Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A911CA78/BE8846D235D811EAA730EC46C4F9AE02/AB398E705A9511EEAF584065C4F9AE02.roa
File: AB398E705A9511EEAF584065C4F9AE02.roa (raw, json)
Hash identifier: Jf4rCPn1FFDXpgWViz8OrDxkqSvgUf/UTX/KMGks6lk=
Subject key identifier: 44:98:90:CC:31:6C:58:B8:07:F1:11:10:E4:A6:94:3D:C0:D0:26:AC
Certificate issuer: /CN=A911CA78/serialNumber=40562C143A29CB19C70FFC9B99B60BBECD1D73B6
Certificate serial: 0B59
Authority key identifier: 40:56:2C:14:3A:29:CB:19:C7:0F:FC:9B:99:B6:0B:BE:CD:1D:73:B6
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QFYsFDopyxnHD_ybmbYLvs0dc7Y.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911CA78/BE8846D235D811EAA730EC46C4F9AE02/AB398E705A9511EEAF584065C4F9AE02.roa
Signing time: Thu 25 Apr 2024 14:05:23 +0000
ROA not before: Thu 25 Apr 2024 14:05:23 +0000
ROA not after: Sun 02 Mar 2025 00:00:00 +0000
asID: 38322
IP address blocks: 42.152.0.0/14 maxlen: 14
42.153.4.0/24 maxlen: 24
42.153.5.0/24 maxlen: 24
42.153.6.0/24 maxlen: 24
42.153.7.0/24 maxlen: 24
42.153.8.0/24 maxlen: 24
42.153.9.0/24 maxlen: 24
42.153.10.0/24 maxlen: 24
42.153.11.0/24 maxlen: 24
42.153.16.0/24 maxlen: 24
42.153.19.0/24 maxlen: 24
42.153.20.0/24 maxlen: 24
42.153.21.0/24 maxlen: 24
42.153.22.0/24 maxlen: 24
42.153.23.0/24 maxlen: 24
42.153.24.0/24 maxlen: 24
42.153.25.0/24 maxlen: 24
42.153.26.0/24 maxlen: 24
42.153.28.0/24 maxlen: 24
42.153.29.0/24 maxlen: 24
42.153.32.0/24 maxlen: 24
42.153.33.0/24 maxlen: 24
42.153.34.0/24 maxlen: 24
42.153.35.0/24 maxlen: 24
42.153.36.0/24 maxlen: 24
42.153.37.0/24 maxlen: 24
42.153.38.0/24 maxlen: 24
42.153.39.0/24 maxlen: 24
42.153.40.0/24 maxlen: 24
42.153.41.0/24 maxlen: 24
42.153.42.0/24 maxlen: 24
42.153.43.0/24 maxlen: 24
42.153.44.0/24 maxlen: 24
42.153.45.0/24 maxlen: 24
42.153.46.0/24 maxlen: 24
42.153.47.0/24 maxlen: 24
42.153.48.0/24 maxlen: 24
42.153.49.0/24 maxlen: 24
42.153.50.0/24 maxlen: 24
42.153.51.0/24 maxlen: 24
42.153.52.0/24 maxlen: 24
42.153.53.0/24 maxlen: 24
42.153.54.0/24 maxlen: 24
42.153.55.0/24 maxlen: 24
42.153.56.0/24 maxlen: 24
42.153.57.0/24 maxlen: 24
42.153.58.0/24 maxlen: 24
42.153.59.0/24 maxlen: 24
42.153.60.0/24 maxlen: 24
42.153.61.0/24 maxlen: 24
42.153.62.0/24 maxlen: 24
42.153.63.0/24 maxlen: 24
42.153.89.0/24 maxlen: 24
42.153.95.0/24 maxlen: 24
42.153.96.0/24 maxlen: 24
42.153.128.0/24 maxlen: 24
42.153.129.0/24 maxlen: 24
42.153.130.0/24 maxlen: 24
42.153.131.0/24 maxlen: 24
