Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9186214/C65D5364331A11E4AF2AB37CC4F9AE02/9CC241B2016511EA91E3CF4AC4F9AE02.roa
File: 9CC241B2016511EA91E3CF4AC4F9AE02.roa (raw, json)
Hash identifier: rWRmDX660dqyRDuXMsI2GCl28Q3GT1EJJtrdQ0guTQ8=
Subject key identifier: 9A:E2:E2:F8:19:88:13:15:8C:A7:BE:F4:6C:0E:A9:92:04:CA:EA:2A
Certificate issuer: /CN=A9186214/serialNumber=F3DB9F162008BD666CBF8C99607814CFAB24D7E7
Certificate serial: 3356
Authority key identifier: F3:DB:9F:16:20:08:BD:66:6C:BF:8C:99:60:78:14:CF:AB:24:D7:E7
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/89ufFiAIvWZsv4yZYHgUz6sk1-c.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9186214/C65D5364331A11E4AF2AB37CC4F9AE02/9CC241B2016511EA91E3CF4AC4F9AE02.roa
Signing time: Tue 30 Jan 2024 16:12:40 +0000
ROA not before: Tue 30 Jan 2024 16:12:40 +0000
ROA not after: Sat 31 Aug 2024 00:00:00 +0000
asID: 17885
IP address blocks: 112.215.7.0/24 maxlen: 24
112.215.10.0/24 maxlen: 24
112.215.11.0/24 maxlen: 24
112.215.18.0/24 maxlen: 24
112.215.21.0/24 maxlen: 24
112.215.22.0/24 maxlen: 24
112.215.30.0/24 maxlen: 24
112.215.33.0/24 maxlen: 24
112.215.34.0/24 maxlen: 24
112.215.40.0/24 maxlen: 24
112.215.41.0/24 maxlen: 24
112.215.42.0/24 maxlen: 24
112.215.46.0/24 maxlen: 24
112.215.49.0/24 maxlen: 24
112.215.62.0/24 maxlen: 24
112.215.68.0/24 maxlen: 24
112.215.69.0/24 maxlen: 24
112.215.77.0/24 maxlen: 24
112.215.78.0/24 maxlen: 24
112.215.81.0/24 maxlen: 24
112.215.87.0/24 maxlen: 24
112.215.89.0/24 maxlen: 24
112.215.94.0/24 maxlen: 24
112.215.96.0/24 maxlen: 24
112.215.97.0/24 maxlen: 24
112.215.98.0/24 maxlen: 24
112.215.100.0/24 maxlen: 24
112.215.105.0/24 maxlen: 24
112.215.106.0/24 maxlen: 24
112.215.107.0/24 maxlen: 24
112.215.108.0/24 maxlen: 24
112.215.112.0/24 maxlen: 24
112.215.113.0/24 maxlen: 24
112.215.114.0/24 maxlen: 24
112.215.116.0/24 maxlen: 24
112.215.118.0/24 maxlen: 24
112.215.121.0/24 maxlen: 24
112.215.129.0/24 maxlen: 24
112.215.131.0/24 maxlen: 24
112.215.132.0/24 maxlen: 24
112.215.141.0/24 maxlen: 24
112.215.142.0/24 maxlen: 24
112.215.143.0/24 maxlen: 24
112.215.159.0/24 maxlen: 24
112.215.176.0/24 maxlen: 24
112.215.177.0/24 maxlen: 24
112.215.178.0/24 maxlen: 24
112.215.190.0/24 maxlen: 24
112.215.191.0/24 maxlen: 24
112.215.192.0/24 maxlen: 24
112.215.193.0/24 maxlen: 24
112.215.195.0/24 maxlen: 24
112.215.205.0/24 maxlen: 24
112.215.248.0/24 maxlen: 24
121.52.25.0/24 maxlen: 24
121.52.29.0/24 maxlen: 24
121.52.35.0/24 maxlen: 24
121.52.40.0/24 maxlen: 24
121.52.41.0/24 maxlen: 24
121.52.42.0/24 maxlen: 24
