Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A914EAE4/6753B8AE257511E7AC0D172AC4F9AE02/5B2E8848135111EF9CB17D1DC4F9AE02.roa
File: 5B2E8848135111EF9CB17D1DC4F9AE02.roa (raw, json)
Hash identifier: hbo9Da0aLrvYzqGiIoKjybGJOjUwOLKAdgwLxT2hsz4=
Subject key identifier: 42:C7:C6:7A:5C:9E:87:59:22:30:13:1A:75:95:97:8A:A5:D1:0C:F6
Certificate issuer: /CN=A914EAE4/serialNumber=AD56B67187A98BA314084405797BD9656E8AC8BA
Certificate serial: 1DA1
Authority key identifier: AD:56:B6:71:87:A9:8B:A3:14:08:44:05:79:7B:D9:65:6E:8A:C8:BA
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rVa2cYepi6MUCEQFeXvZZW6KyLo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914EAE4/6753B8AE257511E7AC0D172AC4F9AE02/5B2E8848135111EF9CB17D1DC4F9AE02.roa
Signing time: Thu 16 May 2024 06:56:01 +0000
ROA not before: Thu 16 May 2024 06:56:01 +0000
ROA not after: Sun 01 Dec 2024 00:00:00 +0000
asID: 4134
IP address blocks: 1.1.4.0/22 maxlen: 22
1.1.16.0/20 maxlen: 20
1.2.9.0/24 maxlen: 24
1.2.10.0/24 maxlen: 24
1.2.11.0/24 maxlen: 24
1.2.12.0/22 maxlen: 22
1.3.0.0/16 maxlen: 16
1.10.64.0/18 maxlen: 18
1.180.0.0/14 maxlen: 14
27.54.72.0/21 maxlen: 21
39.0.64.0/18 maxlen: 18
39.0.128.0/17 maxlen: 17
42.0.16.0/21 maxlen: 21
42.99.64.0/19 maxlen: 19
42.123.0.0/19 maxlen: 19
42.187.0.0/18 maxlen: 18
42.194.64.0/18 maxlen: 18
101.99.96.0/19 maxlen: 19
101.102.64.0/19 maxlen: 19
101.102.104.0/21 maxlen: 21
101.128.16.0/20 maxlen: 20
101.128.32.0/19 maxlen: 19
101.234.96.0/19 maxlen: 19
101.251.32.0/19 maxlen: 19
106.0.64.0/18 maxlen: 18
110.94.0.0/15 maxlen: 15
114.79.64.0/18 maxlen: 18
115.166.64.0/19 maxlen: 19
120.88.8.0/21 maxlen: 21
121.56.0.0/15 maxlen: 15
121.59.0.0/23 maxlen: 23
124.76.0.0/14 maxlen: 14
124.112.0.0/15 maxlen: 15
124.117.0.0/16 maxlen: 16
124.224.0.0/16 maxlen: 16
124.225.0.0/16 maxlen: 16
124.234.0.0/15 maxlen: 15
125.76.128.0/17 maxlen: 17
125.80.0.0/13 maxlen: 13
125.104.0.0/13 maxlen: 13
150.121.0.0/16 maxlen: 16
202.67.0.0/22 maxlen: 24
202.73.128.0/22 maxlen: 24
202.86.252.0/22 maxlen: 22
202.96.112.0/20 maxlen: 20
202.98.128.0/19 maxlen: 19
202.150.224.0/19 maxlen: 19
202.166.224.0/19 maxlen: 19
202.191.72.0/21 maxlen: 24
203.22.78.0/24 maxlen: 24
203.24.186.0/23 maxlen: 23
203.33.67.0/24 maxlen: 24
203.33.68.0/24 maxlen: 24
203.33.73.0/24 maxlen: 24
203.33.79.0/24 maxlen: 24
203.33.100.0/24 maxlen: 24
203.33.122.0/24 maxlen: 24
203.33.129.0/24 maxlen: 24
203.33.131.0/24 maxlen: 24
203.86.96.0/19 maxlen: 19
203.144.96.0/19 maxlen: 19
218.0.0.0/16 maxlen: 16
218.2.0.0/16 maxlen: 16
218.6.0.0/17 maxlen: 17
218.14.0.0/15 maxlen: 15
218.20.0.0/16 maxlen: 16
218.21.0.0/19 maxlen: 19
218.21.32.0/20 maxlen: 20
218.21.48.0/20 maxlen: 20
218.21.64.0/18 maxlen: 18
218.62.128.0/17 maxlen: 19
218.64.0.0/16 maxlen: 16
218.92.0.0/16 maxlen: 16
218.100.128.0/17 maxlen: 17
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A914EAE4/6753B8AE257511E7AC0D172AC4F9AE02/rVa2cYepi6MUCEQFeXvZZW6KyLo.crl
rsync://rpki.apnic.net/member_repository/A914EAE4/6753B8AE257511E7AC0D172AC4F9AE02/rVa2cYepi6MUCEQFeXvZZW6KyLo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rVa2cYepi6MUCEQFeXvZZW6KyLo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 09 Jun 2024 16:56:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7585 (0x1da1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914EAE4/serialNumber=AD56B67187A98BA314084405797BD9656E8AC8BA
Validity
Not Before: May 16 06:56:01 2024 GMT
