Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A914BC7A/4C528F78450311E2BDCA1F732979BB20/2F20ECAE554211EF82D40732C4F9AE02.roa
File: 2F20ECAE554211EF82D40732C4F9AE02.roa (raw, json)
Hash identifier: kXSKiPTBMMpV/v8BhM7mqRhZb0qkCrS5RGh8ixYaHOQ=
Subject key identifier: 17:84:BB:0E:37:72:7D:1C:D4:42:87:D2:78:5D:4C:DF:73:5C:E1:AD
Certificate issuer: /CN=A914BC7A/serialNumber=5312F399A6F7EB0DDCD51C039F83F7B7A47A5F09
Certificate serial: 3435
Authority key identifier: 53:12:F3:99:A6:F7:EB:0D:DC:D5:1C:03:9F:83:F7:B7:A4:7A:5F:09
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UxLzmab36w3c1RwDn4P3t6R6Xwk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914BC7A/4C528F78450311E2BDCA1F732979BB20/2F20ECAE554211EF82D40732C4F9AE02.roa
Signing time: Tue 20 Aug 2024 15:31:20 +0000
ROA not before: Tue 20 Aug 2024 15:31:19 +0000
ROA not after: Mon 01 Dec 2025 00:00:00 +0000
asID: 55824
IP address blocks: 14.139.0.0/16 maxlen: 16
14.139.0.0/19 maxlen: 19
14.139.0.0/23 maxlen: 23
14.139.3.0/24 maxlen: 24
14.139.4.0/24 maxlen: 24
14.139.5.0/24 maxlen: 24
14.139.6.0/23 maxlen: 23
14.139.8.0/24 maxlen: 24
14.139.9.0/24 maxlen: 24
14.139.10.0/24 maxlen: 24
14.139.11.0/24 maxlen: 24
14.139.12.0/24 maxlen: 24
14.139.13.0/24 maxlen: 24
14.139.14.0/24 maxlen: 24
14.139.16.0/20 maxlen: 20
14.139.32.0/19 maxlen: 19
14.139.32.0/24 maxlen: 24
14.139.33.0/24 maxlen: 24
14.139.34.0/24 maxlen: 24
14.139.35.0/24 maxlen: 24
14.139.36.0/24 maxlen: 24
14.139.37.0/24 maxlen: 24
14.139.38.0/24 maxlen: 24
14.139.39.0/24 maxlen: 24
14.139.40.0/21 maxlen: 24
14.139.48.0/20 maxlen: 24
14.139.64.0/18 maxlen: 24
14.139.128.0/19 maxlen: 19
14.139.128.0/20 maxlen: 24
14.139.144.0/21 maxlen: 24
14.139.152.0/22 maxlen: 22
14.139.156.0/23 maxlen: 23
14.139.158.0/24 maxlen: 24
14.139.159.0/24 maxlen: 24
14.139.160.0/19 maxlen: 19
14.139.160.0/24 maxlen: 24
14.139.161.0/24 maxlen: 24
14.139.162.0/24 maxlen: 24
14.139.163.0/24 maxlen: 24
14.139.164.0/22 maxlen: 22
14.139.168.0/21 maxlen: 21
14.139.176.0/21 maxlen: 21
14.139.184.0/24 maxlen: 24
14.139.185.0/24 maxlen: 24
14.139.186.0/24 maxlen: 24
14.139.187.0/24 maxlen: 24
14.139.188.0/22 maxlen: 22
14.139.192.0/19 maxlen: 19
14.139.192.0/20 maxlen: 20
14.139.192.0/24 maxlen: 24
14.139.193.0/24 maxlen: 24
14.139.194.0/24 maxlen: 24
14.139.195.0/24 maxlen: 24
14.139.196.0/23 maxlen: 23
14.139.198.0/24 maxlen: 24
14.139.199.0/24 maxlen: 24
14.139.200.0/21 maxlen: 24
14.139.208.0/20 maxlen: 20
14.139.208.0/21 maxlen: 21
14.139.208.0/23 maxlen: 23
14.139.210.0/24 maxlen: 24
14.139.211.0/24 maxlen: 24
