Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/30E551CE856711EF9BF1585BC4F9AE02.roa
File: 30E551CE856711EF9BF1585BC4F9AE02.roa (raw, json)
Hash identifier: 8omhX+65UgKvJkrGrDdqIfMfXvsaLxI622akT1ifn2k=
Subject key identifier: C7:23:96:C7:E9:49:EC:B2:1F:2B:3D:B0:65:48:9F:21:C9:04:1D:94
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: 9B56
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/30E551CE856711EF9BF1585BC4F9AE02.roa
Signing time: Tue 08 Oct 2024 11:19:32 +0000
ROA not before: Tue 08 Oct 2024 11:19:32 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 133982
IP address blocks: 45.118.156.0/24 maxlen: 24
45.118.157.0/24 maxlen: 24
45.118.158.0/24 maxlen: 24
45.118.159.0/24 maxlen: 24
103.46.200.0/24 maxlen: 24
103.46.201.0/24 maxlen: 24
103.46.202.0/24 maxlen: 24
103.46.203.0/24 maxlen: 24
103.48.196.0/24 maxlen: 24
103.48.197.0/24 maxlen: 24
103.48.198.0/24 maxlen: 24
103.48.199.0/24 maxlen: 24
103.56.228.0/24 maxlen: 24
103.56.229.0/24 maxlen: 24
103.56.230.0/24 maxlen: 24
103.56.231.0/24 maxlen: 24
103.57.84.0/22 maxlen: 24
103.85.143.0/24 maxlen: 24
103.87.56.0/24 maxlen: 24
103.87.57.0/24 maxlen: 24
103.87.58.0/24 maxlen: 24
103.87.59.0/24 maxlen: 24
103.92.40.0/22 maxlen: 24
103.95.80.0/24 maxlen: 24
103.95.81.0/24 maxlen: 24
103.95.82.0/24 maxlen: 24
103.95.83.0/24 maxlen: 24
103.108.4.0/24 maxlen: 24
103.108.5.0/24 maxlen: 24
103.108.6.0/24 maxlen: 24
103.108.7.0/24 maxlen: 24
103.110.48.0/24 maxlen: 24
103.110.49.0/24 maxlen: 24
103.120.50.0/24 maxlen: 24
103.120.51.0/24 maxlen: 24
103.139.56.0/24 maxlen: 24
103.157.227.0/24 maxlen: 24
103.160.26.0/23 maxlen: 24
103.161.56.0/23 maxlen: 24
103.164.188.0/24 maxlen: 24
103.170.80.0/23 maxlen: 24
103.172.72.0/23 maxlen: 24
103.177.120.0/23 maxlen: 24
103.211.12.0/24 maxlen: 24
103.211.13.0/24 maxlen: 24
103.211.14.0/24 maxlen: 24
103.211.15.0/24 maxlen: 24
103.211.16.0/24 maxlen: 24
103.211.17.0/24 maxlen: 24
103.211.18.0/24 maxlen: 24
103.211.19.0/24 maxlen: 24
103.211.52.0/24 maxlen: 24
103.211.53.0/24 maxlen: 24
103.211.54.0/24 maxlen: 24
103.211.55.0/24 maxlen: 24
103.212.144.0/24 maxlen: 24
103.212.145.0/24 maxlen: 24
103.212.146.0/24 maxlen: 24
103.212.147.0/24 maxlen: 24
103.212.156.0/24 maxlen: 24
103.212.157.0/24 maxlen: 24
103.212.158.0/24 maxlen: 24
103.212.159.0/24 maxlen: 24
103.214.60.0/24 maxlen: 24
103.214.61.0/24 maxlen: 24
103.214.62.0/24 maxlen: 24
103.214.63.0/24 maxlen: 24
110.235.216.0/22 maxlen: 24
