Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9117394/4F59186A1D6F11E29B5446B108B02CD2/4D91B0C25ED111EFAFFEA662C4F9AE02.roa
File: 4D91B0C25ED111EFAFFEA662C4F9AE02.roa (raw, json)
Hash identifier: OHeMzeNowBffY6Ub7C6K6isl69fkp7xN/fws1beqP78=
Subject key identifier: 34:6D:FE:F4:D3:84:A8:46:E8:11:00:97:4E:A5:A7:A3:BC:02:92:C4
Certificate issuer: /CN=A9117394/serialNumber=AAFAAE3C5703B39337FD3D7A9666C58CB8C3B509
Certificate serial: 34C1
Authority key identifier: AA:FA:AE:3C:57:03:B3:93:37:FD:3D:7A:96:66:C5:8C:B8:C3:B5:09
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qvquPFcDs5M3_T16lmbFjLjDtQk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9117394/4F59186A1D6F11E29B5446B108B02CD2/4D91B0C25ED111EFAFFEA662C4F9AE02.roa
Signing time: Mon 02 Sep 2024 18:25:41 +0000
ROA not before: Mon 02 Sep 2024 18:25:41 +0000
ROA not after: Fri 31 Jan 2025 00:00:00 +0000
asID: 45960
IP address blocks: 14.1.128.0/17 maxlen: 18
14.1.178.0/24 maxlen: 24
14.1.179.0/24 maxlen: 24
14.1.180.0/24 maxlen: 24
14.1.181.0/24 maxlen: 24
14.1.182.0/24 maxlen: 24
14.1.183.0/24 maxlen: 24
14.1.184.0/24 maxlen: 24
14.1.185.0/24 maxlen: 24
14.1.186.0/24 maxlen: 24
14.1.187.0/24 maxlen: 24
14.1.188.0/24 maxlen: 24
14.1.189.0/24 maxlen: 24
14.1.190.0/24 maxlen: 24
14.1.191.0/24 maxlen: 24
14.1.192.0/23 maxlen: 23
14.1.194.0/24 maxlen: 24
14.1.195.0/24 maxlen: 24
14.1.196.0/23 maxlen: 23
14.1.197.0/24 maxlen: 24
14.1.198.0/24 maxlen: 24
14.1.199.0/24 maxlen: 24
14.1.200.0/24 maxlen: 24
14.1.201.0/24 maxlen: 24
14.1.202.0/24 maxlen: 24
14.1.203.0/24 maxlen: 24
14.1.204.0/24 maxlen: 24
14.1.205.0/24 maxlen: 24
14.1.206.0/24 maxlen: 24
14.1.207.0/24 maxlen: 24
14.1.208.0/24 maxlen: 24
14.1.209.0/24 maxlen: 24
14.1.210.0/24 maxlen: 24
14.1.211.0/24 maxlen: 24
14.1.212.0/24 maxlen: 24
14.1.213.0/24 maxlen: 24
14.1.214.0/24 maxlen: 24
14.1.215.0/24 maxlen: 24
14.1.216.0/24 maxlen: 24
14.1.217.0/24 maxlen: 24
14.1.218.0/24 maxlen: 24
14.1.219.0/24 maxlen: 24
14.1.220.0/24 maxlen: 24
14.1.221.0/24 maxlen: 24
14.1.222.0/24 maxlen: 24
14.1.223.0/24 maxlen: 24
14.1.224.0/24 maxlen: 24
14.1.225.0/24 maxlen: 24
14.1.226.0/24 maxlen: 24
14.1.227.0/24 maxlen: 24
14.1.240.0/24 maxlen: 24
14.1.241.0/24 maxlen: 24
14.1.242.0/24 maxlen: 24
14.1.243.0/24 maxlen: 24
14.1.244.0/24 maxlen: 24
14.1.245.0/24 maxlen: 24
14.1.246.0/24 maxlen: 24
14.1.247.0/24 maxlen: 24
14.1.248.0/24 maxlen: 24
14.1.249.0/24 maxlen: 24
14.1.250.0/24 maxlen: 24
14.1.251.0/24 maxlen: 24
14.1.252.0/24 maxlen: 24
14.1.253.0/24 maxlen: 24
14.1.254.0/24 maxlen: 24
14.1.255.0/24 maxlen: 24
103.1.68.0/22 maxlen: 22
