Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91298DA/34F3612E268111EA903D7058C4F9AE02/BD4BA67012A011EFA668480EC4F9AE02.roa
File: BD4BA67012A011EFA668480EC4F9AE02.roa (raw, json)
Hash identifier: G6vYIWbabz7x/wscLMbKQwuzdzXkNuiV7+lHW2ajmZM=
Subject key identifier: 35:C4:E5:39:8D:EC:09:3E:4F:F5:06:EA:C9:D7:10:30:52:89:75:5B
Certificate issuer: /CN=A91298DA/serialNumber=FCAA086226DF02AF8394FAB22D1FB96E0B7D65DD
Certificate serial: 0B49
Authority key identifier: FC:AA:08:62:26:DF:02:AF:83:94:FA:B2:2D:1F:B9:6E:0B:7D:65:DD
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_KoIYibfAq-DlPqyLR-5bgt9Zd0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91298DA/34F3612E268111EA903D7058C4F9AE02/BD4BA67012A011EFA668480EC4F9AE02.roa
Signing time: Mon 19 Aug 2024 06:42:44 +0000
ROA not before: Mon 19 Aug 2024 06:42:43 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 58895
IP address blocks: 36.255.100.0/22 maxlen: 22
36.255.100.0/24 maxlen: 24
36.255.101.0/24 maxlen: 24
36.255.102.0/24 maxlen: 24
36.255.103.0/24 maxlen: 24
43.229.164.0/22 maxlen: 22
43.229.164.0/24 maxlen: 24
43.229.165.0/24 maxlen: 24
43.229.166.0/24 maxlen: 24
43.229.167.0/24 maxlen: 24
43.230.92.0/22 maxlen: 22
43.230.92.0/24 maxlen: 24
43.230.93.0/24 maxlen: 24
43.230.94.0/24 maxlen: 24
43.230.95.0/24 maxlen: 24
43.231.60.0/22 maxlen: 22
43.231.60.0/24 maxlen: 24
43.231.61.0/24 maxlen: 24
43.231.62.0/24 maxlen: 24
43.231.63.0/24 maxlen: 24
43.248.12.0/22 maxlen: 22
43.248.12.0/24 maxlen: 24
43.248.13.0/24 maxlen: 24
43.248.14.0/24 maxlen: 24
43.248.15.0/24 maxlen: 24
45.113.124.0/22 maxlen: 22
45.113.124.0/24 maxlen: 24
45.113.125.0/24 maxlen: 24
45.113.126.0/24 maxlen: 24
45.113.127.0/24 maxlen: 24
45.117.105.0/24 maxlen: 24
45.117.106.0/24 maxlen: 24
45.117.107.0/24 maxlen: 24
103.24.96.0/22 maxlen: 24
103.35.212.0/22 maxlen: 22
103.35.212.0/24 maxlen: 24
103.35.213.0/24 maxlen: 24
103.35.214.0/24 maxlen: 24
103.35.215.0/24 maxlen: 24
103.39.80.0/22 maxlen: 22
103.39.80.0/24 maxlen: 24
103.39.81.0/24 maxlen: 24
103.39.82.0/24 maxlen: 24
103.39.83.0/24 maxlen: 24
103.49.136.0/24 maxlen: 24
103.49.137.0/24 maxlen: 24
103.49.138.0/24 maxlen: 24
103.49.139.0/24 maxlen: 24
103.50.156.0/22 maxlen: 22
103.50.156.0/24 maxlen: 24
103.50.157.0/24 maxlen: 24
103.50.158.0/24 maxlen: 24
103.50.159.0/24 maxlen: 24
103.53.44.0/22 maxlen: 22
103.53.44.0/24 maxlen: 24
103.53.45.0/24 maxlen: 24
103.53.46.0/24 maxlen: 24
103.53.47.0/24 maxlen: 24
103.57.168.0/22 maxlen: 22
103.57.168.0/24 maxlen: 24
103.57.169.0/24 maxlen: 24
103.57.170.0/24 maxlen: 24
103.57.171.0/24 maxlen: 24
103.70.84.0/22 maxlen: 22
103.70.84.0/24 maxlen: 24
103.70.85.0/24 maxlen: 24
103.70.86.0/24 maxlen: 24
103.70.87.0/24 maxlen: 24
103.200.196.0/24 maxlen: 24
103.200.197.0/24 maxlen: 24
103.200.198.0/24 maxlen: 24
103.200.199.0/24 maxlen: 24
103.209.84.0/22 maxlen: 22
103.209.84.0/24 maxlen: 24
103.209.85.0/24 maxlen: 24
103.209.86.0/24 maxlen: 24
103.209.87.0/24 maxlen: 24
117.53.40.0/22 maxlen: 22
117.53.40.0/24 maxlen: 24
117.53.41.0/24 maxlen: 24
117.53.42.0/24 maxlen: 24
117.53.43.0/24 maxlen: 24
150.129.4.0/22 maxlen: 22
150.129.4.0/24 maxlen: 24
150.129.5.0/24 maxlen: 24
150.129.6.0/24 maxlen: 24
150.129.7.0/24 maxlen: 24
2400:1680::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91298DA/34F3612E268111EA903D7058C4F9AE02/_KoIYibfAq-DlPqyLR-5bgt9Zd0.crl
