Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A912C8AF/D1F64E725EEF11EAA54E6C6CC4F9AE02/0FB29E462A0811EE9A08C30FC4F9AE02.roa
File: 0FB29E462A0811EE9A08C30FC4F9AE02.roa (raw, json)
Hash identifier: ZqdtECDRqDG4B5sUURVHvsrynmrQ1unVucYfwH8ae+A=
Subject key identifier: EB:DD:CF:AB:CA:44:82:EB:4C:DD:59:2B:96:F9:51:7A:D3:FE:95:AF
Certificate issuer: /CN=A912C8AF/serialNumber=763F7FBD964A1C3668308C9A29E15025C0DDF9D4
Certificate serial: 0AF8
Authority key identifier: 76:3F:7F:BD:96:4A:1C:36:68:30:8C:9A:29:E1:50:25:C0:DD:F9:D4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dj9_vZZKHDZoMIyaKeFQJcDd-dQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912C8AF/D1F64E725EEF11EAA54E6C6CC4F9AE02/0FB29E462A0811EE9A08C30FC4F9AE02.roa
Signing time: Tue 24 Dec 2024 10:52:19 +0000
ROA not before: Tue 24 Dec 2024 10:52:19 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 138915
IP address blocks: 59.153.156.0/24 maxlen: 24
59.153.157.0/24 maxlen: 24
59.153.158.0/24 maxlen: 24
59.153.159.0/24 maxlen: 24
103.84.108.0/24 maxlen: 24
103.84.109.0/24 maxlen: 24
103.84.111.0/24 maxlen: 24
103.136.248.0/22 maxlen: 22
103.136.248.0/24 maxlen: 24
103.136.249.0/24 maxlen: 24
103.136.250.0/24 maxlen: 24
103.136.251.0/24 maxlen: 24
103.198.200.0/24 maxlen: 24
103.198.201.0/24 maxlen: 24
103.198.202.0/24 maxlen: 24
175.176.192.0/24 maxlen: 24
175.176.193.0/24 maxlen: 24
175.176.194.0/24 maxlen: 24
175.176.195.0/24 maxlen: 24
2404:a140::/32 maxlen: 32
2404:a140:2::/48 maxlen: 48
2404:a140:3::/48 maxlen: 48
2404:a140:4::/48 maxlen: 48
2404:a140:5::/48 maxlen: 48
2404:a140:6::/48 maxlen: 48
2404:a140:7::/48 maxlen: 48
2404:a140:8::/48 maxlen: 48
2404:a140:9::/48 maxlen: 48
2404:a140:a::/48 maxlen: 48
2404:a140:b::/48 maxlen: 48
2404:a140:c::/48 maxlen: 48
2404:a140:d::/48 maxlen: 48
2404:a140:e::/48 maxlen: 48
2404:a140:f::/48 maxlen: 48
2404:a140:10::/48 maxlen: 48
2404:a140:11::/48 maxlen: 48
2404:a140:12::/48 maxlen: 48
2404:a140:13::/48 maxlen: 48
2404:a140:14::/48 maxlen: 48
2404:a140:15::/48 maxlen: 48
2404:a140:16::/48 maxlen: 48
2404:a140:17::/48 maxlen: 48
2404:a140:18::/48 maxlen: 48
2404:a140:19::/48 maxlen: 48
2404:a140:1a::/48 maxlen: 48
2404:a140:1b::/48 maxlen: 48
2404:a140:1c::/48 maxlen: 48
2404:a140:1d::/48 maxlen: 48
2404:a140:1e::/48 maxlen: 48
2404:a140:1f::/48 maxlen: 48
2404:a140:20::/48 maxlen: 48
2404:a140:21::/48 maxlen: 48
2404:a140:22::/48 maxlen: 48
2404:a140:23::/48 maxlen: 48
2404:a140:24::/48 maxlen: 48
2404:a140:25::/48 maxlen: 48
2404:a140:26::/48 maxlen: 48
2404:a140:27::/48 maxlen: 48
2404:a140:28::/48 maxlen: 48
2404:a140:29::/48 maxlen: 48
2404:a140:2a::/48 maxlen: 48
2404:a140:2b::/48 maxlen: 48
2404:a140:2c::/48 maxlen: 48
2404:a140:2d::/48 maxlen: 48
2404:a140:2e::/48 maxlen: 48
2404:a140:2f::/48 maxlen: 48
2404:a140:30::/48 maxlen: 48
2404:a140:32::/48 maxlen: 48
2404:a140:33::/48 maxlen: 48
2404:a140:38::/48 maxlen: 48
2404:a140:39::/48 maxlen: 48
2404:a140:3a::/48 maxlen: 48
2404:a140:3b::/48 maxlen: 48
2404:a140:3c::/48 maxlen: 48
2404:a140:3d::/48 maxlen: 48
2404:a140:3e::/48 maxlen: 48
2404:a140:3f::/48 maxlen: 48
2404:a140:42::/48 maxlen: 48
2404:a140:44::/48 maxlen: 48
2404:a140:4a::/48 maxlen: 48
