Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9117394/4F59186A1D6F11E29B5446B108B02CD2/5A559E42D30E11EB98AEFF45C4F9AE02.roa
File: 5A559E42D30E11EB98AEFF45C4F9AE02.roa (raw, json)
Hash identifier: OUOWBtrUajup6dbdw7AQIn9gn+RiChmMrPEYdtGG0RY=
Subject key identifier: B5:D3:D9:E1:72:D1:29:6A:54:C0:49:B5:1D:95:07:26:07:4C:00:E7
Certificate issuer: /CN=A9117394/serialNumber=AAFAAE3C5703B39337FD3D7A9666C58CB8C3B509
Certificate serial: 343C
Authority key identifier: AA:FA:AE:3C:57:03:B3:93:37:FD:3D:7A:96:66:C5:8C:B8:C3:B5:09
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qvquPFcDs5M3_T16lmbFjLjDtQk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9117394/4F59186A1D6F11E29B5446B108B02CD2/5A559E42D30E11EB98AEFF45C4F9AE02.roa
Signing time: Mon 18 Mar 2024 02:14:16 +0000
ROA not before: Mon 18 Mar 2024 02:14:16 +0000
ROA not after: Fri 31 Jan 2025 00:00:00 +0000
asID: 45960
IP address blocks: 14.1.128.0/17 maxlen: 18
14.1.178.0/24 maxlen: 24
14.1.179.0/24 maxlen: 24
14.1.180.0/24 maxlen: 24
14.1.181.0/24 maxlen: 24
14.1.182.0/24 maxlen: 24
14.1.183.0/24 maxlen: 24
14.1.184.0/24 maxlen: 24
14.1.185.0/24 maxlen: 24
14.1.186.0/24 maxlen: 24
14.1.187.0/24 maxlen: 24
14.1.188.0/24 maxlen: 24
14.1.189.0/24 maxlen: 24
14.1.190.0/24 maxlen: 24
14.1.191.0/24 maxlen: 24
14.1.192.0/23 maxlen: 23
14.1.194.0/24 maxlen: 24
14.1.195.0/24 maxlen: 24
14.1.196.0/23 maxlen: 23
14.1.197.0/24 maxlen: 24
14.1.198.0/24 maxlen: 24
14.1.199.0/24 maxlen: 24
14.1.200.0/24 maxlen: 24
14.1.201.0/24 maxlen: 24
14.1.202.0/24 maxlen: 24
14.1.203.0/24 maxlen: 24
14.1.204.0/24 maxlen: 24
14.1.205.0/24 maxlen: 24
14.1.206.0/24 maxlen: 24
14.1.207.0/24 maxlen: 24
14.1.208.0/24 maxlen: 24
14.1.209.0/24 maxlen: 24
14.1.210.0/24 maxlen: 24
14.1.211.0/24 maxlen: 24
14.1.212.0/24 maxlen: 24
14.1.213.0/24 maxlen: 24
14.1.214.0/24 maxlen: 24
14.1.215.0/24 maxlen: 24
14.1.216.0/24 maxlen: 24
14.1.217.0/24 maxlen: 24
14.1.218.0/24 maxlen: 24
14.1.219.0/24 maxlen: 24
14.1.220.0/24 maxlen: 24
14.1.221.0/24 maxlen: 24
14.1.222.0/24 maxlen: 24
14.1.223.0/24 maxlen: 24
14.1.224.0/24 maxlen: 24
14.1.225.0/24 maxlen: 24
14.1.226.0/24 maxlen: 24
14.1.227.0/24 maxlen: 24
14.1.240.0/24 maxlen: 24
14.1.241.0/24 maxlen: 24
14.1.242.0/24 maxlen: 24
14.1.243.0/24 maxlen: 24
14.1.244.0/24 maxlen: 24
14.1.245.0/24 maxlen: 24
14.1.246.0/24 maxlen: 24
14.1.247.0/24 maxlen: 24
14.1.248.0/24 maxlen: 24
14.1.249.0/24 maxlen: 24
