Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A911FDBA/077851A41D9D11E2987CEE8B08B02CD2/CD692AAEF65311EAA7E5A684C4F9AE02.roa
File: CD692AAEF65311EAA7E5A684C4F9AE02.roa (raw, json)
Hash identifier: D7Yw1fFSNsmhzYYizrIWcgke3vd7oTvuVsShL3GgxW8=
Subject key identifier: E3:00:0E:A2:66:20:8A:4D:20:35:1D:09:2B:1C:FE:0F:11:AC:F7:55
Certificate issuer: /CN=A911FDBA/serialNumber=FEF9143B1616CDA1159B59ECD5E3993E982654FE
Certificate serial: 3427
Authority key identifier: FE:F9:14:3B:16:16:CD:A1:15:9B:59:EC:D5:E3:99:3E:98:26:54:FE
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_vkUOxYWzaEVm1ns1eOZPpgmVP4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911FDBA/077851A41D9D11E2987CEE8B08B02CD2/CD692AAEF65311EAA7E5A684C4F9AE02.roa
Signing time: Thu 02 May 2024 15:31:00 +0000
ROA not before: Thu 02 May 2024 15:31:00 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 45671
IP address blocks: 27.50.64.0/19 maxlen: 24
27.111.80.0/24 maxlen: 24
27.111.85.0/24 maxlen: 24
27.111.87.0/24 maxlen: 24
27.111.90.0/23 maxlen: 24
43.242.68.0/22 maxlen: 24
43.250.204.0/22 maxlen: 24
45.65.12.0/24 maxlen: 24
103.2.196.0/22 maxlen: 24
103.11.52.0/22 maxlen: 24
103.12.8.0/23 maxlen: 24
103.12.10.0/24 maxlen: 24
103.13.100.0/22 maxlen: 24
103.13.186.0/23 maxlen: 24
103.24.14.0/24 maxlen: 24
103.227.28.0/23 maxlen: 24
103.227.30.0/23 maxlen: 24
103.235.52.0/22 maxlen: 24
103.248.189.0/24 maxlen: 24
103.248.190.0/24 maxlen: 24
103.248.191.0/24 maxlen: 24
103.255.249.0/24 maxlen: 24
114.141.192.0/24 maxlen: 24
114.141.193.0/24 maxlen: 24
114.141.194.0/24 maxlen: 24
114.141.195.0/24 maxlen: 24
114.141.196.0/22 maxlen: 24
114.141.200.0/22 maxlen: 24
117.20.0.0/20 maxlen: 24
117.120.8.0/21 maxlen: 24
118.127.0.0/18 maxlen: 24
163.53.232.0/22 maxlen: 24
180.92.192.0/21 maxlen: 24
202.60.64.0/20 maxlen: 24
202.60.80.0/20 maxlen: 24
202.125.32.0/20 maxlen: 20
202.130.32.0/22 maxlen: 24
202.131.88.0/24 maxlen: 24
202.131.89.0/24 maxlen: 24
202.131.90.0/24 maxlen: 24
202.131.91.0/24 maxlen: 24
202.131.92.0/24 maxlen: 24
202.131.93.0/24 maxlen: 24
202.131.94.0/24 maxlen: 24
203.26.196.0/22 maxlen: 24
203.28.51.0/24 maxlen: 24
221.121.128.0/19 maxlen: 24
223.252.0.0/18 maxlen: 24
223.252.96.0/20 maxlen: 24
2400:8100::/32 maxlen: 32
2400:8100:6afc::/48 maxlen: 48
2400:d400:1::/48 maxlen: 48
2400:d400:2::/48 maxlen: 48
2400:d400:6::/48 maxlen: 48
2400:d400:18::/48 maxlen: 48
2400:d400:b97::/48 maxlen: 48
2400:d400:d51::/48 maxlen: 48
2400:d400:1008::/48 maxlen: 48
2400:d400:1337::/48 maxlen: 48
2400:d400:5648::/48 maxlen: 48
2400:d400:9897::/48 maxlen: 48
2400:d400:9898::/48 maxlen: 48
2400:d400:b00b::/48 maxlen: 48
2400:d400:ffff::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A911FDBA/077851A41D9D11E2987CEE8B08B02CD2/_vkUOxYWzaEVm1ns1eOZPpgmVP4.crl
rsync://rpki.apnic.net/member_repository/A911FDBA/077851A41D9D11E2987CEE8B08B02CD2/_vkUOxYWzaEVm1ns1eOZPpgmVP4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_vkUOxYWzaEVm1ns1eOZPpgmVP4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 21 Feb 2025 05:15:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13351 (0x3427)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911FDBA
Validity
Not Before: May 2 15:31:00 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6633b1b4-e552