14.139.212.0/23 maxlen: 23
14.139.212.0/24 maxlen: 24
14.139.213.0/24 maxlen: 24
14.139.214.0/23 maxlen: 23
14.139.216.0/21 maxlen: 21
14.139.216.0/24 maxlen: 24
14.139.217.0/24 maxlen: 24
14.139.218.0/23 maxlen: 23
14.139.220.0/24 maxlen: 24
14.139.221.0/24 maxlen: 24
14.139.222.0/24 maxlen: 24
14.139.223.0/24 maxlen: 24
14.139.224.0/19 maxlen: 19
14.139.224.0/24 maxlen: 24
14.139.225.0/24 maxlen: 24
14.139.226.0/24 maxlen: 24
14.139.227.0/24 maxlen: 24
14.139.228.0/24 maxlen: 24
14.139.229.0/24 maxlen: 24
14.139.230.0/24 maxlen: 24
14.139.231.0/24 maxlen: 24
14.139.232.0/24 maxlen: 24
14.139.233.0/24 maxlen: 24
14.139.234.0/24 maxlen: 24
14.139.235.0/24 maxlen: 24
14.139.236.0/24 maxlen: 24
14.139.237.0/24 maxlen: 24
14.139.238.0/24 maxlen: 24
14.139.239.0/24 maxlen: 24
14.139.240.0/24 maxlen: 24
14.139.241.0/24 maxlen: 24
14.139.242.0/24 maxlen: 24
14.139.243.0/24 maxlen: 24
14.139.244.0/24 maxlen: 24
14.139.245.0/24 maxlen: 24
14.139.246.0/23 maxlen: 24
14.139.248.0/24 maxlen: 24
14.139.249.0/24 maxlen: 24
14.139.250.0/24 maxlen: 24
14.139.251.0/24 maxlen: 24
14.139.252.0/23 maxlen: 23
14.139.253.0/24 maxlen: 24
14.139.254.0/24 maxlen: 24
14.139.255.0/24 maxlen: 24
180.149.48.0/20 maxlen: 20
180.149.48.0/24 maxlen: 24
180.149.49.0/24 maxlen: 24
180.149.51.0/24 maxlen: 24
180.149.52.0/24 maxlen: 24
180.149.54.0/24 maxlen: 24
180.149.55.0/24 maxlen: 24
180.149.56.0/24 maxlen: 24
180.149.59.0/24 maxlen: 24
180.149.60.0/24 maxlen: 24
180.149.61.0/24 maxlen: 24
180.149.62.0/24 maxlen: 24
180.149.63.0/24 maxlen: 24
2405:8a00::/32 maxlen: 32
2405:8a00:14::/48 maxlen: 48
2405:8a00:15::/48 maxlen: 48
2405:8a00:aa::/48 maxlen: 48
2405:8a00:bb::/48 maxlen: 48
2405:8a00:2002::/48 maxlen: 48
2405:8a00:200a::/48 maxlen: 48
2405:8a00:2021::/48 maxlen: 48
2405:8a00:2039::/48 maxlen: 48
2405:8a00:2063::/48 maxlen: 48
2405:8a00:2072::/48 maxlen: 48
2405:8a00:2077::/48 maxlen: 48
2405:8a00:2078::/48 maxlen: 48
2405:8a00:2090::/48 maxlen: 48
2405:8a00:20c3::/48 maxlen: 48
2405:8a00:20d9::/48 maxlen: 48
2405:8a00:20da::/48 maxlen: 48
2405:8a00:20db::/48 maxlen: 48
2405:8a00:20dc::/48 maxlen: 48
2405:8a00:20dd::/48 maxlen: 48
2405:8a00:20de::/48 maxlen: 48
2405:8a00:20df::/48 maxlen: 48
2405:8a00:20e0::/48 maxlen: 48
2405:8a00:20e1::/48 maxlen: 48
2405:8a00:20e2::/48 maxlen: 48
2405:8a00:20e3::/48 maxlen: 48
2405:8a00:20e5::/48 maxlen: 48
2405:8a00:20e6::/48 maxlen: 48
2405:8a00:20e7::/48 maxlen: 48
2405:8a00:20e8::/48 maxlen: 48
2405:8a00:20f3::/48 maxlen: 48
2405:8a00:210c::/48 maxlen: 48
2405:8a00:2110::/48 maxlen: 48