14.1.250.0/24 maxlen: 24
14.1.251.0/24 maxlen: 24
14.1.252.0/24 maxlen: 24
14.1.253.0/24 maxlen: 24
14.1.254.0/24 maxlen: 24
14.1.255.0/24 maxlen: 24
103.1.68.0/22 maxlen: 22
103.1.68.0/24 maxlen: 24
103.1.69.0/24 maxlen: 24
103.1.70.0/24 maxlen: 24
103.1.71.0/24 maxlen: 24
103.229.56.0/24 maxlen: 24
103.229.57.0/24 maxlen: 24
103.229.58.0/24 maxlen: 24
103.229.59.0/24 maxlen: 24
124.195.132.0/24 maxlen: 24
124.195.137.0/24 maxlen: 24
163.47.192.0/22 maxlen: 24
183.78.0.0/17 maxlen: 17
183.78.0.0/18 maxlen: 18
183.78.0.0/24 maxlen: 24
183.78.1.0/24 maxlen: 24
183.78.2.0/24 maxlen: 24
183.78.3.0/24 maxlen: 24
183.78.4.0/24 maxlen: 24
183.78.9.0/24 maxlen: 24
183.78.10.0/23 maxlen: 23
183.78.10.0/24 maxlen: 24
183.78.12.0/24 maxlen: 24
183.78.14.0/24 maxlen: 24
183.78.44.0/24 maxlen: 24
183.78.45.0/24 maxlen: 24
183.78.46.0/24 maxlen: 24
183.78.47.0/24 maxlen: 24
183.78.51.0/24 maxlen: 24
183.78.52.0/24 maxlen: 24
183.78.53.0/24 maxlen: 24
183.78.54.0/24 maxlen: 24
183.78.55.0/24 maxlen: 24
183.78.56.0/24 maxlen: 24
183.78.57.0/24 maxlen: 24
183.78.58.0/24 maxlen: 24
183.78.59.0/24 maxlen: 24
183.78.60.0/24 maxlen: 24
183.78.61.0/24 maxlen: 24
183.78.62.0/24 maxlen: 24
183.78.63.0/24 maxlen: 24
183.78.64.0/19 maxlen: 19
183.78.80.0/24 maxlen: 24
183.78.81.0/24 maxlen: 24
183.78.82.0/24 maxlen: 24
183.78.83.0/24 maxlen: 24
183.78.84.0/24 maxlen: 24
183.78.85.0/24 maxlen: 24
183.78.86.0/24 maxlen: 24
183.78.87.0/24 maxlen: 24
183.78.88.0/24 maxlen: 24
183.78.89.0/24 maxlen: 24
183.78.90.0/24 maxlen: 24
183.78.91.0/24 maxlen: 24
183.78.92.0/24 maxlen: 24
183.78.93.0/24 maxlen: 24
183.78.94.0/24 maxlen: 24
183.78.95.0/24 maxlen: 24
183.78.96.0/19 maxlen: 19
183.78.112.0/24 maxlen: 24
183.78.113.0/24 maxlen: 24
183.78.114.0/24 maxlen: 24
183.78.115.0/24 maxlen: 24
183.78.116.0/24 maxlen: 24
183.78.117.0/24 maxlen: 24
183.78.118.0/24 maxlen: 24
183.78.119.0/24 maxlen: 24
183.78.120.0/24 maxlen: 24
183.78.121.0/24 maxlen: 24
183.78.122.0/24 maxlen: 24
183.78.123.0/24 maxlen: 24
183.78.124.0/24 maxlen: 24
183.78.125.0/24 maxlen: 24
183.78.126.0/24 maxlen: 24
183.78.127.0/24 maxlen: 24
202.56.80.0/20 maxlen: 22
202.56.80.0/21 maxlen: 24
202.56.88.0/22 maxlen: 24
202.56.92.0/23 maxlen: 24
202.56.94.0/24 maxlen: 24
202.56.95.0/24 maxlen: 24
203.158.26.0/24 maxlen: 24
203.158.27.0/24 maxlen: 24
203.158.31.0/24 maxlen: 24
2402:b400::/32 maxlen: 32
2402:b400:1000::/44 maxlen: 44
