Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A916C83B/E4E10B4A1D8811E2A012CBE108B02CD2/2C21DAECFBFE11EEAB5B287BC4F9AE02.roa
File: 2C21DAECFBFE11EEAB5B287BC4F9AE02.roa (raw, json)
Hash identifier: GHA0hxX3L+HKFJgRF1hNsE8VZizVreTbn5y/sQWalxQ=
Subject key identifier: AF:F3:C7:03:AE:39:C8:46:70:D1:06:51:AD:EE:0C:49:A5:7B:91:0E
Certificate issuer: /CN=A916C83B/serialNumber=E76EB256C0FCB07E2907978343E9AD9DD21FE206
Certificate serial: 3613
Authority key identifier: E7:6E:B2:56:C0:FC:B0:7E:29:07:97:83:43:E9:AD:9D:D2:1F:E2:06
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/526yVsD8sH4pB5eDQ-mtndIf4gY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916C83B/E4E10B4A1D8811E2A012CBE108B02CD2/2C21DAECFBFE11EEAB5B287BC4F9AE02.roa
Signing time: Fri 26 Apr 2024 15:00:38 +0000
ROA not before: Fri 26 Apr 2024 15:00:38 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 132165
IP address blocks: 103.246.108.0/22 maxlen: 22
103.246.108.0/24 maxlen: 24
103.246.109.0/24 maxlen: 24
103.246.110.0/24 maxlen: 24
103.246.111.0/24 maxlen: 24
111.88.0.0/20 maxlen: 24
111.88.16.0/20 maxlen: 24
111.88.32.0/20 maxlen: 24
111.88.48.0/20 maxlen: 24
111.88.64.0/21 maxlen: 21
111.88.64.0/24 maxlen: 24
111.88.65.0/24 maxlen: 24
111.88.66.0/24 maxlen: 24
111.88.67.0/24 maxlen: 24
111.88.68.0/24 maxlen: 24
111.88.69.0/24 maxlen: 24
111.88.70.0/24 maxlen: 24
111.88.71.0/24 maxlen: 24
111.88.72.0/22 maxlen: 22
111.88.72.0/24 maxlen: 24
111.88.73.0/24 maxlen: 24
111.88.74.0/24 maxlen: 24
111.88.75.0/24 maxlen: 24
111.88.78.0/24 maxlen: 24
111.88.80.0/20 maxlen: 20
111.88.80.0/22 maxlen: 22
111.88.80.0/24 maxlen: 24
111.88.81.0/24 maxlen: 24
111.88.82.0/24 maxlen: 24
111.88.83.0/24 maxlen: 24
111.88.84.0/22 maxlen: 22
111.88.84.0/24 maxlen: 24
111.88.85.0/24 maxlen: 24
111.88.86.0/24 maxlen: 24
111.88.87.0/24 maxlen: 24
111.88.88.0/21 maxlen: 21
111.88.88.0/24 maxlen: 24
111.88.89.0/24 maxlen: 24
111.88.90.0/24 maxlen: 24
111.88.91.0/24 maxlen: 24
111.88.92.0/24 maxlen: 24
111.88.93.0/24 maxlen: 24
111.88.94.0/24 maxlen: 24
111.88.95.0/24 maxlen: 24
111.88.96.0/19 maxlen: 19
111.88.96.0/20 maxlen: 20
111.88.96.0/24 maxlen: 24
111.88.97.0/24 maxlen: 24
111.88.98.0/24 maxlen: 24
111.88.99.0/24 maxlen: 24
111.88.100.0/24 maxlen: 24
111.88.101.0/24 maxlen: 24
111.88.102.0/24 maxlen: 24
111.88.103.0/24 maxlen: 24
111.88.104.0/24 maxlen: 24
111.88.105.0/24 maxlen: 24
111.88.106.0/24 maxlen: 24
111.88.107.0/24 maxlen: 24
111.88.108.0/24 maxlen: 24
111.88.109.0/24 maxlen: 24
111.88.110.0/24 maxlen: 24
111.88.111.0/24 maxlen: 24
111.88.112.0/20 maxlen: 20
111.88.112.0/24 maxlen: 24
111.88.113.0/24 maxlen: 24
111.88.114.0/24 maxlen: 24
111.88.115.0/24 maxlen: 24
111.88.116.0/24 maxlen: 24
111.88.117.0/24 maxlen: 24
111.88.118.0/24 maxlen: 24
111.88.119.0/24 maxlen: 24
111.88.120.0/24 maxlen: 24
111.88.121.0/24 maxlen: 24
111.88.122.0/24 maxlen: 24
111.88.123.0/24 maxlen: 24
111.88.124.0/24 maxlen: 24
111.88.125.0/24 maxlen: 24
111.88.126.0/24 maxlen: 24
111.88.127.0/24 maxlen: 24
111.88.128.0/21 maxlen: 21
111.88.128.0/24 maxlen: 24
111.88.129.0/24 maxlen: 24
111.88.130.0/24 maxlen: 24
