Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9186E8A/3B476E7C2DFF11EB868A9135C4F9AE02/ECB6EF462FC311EB8B442B0DC4F9AE02.roa
File: ECB6EF462FC311EB8B442B0DC4F9AE02.roa (raw, json)
Hash identifier: jQyPrwoXsSmi3M2tyYMpOHb4oWp30e7X7cQmklX25kw=
Subject key identifier: 23:ED:24:5B:65:3D:EB:F9:16:09:2C:54:5A:2A:D0:EC:69:98:BA:69
Certificate issuer: /CN=A9186E8A/serialNumber=A9BCCA6D34D3D5F1EFF8BBE783D49773813E5EF8
Certificate serial: 074F
Authority key identifier: A9:BC:CA:6D:34:D3:D5:F1:EF:F8:BB:E7:83:D4:97:73:81:3E:5E:F8
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qbzKbTTT1fHv-Lvng9SXc4E-Xvg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9186E8A/3B476E7C2DFF11EB868A9135C4F9AE02/ECB6EF462FC311EB8B442B0DC4F9AE02.roa
Signing time: Mon 23 Dec 2024 10:22:08 +0000
ROA not before: Mon 23 Dec 2024 10:22:08 +0000
ROA not after: Wed 28 May 2025 00:00:00 +0000
asID: 135377
IP address blocks: 45.249.244.0/24 maxlen: 24
45.249.245.0/24 maxlen: 24
45.249.246.0/24 maxlen: 24
45.249.247.0/24 maxlen: 24
101.36.96.0/24 maxlen: 24
101.36.97.0/24 maxlen: 24
101.36.98.0/24 maxlen: 24
101.36.99.0/24 maxlen: 24
101.36.100.0/24 maxlen: 24
101.36.101.0/24 maxlen: 24
101.36.102.0/24 maxlen: 24
101.36.103.0/24 maxlen: 24
101.36.104.0/24 maxlen: 24
101.36.105.0/24 maxlen: 24
101.36.106.0/24 maxlen: 24
101.36.107.0/24 maxlen: 24
101.36.108.0/24 maxlen: 24
101.36.109.0/24 maxlen: 24
101.36.110.0/24 maxlen: 24
101.36.111.0/24 maxlen: 24
101.36.112.0/24 maxlen: 24
101.36.113.0/24 maxlen: 24
101.36.114.0/24 maxlen: 24
101.36.115.0/24 maxlen: 24
101.36.116.0/24 maxlen: 24
101.36.117.0/24 maxlen: 24
101.36.118.0/24 maxlen: 24
101.36.119.0/24 maxlen: 24
101.36.120.0/24 maxlen: 24
101.36.121.0/24 maxlen: 24
101.36.122.0/24 maxlen: 24
101.36.123.0/24 maxlen: 24
101.36.124.0/24 maxlen: 24
101.36.125.0/24 maxlen: 24
101.36.126.0/24 maxlen: 24
101.36.127.0/24 maxlen: 24
103.149.26.0/24 maxlen: 24
103.149.27.0/24 maxlen: 24
103.218.240.0/24 maxlen: 24
103.218.241.0/24 maxlen: 24
103.218.242.0/24 maxlen: 24
103.218.243.0/24 maxlen: 24
103.234.60.0/24 maxlen: 24
103.234.61.0/24 maxlen: 24
103.234.62.0/24 maxlen: 24
103.234.63.0/24 maxlen: 24
118.26.36.0/24 maxlen: 24
118.26.37.0/24 maxlen: 24
118.26.38.0/24 maxlen: 24
118.26.39.0/24 maxlen: 24
118.26.104.0/24 maxlen: 24
118.26.105.0/24 maxlen: 24
118.26.106.0/24 maxlen: 24
118.26.107.0/24 maxlen: 24
118.26.108.0/24 maxlen: 24
118.26.109.0/24 maxlen: 24
118.26.110.0/24 maxlen: 24
118.26.111.0/24 maxlen: 24
118.193.32.0/24 maxlen: 24
118.193.33.0/24 maxlen: 24