103.1.68.0/24 maxlen: 24
103.1.69.0/24 maxlen: 24
103.1.70.0/24 maxlen: 24
103.1.71.0/24 maxlen: 24
103.224.196.0/22 maxlen: 22
103.229.56.0/24 maxlen: 24
103.229.57.0/24 maxlen: 24
103.229.58.0/24 maxlen: 24
103.229.59.0/24 maxlen: 24
124.195.128.0/20 maxlen: 20
124.195.132.0/24 maxlen: 24
124.195.137.0/24 maxlen: 24
163.47.192.0/22 maxlen: 24
183.78.0.0/17 maxlen: 17
183.78.0.0/18 maxlen: 18
183.78.0.0/24 maxlen: 24
183.78.1.0/24 maxlen: 24
183.78.2.0/24 maxlen: 24
183.78.3.0/24 maxlen: 24
183.78.4.0/24 maxlen: 24
183.78.9.0/24 maxlen: 24
183.78.10.0/23 maxlen: 23
183.78.10.0/24 maxlen: 24
183.78.12.0/24 maxlen: 24
183.78.14.0/24 maxlen: 24
183.78.44.0/24 maxlen: 24
183.78.45.0/24 maxlen: 24
183.78.46.0/24 maxlen: 24
183.78.47.0/24 maxlen: 24
183.78.51.0/24 maxlen: 24
183.78.52.0/24 maxlen: 24
183.78.53.0/24 maxlen: 24
183.78.54.0/24 maxlen: 24
183.78.55.0/24 maxlen: 24
183.78.56.0/24 maxlen: 24
183.78.57.0/24 maxlen: 24
183.78.58.0/24 maxlen: 24
183.78.59.0/24 maxlen: 24
183.78.60.0/24 maxlen: 24
183.78.61.0/24 maxlen: 24
183.78.62.0/24 maxlen: 24
183.78.63.0/24 maxlen: 24
183.78.64.0/19 maxlen: 19
183.78.80.0/24 maxlen: 24
183.78.81.0/24 maxlen: 24
183.78.82.0/24 maxlen: 24
183.78.83.0/24 maxlen: 24
183.78.84.0/24 maxlen: 24
183.78.85.0/24 maxlen: 24
183.78.86.0/24 maxlen: 24
183.78.87.0/24 maxlen: 24
183.78.88.0/24 maxlen: 24
183.78.89.0/24 maxlen: 24
183.78.90.0/24 maxlen: 24
183.78.91.0/24 maxlen: 24
183.78.92.0/24 maxlen: 24
183.78.93.0/24 maxlen: 24
183.78.94.0/24 maxlen: 24
183.78.95.0/24 maxlen: 24
183.78.96.0/19 maxlen: 19
183.78.112.0/24 maxlen: 24
183.78.113.0/24 maxlen: 24
183.78.114.0/24 maxlen: 24
183.78.115.0/24 maxlen: 24
183.78.116.0/24 maxlen: 24
183.78.117.0/24 maxlen: 24
183.78.118.0/24 maxlen: 24
183.78.119.0/24 maxlen: 24
183.78.120.0/24 maxlen: 24
183.78.121.0/24 maxlen: 24
183.78.122.0/24 maxlen: 24
183.78.123.0/24 maxlen: 24
183.78.124.0/24 maxlen: 24
183.78.125.0/24 maxlen: 24
183.78.126.0/24 maxlen: 24
183.78.127.0/24 maxlen: 24
202.56.80.0/20 maxlen: 22
202.56.80.0/21 maxlen: 24
202.56.88.0/22 maxlen: 24
202.56.92.0/23 maxlen: 24
202.56.94.0/24 maxlen: 24
202.56.95.0/24 maxlen: 24
203.158.24.0/21 maxlen: 21
203.158.25.0/24 maxlen: 24
203.158.26.0/24 maxlen: 24
203.158.27.0/24 maxlen: 24
203.158.29.0/24 maxlen: 24
203.158.30.0/24 maxlen: 24
203.158.31.0/24 maxlen: 24
2402:b400::/32 maxlen: 32
2402:b400:1000::/44 maxlen: 44
2402:b400:1010::/44 maxlen: 44
2402:b400:1020::/44 maxlen: 44
2402:b400:1030::/44 maxlen: 44
2402:b400:4080::/44 maxlen: 44
2402:b400:4088::/48 maxlen: 48
2402:b400:4089::/48 maxlen: 48
