Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9125475/8D9471F6290611E593BFC626C4F9AE02/19FEDB562AB611EC93861F65C4F9AE02.roa
File: 19FEDB562AB611EC93861F65C4F9AE02.roa (raw, json)
Hash identifier: NlVyh3MwFRVpTMK2w6/e2umQLjFvCbYkQLSSmkOcpQ8=
Subject key identifier: AC:54:6F:59:63:90:D8:59:8F:74:21:75:97:CA:C2:E7:09:83:15:5B
Certificate issuer: /CN=A9125475/serialNumber=DE9D64016291EA2A16F3B7956A0F4035B709E547
Certificate serial: 244B
Authority key identifier: DE:9D:64:01:62:91:EA:2A:16:F3:B7:95:6A:0F:40:35:B7:09:E5:47
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/3p1kAWKR6ioW87eVag9ANbcJ5Uc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9125475/8D9471F6290611E593BFC626C4F9AE02/19FEDB562AB611EC93861F65C4F9AE02.roa
Signing time: Sat 02 Dec 2023 14:40:11 +0000
ROA not before: Sat 02 Dec 2023 14:40:11 +0000
ROA not after: Fri 31 Jan 2025 00:00:00 +0000
asID: 131090
IP address blocks: 45.157.88.0/22 maxlen: 22
134.236.0.0/16 maxlen: 24
159.192.0.0/16 maxlen: 16
159.192.0.0/24 maxlen: 24
159.192.1.0/24 maxlen: 24
159.192.2.0/24 maxlen: 24
159.192.3.0/24 maxlen: 24
159.192.4.0/24 maxlen: 24
159.192.5.0/24 maxlen: 24
159.192.6.0/24 maxlen: 24
159.192.7.0/24 maxlen: 24
159.192.8.0/21 maxlen: 21
159.192.8.0/22 maxlen: 22
159.192.8.0/23 maxlen: 24
159.192.10.0/24 maxlen: 24
159.192.11.0/24 maxlen: 24
159.192.12.0/24 maxlen: 24
159.192.13.0/24 maxlen: 24
159.192.14.0/24 maxlen: 24
159.192.15.0/24 maxlen: 24
159.192.16.0/24 maxlen: 24
159.192.17.0/24 maxlen: 24
159.192.18.0/24 maxlen: 24
159.192.19.0/24 maxlen: 24
159.192.20.0/24 maxlen: 24
159.192.21.0/24 maxlen: 24
159.192.22.0/24 maxlen: 24
159.192.23.0/24 maxlen: 24
159.192.24.0/24 maxlen: 24
159.192.25.0/24 maxlen: 24
159.192.26.0/24 maxlen: 24
159.192.27.0/24 maxlen: 24
159.192.28.0/24 maxlen: 24
159.192.29.0/24 maxlen: 24
159.192.30.0/24 maxlen: 24
159.192.31.0/24 maxlen: 24
159.192.32.0/24 maxlen: 24
159.192.33.0/24 maxlen: 24
159.192.34.0/24 maxlen: 24
159.192.35.0/24 maxlen: 24
159.192.36.0/24 maxlen: 24
159.192.37.0/24 maxlen: 24
159.192.38.0/24 maxlen: 24
159.192.39.0/24 maxlen: 24
159.192.40.0/24 maxlen: 24
159.192.41.0/24 maxlen: 24
159.192.42.0/24 maxlen: 24
159.192.43.0/24 maxlen: 24
159.192.44.0/24 maxlen: 24
159.192.45.0/24 maxlen: 24
159.192.46.0/24 maxlen: 24
159.192.47.0/24 maxlen: 24
159.192.48.0/24 maxlen: 24
159.192.49.0/24 maxlen: 24
159.192.50.0/24 maxlen: 24
159.192.51.0/24 maxlen: 24
159.192.52.0/24 maxlen: 24
159.192.53.0/24 maxlen: 24
159.192.54.0/24 maxlen: 24
159.192.55.0/24 maxlen: 24
159.192.56.0/24 maxlen: 24
159.192.57.0/24 maxlen: 24
159.192.58.0/24 maxlen: 24
159.192.59.0/24 maxlen: 24
159.192.60.0/24 maxlen: 24
159.192.61.0/24 maxlen: 24
159.192.62.0/24 maxlen: 24
159.192.63.0/24 maxlen: 24
