Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/6266B5EC6C6911EFB38AC309C4F9AE02.roa
File: 6266B5EC6C6911EFB38AC309C4F9AE02.roa (raw, json)
Hash identifier: h1uBiT0p3Q2fOtyA0s7n9Z1xPjj27YbAD9TwQw0+Zds=
Subject key identifier: BF:6D:53:FD:2C:0E:61:54:62:8F:78:47:B2:ED:D8:FD:92:AF:26:03
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: 9858
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/6266B5EC6C6911EFB38AC309C4F9AE02.roa
Signing time: Tue 10 Sep 2024 11:03:35 +0000
ROA not before: Tue 10 Sep 2024 11:03:35 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 132215
IP address blocks: 1.6.136.0/24 maxlen: 24
1.6.226.0/24 maxlen: 24
1.6.227.0/24 maxlen: 24
1.6.228.0/24 maxlen: 24
1.7.142.0/24 maxlen: 24
1.7.151.0/24 maxlen: 24
1.7.161.0/24 maxlen: 24
1.7.162.0/24 maxlen: 24
1.7.180.0/24 maxlen: 24
1.7.200.0/24 maxlen: 24
1.7.201.0/24 maxlen: 24
1.7.202.0/24 maxlen: 24
43.227.132.0/22 maxlen: 24
45.127.208.0/22 maxlen: 24
45.127.228.0/22 maxlen: 24
45.127.236.0/22 maxlen: 24
45.249.232.0/22 maxlen: 24
58.84.20.0/22 maxlen: 24
58.84.24.0/22 maxlen: 24
59.152.80.0/22 maxlen: 24
61.14.204.0/22 maxlen: 24
103.7.128.0/22 maxlen: 24
103.15.228.0/22 maxlen: 24
103.59.140.0/22 maxlen: 24
103.70.60.0/22 maxlen: 24
103.119.240.0/22 maxlen: 23
103.119.241.0/24 maxlen: 24
103.119.242.0/23 maxlen: 24
103.120.28.0/22 maxlen: 24
103.196.188.0/22 maxlen: 24
103.196.216.0/22 maxlen: 24
103.196.224.0/22 maxlen: 24
103.197.36.0/22 maxlen: 24
103.197.40.0/22 maxlen: 24
103.197.80.0/22 maxlen: 24
103.197.100.0/22 maxlen: 24
103.197.124.0/22 maxlen: 24
103.197.128.0/22 maxlen: 24
103.197.136.0/22 maxlen: 24
103.197.140.0/22 maxlen: 24
103.200.76.0/22 maxlen: 24
103.200.80.0/22 maxlen: 24
103.200.88.0/22 maxlen: 24
103.203.80.0/22 maxlen: 24
103.218.228.0/22 maxlen: 24
111.235.68.0/22 maxlen: 24
114.134.16.0/22 maxlen: 24
202.177.153.0/24 maxlen: 24
202.177.157.0/24 maxlen: 24
218.185.248.0/22 maxlen: 24
220.158.128.0/22 maxlen: 24
220.158.144.0/22 maxlen: 24
220.158.168.0/22 maxlen: 24
220.158.172.0/22 maxlen: 24
220.158.180.0/22 maxlen: 24
220.158.184.0/22 maxlen: 24
223.31.120.0/24 maxlen: 24
223.31.121.0/24 maxlen: 24
223.31.122.0/24 maxlen: 24
223.31.123.0/24 maxlen: 24
223.31.159.0/24 maxlen: 24
223.31.174.0/24 maxlen: 24
2401:ac20::/32 maxlen: 36
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 02 Dec 2024 10:54:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 39000 (0x9858)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Validity
Not Before: Sep 10 11:03:35 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=66e02787-0610
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:26:8c:3c:b1:47:13:06:37:45:5c:eb:ef:be:
37:3b:f9:eb:e2:46:4c:92:52:52:35:c0:03:c6:c2:
4e:66:c4:d3:f5:65:77:b3:36:39:63:94:28:b7:52:
3e:e1:4f:32:0a:3c:21:70:19:1b:13:43:7b:00:75:
4e:f5:8f:61:2a:34:50:45:89:66:f6:e6:7a:ca:bc:
72:6c:17:51:91:f7:58:67:8a:5e:58:cf:50:32:09:
62:84:a5:b3:38:dd:ac:94:ca:82:1f:27:ec:a0:2f:
33:ac:38:ae:66:9e:60:38:6b:b5:f3:c8:fe:df:c2:
74:07:78:8f:e1:fe:75:b3:77:c4:a3:6c:44:5a:d9:
34:1a:61:32:35:94:e0:29:e9:aa:df:56:3c:ff:e0:
87:eb:c9:25:5b:25:d8:8d:d5:b5:d9:82:34:ff:55:
7b:92:ce:36:8b:25:0e:dc:fa:72:67:85:ac:d3:1e:
cb:2c:dc:53:22:d3:eb:38:cd:03:5c:d2:9d:9b:16:
1a:2c:5a:15:31:99:14:a2:56:be:a8:c3:96:69:e2:
9f:e5:4f:1c:8d:ad:ea:5d:29:fc:cc:37:93:65:5d:
e1:12:9c:53:68:0f:a4:48:af:00:1a:05:02:f1:31:
e1:f4:38:fe:04:be:60:73:d7:0f:83:8b:a3:e4:ec:
41:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:6D:53:FD:2C:0E:61:54:62:8F:78:47:B2:ED:D8:FD:92:AF:26:03
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/6266B5EC6C6911EFB38AC309C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
1.6.136.0/24
1.6.226.0-1.6.228.255
1.7.142.0/24
1.7.151.0/24
1.7.161.0-1.7.162.255
1.7.180.0/24
1.7.200.0-1.7.202.255
43.227.132.0/22
45.127.208.0/22
45.127.228.0/22
45.127.236.0/22
45.249.232.0/22
58.84.20.0-58.84.27.255
59.152.80.0/22
61.14.204.0/22
103.7.128.0/22
103.15.228.0/22
103.59.140.0/22
103.70.60.0/22
103.119.240.0/22
103.120.28.0/22
103.196.188.0/22
103.196.216.0/22
103.196.224.0/22
103.197.36.0-103.197.43.255
103.197.80.0/22
103.197.100.0/22
103.197.124.0-103.197.131.255
103.197.136.0/21
103.200.76.0-103.200.83.255
103.200.88.0/22
103.203.80.0/22
103.218.228.0/22
111.235.68.0/22
114.134.16.0/22
202.177.153.0/24
202.177.157.0/24
218.185.248.0/22
220.158.128.0/22
220.158.144.0/22
220.158.168.0/21
220.158.180.0-220.158.187.255
223.31.120.0/22
223.31.159.0/24
223.31.174.0/24
IPv6:
2401:ac20::/32
Signature Algorithm: sha256WithRSAEncryption
55:fd:be:f2:8a:70:29:93:dd:66:b7:4c:e8:4a:9a:8b:9c:7d:
77:f7:cd:70:0a:13:d5:fe:a2:5e:f4:dd:6f:f2:f9:a3:de:f3:
bf:33:03:e4:5a:9d:b1:ae:3a:19:af:07:f5:ce:81:cc:e1:07:
25:67:e9:7d:ec:93:95:19:a2:d9:12:77:a5:16:76:a8:d9:3a:
07:9c:25:26:16:9a:76:0b:45:f3:9e:14:27:3a:68:07:6d:b1:
26:12:2b:c9:fc:5b:0f:01:04:b7:98:18:d1:b8:3f:17:86:9e:
8b:5b:47:43:f4:ed:3a:2a:6b:3d:e8:40:82:3a:6f:de:95:c7:
fb:c1:65:a3:4c:71:7a:59:9c:ee:08:17:6d:08:2b:4d:55:33:
2c:7c:c0:55:46:43:aa:f8:d0:d1:4c:a6:09:54:88:3e:ce:3f:
d6:1d:ce:3d:82:36:c0:86:1f:4f:48:60:d7:fe:ff:ba:c1:9e:
8c:a2:0a:85:47:8c:12:96:30:71:3a:e5:d0:15:e8:ff:3e:99:
a3:67:8b:a2:e4:49:85:d1:9e:f9:bd:5f:a5:09:7a:ce:43:5c:
93:01:ce:aa:64:0e:7d:b9:16:13:06:c5:ff:d1:4c:19:96:f7:
7c:9b:88:8f:c5:fb:c7:00:a7:9c:82:f2:57:07:c3:ff:e3:24:
ea:18:38:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 13:17:15 2024 by rpki-client on console-ams.rpki-client.org