Not After : Dec 1 00:00:00 2024 GMT
Subject: CN=6645ae01-e1cc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:a5:dd:18:a3:83:82:c0:1a:c9:cb:38:ab:48:
6f:14:a8:09:35:d6:c1:f8:ff:43:4b:de:72:f5:df:
d2:52:ec:79:d5:0d:35:69:d4:bf:03:dc:1f:6b:94:
c5:3e:fc:79:a4:20:03:cf:65:91:c1:f4:b4:dd:0e:
90:bf:c4:6f:a5:e7:e5:d4:25:ab:c2:24:c2:76:e9:
9c:57:14:b8:c4:78:c4:9d:55:24:96:53:fa:95:7b:
15:fa:73:a5:b6:c5:b5:46:56:81:5f:7d:1b:9e:fa:
38:40:d4:36:4f:2d:bf:2c:a6:ee:30:a9:61:1d:97:
f3:a6:4c:28:c0:2d:a5:06:a8:0e:0a:d8:41:31:59:
79:e1:36:ff:bf:a3:be:85:23:fb:a1:af:07:4d:a6:
39:8e:64:bf:db:51:a5:d9:43:ea:2d:38:20:7b:d2:
e1:25:b8:2a:73:15:19:2b:63:02:1d:56:64:39:7b:
ba:89:a0:19:43:88:3f:6f:98:ae:a4:83:04:8f:c9:
bb:92:50:56:21:da:41:b0:13:2b:bc:ab:8b:34:e2:
08:27:54:e1:ed:73:6f:71:5b:aa:a5:15:19:f6:ed:
68:cc:40:ff:d9:8d:77:ce:87:21:3e:93:b5:7e:e6:
64:f4:00:a9:f9:c9:bd:14:73:70:44:36:d2:f1:c3:
fa:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:C7:C6:7A:5C:9E:87:59:22:30:13:1A:75:95:97:8A:A5:D1:0C:F6
X509v3 Authority Key Identifier:
keyid:AD:56:B6:71:87:A9:8B:A3:14:08:44:05:79:7B:D9:65:6E:8A:C8:BA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914EAE4/6753B8AE257511E7AC0D172AC4F9AE02/rVa2cYepi6MUCEQFeXvZZW6KyLo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rVa2cYepi6MUCEQFeXvZZW6KyLo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914EAE4/6753B8AE257511E7AC0D172AC4F9AE02/5B2E8848135111EF9CB17D1DC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
1.1.4.0/22
1.1.16.0/20
1.2.9.0-1.2.15.255
1.3.0.0/16
1.10.64.0/18
1.180.0.0/14
27.54.72.0/21
39.0.64.0-39.0.255.255
42.0.16.0/21
42.99.64.0/19
42.123.0.0/19
42.187.0.0/18
42.194.64.0/18
101.99.96.0/19
101.102.64.0/19
101.102.104.0/21
101.128.16.0-101.128.63.255
101.234.96.0/19
101.251.32.0/19
106.0.64.0/18
110.94.0.0/15
114.79.64.0/18
115.166.64.0/19
120.88.8.0/21
121.56.0.0/15
121.59.0.0/23
124.76.0.0/14
124.112.0.0/15
124.117.0.0/16
124.224.0.0/15
124.234.0.0/15
125.76.128.0/17
125.80.0.0/13
125.104.0.0/13
150.121.0.0/16
202.67.0.0/22
202.73.128.0/22
202.86.252.0/22
202.96.112.0/20
202.98.128.0/19
202.150.224.0/19
202.166.224.0/19
202.191.72.0/21
203.22.78.0/24
203.24.186.0/23
203.33.67.0-203.33.68.255
203.33.73.0/24
203.33.79.0/24
203.33.100.0/24
203.33.122.0/24
203.33.129.0/24
203.33.131.0/24
203.86.96.0/19
203.144.96.0/19
218.0.0.0/16
218.2.0.0/16
218.6.0.0/17
218.14.0.0/15
218.20.0.0-218.21.127.255
218.62.128.0/17
218.64.0.0/16
218.92.0.0/16
218.100.128.0/17
Signature Algorithm: sha256WithRSAEncryption
32:6e:da:eb:b5:4c:00:50:63:4a:84:93:86:1a:75:93:f4:c0:
60:47:84:f7:bd:0c:49:82:b4:e4:2b:47:2e:0f:07:c0:4f:c6:
0b:3f:1a:5b:2b:11:d9:ad:18:56:db:04:8d:a8:73:d8:03:17:
a8:f2:ce:d1:db:c3:07:68:50:a0:1c:d0:08:a7:d3:65:c9:f0:
4d:d5:09:73:a0:63:65:14:17:59:11:e8:54:19:d0:5c:1e:f4:
8a:2e:67:18:fa:88:46:b6:8f:78:40:d2:36:b7:e1:d9:cf:f3:
2a:85:61:eb:97:8f:05:f2:82:44:27:54:e6:0d:89:f0:50:f5:
a2:04:39:6e:35:c5:03:cc:e6:ab:bb:a7:38:b8:9d:3b:b4:a6:
60:4d:35:e5:a8:c6:e7:c4:4b:79:5f:87:c3:59:b6:a1:65:66:
28:9c:9a:39:45:a9:52:c4:c5:23:29:c6:a5:61:5f:32:5e:cf:
b6:1b:fe:0f:e9:5c:9f:65:21:1a:3a:db:05:a0:a7:4d:8f:c0:
34:90:1e:2b:85:f0:f4:d6:b2:30:c7:f0:ec:3c:c2:2e:19:79:
8f:b1:cb:ed:fb:5a:f1:c3:c2:06:65:bc:11:2c:e5:10:5e:ed:
ef:ed:d6:c7:b5:84:23:a2:2c:d4:37:ad:ae:ff:99:7d:dc:9b:
94:aa:37:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 2 18:46:19 2024 by rpki-client on console-ams.rpki-client.org