Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F67BB/BDFBF1860E3E11E9836F4014C4F9AE02/552292460F1A11E9B3F2A713C4F9AE02.roa
File: 552292460F1A11E9B3F2A713C4F9AE02.roa (raw, json)
Hash identifier: nlVHEDuSU/mAswQSloG1200oxpfI5TuHaS9wuRrpi9Q=
Subject key identifier: 43:0D:90:58:91:29:BC:AA:77:17:91:AA:D4:46:C3:32:7B:7A:D6:B5
Certificate issuer: /CN=A91F67BB/serialNumber=CC592176D88C423F8859B518B6AD334FFF767409
Certificate serial: 102B
Authority key identifier: CC:59:21:76:D8:8C:42:3F:88:59:B5:18:B6:AD:33:4F:FF:76:74:09
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/zFkhdtiMQj-IWbUYtq0zT_92dAk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F67BB/BDFBF1860E3E11E9836F4014C4F9AE02/552292460F1A11E9B3F2A713C4F9AE02.roa
Signing time: Tue 28 Nov 2023 18:05:40 +0000
ROA not before: Tue 28 Nov 2023 18:05:40 +0000
ROA not after: Fri 31 Jan 2025 00:00:00 +0000
asID: 56300
IP address blocks: 66.96.192.0/24 maxlen: 24
66.96.193.0/24 maxlen: 24
66.96.194.0/24 maxlen: 24
66.96.195.0/24 maxlen: 24
66.96.196.0/24 maxlen: 24
66.96.197.0/24 maxlen: 24
66.96.198.0/24 maxlen: 24
66.96.199.0/24 maxlen: 24
66.96.200.0/24 maxlen: 24
66.96.201.0/24 maxlen: 24
66.96.202.0/24 maxlen: 24
66.96.203.0/24 maxlen: 24
66.96.204.0/24 maxlen: 24
66.96.205.0/24 maxlen: 24
66.96.206.0/24 maxlen: 24
66.96.207.0/24 maxlen: 24
66.96.208.0/24 maxlen: 24
66.96.209.0/24 maxlen: 24
66.96.210.0/24 maxlen: 24
66.96.211.0/24 maxlen: 24
66.96.212.0/24 maxlen: 24
66.96.213.0/24 maxlen: 24
66.96.214.0/24 maxlen: 24
66.96.215.0/24 maxlen: 24
66.96.216.0/24 maxlen: 24
66.96.217.0/24 maxlen: 24
66.96.218.0/24 maxlen: 24
158.140.128.0/24 maxlen: 24
158.140.129.0/24 maxlen: 24
158.140.130.0/24 maxlen: 24
158.140.131.0/24 maxlen: 24
158.140.132.0/24 maxlen: 24
158.140.133.0/24 maxlen: 24
158.140.134.0/24 maxlen: 24
158.140.135.0/24 maxlen: 24
158.140.136.0/24 maxlen: 24
158.140.137.0/24 maxlen: 24
158.140.138.0/24 maxlen: 24
158.140.139.0/24 maxlen: 24
158.140.140.0/24 maxlen: 24
158.140.141.0/24 maxlen: 24
158.140.142.0/24 maxlen: 24
158.140.143.0/24 maxlen: 24
158.140.144.0/24 maxlen: 24
158.140.145.0/24 maxlen: 24
158.140.146.0/24 maxlen: 24
158.140.147.0/24 maxlen: 24
158.140.148.0/24 maxlen: 24
158.140.149.0/24 maxlen: 24
158.140.150.0/24 maxlen: 24
158.140.156.0/24 maxlen: 24
158.140.157.0/24 maxlen: 24
158.140.159.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F67BB/BDFBF1860E3E11E9836F4014C4F9AE02/zFkhdtiMQj-IWbUYtq0zT_92dAk.crl
rsync://rpki.apnic.net/member_repository/A91F67BB/BDFBF1860E3E11E9836F4014C4F9AE02/zFkhdtiMQj-IWbUYtq0zT_92dAk.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/zFkhdtiMQj-IWbUYtq0zT_92dAk.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 02 Jun 2024 14:50:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4139 (0x102b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F67BB/serialNumber=CC592176D88C423F8859B518B6AD334FFF767409
