Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91CD39D/DE7D2F944E7611ECA5720B79C4F9AE02/1E4EDD1A038411EF9EA1DE1DC4F9AE02.roa
File: 1E4EDD1A038411EF9EA1DE1DC4F9AE02.roa (raw, json)
Hash identifier: K544onJ385XblHl4Y1yNz3h1Gd/UadCP3sA5JTj3oy0=
Subject key identifier: 43:6A:86:E8:41:F1:7A:78:75:FE:FB:B8:A2:B1:95:52:2B:35:1D:77
Certificate issuer: /CN=A91CD39D/serialNumber=56B983E46BCBA115FF2265FE491909C7D74147F3
Certificate serial: 0474
Authority key identifier: 56:B9:83:E4:6B:CB:A1:15:FF:22:65:FE:49:19:09:C7:D7:41:47:F3
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VrmD5GvLoRX_ImX-SRkJx9dBR_M.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91CD39D/DE7D2F944E7611ECA5720B79C4F9AE02/1E4EDD1A038411EF9EA1DE1DC4F9AE02.roa
Signing time: Fri 31 May 2024 17:21:16 +0000
ROA not before: Fri 31 May 2024 17:21:16 +0000
ROA not after: Sun 01 Dec 2024 00:00:00 +0000
asID: 55410
IP address blocks: 42.104.64.0/21 maxlen: 24
42.104.72.0/21 maxlen: 24
42.104.80.0/21 maxlen: 24
42.104.88.0/21 maxlen: 24
42.104.96.0/21 maxlen: 24
42.104.104.0/21 maxlen: 24
42.104.112.0/21 maxlen: 24
42.104.120.0/21 maxlen: 24
43.245.88.0/22 maxlen: 24
103.29.44.0/22 maxlen: 24
118.185.0.0/16 maxlen: 16
118.185.0.0/21 maxlen: 24
118.185.8.0/21 maxlen: 24
118.185.16.0/21 maxlen: 24
118.185.24.0/21 maxlen: 21
118.185.24.0/24 maxlen: 24
118.185.25.0/24 maxlen: 24
118.185.26.0/24 maxlen: 24
118.185.27.0/24 maxlen: 24
118.185.28.0/24 maxlen: 24
118.185.29.0/24 maxlen: 24
118.185.30.0/24 maxlen: 24
118.185.31.0/24 maxlen: 24
118.185.32.0/21 maxlen: 24
118.185.40.0/21 maxlen: 24
118.185.48.0/21 maxlen: 24
118.185.56.0/21 maxlen: 24
118.185.64.0/21 maxlen: 24
118.185.72.0/21 maxlen: 24
118.185.80.0/21 maxlen: 24
118.185.88.0/21 maxlen: 24
118.185.96.0/21 maxlen: 21
118.185.97.0/24 maxlen: 24
118.185.98.0/24 maxlen: 24
118.185.99.0/24 maxlen: 24
118.185.100.0/24 maxlen: 24
118.185.101.0/24 maxlen: 24
118.185.102.0/24 maxlen: 24
118.185.103.0/24 maxlen: 24
118.185.104.0/21 maxlen: 24
118.185.112.0/21 maxlen: 24
118.185.120.0/21 maxlen: 24
118.185.128.0/20 maxlen: 21
118.185.128.0/24 maxlen: 24
118.185.129.0/24 maxlen: 24
118.185.130.0/24 maxlen: 24
118.185.131.0/24 maxlen: 24
118.185.132.0/24 maxlen: 24
118.185.133.0/24 maxlen: 24
118.185.134.0/24 maxlen: 24
118.185.135.0/24 maxlen: 24
118.185.136.0/24 maxlen: 24
118.185.137.0/24 maxlen: 24
118.185.138.0/24 maxlen: 24
118.185.139.0/24 maxlen: 24
118.185.140.0/24 maxlen: 24
