Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9157D67/69E6C16A442A11EB9599AD38C4F9AE02/8B0DCAFCA07811EEB25C0B54C4F9AE02.roa
File: 8B0DCAFCA07811EEB25C0B54C4F9AE02.roa (raw, json)
Hash identifier: X6YgMD91GztHS+Vh31VK7g+Vo50WOlF4v4sdzHWFS0w=
Subject key identifier: BB:8E:E0:00:BA:0D:4D:00:D1:B4:3C:C9:AF:35:F1:AB:56:4F:88:94
Certificate issuer: /CN=A9157D67/serialNumber=39C43967570087F583E425A9FE9B69B9506A59BD
Certificate serial: 092C
Authority key identifier: 39:C4:39:67:57:00:87:F5:83:E4:25:A9:FE:9B:69:B9:50:6A:59:BD
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OcQ5Z1cAh_WD5CWp_ptpuVBqWb0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9157D67/69E6C16A442A11EB9599AD38C4F9AE02/8B0DCAFCA07811EEB25C0B54C4F9AE02.roa
Signing time: Fri 07 Jun 2024 03:31:26 +0000
ROA not before: Fri 07 Jun 2024 03:31:26 +0000
ROA not after: Sat 31 Aug 2024 00:00:00 +0000
asID: 132203
IP address blocks: 43.128.222.0/23 maxlen: 23
43.130.0.0/17 maxlen: 24
43.130.128.0/18 maxlen: 24
43.131.0.0/18 maxlen: 24
43.131.224.0/19 maxlen: 24
43.132.68.0/24 maxlen: 24
43.132.96.0/19 maxlen: 24
43.132.128.0/17 maxlen: 24
43.134.0.0/18 maxlen: 18
43.134.64.0/18 maxlen: 18
43.135.58.0/24 maxlen: 24
43.135.187.0/24 maxlen: 24
43.152.96.0/19 maxlen: 24
43.152.192.0/19 maxlen: 19
43.152.224.0/19 maxlen: 19
43.153.0.0/18 maxlen: 18
43.153.64.0/18 maxlen: 18
43.153.128.0/18 maxlen: 18
43.153.164.0/24 maxlen: 24
43.153.187.0/24 maxlen: 24
43.153.192.0/18 maxlen: 18
43.153.250.0/23 maxlen: 23
43.154.0.0/18 maxlen: 18
43.154.64.0/18 maxlen: 18
43.154.128.0/18 maxlen: 18
43.154.192.0/18 maxlen: 18
43.155.0.0/17 maxlen: 18
43.155.127.0/24 maxlen: 24
43.155.128.0/17 maxlen: 18
43.156.0.0/18 maxlen: 18
43.156.64.0/18 maxlen: 18
43.156.128.0/18 maxlen: 18
43.156.192.0/18 maxlen: 18
43.156.252.0/24 maxlen: 24
43.156.254.0/24 maxlen: 24
43.157.0.0/17 maxlen: 24
43.157.128.0/18 maxlen: 24
43.157.192.0/18 maxlen: 24
43.158.0.0/16 maxlen: 16
43.158.0.0/17 maxlen: 24
43.158.128.0/18 maxlen: 24
43.158.192.0/18 maxlen: 24
43.159.0.0/16 maxlen: 16
43.159.0.0/20 maxlen: 24
43.159.16.0/20 maxlen: 24
43.159.32.0/19 maxlen: 24
43.159.76.0/24 maxlen: 24
43.159.128.0/18 maxlen: 24
43.159.192.0/18 maxlen: 24
43.160.0.0/16 maxlen: 24
43.161.0.0/17 maxlen: 24
43.161.128.0/17 maxlen: 24
43.162.0.0/17 maxlen: 24
43.162.128.0/17 maxlen: 24