2402:b400:408a::/48 maxlen: 48
2402:b400:408b::/48 maxlen: 48
2402:b400:408c::/48 maxlen: 48
2402:b400:408d::/48 maxlen: 48
2402:b400:408e::/48 maxlen: 48
2402:b400:408f::/48 maxlen: 48
2402:b400:4090::/44 maxlen: 44
2402:b400:40c0::/44 maxlen: 44
2402:b400:40c8::/48 maxlen: 48
2402:b400:40c9::/48 maxlen: 48
2402:b400:40ca::/48 maxlen: 48
2402:b400:40cb::/48 maxlen: 48
2402:b400:40cc::/48 maxlen: 48
2402:b400:40cd::/48 maxlen: 48
2402:b400:40ce::/48 maxlen: 48
2402:b400:40cf::/48 maxlen: 48
2402:b400:40d0::/44 maxlen: 44
2402:b400:4100::/44 maxlen: 44
2402:b400:4110::/44 maxlen: 44
2402:b400:4120::/44 maxlen: 44
2402:b400:4140::/44 maxlen: 44
2402:b400:4150::/44 maxlen: 44
2402:b400:4160::/44 maxlen: 44
2402:b400:4180::/44 maxlen: 44
2402:b400:4180::/45 maxlen: 45
2402:b400:4190::/44 maxlen: 44
2402:b400:41a0::/44 maxlen: 44
2402:b400:41a2::/48 maxlen: 48
2402:b400:41c0::/44 maxlen: 44
2402:b400:41c0::/45 maxlen: 45
2402:b400:41d0::/44 maxlen: 44
2402:b400:41e0::/44 maxlen: 44
2402:b400:41e2::/48 maxlen: 48
2402:b400:41e3::/48 maxlen: 48
2402:b400:4400::/45 maxlen: 45
2402:b400:4420::/45 maxlen: 45
2402:b400:4440::/46 maxlen: 46
2402:b400:4444::/46 maxlen: 46
2402:b400:4448::/46 maxlen: 46
2402:b400:444c::/46 maxlen: 46
2402:b400:4460::/46 maxlen: 46
2402:b400:4464::/46 maxlen: 46
2402:b400:4468::/46 maxlen: 46
2402:b400:446c::/46 maxlen: 46
2402:b400:4500::/48 maxlen: 48
2402:b400:4501::/48 maxlen: 48
2402:b400:4502::/48 maxlen: 48
2402:b400:4503::/48 maxlen: 48
2402:b400:4600::/45 maxlen: 45
2402:b400:4620::/45 maxlen: 45
2402:b400:4640::/46 maxlen: 46
2402:b400:4644::/46 maxlen: 46
2402:b400:4648::/46 maxlen: 46
2402:b400:464c::/46 maxlen: 46
2402:b400:4660::/46 maxlen: 46
2402:b400:4664::/46 maxlen: 46
2402:b400:4668::/46 maxlen: 46
2402:b400:466c::/46 maxlen: 46
2402:b400:4700::/48 maxlen: 48
2402:b400:4701::/48 maxlen: 48
2402:b400:4702::/48 maxlen: 48
2402:b400:4703::/48 maxlen: 48
2406:6000::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9117394/4F59186A1D6F11E29B5446B108B02CD2/qvquPFcDs5M3_T16lmbFjLjDtQk.crl
rsync://rpki.apnic.net/member_repository/A9117394/4F59186A1D6F11E29B5446B108B02CD2/qvquPFcDs5M3_T16lmbFjLjDtQk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qvquPFcDs5M3_T16lmbFjLjDtQk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 27 Nov 2024 14:18:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13505 (0x34c1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9117394/serialNumber=AAFAAE3C5703B39337FD3D7A9666C58CB8C3B509
Validity
Not Before: Sep 2 18:25:41 2024 GMT
