Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A911BCF8/B7078F80005411EA9ABDF51FC4F9AE02/AFA9D654D9F711EEA1409D5DC4F9AE02.roa
File: AFA9D654D9F711EEA1409D5DC4F9AE02.roa (raw, json)
Hash identifier: jv9kj6qt4NhPT9yq4nsD+F0WmRlH/hpUG9ulUFAbwwk=
Subject key identifier: 7A:1E:3F:05:B7:A3:27:01:AE:1F:E7:BE:3C:D4:57:9A:C0:BD:E9:26
Certificate issuer: /CN=A911BCF8/serialNumber=889332A4E25C21E89BFA43FA002D2D1F0AD7E797
Certificate serial: 0B99
Authority key identifier: 88:93:32:A4:E2:5C:21:E8:9B:FA:43:FA:00:2D:2D:1F:0A:D7:E7:97
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iJMypOJcIeib-kP6AC0tHwrX55c.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911BCF8/B7078F80005411EA9ABDF51FC4F9AE02/AFA9D654D9F711EEA1409D5DC4F9AE02.roa
Signing time: Sun 31 Mar 2024 19:57:53 +0000
ROA not before: Sun 31 Mar 2024 19:57:53 +0000
ROA not after: Wed 28 May 2025 00:00:00 +0000
asID: 134113
IP address blocks: 27.123.252.0/22 maxlen: 24
103.52.134.0/23 maxlen: 24
103.71.46.0/23 maxlen: 24
2403:140::/32 maxlen: 32
2403:140::/48 maxlen: 48
2403:140:1::/48 maxlen: 48
2403:140:2::/48 maxlen: 48
2403:140:3::/48 maxlen: 48
2403:140:4::/48 maxlen: 48
2403:140:5::/48 maxlen: 48
2403:140:6::/48 maxlen: 48
2403:140:7::/48 maxlen: 48
2403:140:8::/48 maxlen: 48
2403:140:9::/48 maxlen: 48
2403:140:a::/48 maxlen: 48
2403:140:b::/48 maxlen: 48
2403:140:c::/48 maxlen: 48
2403:140:d::/48 maxlen: 48
2403:140:e::/48 maxlen: 48
2403:140:f::/48 maxlen: 48
2403:140:103::/48 maxlen: 48
2403:140:121::/48 maxlen: 48
2403:140:1111::/48 maxlen: 48
2403:140:8888::/48 maxlen: 48
2403:140:ff00::/40 maxlen: 40
2403:140:ff00::/48 maxlen: 48
2403:140:ff01::/48 maxlen: 48
2403:140:ff02::/48 maxlen: 48
2403:140:ff03::/48 maxlen: 48
2403:140:ff04::/48 maxlen: 48
2403:140:ff05::/48 maxlen: 48
2403:140:ff06::/48 maxlen: 48
2403:140:ff07::/48 maxlen: 48
2403:140:ff08::/48 maxlen: 48
2403:140:ff09::/48 maxlen: 48
2403:140:ff0a::/48 maxlen: 48
2403:140:ff0b::/48 maxlen: 48
2403:140:ff0c::/48 maxlen: 48
2403:140:ff0d::/48 maxlen: 48
2403:140:ff0e::/48 maxlen: 48
2403:140:ff0f::/48 maxlen: 48
2403:140:ff10::/48 maxlen: 48
2403:140:ff11::/48 maxlen: 48
2403:140:ff12::/48 maxlen: 48
2403:140:ff13::/48 maxlen: 48
2403:140:ff14::/48 maxlen: 48
2403:140:ff15::/48 maxlen: 48
2403:140:ff16::/48 maxlen: 48
2403:140:ff17::/48 maxlen: 48
2403:140:ff18::/48 maxlen: 48
2403:140:ff19::/48 maxlen: 48
2403:140:ff1a::/48 maxlen: 48
2403:140:ff1b::/48 maxlen: 48
2403:140:ff1c::/48 maxlen: 48
2403:140:ff1d::/48 maxlen: 48
2403:140:ff1e::/48 maxlen: 48
2403:140:ff1f::/48 maxlen: 48
2403:140:ff20::/48 maxlen: 48
2403:140:ff21::/48 maxlen: 48
2403:140:ff22::/48 maxlen: 48
2403:140:ff23::/48 maxlen: 48
2403:140:ff24::/48 maxlen: 48
2403:140:ff25::/48 maxlen: 48
2403:140:ff26::/48 maxlen: 48
2403:140:ff27::/48 maxlen: 48
2403:140:ff28::/48 maxlen: 48
2403:140:ff29::/48 maxlen: 48
2403:140:ff2a::/48 maxlen: 48
2403:140:ff2b::/48 maxlen: 48
2403:140:ff2c::/48 maxlen: 48