159.192.64.0/18 maxlen: 18
159.192.64.0/19 maxlen: 20
159.192.64.0/20 maxlen: 24
159.192.80.0/22 maxlen: 22
159.192.80.0/24 maxlen: 24
159.192.81.0/24 maxlen: 24
159.192.82.0/24 maxlen: 24
159.192.83.0/24 maxlen: 24
159.192.84.0/23 maxlen: 24
159.192.86.0/24 maxlen: 24
159.192.87.0/24 maxlen: 24
159.192.88.0/22 maxlen: 22
159.192.88.0/24 maxlen: 24
159.192.89.0/24 maxlen: 24
159.192.90.0/24 maxlen: 24
159.192.91.0/24 maxlen: 24
159.192.92.0/23 maxlen: 24
159.192.94.0/24 maxlen: 24
159.192.95.0/24 maxlen: 24
159.192.96.0/22 maxlen: 22
159.192.96.0/24 maxlen: 24
159.192.97.0/24 maxlen: 24
159.192.98.0/24 maxlen: 24
159.192.99.0/24 maxlen: 24
159.192.100.0/22 maxlen: 22
159.192.100.0/24 maxlen: 24
159.192.101.0/24 maxlen: 24
159.192.102.0/24 maxlen: 24
159.192.103.0/24 maxlen: 24
159.192.104.0/21 maxlen: 21
159.192.104.0/24 maxlen: 24
159.192.105.0/24 maxlen: 24
159.192.106.0/24 maxlen: 24
159.192.107.0/24 maxlen: 24
159.192.108.0/24 maxlen: 24
159.192.109.0/24 maxlen: 24
159.192.110.0/24 maxlen: 24
159.192.111.0/24 maxlen: 24
159.192.112.0/20 maxlen: 20
159.192.112.0/24 maxlen: 24
159.192.113.0/24 maxlen: 24
159.192.114.0/24 maxlen: 24
159.192.115.0/24 maxlen: 24
159.192.116.0/24 maxlen: 24
159.192.117.0/24 maxlen: 24
159.192.118.0/24 maxlen: 24
159.192.119.0/24 maxlen: 24
159.192.120.0/24 maxlen: 24
159.192.121.0/24 maxlen: 24
159.192.122.0/24 maxlen: 24
159.192.123.0/24 maxlen: 24
159.192.124.0/24 maxlen: 24
159.192.125.0/24 maxlen: 24
159.192.126.0/24 maxlen: 24
159.192.127.0/24 maxlen: 24
159.192.128.0/20 maxlen: 20
159.192.128.0/24 maxlen: 24
159.192.129.0/24 maxlen: 24
159.192.130.0/24 maxlen: 24
159.192.131.0/24 maxlen: 24
159.192.132.0/24 maxlen: 24
159.192.133.0/24 maxlen: 24
159.192.134.0/24 maxlen: 24
159.192.135.0/24 maxlen: 24
159.192.136.0/24 maxlen: 24
159.192.137.0/24 maxlen: 24
159.192.138.0/24 maxlen: 24
159.192.139.0/24 maxlen: 24
159.192.140.0/24 maxlen: 24
159.192.141.0/24 maxlen: 24
159.192.142.0/24 maxlen: 24
159.192.143.0/24 maxlen: 24
159.192.144.0/22 maxlen: 22
159.192.144.0/24 maxlen: 24
159.192.145.0/24 maxlen: 24
159.192.146.0/24 maxlen: 24
159.192.147.0/24 maxlen: 24
159.192.148.0/24 maxlen: 24
159.192.149.0/24 maxlen: 24
159.192.150.0/24 maxlen: 24
159.192.151.0/24 maxlen: 24
159.192.152.0/24 maxlen: 24
159.192.153.0/24 maxlen: 24
159.192.154.0/24 maxlen: 24
159.192.155.0/24 maxlen: 24
159.192.156.0/24 maxlen: 24
159.192.157.0/24 maxlen: 24
159.192.158.0/24 maxlen: 24
159.192.159.0/24 maxlen: 24
159.192.160.0/22 maxlen: 22
159.192.160.0/24 maxlen: 24
159.192.161.0/24 maxlen: 24
159.192.162.0/24 maxlen: 24
159.192.163.0/24 maxlen: 24
159.192.164.0/22 maxlen: 22
159.192.164.0/24 maxlen: 24
159.192.165.0/24 maxlen: 24
159.192.166.0/24 maxlen: 24