rsync://rpki.apnic.net/member_repository/A91298DA/34F3612E268111EA903D7058C4F9AE02/_KoIYibfAq-DlPqyLR-5bgt9Zd0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_KoIYibfAq-DlPqyLR-5bgt9Zd0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 29 Nov 2024 18:50:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2889 (0xb49)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91298DA/serialNumber=FCAA086226DF02AF8394FAB22D1FB96E0B7D65DD
Validity
Not Before: Aug 19 06:42:43 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=66c2e963-32fd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f4:d1:f7:88:e8:65:e9:e6:1c:25:4d:ca:3e:ed:
0b:5c:6d:6c:b0:31:90:32:86:6b:1b:32:3a:f1:cc:
62:c2:0f:59:80:5c:58:b7:98:57:4f:ae:1c:80:52:
4e:67:23:bd:22:b3:e6:78:c8:f3:2f:d7:d4:37:d0:
99:15:aa:08:5b:24:e8:31:07:6c:92:e5:da:46:09:
c2:4e:22:4d:d3:a8:ec:bc:84:d5:fc:69:a8:ba:bd:
a8:39:47:42:33:be:42:e3:f8:4b:1c:49:9b:90:f3:
73:fd:d8:db:bf:3b:46:c3:00:7b:a5:eb:0b:d1:b2:
97:40:5e:00:7a:4e:ac:55:42:6f:b5:84:c3:2b:09:
3d:cd:8a:6a:ec:f5:89:01:16:81:6b:29:fd:8c:2c:
29:5b:25:50:5f:c9:23:2f:47:31:2e:24:67:39:1c:
d2:be:5a:03:ac:18:f7:55:da:5b:33:19:cc:6c:b8:
1f:3b:b9:97:b8:98:5d:a8:d2:47:87:77:f0:18:d1:
f1:d1:5f:cb:c7:e9:88:d4:9f:a6:1c:9c:71:0d:ab:
de:98:57:c3:43:a6:1b:c7:fa:1d:79:90:af:65:e7:
0b:ff:c1:c3:e8:a1:2d:a8:61:3a:a2:ab:d9:bc:80:
e8:32:94:96:80:64:2e:8e:8b:bf:3f:6a:3b:e3:50:
59:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:C4:E5:39:8D:EC:09:3E:4F:F5:06:EA:C9:D7:10:30:52:89:75:5B
X509v3 Authority Key Identifier:
keyid:FC:AA:08:62:26:DF:02:AF:83:94:FA:B2:2D:1F:B9:6E:0B:7D:65:DD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91298DA/34F3612E268111EA903D7058C4F9AE02/_KoIYibfAq-DlPqyLR-5bgt9Zd0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_KoIYibfAq-DlPqyLR-5bgt9Zd0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91298DA/34F3612E268111EA903D7058C4F9AE02/BD4BA67012A011EFA668480EC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
36.255.100.0/22
43.229.164.0/22
43.230.92.0/22
43.231.60.0/22
43.248.12.0/22
45.113.124.0/22
45.117.105.0-45.117.107.255
103.24.96.0/22
103.35.212.0/22
103.39.80.0/22
103.49.136.0/22
103.50.156.0/22
103.53.44.0/22
103.57.168.0/22
103.70.84.0/22
103.200.196.0/22
103.209.84.0/22
117.53.40.0/22
150.129.4.0/22
IPv6:
2400:1680::/32
Signature Algorithm: sha256WithRSAEncryption
84:ad:44:00:2f:72:35:9d:79:0c:98:a7:18:71:cb:97:a4:81:
eb:04:93:71:bc:81:81:5b:7b:cb:3e:b0:8f:8c:54:74:8a:87:
dc:79:24:19:36:67:21:d4:ab:9a:29:01:b2:2d:e2:d3:e0:17:
0a:8b:c3:1d:4e:93:4b:ab:4f:15:c2:aa:5f:59:3b:d5:84:1a:
48:5f:5b:e1:44:40:cd:23:3e:db:2e:24:6b:1d:aa:27:d8:43:
bb:ea:63:0c:22:a4:af:2a:36:7d:db:8e:0e:88:c1:1f:09:1c:
c4:18:07:7f:e4:39:2f:f2:d9:fa:d2:18:2a:6d:fc:10:6c:5e:
01:3a:9f:9a:a7:37:a1:c3:27:a0:d2:82:1d:a4:cb:2f:f0:16:
ed:d5:a3:db:6a:71:1e:7b:7d:78:4e:b4:56:08:d7:80:74:6a:
f4:84:cf:b7:0b:2f:42:79:21:96:a5:32:85:32:00:4e:69:80:
34:74:18:31:80:ad:0e:74:2d:1e:be:54:23:69:51:6e:90:bf:
a8:6e:d0:dc:53:b0:55:66:5e:7c:6a:d7:40:e6:31:4c:45:0b:
3b:15:75:53:25:46:3b:81:23:3e:f2:82:c1:10:41:35:34:e6:
19:35:71:da:4c:a5:79:8b:bf:f6:b3:f2:16:d4:c9:db:76:98:
e6:69:61:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 19:44:56 2024 by rpki-client on console-fra.rpki-client.org