2404:a140:4b::/48 maxlen: 48
2404:a140:4c::/48 maxlen: 48
2404:a140:4d::/48 maxlen: 48
2404:a140:4f::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A912C8AF/D1F64E725EEF11EAA54E6C6CC4F9AE02/dj9_vZZKHDZoMIyaKeFQJcDd-dQ.crl
rsync://rpki.apnic.net/member_repository/A912C8AF/D1F64E725EEF11EAA54E6C6CC4F9AE02/dj9_vZZKHDZoMIyaKeFQJcDd-dQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dj9_vZZKHDZoMIyaKeFQJcDd-dQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 21 Feb 2025 05:15:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2808 (0xaf8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912C8AF
Validity
Not Before: Dec 24 10:52:19 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=676a9262-9152
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:7c:ce:a6:04:36:27:29:aa:a2:7b:d0:62:71:
1e:e3:91:a0:12:c3:67:96:a3:c4:a0:36:8e:91:f4:
80:22:27:4b:16:a6:4c:fd:e4:79:54:c4:cd:a6:3b:
cc:c7:6d:05:b6:97:c9:6e:85:ea:14:1d:3c:02:7b:
b0:df:33:da:3e:40:e4:fd:02:28:4d:86:8b:f8:00:
0b:a0:0a:f8:f3:54:17:23:18:75:eb:74:a1:e6:36:
67:89:70:f6:cc:7e:0e:45:ca:3f:d1:ab:79:ba:9d:
33:f1:36:e8:ff:d9:ff:a5:e3:a0:39:59:31:35:90:
57:00:52:7e:ee:4d:67:56:85:72:d5:83:b2:94:4d:
c4:7b:a8:d1:1a:be:0a:e4:75:03:80:4c:87:97:80:
41:a7:3b:3b:21:a3:58:1a:56:b5:97:29:82:06:fd:
fc:3d:51:f6:1e:e6:0d:e1:b5:47:4a:69:b5:53:82:
0c:d8:93:af:1f:12:f0:76:c1:9f:43:d4:2c:a5:b8:
73:47:a3:c6:3b:0d:94:fc:a3:63:58:d2:51:86:f0:
ef:07:dc:cb:47:ce:89:b4:8b:17:e7:c1:f2:8f:0e:
51:b3:c7:61:bc:f5:cb:fa:af:b4:e6:78:b8:67:01:
d5:e6:52:e8:6d:8b:c0:d6:53:e8:15:14:d4:bb:63:
63:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:DD:CF:AB:CA:44:82:EB:4C:DD:59:2B:96:F9:51:7A:D3:FE:95:AF
X509v3 Authority Key Identifier:
keyid:76:3F:7F:BD:96:4A:1C:36:68:30:8C:9A:29:E1:50:25:C0:DD:F9:D4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912C8AF/D1F64E725EEF11EAA54E6C6CC4F9AE02/dj9_vZZKHDZoMIyaKeFQJcDd-dQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dj9_vZZKHDZoMIyaKeFQJcDd-dQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912C8AF/D1F64E725EEF11EAA54E6C6CC4F9AE02/0FB29E462A0811EE9A08C30FC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
59.153.156.0/22
103.84.108.0/23
103.84.111.0/24
103.136.248.0/22
103.198.200.0-103.198.202.255
175.176.192.0/22
IPv6:
2404:a140::/32
Signature Algorithm: sha256WithRSAEncryption
18:c9:6e:c6:fc:2d:64:0a:09:ed:e5:a4:b0:7d:a8:42:1f:c9:
f4:bf:17:72:82:06:00:a9:43:43:57:5f:ec:fc:82:8d:c0:a7:
01:fd:5b:36:22:95:9d:a2:2a:7f:08:e0:62:e5:21:1d:a4:78:
00:e2:88:e4:2f:d7:08:1b:8e:90:05:dc:82:40:f8:f8:d4:34:
46:71:bd:93:1d:ed:05:cb:16:be:8b:1b:f3:c1:06:58:36:05:
b5:dc:b2:46:5e:14:e3:54:a5:58:cf:d9:0a:dc:42:aa:82:02:
29:60:57:74:bc:e2:94:6b:04:2f:5f:10:91:cf:e9:f8:84:8f:
8d:f6:75:13:48:8c:7a:9c:dd:48:35:aa:b3:ee:dc:5b:e0:a0:
1b:25:81:eb:39:6a:5d:a2:59:44:2a:85:5f:be:8f:74:e2:a9:
10:7a:b3:2e:95:88:ac:83:f6:e9:be:7c:ca:08:f4:11:a1:5e:
fb:b9:f8:3b:ae:3f:a4:cd:9d:31:17:51:94:d6:be:e8:0c:bd:
4e:71:df:e4:09:dc:77:7a:e2:7a:87:15:6b:50:6a:3b:eb:01:
80:c0:a6:85:75:e9:83:5d:81:ad:49:02:32:32:1e:09:16:0f:
c4:0c:6a:27:cf:78:6d:f1:bf:6f:6f:f0:9a:46:ad:60:b7:c3:
a5:a0:a2:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:23:39 2025 by rpki-client