Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A911CA78/BE8846D235D811EAA730EC46C4F9AE02/51E0E8F6705F11EF97D9604FC4F9AE02.roa
File: 51E0E8F6705F11EF97D9604FC4F9AE02.roa (raw, json)
Hash identifier: r8ER7MZWjqI9rg+ZmaWCcejrQuZoRi4E7E1k6EKhYpY=
Subject key identifier: 68:7F:EA:A8:7D:D0:8C:40:B3:11:CA:32:2C:AB:5F:6A:47:E2:24:BF
Certificate issuer: /CN=A911CA78/serialNumber=40562C143A29CB19C70FFC9B99B60BBECD1D73B6
Certificate serial: 0C10
Authority key identifier: 40:56:2C:14:3A:29:CB:19:C7:0F:FC:9B:99:B6:0B:BE:CD:1D:73:B6
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QFYsFDopyxnHD_ybmbYLvs0dc7Y.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911CA78/BE8846D235D811EAA730EC46C4F9AE02/51E0E8F6705F11EF97D9604FC4F9AE02.roa
Signing time: Wed 06 Nov 2024 19:08:45 +0000
ROA not before: Wed 06 Nov 2024 19:08:45 +0000
ROA not after: Mon 02 Mar 2026 00:00:00 +0000
asID: 38322
IP address blocks: 42.152.0.0/14 maxlen: 14
42.153.4.0/24 maxlen: 24
42.153.6.0/24 maxlen: 24
42.153.7.0/24 maxlen: 24
42.153.8.0/24 maxlen: 24
42.153.9.0/24 maxlen: 24
42.153.10.0/24 maxlen: 24
42.153.11.0/24 maxlen: 24
42.153.16.0/24 maxlen: 24
42.153.19.0/24 maxlen: 24
42.153.20.0/24 maxlen: 24
42.153.21.0/24 maxlen: 24
42.153.22.0/24 maxlen: 24
42.153.23.0/24 maxlen: 24
42.153.24.0/24 maxlen: 24
42.153.25.0/24 maxlen: 24
42.153.26.0/24 maxlen: 24
42.153.28.0/24 maxlen: 24
42.153.29.0/24 maxlen: 24
42.153.32.0/24 maxlen: 24
42.153.33.0/24 maxlen: 24
42.153.34.0/24 maxlen: 24
42.153.35.0/24 maxlen: 24
42.153.36.0/24 maxlen: 24
42.153.37.0/24 maxlen: 24
42.153.38.0/24 maxlen: 24
42.153.39.0/24 maxlen: 24
42.153.40.0/24 maxlen: 24
42.153.41.0/24 maxlen: 24
42.153.42.0/24 maxlen: 24
42.153.43.0/24 maxlen: 24
42.153.44.0/24 maxlen: 24
42.153.45.0/24 maxlen: 24
42.153.46.0/24 maxlen: 24
42.153.47.0/24 maxlen: 24
42.153.48.0/24 maxlen: 24
42.153.49.0/24 maxlen: 24
42.153.50.0/24 maxlen: 24
42.153.51.0/24 maxlen: 24
42.153.52.0/24 maxlen: 24
42.153.53.0/24 maxlen: 24
42.153.54.0/24 maxlen: 24
42.153.55.0/24 maxlen: 24
42.153.56.0/24 maxlen: 24
42.153.57.0/24 maxlen: 24
42.153.58.0/24 maxlen: 24
42.153.59.0/24 maxlen: 24
42.153.60.0/24 maxlen: 24
42.153.61.0/24 maxlen: 24
42.153.62.0/24 maxlen: 24
42.153.63.0/24 maxlen: 24
42.153.89.0/24 maxlen: 24
42.153.95.0/24 maxlen: 24
42.153.96.0/24 maxlen: 24
42.153.128.0/24 maxlen: 24
42.153.129.0/24 maxlen: 24