118.185.141.0/24 maxlen: 24
118.185.142.0/24 maxlen: 24
118.185.143.0/24 maxlen: 24
118.185.144.0/21 maxlen: 24
118.185.152.0/21 maxlen: 24
118.185.160.0/21 maxlen: 24
118.185.168.0/21 maxlen: 24
118.185.176.0/21 maxlen: 24
118.185.184.0/21 maxlen: 24
118.185.192.0/21 maxlen: 24
118.185.200.0/21 maxlen: 24
118.185.208.0/21 maxlen: 24
118.185.216.0/21 maxlen: 24
118.185.224.0/21 maxlen: 24
118.185.232.0/21 maxlen: 24
118.185.240.0/21 maxlen: 24
118.185.248.0/21 maxlen: 24
122.15.0.0/16 maxlen: 16
122.15.0.0/21 maxlen: 24
122.15.8.0/21 maxlen: 24
122.15.16.0/21 maxlen: 24
122.15.24.0/21 maxlen: 24
122.15.32.0/21 maxlen: 24
122.15.40.0/21 maxlen: 24
122.15.48.0/21 maxlen: 24
122.15.56.0/21 maxlen: 24
122.15.64.0/21 maxlen: 24
122.15.72.0/21 maxlen: 24
122.15.80.0/21 maxlen: 24
122.15.88.0/21 maxlen: 24
122.15.96.0/21 maxlen: 24
122.15.104.0/21 maxlen: 24
122.15.112.0/21 maxlen: 24
122.15.120.0/21 maxlen: 24
122.15.128.0/21 maxlen: 24
122.15.136.0/21 maxlen: 24
122.15.144.0/21 maxlen: 24
122.15.152.0/21 maxlen: 24
122.15.160.0/21 maxlen: 24
122.15.168.0/21 maxlen: 24
122.15.176.0/21 maxlen: 24
122.15.184.0/21 maxlen: 24
122.15.192.0/21 maxlen: 24
122.15.200.0/21 maxlen: 24
122.15.208.0/21 maxlen: 24
122.15.216.0/21 maxlen: 24
122.15.224.0/21 maxlen: 24
122.15.232.0/21 maxlen: 24
122.15.240.0/21 maxlen: 24
122.15.248.0/21 maxlen: 24
123.63.0.0/16 maxlen: 16
123.63.0.0/21 maxlen: 24
123.63.8.0/21 maxlen: 24
123.63.16.0/21 maxlen: 24
123.63.24.0/21 maxlen: 24
123.63.32.0/21 maxlen: 24
123.63.40.0/21 maxlen: 24
123.63.48.0/21 maxlen: 24
123.63.56.0/21 maxlen: 24
123.63.64.0/21 maxlen: 24
123.63.72.0/21 maxlen: 24
123.63.80.0/21 maxlen: 24
123.63.88.0/21 maxlen: 24
123.63.96.0/21 maxlen: 24
123.63.104.0/21 maxlen: 24
123.63.112.0/21 maxlen: 24
123.63.120.0/21 maxlen: 24
123.63.128.0/18 maxlen: 18
123.63.128.0/20 maxlen: 24
123.63.144.0/21 maxlen: 24
123.63.152.0/21 maxlen: 24
123.63.160.0/19 maxlen: 19
123.63.160.0/21 maxlen: 24
123.63.168.0/21 maxlen: 24
123.63.176.0/21 maxlen: 24
123.63.184.0/21 maxlen: 24
123.63.192.0/18 maxlen: 18
123.63.192.0/21 maxlen: 24
123.63.200.0/21 maxlen: 24
123.63.208.0/21 maxlen: 24
123.63.216.0/21 maxlen: 24
123.63.224.0/19 maxlen: 19
123.63.224.0/21 maxlen: 24
123.63.232.0/21 maxlen: 24
123.63.240.0/21 maxlen: 24
123.63.248.0/21 maxlen: 24
124.247.192.0/24 maxlen: 24
124.247.193.0/24 maxlen: 24
124.247.194.0/24 maxlen: 24
124.247.198.0/24 maxlen: 24