159.192.167.0/24 maxlen: 24
159.192.168.0/22 maxlen: 22
159.192.168.0/24 maxlen: 24
159.192.169.0/24 maxlen: 24
159.192.170.0/24 maxlen: 24
159.192.171.0/24 maxlen: 24
159.192.172.0/22 maxlen: 22
159.192.172.0/24 maxlen: 24
159.192.173.0/24 maxlen: 24
159.192.174.0/24 maxlen: 24
159.192.175.0/24 maxlen: 24
159.192.176.0/24 maxlen: 24
159.192.177.0/24 maxlen: 24
159.192.178.0/24 maxlen: 24
159.192.179.0/24 maxlen: 24
159.192.180.0/24 maxlen: 24
159.192.181.0/24 maxlen: 24
159.192.182.0/24 maxlen: 24
159.192.183.0/24 maxlen: 24
159.192.184.0/24 maxlen: 24
159.192.185.0/24 maxlen: 24
159.192.186.0/24 maxlen: 24
159.192.187.0/24 maxlen: 24
159.192.188.0/23 maxlen: 24
159.192.190.0/24 maxlen: 24
159.192.191.0/24 maxlen: 24
159.192.192.0/24 maxlen: 24
159.192.193.0/24 maxlen: 24
159.192.194.0/24 maxlen: 24
159.192.195.0/24 maxlen: 24
159.192.196.0/24 maxlen: 24
159.192.197.0/24 maxlen: 24
159.192.198.0/23 maxlen: 24
159.192.200.0/24 maxlen: 24
159.192.201.0/24 maxlen: 24
159.192.202.0/24 maxlen: 24
159.192.203.0/24 maxlen: 24
159.192.204.0/24 maxlen: 24
159.192.205.0/24 maxlen: 24
159.192.206.0/24 maxlen: 24
159.192.207.0/24 maxlen: 24
159.192.208.0/23 maxlen: 24
159.192.210.0/24 maxlen: 24
159.192.211.0/24 maxlen: 24
159.192.212.0/23 maxlen: 24
159.192.214.0/23 maxlen: 24
159.192.216.0/24 maxlen: 24
159.192.217.0/24 maxlen: 24
159.192.218.0/24 maxlen: 24
159.192.219.0/24 maxlen: 24
159.192.220.0/24 maxlen: 24
159.192.221.0/24 maxlen: 24
159.192.222.0/24 maxlen: 24
159.192.223.0/24 maxlen: 24
159.192.224.0/24 maxlen: 24
159.192.225.0/24 maxlen: 24
159.192.226.0/23 maxlen: 24
159.192.228.0/24 maxlen: 24
159.192.229.0/24 maxlen: 24
159.192.230.0/24 maxlen: 24
159.192.231.0/24 maxlen: 24
159.192.232.0/24 maxlen: 24
159.192.233.0/24 maxlen: 24
159.192.234.0/24 maxlen: 24
159.192.235.0/24 maxlen: 24
159.192.236.0/24 maxlen: 24
159.192.237.0/24 maxlen: 24
159.192.238.0/24 maxlen: 24
159.192.239.0/24 maxlen: 24
159.192.240.0/20 maxlen: 20
159.192.240.0/24 maxlen: 24
159.192.241.0/24 maxlen: 24
159.192.242.0/24 maxlen: 24
159.192.243.0/24 maxlen: 24
159.192.244.0/24 maxlen: 24
159.192.245.0/24 maxlen: 24
159.192.246.0/24 maxlen: 24
159.192.247.0/24 maxlen: 24
159.192.248.0/24 maxlen: 24
159.192.249.0/24 maxlen: 24
159.192.250.0/24 maxlen: 24
159.192.251.0/24 maxlen: 24
159.192.252.0/24 maxlen: 24
159.192.253.0/24 maxlen: 24
159.192.254.0/24 maxlen: 24
159.192.255.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9125475/8D9471F6290611E593BFC626C4F9AE02/3p1kAWKR6ioW87eVag9ANbcJ5Uc.crl