42.153.130.0/24 maxlen: 24
42.153.131.0/24 maxlen: 24
42.153.132.0/24 maxlen: 24
42.153.133.0/24 maxlen: 24
42.153.134.0/24 maxlen: 24
42.153.135.0/24 maxlen: 24
42.153.136.0/24 maxlen: 24
42.153.137.0/24 maxlen: 24
42.153.138.0/24 maxlen: 24
42.153.139.0/24 maxlen: 24
42.153.140.0/24 maxlen: 24
42.153.141.0/24 maxlen: 24
42.153.142.0/24 maxlen: 24
42.153.143.0/24 maxlen: 24
42.153.144.0/24 maxlen: 24
42.153.145.0/24 maxlen: 24
42.153.146.0/24 maxlen: 24
42.153.147.0/24 maxlen: 24
42.153.148.0/24 maxlen: 24
42.153.149.0/24 maxlen: 24
42.153.150.0/24 maxlen: 24
42.153.151.0/24 maxlen: 24
42.153.152.0/24 maxlen: 24
42.153.153.0/24 maxlen: 24
42.153.154.0/24 maxlen: 24
42.153.155.0/24 maxlen: 24
42.153.156.0/24 maxlen: 24
42.153.157.0/24 maxlen: 24
42.153.158.0/24 maxlen: 24
42.153.159.0/24 maxlen: 24
122.255.96.0/19 maxlen: 19
2401:3c00::/46 maxlen: 46
2401:3c00:4::/46 maxlen: 46
2401:3c00:8::/46 maxlen: 46
2401:3c00:c::/46 maxlen: 46
2401:3c00:10::/46 maxlen: 46
2401:3c00:14::/46 maxlen: 46
2401:3c00:18::/46 maxlen: 46
2401:3c00:40::/46 maxlen: 46
2401:3c00:44::/46 maxlen: 46
2401:3c00:48::/46 maxlen: 46
2401:3c00:4c::/46 maxlen: 46
2401:3c00:50::/46 maxlen: 46
2401:3c00:54::/46 maxlen: 46
2401:3c00:58::/46 maxlen: 46
2401:3c00:a4::/48 maxlen: 48
2401:3c00:a5::/48 maxlen: 48
2401:3c00:a6::/48 maxlen: 48
2401:3c00:a7::/48 maxlen: 48
2401:3c00:a8::/48 maxlen: 48
2401:3c00:a9::/48 maxlen: 48
2401:3c00:c0::/46 maxlen: 46
2401:3c00:c0:5::/64 maxlen: 64
2401:3c00:c8::/46 maxlen: 46
2401:3c00:cc::/46 maxlen: 46
2401:3c00:d8::/48 maxlen: 48
2401:3c00:d9::/48 maxlen: 48
2401:3c00:da::/48 maxlen: 48
2401:3c00:db::/48 maxlen: 48
2401:3c00:dc::/48 maxlen: 48
2401:3c00:100::/43 maxlen: 43
2401:3c00:120::/43 maxlen: 43
2401:3c00:180::/43 maxlen: 43
2401:3c00:1a0::/43 maxlen: 43
2401:3c00:241::/48 maxlen: 48
2401:3c00:242::/48 maxlen: 48
2401:3c00:243::/48 maxlen: 48
2401:3c00:244::/48 maxlen: 48
2401:3c00:245::/48 maxlen: 48
2401:3c00:246::/48 maxlen: 48
2401:3c00:247::/48 maxlen: 48
2401:3c00:248::/48 maxlen: 48
2401:3c00:249::/48 maxlen: 48
2401:3c00:24a::/48 maxlen: 48
2401:3c00:24b::/48 maxlen: 48
2401:3c00:24c::/48 maxlen: 48
2401:3c00:24d::/48 maxlen: 48
2401:3c00:24e::/48 maxlen: 48
2401:3c00:24f::/48 maxlen: 48
2401:3c00:250::/48 maxlen: 48
2401:3c00:251::/48 maxlen: 48
2401:3c00:252::/48 maxlen: 48
2401:3c00:253::/48 maxlen: 48
