Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F4268/C78EBCEA219311EC900C5653C4F9AE02/3825A02A3BA911EC89976E3FC4F9AE02.roa
File: 3825A02A3BA911EC89976E3FC4F9AE02.roa (raw, json)
Hash identifier: LOP59tM7zvG4rac5bvNHTUfhEriiqncylji2xEoe7jE=
Subject key identifier: A5:DC:8F:38:8D:C2:CE:9C:A0:15:D9:F6:A6:E6:E2:1F:3A:30:62:05
Certificate issuer: /CN=A91F4268/serialNumber=93732F3FC31359BBBF8B379624BF91351CCAD857
Certificate serial: 044F
Authority key identifier: 93:73:2F:3F:C3:13:59:BB:BF:8B:37:96:24:BF:91:35:1C:CA:D8:57
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k3MvP8MTWbu_izeWJL-RNRzK2Fc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F4268/C78EBCEA219311EC900C5653C4F9AE02/3825A02A3BA911EC89976E3FC4F9AE02.roa
Signing time: Tue 13 Feb 2024 01:53:57 +0000
ROA not before: Tue 13 Feb 2024 01:53:57 +0000
ROA not after: Mon 31 Mar 2025 00:00:00 +0000
asID: 55429
IP address blocks: 45.113.116.0/22 maxlen: 24
103.53.12.0/22 maxlen: 24
111.119.0.0/23 maxlen: 23
111.119.12.0/22 maxlen: 22
111.119.12.0/24 maxlen: 24
111.119.13.0/24 maxlen: 24
111.119.14.0/24 maxlen: 24
111.119.15.0/24 maxlen: 24
203.9.179.0/24 maxlen: 24
203.9.180.0/24 maxlen: 24
203.9.182.0/24 maxlen: 24
203.9.183.0/24 maxlen: 24
2402:6800:3::/48 maxlen: 48
2402:6800:4::/48 maxlen: 48
2402:6800:5::/48 maxlen: 48
2402:6800:760::/48 maxlen: 48
2402:6800:763::/48 maxlen: 48
2402:6800:764::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F4268/C78EBCEA219311EC900C5653C4F9AE02/k3MvP8MTWbu_izeWJL-RNRzK2Fc.crl
rsync://rpki.apnic.net/member_repository/A91F4268/C78EBCEA219311EC900C5653C4F9AE02/k3MvP8MTWbu_izeWJL-RNRzK2Fc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k3MvP8MTWbu_izeWJL-RNRzK2Fc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 May 2024 02:15:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1103 (0x44f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F4268/serialNumber=93732F3FC31359BBBF8B379624BF91351CCAD857
Validity
Not Before: Feb 13 01:53:57 2024 GMT
Not After : Mar 31 00:00:00 2025 GMT
Subject: CN=65cacbb5-85f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:5d:ec:05:96:51:1a:8e:f8:4c:fc:db:86:10:
a1:1b:6b:47:01:04:85:06:f9:55:bd:51:54:ac:8a:
26:95:c9:4e:d6:94:f0:14:f7:08:b3:8d:75:d1:49:
0a:27:dc:d4:97:ae:d3:5d:1f:49:03:c1:55:9f:85:
a1:e1:a2:0e:87:a7:4f:38:53:18:63:da:46:68:1d:
72:29:e5:3b:15:51:a2:61:2b:c2:c2:7b:29:ed:f2:
2f:77:0f:73:cf:06:61:c4:a4:58:22:af:a4:ee:60:
a7:4c:42:1b:27:f0:f2:0a:bb:cf:73:1a:2a:e0:1c:
f0:e1:d5:95:f5:f2:0a:b8:b7:2c:55:90:20:24:3a:
99:bd:b4:d6:34:6b:79:00:ae:5a:ca:5f:46:2e:fc:
5e:a1:35:27:3c:27:d7:da:83:f6:b5:24:cd:5b:07:
ad:3e:ca:73:61:a4:16:a8:57:f7:b7:bd:4c:ec:98:
4a:3d:be:a4:82:c8:07:56:21:a9:53:f1:1b:87:e9:
90:ef:66:9a:2a:b4:ca:75:c3:60:3d:48:8f:80:99:
27:f3:94:bc:eb:17:0b:04:17:a4:90:6e:e7:72:36:
7e:78:9d:26:f1:4b:32:0b:36:2c:a6:4f:54:c0:5f:
79:f3:d1:f3:60:a4:e0:3e:2d:b3:e8:4e:1e:c9:68:
bc:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:DC:8F:38:8D:C2:CE:9C:A0:15:D9:F6:A6:E6:E2:1F:3A:30:62:05
X509v3 Authority Key Identifier:
keyid:93:73:2F:3F:C3:13:59:BB:BF:8B:37:96:24:BF:91:35:1C:CA:D8:57
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F4268/C78EBCEA219311EC900C5653C4F9AE02/k3MvP8MTWbu_izeWJL-RNRzK2Fc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k3MvP8MTWbu_izeWJL-RNRzK2Fc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F4268/C78EBCEA219311EC900C5653C4F9AE02/3825A02A3BA911EC89976E3FC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.113.116.0/22
103.53.12.0/22
111.119.0.0/23
111.119.12.0/22
203.9.179.0-203.9.180.255
203.9.182.0/23
IPv6:
2402:6800:3::-2402:6800:5:ffff:ffff:ffff:ffff:ffff
2402:6800:760::/48
2402:6800:763::-2402:6800:764:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
1d:f9:2b:16:a9:af:05:e4:33:fd:d7:54:10:6b:14:1d:e3:43:
cf:7a:21:56:b0:05:09:71:e3:b4:4d:2e:7e:03:85:1f:e3:9e:
b4:35:c5:7b:ea:68:dd:76:a1:59:34:22:36:14:0f:d7:75:8a:
31:96:ce:03:17:f1:1d:92:78:84:66:93:78:c6:22:f4:07:be:
bb:44:34:23:6a:22:75:d6:4b:81:36:be:a1:7d:e9:a1:0c:6f:
28:7d:e1:4c:01:81:34:29:bf:87:da:31:c6:3d:d7:c5:be:8e:
8c:27:75:65:50:32:6c:ab:c0:05:c6:86:be:23:86:b8:cb:49:
56:60:12:46:84:0c:2d:fc:4b:4e:e2:40:25:f0:fa:2c:c5:fa:
75:50:c2:b8:09:6c:80:00:f0:21:8a:90:a3:6c:ac:cc:f1:10:
01:b2:3e:f3:9e:22:57:24:15:10:a3:c4:9c:13:5b:4e:a8:0e:
4b:10:80:89:d7:d8:7b:47:45:d1:12:66:81:1a:16:9a:b9:55:
32:23:29:e6:3a:9e:d9:8b:83:62:e9:3b:76:09:18:6b:be:fe:
b1:0d:34:38:e7:cf:6d:2e:35:25:98:73:05:33:aa:c3:c5:12:
dc:7c:fb:c6:20:22:79:37:cb:8d:59:8f:38:da:12:a1:fb:ec:
02:b0:02:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 03:17:01 2024 by rpki-client on console-fra.rpki-client.org