Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9120B99/D3F9051C1D8311E2B4ED5CD908B02CD2/D1A38496A72211EFA0B02B7CC4F9AE02.roa
File: D1A38496A72211EFA0B02B7CC4F9AE02.roa (raw, json)
Hash identifier: zS8VdVwwccg6UT/AIHntuO85luUz7LNoDE9PjC8ULas=
Subject key identifier: 62:65:A0:C2:49:00:F6:3F:8B:0C:89:BD:B6:C9:47:4B:E0:17:87:3C
Certificate issuer: /CN=A9120B99/serialNumber=86C7946946B2A57B056F02B279340D30C2CE49B4
Certificate serial: 3487
Authority key identifier: 86:C7:94:69:46:B2:A5:7B:05:6F:02:B2:79:34:0D:30:C2:CE:49:B4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hseUaUaypXsFbwKyeTQNMMLOSbQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9120B99/D3F9051C1D8311E2B4ED5CD908B02CD2/D1A38496A72211EFA0B02B7CC4F9AE02.roa
Signing time: Wed 20 Nov 2024 09:35:46 +0000
ROA not before: Wed 20 Nov 2024 09:35:46 +0000
ROA not after: Wed 30 Jul 2025 00:00:00 +0000
asID: 7540
IP address blocks: 117.18.96.0/24 maxlen: 24
117.18.98.0/24 maxlen: 24
117.18.105.0/24 maxlen: 24
117.18.116.0/24 maxlen: 24
202.4.26.0/23 maxlen: 24
202.181.137.0/24 maxlen: 24
202.181.138.0/24 maxlen: 24
202.181.140.0/24 maxlen: 24
202.181.141.0/24 maxlen: 24
202.181.142.0/24 maxlen: 24
202.181.150.0/24 maxlen: 24
202.181.152.0/24 maxlen: 24
202.181.154.0/24 maxlen: 24
202.181.160.0/24 maxlen: 24
202.181.161.0/24 maxlen: 24
202.181.162.0/24 maxlen: 24
202.181.163.0/24 maxlen: 24
202.181.164.0/24 maxlen: 24
202.181.165.0/24 maxlen: 24
202.181.166.0/24 maxlen: 24
202.181.167.0/24 maxlen: 24
202.181.168.0/24 maxlen: 24
202.181.169.0/24 maxlen: 24
202.181.170.0/24 maxlen: 24
202.181.171.0/24 maxlen: 24
202.181.172.0/24 maxlen: 24
202.181.173.0/24 maxlen: 24
202.181.174.0/24 maxlen: 24
202.181.175.0/24 maxlen: 24
202.181.176.0/24 maxlen: 24
202.181.178.0/24 maxlen: 24
202.181.179.0/24 maxlen: 24
202.181.189.0/24 maxlen: 24
202.181.192.0/24 maxlen: 24
202.181.193.0/24 maxlen: 24
202.181.194.0/24 maxlen: 24
202.181.195.0/24 maxlen: 24
202.181.196.0/24 maxlen: 24
202.181.197.0/24 maxlen: 24
202.181.198.0/24 maxlen: 24
202.181.199.0/24 maxlen: 24
202.181.200.0/24 maxlen: 24
202.181.201.0/24 maxlen: 24
202.181.202.0/24 maxlen: 24
202.181.203.0/24 maxlen: 24
202.181.205.0/24 maxlen: 24
202.181.206.0/24 maxlen: 24
202.181.207.0/24 maxlen: 24
202.181.208.0/24 maxlen: 24
202.181.209.0/24 maxlen: 24
202.181.210.0/24 maxlen: 24
202.181.211.0/24 maxlen: 24
202.181.212.0/24 maxlen: 24
202.181.213.0/24 maxlen: 24
202.181.214.0/24 maxlen: 24
202.181.215.0/24 maxlen: 24
202.181.216.0/24 maxlen: 24
202.181.217.0/24 maxlen: 24
202.181.220.0/24 maxlen: 24
202.181.221.0/24 maxlen: 24
202.181.222.0/24 maxlen: 24
202.181.223.0/24 maxlen: 24
202.181.224.0/24 maxlen: 24
202.181.225.0/24 maxlen: 24
202.181.226.0/24 maxlen: 24
202.181.227.0/24 maxlen: 24
202.181.228.0/24 maxlen: 24
202.181.229.0/24 maxlen: 24
202.181.230.0/24 maxlen: 24
202.181.231.0/24 maxlen: 24
202.181.233.0/24 maxlen: 24
202.181.234.0/24 maxlen: 24
202.181.235.0/24 maxlen: 24
202.181.236.0/24 maxlen: 24
202.181.237.0/24 maxlen: 24
202.181.238.0/24 maxlen: 24
202.181.239.0/24 maxlen: 24
202.181.240.0/24 maxlen: 24
202.181.241.0/24 maxlen: 24
202.181.242.0/24 maxlen: 24
202.181.243.0/24 maxlen: 24
202.181.244.0/24 maxlen: 24
202.181.245.0/24 maxlen: 24
202.181.246.0/24 maxlen: 24
202.181.247.0/24 maxlen: 24
2405:5d00::/64 maxlen: 64