111.88.131.0/24 maxlen: 24
111.88.132.0/24 maxlen: 24
111.88.133.0/24 maxlen: 24
111.88.134.0/24 maxlen: 24
111.88.135.0/24 maxlen: 24
111.88.136.0/23 maxlen: 24
111.88.140.0/22 maxlen: 22
111.88.140.0/24 maxlen: 24
111.88.141.0/24 maxlen: 24
111.88.142.0/24 maxlen: 24
111.88.143.0/24 maxlen: 24
111.88.160.0/22 maxlen: 22
111.88.160.0/24 maxlen: 24
111.88.161.0/24 maxlen: 24
111.88.162.0/24 maxlen: 24
111.88.163.0/24 maxlen: 24
111.88.172.0/22 maxlen: 22
111.88.172.0/24 maxlen: 24
111.88.173.0/24 maxlen: 24
111.88.174.0/24 maxlen: 24
111.88.175.0/24 maxlen: 24
111.88.176.0/21 maxlen: 21
111.88.176.0/24 maxlen: 24
111.88.177.0/24 maxlen: 24
111.88.178.0/24 maxlen: 24
111.88.179.0/24 maxlen: 24
111.88.180.0/24 maxlen: 24
111.88.181.0/24 maxlen: 24
111.88.182.0/24 maxlen: 24
111.88.183.0/24 maxlen: 24
111.88.192.0/19 maxlen: 19
111.88.192.0/24 maxlen: 24
111.88.193.0/24 maxlen: 24
111.88.194.0/24 maxlen: 24
111.88.195.0/24 maxlen: 24
111.88.196.0/24 maxlen: 24
111.88.197.0/24 maxlen: 24
111.88.198.0/24 maxlen: 24
111.88.199.0/24 maxlen: 24
111.88.200.0/24 maxlen: 24
111.88.201.0/24 maxlen: 24
111.88.202.0/24 maxlen: 24
111.88.203.0/24 maxlen: 24
111.88.204.0/24 maxlen: 24
111.88.205.0/24 maxlen: 24
111.88.206.0/24 maxlen: 24
111.88.207.0/24 maxlen: 24
111.88.208.0/24 maxlen: 24
111.88.209.0/24 maxlen: 24
111.88.210.0/24 maxlen: 24
111.88.211.0/24 maxlen: 24
111.88.212.0/24 maxlen: 24
111.88.213.0/24 maxlen: 24
111.88.214.0/24 maxlen: 24
111.88.215.0/24 maxlen: 24
111.88.216.0/24 maxlen: 24
111.88.217.0/24 maxlen: 24
111.88.218.0/24 maxlen: 24
111.88.219.0/24 maxlen: 24
111.88.220.0/24 maxlen: 24
111.88.221.0/24 maxlen: 24
111.88.222.0/24 maxlen: 24
111.88.223.0/24 maxlen: 24
111.88.224.0/21 maxlen: 21
111.88.224.0/24 maxlen: 24
111.88.225.0/24 maxlen: 24
111.88.226.0/24 maxlen: 24
111.88.227.0/24 maxlen: 24
111.88.228.0/24 maxlen: 24
111.88.229.0/24 maxlen: 24
111.88.230.0/24 maxlen: 24
111.88.231.0/24 maxlen: 24
115.186.2.0/23 maxlen: 24
115.186.4.0/22 maxlen: 22
115.186.4.0/24 maxlen: 24
115.186.5.0/24 maxlen: 24
115.186.6.0/24 maxlen: 24
115.186.7.0/24 maxlen: 24
115.186.8.0/23 maxlen: 24
115.186.76.0/22 maxlen: 22
115.186.76.0/24 maxlen: 24
115.186.77.0/24 maxlen: 24
115.186.78.0/24 maxlen: 24
115.186.79.0/24 maxlen: 24
115.186.80.0/22 maxlen: 22
115.186.80.0/24 maxlen: 24
115.186.81.0/24 maxlen: 24
115.186.82.0/24 maxlen: 24
115.186.83.0/24 maxlen: 24
115.186.84.0/22 maxlen: 22
115.186.84.0/24 maxlen: 24
115.186.85.0/24 maxlen: 24
115.186.86.0/24 maxlen: 24
115.186.87.0/24 maxlen: 24
117.102.48.0/20 maxlen: 20
117.102.48.0/24 maxlen: 24
117.102.49.0/24 maxlen: 24
117.102.50.0/24 maxlen: 24
117.102.51.0/24 maxlen: 24
117.102.52.0/24 maxlen: 24
117.102.53.0/24 maxlen: 24
117.102.54.0/24 maxlen: 24
117.102.55.0/24 maxlen: 24
117.102.56.0/24 maxlen: 24
117.102.57.0/24 maxlen: 24
117.102.58.0/24 maxlen: 24
117.102.59.0/24 maxlen: 24
117.102.60.0/24 maxlen: 24
117.102.61.0/24 maxlen: 24
117.102.62.0/24 maxlen: 24
117.102.63.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A916C83B/E4E10B4A1D8811E2A012CBE108B02CD2/526yVsD8sH4pB5eDQ-mtndIf4gY.crl
