Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9186214/C65D5364331A11E4AF2AB37CC4F9AE02/FE63F4649CD511E9A6A86527C4F9AE02.roa
File: FE63F4649CD511E9A6A86527C4F9AE02.roa (raw, json)
Hash identifier: Wbjt3IzUqiF3C/Mwa+0nsEXUm0AncGfafeECCs6m4+k=
Subject key identifier: B7:CB:85:ED:F1:1E:8F:E1:19:A4:0C:62:20:DB:95:81:03:85:DA:4D
Certificate issuer: /CN=A9186214/serialNumber=F3DB9F162008BD666CBF8C99607814CFAB24D7E7
Certificate serial: 3367
Authority key identifier: F3:DB:9F:16:20:08:BD:66:6C:BF:8C:99:60:78:14:CF:AB:24:D7:E7
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/89ufFiAIvWZsv4yZYHgUz6sk1-c.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9186214/C65D5364331A11E4AF2AB37CC4F9AE02/FE63F4649CD511E9A6A86527C4F9AE02.roa
Signing time: Tue 30 Jan 2024 16:12:56 +0000
ROA not before: Tue 30 Jan 2024 16:12:56 +0000
ROA not after: Sat 31 Aug 2024 00:00:00 +0000
asID: 4787
IP address blocks: 45.126.80.0/22 maxlen: 22
101.50.16.0/21 maxlen: 21
101.50.16.0/24 maxlen: 24
101.50.24.0/21 maxlen: 21
101.50.24.0/24 maxlen: 24
101.128.64.0/18 maxlen: 24
103.61.248.0/22 maxlen: 22
103.86.148.0/22 maxlen: 22
103.86.148.0/23 maxlen: 23
103.86.149.0/24 maxlen: 24
103.86.150.0/23 maxlen: 23
103.86.150.0/24 maxlen: 24
103.86.152.0/22 maxlen: 22
103.86.152.0/24 maxlen: 24
103.86.156.0/22 maxlen: 22
103.86.156.0/24 maxlen: 24
103.86.160.0/22 maxlen: 22
103.87.76.0/22 maxlen: 22
103.87.76.0/24 maxlen: 24
103.87.80.0/22 maxlen: 22
103.87.80.0/24 maxlen: 24
103.87.84.0/22 maxlen: 22
103.87.84.0/24 maxlen: 24
103.87.152.0/22 maxlen: 22
103.87.152.0/24 maxlen: 24
103.109.152.0/22 maxlen: 22
103.109.152.0/24 maxlen: 24
103.109.156.0/22 maxlen: 22
103.109.156.0/24 maxlen: 24
103.109.160.0/22 maxlen: 22
103.109.160.0/24 maxlen: 24
103.109.164.0/22 maxlen: 22
103.109.164.0/24 maxlen: 24
103.109.168.0/22 maxlen: 22
103.109.168.0/24 maxlen: 24
103.109.172.0/22 maxlen: 22
103.109.172.0/24 maxlen: 24
103.109.188.0/22 maxlen: 22
103.109.188.0/24 maxlen: 24
103.109.192.0/22 maxlen: 22
103.109.192.0/24 maxlen: 24
103.109.196.0/22 maxlen: 22
103.109.196.0/24 maxlen: 24
103.109.200.0/22 maxlen: 22
103.109.200.0/24 maxlen: 24
103.111.184.0/22 maxlen: 22
103.111.184.0/24 maxlen: 24
103.111.188.0/22 maxlen: 22
103.111.188.0/24 maxlen: 24
103.111.200.0/22 maxlen: 22
103.111.200.0/24 maxlen: 24
103.111.204.0/22 maxlen: 22
103.111.204.0/24 maxlen: 24
103.111.208.0/22 maxlen: 22
103.111.208.0/24 maxlen: 24
103.111.212.0/22 maxlen: 22
103.111.212.0/24 maxlen: 24
103.113.48.0/22 maxlen: 22
103.113.48.0/24 maxlen: 24
103.113.52.0/22 maxlen: 22
103.113.52.0/24 maxlen: 24
103.113.72.0/22 maxlen: 22
103.113.72.0/24 maxlen: 24
103.113.76.0/22 maxlen: 22
103.113.76.0/24 maxlen: 24
103.113.116.0/22 maxlen: 22
103.113.116.0/24 maxlen: 24
103.113.120.0/22 maxlen: 22
103.113.120.0/24 maxlen: 24
103.113.128.0/22 maxlen: 22
103.113.128.0/24 maxlen: 24
103.113.132.0/22 maxlen: 22
103.113.132.0/24 maxlen: 24
103.114.80.0/22 maxlen: 22
103.114.80.0/24 maxlen: 24
103.114.84.0/22 maxlen: 22
103.114.84.0/24 maxlen: 24
103.114.108.0/22 maxlen: 22
103.114.108.0/24 maxlen: 24
103.114.112.0/22 maxlen: 22
103.114.112.0/24 maxlen: 24
103.114.116.0/22 maxlen: 22
