Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/9393FEB2A73411EFA235594BC4F9AE02.roa
File: 9393FEB2A73411EFA235594BC4F9AE02.roa (raw, json)
Hash identifier: Hww3Q381/Hul3EqmsMswpqA/s9VX41YnAypntADAxwM=
Subject key identifier: 88:3F:FA:7D:E9:81:60:FB:6A:1D:C8:11:46:F6:DF:29:AD:7A:88:3E
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: A601
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/9393FEB2A73411EFA235594BC4F9AE02.roa
Signing time: Thu 13 Feb 2025 05:35:51 +0000
ROA not before: Thu 13 Feb 2025 05:35:51 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 24186
IP address blocks: 27.0.216.0/22 maxlen: 22
27.0.216.0/24 maxlen: 24
27.0.217.0/24 maxlen: 24
27.0.218.0/24 maxlen: 24
27.0.219.0/24 maxlen: 24
27.0.220.0/22 maxlen: 22
27.0.220.0/24 maxlen: 24
27.0.221.0/24 maxlen: 24
27.0.222.0/24 maxlen: 24
27.0.223.0/24 maxlen: 24
27.0.244.0/22 maxlen: 22
27.0.244.0/24 maxlen: 24
27.0.245.0/24 maxlen: 24
27.0.246.0/24 maxlen: 24
27.0.247.0/24 maxlen: 24
27.0.248.0/22 maxlen: 22
27.0.248.0/24 maxlen: 24
27.0.249.0/24 maxlen: 24
27.0.250.0/24 maxlen: 24
27.0.251.0/24 maxlen: 24
27.111.72.0/22 maxlen: 24
27.112.120.0/22 maxlen: 24
27.116.40.0/22 maxlen: 24
27.122.60.0/22 maxlen: 24
36.255.4.0/22 maxlen: 22
36.255.4.0/24 maxlen: 24
36.255.5.0/24 maxlen: 24
36.255.6.0/24 maxlen: 24
36.255.7.0/24 maxlen: 24
36.255.12.0/22 maxlen: 24
36.255.16.0/22 maxlen: 24
36.255.20.0/22 maxlen: 24
45.115.88.0/22 maxlen: 24
45.121.0.0/22 maxlen: 24
103.15.252.0/22 maxlen: 24
103.28.244.0/22 maxlen: 24
103.30.64.0/22 maxlen: 24
103.30.116.0/22 maxlen: 24
103.30.176.0/22 maxlen: 24
103.55.72.0/22 maxlen: 24
103.61.72.0/22 maxlen: 24
103.66.72.0/22 maxlen: 24
103.74.108.0/22 maxlen: 24
103.76.208.0/22 maxlen: 22
103.76.208.0/24 maxlen: 24
103.76.209.0/24 maxlen: 24
103.76.210.0/24 maxlen: 24
103.76.211.0/24 maxlen: 24
103.82.80.0/22 maxlen: 24
103.176.74.0/24 maxlen: 24
103.197.112.0/22 maxlen: 24
103.199.180.0/22 maxlen: 24
103.199.188.0/22 maxlen: 24
103.199.200.0/22 maxlen: 24
103.199.204.0/22 maxlen: 24
103.199.208.0/22 maxlen: 24
103.199.212.0/22 maxlen: 24
103.200.84.0/22 maxlen: 24
103.201.134.0/23 maxlen: 24
103.203.72.0/22 maxlen: 24
103.206.144.0/22 maxlen: 22
103.206.144.0/24 maxlen: 24
103.206.145.0/24 maxlen: 24
103.206.146.0/24 maxlen: 24
103.206.147.0/24 maxlen: 24
103.207.124.0/22 maxlen: 22
103.207.124.0/24 maxlen: 24
103.207.125.0/24 maxlen: 24
103.207.126.0/24 maxlen: 24
103.207.127.0/24 maxlen: 24
103.207.224.0/22 maxlen: 24
103.208.104.0/22 maxlen: 22
103.208.104.0/24 maxlen: 24
103.208.105.0/24 maxlen: 24
103.208.106.0/24 maxlen: 24
103.208.107.0/24 maxlen: 24
103.208.144.0/22 maxlen: 22
103.208.144.0/24 maxlen: 24
103.208.145.0/24 maxlen: 24
103.208.146.0/24 maxlen: 24
103.208.147.0/24 maxlen: 24
103.208.156.0/22 maxlen: 22
103.208.156.0/24 maxlen: 24
103.208.157.0/24 maxlen: 24
103.208.158.0/24 maxlen: 24
103.208.159.0/24 maxlen: 24