2403:140:ff2d::/48 maxlen: 48
2403:140:ff2e::/48 maxlen: 48
2403:140:ff2f::/48 maxlen: 48
2403:140:ff30::/48 maxlen: 48
2403:140:ff31::/48 maxlen: 48
2403:140:ff32::/48 maxlen: 48
2403:140:ff33::/48 maxlen: 48
2403:140:ff34::/48 maxlen: 48
2403:140:ff35::/48 maxlen: 48
2403:140:ff36::/48 maxlen: 48
2403:140:ff37::/48 maxlen: 48
2403:140:ff38::/48 maxlen: 48
2403:140:ff39::/48 maxlen: 48
2403:140:ff3a::/48 maxlen: 48
2403:140:ff3b::/48 maxlen: 48
2403:140:ff3c::/48 maxlen: 48
2403:140:ff3d::/48 maxlen: 48
2403:140:ff3e::/48 maxlen: 48
2403:140:ff3f::/48 maxlen: 48
2403:140:ff40::/48 maxlen: 48
2403:140:ff41::/48 maxlen: 48
2403:140:ff42::/48 maxlen: 48
2403:140:ff43::/48 maxlen: 48
2403:140:ff44::/48 maxlen: 48
2403:140:ff45::/48 maxlen: 48
2403:140:ff46::/48 maxlen: 48
2403:140:ff47::/48 maxlen: 48
2403:140:ff48::/48 maxlen: 48
2403:140:ff49::/48 maxlen: 48
2403:140:ff4a::/48 maxlen: 48
2403:140:ff4b::/48 maxlen: 48
2403:140:ff4c::/48 maxlen: 48
2403:140:ff4d::/48 maxlen: 48
2403:140:ff4e::/48 maxlen: 48
2403:140:ff4f::/48 maxlen: 48
2403:140:ff50::/48 maxlen: 48
2403:140:ff51::/48 maxlen: 48
2403:140:ff52::/48 maxlen: 48
2403:140:ff53::/48 maxlen: 48
2403:140:ff54::/48 maxlen: 48
2403:140:ff55::/48 maxlen: 48
2403:140:ff56::/48 maxlen: 48
2403:140:ff57::/48 maxlen: 48
2403:140:ff58::/48 maxlen: 48
2403:140:ff59::/48 maxlen: 48
2403:140:ff5a::/48 maxlen: 48
2403:140:ff5b::/48 maxlen: 48
2403:140:ff5c::/48 maxlen: 48
2403:140:ff5d::/48 maxlen: 48
2403:140:ff5e::/48 maxlen: 48
2403:140:ff5f::/48 maxlen: 48
2403:140:ff60::/48 maxlen: 48
2403:140:ff61::/48 maxlen: 48
2403:140:ff62::/48 maxlen: 48
2403:140:ff63::/48 maxlen: 48
2403:140:ff64::/48 maxlen: 48
2403:140:ff65::/48 maxlen: 48
2403:140:ff66::/48 maxlen: 48
2403:140:ff67::/48 maxlen: 48
2403:140:ff68::/48 maxlen: 48
2403:140:ff69::/48 maxlen: 48
2403:140:ff6a::/48 maxlen: 48
2403:140:ff6b::/48 maxlen: 48
2403:140:ff6c::/48 maxlen: 48
2403:140:ff6d::/48 maxlen: 48
2403:140:ff6e::/48 maxlen: 48
2403:140:ff6f::/48 maxlen: 48
2403:140:ff70::/48 maxlen: 48
2403:140:ff71::/48 maxlen: 48
2403:140:ff72::/48 maxlen: 48
2403:140:ff73::/48 maxlen: 48
2403:140:ff74::/48 maxlen: 48
2403:140:ff75::/48 maxlen: 48
2403:140:ff76::/48 maxlen: 48
2403:140:ff77::/48 maxlen: 48
2403:140:ff78::/48 maxlen: 48
2403:140:ff79::/48 maxlen: 48
2403:140:ff7a::/48 maxlen: 48
2403:140:ff7b::/48 maxlen: 48
2403:140:ff7c::/48 maxlen: 48
2403:140:ff7d::/48 maxlen: 48
2403:140:ff7e::/48 maxlen: 48
2403:140:ff7f::/48 maxlen: 48
2403:140:ff80::/48 maxlen: 48
2403:140:ff81::/48 maxlen: 48
2403:140:ff82::/48 maxlen: 48
2403:140:ff83::/48 maxlen: 48
2403:140:ff84::/48 maxlen: 48
2403:140:ff85::/48 maxlen: 48
2403:140:ff86::/48 maxlen: 48
2403:140:ff87::/48 maxlen: 48
2403:140:ff88::/48 maxlen: 48
2403:140:ff89::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A911BCF8/B7078F80005411EA9ABDF51FC4F9AE02/iJMypOJcIeib-kP6AC0tHwrX55c.crl
