Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D7156/B9F0844CF23D11E9AF842724C4F9AE02/D079FD00074411EDB229157DC4F9AE02.roa
File: D079FD00074411EDB229157DC4F9AE02.roa (raw, json)
Hash identifier: 50eKTtJ62gu87SeFQHei7onbeP2Sfh2HslajePdoEC0=
Subject key identifier: 55:8F:C8:66:23:D8:4E:3A:10:2A:76:11:74:C9:44:D7:E5:29:BB:5F
Certificate issuer: /CN=A91D7156/serialNumber=0346B634F263F63684239DB6DF64BBBACDF7F8A4
Certificate serial: 0C6C
Authority key identifier: 03:46:B6:34:F2:63:F6:36:84:23:9D:B6:DF:64:BB:BA:CD:F7:F8:A4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A0a2NPJj9jaEI52232S7us33-KQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D7156/B9F0844CF23D11E9AF842724C4F9AE02/D079FD00074411EDB229157DC4F9AE02.roa
Signing time: Fri 24 May 2024 19:28:10 +0000
ROA not before: Fri 24 May 2024 19:28:10 +0000
ROA not after: Wed 30 Jul 2025 00:00:00 +0000
asID: 24309
IP address blocks: 45.112.136.0/22 maxlen: 22
103.227.96.0/22 maxlen: 24
106.51.0.0/16 maxlen: 16
106.51.0.0/22 maxlen: 22
106.51.3.0/24 maxlen: 24
106.51.5.0/24 maxlen: 24
106.51.7.0/24 maxlen: 24
106.51.8.0/21 maxlen: 21
106.51.11.0/24 maxlen: 24
106.51.16.0/22 maxlen: 22
106.51.20.0/22 maxlen: 22
106.51.24.0/21 maxlen: 22
106.51.32.0/24 maxlen: 24
106.51.33.0/24 maxlen: 24
106.51.34.0/23 maxlen: 23
106.51.36.0/22 maxlen: 22
106.51.40.0/24 maxlen: 24
106.51.41.0/24 maxlen: 24
106.51.42.0/24 maxlen: 24
106.51.43.0/24 maxlen: 24
106.51.44.0/24 maxlen: 24
106.51.45.0/24 maxlen: 24
106.51.46.0/23 maxlen: 23
106.51.52.0/22 maxlen: 22
106.51.56.0/23 maxlen: 23
106.51.57.0/24 maxlen: 24
106.51.58.0/24 maxlen: 24
106.51.59.0/24 maxlen: 24
106.51.60.0/22 maxlen: 22
106.51.64.0/19 maxlen: 19
106.51.96.0/22 maxlen: 22
106.51.100.0/23 maxlen: 23
106.51.102.0/24 maxlen: 24
106.51.103.0/24 maxlen: 24
106.51.104.0/22 maxlen: 22
106.51.108.0/22 maxlen: 22
106.51.112.0/24 maxlen: 24
106.51.115.0/24 maxlen: 24
106.51.116.0/22 maxlen: 22
106.51.120.0/22 maxlen: 22
106.51.124.0/23 maxlen: 23
106.51.126.0/24 maxlen: 24
106.51.127.0/24 maxlen: 24
106.51.128.0/22 maxlen: 22
106.51.132.0/22 maxlen: 22
106.51.136.0/22 maxlen: 22
106.51.140.0/22 maxlen: 22
106.51.144.0/22 maxlen: 22
106.51.148.0/22 maxlen: 22
106.51.152.0/22 maxlen: 22
106.51.152.0/24 maxlen: 24
106.51.158.0/23 maxlen: 23
106.51.159.0/24 maxlen: 24
106.51.160.0/21 maxlen: 22
106.51.168.0/21 maxlen: 22
106.51.176.0/21 maxlen: 22
106.51.184.0/21 maxlen: 22
106.51.192.0/19 maxlen: 19
106.51.192.0/20 maxlen: 20
106.51.192.0/21 maxlen: 21
106.51.224.0/22 maxlen: 22
106.51.226.0/23 maxlen: 23
106.51.228.0/22 maxlen: 22
106.51.232.0/22 maxlen: 22
106.51.236.0/22 maxlen: 22
106.51.240.0/22 maxlen: 22
106.51.244.0/24 maxlen: 24
106.51.245.0/24 maxlen: 24
106.51.246.0/23 maxlen: 23
106.51.248.0/22 maxlen: 22
106.51.252.0/23 maxlen: 24
106.51.254.0/24 maxlen: 24
202.83.16.0/22 maxlen: 22
202.83.20.0/22 maxlen: 24
202.83.24.0/23 maxlen: 24
202.83.26.0/24 maxlen: 24
202.83.29.0/24 maxlen: 24
2406:7400::/48 maxlen: 48
2406:7400:1::/48 maxlen: 48
2406:7400:2::/48 maxlen: 48