103.208.172.0/22 maxlen: 24
103.208.228.0/22 maxlen: 24
103.208.232.0/22 maxlen: 24
103.208.236.0/22 maxlen: 22
103.208.236.0/24 maxlen: 24
103.208.237.0/24 maxlen: 24
103.208.238.0/24 maxlen: 24
103.208.239.0/24 maxlen: 24
103.208.240.0/22 maxlen: 24
103.210.88.0/22 maxlen: 24
103.210.92.0/22 maxlen: 24
103.210.100.0/22 maxlen: 24
103.215.240.0/24 maxlen: 24
103.229.0.0/24 maxlen: 24
103.246.40.0/22 maxlen: 24
103.246.192.0/22 maxlen: 24
103.247.4.0/22 maxlen: 24
103.247.52.0/22 maxlen: 24
106.0.40.0/22 maxlen: 22
106.0.40.0/24 maxlen: 24
106.0.41.0/24 maxlen: 24
106.0.42.0/24 maxlen: 24
106.0.43.0/24 maxlen: 24
112.133.192.0/18 maxlen: 24
120.138.12.0/22 maxlen: 24
121.46.92.0/22 maxlen: 22
121.46.92.0/24 maxlen: 24
121.46.93.0/24 maxlen: 24
121.46.94.0/24 maxlen: 24
121.46.95.0/24 maxlen: 24
122.252.224.0/19 maxlen: 24
137.59.92.0/22 maxlen: 24
137.59.156.0/22 maxlen: 22
137.59.156.0/24 maxlen: 24
137.59.157.0/24 maxlen: 24
137.59.158.0/24 maxlen: 24
137.59.159.0/24 maxlen: 24
137.59.164.0/22 maxlen: 22
137.59.164.0/24 maxlen: 24
137.59.165.0/24 maxlen: 24
137.59.166.0/24 maxlen: 24
137.59.167.0/24 maxlen: 24
137.59.176.0/22 maxlen: 22
137.59.176.0/24 maxlen: 24
137.59.177.0/24 maxlen: 24
137.59.178.0/24 maxlen: 24
137.59.179.0/24 maxlen: 24
139.5.0.0/22 maxlen: 24
139.5.4.0/22 maxlen: 24
139.5.8.0/22 maxlen: 24
139.5.12.0/22 maxlen: 22
139.5.12.0/24 maxlen: 24
139.5.13.0/24 maxlen: 24
139.5.14.0/24 maxlen: 24
139.5.15.0/24 maxlen: 24
175.111.188.0/22 maxlen: 22
175.111.188.0/24 maxlen: 24
175.111.189.0/24 maxlen: 24
175.111.190.0/24 maxlen: 24
175.111.191.0/24 maxlen: 24
180.94.32.0/22 maxlen: 24
202.21.40.0/22 maxlen: 24
202.21.44.0/22 maxlen: 24
202.43.120.0/22 maxlen: 24
202.140.128.0/22 maxlen: 24
202.148.56.0/22 maxlen: 24
202.168.84.0/22 maxlen: 24
202.170.200.0/22 maxlen: 24
202.170.204.0/22 maxlen: 24
202.176.0.0/22 maxlen: 24
203.153.32.0/20 maxlen: 20
203.153.32.0/24 maxlen: 24
203.153.33.0/24 maxlen: 24
203.153.34.0/24 maxlen: 24
203.153.35.0/24 maxlen: 24
203.153.36.0/24 maxlen: 24
203.153.37.0/24 maxlen: 24
203.153.38.0/24 maxlen: 24
203.153.39.0/24 maxlen: 24
203.153.40.0/24 maxlen: 24
203.153.41.0/24 maxlen: 24
203.153.42.0/24 maxlen: 24
203.153.43.0/24 maxlen: 24
203.153.44.0/24 maxlen: 24
203.153.45.0/24 maxlen: 24
203.153.46.0/24 maxlen: 24
203.153.47.0/24 maxlen: 24
220.158.156.0/22 maxlen: 24
2401:b200::/32 maxlen: 48
2406:f00:7::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 21 Feb 2025 05:15:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 42497 (0xa601)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2
Validity
Not Before: Feb 13 05:35:51 2025 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=67ad84b7-4b55
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:63:8b:c4:e2:b5:87:e2:aa:2b:dc:22:da:ce:
10:6d:16:24:27:0d:c0:ae:b7:86:d9:f2:35:e0:52:
3e:6f:bb:0c:1b:38:f1:a8:91:45:88:db:7d:99:16:
9e:4c:bf:e7:de:2b:f8:48:66:90:01:53:b0:ee:0d:
7e:0c:c1:04:54:0d:c1:4f:e8:b5:86:98:6b:da:b1:
62:3b:11:19:91:22:c9:6d:cc:9f:b7:9e:11:34:ba:
65:5a:64:89:1e:02:19:83:a1:58:ff:28:3d:55:f7:
45:ec:b1:78:0d:b8:60:1b:b5:31:c5:d9:2f:cd:49:
54:a6:be:f5:71:e5:1d:ea:2f:76:35:70:ed:40:d1:
14:ae:c8:9c:0d:8c:f7:4f:a5:78:e5:d3:49:96:36:
15:0c:f6:cb:c9:0d:7d:e3:f0:7f:96:a7:ee:46:eb:
f6:71:6b:f6:94:7d:3c:5d:ef:8b:57:10:3e:2d:cf:
65:3a:de:92:ba:4f:f1:60:9a:e9:80:0c:8f:40:27:
5d:f3:7c:16:df:22:7a:fd:e6:ce:42:c5:8b:a5:cd:
9a:f2:0b:f0:7b:14:2e:f2:bb:b0:10:78:d8:0b:4b:
02:03:ab:7d:dd:50:92:e6:d7:08:81:3c:f7:e4:05:
6e:73:4c:12:8b:58:b7:dd:25:a4:2e:bd:9e:f5:30:
b0:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:3F:FA:7D:E9:81:60:FB:6A:1D:C8:11:46:F6:DF:29:AD:7A:88:3E
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/9393FEB2A73411EFA235594BC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
27.0.216.0/21
27.0.244.0-27.0.251.255
27.111.72.0/22
27.112.120.0/22
27.116.40.0/22
27.122.60.0/22
36.255.4.0/22
36.255.12.0-36.255.23.255
45.115.88.0/22
45.121.0.0/22
103.15.252.0/22
103.28.244.0/22
103.30.64.0/22
103.30.116.0/22
103.30.176.0/22
103.55.72.0/22
103.61.72.0/22
103.66.72.0/22
103.74.108.0/22
103.76.208.0/22
103.82.80.0/22
103.176.74.0/24
103.197.112.0/22
103.199.180.0/22
103.199.188.0/22
103.199.200.0-103.199.215.255
103.200.84.0/22
103.201.134.0/23
103.203.72.0/22
103.206.144.0/22
103.207.124.0/22
103.207.224.0/22
103.208.104.0/22
103.208.144.0/22
103.208.156.0/22
103.208.172.0/22
103.208.228.0-103.208.243.255
103.210.88.0/21
103.210.100.0/22
103.215.240.0/24
103.229.0.0/24
103.246.40.0/22
103.246.192.0/22
103.247.4.0/22
103.247.52.0/22
106.0.40.0/22
112.133.192.0/18
120.138.12.0/22
121.46.92.0/22
122.252.224.0/19
137.59.92.0/22
137.59.156.0/22
137.59.164.0/22
137.59.176.0/22
139.5.0.0/20
175.111.188.0/22
180.94.32.0/22
202.21.40.0/21
202.43.120.0/22
202.140.128.0/22
202.148.56.0/22
202.168.84.0/22
202.170.200.0/21
202.176.0.0/22
203.153.32.0/20
220.158.156.0/22
IPv6:
2401:b200::/32
2406:f00:7::/48
Signature Algorithm: sha256WithRSAEncryption
09:de:ef:53:76:c1:e8:e7:84:3f:5d:b5:96:b1:73:d4:10:44:
e3:9c:9d:14:87:69:8d:48:2b:99:91:e9:9b:8e:a7:67:be:27:
0f:0c:a6:f1:53:64:0c:27:0d:3b:ed:14:97:af:03:be:2c:79:
7d:db:4d:a0:f6:b0:c1:81:d7:6e:c5:a8:c2:e2:84:24:f5:84:
44:02:e1:87:ec:34:61:b5:c5:1f:10:c0:b5:42:c2:af:d6:87:
d4:fe:2e:19:0d:ff:37:ba:ca:8c:f7:a8:38:b1:39:5f:32:b5:
64:1e:08:98:7d:5f:95:d6:4d:47:88:a7:16:26:0b:c0:3b:d2:
9b:f0:b9:6c:1c:50:7c:7e:89:7a:07:fa:51:96:b6:7e:52:d2:
ef:b6:4b:51:2b:15:00:05:6a:a0:2f:46:87:bf:9c:36:50:03:
87:4f:a4:56:0a:ca:96:4b:2a:64:4e:52:f4:63:ee:58:9c:c2:
6f:c8:c2:49:ff:5e:82:89:f7:fb:66:e5:80:7d:19:9d:ba:c3:
ae:9d:80:09:46:5c:5d:fb:b2:0d:74:2c:c7:cf:c6:87:cd:0c:
04:40:b2:15:ad:a8:98:31:3d:51:b7:19:9f:fd:88:6a:54:88:
d6:c8:0e:1a:2b:4e:5a:9c:c1:25:b9:86:ef:cd:eb:10:49:55:
a2:5d:e8:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 20:24:56 2025 by rpki-client