Not After : Jan 31 00:00:00 2025 GMT
Subject: CN=66d60324-e13a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:44:1e:a7:e0:68:b8:ec:12:93:46:9b:84:74:
ec:1d:08:be:80:0a:0d:f1:ce:6c:3d:a2:c4:86:dd:
0a:68:78:78:a2:0d:3f:77:79:09:44:53:f1:c2:5c:
26:90:40:24:6e:13:a5:a8:4f:cb:7c:92:f0:55:4f:
13:67:49:eb:4b:77:23:14:fe:46:00:f0:8e:f6:d1:
2a:66:e8:f4:f5:1b:5f:2b:6d:b7:de:19:31:50:f9:
7d:58:01:b9:4e:76:53:02:f5:78:e2:f5:c0:d7:d5:
9b:82:9e:5c:2e:e3:38:0e:91:72:b1:b2:38:60:e0:
34:36:87:04:94:9c:79:76:a9:79:e3:90:83:4d:c1:
b0:35:fd:44:b8:c0:bd:51:ee:ee:a3:b8:62:4d:8a:
ba:12:5a:72:12:6e:37:a1:36:d6:b9:13:c0:66:00:
04:17:c7:c3:94:8e:d2:8d:65:39:35:1f:92:c2:b5:
db:49:e1:c5:44:a1:4b:76:20:a8:48:37:03:ed:20:
8a:41:71:a2:1d:9d:ab:6e:af:3e:7e:ea:ca:4f:ba:
17:7c:3f:6e:bd:bf:0d:87:bd:18:98:e7:3b:d8:3b:
d0:ae:13:14:36:f6:67:db:d7:82:ff:cb:cc:07:d7:
fb:a1:83:b3:43:f3:32:72:47:b5:3d:24:28:73:8a:
08:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:6D:FE:F4:D3:84:A8:46:E8:11:00:97:4E:A5:A7:A3:BC:02:92:C4
X509v3 Authority Key Identifier:
keyid:AA:FA:AE:3C:57:03:B3:93:37:FD:3D:7A:96:66:C5:8C:B8:C3:B5:09
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9117394/4F59186A1D6F11E29B5446B108B02CD2/qvquPFcDs5M3_T16lmbFjLjDtQk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qvquPFcDs5M3_T16lmbFjLjDtQk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9117394/4F59186A1D6F11E29B5446B108B02CD2/4D91B0C25ED111EFAFFEA662C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
14.1.128.0/17
103.1.68.0/22
103.224.196.0/22
103.229.56.0/22
124.195.128.0/20
163.47.192.0/22
183.78.0.0/17
202.56.80.0/20
203.158.24.0/21
IPv6:
2402:b400::/32
2406:6000::/32
Signature Algorithm: sha256WithRSAEncryption
5d:52:29:3a:98:57:35:1d:a3:90:c1:ff:32:19:63:b9:e3:ec:
94:e4:03:82:12:8d:1f:84:54:07:81:c2:d2:1b:25:84:36:64:
6d:43:fc:8f:9e:e1:39:d4:1a:a6:af:75:fb:11:be:3d:78:45:
48:59:35:c9:78:d2:3c:9b:0e:51:e8:f0:9f:3b:8e:f3:68:ed:
8e:30:44:0d:4b:56:ca:32:f2:45:d7:76:18:84:2e:61:ce:c3:
b0:81:d5:ee:9d:20:8b:a5:bb:50:5a:48:0a:9e:83:e0:6b:6b:
8f:ad:82:c8:b4:6c:ab:f9:87:84:66:51:b1:6f:7a:a0:94:4b:
c2:51:7b:50:e8:82:45:bc:3d:86:1f:49:f8:af:56:70:d2:0c:
76:56:4d:d0:10:1e:f5:ae:88:1a:fb:a8:74:21:83:8b:76:cf:
57:a9:b0:79:e5:de:51:81:2c:db:cd:f0:49:1c:f8:87:3b:c4:
3c:d4:82:89:24:de:20:60:26:f4:38:a0:ad:15:ee:a4:23:3d:
34:89:63:74:ed:ae:60:24:f4:b3:58:4c:f0:20:27:e4:60:b5:
65:29:f7:3a:e0:7a:68:b1:e8:03:fc:eb:7b:fe:49:59:64:ac:
41:ca:96:78:dd:7a:14:3a:db:06:c1:9b:84:23:fc:1c:b7:07:
f2:c3:97:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 16:00:05 2024 by rpki-client on console-ams.rpki-client.org