2406:7400:4::/48 maxlen: 48
2406:7400:7::/48 maxlen: 48
2406:7400:8::/48 maxlen: 48
2406:7400:9::/48 maxlen: 48
2406:7400:a::/48 maxlen: 48
2406:7400:b::/48 maxlen: 48
2406:7400:c::/48 maxlen: 48
2406:7400:d::/48 maxlen: 48
2406:7400:10::/48 maxlen: 48
2406:7400:11::/48 maxlen: 48
2406:7400:12::/48 maxlen: 48
2406:7400:13::/48 maxlen: 48
2406:7400:40::/48 maxlen: 48
2406:7400:41::/48 maxlen: 48
2406:7400:42::/48 maxlen: 48
2406:7400:43::/48 maxlen: 48
2406:7400:44::/48 maxlen: 48
2406:7400:45::/48 maxlen: 48
2406:7400:50::/48 maxlen: 48
2406:7400:51::/48 maxlen: 48
2406:7400:52::/48 maxlen: 48
2406:7400:53::/48 maxlen: 48
2406:7400:54::/48 maxlen: 48
2406:7400:55::/48 maxlen: 48
2406:7400:56::/48 maxlen: 48
2406:7400:57::/48 maxlen: 48
2406:7400:58::/48 maxlen: 48
2406:7400:59::/48 maxlen: 48
2406:7400:5a::/48 maxlen: 48
2406:7400:5b::/48 maxlen: 48
2406:7400:5c::/48 maxlen: 48
2406:7400:5d::/48 maxlen: 48
2406:7400:5e::/48 maxlen: 48
2406:7400:60::/48 maxlen: 48
2406:7400:61::/48 maxlen: 48
2406:7400:62::/48 maxlen: 48
2406:7400:63::/48 maxlen: 48
2406:7400:70::/48 maxlen: 48
2406:7400:71::/48 maxlen: 48
2406:7400:72::/48 maxlen: 48
2406:7400:73::/48 maxlen: 48
2406:7400:80::/48 maxlen: 48
2406:7400:81::/48 maxlen: 48
2406:7400:82::/48 maxlen: 48
2406:7400:83::/48 maxlen: 48
2406:7400:94::/48 maxlen: 48
2406:7400:97::/48 maxlen: 48
2406:7400:9c::/48 maxlen: 48
2406:7400:9d::/48 maxlen: 48
2406:7400:9e::/48 maxlen: 48
2406:7400:9f::/48 maxlen: 48
2406:7400:b0::/48 maxlen: 48
2406:7400:b1::/48 maxlen: 48
2406:7400:b2::/48 maxlen: 48
2406:7400:b3::/48 maxlen: 48
2406:7400:b4::/48 maxlen: 48
2406:7400:b5::/48 maxlen: 48
2406:7400:b7::/48 maxlen: 48
2406:7400:b8::/48 maxlen: 48
2406:7400:b9::/48 maxlen: 48
2406:7400:ba::/48 maxlen: 48
2406:7400:bb::/48 maxlen: 48
2406:7400:bc::/48 maxlen: 48
2406:7400:bd::/48 maxlen: 48
2406:7400:be::/48 maxlen: 48
2406:7400:bf::/48 maxlen: 48
2406:7400:c0::/48 maxlen: 48
2406:7400:c1::/48 maxlen: 48
2406:7400:c2::/48 maxlen: 48
2406:7400:c3::/48 maxlen: 48
2406:7400:c4::/48 maxlen: 48
2406:7400:c5::/48 maxlen: 48
2406:7400:c6::/48 maxlen: 48
2406:7400:c7::/48 maxlen: 48
2406:7400:c8::/48 maxlen: 48
2406:7400:c9::/48 maxlen: 48
2406:7400:ca::/48 maxlen: 48
2406:7400:cb::/48 maxlen: 48
2406:7400:cc::/48 maxlen: 48
2406:7400:f1::/48 maxlen: 48
2406:7400:f2::/48 maxlen: 48
2406:7400:f3::/48 maxlen: 48
2406:7400:f4::/48 maxlen: 48
2406:7400:f5::/48 maxlen: 48
2406:7400:f6::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D7156/B9F0844CF23D11E9AF842724C4F9AE02/A0a2NPJj9jaEI52232S7us33-KQ.crl
rsync://rpki.apnic.net/member_repository/A91D7156/B9F0844CF23D11E9AF842724C4F9AE02/A0a2NPJj9jaEI52232S7us33-KQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A0a2NPJj9jaEI52232S7us33-KQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 23 Jun 2024 19:11:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3180 (0xc6c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D7156/serialNumber=0346B634F263F63684239DB6DF64BBBACDF7F8A4
Validity