118.193.34.0/24 maxlen: 24
118.193.35.0/24 maxlen: 24
118.193.36.0/24 maxlen: 24
118.193.37.0/24 maxlen: 24
118.193.38.0/24 maxlen: 24
118.193.39.0/24 maxlen: 24
118.193.40.0/24 maxlen: 24
118.193.41.0/24 maxlen: 24
118.193.42.0/24 maxlen: 24
118.193.43.0/24 maxlen: 24
118.193.44.0/24 maxlen: 24
118.193.45.0/24 maxlen: 24
118.193.46.0/24 maxlen: 24
118.193.47.0/24 maxlen: 24
118.193.56.0/24 maxlen: 24
118.193.57.0/24 maxlen: 24
118.193.58.0/24 maxlen: 24
118.193.59.0/24 maxlen: 24
118.193.60.0/24 maxlen: 24
118.193.61.0/24 maxlen: 24
118.193.62.0/24 maxlen: 24
118.193.63.0/24 maxlen: 24
118.193.64.0/24 maxlen: 24
118.193.65.0/24 maxlen: 24
118.193.66.0/24 maxlen: 24
118.193.67.0/24 maxlen: 24
118.193.68.0/24 maxlen: 24
118.193.69.0/24 maxlen: 24
118.193.70.0/24 maxlen: 24
118.193.71.0/24 maxlen: 24
118.193.72.0/24 maxlen: 24
118.193.73.0/24 maxlen: 24
118.193.74.0/24 maxlen: 24
118.193.75.0/24 maxlen: 24
118.193.76.0/24 maxlen: 24
118.193.77.0/24 maxlen: 24
118.193.78.0/24 maxlen: 24
118.193.79.0/24 maxlen: 24
118.194.228.0/24 maxlen: 24
118.194.229.0/24 maxlen: 24
118.194.230.0/24 maxlen: 24
118.194.231.0/24 maxlen: 24
118.194.232.0/24 maxlen: 24
118.194.233.0/24 maxlen: 24
118.194.234.0/24 maxlen: 24
118.194.235.0/24 maxlen: 24
118.194.236.0/24 maxlen: 24
118.194.237.0/24 maxlen: 24
118.194.238.0/24 maxlen: 24
118.194.239.0/24 maxlen: 24
118.194.248.0/24 maxlen: 24
118.194.249.0/24 maxlen: 24
118.194.250.0/24 maxlen: 24
118.194.251.0/24 maxlen: 24
118.194.252.0/24 maxlen: 24
118.194.253.0/24 maxlen: 24
118.194.254.0/24 maxlen: 24
118.194.255.0/24 maxlen: 24
123.58.192.0/24 maxlen: 24
123.58.193.0/24 maxlen: 24
123.58.194.0/24 maxlen: 24
123.58.195.0/24 maxlen: 24
123.58.196.0/24 maxlen: 24
123.58.197.0/24 maxlen: 24
123.58.198.0/24 maxlen: 24
123.58.199.0/24 maxlen: 24
123.58.200.0/24 maxlen: 24
123.58.201.0/24 maxlen: 24
123.58.202.0/24 maxlen: 24
123.58.203.0/24 maxlen: 24
123.58.204.0/24 maxlen: 24
123.58.205.0/24 maxlen: 24
123.58.206.0/24 maxlen: 24
123.58.207.0/24 maxlen: 24
123.58.208.0/24 maxlen: 24
123.58.209.0/24 maxlen: 24
123.58.210.0/24 maxlen: 24
123.58.211.0/24 maxlen: 24
123.58.212.0/24 maxlen: 24
123.58.213.0/24 maxlen: 24
123.58.214.0/24 maxlen: 24
123.58.215.0/24 maxlen: 24
123.58.216.0/24 maxlen: 24
123.58.217.0/24 maxlen: 24
123.58.218.0/24 maxlen: 24
123.58.219.0/24 maxlen: 24
123.58.220.0/24 maxlen: 24
123.58.221.0/24 maxlen: 24
123.58.222.0/24 maxlen: 24
123.58.223.0/24 maxlen: 24
150.107.36.0/24 maxlen: 24
150.107.37.0/24 maxlen: 24
150.107.38.0/24 maxlen: 24