124.247.199.0/24 maxlen: 24
124.247.201.0/24 maxlen: 24
124.247.203.0/24 maxlen: 24
124.247.204.0/24 maxlen: 24
124.247.205.0/24 maxlen: 24
124.247.224.0/24 maxlen: 24
124.247.228.0/24 maxlen: 24
124.247.229.0/24 maxlen: 24
124.247.230.0/24 maxlen: 24
124.247.231.0/24 maxlen: 24
124.247.232.0/24 maxlen: 24
124.247.233.0/24 maxlen: 24
124.247.234.0/24 maxlen: 24
124.247.235.0/24 maxlen: 24
124.247.236.0/24 maxlen: 24
182.19.0.0/19 maxlen: 19
182.19.0.0/20 maxlen: 24
182.19.16.0/20 maxlen: 24
182.19.32.0/19 maxlen: 19
182.19.32.0/20 maxlen: 24
182.19.48.0/20 maxlen: 24
182.19.64.0/20 maxlen: 24
182.19.80.0/21 maxlen: 24
182.19.88.0/21 maxlen: 24
182.19.96.0/19 maxlen: 24
2400:5200:401::/48 maxlen: 48
2400:5200:402::/48 maxlen: 48
2400:5200:403::/48 maxlen: 48
2400:5200:404::/48 maxlen: 48
2400:5200:c00::/40 maxlen: 48
2400:5200:1000::/40 maxlen: 48
2400:5200:1400::/40 maxlen: 48
2400:5200:1800::/40 maxlen: 48
2400:5200:1c00::/40 maxlen: 48
2400:5200:2000::/36 maxlen: 48
2400:5200:3000::/36 maxlen: 48
2400:5200:4000::/36 maxlen: 48
2400:5200:5000::/36 maxlen: 48
2400:5200:6000::/36 maxlen: 48
2400:5200:7000::/36 maxlen: 48
2400:5200:8000::/36 maxlen: 48
2400:5200:9000::/36 maxlen: 48
2400:5200:a000::/36 maxlen: 48
2400:5200:b000::/36 maxlen: 48
2400:5200:c000::/36 maxlen: 48
2400:5200:d000::/36 maxlen: 48
2400:5200:e000::/36 maxlen: 48
2400:5200:f000::/36 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91CD39D/DE7D2F944E7611ECA5720B79C4F9AE02/VrmD5GvLoRX_ImX-SRkJx9dBR_M.crl
rsync://rpki.apnic.net/member_repository/A91CD39D/DE7D2F944E7611ECA5720B79C4F9AE02/VrmD5GvLoRX_ImX-SRkJx9dBR_M.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VrmD5GvLoRX_ImX-SRkJx9dBR_M.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 08 Jun 2024 03:38:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1140 (0x474)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91CD39D/serialNumber=56B983E46BCBA115FF2265FE491909C7D74147F3
Validity
Not Before: May 31 17:21:16 2024 GMT
Not After : Dec 1 00:00:00 2024 GMT
Subject: CN=665a070c-dd47
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:69:0d:a3:fc:45:55:72:56:24:dd:b8:fb:09:
3e:4e:6f:be:44:39:7c:3a:6f:bd:22:0e:18:3c:4f:
c4:87:02:8a:c0:b5:67:e8:cc:ee:1b:7b:bd:94:38:
ab:6b:c2:79:3b:dc:3a:a0:50:4c:15:1b:5d:25:a6:
da:f2:4d:de:76:b0:4c:bc:a6:59:f6:a3:8d:4a:45:
72:a7:88:f4:ef:24:25:ac:56:77:43:24:5f:ed:5b:
5c:dd:4d:02:88:2c:bd:54:77:59:f2:8d:02:e1:15:
62:7c:ac:c1:99:88:37:c0:a2:67:73:92:41:3f:dd:
cd:c7:84:f2:90:ef:58:54:85:91:36:44:df:10:92:
bb:17:d9:e8:dc:e9:52:95:77:de:a2:3e:65:64:4c:
a3:cc:e9:00:53:64:f6:88:e9:f4:c4:da:fc:fd:f5:
39:39:1b:3b:0a:32:ae:79:87:9a:d7:5a:65:eb:b1:
a8:53:3a:d9:d6:91:0a:8b:b0:dc:4d:33:44:15:b3:
ba:53:91:b9:c7:b0:b0:fb:9f:38:d2:53:ad:43:49:
9f:a4:1c:40:2d:a3:84:ed:30:fd:b9:60:fe:96:f3:
f8:31:73:6a:62:d2:86:5c:57:75:90:23:a9:f0:20:
25:9e:b1:03:5f:12:88:c2:94:89:4b:74:a0:ca:7e:
17:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:6A:86:E8:41:F1:7A:78:75:FE:FB:B8:A2:B1:95:52:2B:35:1D:77
X509v3 Authority Key Identifier:
keyid:56:B9:83:E4:6B:CB:A1:15:FF:22:65:FE:49:19:09:C7:D7:41:47:F3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91CD39D/DE7D2F944E7611ECA5720B79C4F9AE02/VrmD5GvLoRX_ImX-SRkJx9dBR_M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VrmD5GvLoRX_ImX-SRkJx9dBR_M.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CD39D/DE7D2F944E7611ECA5720B79C4F9AE02/1E4EDD1A038411EF9EA1DE1DC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
42.104.64.0/18
43.245.88.0/22
103.29.44.0/22
118.185.0.0/16
122.15.0.0/16
123.63.0.0/16
124.247.192.0-124.247.194.255
124.247.198.0/23
124.247.201.0/24
124.247.203.0-124.247.205.255
124.247.224.0/24
124.247.228.0-124.247.236.255
182.19.0.0/17
IPv6:
2400:5200:401::-2400:5200:404:ffff:ffff:ffff:ffff:ffff
2400:5200:c00::/40
2400:5200:1000::/40
2400:5200:1400::/40
2400:5200:1800::/40
2400:5200:1c00::/40
2400:5200:2000::-2400:5200:ffff:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
c3:f6:e5:1c:aa:2c:ab:cf:75:bc:51:71:ff:96:5f:f5:a1:c2:
41:da:b2:3a:e9:c7:b9:84:d4:11:be:5b:35:cc:5c:74:81:5c:
c2:28:4e:a5:c4:ed:ab:8a:58:dc:db:e0:11:42:f8:63:eb:69:
82:31:00:68:74:38:3f:f6:5f:6a:1f:17:8e:01:cc:15:7e:0a:
39:81:4f:71:54:12:37:1f:61:4f:36:c9:3a:aa:70:36:98:d2:
30:ac:b2:0a:fc:ef:c1:60:ca:98:f4:dd:e0:0b:5b:9e:1e:66:
8f:bc:1e:5b:39:6f:b9:30:0c:8f:22:9e:79:3f:ec:ae:81:ea:
9e:20:c0:22:27:fa:c6:8b:33:c2:3d:b9:19:1c:9f:85:06:61:
06:66:ee:bd:49:1f:e3:54:01:2c:b6:06:71:f7:4b:f2:b1:70:
85:c7:fc:fa:39:73:d7:a4:08:32:ba:84:c5:bc:cd:87:06:84:
71:fa:36:86:76:87:a2:4d:4d:b5:c6:1f:8f:03:2c:b6:0d:c7:
6a:06:19:6e:c3:2b:b2:61:04:9b:3c:dd:77:13:32:6a:a3:ee:
d0:ba:77:62:e3:e4:c2:9d:01:8b:47:d9:bc:f5:ca:e3:60:38:
e5:eb:0b:e6:71:15:d7:7f:e0:2d:18:1e:99:c9:fb:49:4a:a0:
82:88:a7:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 07:08:27 2024 by rpki-client on console-ams.rpki-client.org