rsync://rpki.apnic.net/member_repository/A9125475/8D9471F6290611E593BFC626C4F9AE02/3p1kAWKR6ioW87eVag9ANbcJ5Uc.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/3p1kAWKR6ioW87eVag9ANbcJ5Uc.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 27 Nov 2024 14:20:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 9291 (0x244b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9125475/serialNumber=DE9D64016291EA2A16F3B7956A0F4035B709E547
Validity
Not Before: Dec 2 14:40:11 2023 GMT
Not After : Jan 31 00:00:00 2025 GMT
Subject: CN=656b41cb-b9dd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:9e:9b:8e:ee:51:0c:76:c6:c2:17:8a:af:d7:
5c:d6:48:76:98:8f:9f:49:51:d8:47:0e:1b:dd:81:
63:7e:a0:82:34:22:f0:66:58:f7:1d:8a:0c:22:1d:
f1:1e:fd:fd:1c:86:b3:67:8a:12:ad:0f:d3:c4:49:
5f:6d:d8:76:7a:90:5c:30:f9:c5:b5:67:c5:d6:e7:
b6:d8:e8:40:dd:ae:37:6d:95:c5:10:6b:eb:20:26:
c6:19:ac:79:ea:4a:ce:69:4b:a0:a6:1d:dd:f5:43:
4e:97:ba:f5:f1:5a:d3:19:eb:01:e9:a6:79:b9:0e:
6a:aa:1a:f3:b8:24:d1:29:6a:a7:46:f2:96:0e:10:
dc:f3:49:e6:73:14:f7:10:dc:5d:58:7b:99:81:ed:
57:a3:af:e6:ec:ba:38:64:9a:ea:03:66:7e:d6:f6:
96:03:26:e6:54:47:a5:db:10:d4:67:88:1a:07:e1:
ea:68:39:49:7a:e9:37:a8:51:0d:89:57:59:dc:38:
68:48:ed:e0:b2:b4:50:9b:56:cb:ff:38:38:b6:b4:
5d:12:4c:45:a6:fc:ef:ec:5f:03:da:ad:df:23:6f:
df:96:19:d1:4b:14:a8:1c:2a:68:c4:58:77:da:19:
49:57:98:d3:07:9c:e1:24:6c:c4:f0:c5:9a:81:1a:
ff:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:54:6F:59:63:90:D8:59:8F:74:21:75:97:CA:C2:E7:09:83:15:5B
X509v3 Authority Key Identifier:
keyid:DE:9D:64:01:62:91:EA:2A:16:F3:B7:95:6A:0F:40:35:B7:09:E5:47
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9125475/8D9471F6290611E593BFC626C4F9AE02/3p1kAWKR6ioW87eVag9ANbcJ5Uc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/3p1kAWKR6ioW87eVag9ANbcJ5Uc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9125475/8D9471F6290611E593BFC626C4F9AE02/19FEDB562AB611EC93861F65C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.157.88.0/22
134.236.0.0/16
159.192.0.0/16
Signature Algorithm: sha256WithRSAEncryption
bb:1c:d8:6a:24:03:f1:ad:b8:01:a9:ba:c2:da:a1:60:90:c6:
65:c1:c7:53:ba:76:6f:b1:16:e3:b8:95:1c:91:87:97:39:fd:
0a:7d:93:3a:f2:f1:7e:60:16:33:6c:a8:57:73:bf:59:4f:38:
00:eb:bd:04:c1:9d:af:de:aa:c3:4f:c3:38:07:ea:74:af:42:
3e:e4:ad:d3:f9:ba:f2:6d:0b:6c:66:3f:b4:47:11:fb:64:e4:
0c:23:80:51:d1:e2:a8:4c:00:ef:39:91:03:34:ef:30:bf:ab:
e3:05:06:a0:8e:39:80:25:e5:d7:4c:46:54:9e:eb:46:70:2d:
3c:10:6a:95:62:ec:78:81:13:6a:aa:57:ea:23:9e:fe:71:e0:
ae:b4:d5:21:6b:1c:e8:92:c4:7e:88:7f:6b:ab:a6:9f:9a:64:
22:de:62:1b:13:29:5d:df:91:a4:ea:ec:84:bd:5f:3a:77:dd:
4b:f8:1a:8e:18:0c:20:62:eb:37:0c:69:dc:05:b4:f4:ec:9d:
b7:39:99:49:7e:53:84:64:a6:49:84:25:df:a7:af:57:bd:c4:
5e:f7:60:56:c7:58:2a:e9:75:06:3d:65:b2:bd:12:c2:28:3f:
1b:d2:ef:a5:83:57:82:ad:5e:67:eb:6e:be:ef:db:16:aa:66:
bb:87:12:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 16:11:22 2024 by rpki-client on console-fra.rpki-client.org