150.107.39.0/24 maxlen: 24
2001:df3:9500::/48 maxlen: 48
2404:82c0::/42 maxlen: 42
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9186E8A/3B476E7C2DFF11EB868A9135C4F9AE02/qbzKbTTT1fHv-Lvng9SXc4E-Xvg.crl
rsync://rpki.apnic.net/member_repository/A9186E8A/3B476E7C2DFF11EB868A9135C4F9AE02/qbzKbTTT1fHv-Lvng9SXc4E-Xvg.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qbzKbTTT1fHv-Lvng9SXc4E-Xvg.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 11 Apr 2025 21:57:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1871 (0x74f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9186E8A
Validity
Not Before: Dec 23 10:22:08 2024 GMT
Not After : May 28 00:00:00 2025 GMT
Subject: CN=676939cf-8302
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:6e:f2:13:3f:23:0f:6d:53:b6:4a:ec:55:17:
fd:eb:92:70:cf:ba:d1:f2:6e:83:e2:56:6e:4d:25:
e0:80:4c:f9:e2:37:06:ad:28:2b:6e:7d:58:7b:d9:
2b:62:6b:11:f2:bc:67:37:42:68:66:16:d4:ba:6c:
23:6f:93:cf:5e:13:4c:c0:c9:ba:bd:1b:88:4a:5a:
51:ca:d1:b5:90:a0:57:61:68:53:2b:f6:15:ec:d3:
f1:72:7d:59:ab:11:f9:ae:db:02:78:47:dc:3e:78:
89:ee:26:b8:67:1a:c5:01:3f:2e:20:d5:f3:06:af:
37:0e:9c:fa:78:c5:02:e8:f2:8f:ce:19:51:30:6c:
28:d2:9b:c1:a3:c1:4c:81:35:6b:4e:1d:91:95:8a:
89:5e:43:42:86:89:d5:e0:46:07:74:09:40:4a:7b:
f6:53:b7:9a:38:57:b0:cb:05:5e:4c:5e:18:d4:1e:
84:61:46:e3:7c:af:6e:7f:3d:1c:df:45:ca:d2:eb:
98:9d:a9:ba:03:f3:74:bf:fe:2e:9f:7f:92:90:78:
af:34:bc:75:36:69:e0:d1:ef:4e:a1:93:20:25:d5:
48:d6:c3:10:dd:ae:95:7b:33:a9:42:25:78:23:24:
a8:2f:de:9d:4b:aa:e6:fa:5f:ea:8b:ea:14:b8:c7:
d2:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:ED:24:5B:65:3D:EB:F9:16:09:2C:54:5A:2A:D0:EC:69:98:BA:69
X509v3 Authority Key Identifier:
keyid:A9:BC:CA:6D:34:D3:D5:F1:EF:F8:BB:E7:83:D4:97:73:81:3E:5E:F8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9186E8A/3B476E7C2DFF11EB868A9135C4F9AE02/qbzKbTTT1fHv-Lvng9SXc4E-Xvg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qbzKbTTT1fHv-Lvng9SXc4E-Xvg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9186E8A/3B476E7C2DFF11EB868A9135C4F9AE02/ECB6EF462FC311EB8B442B0DC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.249.244.0/22
101.36.96.0/19
103.149.26.0/23
103.218.240.0/22
103.234.60.0/22
118.26.36.0/22
118.26.104.0/21
118.193.32.0/20
118.193.56.0-118.193.79.255
118.194.228.0-118.194.239.255
118.194.248.0/21
123.58.192.0/19
150.107.36.0/22
IPv6:
2001:df3:9500::/48
2404:82c0::/42
Signature Algorithm: sha256WithRSAEncryption
d6:76:73:cb:cc:9a:dd:c2:2e:1e:9d:13:b8:57:d9:8b:57:02:
37:5e:68:a9:5b:e7:09:a2:a4:b1:85:c3:1f:0c:5c:4b:cd:1c:
fe:14:57:12:c8:c3:29:03:85:12:88:e0:fb:a0:32:26:e3:2a:
3f:a8:19:73:cd:fc:cf:e5:1b:b2:d9:fe:90:67:31:3c:a7:b6:
a6:85:7f:1a:b5:dc:c6:73:72:c6:eb:bd:6f:c5:a7:8f:c8:5e:
45:4c:a5:dd:7b:ba:b5:17:a9:70:d2:83:91:b7:fe:47:62:88:
c6:eb:2f:20:ed:2b:2b:49:95:ff:87:a3:a4:50:fd:f6:22:44:
6a:97:8f:af:ec:c7:bf:b0:f4:81:49:d6:9b:a2:10:81:d8:2b:
5f:e5:4f:71:71:be:85:dd:03:f2:cd:88:54:a7:c6:f9:2f:61:
2a:23:ad:10:32:de:aa:1c:80:fd:f4:9b:29:1d:07:40:cf:82:
42:36:82:2a:3a:85:e6:43:ea:a8:3a:6f:4e:8b:9d:bc:b4:49:
c3:1e:fb:d1:89:ae:6f:05:63:5f:2f:c4:02:c1:7b:d6:85:57:
24:19:b8:45:9d:f2:e6:21:22:fe:4a:12:36:fc:de:8d:1c:86:
ac:9e:60:d4:b2:fc:ad:10:94:42:89:88:65:89:00:55:6f:79:
b9:c5:d2:20
-----BEGIN CERTIFICATE-----
MIIF5jCCBM6gAwIBAgICB08wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
ODZFOEExMTAvBgNVBAUTKEE5QkNDQTZEMzREM0Q1RjFFRkY4QkJFNzgzRDQ5Nzcz
ODEzRTVFRjgwHhcNMjQxMjIzMTAyMjA4WhcNMjUwNTI4MDAwMDAwWjAYMRYwFAYD
VQQDEw02NzY5MzljZi04MzAyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEApG7yEz8jD21TtkrsVRf965Jwz7rR8m6D4lZuTSXggEz54jcGrSgrbn1Ye9kr
YmsR8rxnN0JoZhbUumwjb5PPXhNMwMm6vRuISlpRytG1kKBXYWhTK/YV7NPxcn1Z
qxH5rtsCeEfcPniJ7ia4ZxrFAT8uINXzBq83Dpz6eMUC6PKPzhlRMGwo0pvBo8FM
gTVrTh2RlYqJXkNChonV4EYHdAlASnv2U7eaOFewywVeTF4Y1B6EYUbjfK9ufz0c
30XK0uuYnam6A/N0v/4un3+SkHivNLx1Nmng0e9OoZMgJdVI1sMQ3a6VezOpQiV4
IySoL96dS6rm+l/qi+oUuMfSmQIDAQABo4IDCjCCAwYwHQYDVR0OBBYEFCPtJFtl
Pev5FgksVFoq0OxpmLppMB8GA1UdIwQYMBaAFKm8ym0009Xx7/i754PUl3OBPl74
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NkU4QS8zQjQ3NkU3QzJE
RkYxMUVCODY4QTkxMzVDNEY5QUUwMi9xYnpLYlRUVDFmSHYtTHZuZzlTWGM0RS1Y
dmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3FiektiVFRUMWZIdi1Mdm5nOVNYYzRFLVh2Zy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
ODZFOEEvM0I0NzZFN0MyREZGMTFFQjg2OEE5MTM1QzRGOUFFMDIvRUNCNkVGNDYy
RkMzMTFFQjhCNDQyQjBEQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwgZMGCCsGAQUFBwEHAQH/
BIGDMIGAMGQEAgABMF4DBAIt+fQDBAVlJGADBAFnlRoDBAJn2vADBAJn6jwDBAJ2
GiQDBAN2GmgDBAR2wSAwDAMEA3bBOAMEBHbBQDAMAwQCdsLkAwQEdsLgAwQDdsL4
AwQFezrAAwQClmskMBgEAgACMBIDBwAgAQ3zlQADBwYkBILAAAAwDQYJKoZIhvcN
AQELBQADggEBANZ2c8vMmt3CLh6dE7hX2YtXAjdeaKlb5wmipLGFwx8MXEvNHP4U
VxLIwykDhRKI4PugMibjKj+oGXPN/M/lG7LZ/pBnMTyntqaFfxq13MZzcsbrvW/F
p4/IXkVMpd17urUXqXDSg5G3/kdiiMbrLyDtKytJlf+Ho6RQ/fYiRGqXj6/sx7+w
9IFJ1puiEIHYK1/lT3FxvoXdA/LNiFSnxvkvYSojrRAy3qocgP30mykdB0DPgkI2
gio6heZD6qg6b06Lnby0ScMe+9GJrm8FY18vxALBe9aFVyQZuEWd8uYhIv5KEjb8
3o0chqyeYNSy/K0QlEKJiGWJAFVvebnF0iA=
-----END CERTIFICATE-----
Generated at Sat Apr 5 07:17:10 2025 by rpki-client