Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A914CE75/D22EF3D6FF4B11E281BE06625911EA32/D4002378F15211EAA1BAB944C4F9AE02.roa
File: D4002378F15211EAA1BAB944C4F9AE02.roa (raw, json)
Hash identifier: liXETAeyiiRJUr4HKvyxOrH1rZms2Fhza+VaF2FQeog=
Subject key identifier: B7:16:2E:8F:86:EE:00:76:5C:82:E3:01:29:69:21:D0:88:51:C8:56
Certificate issuer: /CN=A914CE75/serialNumber=49892537D8B2C0325B7BE081FD9286C79BEA6A85
Certificate serial: 30ED
Authority key identifier: 49:89:25:37:D8:B2:C0:32:5B:7B:E0:81:FD:92:86:C7:9B:EA:6A:85
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SYklN9iywDJbe-CB_ZKGx5vqaoU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914CE75/D22EF3D6FF4B11E281BE06625911EA32/D4002378F15211EAA1BAB944C4F9AE02.roa
Signing time: Tue 30 Apr 2024 15:52:27 +0000
ROA not before: Tue 30 Apr 2024 15:52:27 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 17908
IP address blocks: 59.163.172.0/23 maxlen: 23
59.165.64.0/20 maxlen: 20
59.165.80.0/20 maxlen: 20
59.165.104.0/21 maxlen: 21
61.11.0.0/24 maxlen: 24
61.11.20.0/24 maxlen: 24
61.11.24.0/22 maxlen: 22
61.11.28.0/24 maxlen: 24
61.11.30.0/23 maxlen: 23
61.17.0.0/21 maxlen: 21
61.17.12.0/22 maxlen: 22
61.17.16.0/21 maxlen: 21
61.17.17.0/24 maxlen: 24
61.17.18.0/24 maxlen: 24
61.17.21.0/24 maxlen: 24
61.17.22.0/24 maxlen: 24
61.17.34.0/24 maxlen: 24
61.17.36.0/22 maxlen: 22
61.17.44.0/22 maxlen: 22
61.17.48.0/21 maxlen: 21
61.17.57.0/24 maxlen: 24
61.17.72.0/22 maxlen: 22
61.17.83.0/24 maxlen: 24
61.17.108.0/24 maxlen: 24
61.17.112.0/20 maxlen: 20
61.17.112.0/21 maxlen: 21
61.17.124.0/22 maxlen: 22
61.17.128.0/19 maxlen: 19
61.17.180.0/22 maxlen: 22
61.17.197.0/24 maxlen: 24
61.17.208.0/21 maxlen: 21
61.17.216.0/21 maxlen: 21
61.17.216.0/22 maxlen: 22
61.17.218.0/24 maxlen: 24
61.17.219.0/24 maxlen: 24
61.17.221.0/24 maxlen: 24
61.17.222.0/24 maxlen: 24
61.17.224.0/22 maxlen: 22
61.17.226.0/24 maxlen: 24
61.17.227.0/24 maxlen: 24
61.17.228.0/23 maxlen: 23
61.17.236.0/23 maxlen: 23
61.17.238.0/24 maxlen: 24
61.17.240.0/20 maxlen: 20
115.109.0.0/17 maxlen: 17
115.109.6.0/23 maxlen: 23
115.109.128.0/21 maxlen: 21
115.109.136.0/23 maxlen: 23
115.109.138.0/24 maxlen: 24
115.109.139.0/24 maxlen: 24
115.109.140.0/24 maxlen: 24
115.109.141.0/24 maxlen: 24
115.109.144.0/22 maxlen: 22
115.109.148.0/23 maxlen: 23
115.109.150.0/24 maxlen: 24
115.109.151.0/24 maxlen: 24
115.109.152.0/22 maxlen: 22
115.109.156.0/22 maxlen: 22
115.109.166.0/23 maxlen: 23
115.109.176.0/20 maxlen: 20
115.109.192.0/21 maxlen: 21
115.109.200.0/21 maxlen: 21
115.109.208.0/20 maxlen: 20
115.109.212.0/23 maxlen: 23
115.109.224.0/21 maxlen: 21
115.109.232.0/21 maxlen: 21
115.109.248.0/21 maxlen: 21
202.54.48.0/23 maxlen: 23
202.54.131.0/24 maxlen: 24
203.199.227.0/24 maxlen: 24
203.199.228.0/24 maxlen: 24
219.64.5.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A914CE75/D22EF3D6FF4B11E281BE06625911EA32/SYklN9iywDJbe-CB_ZKGx5vqaoU.crl
rsync://rpki.apnic.net/member_repository/A914CE75/D22EF3D6FF4B11E281BE06625911EA32/SYklN9iywDJbe-CB_ZKGx5vqaoU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SYklN9iywDJbe-CB_ZKGx5vqaoU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 09 Jun 2024 15:48:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 12525 (0x30ed)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914CE75/serialNumber=49892537D8B2C0325B7BE081FD9286C79BEA6A85