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f5:d6:19:f6:81:bb:68:c5:3b:f0:e4:a4:a8:13:
6e:bf:34:12:b8:43:ac:95:84:05:c0:5f:be:ef:81:
e2:48:e8:be:78:6e:d7:56:0e:9b:72:b9:b1:88:6a:
dc:04:d4:af:47:05:e1:79:ce:4d:98:2c:d9:50:ac:
06:19:9a:c0:cb:b4:9b:ca:a4:05:bc:0b:6d:5c:50:
50:b6:ae:0c:22:f5:fc:8e:70:d8:73:75:f5:b8:99:
3e:f5:7d:81:2f:16:52:a2:bb:71:f5:9d:7e:74:c9:
d0:e7:7e:ff:96:89:9e:e1:76:2a:4a:49:3d:cc:da:
68:8e:0a:03:8d:a8:c3:87:6b:d2:e9:2d:72:ed:cf:
3c:fc:91:18:39:74:6a:aa:33:29:36:28:8e:a7:e9:
df:e8:ea:e4:c7:8a:e8:d8:42:fa:76:fb:85:1a:8e:
cb:97:87:77:53:4c:ef:c3:67:ad:1f:39:4f:d6:96:
92:6b:a7:a9:82:1a:98:36:81:f9:f6:c4:fb:8e:29:
07:fb:df:77:15:9a:cc:46:65:bf:c4:a8:51:d5:4d:
d7:d3:e2:04:1f:49:17:45:8f:9d:01:44:2a:6c:a8:
c2:98:56:27:ae:18:e7:9f:bb:53:15:7d:50:91:1c:
7d:cb:6e:2a:4b:eb:00:97:b9:03:a6:54:51:9e:45:
74:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:00:0E:A2:66:20:8A:4D:20:35:1D:09:2B:1C:FE:0F:11:AC:F7:55
X509v3 Authority Key Identifier:
keyid:FE:F9:14:3B:16:16:CD:A1:15:9B:59:EC:D5:E3:99:3E:98:26:54:FE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911FDBA/077851A41D9D11E2987CEE8B08B02CD2/_vkUOxYWzaEVm1ns1eOZPpgmVP4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_vkUOxYWzaEVm1ns1eOZPpgmVP4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911FDBA/077851A41D9D11E2987CEE8B08B02CD2/CD692AAEF65311EAA7E5A684C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
27.50.64.0/19
27.111.80.0/24
27.111.85.0/24
27.111.87.0/24
27.111.90.0/23
43.242.68.0/22
43.250.204.0/22
45.65.12.0/24
103.2.196.0/22
103.11.52.0/22
103.12.8.0-103.12.10.255
103.13.100.0/22
103.13.186.0/23
103.24.14.0/24
103.227.28.0/22
103.235.52.0/22
103.248.189.0-103.248.191.255
103.255.249.0/24
114.141.192.0-114.141.203.255
117.20.0.0/20
117.120.8.0/21
118.127.0.0/18
163.53.232.0/22
180.92.192.0/21
202.60.64.0/19
202.125.32.0/20
202.130.32.0/22
202.131.88.0-202.131.94.255
203.26.196.0/22
203.28.51.0/24
221.121.128.0/19
223.252.0.0/18
223.252.96.0/20
IPv6:
2400:8100::/32
2400:d400:1::-2400:d400:2:ffff:ffff:ffff:ffff:ffff
2400:d400:6::/48
2400:d400:18::/48
2400:d400:b97::/48
2400:d400:d51::/48
2400:d400:1008::/48
2400:d400:1337::/48
2400:d400:5648::/48
2400:d400:9897::-2400:d400:9898:ffff:ffff:ffff:ffff:ffff
2400:d400:b00b::/48
2400:d400:ffff::/48
Signature Algorithm: sha256WithRSAEncryption
53:b6:81:e7:cd:52:f1:61:94:54:b5:6f:0a:9f:f6:8b:9a:84:
86:49:a8:a1:4d:ec:33:68:9b:7b:66:31:b0:8a:44:dd:eb:ba:
05:8d:39:ef:f6:7c:de:ac:b6:b6:b8:52:7a:60:4b:0e:3e:3b:
9b:ca:4b:b4:9e:37:50:15:66:69:3a:1a:aa:29:a9:39:42:58:
ad:3e:7b:c8:6c:4c:07:bc:aa:26:47:48:21:7a:67:56:81:20:
07:70:c0:19:db:7f:d8:ad:b3:f2:a4:29:0c:08:3d:de:da:32:
89:cb:24:e5:2c:c8:2f:57:0d:e7:88:9d:17:0c:25:a4:e9:63:
fa:f2:df:20:db:05:e8:aa:f8:50:fc:98:8c:64:1c:2b:7b:55:
e3:93:50:33:95:46:80:e6:39:82:af:98:cf:0d:a5:04:4f:22:
be:49:22:9f:36:ff:93:22:0f:eb:b7:8b:98:16:db:e5:ea:9f:
ea:77:f8:86:b3:4c:cb:c4:c5:1a:c9:14:a8:6b:7e:c7:eb:13:
19:7d:3a:24:0f:86:fe:ab:98:88:96:3e:80:ca:6d:81:e5:fc:
57:ee:6f:1e:63:2c:17:08:63:33:71:c2:ab:e4:8d:e2:76:ec:
74:9f:8c:63:a7:94:e1:8f:f6:3e:15:6f:c4:42:6d:0f:e4:87:
85:e2:95:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:14:49 2025 by rpki-client