43.163.0.0/16 maxlen: 16
43.163.0.0/17 maxlen: 17
43.163.0.0/18 maxlen: 24
43.163.64.0/18 maxlen: 24
43.163.128.0/18 maxlen: 18
43.163.192.0/18 maxlen: 24
43.164.0.0/16 maxlen: 24
43.165.0.0/16 maxlen: 24
43.166.0.0/16 maxlen: 24
43.167.0.0/16 maxlen: 24
43.168.0.0/16 maxlen: 24
43.169.0.0/16 maxlen: 24
43.170.0.0/16 maxlen: 24
43.171.0.0/16 maxlen: 24
43.172.0.0/16 maxlen: 24
43.173.0.0/16 maxlen: 24
43.174.0.0/16 maxlen: 24
101.32.140.0/24 maxlen: 24
101.33.4.0/23 maxlen: 23
101.33.17.0/24 maxlen: 24
101.33.18.0/23 maxlen: 23
101.33.26.0/23 maxlen: 23
101.33.30.0/23 maxlen: 23
101.33.41.0/24 maxlen: 24
101.33.114.0/23 maxlen: 24
150.109.90.0/24 maxlen: 24
150.109.91.0/24 maxlen: 24
240d:c000::/24 maxlen: 32
240d:c000:1000::/36 maxlen: 36
240d:c000:2000::/36 maxlen: 36
240d:c000:3000::/36 maxlen: 36
240d:c000:6000::/36 maxlen: 36
240d:c000:6000::/44 maxlen: 48
240d:c000:7000::/44 maxlen: 44
240d:c000:f000::/36 maxlen: 36
240d:c000:f000::/44 maxlen: 44
240d:c000:f010::/44 maxlen: 44
240d:c000:f020::/44 maxlen: 44
240d:c000:f030::/44 maxlen: 44
240d:c010::/48 maxlen: 48
240d:c010::/56 maxlen: 56
240d:c010:0:100::/56 maxlen: 56
240d:c010:10::/48 maxlen: 48
240d:c010:11::/48 maxlen: 48
240d:c010:12::/48 maxlen: 48
240d:c010:14::/48 maxlen: 48
240d:c010:16::/48 maxlen: 48
240d:c010:17::/48 maxlen: 48
240d:c010:20::/44 maxlen: 44
240d:c010:20::/56 maxlen: 56
240d:c010:20:100::/56 maxlen: 56
240d:c010:20:200::/56 maxlen: 56
240d:c010:30::/56 maxlen: 56
240d:c010:30:100::/56 maxlen: 56
240d:c010:50::/48 maxlen: 48
240d:c010:57::/48 maxlen: 48
240d:c010:58::/47 maxlen: 48
240d:c010:5c::/46 maxlen: 48
240d:c010:60::/48 maxlen: 48
240d:c010:66::/47 maxlen: 48
240d:c010:68::/48 maxlen: 48
240d:c010:6c::/47 maxlen: 48
240d:c010:6e::/48 maxlen: 48
240d:c040::/44 maxlen: 44
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9157D67/69E6C16A442A11EB9599AD38C4F9AE02/OcQ5Z1cAh_WD5CWp_ptpuVBqWb0.crl
rsync://rpki.apnic.net/member_repository/A9157D67/69E6C16A442A11EB9599AD38C4F9AE02/OcQ5Z1cAh_WD5CWp_ptpuVBqWb0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OcQ5Z1cAh_WD5CWp_ptpuVBqWb0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 20 Jun 2024 07:03:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2348 (0x92c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9157D67/serialNumber=39C43967570087F583E425A9FE9B69B9506A59BD
