.0/24 maxlen: 24
120.88.87.0/24 maxlen: 24
120.88.88.0/24 maxlen: 24
120.88.89.0/24 maxlen: 24
120.88.90.0/24 maxlen: 24
120.88.91.0/24 maxlen: 24
120.88.92.0/24 maxlen: 24
120.88.93.0/24 maxlen: 24
120.88.94.0/24 maxlen: 24
120.88.95.0/24 maxlen: 24
121.0.0.0/21 maxlen: 21
121.0.0.0/24 maxlen: 24
121.0.1.0/24 maxlen: 24
121.0.2.0/24 maxlen: 24
121.0.3.0/24 maxlen: 24
121.0.4.0/24 maxlen: 24
121.0.5.0/24 maxlen: 24
121.0.6.0/24 maxlen: 24
121.0.7.0/24 maxlen: 24
203.56.180.0/24 maxlen: 24
2403:9000::/32 maxlen: 34
2403:9000:500::/40 maxlen: 40
2403:9000:501::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F2BD9/0481F786EC1911EA85B1E76FC4F9AE02/r80S80CYeM1KtEXERVRK6NqFGoQ.crl
rsync://rpki.apnic.net/member_repository/A91F2BD9/0481F786EC1911EA85B1E76FC4F9AE02/r80S80CYeM1KtEXERVRK6NqFGoQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r80S80CYeM1KtEXERVRK6NqFGoQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 25 May 2024 19:51:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1803 (0x70b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F2BD9/serialNumber=AFCD12F3409878CD4AB445C445544AE8DA851A84
Validity
Not Before: Feb 20 22:41:04 2024 GMT
Not After : Mar 2 00:00:00 2025 GMT
Subject: CN=65d52a80-ac26
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:6b:47:a5:3e:35:e8:52:f3:be:24:b0:00:e8:
da:4f:91:a2:f4:e2:04:22:f4:3d:9c:ac:4a:19:f0:
08:44:08:c3:da:55:f4:06:c6:51:ad:de:8e:21:3e:
06:3c:6a:19:b8:79:6f:7e:1c:11:17:7a:d1:3d:db:
7e:48:55:90:dd:c8:d4:2e:29:e7:37:ff:f8:a5:fb:
78:6e:c4:34:37:da:16:d1:94:70:f5:7f:46:c3:9c:
28:0f:e1:ff:f6:1a:97:f9:e9:82:82:a9:00:d1:75:
ce:2e:99:8d:69:a1:c5:13:46:cc:75:a8:84:c1:9c:
51:88:69:a9:bb:7b:8e:4c:87:75:bb:8a:96:b7:6f:
09:a2:27:f8:be:01:b1:ae:63:00:9d:cc:0b:d5:a6:
0b:71:19:c1:a7:f6:71:d4:b9:28:af:aa:87:e2:4a:
b5:53:2d:d0:86:8e:64:c4:45:5d:2a:e4:ba:70:d3:
94:19:2a:34:28:05:ab:2c:a3:c6:56:f9:cb:e1:6a:
90:7d:fc:f9:c9:41:f9:6c:a2:e6:12:45:d4:92:e6:
ac:42:94:d4:21:ba:3d:0f:9e:c2:24:c3:15:82:04:
87:7e:ee:87:f6:8b:ef:a6:df:e8:a9:bd:b9:25:b5:
85:2b:ba:45:94:f7:13:43:74:58:c7:8a:f3:bd:a1:
69:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:83:D5:6D:55:32:5B:38:25:E6:5E:26:91:F4:D2:14:0C:D5:6F:34
X509v3 Authority Key Identifier:
keyid:AF:CD:12:F3:40:98:78:CD:4A:B4:45:C4:45:54:4A:E8:DA:85:1A:84
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F2BD9/0481F786EC1911EA85B1E76FC4F9AE02/r80S80CYeM1KtEXERVRK6NqFGoQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r80S80CYeM1KtEXERVRK6NqFGoQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F2BD9/0481F786EC1911EA85B1E76FC4F9AE02/85A0A1086C9711EEA4941846C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
120.88.64.0/19
121.0.0.0/21
203.56.180.0/24
IPv6:
2403:9000::/32
Signature Algorithm: sha256WithRSAEncryption
76:59:4b:88:f5:67:f8:5d:57:45:73:00:c5:9b:9f:21:b3:3e:
81:65:e3:08:79:fd:ef:cc:af:a0:ee:01:e7:9f:3f:07:a5:ec:
4d:b0:3d:b1:fb:01:cf:ab:d0:5a:52:8c:d7:29:40:31:54:39:
77:33:a4:ce:53:7c:fc:7b:6a:63:7d:ca:58:1b:4b:5a:fc:f1:
03:5a:4e:09:50:06:4b:75:8a:c9:ba:fa:8e:4a:27:7c:83:b3:
51:b6:b7:d4:6a:57:17:eb:0f:7a:ff:61:bd:81:d7:94:fd:0d:
01:38:53:08:d7:0d:d3:d2:29:72:3d:1b:5a:3c:ce:03:10:eb:
c9:20:49:5f:66:02:3a:1c:64:46:a1:0e:31:d7:a8:d6:be:68:
3c:65:6b:bd:29:74:6b:c5:fb:e4:41:bc:be:16:2e:02:c2:2d:
71:98:f4:18:28:80:0f:94:61:f9:b9:e9:85:18:2e:82:82:f2:
0e:ad:84:9f:be:80:a4:cd:77:01:16:b1:c4:f9:49:a5:8a:c4:
ae:f2:eb:61:02:b4:45:42:36:91:50:07:01:5e:4e:06:d2:8b:
81:8c:fc:f4:40:bc:09:32:66:32:d5:d8:ac:48:3f:fd:51:4f:
07:d2:bd:3b:59:94:33:ca:8c:14:d2:d6:f9:e1:27:fa:75:0e:
00:5e:46:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 19 00:16:21 2024 by rpki-client on console-fra.rpki-client.org