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9120B99/D3F9051C1D8311E2B4ED5CD908B02CD2/hseUaUaypXsFbwKyeTQNMMLOSbQ.crl
rsync://rpki.apnic.net/member_repository/A9120B99/D3F9051C1D8311E2B4ED5CD908B02CD2/hseUaUaypXsFbwKyeTQNMMLOSbQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hseUaUaypXsFbwKyeTQNMMLOSbQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 29 Nov 2024 14:23:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13447 (0x3487)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9120B99/serialNumber=86C7946946B2A57B056F02B279340D30C2CE49B4
Validity
Not Before: Nov 20 09:35:46 2024 GMT
Not After : Jul 30 00:00:00 2025 GMT
Subject: CN=673dad72-634e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:89:2a:2a:84:08:52:49:81:fd:29:ef:2f:8f:
e7:1a:2c:82:5f:e1:6f:5e:a7:42:c5:43:bb:39:5e:
6f:a8:fe:f6:3f:36:a2:41:ce:3c:70:d5:22:9e:16:
0f:6b:9b:57:c4:e5:aa:1e:37:5c:d9:fd:99:13:8e:
4c:72:26:7d:2b:99:97:95:7e:88:5c:38:ec:f0:1b:
e3:9f:5f:03:d7:d7:20:25:ff:5a:aa:dd:d4:d1:17:
98:85:ab:ea:13:e1:e8:ad:de:b9:32:64:e1:fa:68:
5c:c2:72:ab:3f:5e:00:b2:04:d5:eb:df:2a:1a:85:
16:e4:39:cb:db:e6:69:42:be:48:f1:65:50:ef:98:
9b:a5:f4:c1:b2:bc:9a:9f:b9:21:94:74:27:13:2c:
b3:5b:d2:26:c5:26:97:a1:d6:08:c8:6d:ee:ac:4b:
14:1b:8d:d9:76:29:f7:6b:2f:47:81:06:97:57:b4:
4c:58:33:f6:98:7d:8f:d6:63:f4:5b:0d:1f:61:c6:
cc:85:bc:9f:34:5d:3d:f4:20:32:c0:0f:3d:24:1b:
b2:f4:11:4a:24:e7:25:3a:7e:84:97:6c:8c:c6:b4:
09:fe:e7:9e:17:1b:2b:43:d6:c6:fc:e7:fd:bb:be:
a8:5f:6d:6f:16:07:10:c4:5f:28:14:96:36:2e:19:
04:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:65:A0:C2:49:00:F6:3F:8B:0C:89:BD:B6:C9:47:4B:E0:17:87:3C
X509v3 Authority Key Identifier:
keyid:86:C7:94:69:46:B2:A5:7B:05:6F:02:B2:79:34:0D:30:C2:CE:49:B4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9120B99/D3F9051C1D8311E2B4ED5CD908B02CD2/hseUaUaypXsFbwKyeTQNMMLOSbQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hseUaUaypXsFbwKyeTQNMMLOSbQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9120B99/D3F9051C1D8311E2B4ED5CD908B02CD2/D1A38496A72211EFA0B02B7CC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
117.18.96.0/24
117.18.98.0/24
117.18.105.0/24
117.18.116.0/24
202.4.26.0/23
202.181.137.0-202.181.138.255
202.181.140.0-202.181.142.255
202.181.150.0/24
202.181.152.0/24
202.181.154.0/24
202.181.160.0-202.181.176.255
202.181.178.0/23
202.181.189.0/24
202.181.192.0-202.181.203.255
202.181.205.0-202.181.217.255
202.181.220.0-202.181.231.255
202.181.233.0-202.181.247.255
IPv6:
2405:5d00::/64
Signature Algorithm: sha256WithRSAEncryption
0d:3d:95:fa:03:86:23:52:7a:69:61:7a:df:79:55:c4:eb:ee:
6b:35:3a:97:2b:6c:3b:65:0d:24:01:01:9a:ae:7d:ca:fc:85:
5b:35:ab:cc:c0:f8:32:3d:ba:82:5f:c7:a6:80:cf:b4:0f:34:
da:10:3b:6a:28:0d:89:b5:65:91:20:c9:22:4c:05:6a:1e:7a:
d8:f2:0a:7c:e5:cb:15:78:f3:f3:cf:40:90:f3:e5:54:63:fe:
23:ac:99:79:7a:a2:59:eb:ab:9f:32:77:c3:2b:5b:33:5f:8f:
b1:a3:17:6a:62:c7:01:f2:4a:97:7e:94:3a:3c:43:5a:ce:2c:
2d:35:c0:3b:c5:29:de:43:4b:d8:45:ff:af:ce:1c:6e:df:77:
7f:fc:cd:ac:12:13:18:52:ac:5b:81:21:a8:14:2f:85:35:09:
4c:75:5d:19:d1:62:51:03:15:a7:94:86:c3:b2:ce:cd:b3:60:
22:27:c2:f0:98:69:fa:f1:83:87:c1:1a:af:26:5d:eb:83:eb:
83:b4:c6:1e:3c:52:2e:42:be:ca:de:54:a6:55:d2:14:75:99:
86:ff:d4:b6:17:1d:fe:78:80:79:eb:0f:f4:e2:02:31:0f:e9:
30:cf:3d:c2:05:02:69:52:f8:d4:67:51:ca:3f:a3:44:28:57:
84:03:f8:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 15:25:34 2024 by rpki-client on console-fra.rpki-client.org