Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F4268/C78EBCEA219311EC900C5653C4F9AE02/BEDF72A076B911EF95DBF27CC4F9AE02.roa
File: BEDF72A076B911EF95DBF27CC4F9AE02.roa (raw, json)
Hash identifier: rNVFB5BqgsAcIDDAN4WbuUKm/BxRwx0gk0GwaT4vqvg=
Subject key identifier: 91:00:68:40:EE:EE:27:D8:D7:AC:8A:8F:72:17:54:16:4F:A1:EC:8E
Certificate issuer: /CN=A91F4268/serialNumber=93732F3FC31359BBBF8B379624BF91351CCAD857
Certificate serial: 04C3
Authority key identifier: 93:73:2F:3F:C3:13:59:BB:BF:8B:37:96:24:BF:91:35:1C:CA:D8:57
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k3MvP8MTWbu_izeWJL-RNRzK2Fc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F4268/C78EBCEA219311EC900C5653C4F9AE02/BEDF72A076B911EF95DBF27CC4F9AE02.roa
Signing time: Thu 19 Sep 2024 19:02:41 +0000
ROA not before: Thu 19 Sep 2024 19:02:41 +0000
ROA not after: Mon 31 Mar 2025 00:00:00 +0000
asID: 55429
IP address blocks: 45.113.116.0/22 maxlen: 24
103.53.12.0/22 maxlen: 24
111.119.0.0/23 maxlen: 24
111.119.12.0/22 maxlen: 22
111.119.12.0/24 maxlen: 24
111.119.13.0/24 maxlen: 24
111.119.14.0/24 maxlen: 24
111.119.15.0/24 maxlen: 24
203.9.179.0/24 maxlen: 24
203.9.180.0/24 maxlen: 24
203.9.182.0/24 maxlen: 24
203.9.183.0/24 maxlen: 24
2402:6800:3::/48 maxlen: 48
2402:6800:4::/48 maxlen: 48
2402:6800:5::/48 maxlen: 48
2402:6800:760::/48 maxlen: 48
2402:6800:763::/48 maxlen: 48
2402:6800:764::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F4268/C78EBCEA219311EC900C5653C4F9AE02/k3MvP8MTWbu_izeWJL-RNRzK2Fc.crl
rsync://rpki.apnic.net/member_repository/A91F4268/C78EBCEA219311EC900C5653C4F9AE02/k3MvP8MTWbu_izeWJL-RNRzK2Fc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k3MvP8MTWbu_izeWJL-RNRzK2Fc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 27 Nov 2024 20:33:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1219 (0x4c3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F4268/serialNumber=93732F3FC31359BBBF8B379624BF91351CCAD857
Validity
Not Before: Sep 19 19:02:41 2024 GMT
Not After : Mar 31 00:00:00 2025 GMT
Subject: CN=66ec7551-53d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:05:e5:a9:be:cf:42:31:c0:a7:88:14:19:22:
12:b6:ff:da:e5:88:21:1e:fd:85:b4:2a:a0:95:ca:
5c:6b:4c:1a:44:78:6f:06:c7:3b:e6:62:0a:0f:79:
6f:6d:cb:a6:a2:24:31:64:8f:0a:60:31:c7:33:8a:
56:10:c9:e0:20:91:ed:0e:33:6b:d1:56:99:60:16:
4e:4c:82:22:fe:89:0e:e1:d9:fc:e9:7a:93:76:d7:
fe:c8:12:96:79:ca:fe:72:e9:52:cd:3c:55:39:cf:
d5:37:b1:91:b3:a7:81:a3:54:d9:8e:d7:17:ad:b9:
9a:70:91:72:ac:69:0e:45:6d:9d:26:40:4d:89:59:
88:49:59:cf:95:d3:32:03:88:68:b7:93:83:b3:84:
88:9d:cd:b3:78:7e:1f:0e:25:dd:d2:da:5c:be:9c:
a6:16:d2:31:91:53:bc:2e:b5:74:89:a3:e5:e9:40:
91:c5:14:fb:b4:62:bb:f2:f1:42:a5:04:ad:a4:49:
57:3a:36:f0:5d:29:3d:ef:46:1c:0c:59:ba:81:5a:
b3:62:d5:17:b3:cb:58:2d:9d:c4:62:dd:63:1f:36:
b7:c7:2b:81:62:f2:b0:7c:84:de:e3:b8:1a:5b:c9:
a0:24:77:6e:0f:8d:3d:46:6b:53:90:39:12:59:55:
a0:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:00:68:40:EE:EE:27:D8:D7:AC:8A:8F:72:17:54:16:4F:A1:EC:8E
X509v3 Authority Key Identifier:
keyid:93:73:2F:3F:C3:13:59:BB:BF:8B:37:96:24:BF:91:35:1C:CA:D8:57
