Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/ECC9D610431C11EDBDB23573C4F9AE02.roa
File: ECC9D610431C11EDBDB23573C4F9AE02.roa (raw, json)
Hash identifier: EjPe8wVPYCv5mlxZJJ0GpQEDVQgiCiCLG6N8QIiVNJE=
Subject key identifier: 41:9C:14:A4:1E:E8:28:AA:0C:9D:4A:6E:4F:2C:1F:54:FB:E6:02:A4
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: 885E
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/ECC9D610431C11EDBDB23573C4F9AE02.roa
Signing time: Thu 30 May 2024 15:54:15 +0000
ROA not before: Thu 30 May 2024 15:54:15 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 132453
IP address blocks: 103.21.184.0/22 maxlen: 24
103.57.70.0/23 maxlen: 23
103.57.70.0/24 maxlen: 24
103.57.71.0/24 maxlen: 24
103.227.68.0/22 maxlen: 22
103.227.68.0/24 maxlen: 24
103.227.69.0/24 maxlen: 24
103.227.70.0/24 maxlen: 24
103.227.71.0/24 maxlen: 24
103.240.192.0/22 maxlen: 22
103.240.192.0/24 maxlen: 24
103.240.193.0/24 maxlen: 24
103.240.194.0/24 maxlen: 24
103.240.195.0/24 maxlen: 24
103.240.232.0/22 maxlen: 22
103.240.232.0/24 maxlen: 24
103.240.233.0/24 maxlen: 24
103.240.234.0/24 maxlen: 24
103.240.235.0/24 maxlen: 24
103.240.236.0/22 maxlen: 22
103.240.236.0/24 maxlen: 24
103.240.237.0/24 maxlen: 24
103.240.238.0/24 maxlen: 24
103.240.239.0/24 maxlen: 24
103.245.12.0/22 maxlen: 22
103.245.12.0/24 maxlen: 24
103.245.13.0/24 maxlen: 24
103.245.14.0/24 maxlen: 24
103.245.15.0/24 maxlen: 24
103.248.84.0/22 maxlen: 22
103.248.84.0/24 maxlen: 24
103.248.85.0/24 maxlen: 24
103.248.86.0/24 maxlen: 24
103.248.87.0/24 maxlen: 24
103.252.216.0/22 maxlen: 22
103.252.216.0/24 maxlen: 24
103.252.217.0/24 maxlen: 24
103.252.218.0/24 maxlen: 24
103.252.219.0/24 maxlen: 24
103.253.172.0/22 maxlen: 22
103.253.172.0/24 maxlen: 24
103.253.173.0/24 maxlen: 24
103.253.174.0/24 maxlen: 24
103.253.175.0/24 maxlen: 24
111.125.196.0/22 maxlen: 24
150.129.180.0/22 maxlen: 22
150.129.180.0/24 maxlen: 24
150.129.181.0/24 maxlen: 24
150.129.182.0/24 maxlen: 24
150.129.183.0/24 maxlen: 24
150.129.236.0/22 maxlen: 22
150.129.236.0/24 maxlen: 24
150.129.237.0/24 maxlen: 24
150.129.238.0/24 maxlen: 24
150.129.239.0/24 maxlen: 24
150.129.248.0/22 maxlen: 22
150.129.248.0/24 maxlen: 24
150.129.249.0/24 maxlen: 24
150.129.250.0/24 maxlen: 24
150.129.251.0/24 maxlen: 24
150.242.60.0/22 maxlen: 22
150.242.60.0/24 maxlen: 24
150.242.61.0/24 maxlen: 24
150.242.62.0/24 maxlen: 24
150.242.63.0/24 maxlen: 24
150.242.64.0/22 maxlen: 22
150.242.64.0/24 maxlen: 24
150.242.65.0/24 maxlen: 24
150.242.66.0/24 maxlen: 24
150.242.67.0/24 maxlen: 24
150.242.72.0/22 maxlen: 22
150.242.72.0/24 maxlen: 24
150.242.73.0/24 maxlen: 24
150.242.74.0/24 maxlen: 24
150.242.75.0/24 maxlen: 24
150.242.84.0/22 maxlen: 22
150.242.84.0/24 maxlen: 24
150.242.85.0/24 maxlen: 24
150.242.86.0/24 maxlen: 24
150.242.87.0/24 maxlen: 24