2405:8a00:217e::/48 maxlen: 48
2405:8a00:21a5::/48 maxlen: 48
2405:8a00:21b1::/48 maxlen: 48
2405:8a00:21b3::/48 maxlen: 48
2405:8a00:21b4::/48 maxlen: 48
2405:8a00:21b5::/48 maxlen: 48
2405:8a00:21bd::/48 maxlen: 48
2405:8a00:4001::/48 maxlen: 48
2405:8a00:400d::/48 maxlen: 48
2405:8a00:4014::/48 maxlen: 48
2405:8a00:401d::/48 maxlen: 48
2405:8a00:401e::/48 maxlen: 48
2405:8a00:401f::/48 maxlen: 48
2405:8a00:4020::/48 maxlen: 48
2405:8a00:4021::/48 maxlen: 48
2405:8a00:6013::/48 maxlen: 48
2405:8a00:6016::/48 maxlen: 48
2405:8a00:601c::/48 maxlen: 48
2405:8a00:602e::/48 maxlen: 48
2405:8a00:602f::/48 maxlen: 48
2405:8a00:6035::/48 maxlen: 48
2405:8a00:6036::/48 maxlen: 48
2405:8a00:6037::/48 maxlen: 48
2405:8a00:6038::/48 maxlen: 48
2405:8a00:6039::/48 maxlen: 48
2405:8a00:603a::/48 maxlen: 48
2405:8a00:8001::/48 maxlen: 48
2405:8a00:8016::/48 maxlen: 48
2405:8a00:801b::/48 maxlen: 48
2405:8a00:801c::/48 maxlen: 48
2405:8a00:801f::/48 maxlen: 48
2405:8a00:8020::/48 maxlen: 48
2405:8a00:8021::/48 maxlen: 48
2405:8a00:8022::/48 maxlen: 48
2405:8a00:8024::/48 maxlen: 48
2405:8a00:8027::/48 maxlen: 48
2405:8a00:802f::/48 maxlen: 48
2405:8a00:8031::/48 maxlen: 48
2405:8a00:8032::/48 maxlen: 48
2405:8a00:8033::/48 maxlen: 48
2405:8a00:8035::/48 maxlen: 48
2405:8a00:8036::/48 maxlen: 48
2405:8a00:a001::/48 maxlen: 48
2405:8a00:a00d::/48 maxlen: 48
2405:8a00:a01b::/48 maxlen: 48
2405:8a00:a01d::/48 maxlen: 48
2405:8a00:a027::/48 maxlen: 48
2405:8a00:a031::/48 maxlen: 48
2405:8a00:a048::/48 maxlen: 48
2405:8a00:a04b::/48 maxlen: 48
2405:8a00:a04c::/48 maxlen: 48
2405:8a00:a052::/48 maxlen: 48
2405:8a00:a054::/48 maxlen: 48
2405:8a00:a056::/48 maxlen: 48
2405:8a00:c012::/48 maxlen: 48
2405:8a00:c01a::/48 maxlen: 48
2405:8a00:c01b::/48 maxlen: 48
2405:8a00:c01c::/48 maxlen: 48
2405:8a00:c01f::/48 maxlen: 48
2405:8a00:c020::/48 maxlen: 48
2405:8a00:c021::/48 maxlen: 48
2405:8a00:c022::/48 maxlen: 48
2405:8a00:c023::/48 maxlen: 48
2405:8a00:c024::/48 maxlen: 48
2405:8a00:c025::/48 maxlen: 48
2405:8a00:c026::/48 maxlen: 48
2405:8a00:c027::/48 maxlen: 48
2409::/28 maxlen: 28
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A914BC7A/4C528F78450311E2BDCA1F732979BB20/UxLzmab36w3c1RwDn4P3t6R6Xwk.crl
rsync://rpki.apnic.net/member_repository/A914BC7A/4C528F78450311E2BDCA1F732979BB20/UxLzmab36w3c1RwDn4P3t6R6Xwk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UxLzmab36w3c1RwDn4P3t6R6Xwk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 11 Apr 2025 15:23:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13365 (0x3435)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914BC7A