121.52.45.0/24 maxlen: 24
121.52.48.0/24 maxlen: 24
121.52.49.0/24 maxlen: 24
121.52.50.0/24 maxlen: 24
121.52.51.0/24 maxlen: 24
121.52.52.0/24 maxlen: 24
121.52.53.0/24 maxlen: 24
121.52.54.0/24 maxlen: 24
121.52.55.0/24 maxlen: 24
121.52.59.0/24 maxlen: 24
121.52.60.0/24 maxlen: 24
121.52.64.0/24 maxlen: 24
121.52.65.0/24 maxlen: 24
121.52.66.0/24 maxlen: 24
121.52.67.0/24 maxlen: 24
121.52.68.0/24 maxlen: 24
121.52.70.0/24 maxlen: 24
121.52.71.0/24 maxlen: 24
121.52.72.0/24 maxlen: 24
121.52.73.0/24 maxlen: 24
121.52.74.0/24 maxlen: 24
121.52.75.0/24 maxlen: 24
121.52.76.0/24 maxlen: 24
121.52.77.0/24 maxlen: 24
121.52.78.0/24 maxlen: 24
121.52.79.0/24 maxlen: 24
121.52.80.0/24 maxlen: 24
121.52.81.0/24 maxlen: 24
121.52.82.0/24 maxlen: 24
121.52.83.0/24 maxlen: 24
121.52.84.0/24 maxlen: 24
121.52.85.0/24 maxlen: 24
121.52.87.0/24 maxlen: 24
121.52.88.0/24 maxlen: 24
121.52.89.0/24 maxlen: 24
121.52.91.0/24 maxlen: 24
121.52.92.0/24 maxlen: 24
121.52.93.0/24 maxlen: 24
121.52.94.0/24 maxlen: 24
121.52.95.0/24 maxlen: 24
202.152.224.0/24 maxlen: 24
202.152.225.0/24 maxlen: 24
202.152.230.0/24 maxlen: 24
202.152.231.0/24 maxlen: 24
202.152.233.0/24 maxlen: 24
202.152.237.0/24 maxlen: 24
202.152.244.0/24 maxlen: 24
202.152.248.0/24 maxlen: 24
202.152.249.0/24 maxlen: 24
202.152.250.0/24 maxlen: 24
202.152.251.0/24 maxlen: 24
202.152.252.0/24 maxlen: 24
202.152.253.0/24 maxlen: 24
202.152.254.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9186214/C65D5364331A11E4AF2AB37CC4F9AE02/89ufFiAIvWZsv4yZYHgUz6sk1-c.crl
rsync://rpki.apnic.net/member_repository/A9186214/C65D5364331A11E4AF2AB37CC4F9AE02/89ufFiAIvWZsv4yZYHgUz6sk1-c.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/89ufFiAIvWZsv4yZYHgUz6sk1-c.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 15 May 2024 02:42:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13142 (0x3356)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9186214/serialNumber=F3DB9F162008BD666CBF8C99607814CFAB24D7E7
Validity
Not Before: Jan 30 16:12:40 2024 GMT
Not After : Aug 31 00:00:00 2024 GMT
Subject: CN=65b91ff8-2f7a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:fd:2f:27:b3:31:b3:9b:3a:ba:c2:eb:4b:55:
b7:5f:b7:5b:e4:c0:37:3b:04:18:90:f5:22:dc:cc:
20:bc:b5:b0:a5:5c:4a:4b:ff:57:ee:55:64:14:29:
a1:d4:9f:1f:24:a5:27:af:33:40:a3:3c:ab:eb:c4:
52:e5:85:a5:12:20:6c:5a:e0:3f:bd:ba:9f:6b:bc:
7b:3d:32:12:05:14:90:fc:57:cc:dc:ba:a3:93:91:
a8:a8:d4:71:f4:21:3c:1d:70:35:bc:d9:b1:ea:7d:
5f:48:a0:64:79:58:1e:19:35:f3:f8:8b:31:03:86:
fe:cb:d6:fc:fb:f5:d7:24:e0:0c:26:0d:ae:39:eb:
d7:31:67:8c:3b:c8:65:9d:49:66:9a:21:38:8e:fd:
ed:cd:62:ed:07:6e:8c:55:50:c6:44:65:80:23:54:
16:73:15:a9:11:e3:77:5d:ae:f8:d0:3d:9a:40:79:
30:22:b0:6c:4d:cf:9d:07:9a:17:23:ce:f6:94:44:
bc:1f:57:9c:c0:d8:97:18:c5:7c:39:88:88:21:a7:
9f:f4:b9:c8:7b:6d:5c:64:0e:62:00:93:1b:b2:62:
71:38:98:eb:7a:59:87:dd:ad:d1:9b:66:ef:5f:f1:
1f:a6:6d:40:f6:73:9e:ab:cc:86:c1:e9:5e:5d:35:
6b:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:E2:E2:F8:19:88:13:15:8C:A7:BE:F4:6C:0E:A9:92:04:CA:EA:2A
X509v3 Authority Key Identifier:
keyid:F3:DB:9F:16:20:08:BD:66:6C:BF:8C:99:60:78:14:CF:AB:24:D7:E7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9186214/C65D5364331A11E4AF2AB37CC4F9AE02/89ufFiAIvWZsv4yZYHgUz6sk1-c.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/89ufFiAIvWZsv4yZYHgUz6sk1-c.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9186214/C65D5364331A11E4AF2AB37CC4F9AE02/9CC241B2016511EA91E3CF4AC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
112.215.7.0/24
112.215.10.0/23
112.215.18.0/24
112.215.21.0-112.215.22.255
112.215.30.0/24
112.215.33.0-112.215.34.255
112.215.40.0-112.215.42.255
112.215.46.0/24
112.215.49.0/24
112.215.62.0/24
112.215.68.0/23
112.215.77.0-112.215.78.255
112.215.81.0/24
112.215.87.0/24
112.215.89.0/24
112.215.94.0/24
112.215.96.0-112.215.98.255
112.215.100.0/24
112.215.105.0-112.215.108.255
112.215.112.0-112.215.114.255
112.215.116.0/24
112.215.118.0/24
112.215.121.0/24
112.215.129.0/24
112.215.131.0-112.215.132.255
112.215.141.0-112.215.143.255
112.215.159.0/24
112.215.176.0-112.215.178.255
112.215.190.0-112.215.193.255
112.215.195.0/24
112.215.205.0/24
112.215.248.0/24
121.52.25.0/24
121.52.29.0/24
121.52.35.0/24
121.52.40.0-121.52.42.255
121.52.45.0/24
121.52.48.0/21
121.52.59.0-121.52.60.255
121.52.64.0-121.52.68.255
121.52.70.0-121.52.85.255
121.52.87.0-121.52.89.255
121.52.91.0-121.52.95.255
202.152.224.0/23
202.152.230.0/23
202.152.233.0/24
202.152.237.0/24
202.152.244.0/24
202.152.248.0-202.152.254.255
Signature Algorithm: sha256WithRSAEncryption
71:c8:04:1a:42:da:0c:e7:a0:3a:83:79:05:16:4d:9e:64:05:
b5:ba:66:06:dd:69:d9:16:e3:af:7c:f0:54:49:fb:f8:77:30:
9f:1b:38:2f:42:2a:dc:1f:51:47:1d:81:80:06:4e:e9:98:68:
92:0a:85:e0:6b:e0:eb:74:b8:e0:4d:e1:d4:67:e9:a7:21:a1:
4c:59:75:26:16:4d:c2:bb:12:cb:80:b3:99:d2:f5:7c:8f:77:
9c:97:57:83:63:dd:a2:7d:bb:57:03:70:8a:21:af:dd:11:0d:
93:66:99:5d:0d:79:03:c0:36:e3:9a:97:6f:52:d3:0b:38:5d:
34:09:c0:2f:dc:54:bd:a1:aa:c6:bc:6a:df:fa:b5:99:67:09:
8f:3e:8e:47:95:b0:91:e3:d6:c0:37:ff:c9:9d:b8:fa:4e:c4:
6a:55:04:b8:28:05:21:3e:f3:e4:99:cd:64:49:2b:8f:3d:7e:
91:2b:52:65:da:14:82:c1:46:d6:3d:73:ce:67:07:fe:4a:cf:
a5:59:a1:9e:64:63:61:9d:c8:97:b8:68:e7:76:df:44:56:36:
6c:45:c8:93:8b:e9:88:58:20:11:96:80:38:83:a2:1c:3e:e3:
fb:67:b5:c9:99:c0:b5:8f:66:ca:fc:04:da:ec:fc:83:2a:00:
80:99:5e:b1
-----BEGIN CERTIFICATE-----
MIIHKzCCBhOgAwIBAgICM1YwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
ODYyMTQxMTAvBgNVBAUTKEYzREI5RjE2MjAwOEJENjY2Q0JGOEM5OTYwNzgxNENG
QUIyNEQ3RTcwHhcNMjQwMTMwMTYxMjQwWhcNMjQwODMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02NWI5MWZmOC0yZjdhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAzP0vJ7Mxs5s6usLrS1W3X7db5MA3OwQYkPUi3MwgvLWwpVxKS/9X7lVkFCmh
1J8fJKUnrzNAozyr68RS5YWlEiBsWuA/vbqfa7x7PTISBRSQ/FfM3Lqjk5GoqNRx
9CE8HXA1vNmx6n1fSKBkeVgeGTXz+IsxA4b+y9b8+/XXJOAMJg2uOevXMWeMO8hl
nUlmmiE4jv3tzWLtB26MVVDGRGWAI1QWcxWpEeN3Xa740D2aQHkwIrBsTc+dB5oX
I872lES8H1ecwNiXGMV8OYiIIaef9LnIe21cZA5iAJMbsmJxOJjrelmH3a3Rm2bv
X/Efpm1A9nOeq8yGweleXTVr6wIDAQABo4IETzCCBEswHQYDVR0OBBYEFJri4vgZ
iBMVjKe+9GwOqZIEyuoqMB8GA1UdIwQYMBaAFPPbnxYgCL1mbL+MmWB4FM+rJNfn
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NjIxNC9DNjVENTM2NDMz
MUExMUU0QUYyQUIzN0NDNEY5QUUwMi84OXVmRmlBSXZXWnN2NHlaWUhnVXo2c2sx
LWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzg5dWZGaUFJdldac3Y0eVpZSGdVejZzazEtYy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
ODYyMTQvQzY1RDUzNjQzMzFBMTFFNEFGMkFCMzdDQzRGOUFFMDIvOUNDMjQxQjIw
MTY1MTFFQTkxRTNDRjRBQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwggHXBggrBgEFBQcBBwEB
/wSCAcYwggHCMIIBvgQCAAEwggG2AwQAcNcHAwQBcNcKAwQAcNcSMAwDBABw1xUD
BABw1xYDBABw1x4wDAMEAHDXIQMEAHDXIjAMAwQDcNcoAwQAcNcqAwQAcNcuAwQA
cNcxAwQAcNc+AwQBcNdEMAwDBABw100DBABw104DBABw11EDBABw11cDBABw11kD
BABw114wDAMEBXDXYAMEAHDXYgMEAHDXZDAMAwQAcNdpAwQAcNdsMAwDBARw13AD
BABw13IDBABw13QDBABw13YDBABw13kDBABw14EwDAMEAHDXgwMEAHDXhDAMAwQA
cNeNAwQEcNeAAwQAcNefMAwDBARw17ADBABw17IwDAMEAXDXvgMEAXDXwAMEAHDX
wwMEAHDXzQMEAHDX+AMEAHk0GQMEAHk0HQMEAHk0IzAMAwQDeTQoAwQAeTQqAwQA
eTQtAwQDeTQwMAwDBAB5NDsDBAB5NDwwDAMEBnk0QAMEAHk0RDAMAwQBeTRGAwQB
eTRUMAwDBAB5NFcDBAF5NFgwDAMEAHk0WwMEBXk0QAMEAcqY4AMEAcqY5gMEAMqY
6QMEAMqY7QMEAMqY9DAMAwQDypj4AwQAypj+MA0GCSqGSIb3DQEBCwUAA4IBAQBx
yAQaQtoM56A6g3kFFk2eZAW1umYG3WnZFuOvfPBUSfv4dzCfGzgvQircH1FHHYGA
Bk7pmGiSCoXga+DrdLjgTeHUZ+mnIaFMWXUmFk3CuxLLgLOZ0vV8j3ecl1eDY92i
fbtXA3CKIa/dEQ2TZpldDXkDwDbjmpdvUtMLOF00CcAv3FS9oarGvGrf+rWZZwmP
Po5HlbCR49bAN//Jnbj6TsRqVQS4KAUhPvPkmc1kSSuPPX6RK1Jl2hSCwUbWPXPO
Zwf+Ss+lWaGeZGNhnciXuGjndt9EVjZsRciTi+mIWCARloA4g6IcPuP7Z7XJmcC1
j2bK/ATa7PyDKgCAmV6x
-----END CERTIFICATE-----
Generated at Fri May 10 16:38:08 2024 by rpki-client on console-ams.rpki-client.org