Validity
Not Before: Nov 28 18:05:40 2023 GMT
Not After : Jan 31 00:00:00 2025 GMT
Subject: CN=65662bf4-5072
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:9b:5c:e4:08:ee:93:2c:9c:98:9b:ec:c9:35:
3a:40:9c:c4:3d:24:cb:c3:c5:bb:d0:c8:c1:77:0c:
28:e7:ce:14:5a:33:23:f4:4e:23:4f:09:34:89:78:
e3:63:21:94:27:99:03:e4:02:7a:a1:0b:a9:f7:b1:
ff:1f:57:aa:9b:51:e7:a7:df:c0:77:d4:5b:3f:2a:
6b:48:b5:8a:bf:ad:4f:ab:58:bd:75:88:7f:4a:eb:
b3:8a:78:8f:42:6c:d5:a0:58:3b:d9:ba:d9:29:ad:
f6:27:ab:c0:92:4b:85:48:c0:d2:78:64:54:44:16:
f4:ec:df:f4:f0:25:3b:7a:3a:d1:9d:f3:da:d6:38:
6a:67:3d:b5:34:51:10:86:bf:78:c0:a7:00:06:92:
80:2a:67:9e:57:c3:d3:3f:06:a0:6d:21:79:32:25:
34:6b:39:4e:58:3d:3b:f9:57:32:63:f2:62:3d:f8:
be:be:72:85:35:b3:f0:0a:f9:fd:d8:81:b9:23:d3:
9c:99:96:d9:81:26:b3:3c:3e:32:3f:74:0c:7d:7d:
f3:d2:ec:f9:5e:bf:e2:93:d0:19:cb:3f:ed:9d:cc:
6f:03:1e:65:85:fb:e5:c0:87:6d:c9:3e:13:98:7e:
ef:d3:55:32:43:c0:f4:9a:12:39:4b:0e:35:b9:fa:
a0:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:0D:90:58:91:29:BC:AA:77:17:91:AA:D4:46:C3:32:7B:7A:D6:B5
X509v3 Authority Key Identifier:
keyid:CC:59:21:76:D8:8C:42:3F:88:59:B5:18:B6:AD:33:4F:FF:76:74:09
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F67BB/BDFBF1860E3E11E9836F4014C4F9AE02/zFkhdtiMQj-IWbUYtq0zT_92dAk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/zFkhdtiMQj-IWbUYtq0zT_92dAk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F67BB/BDFBF1860E3E11E9836F4014C4F9AE02/552292460F1A11E9B3F2A713C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
66.96.192.0-66.96.218.255
158.140.128.0-158.140.150.255
158.140.156.0/23
158.140.159.0/24
Signature Algorithm: sha256WithRSAEncryption
58:4d:4a:80:f6:be:4f:4c:6b:ee:9c:fa:d4:2a:f3:ec:b5:20:
57:71:af:3d:fa:07:5e:c2:7e:04:24:cd:af:4e:c5:cc:14:24:
98:2f:51:6f:d0:71:54:e9:8d:b9:80:39:61:3c:1b:8d:c2:c7:
99:c9:36:cb:eb:b1:cc:2f:b4:38:f4:26:4a:af:5b:86:6d:48:
7a:28:78:b4:f7:27:06:2e:2f:82:65:74:73:28:dc:2f:8d:97:
eb:e9:29:a8:da:f6:40:aa:74:9c:f5:6b:cc:9d:32:89:71:57:
ad:b4:81:7a:40:9b:c8:4f:d5:85:9c:15:04:e0:51:67:0e:9f:
98:db:bf:25:f1:ee:49:61:9b:bd:cb:02:04:4f:a5:e8:ca:86:
69:8f:7a:67:a6:bc:2a:3c:ba:ac:58:bc:3f:bb:f9:f2:aa:f4:
2f:ad:89:9f:16:d8:89:88:66:b2:73:1f:bc:42:75:b4:2f:55:
5b:2d:92:4e:59:ad:d0:27:2f:5b:56:aa:19:05:ff:86:10:ef:
89:c0:8a:02:a4:0c:12:48:5f:ee:64:54:5e:34:03:52:ee:a8:
7c:27:7d:0c:2b:7c:9f:e2:5b:6b:63:87:44:a9:18:7f:b8:bd:
84:b1:2a:b6:8d:0e:52:5e:ab:41:43:56:7c:5a:5b:23:2f:52:
cf:76:0b:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 26 19:58:58 2024 by rpki-client on console-fra.rpki-client.org