Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D94A7/F70588781D8D11E2AD4A04EC08B02CD2/E5913F7878F611ECAF1C286CC4F9AE02.roa
File: E5913F7878F611ECAF1C286CC4F9AE02.roa (raw, json)
Hash identifier: JrrPdsoJpNSaaGFkEzvjmjb7G2E93NaLiJ2GLAagQHU=
Subject key identifier: B8:45:34:1C:50:82:E9:BA:A4:F3:73:90:8E:2C:11:79:37:BC:E2:69
Certificate issuer: /CN=A91D94A7/serialNumber=07992EECF623A0C7B8DA4ADA75454FA3F716A570
Certificate serial: 3610
Authority key identifier: 07:99:2E:EC:F6:23:A0:C7:B8:DA:4A:DA:75:45:4F:A3:F7:16:A5:70
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B5ku7PYjoMe42kradUVPo_cWpXA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D94A7/F70588781D8D11E2AD4A04EC08B02CD2/E5913F7878F611ECAF1C286CC4F9AE02.roa
Signing time: Wed 17 Jan 2024 06:28:31 +0000
ROA not before: Wed 17 Jan 2024 06:28:31 +0000
ROA not after: Fri 31 Jan 2025 00:00:00 +0000
asID: 131269
IP address blocks: 49.204.0.0/19 maxlen: 20
49.204.32.0/19 maxlen: 19
49.204.45.0/24 maxlen: 24
49.204.96.0/20 maxlen: 20
49.204.96.0/22 maxlen: 22
49.204.100.0/22 maxlen: 22
49.204.104.0/22 maxlen: 22
49.204.108.0/22 maxlen: 22
49.204.112.0/20 maxlen: 20
49.204.128.0/20 maxlen: 20
49.204.143.0/24 maxlen: 24
49.204.144.0/20 maxlen: 20
49.204.160.0/19 maxlen: 20
49.204.192.0/20 maxlen: 20
49.204.192.0/23 maxlen: 23
49.204.194.0/23 maxlen: 23
49.204.196.0/23 maxlen: 23
49.204.198.0/23 maxlen: 23
49.204.200.0/23 maxlen: 23
49.204.202.0/24 maxlen: 24
49.204.203.0/24 maxlen: 24
49.204.204.0/23 maxlen: 23
49.204.206.0/23 maxlen: 23
49.204.208.0/20 maxlen: 22
49.204.232.0/21 maxlen: 22
49.205.0.0/19 maxlen: 19
49.205.0.0/21 maxlen: 21
49.205.32.0/19 maxlen: 19
49.205.66.0/23 maxlen: 23
49.205.88.0/23 maxlen: 24
49.205.90.0/23 maxlen: 24
49.205.96.0/20 maxlen: 20
49.205.96.0/22 maxlen: 23
49.205.100.0/22 maxlen: 23
49.205.104.0/22 maxlen: 24
49.205.108.0/22 maxlen: 23
49.205.128.0/19 maxlen: 19
49.205.160.0/22 maxlen: 22
49.205.163.0/24 maxlen: 24
49.205.164.0/23 maxlen: 23
49.205.166.0/24 maxlen: 24
49.205.167.0/24 maxlen: 24
49.205.168.0/24 maxlen: 24
49.205.208.0/23 maxlen: 23
49.205.210.0/23 maxlen: 23
49.205.215.0/24 maxlen: 24
49.206.112.0/21 maxlen: 22
49.206.128.0/19 maxlen: 19
49.206.160.0/19 maxlen: 19
49.206.160.0/22 maxlen: 22
49.206.164.0/22 maxlen: 22
49.206.168.0/22 maxlen: 22
49.206.172.0/22 maxlen: 22
49.206.176.0/22 maxlen: 22
49.206.180.0/22 maxlen: 22
49.206.184.0/22 maxlen: 22