2401:3c00:254::/48 maxlen: 48
2401:3c00:255::/48 maxlen: 48
2401:3c00:256::/48 maxlen: 48
2401:3c00:257::/48 maxlen: 48
2401:3c00:258::/48 maxlen: 48
2401:3c00:259::/48 maxlen: 48
2401:3c00:25a::/48 maxlen: 48
2401:3c00:25c::/48 maxlen: 48
2401:3c00:25d::/48 maxlen: 48
2401:3c00:25f::/48 maxlen: 48
2401:3c00:260::/48 maxlen: 48
2401:3c00:261::/48 maxlen: 48
2401:3c00:262::/48 maxlen: 48
2401:3c00:280::/48 maxlen: 48
2401:3c00:281::/48 maxlen: 48
2401:3c00:290::/48 maxlen: 48
2401:3c00:291::/48 maxlen: 48
2401:3c00:292::/48 maxlen: 48
2401:3c00:293::/48 maxlen: 48
2401:3c00:294::/48 maxlen: 48
2401:3c00:295::/48 maxlen: 48
2401:3c00:2a0::/48 maxlen: 48
2401:3c00:2a1::/48 maxlen: 48
2401:3c00:2a2::/48 maxlen: 48
2401:3c00:2a3::/48 maxlen: 48
2401:3c00:2a4::/48 maxlen: 48
2401:3c00:2a5::/48 maxlen: 48
2401:3c00:2b0::/48 maxlen: 48
2401:3c00:2b1::/48 maxlen: 48
2401:3c00:2b2::/48 maxlen: 48
2401:3c00:2b3::/48 maxlen: 48
2401:3c00:2b4::/48 maxlen: 48
2401:3c00:2b5::/48 maxlen: 48
2401:3c00:2c0::/42 maxlen: 42
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A911CA78/BE8846D235D811EAA730EC46C4F9AE02/QFYsFDopyxnHD_ybmbYLvs0dc7Y.crl
rsync://rpki.apnic.net/member_repository/A911CA78/BE8846D235D811EAA730EC46C4F9AE02/QFYsFDopyxnHD_ybmbYLvs0dc7Y.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QFYsFDopyxnHD_ybmbYLvs0dc7Y.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 29 Nov 2024 19:05:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3088 (0xc10)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911CA78/serialNumber=40562C143A29CB19C70FFC9B99B60BBECD1D73B6
Validity
Not Before: Nov 6 19:08:45 2024 GMT
Not After : Mar 2 00:00:00 2026 GMT
Subject: CN=672bbebc-06e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:16:fc:70:9b:82:5b:cf:ce:fb:12:09:55:ce:
f3:7e:c9:36:cc:73:54:4b:5f:f5:87:ed:84:31:35:
2d:aa:e1:3d:11:bf:2d:16:1e:d3:ed:66:81:3c:9e:
46:7e:d3:67:c4:87:97:ec:f6:40:87:c7:7a:4d:87:
c2:25:52:f4:ef:fd:41:f9:8f:9e:fa:6f:32:38:63:
0d:39:1a:a0:ed:b2:4e:69:5e:a3:bc:7f:01:93:a4:
ba:ed:22:2f:21:ae:07:0e:58:63:8e:d2:e8:b8:99:
c9:f5:66:09:22:ae:6a:fc:e0:58:93:e9:47:3e:41:
99:2d:bb:df:a7:c4:ec:fe:84:da:3d:d7:a5:fe:bc:
97:6d:82:a1:96:b7:70:e6:4f:01:84:e2:89:19:ca:
16:b3:93:2e:0e:c8:77:df:1a:55:6e:63:d8:4e:7a:
59:4a:6c:03:a9:32:41:20:10:db:aa:90:e9:c6:dc:
4e:3e:6b:a2:b7:aa:b8:6b:d9:34:d3:07:8c:4e:2f:
e7:53:13:f9:e3:35:25:10:e0:79:81:1b:04:3d:10:
1c:ed:36:83:a9:b3:16:24:b4:9e:fb:56:e8:b3:8d:
61:57:c6:67:fd:a2:f5:bd:4e:03:9b:fa:cf:af:20:
f8:75:5c:cd:58:63:18:64:83:68:dc:73:70:7d:b5:
0a:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:7F:EA:A8:7D:D0:8C:40:B3:11:CA:32:2C:AB:5F:6A:47:E2:24:BF
X509v3 Authority Key Identifier:
keyid:40:56:2C:14:3A:29:CB:19:C7:0F:FC:9B:99:B6:0B:BE:CD:1D:73:B6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911CA78/BE8846D235D811EAA730EC46C4F9AE02/QFYsFDopyxnHD_ybmbYLvs0dc7Y.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QFYsFDopyxnHD_ybmbYLvs0dc7Y.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911CA78/BE8846D235D811EAA730EC46C4F9AE02/51E0E8F6705F11EF97D9604FC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
42.152.0.0/14
122.255.96.0/19
IPv6:
2401:3c00::-2401:3c00:1b:ffff:ffff:ffff:ffff:ffff
2401:3c00:40::-2401:3c00:5b:ffff:ffff:ffff:ffff:ffff
2401:3c00:a4::-2401:3c00:a9:ffff:ffff:ffff:ffff:ffff
2401:3c00:c0::/46
2401:3c00:c8::/45
2401:3c00:d8::-2401:3c00:dc:ffff:ffff:ffff:ffff:ffff
2401:3c00:100::/42
2401:3c00:180::/42
2401:3c00:241::-2401:3c00:25a:ffff:ffff:ffff:ffff:ffff
2401:3c00:25c::/47
2401:3c00:25f::-2401:3c00:262:ffff:ffff:ffff:ffff:ffff
2401:3c00:280::/47
2401:3c00:290::-2401:3c00:295:ffff:ffff:ffff:ffff:ffff
2401:3c00:2a0::-2401:3c00:2a5:ffff:ffff:ffff:ffff:ffff
2401:3c00:2b0::-2401:3c00:2b5:ffff:ffff:ffff:ffff:ffff
2401:3c00:2c0::/42
Signature Algorithm: sha256WithRSAEncryption
2d:86:04:aa:6c:6e:b6:f0:40:f2:9c:e9:4d:36:73:28:1b:a5:
9e:cf:bb:a8:35:12:6a:c4:e6:6a:17:c2:19:a1:fb:70:35:52:
53:f0:14:a9:d4:f8:86:ba:cd:97:d6:71:f7:42:f4:4f:b4:8b:
7a:51:b0:27:5c:95:20:70:b3:5d:ba:1f:b8:5b:f1:da:99:98:
8d:8c:6f:01:f8:a9:d9:8e:f4:3f:c8:b6:b2:62:2f:43:a8:4a:
c2:20:ba:0a:17:f6:53:c3:34:64:d3:e2:36:57:41:96:b0:32:
30:08:59:7b:b6:c6:c2:6d:62:ba:70:a9:f2:14:10:5e:33:17:
5b:0c:14:3c:6b:a1:ac:30:c0:52:72:3b:d6:95:3b:05:84:73:
1e:7f:22:07:12:03:aa:ab:9e:6b:ce:8c:26:50:c3:31:bd:f5:
71:92:fa:33:18:c9:f0:6e:9a:93:cc:8c:a6:1f:60:7e:57:0f:
57:a1:cc:a8:de:b0:8d:15:7f:27:12:37:97:be:57:65:75:54:
97:6f:c2:b8:1c:f9:81:83:57:0d:7e:2d:5f:f0:b2:70:30:1e:
d7:27:ec:38:4c:d0:d6:99:67:67:47:50:1f:c2:da:e8:42:09:
d5:e1:14:81:46:1f:c5:ef:46:8b:04:a1:c0:fa:17:d0:95:bb:
64:1c:b8:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 21:05:26 2024 by rpki-client on console-fra.rpki-client.org