Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91AF59C/735DC4D61D8D11E29A7543EB08B02CD2/117E1F1A68D411EEB1313F7DC4F9AE02.roa
File: 117E1F1A68D411EEB1313F7DC4F9AE02.roa (raw, json)
Hash identifier: ecxfUMv8CveekPNpexIyh32yt82JgRfuOxFANCVgDNE=
Subject key identifier: A8:05:35:1E:87:14:5E:FA:26:46:BB:7B:40:48:4F:16:17:D2:BF:04
Certificate issuer: /CN=A91AF59C/serialNumber=C1296FFAD34F29F04E0EFAD5D9244C02A7D87D8D
Certificate serial: 33F7
Authority key identifier: C1:29:6F:FA:D3:4F:29:F0:4E:0E:FA:D5:D9:24:4C:02:A7:D8:7D:8D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wSlv-tNPKfBODvrV2SRMAqfYfY0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91AF59C/735DC4D61D8D11E29A7543EB08B02CD2/117E1F1A68D411EEB1313F7DC4F9AE02.roa
Signing time: Wed 24 Apr 2024 14:50:42 +0000
ROA not before: Wed 24 Apr 2024 14:50:42 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 7604
IP address blocks: 103.25.112.0/23 maxlen: 23
103.241.200.0/22 maxlen: 22
103.241.200.0/24 maxlen: 24
103.241.201.0/24 maxlen: 24
119.252.64.0/22 maxlen: 22
119.252.64.0/24 maxlen: 24
119.252.68.0/22 maxlen: 22
119.252.72.0/22 maxlen: 22
119.252.72.0/23 maxlen: 23
119.252.74.0/24 maxlen: 24
119.252.76.0/22 maxlen: 22
119.252.80.0/22 maxlen: 22
119.252.84.0/22 maxlen: 22
119.252.86.0/24 maxlen: 24
119.252.88.0/22 maxlen: 22
119.252.88.0/23 maxlen: 23
119.252.91.0/24 maxlen: 24
119.252.92.0/22 maxlen: 23
122.202.64.0/20 maxlen: 20
202.74.160.0/20 maxlen: 20
202.74.160.0/22 maxlen: 22
202.74.164.0/22 maxlen: 24
202.74.168.0/22 maxlen: 22
202.74.172.0/22 maxlen: 22
202.74.174.0/24 maxlen: 24
202.74.176.0/22 maxlen: 22
202.74.178.0/24 maxlen: 24
202.74.180.0/22 maxlen: 22
202.74.184.0/22 maxlen: 22
202.74.188.0/22 maxlen: 22
202.74.188.0/23 maxlen: 23
202.191.4.0/22 maxlen: 24
203.7.224.0/23 maxlen: 23
203.7.224.0/24 maxlen: 24
203.23.208.0/21 maxlen: 21
203.23.216.0/22 maxlen: 22
203.23.220.0/22 maxlen: 22
203.23.220.0/23 maxlen: 24
203.23.223.0/24 maxlen: 24
203.24.54.0/24 maxlen: 24
203.25.26.0/23 maxlen: 23
203.30.34.0/24 maxlen: 24
203.31.0.0/24 maxlen: 24
203.32.124.0/22 maxlen: 22
203.32.125.0/24 maxlen: 24
203.34.30.0/23 maxlen: 23
203.34.30.0/24 maxlen: 24
203.55.198.0/24 maxlen: 24
203.124.176.0/20 maxlen: 20
203.196.92.0/22 maxlen: 22
203.209.160.0/20 maxlen: 20
203.209.160.0/22 maxlen: 22
203.209.164.0/24 maxlen: 24
203.209.166.0/23 maxlen: 23
203.209.168.0/24 maxlen: 24
203.209.169.0/24 maxlen: 24
203.209.170.0/23 maxlen: 23
203.209.172.0/22 maxlen: 22
2401:400::/32 maxlen: 32
