Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9136DD6/D362A1CA3B3711E9A038AB2AC4F9AE02/5FADE68E288811EE97A1EC5CC4F9AE02.roa
File: 5FADE68E288811EE97A1EC5CC4F9AE02.roa (raw, json)
Hash identifier: dVJZeCweb+XTaOi/1adyN7uBH6rIcemfVJD3fZ76wkg=
Subject key identifier: 36:CC:C2:B6:7F:CC:A1:60:AF:A8:32:BF:26:68:C9:0D:87:31:0C:7D
Certificate issuer: /CN=A9136DD6/serialNumber=7C7CA081950DAEFC7C54B8C44698B48E8D7C69B8
Certificate serial: 103B
Authority key identifier: 7C:7C:A0:81:95:0D:AE:FC:7C:54:B8:C4:46:98:B4:8E:8D:7C:69:B8
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/fHyggZUNrvx8VLjERpi0jo18abg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9136DD6/D362A1CA3B3711E9A038AB2AC4F9AE02/5FADE68E288811EE97A1EC5CC4F9AE02.roa
Signing time: Mon 02 Dec 2024 17:35:44 +0000
ROA not before: Mon 02 Dec 2024 17:35:44 +0000
ROA not after: Sat 31 Jan 2026 00:00:00 +0000
asID: 17547
IP address blocks: 64.45.0.0/18 maxlen: 19
64.45.0.0/24 maxlen: 24
129.126.0.0/16 maxlen: 17
129.126.0.0/24 maxlen: 24
129.126.1.0/24 maxlen: 24
129.126.2.0/24 maxlen: 24
129.126.3.0/24 maxlen: 24
129.126.4.0/24 maxlen: 24
129.126.5.0/24 maxlen: 24
129.126.6.0/24 maxlen: 24
129.126.7.0/24 maxlen: 24
129.126.8.0/24 maxlen: 24
129.126.9.0/24 maxlen: 24
129.126.10.0/24 maxlen: 24
129.126.11.0/24 maxlen: 24
129.126.12.0/24 maxlen: 24
129.126.13.0/24 maxlen: 24
129.126.14.0/24 maxlen: 24
129.126.15.0/24 maxlen: 24
129.126.16.0/24 maxlen: 24
129.126.17.0/24 maxlen: 24
129.126.18.0/24 maxlen: 24
129.126.19.0/24 maxlen: 24
129.126.20.0/24 maxlen: 24
129.126.21.0/24 maxlen: 24
129.126.22.0/24 maxlen: 24
129.126.23.0/24 maxlen: 24
129.126.24.0/24 maxlen: 24
129.126.25.0/24 maxlen: 24
129.126.26.0/24 maxlen: 24
129.126.27.0/24 maxlen: 24
129.126.28.0/24 maxlen: 24
129.126.29.0/24 maxlen: 24
129.126.30.0/24 maxlen: 24
129.126.31.0/24 maxlen: 24
129.126.32.0/22 maxlen: 22
129.126.32.0/24 maxlen: 24
129.126.33.0/24 maxlen: 24
129.126.34.0/24 maxlen: 24
129.126.35.0/24 maxlen: 24
129.126.36.0/22 maxlen: 22
129.126.36.0/24 maxlen: 24
129.126.37.0/24 maxlen: 24
129.126.38.0/24 maxlen: 24
129.126.40.0/24 maxlen: 24
129.126.41.0/24 maxlen: 24
129.126.43.0/24 maxlen: 24
129.126.44.0/24 maxlen: 24
129.126.45.0/24 maxlen: 24
129.126.46.0/24 maxlen: 24
129.126.47.0/24 maxlen: 24
129.126.48.0/24 maxlen: 24
129.126.49.0/24 maxlen: 24
129.126.50.0/24 maxlen: 24
129.126.51.0/24 maxlen: 24
129.126.52.0/24 maxlen: 24
129.126.53.0/24 maxlen: 24
129.126.54.0/24 maxlen: 24
129.126.55.0/24 maxlen: 24
129.126.56.0/24 maxlen: 24
129.126.57.0/24 maxlen: 24
129.126.58.0/24 maxlen: 24
129.126.59.0/24 maxlen: 24
129.126.60.0/24 maxlen: 24
129.126.61.0/24 maxlen: 24
129.126.62.0/24 maxlen: 24
129.126.63.0/24 maxlen: 24
129.126.64.0/24 maxlen: 24
