Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/5CC0FB0627C811EF9719D685C4F9AE02.roa
File: 5CC0FB0627C811EF9719D685C4F9AE02.roa (raw, json)
Hash identifier: 5VhR1lTNXzvCUAB92L1FKhBMEAyRRDYDyjuOstc8iGA=
Subject key identifier: A2:C5:26:DB:75:35:41:47:77:77:B1:A0:CC:76:65:6F:4B:67:81:18
Certificate issuer: /CN=A9137ABC/serialNumber=61BF3ED4C3BFBC0916EF9480AAFF222A437AF02C
Certificate serial: 38D4
Authority key identifier: 61:BF:3E:D4:C3:BF:BC:09:16:EF:94:80:AA:FF:22:2A:43:7A:F0:2C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/5CC0FB0627C811EF9719D685C4F9AE02.roa
Signing time: Tue 16 Jul 2024 14:31:41 +0000
ROA not before: Tue 16 Jul 2024 14:31:41 +0000
ROA not after: Tue 30 Sep 2025 00:00:00 +0000
asID: 7470
IP address blocks: 27.145.0.0/16 maxlen: 24
58.8.0.0/16 maxlen: 24
58.9.0.0/16 maxlen: 24
58.10.0.0/16 maxlen: 24
58.11.0.0/16 maxlen: 24
58.97.0.0/18 maxlen: 24
58.97.64.0/18 maxlen: 24
61.90.0.0/17 maxlen: 24
61.90.128.0/17 maxlen: 24
61.91.0.0/18 maxlen: 24
61.91.64.0/18 maxlen: 24
61.91.128.0/19 maxlen: 24
61.91.160.0/19 maxlen: 24
61.91.192.0/18 maxlen: 24
103.3.176.0/22 maxlen: 24
110.168.0.0/16 maxlen: 24
110.169.0.0/16 maxlen: 24
110.170.0.0/15 maxlen: 24
114.109.0.0/16 maxlen: 24
115.87.0.0/16 maxlen: 24
119.46.0.0/16 maxlen: 22
119.46.0.0/18 maxlen: 24
119.46.64.0/19 maxlen: 24
119.46.96.0/24 maxlen: 24
119.46.97.0/24 maxlen: 24
119.46.98.0/23 maxlen: 24
119.46.100.0/22 maxlen: 24
119.46.104.0/21 maxlen: 24
119.46.112.0/20 maxlen: 24
119.46.128.0/19 maxlen: 24
119.46.160.0/20 maxlen: 24
119.46.176.0/23 maxlen: 24
119.46.178.0/24 maxlen: 24
119.46.179.0/24 maxlen: 24
119.46.180.0/22 maxlen: 24
119.46.184.0/21 maxlen: 24
119.46.192.0/18 maxlen: 24
119.76.0.0/16 maxlen: 24
124.120.0.0/16 maxlen: 24
124.121.0.0/16 maxlen: 24
124.122.0.0/16 maxlen: 24
171.96.0.0/16 maxlen: 24
171.97.0.0/16 maxlen: 24
171.98.0.0/16 maxlen: 24
171.99.0.0/16 maxlen: 24
171.100.0.0/16 maxlen: 24
171.101.0.0/16 maxlen: 24
171.102.0.0/16 maxlen: 19
171.102.0.0/17 maxlen: 24
171.102.144.0/20 maxlen: 24
171.102.160.0/19 maxlen: 24
171.102.192.0/18 maxlen: 23
171.102.192.0/20 maxlen: 24
171.102.208.0/21 maxlen: 24
171.102.216.0/22 maxlen: 24
171.102.220.0/24 maxlen: 24
171.102.222.0/23 maxlen: 24
171.102.224.0/21 maxlen: 24
171.102.232.0/22 maxlen: 24
171.102.236.0/23 maxlen: 24
171.102.239.0/24 maxlen: 24
171.102.240.0/20 maxlen: 24
171.103.0.0/16 maxlen: 24
182.17.0.0/16 maxlen: 24
202.93.48.0/20 maxlen: 20
202.133.128.0/20 maxlen: 24
202.133.144.0/20 maxlen: 24
202.133.160.0/19 maxlen: 24
202.176.64.0/18 maxlen: 18
202.176.64.0/19 maxlen: 24
202.176.96.0/19 maxlen: 24
202.176.128.0/18 maxlen: 24
203.118.64.0/20 maxlen: 20
203.118.80.0/20 maxlen: 20
203.118.96.0/20 maxlen: 20
203.118.99.0/24 maxlen: 24
203.118.112.0/20 maxlen: 20
203.144.128.0/20 maxlen: 24
203.144.144.0/20 maxlen: 24
203.144.160.0/20 maxlen: 24
203.144.176.0/20 maxlen: 24
203.144.192.0/20 maxlen: 24
203.144.208.0/20 maxlen: 24
203.144.224.0/20 maxlen: 24
203.144.244.0/24 maxlen: 24
203.144.246.0/24 maxlen: 24
203.144.254.0/24 maxlen: 24
203.144.255.0/24 maxlen: 24
203.153.128.0/20 maxlen: 20
