Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/FF7BF578A59D11EFB201FE3AC4F9AE02.roa
File: FF7BF578A59D11EFB201FE3AC4F9AE02.roa (raw, json)
Hash identifier: AAXqiMEAxn0itJRAW+pJa9s+g/ICSoyjukgWXl4J9dw=
Subject key identifier: 67:90:D6:72:F1:6B:6C:DE:7E:A7:F3:0F:B7:DE:9A:FE:6E:56:94:C8
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: 9D5F
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/FF7BF578A59D11EFB201FE3AC4F9AE02.roa
Signing time: Mon 18 Nov 2024 11:16:15 +0000
ROA not before: Mon 18 Nov 2024 11:16:15 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 133676
IP address blocks: 36.50.82.0/24 maxlen: 24
43.225.74.0/24 maxlen: 24
43.230.196.0/22 maxlen: 24
43.240.4.0/24 maxlen: 24
43.240.6.0/24 maxlen: 24
43.240.7.0/24 maxlen: 24
43.250.252.0/22 maxlen: 24
45.64.8.0/24 maxlen: 24
45.64.9.0/24 maxlen: 24
45.64.10.0/24 maxlen: 24
45.64.11.0/24 maxlen: 24
45.248.24.0/24 maxlen: 24
45.248.26.0/23 maxlen: 24
103.42.88.0/22 maxlen: 24
103.47.12.0/23 maxlen: 24
103.47.15.0/24 maxlen: 24
103.47.72.0/23 maxlen: 24
103.47.74.0/23 maxlen: 24
103.47.172.0/23 maxlen: 24
103.47.174.0/23 maxlen: 24
103.49.232.0/23 maxlen: 24
103.54.24.0/23 maxlen: 24
103.54.26.0/24 maxlen: 24
103.62.147.0/24 maxlen: 24
103.80.34.0/23 maxlen: 24
103.82.72.0/22 maxlen: 24
103.85.118.0/23 maxlen: 24
103.87.204.0/22 maxlen: 24
103.93.172.0/22 maxlen: 24
103.93.212.0/23 maxlen: 24
103.98.53.0/24 maxlen: 24
103.101.116.0/24 maxlen: 24
103.101.117.0/24 maxlen: 24
103.101.118.0/23 maxlen: 24
103.103.163.0/24 maxlen: 24
103.109.180.0/23 maxlen: 24
103.109.182.0/23 maxlen: 24
103.114.188.0/23 maxlen: 24
103.118.180.0/22 maxlen: 24
103.173.218.0/24 maxlen: 24
103.177.202.0/23 maxlen: 24
103.178.58.0/23 maxlen: 24
103.181.90.0/23 maxlen: 24
103.182.44.0/23 maxlen: 24
103.184.184.0/23 maxlen: 24
103.186.44.0/23 maxlen: 24
103.189.146.0/24 maxlen: 24
103.189.147.0/24 maxlen: 24
103.191.182.0/23 maxlen: 24
103.191.234.0/23 maxlen: 24
103.204.168.0/22 maxlen: 24
103.211.56.0/23 maxlen: 24
103.211.58.0/24 maxlen: 24
103.211.190.0/23 maxlen: 24
103.212.136.0/23 maxlen: 24
103.212.138.0/23 maxlen: 24
103.213.6.0/23 maxlen: 24
103.225.205.0/24 maxlen: 24
103.225.206.0/23 maxlen: 24
103.226.200.0/22 maxlen: 24
103.248.120.0/24 maxlen: 24
103.248.121.0/24 maxlen: 24
139.5.16.0/23 maxlen: 24
139.5.18.0/23 maxlen: 24
2405:5540::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 29 Nov 2024 06:14:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 40287 (0x9d5f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Validity
Not Before: Nov 18 11:16:15 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=673b21ff-118b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:f9:45:34:dc:a4:31:2d:1f:00:7d:1e:d9:1f:
f6:5f:8c:cc:48:28:2b:57:f7:ae:9e:86:ed:c2:2e:
c6:77:4d:40:97:bf:8c:2d:34:de:90:f9:7b:61:24:
50:f2:3c:ad:cf:65:5e:a4:a6:9d:68:da:f7:8b:a4:
c8:0d:3b:f9:61:f2:21:32:b9:f1:5b:f2:6d:4c:ba:
73:fa:1c:39:87:b3:2c:9f:3f:72:63:b8:cf:74:6f:
62:5b:41:20:67:35:fd:6c:83:75:52:99:a0:34:b5:
3a:51:b0:ed:37:ea:84:00:40:d4:6e:40:b3:57:e7:
7e:13:e4:69:b6:c4:11:f6:e8:1c:c3:17:17:1c:6d:
4b:06:93:94:de:dd:a7:99:f6:f9:86:c1:7b:4d:87:
59:c1:80:9f:97:cd:8c:6c:18:0c:a0:5b:46:c9:c6:
89:36:cf:fa:b8:f7:7a:fd:b4:10:85:4d:b0:5a:c3:
cc:91:cd:49:f9:7d:27:d8:26:da:0a:41:2d:b8:ef:
f6:42:f9:0c:e0:a2:48:bf:99:bc:b2:45:f3:a1:8d:
f2:55:a9:be:78:92:54:f6:01:8d:c8:91:47:6b:26:
85:35:d0:62:a3:51:e1:b2:6c:95:71:c3:73:af:a5:
d7:1a:1e:30:fd:03:77:27:23:3d:9a:bb:5f:f8:09:
12:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:90:D6:72:F1:6B:6C:DE:7E:A7:F3:0F:B7:DE:9A:FE:6E:56:94:C8
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/FF7BF578A59D11EFB201FE3AC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
36.50.82.0/24
43.225.74.0/24
43.230.196.0/22
43.240.4.0/24
43.240.6.0/23
43.250.252.0/22
45.64.8.0/22
45.248.24.0/24
45.248.26.0/23
103.42.88.0/22
103.47.12.0/23
103.47.15.0/24
103.47.72.0/22
103.47.172.0/22
103.49.232.0/23
103.54.24.0-103.54.26.255
103.62.147.0/24
103.80.34.0/23
103.82.72.0/22
103.85.118.0/23
103.87.204.0/22
103.93.172.0/22
103.93.212.0/23
103.98.53.0/24
103.101.116.0/22
103.103.163.0/24
103.109.180.0/22
103.114.188.0/23
103.118.180.0/22
103.173.218.0/24
103.177.202.0/23
103.178.58.0/23
103.181.90.0/23
103.182.44.0/23
103.184.184.0/23
103.186.44.0/23
103.189.146.0/23
103.191.182.0/23
103.191.234.0/23
103.204.168.0/22
103.211.56.0-103.211.58.255
103.211.190.0/23
103.212.136.0/22
103.213.6.0/23
103.225.205.0-103.225.207.255
103.226.200.0/22
103.248.120.0/23
139.5.16.0/22
IPv6:
2405:5540::/32
Signature Algorithm: sha256WithRSAEncryption
aa:40:8b:d4:11:19:ae:22:80:70:90:e1:ac:79:e7:82:2e:05:
8b:12:3f:2a:97:10:c8:c3:77:3c:80:e7:0c:27:be:06:5d:4c:
8f:c9:04:78:bd:69:b8:9a:39:22:f5:03:d1:28:00:c6:01:26:
5f:cc:d5:04:19:12:1d:5b:ef:8e:71:76:df:bf:ab:e5:4c:14:
e3:95:bb:41:03:86:c2:65:2c:91:af:fa:10:f4:89:d7:ee:bc:
b6:7b:9c:83:73:70:7d:90:7b:46:32:4f:58:05:64:6c:24:1c:
33:27:08:06:36:09:54:07:7c:c5:c7:ac:d1:bf:44:09:8c:bb:
73:7c:4b:90:d5:15:04:08:b1:a7:31:d0:5e:39:88:6c:33:e4:
c4:11:81:31:2c:d3:8d:95:6d:02:6e:de:ea:df:72:7a:f8:45:
21:51:26:06:cf:81:44:4c:fa:60:7f:fc:78:d9:0c:a3:f8:97:
4e:19:c7:0b:46:0c:1d:94:ac:a1:4d:ed:af:83:97:9c:b7:5f:
6d:2a:26:1e:d4:1b:30:58:44:94:8c:bc:ac:ea:9c:21:b3:42:
3b:32:e2:bf:5c:a4:6a:b6:37:04:c4:b7:fe:74:8f:38:07:fa:
5c:dc:23:29:68:bb:02:92:75:f6:b8:05:ba:91:52:b3:bb:7d:
f4:42:71:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 11:48:06 2024 by rpki-client on console-ams.rpki-client.org