Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/828B2FD6173511EEBCEA943CC4F9AE02.roa
File: 828B2FD6173511EEBCEA943CC4F9AE02.roa (raw, json)
Hash identifier: kD1eb/2QuDy4hNe50L+8YNeYn6qXY11XNq61zUM/cCk=
Subject key identifier: A5:F9:8D:B2:9B:52:18:69:F4:59:CE:52:A1:EE:E7:8D:F7:E9:26:B8
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: 8723
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/828B2FD6173511EEBCEA943CC4F9AE02.roa
Signing time: Wed 08 May 2024 07:58:26 +0000
ROA not before: Wed 08 May 2024 07:58:26 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 133676
IP address blocks: 36.50.82.0/24 maxlen: 24
43.230.196.0/22 maxlen: 24
43.240.4.0/24 maxlen: 24
43.240.6.0/24 maxlen: 24
43.240.7.0/24 maxlen: 24
43.250.252.0/22 maxlen: 24
45.64.8.0/24 maxlen: 24
45.64.9.0/24 maxlen: 24
45.64.10.0/24 maxlen: 24
45.64.11.0/24 maxlen: 24
45.248.24.0/24 maxlen: 24
45.248.26.0/23 maxlen: 24
103.42.88.0/22 maxlen: 24
103.47.12.0/23 maxlen: 24
103.47.15.0/24 maxlen: 24
103.47.72.0/23 maxlen: 24
103.47.74.0/23 maxlen: 24
103.47.172.0/23 maxlen: 24
103.47.174.0/23 maxlen: 24
103.49.232.0/23 maxlen: 24
103.62.147.0/24 maxlen: 24
103.80.34.0/23 maxlen: 24
103.82.72.0/22 maxlen: 24
103.85.118.0/23 maxlen: 24
103.93.212.0/23 maxlen: 24
103.98.53.0/24 maxlen: 24
103.101.116.0/24 maxlen: 24
103.101.117.0/24 maxlen: 24
103.101.118.0/23 maxlen: 24
103.109.180.0/23 maxlen: 24
103.109.182.0/23 maxlen: 24
103.114.188.0/23 maxlen: 24
103.118.180.0/22 maxlen: 24
103.141.166.0/23 maxlen: 24
103.173.218.0/24 maxlen: 24
103.177.202.0/23 maxlen: 24
103.178.58.0/23 maxlen: 24
103.181.90.0/23 maxlen: 24
103.182.44.0/23 maxlen: 24
103.186.44.0/23 maxlen: 24
103.189.146.0/24 maxlen: 24
103.189.147.0/24 maxlen: 24
103.191.182.0/23 maxlen: 24
103.191.234.0/23 maxlen: 24
103.204.168.0/22 maxlen: 24
103.211.56.0/23 maxlen: 24
103.211.190.0/23 maxlen: 24
103.212.136.0/23 maxlen: 24
103.212.138.0/23 maxlen: 24
103.213.6.0/23 maxlen: 24
103.225.205.0/24 maxlen: 24
103.225.206.0/23 maxlen: 24
103.226.200.0/22 maxlen: 24
103.248.120.0/24 maxlen: 24
103.248.121.0/24 maxlen: 24
139.5.16.0/23 maxlen: 24
139.5.18.0/23 maxlen: 24
2405:5540::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 May 2024 12:33:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 34595 (0x8723)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Validity
Not Before: May 8 07:58:26 2024 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=663b30a2-08b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:33:40:b0:53:e8:8d:30:9c:0a:4d:ab:50:80:
39:82:d2:75:a4:ac:ce:09:8f:b3:d3:fd:68:33:f9:
d0:32:76:2a:29:f9:0e:07:27:72:8e:52:2c:84:17:
f7:a8:f2:92:75:d5:d8:f0:c1:14:80:aa:23:4e:88:
fe:9e:b4:1d:6a:a2:52:7b:e8:c4:35:e5:f6:31:61:
82:3b:76:ef:55:ff:6c:88:62:49:01:6b:39:11:e5:
6e:e3:88:6c:0b:ac:71:20:4f:bc:41:34:bf:7b:1d:
fc:3c:60:c7:7f:81:de:29:80:92:91:3d:bb:c7:ff:
c7:81:03:b4:88:f8:ff:60:5d:bb:24:7f:81:eb:ae:
9c:c0:07:a4:fc:c2:94:0e:ec:96:2f:03:9c:e1:b4:
b7:6a:56:c4:3d:12:83:b2:ad:81:3b:dc:1f:ea:74:
79:a3:85:94:7f:91:7c:14:63:bc:32:12:95:51:e4:
2c:12:4f:51:46:9a:70:11:1e:7e:0b:47:0f:e4:57:
ad:fa:b3:e4:7c:19:19:c0:de:e7:e8:c1:77:1f:2a:
13:4c:f2:16:c5:57:25:c4:d6:d7:fe:e2:cb:90:08:
bb:4c:fd:55:19:15:0a:86:5f:9f:4c:37:f3:80:7e:
2b:10:f0:a7:ee:68:32:62:ab:81:71:46:4c:6c:d6:
d9:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:F9:8D:B2:9B:52:18:69:F4:59:CE:52:A1:EE:E7:8D:F7:E9:26:B8
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/828B2FD6173511EEBCEA943CC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
36.50.82.0/24
43.230.196.0/22
43.240.4.0/24
43.240.6.0/23
43.250.252.0/22
45.64.8.0/22
45.248.24.0/24
45.248.26.0/23
103.42.88.0/22
103.47.12.0/23
103.47.15.0/24
103.47.72.0/22
103.47.172.0/22
103.49.232.0/23
103.62.147.0/24
103.80.34.0/23
103.82.72.0/22
103.85.118.0/23
103.93.212.0/23
103.98.53.0/24
103.101.116.0/22
103.109.180.0/22
103.114.188.0/23
103.118.180.0/22
103.141.166.0/23
103.173.218.0/24
103.177.202.0/23
103.178.58.0/23
103.181.90.0/23
103.182.44.0/23
103.186.44.0/23
103.189.146.0/23
103.191.182.0/23
103.191.234.0/23
103.204.168.0/22
103.211.56.0/23
103.211.190.0/23
103.212.136.0/22
103.213.6.0/23
103.225.205.0-103.225.207.255
103.226.200.0/22
103.248.120.0/23
139.5.16.0/22
IPv6:
2405:5540::/32
Signature Algorithm: sha256WithRSAEncryption
94:de:3b:3d:ff:0f:65:29:42:08:07:2a:4d:39:ea:b9:38:2c:
17:b2:1c:91:4f:72:fa:4a:22:87:4f:ac:f4:6b:f6:fb:d0:b9:
fb:41:b0:6e:68:85:12:ca:a4:1a:3e:24:ab:f3:83:63:43:29:
6b:7c:dd:37:fb:c1:c8:55:b4:54:96:bf:fc:1b:c5:d4:4c:53:
25:42:f3:73:ed:f7:45:19:52:74:32:90:79:cc:0d:d7:7d:71:
96:e0:6b:f3:fb:13:3e:0d:c4:de:bd:c5:42:30:37:42:47:f6:
c0:3c:69:05:19:31:32:3a:93:a3:1c:4b:5d:c9:78:28:a5:36:
72:ba:7e:ec:80:6e:be:41:7f:3c:1f:38:37:f7:19:90:c4:a7:
c8:23:a3:42:6f:ab:3c:e4:7a:df:90:7c:3c:fc:9e:13:92:71:
25:b9:fd:4c:d4:5b:1a:41:99:ca:a0:a0:c3:aa:24:02:f1:61:
c8:1e:ec:33:63:73:22:29:8e:1b:06:fe:7d:be:df:52:d3:b4:
79:76:1b:06:94:11:3c:ef:38:29:ed:65:fc:b4:cc:fb:b6:26:
42:fa:fd:67:18:cd:a0:5e:a2:93:55:b7:11:ea:b0:d1:2e:22:
fc:e9:16:5c:2e:b5:35:9e:2c:db:32:42:59:31:84:d1:a0:ff:
4f:a6:85:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 14:08:10 2024 by rpki-client on console-fra.rpki-client.org