103.114.116.0/24 maxlen: 24
103.114.120.0/22 maxlen: 22
103.114.120.0/24 maxlen: 24
103.114.136.0/22 maxlen: 22
103.114.136.0/24 maxlen: 24
103.114.140.0/22 maxlen: 22
103.118.96.0/22 maxlen: 22
103.118.96.0/24 maxlen: 24
103.118.100.0/22 maxlen: 22
103.118.100.0/24 maxlen: 24
103.118.104.0/22 maxlen: 22
103.118.104.0/24 maxlen: 24
103.118.108.0/22 maxlen: 22
103.118.108.0/24 maxlen: 24
103.118.128.0/22 maxlen: 22
103.118.128.0/24 maxlen: 24
103.118.132.0/22 maxlen: 22
103.118.132.0/24 maxlen: 24
103.118.136.0/22 maxlen: 22
103.118.136.0/24 maxlen: 24
103.118.140.0/22 maxlen: 22
103.118.140.0/24 maxlen: 24
103.118.224.0/22 maxlen: 22
103.118.224.0/24 maxlen: 24
103.118.228.0/22 maxlen: 22
103.118.228.0/24 maxlen: 24
103.118.232.0/22 maxlen: 22
103.118.232.0/24 maxlen: 24
103.118.236.0/22 maxlen: 22
103.118.236.0/24 maxlen: 24
103.119.4.0/22 maxlen: 22
103.119.4.0/24 maxlen: 24
103.119.8.0/22 maxlen: 22
103.119.8.0/24 maxlen: 24
103.119.36.0/22 maxlen: 22
103.119.36.0/24 maxlen: 24
103.119.40.0/22 maxlen: 22
103.119.40.0/24 maxlen: 24
103.121.96.0/22 maxlen: 22
103.121.96.0/24 maxlen: 24
103.121.100.0/22 maxlen: 22
103.121.100.0/24 maxlen: 24
103.121.108.0/22 maxlen: 22
103.121.108.0/24 maxlen: 24
103.121.132.0/22 maxlen: 22
103.121.132.0/24 maxlen: 24
103.121.136.0/22 maxlen: 22
103.121.136.0/24 maxlen: 24
103.121.144.0/22 maxlen: 22
103.121.144.0/24 maxlen: 24
103.121.168.0/22 maxlen: 22
103.121.168.0/24 maxlen: 24
103.121.180.0/22 maxlen: 22
103.121.180.0/24 maxlen: 24
103.121.244.0/22 maxlen: 22
103.121.244.0/24 maxlen: 24
103.129.4.0/22 maxlen: 22
103.129.4.0/24 maxlen: 24
103.129.20.0/22 maxlen: 22
103.129.20.0/24 maxlen: 24
103.129.24.0/22 maxlen: 22
103.129.24.0/24 maxlen: 24
103.129.40.0/22 maxlen: 22
103.129.40.0/24 maxlen: 24
103.129.48.0/22 maxlen: 22
103.129.48.0/24 maxlen: 24
103.129.56.0/22 maxlen: 22
103.129.56.0/24 maxlen: 24
103.129.68.0/22 maxlen: 22
103.129.68.0/24 maxlen: 24
116.206.232.0/22 maxlen: 22
116.206.232.0/24 maxlen: 24
116.206.236.0/22 maxlen: 22
116.206.236.0/24 maxlen: 24
116.206.240.0/22 maxlen: 22
116.206.240.0/24 maxlen: 24
125.208.128.0/18 maxlen: 18
175.158.32.0/19 maxlen: 19
175.158.32.0/21 maxlen: 21
175.158.32.0/22 maxlen: 22
175.158.32.0/24 maxlen: 24
202.158.0.0/17 maxlen: 17
210.210.128.0/18 maxlen: 24
2001:d10::/48 maxlen: 48
2403:3440::/32 maxlen: 32
2403:3440::/48 maxlen: 48
2403:34c0::/32 maxlen: 32
2403:34c0::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9186214/C65D5364331A11E4AF2AB37CC4F9AE02/89ufFiAIvWZsv4yZYHgUz6sk1-c.crl
rsync://rpki.apnic.net/member_repository/A9186214/C65D5364331A11E4AF2AB37CC4F9AE02/89ufFiAIvWZsv4yZYHgUz6sk1-c.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/89ufFiAIvWZsv4yZYHgUz6sk1-c.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 09 May 2024 15:54:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13159 (0x3367)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9186214/serialNumber=F3DB9F162008BD666CBF8C99607814CFAB24D7E7
Validity
Not Before: Jan 30 16:12:56 2024 GMT
Not After : Aug 31 00:00:00 2024 GMT
Subject: CN=65b92007-c8fd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:9e:8b:8a:29:06:01:e7:60:57:ae:a1:fc:2c:
ec:7e:ca:78:3c:e7:d9:2d:7a:9d:ab:56:23:d2:3a:
5b:27:17:02:66:53:f7:6b:4b:8e:df:64:a0:48:26:
b1:de:13:9c:b0:fc:b3:c7:33:f8:a0:8a:bc:eb:b6:
9e:11:92:cf:cb:db:f6:0d:97:85:f0:6d:f4:e9:27:
ea:59:34:3c:a1:83:6e:7e:97:40:e8:ed:5f:0f:ff:
06:a8:e7:71:e1:e0:14:74:9d:73:e8:98:5e:35:0c:
31:ad:21:76:40:c4:7b:63:1b:51:b7:dc:09:2e:4a:
0f:fc:d0:18:31:37:1d:90:32:59:ae:7c:70:1e:25:
9a:0f:7e:5e:4f:ca:5f:97:92:0a:93:42:76:be:4a:
14:a3:c7:3f:14:0f:7b:02:5e:89:b7:6b:bf:a8:04:
83:49:9a:cb:66:50:f5:08:f1:77:4b:91:db:1f:0e:
7e:a2:01:aa:a4:f9:14:2a:70:42:a7:67:60:4d:e7:
66:d0:88:16:d5:a5:e1:e8:59:76:e4:e3:87:65:84:
38:a0:84:53:c5:7b:c2:10:fc:94:39:10:71:37:2c:
7b:bb:00:b7:a6:0a:bd:56:0c:ce:a5:1a:48:d9:16:
b1:bb:95:b8:99:10:93:c8:f0:7c:ec:70:17:b7:0d:
a2:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:CB:85:ED:F1:1E:8F:E1:19:A4:0C:62:20:DB:95:81:03:85:DA:4D
X509v3 Authority Key Identifier:
keyid:F3:DB:9F:16:20:08:BD:66:6C:BF:8C:99:60:78:14:CF:AB:24:D7:E7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9186214/C65D5364331A11E4AF2AB37CC4F9AE02/89ufFiAIvWZsv4yZYHgUz6sk1-c.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/89ufFiAIvWZsv4yZYHgUz6sk1-c.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9186214/C65D5364331A11E4AF2AB37CC4F9AE02/FE63F4649CD511E9A6A86527C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.126.80.0/22
101.50.16.0/20
101.128.64.0/18
103.61.248.0/22
103.86.148.0-103.86.163.255
103.87.76.0-103.87.87.255
103.87.152.0/22
103.109.152.0-103.109.175.255
103.109.188.0-103.109.203.255
103.111.184.0/21
103.111.200.0-103.111.215.255
103.113.48.0/21
103.113.72.0/21
103.113.116.0-103.113.123.255
103.113.128.0/21
103.114.80.0/21
103.114.108.0-103.114.123.255
103.114.136.0/21
103.118.96.0/20
103.118.128.0/20
103.118.224.0/20
103.119.4.0-103.119.11.255
103.119.36.0-103.119.43.255
103.121.96.0/21
103.121.108.0/22
103.121.132.0-103.121.139.255
103.121.144.0/22
103.121.168.0/22
103.121.180.0/22
103.121.244.0/22
103.129.4.0/22
103.129.20.0-103.129.27.255
103.129.40.0/22
103.129.48.0/22
103.129.56.0/22
103.129.68.0/22
116.206.232.0-116.206.243.255
125.208.128.0/18
175.158.32.0/19
202.158.0.0/17
210.210.128.0/18
IPv6:
2001:d10::/48
2403:3440::/32
2403:34c0::/32
Signature Algorithm: sha256WithRSAEncryption
3f:db:72:32:c9:86:56:83:81:03:07:70:bb:45:d6:b3:c8:06:
d2:ce:bd:b5:d9:ce:86:67:03:43:df:6b:a1:73:84:21:4d:53:
84:1e:f5:96:3c:3c:8e:88:7d:e3:d6:d7:d1:83:d7:ed:3f:d5:
49:ab:4b:0c:4b:75:08:a0:19:f3:b8:80:45:e9:d8:1b:9f:d5:
94:6e:e6:77:b9:ce:80:a4:e4:ea:be:24:1c:d1:40:7d:ea:34:
c3:a6:ba:bc:ad:fa:29:dd:ea:49:47:d2:34:6f:9f:f2:34:06:
04:30:ee:42:62:61:c3:d6:07:e3:6b:37:56:b3:c1:7b:0e:1e:
71:81:32:1f:a4:62:b7:d3:6c:c2:4a:72:e5:99:1b:b6:d6:dc:
47:0d:e3:30:84:76:63:12:f0:a4:90:8e:10:59:1d:39:d4:36:
2d:9d:57:61:b2:d1:65:fc:89:c7:ea:64:04:96:54:11:ca:ea:
cc:23:7b:53:1d:07:59:df:7f:cb:d9:dd:9e:6a:24:f6:7e:7c:
d5:6d:04:22:e8:df:18:fe:fa:97:01:91:90:1c:cb:22:7f:07:
02:ec:f6:3c:79:e8:9b:ee:47:2b:31:b3:c0:75:d2:1a:51:72:
55:4e:fd:f0:14:29:1a:1c:87:9e:32:56:da:d9:07:c6:f1:17:
27:7f:16:9f
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Thu May 2 17:18:31 2024 by rpki-client on console-ams.rpki-client.org