rsync://rpki.apnic.net/member_repository/A911BCF8/B7078F80005411EA9ABDF51FC4F9AE02/iJMypOJcIeib-kP6AC0tHwrX55c.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iJMypOJcIeib-kP6AC0tHwrX55c.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 07 Jun 2024 19:47:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2969 (0xb99)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911BCF8/serialNumber=889332A4E25C21E89BFA43FA002D2D1F0AD7E797
Validity
Not Before: Mar 31 19:57:53 2024 GMT
Not After : May 28 00:00:00 2025 GMT
Subject: CN=6609c041-4c0c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:a1:1d:91:b1:5e:72:86:f3:ee:5d:cf:f4:ce:
2b:f6:83:6a:f6:93:f6:ce:db:9b:47:a0:6e:c7:d4:
78:83:00:01:47:cb:77:56:77:86:4f:2b:99:85:b5:
97:8f:cc:4f:77:71:3f:c7:b4:0a:1c:b1:f7:66:ff:
67:32:c7:38:4c:0b:c3:c6:b5:0a:6e:8b:e2:c3:4d:
4d:08:b5:5e:c0:79:61:90:5b:78:cb:84:f7:2f:c8:
d1:9d:7f:2f:a1:f2:9e:9c:e7:80:f1:c9:11:1d:d5:
fd:39:b3:ab:6e:68:55:6d:84:e3:02:5b:b2:f0:16:
a6:56:a7:21:e0:11:a4:15:92:a5:f6:f8:1e:ec:ec:
5b:cc:44:2c:4d:02:63:87:f5:20:c6:8e:dc:e2:7c:
a1:17:68:6a:03:bf:16:b1:f5:85:34:29:b3:ad:d1:
94:e2:61:91:c9:17:10:80:85:df:18:40:1d:a8:6b:
77:68:ad:ef:e2:16:ff:19:42:fb:d0:aa:38:8b:85:
5c:4d:56:15:e8:81:71:10:2f:7b:17:4c:a2:12:10:
02:19:5b:f3:85:d1:fb:e0:76:71:99:af:5e:f9:c9:
fb:c9:53:e6:5b:39:b4:ad:f3:7c:65:4a:d7:89:b8:
97:eb:e0:96:a9:d3:f1:bc:8d:84:c5:4d:0f:01:83:
1f:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:1E:3F:05:B7:A3:27:01:AE:1F:E7:BE:3C:D4:57:9A:C0:BD:E9:26
X509v3 Authority Key Identifier:
keyid:88:93:32:A4:E2:5C:21:E8:9B:FA:43:FA:00:2D:2D:1F:0A:D7:E7:97
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911BCF8/B7078F80005411EA9ABDF51FC4F9AE02/iJMypOJcIeib-kP6AC0tHwrX55c.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iJMypOJcIeib-kP6AC0tHwrX55c.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911BCF8/B7078F80005411EA9ABDF51FC4F9AE02/AFA9D654D9F711EEA1409D5DC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
27.123.252.0/22
103.52.134.0/23
103.71.46.0/23
IPv6:
2403:140::/32
Signature Algorithm: sha256WithRSAEncryption
8d:94:ad:bd:f2:10:70:3c:ed:2e:38:24:ee:41:7e:9a:cd:6b:
65:27:8d:03:f1:f6:c4:31:20:36:b6:6c:22:c4:f2:6a:27:b9:
94:3f:86:c1:db:38:37:66:ea:ad:16:f4:dd:2f:d3:e2:89:0d:
a6:e2:59:58:1d:69:4e:62:f5:aa:0a:30:57:b2:db:34:d7:bd:
d4:fe:2c:36:25:07:f0:d8:97:f6:75:aa:a9:a1:37:f3:75:3f:
c2:6f:46:f9:86:d6:0a:fc:2b:a8:80:5c:42:51:7d:f6:17:9f:
93:fa:2d:89:2b:f0:0e:02:c3:10:04:57:8d:fc:f8:e9:09:46:
89:28:43:c2:bd:eb:18:6c:5e:69:7e:f1:d4:74:11:4f:6b:2f:
48:cb:8e:3e:8b:39:5c:ef:d8:0a:f3:c4:ae:52:6e:b6:79:5d:
c0:49:b7:4d:cb:27:93:c4:54:5b:b7:b5:d1:0c:f3:39:c5:f4:
f2:7a:e2:0d:32:a2:d3:8c:3c:0b:b2:f6:1f:6b:02:cb:95:14:
00:06:9d:c8:51:ce:d4:c4:43:b4:a4:f0:59:b9:98:12:c7:6a:
3a:af:6b:6a:1a:8c:f2:2d:ce:b1:07:d4:e9:26:11:8d:de:93:
42:e0:5e:7e:41:47:89:13:58:2b:a8:e0:7b:fc:80:a4:5e:01:
5b:fa:a2:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 31 20:33:57 2024 by rpki-client on console-ams.rpki-client.org