49.206.188.0/22 maxlen: 22
49.207.16.0/20 maxlen: 20
49.207.44.0/24 maxlen: 24
49.207.64.0/18 maxlen: 18
49.207.192.0/18 maxlen: 18
124.123.24.0/24 maxlen: 24
124.123.25.0/24 maxlen: 24
124.123.26.0/24 maxlen: 24
124.123.60.0/22 maxlen: 22
124.123.60.0/24 maxlen: 24
124.123.61.0/24 maxlen: 24
124.123.62.0/24 maxlen: 24
124.123.63.0/24 maxlen: 24
124.123.94.0/24 maxlen: 24
124.123.95.0/24 maxlen: 24
124.123.124.0/23 maxlen: 23
124.123.126.0/24 maxlen: 24
124.123.127.0/24 maxlen: 24
124.123.128.0/19 maxlen: 19
124.123.216.0/21 maxlen: 22
124.123.224.0/19 maxlen: 19
124.123.224.0/21 maxlen: 21
124.123.232.0/21 maxlen: 21
124.123.240.0/21 maxlen: 21
124.123.248.0/21 maxlen: 21
183.82.1.0/24 maxlen: 24
183.82.2.0/24 maxlen: 24
183.82.3.0/24 maxlen: 24
183.82.4.0/24 maxlen: 24
183.82.5.0/24 maxlen: 24
183.82.6.0/24 maxlen: 24
183.82.7.0/24 maxlen: 24
183.82.8.0/24 maxlen: 24
183.82.9.0/24 maxlen: 24
183.82.10.0/24 maxlen: 24
183.82.11.0/24 maxlen: 24
183.82.12.0/24 maxlen: 24
183.82.13.0/24 maxlen: 24
183.82.14.0/24 maxlen: 24
183.82.15.0/24 maxlen: 24
183.82.64.0/19 maxlen: 19
183.82.160.0/20 maxlen: 20
183.82.176.0/22 maxlen: 22
183.82.204.0/22 maxlen: 22
183.82.208.0/20 maxlen: 20
183.82.224.0/20 maxlen: 20
183.82.250.0/23 maxlen: 24
183.83.0.0/19 maxlen: 19
183.83.33.0/24 maxlen: 24
183.83.35.0/24 maxlen: 24
183.83.48.0/24 maxlen: 24
183.83.96.0/19 maxlen: 19
183.83.148.0/22 maxlen: 22
183.83.156.0/22 maxlen: 22
183.83.184.0/21 maxlen: 21
183.83.240.0/22 maxlen: 24
183.83.247.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D94A7/F70588781D8D11E2AD4A04EC08B02CD2/B5ku7PYjoMe42kradUVPo_cWpXA.crl
rsync://rpki.apnic.net/member_repository/A91D94A7/F70588781D8D11E2AD4A04EC08B02CD2/B5ku7PYjoMe42kradUVPo_cWpXA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B5ku7PYjoMe42kradUVPo_cWpXA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 07 Jun 2024 14:43:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13840 (0x3610)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D94A7/serialNumber=07992EECF623A0C7B8DA4ADA75454FA3F716A570
Validity
Not Before: Jan 17 06:28:31 2024 GMT
Not After : Jan 31 00:00:00 2025 GMT
Subject: CN=65a7738f-d814
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:33:72:6e:6b:7c:45:c8:84:d6:ab:2e:48:5d:
6f:d8:07:03:2b:d2:95:86:32:59:30:6d:45:3c:8d:
52:00:01:b6:fb:fd:8d:1b:b3:e7:f9:e0:29:ab:2f:
72:c2:5d:04:24:57:e3:72:cb:90:36:bd:ad:3a:02:
