Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F48F2/46D091981DA911E29CFD3EA408B02CD2/650B909C903B11EF924F0B86C4F9AE02.roa
File: 650B909C903B11EF924F0B86C4F9AE02.roa (raw, json)
Hash identifier: l9dH5Yk/IsrZlDMhS/m7QsOx2yvq3McTRworcFa7eFQ=
Subject key identifier: F7:EF:82:B6:D2:F9:6C:28:35:15:8A:E5:AB:3B:3A:36:1E:5A:FC:6E
Certificate issuer: /CN=A91F48F2/serialNumber=EC484A51E463B98AF8E1B02AE22955A1322F1F75
Certificate serial: 345A
Authority key identifier: EC:48:4A:51:E4:63:B9:8A:F8:E1:B0:2A:E2:29:55:A1:32:2F:1F:75
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7EhKUeRjuYr44bAq4ilVoTIvH3U.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F48F2/46D091981DA911E29CFD3EA408B02CD2/650B909C903B11EF924F0B86C4F9AE02.roa
Signing time: Mon 18 Nov 2024 15:21:03 +0000
ROA not before: Mon 18 Nov 2024 15:21:03 +0000
ROA not after: Tue 30 Dec 2025 00:00:00 +0000
asID: 24068
IP address blocks: 45.116.236.0/22 maxlen: 22
45.116.236.0/24 maxlen: 24
45.116.237.0/24 maxlen: 24
45.116.238.0/24 maxlen: 24
45.116.239.0/24 maxlen: 24
103.251.200.0/22 maxlen: 22
103.251.200.0/24 maxlen: 24
103.251.202.0/24 maxlen: 24
103.251.203.0/24 maxlen: 24
202.171.48.0/20 maxlen: 20
202.171.48.0/22 maxlen: 22
202.171.48.0/24 maxlen: 24
202.171.49.0/24 maxlen: 24
202.171.50.0/24 maxlen: 24
202.171.51.0/24 maxlen: 24
202.171.52.0/22 maxlen: 22
202.171.52.0/24 maxlen: 24
202.171.53.0/24 maxlen: 24
202.171.54.0/24 maxlen: 24
202.171.55.0/24 maxlen: 24
202.171.56.0/22 maxlen: 22
202.171.56.0/24 maxlen: 24
202.171.57.0/24 maxlen: 24
202.171.58.0/24 maxlen: 24
202.171.60.0/22 maxlen: 22
202.171.60.0/24 maxlen: 24
202.171.61.0/24 maxlen: 24
202.171.62.0/24 maxlen: 24
202.171.63.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F48F2/46D091981DA911E29CFD3EA408B02CD2/7EhKUeRjuYr44bAq4ilVoTIvH3U.crl
rsync://rpki.apnic.net/member_repository/A91F48F2/46D091981DA911E29CFD3EA408B02CD2/7EhKUeRjuYr44bAq4ilVoTIvH3U.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7EhKUeRjuYr44bAq4ilVoTIvH3U.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 29 Nov 2024 15:17:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13402 (0x345a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F48F2/serialNumber=EC484A51E463B98AF8E1B02AE22955A1322F1F75
Validity
Not Before: Nov 18 15:21:03 2024 GMT
Not After : Dec 30 00:00:00 2025 GMT
Subject: CN=673b5b5f-0b2f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:71:75:aa:8e:0e:e2:da:9a:11:a3:6f:14:ae:
95:c5:35:e9:f2:54:92:7a:43:a7:e3:96:b2:96:08:
ea:53:fa:97:bd:88:15:f6:d0:f4:01:08:e2:83:38:
08:a1:6a:3d:d2:d3:a2:bb:92:2d:ef:f2:ce:2c:c8:
e1:34:89:4b:1c:63:59:7e:d7:96:97:6e:93:1f:8f:
c2:0e:09:1f:28:1d:5d:c2:e3:a8:63:24:80:5e:83:
83:7a:b6:5b:9a:e0:e4:a2:e3:71:fb:4b:60:cb:27:
24:47:58:c9:33:ef:7d:e8:67:9e:4a:ad:5d:db:71:
26:84:c5:bb:56:17:18:6b:76:fb:e8:68:db:bd:3c:
94:cc:c5:8e:34:34:50:10:a9:84:39:6a:85:00:a5:
1c:9d:d0:b4:07:46:5d:2a:ff:92:bc:52:c5:b0:6f:
86:6c:5b:e7:49:c8:e3:d5:99:43:e8:b1:dd:04:15:
82:ae:71:63:75:aa:48:74:4a:29:77:ee:e1:0e:30:
a2:6c:40:8d:1e:cc:89:1a:28:16:25:fd:16:19:f3:
2e:7b:c1:da:24:87:74:67:63:cc:70:ad:2d:be:2a:
9e:61:0b:78:84:a3:94:d3:27:a4:56:4d:49:68:55:
9f:1e:57:48:d6:b4:60:08:80:5c:b3:9d:4b:1a:1b:
63:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:EF:82:B6:D2:F9:6C:28:35:15:8A:E5:AB:3B:3A:36:1E:5A:FC:6E
X509v3 Authority Key Identifier:
keyid:EC:48:4A:51:E4:63:B9:8A:F8:E1:B0:2A:E2:29:55:A1:32:2F:1F:75
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F48F2/46D091981DA911E29CFD3EA408B02CD2/7EhKUeRjuYr44bAq4ilVoTIvH3U.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7EhKUeRjuYr44bAq4ilVoTIvH3U.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F48F2/46D091981DA911E29CFD3EA408B02CD2/650B909C903B11EF924F0B86C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.116.236.0/22
103.251.200.0/22
202.171.48.0/20
Signature Algorithm: sha256WithRSAEncryption
3f:da:6f:3a:f0:d1:09:e2:d2:16:cf:7b:0b:ce:2c:c7:fd:03:
59:6b:a7:03:64:ff:26:4d:c2:ed:c1:df:9a:85:25:38:b0:03:
0f:4b:27:31:6a:27:14:92:fd:04:b3:b5:7f:f3:19:fc:2f:73:
2c:be:e7:79:f1:d8:32:8b:a6:ce:28:eb:7b:0c:cf:93:ea:11:
0d:ba:39:4e:bc:41:3f:2f:65:72:d0:89:e2:32:f6:7f:55:f1:
40:eb:f2:fb:29:45:d5:7f:6c:8f:4d:77:37:0b:a2:78:62:0f:
81:11:99:85:10:c3:b3:ca:e7:7b:af:3f:ee:16:f8:51:4b:07:
0e:52:9c:a9:3b:5f:95:ac:0b:a7:36:ef:fb:ae:81:ab:ea:a0:
a7:89:e7:80:dd:32:70:43:98:4f:c5:9d:7e:09:db:ba:5a:96:
fb:13:ab:a2:bf:0f:0b:a5:7d:36:fe:0c:fb:10:7b:37:6a:36:
a6:e3:ef:df:95:50:f8:66:f8:d5:67:f4:c6:38:40:9a:5c:30:
0b:87:45:7b:40:85:e9:5c:58:61:bc:1d:5d:e0:ff:7c:b1:94:
98:4a:2d:12:05:29:e8:84:3a:29:b6:81:f8:fb:1b:96:0e:b4:
3e:bc:cb:98:8c:23:c5:ab:1d:ee:0c:6f:6a:f3:79:03:1a:00:
38:34:ab:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 16:50:06 2024 by rpki-client on console-ams.rpki-client.org