Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9120B99/D3F9051C1D8311E2B4ED5CD908B02CD2/79BBB4DA289F11EFAEEAD06EC4F9AE02.roa
File: 79BBB4DA289F11EFAEEAD06EC4F9AE02.roa (raw, json)
Hash identifier: tuMP+uPEx+euwKWWVvvLvhCmSo+m9fFl1Pjo+oz32cs=
Subject key identifier: 87:86:20:27:FF:CC:D0:BC:D6:96:6A:8C:80:04:99:AF:DD:C3:32:13
Certificate issuer: /CN=A9120B99/serialNumber=86C7946946B2A57B056F02B279340D30C2CE49B4
Certificate serial: 3419
Authority key identifier: 86:C7:94:69:46:B2:A5:7B:05:6F:02:B2:79:34:0D:30:C2:CE:49:B4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hseUaUaypXsFbwKyeTQNMMLOSbQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9120B99/D3F9051C1D8311E2B4ED5CD908B02CD2/79BBB4DA289F11EFAEEAD06EC4F9AE02.roa
Signing time: Wed 12 Jun 2024 09:38:08 +0000
ROA not before: Wed 12 Jun 2024 09:38:08 +0000
ROA not after: Wed 30 Jul 2025 00:00:00 +0000
asID: 7540
IP address blocks: 117.18.96.0/24 maxlen: 24
117.18.98.0/24 maxlen: 24
117.18.101.0/24 maxlen: 24
117.18.105.0/24 maxlen: 24
117.18.106.0/24 maxlen: 24
117.18.107.0/24 maxlen: 24
117.18.108.0/24 maxlen: 24
117.18.110.0/24 maxlen: 24
117.18.112.0/24 maxlen: 24
117.18.113.0/24 maxlen: 24
117.18.114.0/24 maxlen: 24
117.18.115.0/24 maxlen: 24
117.18.116.0/24 maxlen: 24
117.18.119.0/24 maxlen: 24
117.18.120.0/24 maxlen: 24
117.18.121.0/24 maxlen: 24
202.181.137.0/24 maxlen: 24
202.181.138.0/24 maxlen: 24
202.181.140.0/24 maxlen: 24
202.181.141.0/24 maxlen: 24
202.181.142.0/24 maxlen: 24
202.181.150.0/24 maxlen: 24
202.181.152.0/24 maxlen: 24
202.181.154.0/24 maxlen: 24
202.181.160.0/24 maxlen: 24
202.181.161.0/24 maxlen: 24
202.181.162.0/24 maxlen: 24
202.181.163.0/24 maxlen: 24
202.181.164.0/24 maxlen: 24
202.181.165.0/24 maxlen: 24
202.181.166.0/24 maxlen: 24
202.181.167.0/24 maxlen: 24
202.181.168.0/24 maxlen: 24
202.181.169.0/24 maxlen: 24
202.181.170.0/24 maxlen: 24
202.181.171.0/24 maxlen: 24
202.181.172.0/24 maxlen: 24
202.181.173.0/24 maxlen: 24
202.181.174.0/24 maxlen: 24
202.181.175.0/24 maxlen: 24
202.181.176.0/24 maxlen: 24
202.181.178.0/24 maxlen: 24
202.181.179.0/24 maxlen: 24
202.181.180.0/24 maxlen: 24
202.181.181.0/24 maxlen: 24
202.181.182.0/24 maxlen: 24
202.181.183.0/24 maxlen: 24
202.181.184.0/24 maxlen: 24
202.181.185.0/24 maxlen: 24
202.181.186.0/24 maxlen: 24
202.181.187.0/24 maxlen: 24
202.181.189.0/24 maxlen: 24