2d:77:70:f7:e5:65:d8:3e:ca:a8:77:5b:cf:ed:0f:
76:b3:27:b7:38:05:7d:09:74:5b:80:1c:99:08:33:
3a:2a:66:64:cb:6c:30:71:3a:cc:2f:f5:9b:1d:4f:
bc:ad:0c:ef:db:be:f9:58:a6:b9:90:3d:e7:34:ce:
f4:b2:b8:fb:42:49:e3:af:ed:1b:f2:01:5f:62:57:
01:78:7f:b8:bf:11:9d:c7:7d:7d:5b:bd:c2:3f:c9:
06:d7:a3:65:39:22:43:23:39:74:bb:51:0f:40:3a:
c1:e6:6f:08:eb:da:9d:c4:42:45:b5:95:05:fb:b0:
dc:f3:4a:5f:7b:c3:60:36:3a:52:af:23:6c:0f:2b:
91:49:04:2b:d2:6c:df:df:00:5c:dd:86:da:af:4a:
83:ee:76:2d:22:4e:b3:5e:0f:5b:67:13:2b:7a:2f:
54:1e:69:a9:0b:51:df:83:41:f3:b3:f6:98:c5:8e:
b6:f7:30:45:b0:3f:b2:50:10:5a:ab:f6:f5:be:13:
c6:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:45:34:1C:50:82:E9:BA:A4:F3:73:90:8E:2C:11:79:37:BC:E2:69
X509v3 Authority Key Identifier:
keyid:07:99:2E:EC:F6:23:A0:C7:B8:DA:4A:DA:75:45:4F:A3:F7:16:A5:70
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D94A7/F70588781D8D11E2AD4A04EC08B02CD2/B5ku7PYjoMe42kradUVPo_cWpXA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B5ku7PYjoMe42kradUVPo_cWpXA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D94A7/F70588781D8D11E2AD4A04EC08B02CD2/E5913F7878F611ECAF1C286CC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
49.204.0.0/18
49.204.96.0-49.204.223.255
49.204.232.0/21
49.205.0.0/18
49.205.66.0/23
49.205.88.0/22
49.205.96.0/20
49.205.128.0-49.205.168.255
49.205.208.0/22
49.205.215.0/24
49.206.112.0/21
49.206.128.0/18
49.207.16.0/20
49.207.44.0/24
49.207.64.0/18
49.207.192.0/18
124.123.24.0-124.123.26.255
124.123.60.0/22
124.123.94.0/23
124.123.124.0-124.123.159.255
124.123.216.0-124.123.255.255
183.82.1.0-183.82.15.255
183.82.64.0/19
183.82.160.0-183.82.179.255
183.82.204.0-183.82.239.255
183.82.250.0/23
183.83.0.0/19
183.83.33.0/24
183.83.35.0/24
183.83.48.0/24
183.83.96.0/19
183.83.148.0/22
183.83.156.0/22
183.83.184.0/21
183.83.240.0/22
183.83.247.0/24
Signature Algorithm: sha256WithRSAEncryption
1b:4d:43:92:e0:09:29:1b:30:b8:52:cd:d3:25:d7:ef:c1:dd:
83:e6:53:61:e7:02:76:a6:00:bb:1f:cc:93:fe:4f:e3:6a:ca:
27:63:97:31:79:f4:95:f1:7b:91:7d:3a:be:df:bd:81:f1:ac:
9f:30:4c:eb:da:8a:2a:dd:aa:8b:d8:5d:02:b8:cf:26:a4:33:
21:9c:6b:88:71:3c:2e:ed:90:e6:cd:a7:51:35:50:6e:7c:a4:
5e:99:67:f4:bf:3d:95:4e:38:b4:8a:d9:6c:2e:c8:d5:ff:26:
7c:be:8d:e4:8f:0f:b9:45:28:c1:b6:93:50:83:d7:59:b6:24:
4b:61:84:59:91:1c:b1:36:55:66:0f:d2:ef:d0:8d:c1:95:f9:
85:ad:7b:62:65:9a:cf:9c:7c:eb:78:95:82:f6:ba:2f:9e:c8:
68:88:6b:e5:74:13:96:e1:76:bc:19:e2:94:cd:e9:be:6c:8c:
3a:30:ba:40:ef:e8:e3:4c:f4:55:0d:cf:19:13:08:dc:09:67:
34:28:9c:ed:24:b0:ac:08:ae:a5:f3:7b:5b:c3:32:2c:ae:c5:
f6:f4:53:40:be:97:f6:94:3b:24:b3:a3:63:10:64:79:ea:f2:
aa:bc:91:96:e6:a8:a5:88:a4:1e:50:bd:e2:36:f5:37:8b:99:
32:21:85:52
-----BEGIN CERTIFICATE-----
MIIGjDCCBXSgAwIBAgICNhAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RDk0QTcxMTAvBgNVBAUTKDA3OTkyRUVDRjYyM0EwQzdCOERBNEFEQTc1NDU0RkEz
RjcxNkE1NzAwHhcNMjQwMTE3MDYyODMxWhcNMjUwMTMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02NWE3NzM4Zi1kODE0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAzDNybmt8RciE1qsuSF1v2AcDK9KVhjJZMG1FPI1SAAG2+/2NG7Pn+eApqy9y
wl0EJFfjcsuQNr2tOgItd3D35WXYPsqod1vP7Q92sye3OAV9CXRbgByZCDM6KmZk
y2wwcTrML/WbHU+8rQzv2775WKa5kD3nNM70srj7Qknjr+0b8gFfYlcBeH+4vxGd
x319W73CP8kG16NlOSJDIzl0u1EPQDrB5m8I69qdxEJFtZUF+7Dc80pfe8NgNjpS
ryNsDyuRSQQr0mzf3wBc3Ybar0qD7nYtIk6zXg9bZxMrei9UHmmpC1Hfg0Hzs/aY
xY629zBFsD+yUBBaq/b1vhPGWQIDAQABo4IDsDCCA6wwHQYDVR0OBBYEFLhFNBxQ
gum6pPNzkI4sEXk3vOJpMB8GA1UdIwQYMBaAFAeZLuz2I6DHuNpK2nVFT6P3FqVw
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEOTRBNy9GNzA1ODg3ODFE
OEQxMUUyQUQ0QTA0RUMwOEIwMkNEMi9CNWt1N1BZam9NZTQya3JhZFVWUG9fY1dw
WEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0I1a3U3UFlqb01lNDJrcmFkVVZQb19jV3BYQS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
RDk0QTcvRjcwNTg4NzgxRDhEMTFFMkFENEEwNEVDMDhCMDJDRDIvRTU5MTNGNzg3
OEY2MTFFQ0FGMUMyODZDQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwggE4BggrBgEFBQcBBwEB
/wSCAScwggEjMIIBHwQCAAEwggEXAwQGMcwAMAwDBAUxzGADBAUxzMADBAMxzOgD
BAYxzQADBAExzUIDBAIxzVgDBAQxzWAwDAMEBzHNgAMEADHNqAMEAjHN0AMEADHN
1wMEAzHOcAMEBjHOgAMEBDHPEAMEADHPLAMEBjHPQAMEBjHPwDAMAwQDfHsYAwQA
fHsaAwQCfHs8AwQBfHteMAwDBAJ8e3wDBAV8e4AwCwMEA3x72AMDAnx4MAwDBAC3
UgEDBAS3UgADBAW3UkAwDAMEBbdSoAMEArdSsDAMAwQCt1LMAwQEt1LgAwQBt1L6
AwQFt1MAAwQAt1MhAwQAt1MjAwQAt1MwAwQFt1NgAwQCt1OUAwQCt1OcAwQDt1O4
AwQCt1PwAwQAt1P3MA0GCSqGSIb3DQEBCwUAA4IBAQAbTUOS4AkpGzC4Us3TJdfv
wd2D5lNh5wJ2pgC7H8yT/k/jasonY5cxefSV8XuRfTq+372B8ayfMEzr2ooq3aqL
2F0CuM8mpDMhnGuIcTwu7ZDmzadRNVBufKRemWf0vz2VTji0itlsLsjV/yZ8vo3k
jw+5RSjBtpNQg9dZtiRLYYRZkRyxNlVmD9Lv0I3BlfmFrXtiZZrPnHzreJWC9rov
nshoiGvldBOW4Xa8GeKUzem+bIw6MLpA7+jjTPRVDc8ZEwjcCWc0KJztJLCsCK6l
83tbwzIsrsX29FNAvpf2lDsks6NjEGR56vKqvJGW5qiliKQeUL3iNvU3i5kyIYVS
-----END CERTIFICATE-----
Generated at Fri May 31 17:44:52 2024 by rpki-client on console-fra.rpki-client.org