129.126.65.0/24 maxlen: 24
129.126.66.0/24 maxlen: 24
129.126.67.0/24 maxlen: 24
129.126.68.0/24 maxlen: 24
129.126.69.0/24 maxlen: 24
129.126.70.0/24 maxlen: 24
129.126.71.0/24 maxlen: 24
129.126.72.0/24 maxlen: 24
129.126.73.0/24 maxlen: 24
129.126.74.0/24 maxlen: 24
129.126.75.0/24 maxlen: 24
129.126.76.0/24 maxlen: 24
129.126.77.0/24 maxlen: 24
129.126.78.0/24 maxlen: 24
129.126.79.0/24 maxlen: 24
129.126.80.0/24 maxlen: 24
129.126.81.0/24 maxlen: 24
129.126.82.0/24 maxlen: 24
129.126.83.0/24 maxlen: 24
129.126.84.0/24 maxlen: 24
129.126.85.0/24 maxlen: 24
129.126.86.0/24 maxlen: 24
129.126.87.0/24 maxlen: 24
129.126.88.0/24 maxlen: 24
129.126.89.0/24 maxlen: 24
129.126.90.0/24 maxlen: 24
129.126.91.0/24 maxlen: 24
129.126.92.0/24 maxlen: 24
129.126.93.0/24 maxlen: 24
129.126.94.0/24 maxlen: 24
129.126.95.0/24 maxlen: 24
129.126.96.0/24 maxlen: 24
129.126.97.0/24 maxlen: 24
129.126.98.0/24 maxlen: 24
129.126.99.0/24 maxlen: 24
129.126.100.0/24 maxlen: 24
129.126.101.0/24 maxlen: 24
129.126.102.0/24 maxlen: 24
129.126.103.0/24 maxlen: 24
129.126.104.0/24 maxlen: 24
129.126.105.0/24 maxlen: 24
129.126.106.0/24 maxlen: 24
129.126.107.0/24 maxlen: 24
129.126.108.0/24 maxlen: 24
129.126.109.0/24 maxlen: 24
129.126.110.0/24 maxlen: 24
129.126.111.0/24 maxlen: 24
129.126.112.0/24 maxlen: 24
129.126.113.0/24 maxlen: 24
129.126.114.0/24 maxlen: 24
129.126.115.0/24 maxlen: 24
129.126.116.0/24 maxlen: 24
129.126.117.0/24 maxlen: 24
129.126.118.0/24 maxlen: 24
129.126.119.0/24 maxlen: 24
129.126.120.0/24 maxlen: 24
129.126.121.0/24 maxlen: 24
129.126.122.0/24 maxlen: 24
129.126.123.0/24 maxlen: 24
129.126.124.0/24 maxlen: 24
129.126.125.0/24 maxlen: 24
129.126.126.0/24 maxlen: 24
129.126.127.0/24 maxlen: 24
129.126.128.0/20 maxlen: 20
129.126.128.0/24 maxlen: 24
129.126.129.0/24 maxlen: 24
129.126.130.0/24 maxlen: 24
129.126.131.0/24 maxlen: 24
129.126.132.0/24 maxlen: 24
129.126.134.0/24 maxlen: 24
129.126.135.0/24 maxlen: 24
129.126.136.0/24 maxlen: 24
129.126.137.0/24 maxlen: 24
129.126.138.0/24 maxlen: 24
129.126.139.0/24 maxlen: 24
129.126.140.0/24 maxlen: 24
129.126.141.0/24 maxlen: 24
129.126.142.0/24 maxlen: 24
129.126.143.0/24 maxlen: 24
129.126.144.0/24 maxlen: 24
129.126.145.0/24 maxlen: 24
129.126.146.0/24 maxlen: 24
129.126.147.0/24 maxlen: 24
129.126.148.0/24 maxlen: 24
129.126.149.0/24 maxlen: 24
129.126.150.0/24 maxlen: 24
129.126.151.0/24 maxlen: 24
129.126.152.0/24 maxlen: 24
129.126.153.0/24 maxlen: 24
129.126.154.0/24 maxlen: 24
129.126.155.0/24 maxlen: 24
129.126.156.0/24 maxlen: 24
129.126.157.0/24 maxlen: 24
129.126.158.0/24 maxlen: 24
129.126.159.0/24 maxlen: 24
129.126.160.0/24 maxlen: 24
129.126.161.0/24 maxlen: 24
129.126.162.0/24 maxlen: 24
129.126.163.0/24 maxlen: 24