150.242.172.0/22 maxlen: 22
150.242.172.0/24 maxlen: 24
150.242.173.0/24 maxlen: 24
150.242.174.0/24 maxlen: 24
150.242.175.0/24 maxlen: 24
2400:80c0::/32 maxlen: 36
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 02 Dec 2024 10:54:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 34910 (0x885e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Validity
Not Before: May 30 15:54:15 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6658a127-1ba0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:03:a5:ec:4d:f6:39:dc:4d:79:e4:17:86:84:
53:2c:9f:ac:e0:65:98:25:d1:84:02:aa:b8:74:4e:
f8:b3:a8:c5:6a:5a:fd:ec:95:d6:a5:ef:58:45:d4:
c9:7f:d9:24:c2:9f:b4:66:89:6f:76:30:95:ad:24:
91:a8:88:07:82:50:d0:bf:75:1b:65:e2:f5:a2:6d:
a9:47:af:35:60:27:aa:e4:ab:f1:82:06:48:08:26:
a2:98:4b:91:6b:e3:f4:9b:a7:d8:a7:49:82:94:d9:
9e:c5:c2:ad:bc:02:d0:63:98:9a:9e:60:61:6b:c0:
c2:72:02:98:1d:7b:0a:c3:d5:43:5a:61:3a:f7:41:
26:9d:51:90:5a:46:cf:a6:e9:fb:8d:b9:ed:b5:06:
83:5f:c1:8b:30:bf:df:31:0f:91:3f:06:6b:be:2d:
99:6c:c2:a2:59:0c:2c:69:e1:4d:2c:9a:55:c3:7c:
f4:85:d3:d4:17:ad:1e:15:4a:84:8c:f5:be:69:9d:
30:9e:ca:2e:f4:f4:2e:6c:69:d1:a6:af:9b:a1:5e:
81:c6:dd:2b:77:7e:33:ec:4d:a7:8f:ba:88:0a:0b:
fd:c5:9d:1e:09:a0:18:38:83:e5:ee:02:06:40:eb:
df:8e:57:00:48:45:cf:54:53:f7:ba:9e:fb:28:e9:
3f:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:9C:14:A4:1E:E8:28:AA:0C:9D:4A:6E:4F:2C:1F:54:FB:E6:02:A4
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/ECC9D610431C11EDBDB23573C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.21.184.0/22
103.57.70.0/23
103.227.68.0/22
103.240.192.0/22
103.240.232.0/21
103.245.12.0/22
103.248.84.0/22
103.252.216.0/22
103.253.172.0/22
111.125.196.0/22
150.129.180.0/22
150.129.236.0/22
150.129.248.0/22
150.242.60.0-150.242.67.255
150.242.72.0/22
150.242.84.0/22
150.242.172.0/22
IPv6:
2400:80c0::/32
Signature Algorithm: sha256WithRSAEncryption
8d:ac:ec:f9:70:55:47:32:01:a5:ae:aa:d5:97:71:4e:15:9b:
c6:da:63:b7:83:11:ec:7b:6f:8e:4f:02:5f:e5:44:2c:3c:83:
c0:72:d2:49:de:bc:9d:57:f0:d1:e8:f5:da:5d:05:80:9d:67:
d3:f3:d7:f6:41:c1:4e:13:82:94:52:82:6a:e1:f7:8d:0f:54:
e9:d6:e7:07:48:59:be:93:0c:de:cb:b8:68:db:87:5f:a0:7c:
b2:77:b4:d1:5e:ed:3d:ce:0d:d1:31:1b:f0:25:cf:69:50:05:
70:ee:75:5a:84:28:cc:d2:2f:44:d7:24:36:ec:8b:71:4b:85:
2e:46:f3:cf:b9:25:e1:cc:3d:30:70:54:8a:f3:7e:f2:38:5d:
01:df:f7:23:de:6f:08:22:69:1f:98:54:22:b5:17:b1:a9:41:
4f:b1:9a:1f:23:3c:98:46:c2:53:12:9c:ca:89:8b:d4:4b:e4:
05:06:93:6b:39:56:fc:fe:aa:1d:8b:d7:3c:47:2a:c0:6b:42:
d4:1a:39:51:48:f2:fd:04:45:5c:d2:1a:5a:4c:4b:6d:ba:5c:
e4:12:6d:cb:ba:e4:a7:8c:96:5f:a6:7d:db:21:21:df:ee:99:
82:07:40:1e:f5:74:59:8a:c2:d3:73:a5:be:10:f9:ab:a6:8f:
bd:0a:7a:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 13:17:30 2024 by rpki-client on console-ams.rpki-client.org