Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91298DA/34F3612E268111EA903D7058C4F9AE02/7EA6AA5AD3CF11EF83B35E4BC4F9AE02.roa
File: 7EA6AA5AD3CF11EF83B35E4BC4F9AE02.roa (raw, json)
Hash identifier: ZCU4Sl2P84BRUchJ+pTPcKQydpQbDyhJRysJwGUvBfs=
Subject key identifier: A3:3C:7F:90:03:D1:A4:34:6D:31:0B:31:DF:B5:35:4D:17:F6:2E:06
Certificate issuer: /CN=A91298DA/serialNumber=FCAA086226DF02AF8394FAB22D1FB96E0B7D65DD
Certificate serial: 0B98
Authority key identifier: FC:AA:08:62:26:DF:02:AF:83:94:FA:B2:2D:1F:B9:6E:0B:7D:65:DD
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_KoIYibfAq-DlPqyLR-5bgt9Zd0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91298DA/34F3612E268111EA903D7058C4F9AE02/7EA6AA5AD3CF11EF83B35E4BC4F9AE02.roa
Signing time: Thu 16 Jan 2025 06:02:41 +0000
ROA not before: Thu 16 Jan 2025 06:02:41 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 58895
IP address blocks: 36.255.100.0/22 maxlen: 22
36.255.100.0/24 maxlen: 24
36.255.101.0/24 maxlen: 24
36.255.102.0/24 maxlen: 24
36.255.103.0/24 maxlen: 24
43.229.164.0/22 maxlen: 22
43.229.164.0/24 maxlen: 24
43.229.165.0/24 maxlen: 24
43.229.166.0/24 maxlen: 24
43.229.167.0/24 maxlen: 24
43.230.92.0/22 maxlen: 22
43.230.92.0/24 maxlen: 24
43.230.93.0/24 maxlen: 24
43.230.94.0/24 maxlen: 24
43.230.95.0/24 maxlen: 24
43.231.60.0/22 maxlen: 22
43.231.60.0/24 maxlen: 24
43.231.61.0/24 maxlen: 24
43.231.62.0/24 maxlen: 24
43.231.63.0/24 maxlen: 24
43.248.12.0/22 maxlen: 22
43.248.12.0/24 maxlen: 24
43.248.13.0/24 maxlen: 24
43.248.14.0/24 maxlen: 24
43.248.15.0/24 maxlen: 24
45.113.124.0/22 maxlen: 22
45.113.124.0/24 maxlen: 24
45.113.125.0/24 maxlen: 24
45.113.126.0/24 maxlen: 24
45.113.127.0/24 maxlen: 24
45.117.105.0/24 maxlen: 24
45.117.106.0/24 maxlen: 24
45.117.107.0/24 maxlen: 24
103.24.96.0/22 maxlen: 24
103.35.212.0/22 maxlen: 22
103.35.212.0/24 maxlen: 24
103.35.213.0/24 maxlen: 24
103.35.214.0/24 maxlen: 24
103.35.215.0/24 maxlen: 24
103.39.80.0/22 maxlen: 22
103.39.80.0/24 maxlen: 24
103.39.81.0/24 maxlen: 24
103.39.82.0/24 maxlen: 24
103.39.83.0/24 maxlen: 24
103.49.136.0/24 maxlen: 24
103.49.137.0/24 maxlen: 24
103.49.138.0/24 maxlen: 24
103.49.139.0/24 maxlen: 24
103.50.156.0/22 maxlen: 22
103.50.156.0/24 maxlen: 24
103.50.157.0/24 maxlen: 24
103.50.158.0/24 maxlen: 24
103.50.159.0/24 maxlen: 24
103.53.44.0/22 maxlen: 22
103.53.44.0/24 maxlen: 24
103.53.45.0/24 maxlen: 24
103.53.46.0/24 maxlen: 24
103.53.47.0/24 maxlen: 24
103.57.168.0/22 maxlen: 22
103.57.168.0/24 maxlen: 24
103.57.169.0/24 maxlen: 24
103.57.170.0/24 maxlen: 24
103.57.171.0/24 maxlen: 24
103.70.84.0/22 maxlen: 22
103.70.84.0/24 maxlen: 24
103.70.85.0/24 maxlen: 24
103.70.86.0/24 maxlen: 24
103.70.87.0/24 maxlen: 24
103.200.197.0/24 maxlen: 24
103.200.198.0/24 maxlen: 24
103.200.199.0/24 maxlen: 24
103.209.84.0/22 maxlen: 22
103.209.84.0/24 maxlen: 24
103.209.85.0/24 maxlen: 24
103.209.86.0/24 maxlen: 24
103.209.87.0/24 maxlen: 24
117.53.40.0/22 maxlen: 22
117.53.40.0/24 maxlen: 24
117.53.41.0/24 maxlen: 24
117.53.42.0/24 maxlen: 24
117.53.43.0/24 maxlen: 24
150.129.4.0/22 maxlen: 22
150.129.4.0/24 maxlen: 24
150.129.5.0/24 maxlen: 24
150.129.6.0/24 maxlen: 24
150.129.7.0/24 maxlen: 24