2402:b400:1010::/44 maxlen: 44
2402:b400:1020::/44 maxlen: 44
2402:b400:1030::/44 maxlen: 44
2402:b400:4080::/44 maxlen: 44
2402:b400:4090::/44 maxlen: 44
2402:b400:40c0::/44 maxlen: 44
2402:b400:40d0::/44 maxlen: 44
2402:b400:4100::/44 maxlen: 44
2402:b400:4110::/44 maxlen: 44
2402:b400:4120::/44 maxlen: 44
2402:b400:4140::/44 maxlen: 44
2402:b400:4150::/44 maxlen: 44
2402:b400:4160::/44 maxlen: 44
2402:b400:4180::/44 maxlen: 44
2402:b400:4180::/45 maxlen: 45
2402:b400:4190::/44 maxlen: 44
2402:b400:41a0::/44 maxlen: 44
2402:b400:41a2::/48 maxlen: 48
2402:b400:41c0::/44 maxlen: 44
2402:b400:41c0::/45 maxlen: 45
2402:b400:41d0::/44 maxlen: 44
2402:b400:41e0::/44 maxlen: 44
2402:b400:41e2::/48 maxlen: 48
2402:b400:41e3::/48 maxlen: 48
2402:b400:4400::/45 maxlen: 45
2402:b400:4420::/45 maxlen: 45
2402:b400:4440::/46 maxlen: 46
2402:b400:4444::/46 maxlen: 46
2402:b400:4448::/46 maxlen: 46
2402:b400:444c::/46 maxlen: 46
2402:b400:4460::/46 maxlen: 46
2402:b400:4464::/46 maxlen: 46
2402:b400:4468::/46 maxlen: 46
2402:b400:446c::/46 maxlen: 46
2402:b400:4500::/48 maxlen: 48
2402:b400:4501::/48 maxlen: 48
2402:b400:4502::/48 maxlen: 48
2402:b400:4503::/48 maxlen: 48
2402:b400:4600::/45 maxlen: 45
2402:b400:4620::/45 maxlen: 45
2402:b400:4640::/46 maxlen: 46
2402:b400:4644::/46 maxlen: 46
2402:b400:4648::/46 maxlen: 46
2402:b400:464c::/46 maxlen: 46
2402:b400:4660::/46 maxlen: 46
2402:b400:4664::/46 maxlen: 46
2402:b400:4668::/46 maxlen: 46
2402:b400:466c::/46 maxlen: 46
2402:b400:4700::/48 maxlen: 48
2402:b400:4701::/48 maxlen: 48
2402:b400:4702::/48 maxlen: 48
2402:b400:4703::/48 maxlen: 48
2406:6000::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9117394/4F59186A1D6F11E29B5446B108B02CD2/qvquPFcDs5M3_T16lmbFjLjDtQk.crl
rsync://rpki.apnic.net/member_repository/A9117394/4F59186A1D6F11E29B5446B108B02CD2/qvquPFcDs5M3_T16lmbFjLjDtQk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qvquPFcDs5M3_T16lmbFjLjDtQk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 07 Jun 2024 14:19:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13372 (0x343c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9117394/serialNumber=AAFAAE3C5703B39337FD3D7A9666C58CB8C3B509
Validity
Not Before: Mar 18 02:14:16 2024 GMT
Not After : Jan 31 00:00:00 2025 GMT
Subject: CN=65f7a378-a9e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:63:37:23:f9:17:cc:09:41:ec:6f:c9:b2:89:
90:56:b6:29:81:85:23:d1:97:2b:0b:8f:9c:59:60:
2f:e7:8c:56:46:c1:c9:94:a3:6f:79:0a:1a:d3:48:
7e:8d:2f:54:16:f6:f8:03:e8:b9:e9:f2:ee:89:68:
0a:dd:4a:d1:3b:56:0e:8d:ce:bd:bb:e8:2f:a8:12:
7c:3b:93:8e:3a:a2:ef:b0:6f:6e:9a:97:18:94:d0:
69:92:c0:ba:d4:b3:12:7a:98:1f:b6:a7:92:74:21:
94:b5:3a:8d:c5:67:d1:20:0a:9f:21:d1:e3:16:76:
e0:c4:9d:49:a3:99:33:4e:77:45:0b:8a:bf:5d:95:
07:a5:a1:9d:e9:94:ed:dc:7c:ad:5e:3d:bb:d0:51:
35:ef:73:27:c3:7c:1d:67:ca:7a:e9:e2:7c:2d:58:
f8:bc:b2:c1:be:73:54:32:c6:a2:52:ef:9e:b8:b9:
fa:c4:cb:b0:4e:61:f2:c6:3f:86:d6:2f:be:39:72:
09:bd:99:48:db:75:37:33:75:2e:39:12:4a:b3:6d:
35:c5:d6:d3:3d:c0:8b:a9:c5:50:57:ce:93:db:72:
be:03:19:4c:7a:10:64:4a:81:c7:40:d3:8e:94:64:
09:f1:03:fd:20:f0:6d:1a:08:dc:b9:68:02:0a:c8:
7b:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:D3:D9:E1:72:D1:29:6A:54:C0:49:B5:1D:95:07:26:07:4C:00:E7
X509v3 Authority Key Identifier:
keyid:AA:FA:AE:3C:57:03:B3:93:37:FD:3D:7A:96:66:C5:8C:B8:C3:B5:09
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9117394/4F59186A1D6F11E29B5446B108B02CD2/qvquPFcDs5M3_T16lmbFjLjDtQk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qvquPFcDs5M3_T16lmbFjLjDtQk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9117394/4F59186A1D6F11E29B5446B108B02CD2/5A559E42D30E11EB98AEFF45C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
14.1.128.0/17
103.1.68.0/22
103.229.56.0/22
124.195.132.0/24
124.195.137.0/24
163.47.192.0/22
183.78.0.0/17
202.56.80.0/20
203.158.26.0/23
203.158.31.0/24
IPv6:
2402:b400::/32
2406:6000::/32
Signature Algorithm: sha256WithRSAEncryption
24:15:89:22:5a:cc:c1:59:50:e3:06:a4:be:b2:4b:c4:50:5e:
6d:81:44:01:c2:d6:34:78:23:65:cd:09:13:18:a7:66:e0:5a:
5d:c3:13:70:2e:ec:ce:4f:4f:69:65:14:af:2a:ca:9a:ff:d9:
34:60:eb:a0:71:50:1c:d1:54:54:3c:fb:74:5b:e9:bb:e5:d9:
e8:9a:20:bd:74:ef:62:b0:a2:79:ea:c2:19:17:7d:1a:06:08:
01:de:43:9b:ed:c2:43:75:a2:34:64:2b:81:fb:05:3c:15:0b:
2e:34:b6:ed:a6:03:89:2b:c8:bd:57:76:ac:fc:6b:24:7d:59:
7f:cc:32:7e:91:52:e3:8c:26:e1:76:cb:7b:e7:cb:80:2e:65:
b9:71:87:0b:ec:c8:ff:d6:e3:0d:c2:89:6b:e4:37:85:79:53:
90:d1:fc:a4:0f:49:1c:82:95:d3:92:1b:0c:e8:c0:bf:0a:b6:
cc:30:1b:3c:8b:bb:8f:57:e0:10:03:c3:1a:e3:ff:05:f2:0f:
71:41:d4:e5:7b:72:e2:c6:72:52:86:80:e8:fb:77:65:26:4d:
97:f3:50:66:eb:ea:3b:bb:d7:75:43:d8:da:46:84:fd:26:2c:
34:81:9c:0a:36:8a:1e:6a:0f:b9:bc:24:c7:4e:50:1a:64:7c:
6c:a8:07:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 31 15:08:08 2024 by rpki-client on console-fra.rpki-client.org