42.153.132.0/24 maxlen: 24
42.153.133.0/24 maxlen: 24
42.153.134.0/24 maxlen: 24
42.153.135.0/24 maxlen: 24
42.153.136.0/24 maxlen: 24
42.153.137.0/24 maxlen: 24
42.153.138.0/24 maxlen: 24
42.153.139.0/24 maxlen: 24
42.153.140.0/24 maxlen: 24
42.153.141.0/24 maxlen: 24
42.153.142.0/24 maxlen: 24
42.153.143.0/24 maxlen: 24
42.153.144.0/24 maxlen: 24
42.153.145.0/24 maxlen: 24
42.153.146.0/24 maxlen: 24
42.153.147.0/24 maxlen: 24
42.153.148.0/24 maxlen: 24
42.153.149.0/24 maxlen: 24
42.153.150.0/24 maxlen: 24
42.153.151.0/24 maxlen: 24
42.153.152.0/24 maxlen: 24
42.153.153.0/24 maxlen: 24
42.153.154.0/24 maxlen: 24
42.153.155.0/24 maxlen: 24
42.153.156.0/24 maxlen: 24
42.153.157.0/24 maxlen: 24
42.153.158.0/24 maxlen: 24
42.153.159.0/24 maxlen: 24
42.153.200.0/22 maxlen: 22
42.153.200.0/24 maxlen: 24
42.153.201.0/24 maxlen: 24
42.153.202.0/24 maxlen: 24
42.153.203.0/24 maxlen: 24
42.153.204.0/22 maxlen: 22
42.153.204.0/24 maxlen: 24
42.153.205.0/24 maxlen: 24
42.153.206.0/24 maxlen: 24
42.153.207.0/24 maxlen: 24
120.140.0.0/17 maxlen: 17
122.255.96.0/19 maxlen: 19
2401:3c00::/46 maxlen: 46
2401:3c00:4::/46 maxlen: 46
2401:3c00:8::/46 maxlen: 46
2401:3c00:c::/46 maxlen: 46
2401:3c00:10::/46 maxlen: 46
2401:3c00:14::/46 maxlen: 46
2401:3c00:18::/46 maxlen: 46
2401:3c00:40::/46 maxlen: 46
2401:3c00:44::/46 maxlen: 46
2401:3c00:48::/46 maxlen: 46
2401:3c00:4c::/46 maxlen: 46
2401:3c00:50::/46 maxlen: 46
2401:3c00:54::/46 maxlen: 46
2401:3c00:58::/46 maxlen: 46
2401:3c00:a4::/48 maxlen: 48
2401:3c00:a5::/48 maxlen: 48
2401:3c00:a6::/48 maxlen: 48
2401:3c00:a7::/48 maxlen: 48
2401:3c00:a8::/48 maxlen: 48
2401:3c00:a9::/48 maxlen: 48
2401:3c00:c0::/46 maxlen: 46
2401:3c00:c0:5::/64 maxlen: 64
2401:3c00:c8::/46 maxlen: 46
2401:3c00:cc::/46 maxlen: 46
2401:3c00:d8::/48 maxlen: 48
2401:3c00:d9::/48 maxlen: 48
2401:3c00:da::/48 maxlen: 48
2401:3c00:db::/48 maxlen: 48
2401:3c00:dc::/48 maxlen: 48
2401:3c00:100::/43 maxlen: 43
2401:3c00:120::/43 maxlen: 43
2401:3c00:180::/43 maxlen: 43
2401:3c00:1a0::/43 maxlen: 43
2401:3c00:241::/48 maxlen: 48
2401:3c00:242::/48 maxlen: 48
2401:3c00:243::/48 maxlen: 48
2401:3c00:244::/48 maxlen: 48
2401:3c00:245::/48 maxlen: 48
2401:3c00:246::/48 maxlen: 48
2401:3c00:247::/48 maxlen: 48
2401:3c00:248::/48 maxlen: 48
2401:3c00:249::/48 maxlen: 48
2401:3c00:24a::/48 maxlen: 48
2401:3c00:24b::/48 maxlen: 48
2401:3c00:24c::/48 maxlen: 48
2401:3c00:24d::/48 maxlen: 48
2401:3c00:24e::/48 maxlen: 48