2400:1680::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91298DA/34F3612E268111EA903D7058C4F9AE02/_KoIYibfAq-DlPqyLR-5bgt9Zd0.crl
rsync://rpki.apnic.net/member_repository/A91298DA/34F3612E268111EA903D7058C4F9AE02/_KoIYibfAq-DlPqyLR-5bgt9Zd0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_KoIYibfAq-DlPqyLR-5bgt9Zd0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 15 Apr 2025 18:57:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2968 (0xb98)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91298DA
Validity
Not Before: Jan 16 06:02:41 2025 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6788a101-29d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:cf:0c:05:b9:f1:9d:fb:b1:5e:76:9f:ac:15:
68:e9:95:3f:1d:f5:94:7f:79:b9:2c:48:44:1d:7e:
b9:8b:8e:68:31:70:b1:6b:04:ad:15:50:d5:0b:72:
85:05:6a:03:4b:9d:0b:35:e3:bf:96:63:38:30:dd:
d4:fb:ac:e1:8d:4e:7f:e3:d0:33:62:4d:28:e3:00:
5b:74:5a:26:a2:33:09:5e:59:19:4a:61:96:31:64:
0f:96:ed:59:b8:9b:58:0b:0b:f4:7b:09:4e:df:ca:
ed:7b:31:26:52:96:ba:aa:9d:95:f6:70:7c:7c:47:
10:5a:eb:0b:d4:53:3c:91:c5:51:61:f2:8f:f6:27:
92:91:59:27:5d:96:ef:1b:ec:e6:9b:d6:6d:bf:87:
33:aa:81:67:ef:6d:c0:d3:31:54:67:c3:63:ef:92:
10:b4:b9:bb:82:63:6f:d2:04:bf:23:70:44:37:60:
c7:bb:68:b7:75:9c:c9:c4:67:ba:4b:8f:8f:ef:53:
a4:61:6c:fa:ca:90:04:05:ed:a5:94:4f:f0:fa:0f:
df:07:ee:09:1d:34:1c:6e:b8:47:2f:1b:ee:75:b7:
1f:25:d2:b1:02:d6:91:4c:5c:f6:8f:aa:9a:93:a1:
06:56:c4:f6:59:35:0c:2a:7c:78:14:e7:0e:5e:c4:
c3:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:3C:7F:90:03:D1:A4:34:6D:31:0B:31:DF:B5:35:4D:17:F6:2E:06
X509v3 Authority Key Identifier:
keyid:FC:AA:08:62:26:DF:02:AF:83:94:FA:B2:2D:1F:B9:6E:0B:7D:65:DD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91298DA/34F3612E268111EA903D7058C4F9AE02/_KoIYibfAq-DlPqyLR-5bgt9Zd0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_KoIYibfAq-DlPqyLR-5bgt9Zd0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91298DA/34F3612E268111EA903D7058C4F9AE02/7EA6AA5AD3CF11EF83B35E4BC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
36.255.100.0/22
43.229.164.0/22
43.230.92.0/22
43.231.60.0/22
43.248.12.0/22
45.113.124.0/22
45.117.105.0-45.117.107.255
103.24.96.0/22
103.35.212.0/22
103.39.80.0/22
103.49.136.0/22
103.50.156.0/22
103.53.44.0/22
103.57.168.0/22
103.70.84.0/22
103.200.197.0-103.200.199.255
103.209.84.0/22
117.53.40.0/22
150.129.4.0/22
IPv6:
2400:1680::/32
Signature Algorithm: sha256WithRSAEncryption
59:e7:f9:6b:41:68:12:0b:10:4b:7e:a4:20:03:17:8b:5e:de:
5e:3f:b5:31:83:ee:97:51:d7:37:25:9c:20:bd:37:9e:87:2f:
9d:e3:f2:eb:42:02:d3:3c:30:fd:c0:be:85:f9:ad:47:1b:c8:
25:bd:62:24:6c:28:69:8c:f1:aa:87:7a:da:e2:45:8b:59:7b:
30:34:c8:2f:f6:98:79:63:b0:c6:3f:2a:31:e9:67:42:40:70:
8d:7f:e3:2e:f1:61:61:29:e2:57:37:b5:2a:d5:f3:89:a7:5c:
bd:4f:a0:ac:8c:67:16:48:bb:28:d2:76:d2:26:5b:84:77:b0:
ea:60:81:72:9a:18:9d:c4:8c:0e:bf:a6:dd:bb:72:49:3a:19:
40:db:25:0e:6b:b5:25:b6:c6:06:1c:84:ce:a1:57:8d:77:25:
d8:40:eb:99:df:85:91:d2:52:10:ce:ea:90:24:b9:bb:ea:b8:
10:eb:f1:18:98:3e:a6:f5:7d:7d:a5:ea:43:42:38:c5:73:84:
96:c5:76:c5:7c:36:80:06:8e:66:1f:90:1a:b9:73:a1:7d:62:
f5:c4:a2:09:a3:93:3f:06:1d:ed:77:92:0c:29:2e:21:42:62:
c5:33:f0:f1:27:34:2f:8a:44:b2:ef:35:05:97:dd:fc:71:a4:
fd:3d:86:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 22:38:54 2025 by rpki-client