2403:3400::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91AF59C/735DC4D61D8D11E29A7543EB08B02CD2/wSlv-tNPKfBODvrV2SRMAqfYfY0.crl
rsync://rpki.apnic.net/member_repository/A91AF59C/735DC4D61D8D11E29A7543EB08B02CD2/wSlv-tNPKfBODvrV2SRMAqfYfY0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wSlv-tNPKfBODvrV2SRMAqfYfY0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 13 Jun 2024 14:43:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13303 (0x33f7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91AF59C/serialNumber=C1296FFAD34F29F04E0EFAD5D9244C02A7D87D8D
Validity
Not Before: Apr 24 14:50:42 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=66291c42-6e3a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:81:2c:40:23:8d:02:78:7e:15:17:ad:06:a3:
3a:c9:ae:a3:f1:40:eb:27:db:0e:b0:08:26:cf:92:
d8:26:7c:26:7f:be:de:1c:ab:c9:16:44:dc:4c:01:
22:ce:de:c6:6e:be:8b:29:84:71:cf:5e:1b:cd:30:
e7:26:ac:fc:28:fd:98:4f:85:12:9e:07:9b:9e:39:
8d:1c:7c:b6:d0:ca:50:b7:a9:92:46:3f:0c:89:62:
a3:bf:89:c5:1b:31:d6:65:c5:cd:3c:24:c9:a5:fd:
4d:21:47:da:a8:a5:32:af:04:34:88:69:93:aa:c6:
9c:f3:a0:32:97:e7:e4:8e:30:26:5b:7b:d0:18:9f:
86:1b:e0:9a:85:9f:8a:71:1a:ea:3b:93:b9:ce:70:
59:9b:d4:66:c9:a5:fb:75:69:24:ba:b3:e1:d6:3a:
98:fc:38:23:51:ea:40:91:f6:38:ea:7a:ba:75:c8:
08:5c:85:2c:f1:62:fd:7f:49:19:33:9d:7d:a9:c6:
7a:4d:30:e4:ff:66:e3:cd:05:be:f6:33:e6:b6:32:
ab:09:2e:33:04:ab:84:04:16:b0:20:7c:49:46:9c:
3d:4b:53:a3:dc:f6:a7:0b:4c:e1:4f:d9:86:3f:da:
a8:2e:93:aa:bd:d1:63:e9:5c:ef:2b:d3:b5:9c:04:
1c:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:05:35:1E:87:14:5E:FA:26:46:BB:7B:40:48:4F:16:17:D2:BF:04
X509v3 Authority Key Identifier:
keyid:C1:29:6F:FA:D3:4F:29:F0:4E:0E:FA:D5:D9:24:4C:02:A7:D8:7D:8D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91AF59C/735DC4D61D8D11E29A7543EB08B02CD2/wSlv-tNPKfBODvrV2SRMAqfYfY0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wSlv-tNPKfBODvrV2SRMAqfYfY0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AF59C/735DC4D61D8D11E29A7543EB08B02CD2/117E1F1A68D411EEB1313F7DC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.25.112.0/23
103.241.200.0/22
119.252.64.0/19
122.202.64.0/20
202.74.160.0/19
202.191.4.0/22
203.7.224.0/23
203.23.208.0/20
203.24.54.0/24
203.25.26.0/23
203.30.34.0/24
203.31.0.0/24
203.32.124.0/22
203.34.30.0/23
203.55.198.0/24
203.124.176.0/20
203.196.92.0/22
203.209.160.0/20
IPv6:
2401:400::/32
2403:3400::/32
Signature Algorithm: sha256WithRSAEncryption
56:31:7e:9a:5b:ff:9c:9d:1f:67:68:f4:aa:25:6d:8e:b2:da:
aa:bb:15:e1:0a:81:de:71:c9:44:6e:e7:7f:92:8e:73:69:c5:
a7:f0:0c:3f:b1:d6:e3:ee:3e:bf:e4:5d:bc:72:37:08:23:56:
c1:e9:02:4e:a7:0c:ec:ee:12:a0:fc:68:7f:75:d9:db:65:83:
21:9c:24:4d:a3:13:8d:c7:26:5d:b1:9d:bb:be:bf:a3:ee:7e:
8c:5d:b5:6a:9f:41:cf:d5:b1:c3:70:96:20:7b:b1:90:50:63:
e0:6b:c6:87:a8:0c:89:18:a5:51:eb:25:7e:60:32:61:ea:ad:
0b:3e:94:8d:57:5e:79:66:77:ce:3b:c0:bc:41:3c:34:00:9f:
28:56:08:44:89:9e:d8:fe:01:36:e3:45:a7:78:c6:03:00:b3:
cb:76:75:4f:8a:5f:d5:99:e8:6e:94:f7:f9:2e:14:8a:a5:43:
1a:fd:a4:76:59:10:44:a5:60:ff:84:27:1a:7c:e3:51:a2:c8:
4c:81:ce:01:84:f0:55:dc:11:e6:66:ae:75:20:62:88:07:6b:
59:67:7b:f9:24:30:a2:cf:50:5e:32:c4:b8:ec:bf:0c:53:a9:
ec:32:cc:77:e0:11:3f:42:b7:ef:dd:eb:a8:86:a9:a6:d8:e1:
c1:40:6c:24
-----BEGIN CERTIFICATE-----
MIIF8DCCBNigAwIBAgICM/cwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QUY1OUMxMTAvBgNVBAUTKEMxMjk2RkZBRDM0RjI5RjA0RTBFRkFENUQ5MjQ0QzAy
QTdEODdEOEQwHhcNMjQwNDI0MTQ1MDQyWhcNMjUwNzAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02NjI5MWM0Mi02ZTNhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAuIEsQCONAnh+FRetBqM6ya6j8UDrJ9sOsAgmz5LYJnwmf77eHKvJFkTcTAEi
zt7Gbr6LKYRxz14bzTDnJqz8KP2YT4USngebnjmNHHy20MpQt6mSRj8MiWKjv4nF
GzHWZcXNPCTJpf1NIUfaqKUyrwQ0iGmTqsac86Ayl+fkjjAmW3vQGJ+GG+CahZ+K
cRrqO5O5znBZm9RmyaX7dWkkurPh1jqY/DgjUepAkfY46nq6dcgIXIUs8WL9f0kZ
M519qcZ6TTDk/2bjzQW+9jPmtjKrCS4zBKuEBBawIHxJRpw9S1Oj3PanC0zhT9mG
P9qoLpOqvdFj6VzvK9O1nAQc9QIDAQABo4IDFDCCAxAwHQYDVR0OBBYEFKgFNR6H
FF76Jka7e0BITxYX0r8EMB8GA1UdIwQYMBaAFMEpb/rTTynwTg761dkkTAKn2H2N
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBRjU5Qy83MzVEQzRENjFE
OEQxMUUyOUE3NTQzRUIwOEIwMkNEMi93U2x2LXROUEtmQk9EdnJWMlNSTUFxZllm
WTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3dTbHYtdE5QS2ZCT0R2clYyU1JNQXFmWWZZMC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
QUY1OUMvNzM1REM0RDYxRDhEMTFFMjlBNzU0M0VCMDhCMDJDRDIvMTE3RTFGMUE2
OEQ0MTFFRUIxMzEzRjdEQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwgZ0GCCsGAQUFBwEHAQH/
BIGNMIGKMHIEAgABMGwDBAFnGXADBAJn8cgDBAV3/EADBAR6ykADBAXKSqADBALK
vwQDBAHLB+ADBATLF9ADBADLGDYDBAHLGRoDBADLHiIDBADLHwADBALLIHwDBAHL
Ih4DBADLN8YDBATLfLADBALLxFwDBATL0aAwFAQCAAIwDgMFACQBBAADBQAkAzQA
MA0GCSqGSIb3DQEBCwUAA4IBAQBWMX6aW/+cnR9naPSqJW2OstqquxXhCoHecclE
bud/ko5zacWn8Aw/sdbj7j6/5F28cjcII1bB6QJOpwzs7hKg/Gh/ddnbZYMhnCRN
oxONxyZdsZ27vr+j7n6MXbVqn0HP1bHDcJYge7GQUGPga8aHqAyJGKVR6yV+YDJh
6q0LPpSNV155ZnfOO8C8QTw0AJ8oVghEiZ7Y/gE240WneMYDALPLdnVPil/Vmehu
lPf5LhSKpUMa/aR2WRBEpWD/hCcafONRoshMgc4BhPBV3BHmZq51IGKIB2tZZ3v5
JDCiz1BeMsS47L8MU6nsMsx34BE/Qrfv3euohqmm2OHBQGwk
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:48:19 2024 by rpki-client on console-fra.rpki-client.org