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F4268/C78EBCEA219311EC900C5653C4F9AE02/k3MvP8MTWbu_izeWJL-RNRzK2Fc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k3MvP8MTWbu_izeWJL-RNRzK2Fc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F4268/C78EBCEA219311EC900C5653C4F9AE02/BEDF72A076B911EF95DBF27CC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.113.116.0/22
103.53.12.0/22
111.119.0.0/23
111.119.12.0/22
203.9.179.0-203.9.180.255
203.9.182.0/23
IPv6:
2402:6800:3::-2402:6800:5:ffff:ffff:ffff:ffff:ffff
2402:6800:760::/48
2402:6800:763::-2402:6800:764:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
3d:00:b7:ab:97:21:20:67:1c:f1:a2:25:0c:60:38:9a:e0:bd:
44:a6:b8:a4:aa:92:84:be:5f:d9:7d:ff:39:aa:4f:c9:42:c3:
8e:18:78:11:a8:4a:c5:4a:24:13:c5:45:e7:a1:09:c8:31:66:
5d:85:df:9c:f0:a0:96:63:7b:c9:6f:e7:f0:32:e3:f4:6a:a2:
f7:0e:ac:2d:7c:08:ed:16:db:0c:c1:43:83:a8:fd:20:7e:ca:
17:0a:9c:42:1a:bd:4f:bb:26:d6:05:31:95:4d:5f:0d:06:f4:
99:14:d0:6a:a0:6e:d1:24:20:16:e5:2c:c4:cc:36:6a:ba:5a:
91:8d:04:75:d0:1a:fa:19:43:22:c3:70:9b:05:08:e5:a5:c1:
07:fe:0c:86:e4:65:f8:c5:5d:4d:1c:05:55:a3:c1:9d:6e:4f:
c9:5c:df:5f:ac:b4:f3:f9:7b:82:15:0a:36:a6:3e:2e:71:e5:
cc:45:61:b2:f4:43:35:8a:79:91:f3:ce:ba:19:d3:f5:cb:c9:
c4:75:8a:19:15:bc:cd:be:47:91:94:9d:b7:6d:2b:b5:ba:ee:
76:99:a8:92:a3:56:3b:6f:23:67:21:c4:57:44:e8:71:96:3c:
09:2d:00:05:37:c6:72:fc:fb:20:8b:ae:2c:ea:e1:58:06:b1:
6b:66:fd:5e
-----BEGIN CERTIFICATE-----
MIIF0DCCBLigAwIBAgICBMMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RjQyNjgxMTAvBgNVBAUTKDkzNzMyRjNGQzMxMzU5QkJCRjhCMzc5NjI0QkY5MTM1
MUNDQUQ4NTcwHhcNMjQwOTE5MTkwMjQxWhcNMjUwMzMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02NmVjNzU1MS01M2QxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA0QXlqb7PQjHAp4gUGSIStv/a5YghHv2FtCqglcpca0waRHhvBsc75mIKD3lv
bcumoiQxZI8KYDHHM4pWEMngIJHtDjNr0VaZYBZOTIIi/okO4dn86XqTdtf+yBKW
ecr+culSzTxVOc/VN7GRs6eBo1TZjtcXrbmacJFyrGkORW2dJkBNiVmISVnPldMy
A4hot5ODs4SInc2zeH4fDiXd0tpcvpymFtIxkVO8LrV0iaPl6UCRxRT7tGK78vFC
pQStpElXOjbwXSk970YcDFm6gVqzYtUXs8tYLZ3EYt1jHza3xyuBYvKwfITe47ga
W8mgJHduD409RmtTkDkSWVWgqwIDAQABo4IC9DCCAvAwHQYDVR0OBBYEFJEAaEDu
7ifY16yKj3IXVBZPoeyOMB8GA1UdIwQYMBaAFJNzLz/DE1m7v4s3liS/kTUcythX
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNDI2OC9DNzhFQkNFQTIx
OTMxMUVDOTAwQzU2NTNDNEY5QUUwMi9rM012UDhNVFdidV9pemVXSkwtUk5Seksy
RmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2szTXZQOE1UV2J1X2l6ZVdKTC1STlJ6SzJGYy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
RjQyNjgvQzc4RUJDRUEyMTkzMTFFQzkwMEM1NjUzQzRGOUFFMDIvQkVERjcyQTA3
NkI5MTFFRjk1REJGMjdDQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwfgYIKwYBBQUHAQcBAf8E
bzBtMDIEAgABMCwDBAItcXQDBAJnNQwDBAFvdwADBAJvdwwwDAMEAMsJswMEAMsJ
tAMEAcsJtjA3BAIAAjAxMBIDBwAkAmgAAAMDBwEkAmgAAAQDBwAkAmgAB2AwEgMH
ACQCaAAHYwMHACQCaAAHZDANBgkqhkiG9w0BAQsFAAOCAQEAPQC3q5chIGcc8aIl
DGA4muC9RKa4pKqShL5f2X3/OapPyULDjhh4EahKxUokE8VF56EJyDFmXYXfnPCg
lmN7yW/n8DLj9Gqi9w6sLXwI7RbbDMFDg6j9IH7KFwqcQhq9T7sm1gUxlU1fDQb0
mRTQaqBu0SQgFuUsxMw2arpakY0EddAa+hlDIsNwmwUI5aXBB/4MhuRl+MVdTRwF
VaPBnW5PyVzfX6y08/l7ghUKNqY+LnHlzEVhsvRDNYp5kfPOuhnT9cvJxHWKGRW8
zb5HkZSdt20rtbrudpmokqNWO28jZyHEV0TocZY8CS0ABTfGcvz7IIuuLOrhWAax
a2b9Xg==
-----END CERTIFICATE-----
Generated at Thu Nov 21 00:21:25 2024 by rpki-client on console-fra.rpki-client.org