Validity
Not Before: Aug 20 15:31:19 2024 GMT
Not After : Dec 1 00:00:00 2025 GMT
Subject: CN=66c4b6c7-03fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:53:1c:40:2f:b5:05:da:b4:a7:4d:7e:38:19:
6a:79:32:bc:6d:e7:ce:09:18:6c:8c:46:ac:6d:18:
ac:8e:92:46:ea:8b:3d:ff:af:a4:23:43:97:06:e2:
cd:fe:55:35:bf:e8:ff:5f:d8:c2:04:42:01:46:c0:
11:3c:97:aa:7b:b6:4d:55:fe:ef:d2:58:6f:73:10:
9e:75:93:5c:67:64:3a:b8:6e:e7:f2:49:00:ac:69:
86:ad:9a:2b:3a:cb:eb:e9:54:fb:c4:51:14:59:25:
0c:1c:76:8b:ab:2a:e0:a8:1e:e1:19:d8:55:29:b9:
26:d4:e6:ef:6a:0d:84:8e:f5:4c:11:84:90:49:07:
41:9c:eb:80:6e:ac:2a:43:d7:ab:4d:6f:92:1e:00:
59:47:77:52:7e:01:e5:64:19:bc:ae:fd:51:e7:59:
4d:a1:0a:eb:a5:7f:65:6f:8e:f8:4c:cb:d8:06:d3:
de:5e:6b:70:05:7b:94:c7:8b:cf:11:fa:ac:88:6a:
43:c4:3c:3d:25:c3:fc:b4:ca:8c:46:b7:e2:39:3c:
f6:0a:2b:b5:c0:35:8c:ff:ba:7a:fc:ac:4c:b1:67:
ee:38:e9:e0:65:14:f3:d2:82:78:8d:a4:fa:26:b8:
c1:8e:5f:1a:32:33:08:cc:03:c1:b0:de:e5:cc:37:
6a:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:84:BB:0E:37:72:7D:1C:D4:42:87:D2:78:5D:4C:DF:73:5C:E1:AD
X509v3 Authority Key Identifier:
keyid:53:12:F3:99:A6:F7:EB:0D:DC:D5:1C:03:9F:83:F7:B7:A4:7A:5F:09
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914BC7A/4C528F78450311E2BDCA1F732979BB20/UxLzmab36w3c1RwDn4P3t6R6Xwk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UxLzmab36w3c1RwDn4P3t6R6Xwk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914BC7A/4C528F78450311E2BDCA1F732979BB20/2F20ECAE554211EF82D40732C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
14.139.0.0/16
180.149.48.0/20
IPv6:
2405:8a00::/32
2409::/28
Signature Algorithm: sha256WithRSAEncryption
45:c2:9e:80:9b:5f:9e:0e:66:0f:bb:18:42:6c:34:62:ca:35:
98:c6:6b:13:c3:8e:ad:6c:9f:79:1b:17:37:5d:2c:c9:35:cd:
bc:7d:71:18:72:ce:d1:2b:77:dd:5d:8b:da:ae:6d:ad:76:9f:
c2:7e:09:ab:4f:57:b8:52:b4:2e:76:8d:66:dd:f2:50:46:de:
65:65:ba:4a:2b:d5:5e:0a:28:75:19:e1:03:59:e2:48:48:9a:
aa:06:12:41:7f:2a:28:59:39:7f:c8:6f:ea:21:c8:b7:ce:24:
bc:33:3f:d5:60:0d:d0:6f:6b:60:1b:f5:f0:94:d3:9d:34:7f:
46:b4:cb:eb:3d:a8:30:00:d2:93:1b:4a:87:19:13:db:97:de:
c7:c9:32:6f:4d:3f:d4:f9:9d:18:37:51:ef:25:6b:9b:cc:cd:
4d:26:78:09:9a:8d:32:de:d0:14:89:62:e1:06:de:3d:88:2b:
46:64:20:87:75:10:a3:f0:70:51:d2:c9:b0:6f:c5:82:33:24:
9b:0f:d0:8a:f5:e8:5a:59:e9:14:53:7d:fe:8b:43:7b:26:d0:
21:27:a6:eb:c8:c4:0f:f0:97:5b:5e:42:90:54:ea:db:b2:19:
da:e3:3b:3d:c4:c2:18:04:27:34:96:ec:45:43:fc:2a:eb:8b:
87:9c:19:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 07:19:37 2025 by rpki-client