129.126.164.0/24 maxlen: 24
129.126.165.0/24 maxlen: 24
129.126.166.0/24 maxlen: 24
129.126.167.0/24 maxlen: 24
129.126.168.0/24 maxlen: 24
129.126.169.0/24 maxlen: 24
129.126.170.0/24 maxlen: 24
129.126.171.0/24 maxlen: 24
129.126.172.0/24 maxlen: 24
129.126.173.0/24 maxlen: 24
129.126.174.0/24 maxlen: 24
129.126.175.0/24 maxlen: 24
129.126.176.0/24 maxlen: 24
129.126.177.0/24 maxlen: 24
129.126.178.0/24 maxlen: 24
129.126.179.0/24 maxlen: 24
129.126.180.0/24 maxlen: 24
129.126.181.0/24 maxlen: 24
129.126.182.0/24 maxlen: 24
129.126.183.0/24 maxlen: 24
129.126.184.0/24 maxlen: 24
129.126.185.0/24 maxlen: 24
129.126.186.0/24 maxlen: 24
129.126.187.0/24 maxlen: 24
129.126.188.0/24 maxlen: 24
129.126.189.0/24 maxlen: 24
129.126.190.0/24 maxlen: 24
129.126.191.0/24 maxlen: 24
129.126.192.0/24 maxlen: 24
129.126.193.0/24 maxlen: 24
129.126.194.0/24 maxlen: 24
129.126.195.0/24 maxlen: 24
129.126.196.0/24 maxlen: 24
129.126.197.0/24 maxlen: 24
129.126.198.0/24 maxlen: 24
129.126.199.0/24 maxlen: 24
129.126.200.0/24 maxlen: 24
129.126.201.0/24 maxlen: 24
129.126.202.0/24 maxlen: 24
129.126.203.0/24 maxlen: 24
129.126.204.0/24 maxlen: 24
129.126.205.0/24 maxlen: 24
129.126.206.0/24 maxlen: 24
129.126.207.0/24 maxlen: 24
129.126.210.0/24 maxlen: 24
129.126.211.0/24 maxlen: 24
129.126.212.0/24 maxlen: 24
129.126.213.0/24 maxlen: 24
129.126.214.0/24 maxlen: 24
129.126.215.0/24 maxlen: 24
129.126.216.0/24 maxlen: 24
129.126.217.0/24 maxlen: 24
129.126.218.0/24 maxlen: 24
129.126.219.0/24 maxlen: 24
129.126.220.0/24 maxlen: 24
129.126.221.0/24 maxlen: 24
129.126.222.0/24 maxlen: 24
129.126.223.0/24 maxlen: 24
129.126.224.0/24 maxlen: 24
129.126.225.0/24 maxlen: 24
129.126.226.0/24 maxlen: 24
129.126.227.0/24 maxlen: 24
129.126.228.0/24 maxlen: 24
129.126.229.0/24 maxlen: 24
129.126.230.0/24 maxlen: 24
129.126.231.0/24 maxlen: 24
129.126.232.0/24 maxlen: 24
129.126.233.0/24 maxlen: 24
129.126.234.0/24 maxlen: 24
129.126.235.0/24 maxlen: 24
129.126.236.0/24 maxlen: 24
129.126.237.0/24 maxlen: 24
129.126.238.0/24 maxlen: 24
129.126.239.0/24 maxlen: 24
129.126.240.0/24 maxlen: 24
129.126.241.0/24 maxlen: 24
129.126.242.0/24 maxlen: 24
129.126.243.0/24 maxlen: 24
129.126.244.0/24 maxlen: 24
129.126.245.0/24 maxlen: 24
129.126.246.0/24 maxlen: 24
129.126.247.0/24 maxlen: 24
129.126.248.0/24 maxlen: 24
129.126.249.0/24 maxlen: 24
129.126.250.0/24 maxlen: 24
129.126.251.0/24 maxlen: 24
129.126.252.0/24 maxlen: 24
129.126.253.0/24 maxlen: 24
129.126.254.0/24 maxlen: 24
129.126.255.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9136DD6/D362A1CA3B3711E9A038AB2AC4F9AE02/fHyggZUNrvx8VLjERpi0jo18abg.crl