Validity
Not Before: Apr 30 15:52:27 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=663113bb-3d97
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:67:30:db:9b:20:5d:99:c5:03:18:24:61:c3:
83:12:02:ee:ef:08:92:e9:2b:9e:93:9b:54:f2:16:
2a:00:4f:c0:4b:d4:9b:76:dc:c3:6b:fa:91:ea:eb:
63:95:df:1f:ce:b9:fb:1b:99:d2:c0:d2:20:53:d2:
1c:85:d4:57:28:8c:00:de:c3:dd:73:dd:07:3a:f7:
d1:f3:a5:51:74:3d:cd:fb:12:b6:2f:95:22:45:47:
af:b7:7a:bf:3e:3f:af:55:ef:2d:c6:0e:b0:0e:6e:
36:45:93:18:68:56:49:fe:ec:07:0e:e6:0b:76:b2:
77:15:fd:1b:02:fc:6d:b6:33:ec:78:93:70:74:83:
ec:de:6a:81:ad:fd:09:70:08:69:a1:62:0d:7d:84:
fe:e0:d7:48:c9:8e:87:e6:a1:6d:83:6f:ee:41:8e:
75:a1:01:59:30:ac:b5:a9:f5:61:7a:9b:c1:43:bd:
21:de:1a:7e:d6:02:10:7f:46:e9:8b:58:e9:8b:9c:
5d:dc:23:9c:b9:e9:29:b3:0a:4b:eb:90:08:67:31:
64:ec:05:be:7e:dd:2b:2e:02:aa:b8:53:47:3e:74:
cd:18:79:31:29:17:f5:f9:25:52:f5:6a:11:1a:10:
0c:4d:ec:f4:10:44:e2:84:89:b6:28:58:27:fe:b9:
53:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:16:2E:8F:86:EE:00:76:5C:82:E3:01:29:69:21:D0:88:51:C8:56
X509v3 Authority Key Identifier:
keyid:49:89:25:37:D8:B2:C0:32:5B:7B:E0:81:FD:92:86:C7:9B:EA:6A:85
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914CE75/D22EF3D6FF4B11E281BE06625911EA32/SYklN9iywDJbe-CB_ZKGx5vqaoU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SYklN9iywDJbe-CB_ZKGx5vqaoU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914CE75/D22EF3D6FF4B11E281BE06625911EA32/D4002378F15211EAA1BAB944C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
59.163.172.0/23
59.165.64.0/19
59.165.104.0/21
61.11.0.0/24
61.11.20.0/24
61.11.24.0-61.11.28.255
61.11.30.0/23
61.17.0.0/21
61.17.12.0-61.17.23.255
61.17.34.0/24
61.17.36.0/22
61.17.44.0-61.17.55.255
61.17.57.0/24
61.17.72.0/22
61.17.83.0/24
61.17.108.0/24
61.17.112.0-61.17.159.255
61.17.180.0/22
61.17.197.0/24
61.17.208.0-61.17.229.255
61.17.236.0-61.17.238.255
61.17.240.0/20
115.109.0.0-115.109.141.255
115.109.144.0/20
115.109.166.0/23
115.109.176.0-115.109.239.255
115.109.248.0/21
202.54.48.0/23
202.54.131.0/24
203.199.227.0-203.199.228.255
219.64.5.0/24
Signature Algorithm: sha256WithRSAEncryption
68:64:82:e7:6f:ad:c4:fd:cd:31:bc:30:87:e5:48:f0:c0:3a:
8b:91:1d:95:f4:fc:aa:c4:81:13:6a:e2:bb:79:0b:97:59:20:
d8:2a:9e:4d:b8:ff:5f:1a:e8:80:e0:81:89:4d:7e:ad:43:82:
a1:41:0b:c8:f2:60:23:de:b6:d2:4a:e0:ca:fd:5c:5a:98:f1:
6a:17:19:93:bc:6b:b2:9e:b6:fa:38:b8:6c:e9:11:89:26:a4:
06:f1:8a:57:56:b3:c2:74:79:0f:f7:ce:6f:cc:8d:01:de:3d:
3f:7e:44:35:2e:c4:f3:2c:dd:f8:32:56:b5:de:ad:d7:ee:33:
56:e3:85:96:66:b9:4a:83:e4:71:fe:2b:38:ad:8c:2c:ce:2c:
0d:0d:f7:91:89:07:a6:55:bc:d6:cc:cc:2e:86:d4:d3:ca:9c:
ac:22:30:ac:fb:81:1f:03:56:71:52:5f:a6:d6:d2:a9:dd:fb:
65:15:d0:1f:46:dc:95:91:b4:bd:8c:99:21:e6:98:b4:f3:e3:
10:db:b2:06:b9:84:76:d9:1c:43:b2:8e:8d:6e:54:78:b2:09:
3d:ef:70:35:39:8b:a4:dd:55:f4:df:5b:e1:c8:69:7c:16:26:
28:c3:e6:2f:64:8b:50:03:5b:63:70:36:55:87:ad:2c:b2:83:
60:a3:9a:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 2 16:37:15 2024 by rpki-client on console-fra.rpki-client.org