Not Before: May 24 19:28:10 2024 GMT
Not After : Jul 30 00:00:00 2025 GMT
Subject: CN=6650ea49-6563
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:8a:1f:49:b5:de:09:ba:ba:54:c1:b8:8e:af:
3e:d4:6a:72:0e:0a:39:75:58:43:ef:05:d6:a1:22:
3c:bb:05:c1:c5:31:77:d1:29:d8:28:cb:a3:9e:bf:
35:86:8b:c2:88:dc:69:09:c5:d8:1f:38:35:6f:3b:
b1:99:fe:05:a4:33:5e:5d:20:58:a9:e7:27:e2:79:
74:ad:5f:62:15:e7:d1:43:77:00:b3:4a:74:ae:31:
1d:ca:d8:a7:ec:d9:1a:7c:67:27:0b:fb:28:8f:1c:
6a:cf:25:8d:b1:8e:c0:4b:96:c0:0c:d6:f1:da:73:
1c:94:ff:6e:98:55:2e:fa:71:1a:d6:fd:54:80:d6:
d3:b7:50:83:47:bc:34:9a:85:2a:df:c6:8a:a6:1e:
03:64:03:56:e8:c3:68:d2:13:b5:25:7a:ef:e5:14:
2a:54:7c:e9:6f:19:a7:80:df:ee:24:75:f4:ba:ab:
03:5f:96:33:39:18:27:5f:e4:36:06:15:8a:99:9f:
ff:87:34:63:07:1b:ad:61:ba:bb:99:d1:00:dd:04:
6e:11:e9:e8:82:d7:1b:6c:6d:6e:b1:0e:bc:64:26:
7f:84:44:d8:be:ba:40:73:cc:92:ca:30:76:41:ce:
ff:6d:d3:73:02:1e:21:30:ef:26:e0:d7:12:0d:31:
2e:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:8F:C8:66:23:D8:4E:3A:10:2A:76:11:74:C9:44:D7:E5:29:BB:5F
X509v3 Authority Key Identifier:
keyid:03:46:B6:34:F2:63:F6:36:84:23:9D:B6:DF:64:BB:BA:CD:F7:F8:A4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D7156/B9F0844CF23D11E9AF842724C4F9AE02/A0a2NPJj9jaEI52232S7us33-KQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A0a2NPJj9jaEI52232S7us33-KQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D7156/B9F0844CF23D11E9AF842724C4F9AE02/D079FD00074411EDB229157DC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.112.136.0/22
103.227.96.0/22
106.51.0.0/16
202.83.16.0-202.83.26.255
202.83.29.0/24
IPv6:
2406:7400::-2406:7400:2:ffff:ffff:ffff:ffff:ffff
2406:7400:4::/48
2406:7400:7::-2406:7400:d:ffff:ffff:ffff:ffff:ffff
2406:7400:10::/46
2406:7400:40::-2406:7400:45:ffff:ffff:ffff:ffff:ffff
2406:7400:50::-2406:7400:5e:ffff:ffff:ffff:ffff:ffff
2406:7400:60::/46
2406:7400:70::/46
2406:7400:80::/46
2406:7400:94::/48
2406:7400:97::/48
2406:7400:9c::/46
2406:7400:b0::-2406:7400:b5:ffff:ffff:ffff:ffff:ffff
2406:7400:b7::-2406:7400:cc:ffff:ffff:ffff:ffff:ffff
2406:7400:f1::-2406:7400:f6:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
84:1c:9f:39:68:f6:53:cc:06:41:8d:d9:d8:83:91:bb:4d:36:
7a:04:52:ee:98:f6:d2:ed:14:02:d7:09:80:bc:c3:bf:05:e3:
50:a5:d5:a7:06:f7:82:cd:f4:3e:6e:58:34:11:31:ca:c5:a4:
eb:08:2a:59:7e:e6:6a:6d:5c:bf:90:7e:a3:6b:ed:15:a3:0c:
b0:b8:3c:84:84:38:73:13:53:01:e2:23:cf:d1:61:46:a6:c5:
01:f0:31:77:2f:eb:6a:85:8b:0f:a0:4d:e5:a3:cf:1b:63:19:
28:09:9b:78:f5:ad:a2:46:cd:68:94:61:4c:92:3f:b3:23:05:
52:14:e1:97:30:7a:9f:04:40:61:01:47:dd:4f:b7:de:9c:70:
8e:78:ef:6a:44:c4:81:c0:a1:cd:8c:33:b4:9b:df:46:78:17:
c8:76:28:a0:b9:72:2b:8e:2f:c2:4c:6d:8f:fa:4c:6d:3e:7a:
a1:f3:d2:bc:9b:c5:32:aa:36:ef:08:ba:1a:24:df:8c:2b:78:
ee:42:02:78:6b:b1:0d:fb:88:83:2c:00:ba:b7:83:b4:7e:7f:
f2:af:3e:63:58:01:6c:e9:07:8a:93:50:f2:f8:75:de:bf:a5:
28:a7:7f:19:a5:03:78:66:3b:95:be:f9:89:31:01:d5:05:c4:
0e:6e:fb:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 21:31:06 2024 by rpki-client on console-fra.rpki-client.org