2401:3c00:24f::/48 maxlen: 48
2401:3c00:250::/48 maxlen: 48
2401:3c00:251::/48 maxlen: 48
2401:3c00:252::/48 maxlen: 48
2401:3c00:253::/48 maxlen: 48
2401:3c00:254::/48 maxlen: 48
2401:3c00:255::/48 maxlen: 48
2401:3c00:256::/48 maxlen: 48
2401:3c00:257::/48 maxlen: 48
2401:3c00:258::/48 maxlen: 48
2401:3c00:259::/48 maxlen: 48
2401:3c00:25a::/48 maxlen: 48
2401:3c00:25c::/48 maxlen: 48
2401:3c00:25d::/48 maxlen: 48
2401:3c00:25f::/48 maxlen: 48
2401:3c00:260::/48 maxlen: 48
2401:3c00:261::/48 maxlen: 48
2401:3c00:262::/48 maxlen: 48
2401:3c00:280::/48 maxlen: 48
2401:3c00:281::/48 maxlen: 48
2401:3c00:290::/48 maxlen: 48
2401:3c00:291::/48 maxlen: 48
2401:3c00:292::/48 maxlen: 48
2401:3c00:293::/48 maxlen: 48
2401:3c00:294::/48 maxlen: 48
2401:3c00:295::/48 maxlen: 48
2401:3c00:2a0::/48 maxlen: 48
2401:3c00:2a1::/48 maxlen: 48
2401:3c00:2a2::/48 maxlen: 48
2401:3c00:2a3::/48 maxlen: 48
2401:3c00:2a4::/48 maxlen: 48
2401:3c00:2a5::/48 maxlen: 48
2401:3c00:2b0::/48 maxlen: 48
2401:3c00:2b1::/48 maxlen: 48
2401:3c00:2b2::/48 maxlen: 48
2401:3c00:2b3::/48 maxlen: 48
2401:3c00:2b4::/48 maxlen: 48
2401:3c00:2b5::/48 maxlen: 48
2401:3c00:2c0::/42 maxlen: 42
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A911CA78/BE8846D235D811EAA730EC46C4F9AE02/QFYsFDopyxnHD_ybmbYLvs0dc7Y.crl
rsync://rpki.apnic.net/member_repository/A911CA78/BE8846D235D811EAA730EC46C4F9AE02/QFYsFDopyxnHD_ybmbYLvs0dc7Y.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QFYsFDopyxnHD_ybmbYLvs0dc7Y.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 07 Jun 2024 20:52:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2905 (0xb59)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911CA78/serialNumber=40562C143A29CB19C70FFC9B99B60BBECD1D73B6
Validity
Not Before: Apr 25 14:05:23 2024 GMT
Not After : Mar 2 00:00:00 2025 GMT
Subject: CN=662a6322-c266
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:64:47:b0:b8:de:66:f4:6c:e4:30:ed:8e:29:
88:70:b6:dd:3c:ae:1c:01:41:c4:6c:3b:9b:a0:db:
92:c9:ea:64:27:b2:5e:6b:fd:b9:d7:e7:a7:0f:b5:
9e:bd:32:bc:8e:42:a1:b7:b9:8e:a1:5d:02:d9:7a:
2a:aa:f2:f7:07:a1:fc:6d:c8:04:d7:ac:af:39:7a:
98:b7:ae:ed:5b:7b:39:51:d9:e6:0f:86:b2:a4:9a:
81:95:05:ff:8f:6a:0e:9a:7d:e4:5a:bf:38:63:10:
bf:a7:b6:84:2f:ca:d6:89:c8:19:fd:74:32:14:21:
dd:a5:17:8e:58:86:58:66:e1:8e:6c:fe:8f:63:e4:
81:c4:a7:59:ae:84:35:4a:3f:c5:72:a8:3e:19:a6:
27:0b:3a:30:6f:86:0e:b1:ae:b2:aa:29:4f:59:60:
df:79:dc:71:6c:de:da:eb:e3:3b:09:ae:02:ea:a2:
7d:28:17:96:aa:5f:00:45:f3:04:e0:b8:f0:9f:4d:
8d:4e:d3:2e:fd:05:73:4b:8a:af:c2:04:e5:6b:37:
62:c6:57:0f:cb:5c:ba:58:7a:0c:22:a8:a8:97:81:
a6:13:96:42:1d:aa:cf:05:6a:e3:5f:84:d9:c0:4f:
9f:ce:ea:ba:68:40:5a:09:c1:98:8a:11:58:58:31:
94:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:98:90:CC:31:6C:58:B8:07:F1:11:10:E4:A6:94:3D:C0:D0:26:AC
X509v3 Authority Key Identifier:
keyid:40:56:2C:14:3A:29:CB:19:C7:0F:FC:9B:99:B6:0B:BE:CD:1D:73:B6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911CA78/BE8846D235D811EAA730EC46C4F9AE02/QFYsFDopyxnHD_ybmbYLvs0dc7Y.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QFYsFDopyxnHD_ybmbYLvs0dc7Y.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911CA78/BE8846D235D811EAA730EC46C4F9AE02/AB398E705A9511EEAF584065C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
42.152.0.0/14
120.140.0.0/17
122.255.96.0/19
IPv6:
2401:3c00::-2401:3c00:1b:ffff:ffff:ffff:ffff:ffff
2401:3c00:40::-2401:3c00:5b:ffff:ffff:ffff:ffff:ffff
2401:3c00:a4::-2401:3c00:a9:ffff:ffff:ffff:ffff:ffff
2401:3c00:c0::/46
2401:3c00:c8::/45
2401:3c00:d8::-2401:3c00:dc:ffff:ffff:ffff:ffff:ffff
2401:3c00:100::/42
2401:3c00:180::/42
2401:3c00:241::-2401:3c00:25a:ffff:ffff:ffff:ffff:ffff
2401:3c00:25c::/47
2401:3c00:25f::-2401:3c00:262:ffff:ffff:ffff:ffff:ffff
2401:3c00:280::/47
2401:3c00:290::-2401:3c00:295:ffff:ffff:ffff:ffff:ffff
2401:3c00:2a0::-2401:3c00:2a5:ffff:ffff:ffff:ffff:ffff
2401:3c00:2b0::-2401:3c00:2b5:ffff:ffff:ffff:ffff:ffff
2401:3c00:2c0::/42
Signature Algorithm: sha256WithRSAEncryption
92:b1:ac:39:9e:83:da:ce:66:5e:61:d1:2a:21:d1:bc:ca:e0:
e0:c2:a3:1e:7c:01:8c:1d:f1:2c:f5:6f:da:af:eb:f6:51:ca:
44:c4:26:91:df:ce:95:20:f2:2d:f2:ec:05:e2:f9:7b:61:ec:
28:a5:77:fc:5e:d6:91:eb:ef:ba:7d:83:ed:c2:dd:d9:a7:ce:
71:c1:51:4e:9f:91:ca:53:ad:cb:f5:e1:4e:f5:77:d8:ca:9f:
a9:25:00:e5:ba:be:d2:a0:c8:61:2c:5b:f5:a4:4b:b5:89:93:
25:07:81:27:4a:30:a1:de:70:63:8a:bd:f8:43:aa:d0:67:4b:
45:a7:b7:97:02:b2:59:8e:9b:39:af:04:7a:14:50:e2:f3:48:
cc:7f:5a:d9:7c:50:59:9c:89:d8:53:a5:1d:d3:de:6b:87:0e:
94:6c:0b:a0:71:c8:a9:14:e5:2c:91:ea:2c:b4:99:28:48:57:
32:31:92:25:b5:7c:08:c0:3d:1b:f3:2b:f7:fc:29:76:e4:67:
03:19:84:cb:bd:de:01:25:2e:bf:d5:78:88:5d:cd:0c:fc:04:
d6:13:9c:58:ae:6f:59:42:5d:7c:ee:67:0f:2e:ca:e1:19:b8:
a4:e5:7b:36:61:bb:8e:cf:93:cb:c1:39:ff:05:02:f5:4a:26:
77:91:10:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 31 22:13:02 2024 by rpki-client on console-fra.rpki-client.org