rsync://rpki.apnic.net/member_repository/A916C83B/E4E10B4A1D8811E2A012CBE108B02CD2/526yVsD8sH4pB5eDQ-mtndIf4gY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/526yVsD8sH4pB5eDQ-mtndIf4gY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 13 Jun 2024 14:34:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13843 (0x3613)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916C83B/serialNumber=E76EB256C0FCB07E2907978343E9AD9DD21FE206
Validity
Not Before: Apr 26 15:00:38 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=662bc195-4592
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:2c:f5:03:ce:7c:0b:e8:88:a0:a5:20:a8:60:
ae:9c:7e:e7:81:71:5a:21:d7:9c:3b:ce:79:ef:1b:
af:98:65:af:e5:65:b2:9f:bd:7d:19:35:16:e0:48:
f5:fb:10:29:34:9c:e8:c6:ac:ef:12:2f:6b:33:7d:
d1:e9:7f:ee:a3:52:a1:dd:d4:99:b0:47:91:06:e8:
59:75:2d:47:5c:9b:40:20:28:be:85:56:16:80:f9:
bc:ae:60:4a:45:7f:4d:ac:e4:b7:17:46:28:e1:da:
79:c9:79:6b:c8:a9:a9:48:d7:27:96:ac:cd:1d:91:
1f:dc:3c:83:1c:21:3f:f7:6b:10:01:b3:ff:28:c6:
5b:07:17:a0:6a:77:09:6f:a5:ae:18:8d:bd:ff:50:
0d:8b:48:a1:3f:be:f8:69:5a:91:61:ce:a6:05:a5:
bd:56:cf:5d:b2:54:d8:47:b6:ff:4f:1f:c0:34:3a:
96:6d:e2:2f:2a:82:3e:aa:cd:8f:47:34:2d:6c:33:
d9:3a:21:c4:35:64:2a:d7:a9:2b:cf:e6:a6:0f:6e:
be:3b:22:de:ec:32:35:78:2e:91:06:8a:c0:34:a8:
61:52:1b:36:c5:82:fc:0b:ff:f1:b0:68:04:17:30:
c7:65:91:2c:48:4f:0d:82:32:f5:9d:72:dc:60:28:
dd:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:F3:C7:03:AE:39:C8:46:70:D1:06:51:AD:EE:0C:49:A5:7B:91:0E
X509v3 Authority Key Identifier:
keyid:E7:6E:B2:56:C0:FC:B0:7E:29:07:97:83:43:E9:AD:9D:D2:1F:E2:06
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916C83B/E4E10B4A1D8811E2A012CBE108B02CD2/526yVsD8sH4pB5eDQ-mtndIf4gY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/526yVsD8sH4pB5eDQ-mtndIf4gY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916C83B/E4E10B4A1D8811E2A012CBE108B02CD2/2C21DAECFBFE11EEAB5B287BC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.246.108.0/22
111.88.0.0-111.88.75.255
111.88.78.0/24
111.88.80.0-111.88.137.255
111.88.140.0/22
111.88.160.0/22
111.88.172.0-111.88.183.255
111.88.192.0-111.88.231.255
115.186.2.0-115.186.9.255
115.186.76.0-115.186.87.255
117.102.48.0/20
Signature Algorithm: sha256WithRSAEncryption
b1:b2:e7:76:54:40:6d:c6:b5:c2:0d:09:97:60:fd:44:c7:58:
f4:56:6a:06:a2:2d:f0:9e:04:16:7f:47:84:36:03:92:74:a5:
eb:7a:4b:ad:36:61:b2:fe:d5:5b:b7:f9:fe:a3:0d:5b:b4:81:
ca:20:3a:10:39:88:5d:cc:7e:f2:b8:b2:1f:ff:83:2d:80:38:
ca:fe:50:8f:cc:43:48:76:ec:33:c8:30:fe:c6:77:2f:d8:87:
1d:b1:a1:33:83:fa:77:2b:f8:40:c6:f0:29:fc:82:a6:e4:0f:
71:24:d2:be:90:c0:a6:e5:6c:50:02:40:45:84:43:f0:72:7f:
c2:72:bb:f2:9d:8b:06:e2:06:7f:42:39:a3:a7:08:f5:55:84:
a6:cc:46:bd:42:9c:06:6c:ef:01:aa:e5:a4:fd:2d:f7:6e:3d:
4a:ab:a5:2d:8e:fd:34:67:c3:f0:68:9b:66:8e:0c:c4:ea:98:
b5:a0:16:dd:6f:45:e9:17:9e:b7:4c:f0:91:c7:67:5d:58:d1:
49:bf:26:59:3c:79:da:15:7e:71:be:6b:bc:91:a3:1f:e5:68:
c3:a0:16:47:e3:ad:eb:3f:a4:6b:18:e6:47:38:ba:9e:e9:98:
0e:7b:4a:2f:fe:09:0c:be:49:9e:a5:98:91:21:26:1d:cb:06:
0e:44:9a:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:47:49 2024 by rpki-client on console-fra.rpki-client.org