Validity
Not Before: Jun 7 03:31:26 2024 GMT
Not After : Aug 31 00:00:00 2024 GMT
Subject: CN=66627f0e-0f40
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:d0:67:c0:1f:3d:4b:78:16:0d:c6:a0:19:dc:
65:b0:38:66:97:9c:c3:12:52:bb:df:f8:31:d4:17:
56:67:82:dc:b4:dd:61:45:d8:99:63:94:42:fc:53:
69:1c:23:b0:2e:65:e7:d7:4e:2e:8a:01:e6:fd:55:
5e:92:da:a9:6a:ff:23:a0:e7:46:da:88:78:99:d2:
d1:6f:e4:f1:3a:a8:80:54:08:33:63:66:6d:d4:4a:
e4:0e:46:10:76:b4:e6:0d:61:2c:cc:fa:0a:71:5f:
30:1b:16:dc:4c:bc:f8:67:94:b3:4d:79:2e:f9:56:
c8:f8:de:a8:3c:67:71:58:21:69:90:df:3d:84:62:
58:78:01:14:0a:f5:6a:c4:f9:8d:a8:2c:b6:2e:44:
60:8d:b9:8f:c7:54:8b:e8:10:33:bb:47:48:3d:2f:
c4:13:49:12:24:5c:77:f7:cc:85:37:34:7c:fa:90:
44:ba:77:32:49:53:c9:0d:32:39:9c:73:45:2c:ce:
2b:93:58:89:a8:92:bc:e9:74:7c:22:54:0a:6f:b1:
52:00:3c:13:c5:61:62:0b:09:5d:13:d3:fa:68:32:
41:4e:6d:64:5d:c6:1c:ec:3c:3c:a5:99:07:67:a5:
24:cc:d7:8d:fe:cf:a5:0e:02:85:d8:1f:77:b6:fe:
fb:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:8E:E0:00:BA:0D:4D:00:D1:B4:3C:C9:AF:35:F1:AB:56:4F:88:94
X509v3 Authority Key Identifier:
keyid:39:C4:39:67:57:00:87:F5:83:E4:25:A9:FE:9B:69:B9:50:6A:59:BD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9157D67/69E6C16A442A11EB9599AD38C4F9AE02/OcQ5Z1cAh_WD5CWp_ptpuVBqWb0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OcQ5Z1cAh_WD5CWp_ptpuVBqWb0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9157D67/69E6C16A442A11EB9599AD38C4F9AE02/8B0DCAFCA07811EEB25C0B54C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
43.128.222.0/23
43.130.0.0-43.130.191.255
43.131.0.0/18
43.131.224.0/19
43.132.68.0/24
43.132.96.0-43.132.255.255
43.134.0.0/17
43.135.58.0/24
43.135.187.0/24
43.152.96.0/19
43.152.192.0-43.174.255.255
101.32.140.0/24
101.33.4.0/23
101.33.17.0-101.33.19.255
101.33.26.0/23
101.33.30.0/23
101.33.41.0/24
101.33.114.0/23
150.109.90.0/23
IPv6:
240d:c000::/24
Signature Algorithm: sha256WithRSAEncryption
9c:35:b2:96:19:d7:ab:95:42:c3:a1:d2:b7:8b:40:c3:8b:de:
a5:68:2c:c5:ed:9e:0b:6e:56:d9:4f:ea:7b:48:da:95:03:9f:
2d:c6:67:52:57:c8:fc:2e:bd:94:8f:ec:bf:53:bc:8f:7a:67:
79:fb:15:07:e0:ca:30:f8:a4:ce:b0:de:c6:b6:13:01:9f:68:
5f:8b:7a:01:bb:28:f6:5f:64:de:10:71:9e:c0:9f:33:5e:c6:
03:73:b0:ca:69:0e:d0:ad:a8:bd:ec:a1:24:6d:02:0c:e7:6d:
51:ea:63:a7:89:5e:8c:67:21:30:70:a0:94:61:7f:ad:4a:4d:
cc:f8:77:b1:c7:b2:18:dd:57:be:91:53:2b:c3:dc:ab:c9:3c:
bf:be:a3:60:dc:0d:7d:4c:e0:ff:79:1e:6c:0d:77:78:bb:5a:
1e:22:71:25:01:4d:d3:41:aa:2a:14:bc:74:e9:7c:9c:97:5e:
73:ea:4f:40:4e:01:f2:1a:18:e9:d9:6b:8f:3e:c9:b6:65:4e:
df:92:21:c2:eb:e2:7d:c2:e9:c4:a6:77:d1:f4:34:ee:dc:a3:
e9:6a:f2:17:c7:39:ac:99:c8:a9:7a:17:f8:1e:16:79:32:70:
24:1d:62:7c:aa:92:b2:19:e2:d0:02:32:ac:3f:57:fb:41:50:
5d:f3:7e:91
-----BEGIN CERTIFICATE-----
MIIGDTCCBPWgAwIBAgICCSwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NTdENjcxMTAvBgNVBAUTKDM5QzQzOTY3NTcwMDg3RjU4M0U0MjVBOUZFOUI2OUI5
NTA2QTU5QkQwHhcNMjQwNjA3MDMzMTI2WhcNMjQwODMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02NjYyN2YwZS0wZjQwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA8NBnwB89S3gWDcagGdxlsDhml5zDElK73/gx1BdWZ4LctN1hRdiZY5RC/FNp
HCOwLmXn104uigHm/VVektqpav8joOdG2oh4mdLRb+TxOqiAVAgzY2Zt1ErkDkYQ
drTmDWEszPoKcV8wGxbcTLz4Z5SzTXku+VbI+N6oPGdxWCFpkN89hGJYeAEUCvVq
xPmNqCy2LkRgjbmPx1SL6BAzu0dIPS/EE0kSJFx398yFNzR8+pBEuncySVPJDTI5
nHNFLM4rk1iJqJK86XR8IlQKb7FSADwTxWFiCwldE9P6aDJBTm1kXcYc7Dw8pZkH
Z6UkzNeN/s+lDgKF2B93tv77GwIDAQABo4IDMTCCAy0wHQYDVR0OBBYEFLuO4AC6
DU0A0bQ8ya818atWT4iUMB8GA1UdIwQYMBaAFDnEOWdXAIf1g+Qlqf6bablQalm9
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1N0Q2Ny82OUU2QzE2QTQ0
MkExMUVCOTU5OUFEMzhDNEY5QUUwMi9PY1E1WjFjQWhfV0Q1Q1dwX3B0cHVWQnFX
YjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL09jUTVaMWNBaF9XRDVDV3BfcHRwdVZCcVdiMC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
NTdENjcvNjlFNkMxNkE0NDJBMTFFQjk1OTlBRDM4QzRGOUFFMDIvOEIwRENBRkNB
MDc4MTFFRUIyNUMwQjU0QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwgboGCCsGAQUFBwEHAQH/
BIGqMIGnMIGWBAIAATCBjwMEASuA3jALAwMBK4IDBAYrgoADBAYrgwADBAUrg+AD
BAArhEQwCwMEBSuEYAMDACuEAwQHK4YAAwQAK4c6AwQAK4e7AwQFK5hgMAsDBAYr
mMADAwArrgMEAGUgjAMEAWUhBDAMAwQAZSERAwQCZSEQAwQBZSEaAwQBZSEeAwQA
ZSEpAwQBZSFyAwQBlm1aMAwEAgACMAYDBAAkDcAwDQYJKoZIhvcNAQELBQADggEB
AJw1spYZ16uVQsOh0reLQMOL3qVoLMXtngtuVtlP6ntI2pUDny3GZ1JXyPwuvZSP
7L9TvI96Z3n7FQfgyjD4pM6w3sa2EwGfaF+LegG7KPZfZN4QcZ7AnzNexgNzsMpp
DtCtqL3soSRtAgznbVHqY6eJXoxnITBwoJRhf61KTcz4d7HHshjdV76RUyvD3KvJ
PL++o2DcDX1M4P95HmwNd3i7Wh4icSUBTdNBqioUvHTpfJyXXnPqT0BOAfIaGOnZ
a48+ybZlTt+SIcLr4n3C6cSmd9H0NO7co+lq8hfHOayZyKl6F/geFnkycCQdYnyq
krIZ4tACMqw/V/tBUF3zfpE=
-----END CERTIFICATE-----
Generated at Thu Jun 13 10:58:40 2024 by rpki-client on console-ams.rpki-client.org