rsync://rpki.apnic.net/member_repository/A9136DD6/D362A1CA3B3711E9A038AB2AC4F9AE02/fHyggZUNrvx8VLjERpi0jo18abg.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/fHyggZUNrvx8VLjERpi0jo18abg.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 11 Apr 2025 17:31:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4155 (0x103b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9136DD6
Validity
Not Before: Dec 2 17:35:44 2024 GMT
Not After : Jan 31 00:00:00 2026 GMT
Subject: CN=674deff0-cea0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:37:12:53:92:f7:f1:7b:ce:de:c6:56:6f:1f:
17:77:b8:ad:b1:ea:7d:fe:92:fb:5e:7d:9c:95:b6:
f7:aa:da:ff:ec:a2:05:17:9d:94:55:18:40:6a:e4:
5b:1d:c3:2a:df:65:3d:60:e3:05:2a:47:f4:e7:eb:
7f:d9:97:df:de:3b:5a:fd:a6:29:31:c9:8d:9c:30:
16:28:b3:0a:b4:7e:9c:2b:6e:f8:35:db:ba:fb:a4:
0c:f7:8f:f8:b1:62:10:aa:c8:09:f9:ad:f6:3b:ad:
9f:62:25:a1:71:a4:d9:da:fb:9c:22:61:e4:cb:88:
b7:7b:dd:7c:88:0e:40:7f:cb:65:cd:9d:06:ce:8c:
b4:9c:d0:e0:91:df:16:67:8c:64:f9:15:e2:42:04:
95:d8:02:76:e5:98:89:cf:29:7f:60:93:5a:2d:1e:
30:d2:87:97:22:c2:80:5c:fc:a7:5a:30:56:9d:f3:
32:d6:c7:76:ce:83:b8:45:ae:58:f7:4b:d1:36:77:
11:bc:1e:f8:33:09:0b:28:61:72:d1:e8:d9:2a:cb:
e1:02:d7:cf:d8:aa:c2:00:92:8b:3b:55:74:a9:89:
ce:9d:ec:79:7d:c1:4f:61:5a:16:32:21:1c:18:bc:
82:22:de:93:c5:a0:e3:0c:4d:ea:4a:60:22:c9:7b:
8e:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:CC:C2:B6:7F:CC:A1:60:AF:A8:32:BF:26:68:C9:0D:87:31:0C:7D
X509v3 Authority Key Identifier:
keyid:7C:7C:A0:81:95:0D:AE:FC:7C:54:B8:C4:46:98:B4:8E:8D:7C:69:B8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9136DD6/D362A1CA3B3711E9A038AB2AC4F9AE02/fHyggZUNrvx8VLjERpi0jo18abg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/fHyggZUNrvx8VLjERpi0jo18abg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9136DD6/D362A1CA3B3711E9A038AB2AC4F9AE02/5FADE68E288811EE97A1EC5CC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
64.45.0.0/18
129.126.0.0/16
Signature Algorithm: sha256WithRSAEncryption
84:31:19:93:0d:1e:b0:04:6a:63:bb:9c:88:a5:50:e5:47:4b:
c9:d2:65:ac:4e:5a:38:1b:17:8f:09:48:1f:17:80:ef:b6:06:
ff:d7:8b:f0:fd:53:07:50:3e:cc:3d:c3:57:38:f7:03:63:cf:
6c:28:24:d1:0a:b8:a8:30:1b:3f:9a:22:44:16:fa:99:0c:c4:
fa:22:bb:23:6b:47:06:bb:46:d4:c6:79:b2:4f:fe:04:48:fc:
88:81:16:c8:72:81:98:ea:c2:83:e8:e5:f3:b3:47:31:1a:54:
a3:00:0f:8a:52:65:77:28:0b:74:50:52:1c:ae:56:47:1c:28:
9e:bc:ae:62:4e:e6:57:48:de:08:18:e3:2e:c4:96:8b:d5:2b:
3e:d9:4f:75:c5:09:2d:44:8f:32:b7:d7:f5:71:35:34:88:a0:
e3:d3:d6:ad:d8:62:74:ae:bc:1f:6e:61:e9:06:d4:f7:2e:32:
2f:42:75:5f:22:6d:46:ae:8e:31:1a:a8:c1:b1:36:36:f6:10:
f1:84:4c:6e:04:cd:0f:7c:4b:50:7b:03:be:a6:e6:ea:a2:12:
7c:b7:f0:7e:12:79:7f:92:3f:31:f6:e2:72:6b:3f:ac:fc:c1:
a9:05:f1:70:6b:e4:5e:3b:5e:b4:58:d4:cd:98:86:cf:46:55:
df:55:cb:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 16:17:09 2025 by rpki-client