202.181.190.0/24 maxlen: 24
202.181.191.0/24 maxlen: 24
202.181.192.0/24 maxlen: 24
202.181.193.0/24 maxlen: 24
202.181.194.0/24 maxlen: 24
202.181.195.0/24 maxlen: 24
202.181.196.0/24 maxlen: 24
202.181.197.0/24 maxlen: 24
202.181.198.0/24 maxlen: 24
202.181.199.0/24 maxlen: 24
202.181.200.0/24 maxlen: 24
202.181.201.0/24 maxlen: 24
202.181.202.0/24 maxlen: 24
202.181.203.0/24 maxlen: 24
202.181.205.0/24 maxlen: 24
202.181.206.0/24 maxlen: 24
202.181.207.0/24 maxlen: 24
202.181.208.0/24 maxlen: 24
202.181.209.0/24 maxlen: 24
202.181.210.0/24 maxlen: 24
202.181.211.0/24 maxlen: 24
202.181.212.0/24 maxlen: 24
202.181.213.0/24 maxlen: 24
202.181.214.0/24 maxlen: 24
202.181.215.0/24 maxlen: 24
202.181.216.0/24 maxlen: 24
202.181.217.0/24 maxlen: 24
202.181.219.0/24 maxlen: 24
202.181.220.0/24 maxlen: 24
202.181.221.0/24 maxlen: 24
202.181.222.0/24 maxlen: 24
202.181.223.0/24 maxlen: 24
202.181.224.0/24 maxlen: 24
202.181.225.0/24 maxlen: 24
202.181.226.0/24 maxlen: 24
202.181.227.0/24 maxlen: 24
202.181.228.0/24 maxlen: 24
202.181.229.0/24 maxlen: 24
202.181.230.0/24 maxlen: 24
202.181.231.0/24 maxlen: 24
202.181.233.0/24 maxlen: 24
202.181.234.0/24 maxlen: 24
202.181.235.0/24 maxlen: 24
202.181.236.0/24 maxlen: 24
202.181.237.0/24 maxlen: 24
202.181.238.0/24 maxlen: 24
202.181.239.0/24 maxlen: 24
202.181.240.0/24 maxlen: 24
202.181.241.0/24 maxlen: 24
202.181.242.0/24 maxlen: 24
202.181.243.0/24 maxlen: 24
202.181.244.0/24 maxlen: 24
202.181.245.0/24 maxlen: 24
202.181.246.0/24 maxlen: 24
202.181.247.0/24 maxlen: 24
202.181.248.0/23 maxlen: 24
2405:5d00::/64 maxlen: 64
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9120B99/D3F9051C1D8311E2B4ED5CD908B02CD2/hseUaUaypXsFbwKyeTQNMMLOSbQ.crl
rsync://rpki.apnic.net/member_repository/A9120B99/D3F9051C1D8311E2B4ED5CD908B02CD2/hseUaUaypXsFbwKyeTQNMMLOSbQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hseUaUaypXsFbwKyeTQNMMLOSbQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 03 Jul 2024 14:24:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13337 (0x3419)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9120B99/serialNumber=86C7946946B2A57B056F02B279340D30C2CE49B4
Validity
Not Before: Jun 12 09:38:08 2024 GMT
Not After : Jul 30 00:00:00 2025 GMT
Subject: CN=66696c80-c2d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:4e:aa:ab:f5:5b:0a:8b:98:2d:1d:42:6f:c4:
31:76:33:cb:5e:6c:a6:c8:f5:5c:86:8c:d2:8f:a7:
be:d1:64:0d:3c:81:de:83:57:e5:eb:9e:8a:bd:7f:
00:c0:20:35:09:35:5a:d4:69:b0:fb:7a:73:34:f4:
4d:93:58:67:8a:17:55:5e:a3:5c:76:fa:7e:7b:21:
27:b8:30:e6:be:97:a4:fd:0f:4d:24:e8:04:86:00:
85:4c:8c:fb:85:f5:05:45:27:25:07:e7:13:89:3d:
b4:ab:09:64:c9:0e:29:38:96:26:fc:f5:ef:6e:02:
3b:e3:7c:37:2d:e9:29:37:0f:68:d8:b8:a4:79:89:
21:f7:bc:33:88:2c:79:08:84:5d:9b:72:9e:78:27:
be:f5:c7:53:a3:9e:55:9d:a7:18:ea:bd:55:63:81:
9a:71:10:65:22:97:5e:61:4b:04:96:b7:94:d5:37:
9c:93:a9:a1:ff:e8:c5:58:f1:b0:9c:0a:a6:07:a1:
3d:f9:89:ab:6b:cc:7e:19:f8:99:58:dd:f8:65:78:
1c:50:8d:59:0f:8f:eb:36:db:b4:10:66:48:8c:bc:
8b:4e:a3:ac:ad:62:c3:b6:68:07:7a:c8:42:72:a6:
38:79:a2:24:ee:56:cd:1b:46:95:88:41:b6:5f:17:
e7:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:86:20:27:FF:CC:D0:BC:D6:96:6A:8C:80:04:99:AF:DD:C3:32:13
X509v3 Authority Key Identifier:
keyid:86:C7:94:69:46:B2:A5:7B:05:6F:02:B2:79:34:0D:30:C2:CE:49:B4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9120B99/D3F9051C1D8311E2B4ED5CD908B02CD2/hseUaUaypXsFbwKyeTQNMMLOSbQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hseUaUaypXsFbwKyeTQNMMLOSbQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9120B99/D3F9051C1D8311E2B4ED5CD908B02CD2/79BBB4DA289F11EFAEEAD06EC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
117.18.96.0/24
117.18.98.0/24
117.18.101.0/24
117.18.105.0-117.18.108.255
117.18.110.0/24
117.18.112.0-117.18.116.255
117.18.119.0-117.18.121.255
202.181.137.0-202.181.138.255
202.181.140.0-202.181.142.255
202.181.150.0/24
202.181.152.0/24
202.181.154.0/24
202.181.160.0-202.181.176.255
202.181.178.0-202.181.187.255
202.181.189.0-202.181.203.255
202.181.205.0-202.181.217.255
202.181.219.0-202.181.231.255
202.181.233.0-202.181.249.255
IPv6:
2405:5d00::/64
Signature Algorithm: sha256WithRSAEncryption
58:01:9e:51:fc:8d:9a:c8:c1:9e:bf:a4:4e:d6:c6:4c:35:90:
87:86:24:87:6b:ff:24:50:a6:08:51:a9:36:e4:89:ae:48:2a:
c4:c3:6f:9d:d3:fb:99:e7:ad:b6:57:52:5a:8e:82:de:98:da:
65:4a:5c:84:6c:01:6c:89:db:37:92:13:8a:ab:8d:50:7b:49:
8b:ac:be:1e:1f:8f:2d:aa:7d:f2:ca:6b:56:da:a5:11:9b:7a:
d5:33:bb:cc:75:3e:40:be:ea:2a:3a:60:fb:d1:25:ce:fe:4f:
d5:63:95:19:9a:d9:c8:39:bf:1c:49:dd:7a:6e:97:e0:b2:97:
27:c9:3f:a8:45:4c:45:2d:0f:a1:5c:bb:e8:90:39:e7:b4:53:
d1:54:3a:19:2f:96:47:ab:80:c7:3f:70:84:1c:a8:c8:a2:f5:
02:14:f8:2e:d4:65:1c:27:77:8c:80:f8:3b:88:ea:62:8c:51:
c8:b3:63:c4:27:92:a7:ce:a4:a0:aa:05:d5:6e:9e:e0:8a:eb:
37:45:e4:12:b6:f9:1d:1d:78:b6:f8:60:b4:0a:72:bb:1d:83:
6f:96:f4:2c:a8:42:f5:3b:88:aa:2d:c2:83:1a:3f:ba:1b:ec:
7b:64:b6:09:77:14:76:3b:35:10:49:f7:f5:23:ae:21:96:28:
dd:7b:0b:32
-----BEGIN CERTIFICATE-----
MIIGRzCCBS+gAwIBAgICNBkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MjBCOTkxMTAvBgNVBAUTKDg2Qzc5NDY5NDZCMkE1N0IwNTZGMDJCMjc5MzQwRDMw
QzJDRTQ5QjQwHhcNMjQwNjEyMDkzODA4WhcNMjUwNzMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02NjY5NmM4MC1jMmQwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAtk6qq/VbCouYLR1Cb8QxdjPLXmymyPVchozSj6e+0WQNPIHeg1fl656KvX8A
wCA1CTVa1Gmw+3pzNPRNk1hnihdVXqNcdvp+eyEnuDDmvpek/Q9NJOgEhgCFTIz7
hfUFRSclB+cTiT20qwlkyQ4pOJYm/PXvbgI743w3LekpNw9o2LikeYkh97wziCx5
CIRdm3KeeCe+9cdTo55VnacY6r1VY4GacRBlIpdeYUsElreU1Teck6mh/+jFWPGw
nAqmB6E9+Ymra8x+GfiZWN34ZXgcUI1ZD4/rNtu0EGZIjLyLTqOsrWLDtmgHeshC
cqY4eaIk7lbNG0aViEG2XxfnSwIDAQABo4IDazCCA2cwHQYDVR0OBBYEFIeGICf/
zNC81pZqjIAEma/dwzITMB8GA1UdIwQYMBaAFIbHlGlGsqV7BW8Csnk0DTDCzkm0
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMEI5OS9EM0Y5MDUxQzFE
ODMxMUUyQjRFRDVDRDkwOEIwMkNEMi9oc2VVYVVheXBYc0Zid0t5ZVRRTk1NTE9T
YlEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2hzZVVhVWF5cFhzRmJ3S3llVFFOTU1MT1NiUS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
MjBCOTkvRDNGOTA1MUMxRDgzMTFFMkI0RUQ1Q0Q5MDhCMDJDRDIvNzlCQkI0REEy
ODlGMTFFRkFFRUFEMDZFQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwgfQGCCsGAQUFBwEHAQH/
BIHkMIHhMIHLBAIAATCBxAMEAHUSYAMEAHUSYgMEAHUSZTAMAwQAdRJpAwQAdRJs
AwQAdRJuMAwDBAR1EnADBAB1EnQwDAMEAHUSdwMEAXUSeDAMAwQAyrWJAwQAyrWK
MAwDBALKtYwDBADKtY4DBADKtZYDBADKtZgDBADKtZowDAMEBcq1oAMEAMq1sDAM
AwQByrWyAwQCyrW4MAwDBADKtb0DBALKtcgwDAMEAMq1zQMEAcq12DAMAwQAyrXb
AwQDyrXgMAwDBADKtekDBAHKtfgwEQQCAAIwCwMJACQFXQAAAAAAMA0GCSqGSIb3
DQEBCwUAA4IBAQBYAZ5R/I2ayMGev6RO1sZMNZCHhiSHa/8kUKYIUak25ImuSCrE
w2+d0/uZ5622V1JajoLemNplSlyEbAFsids3khOKq41Qe0mLrL4eH48tqn3yymtW
2qURm3rVM7vMdT5AvuoqOmD70SXO/k/VY5UZmtnIOb8cSd16bpfgspcnyT+oRUxF
LQ+hXLvokDnntFPRVDoZL5ZHq4DHP3CEHKjIovUCFPgu1GUcJ3eMgPg7iOpijFHI
s2PEJ5KnzqSgqgXVbp7gius3ReQStvkdHXi2+GC0CnK7HYNvlvQsqEL1O4iqLcKD
Gj+6G+x7ZLYJdxR2OzUQSff1I64hlijdewsy
-----END CERTIFICATE-----
Generated at Wed Jun 26 15:42:13 2024 by rpki-client on console-ams.rpki-client.org