110.235.224.0/24 maxlen: 24
110.235.225.0/24 maxlen: 24
110.235.226.0/24 maxlen: 24
110.235.227.0/24 maxlen: 24
110.235.228.0/24 maxlen: 24
110.235.229.0/24 maxlen: 24
110.235.230.0/24 maxlen: 24
110.235.231.0/24 maxlen: 24
110.235.232.0/24 maxlen: 24
110.235.233.0/24 maxlen: 24
110.235.234.0/24 maxlen: 24
110.235.235.0/24 maxlen: 24
110.235.236.0/24 maxlen: 24
110.235.237.0/24 maxlen: 24
110.235.238.0/24 maxlen: 24
110.235.239.0/24 maxlen: 24
139.5.240.0/24 maxlen: 24
139.5.241.0/24 maxlen: 24
139.5.242.0/24 maxlen: 24
139.5.243.0/24 maxlen: 24
139.5.248.0/24 maxlen: 24
139.5.249.0/24 maxlen: 24
139.5.250.0/24 maxlen: 24
139.5.251.0/24 maxlen: 24
139.5.252.0/22 maxlen: 24
144.48.72.0/22 maxlen: 24
146.196.32.0/22 maxlen: 24
146.196.36.0/24 maxlen: 24
146.196.37.0/24 maxlen: 24
146.196.38.0/24 maxlen: 24
146.196.39.0/24 maxlen: 24
160.202.36.0/22 maxlen: 24
192.140.152.0/24 maxlen: 24
192.140.153.0/24 maxlen: 24
192.140.154.0/24 maxlen: 24
192.140.155.0/24 maxlen: 24
202.173.124.0/22 maxlen: 24
2401:9640::/32 maxlen: 32
2401:9640:800::/37 maxlen: 37
2401:9640:1000::/37 maxlen: 37
2401:9640:1800::/37 maxlen: 37
2401:9640:2000::/37 maxlen: 37
2401:9640:2800::/37 maxlen: 37
2401:9640:3000::/37 maxlen: 37
2401:9640:3800::/37 maxlen: 37
2401:9640:4000::/37 maxlen: 37
2401:9640:4800::/37 maxlen: 37
2401:9640:5000::/37 maxlen: 37
2401:9640:5800::/37 maxlen: 37
2401:9640:6000::/37 maxlen: 37
2401:9640:6800::/37 maxlen: 37
2401:9640:7000::/37 maxlen: 37
2401:9640:7800::/37 maxlen: 37
2401:9640:8000::/37 maxlen: 37
2401:9640:8800::/37 maxlen: 37
2401:9640:9000::/37 maxlen: 37
2401:9640:9800::/37 maxlen: 37
2401:9640:a000::/37 maxlen: 37
2401:9640:a800::/37 maxlen: 37
2401:9640:b000::/37 maxlen: 37
2401:9640:b800::/37 maxlen: 37
2401:9640:c000::/37 maxlen: 37
2401:9640:c800::/37 maxlen: 37
2401:9640:d000::/37 maxlen: 37
2401:9640:d800::/37 maxlen: 37
2401:9640:e000::/37 maxlen: 37
2401:9640:e800::/37 maxlen: 37
2401:9640:f000::/37 maxlen: 37
2401:9640:f800::/37 maxlen: 37
2407:aec0::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 29 Nov 2024 06:14:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 39766 (0x9b56)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Validity
Not Before: Oct 8 11:19:32 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=67051544-93ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:22:7c:db:ef:63:53:e1:e3:bd:31:51:4b:e5:
6e:ce:b3:70:ea:55:4c:27:b0:7d:32:0b:82:4b:83:
19:4a:40:2a:40:a0:3b:0e:4a:9a:dc:6b:1d:37:6f:
af:75:1c:64:3d:3f:7b:c5:e1:cd:0f:97:f8:aa:48:
19:c2:7c:38:9a:35:45:cd:a5:d0:c6:33:1c:bd:30:
83:1a:ff:c2:b5:9f:ec:f2:3e:5c:37:c4:76:4e:54:
7b:f3:aa:90:50:c7:48:9d:6f:13:b9:2b:2e:c3:a2:
fe:7d:64:60:a6:fc:8c:26:03:99:83:3c:9e:17:1b:
5d:82:94:3a:9d:d7:2a:7f:4e:5a:06:54:bd:91:89:
53:5c:a8:fd:25:52:60:b1:2d:f2:d5:82:76:0d:d0:
1a:02:84:cf:13:8e:0c:6d:cd:b6:09:d2:af:67:96:
75:f0:e1:d1:5b:16:64:7a:44:35:cf:0b:4c:17:c6:
69:f9:a7:ae:dd:f9:02:cc:1e:51:0c:05:ee:32:06:
d3:80:d4:ff:76:f7:b4:49:84:3b:f0:55:84:e2:2b:
da:a6:63:b6:50:f2:f2:61:45:ac:4c:18:b2:05:4c:
e2:df:1f:96:8e:36:14:91:97:e0:f7:01:92:c0:80:
69:76:20:03:41:13:67:7b:87:50:e7:d2:07:d1:d1:
87:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:23:96:C7:E9:49:EC:B2:1F:2B:3D:B0:65:48:9F:21:C9:04:1D:94
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/30E551CE856711EF9BF1585BC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.118.156.0/22
103.46.200.0/22
103.48.196.0/22
103.56.228.0/22
103.57.84.0/22
103.85.143.0/24
103.87.56.0/22
103.92.40.0/22
103.95.80.0/22
103.108.4.0/22
103.110.48.0/23
103.120.50.0/23
103.139.56.0/24
103.157.227.0/24
103.160.26.0/23
103.161.56.0/23
103.164.188.0/24
103.170.80.0/23
103.172.72.0/23
103.177.120.0/23
103.211.12.0-103.211.19.255
103.211.52.0/22
103.212.144.0/22
103.212.156.0/22
103.214.60.0/22
110.235.216.0/22
110.235.224.0/20
139.5.240.0/22
139.5.248.0/21
144.48.72.0/22
146.196.32.0/21
160.202.36.0/22
192.140.152.0/22
202.173.124.0/22
IPv6:
2401:9640::/32
2407:aec0::/32
Signature Algorithm: sha256WithRSAEncryption
26:9c:35:25:63:d8:f5:7a:8c:92:c4:34:2f:8c:7b:b2:b1:ce:
97:22:bf:31:39:20:d7:56:c1:5e:e4:26:d3:02:60:1a:7c:39:
38:e4:b3:74:29:ac:23:4c:54:dc:ac:9f:ea:8a:35:9b:f4:4c:
49:eb:a1:d2:ce:63:56:05:eb:1f:7e:11:f3:d6:87:9a:9c:06:
b9:5e:45:18:0e:b0:db:ef:84:7f:f8:37:f3:b8:89:42:ee:a7:
80:a0:5e:93:2a:2b:35:6f:56:ab:13:bf:28:94:3c:b2:ae:7f:
de:f8:bb:54:b9:31:5f:a8:c6:d6:71:e1:1c:95:95:57:b3:df:
22:76:a1:de:4b:eb:c6:cb:12:3b:7e:72:08:02:9f:11:66:63:
a0:92:0e:a1:12:72:cf:29:2d:cd:b4:d2:3e:24:33:45:af:4f:
d6:a7:b7:60:0a:50:11:89:1a:25:cb:97:31:b3:03:8c:cc:e7:
14:1a:d9:17:13:5a:67:51:b2:14:68:a2:18:5a:ce:45:25:aa:
d2:c9:cd:d6:44:81:51:b3:68:76:72:2a:de:f5:68:6e:73:78:
4d:f1:27:13:94:23:53:18:40:e4:c4:cc:79:7e:58:fa:f9:3f:
cc:fe:2a:ac:bc:e6:c6:b0:9b:17:24:c3:48:40:13:d6:47:cc:
88:27:f8:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 11:17:33 2024 by rpki-client on console-fra.rpki-client.org