210.86.128.0/18 maxlen: 18
210.86.128.0/21 maxlen: 21
210.86.140.0/22 maxlen: 22
210.86.140.0/24 maxlen: 24
210.86.141.0/24 maxlen: 24
210.86.145.0/24 maxlen: 24
210.86.160.0/24 maxlen: 24
210.86.161.0/24 maxlen: 24
210.86.162.0/24 maxlen: 24
210.86.163.0/24 maxlen: 24
210.86.164.0/24 maxlen: 24
210.86.165.0/24 maxlen: 24
210.86.166.0/24 maxlen: 24
210.86.167.0/24 maxlen: 24
210.86.168.0/24 maxlen: 24
210.86.169.0/24 maxlen: 24
210.86.170.0/24 maxlen: 24
210.86.171.0/24 maxlen: 24
210.86.172.0/24 maxlen: 24
210.86.173.0/24 maxlen: 24
210.86.174.0/24 maxlen: 24
210.86.175.0/24 maxlen: 24
210.86.190.0/24 maxlen: 24
210.86.191.0/24 maxlen: 24
210.86.192.0/19 maxlen: 19
210.86.213.0/24 maxlen: 24
210.86.214.0/24 maxlen: 24
210.213.0.0/18 maxlen: 24
2001:fb0::/32 maxlen: 32
2001:fb0:1004::/48 maxlen: 48
2001:fb0:1005::/48 maxlen: 48
2001:fb0:1061:12::/64 maxlen: 64
2001:fb0:1064::/48 maxlen: 48
2001:fb0:1065::/48 maxlen: 48
2001:fb0:109f::/48 maxlen: 48
2001:fb0:109f:4::/64 maxlen: 64
2001:fb0:109f:5::/64 maxlen: 64
2001:fb0:109f:1a::/64 maxlen: 64
2001:fb0:109f:1b::/64 maxlen: 64
2001:fb0:109f:8000::/64 maxlen: 64
2001:fb0:109f:8001::/64 maxlen: 64
2001:fb0:109f:8016::/64 maxlen: 64
2001:fb0:109f:8017::/64 maxlen: 64
2001:fb0:109f:8019::/64 maxlen: 64
2001:fb0:109f:801a::/64 maxlen: 64
2001:fb0:109f:801b::/64 maxlen: 64
2001:fb0:109f:801e::/64 maxlen: 64
2001:fb0:109f:801f::/64 maxlen: 64
2001:fb1::/32 maxlen: 48
2405:4000:800:1::15e/127 maxlen: 127
2405:4000:800:1::160/127 maxlen: 127
2405:4000:800:1::162/127 maxlen: 127
2405:4000:800:1::164/127 maxlen: 127
2405:4000:800:6::/64 maxlen: 64
2405:4000:800:7::/64 maxlen: 64
2405:4000:801::/64 maxlen: 64
2405:4000:801:1::/64 maxlen: 64
2405:4000:801:2::/64 maxlen: 64
2405:4000:801:3::/64 maxlen: 64
2405:4000:801:4::/64 maxlen: 64
2405:4000:801:5::/64 maxlen: 64
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.crl
rsync://rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 21 Feb 2025 05:15:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 14548 (0x38d4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9137ABC
Validity
Not Before: Jul 16 14:31:41 2024 GMT
Not After : Sep 30 00:00:00 2025 GMT
Subject: CN=6696844d-b42e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:27:0f:cd:9c:d7:d6:8d:29:86:07:28:a0:75:
58:59:76:3f:36:31:ae:60:8b:95:c6:75:e9:78:51:
a4:db:98:72:f7:40:5e:05:b5:28:43:a1:14:8b:a4:
e6:f6:a1:12:08:ba:9c:3f:aa:56:bc:07:56:30:92:
1b:57:ed:9f:45:2a:21:f7:97:a7:bb:f0:7e:37:d9:
f7:42:bc:27:a2:f0:e7:8d:47:eb:b9:de:09:5a:a4:
b7:cc:76:18:01:c4:dc:9f:40:f2:f4:b9:d3:83:48:
b0:2a:69:a9:d2:9d:30:31:ea:56:41:47:59:15:d4:
ed:dd:bd:1e:b4:ad:ab:1b:ab:c2:58:eb:ee:8c:8c:
ef:47:52:10:c8:1b:ce:57:30:53:69:3a:92:0e:fe:
66:8b:c8:4e:99:50:b7:1a:41:b5:91:ef:e2:1b:a2:
4f:e4:27:6f:1b:af:23:9b:b2:81:32:d4:c1:5d:37:
92:4e:87:5d:12:c8:15:67:e0:f3:2d:66:1a:fb:6f:
79:d5:44:56:8e:1f:5e:28:22:88:18:12:b8:c5:34:
86:fd:7d:c2:2f:f2:00:ae:9a:32:95:39:07:28:09:
6c:a9:20:c1:a2:ab:8c:b4:1d:a6:24:db:05:a4:09:
5c:b2:cf:99:30:f7:74:80:fe:9a:da:cc:12:ca:eb:
4e:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:C5:26:DB:75:35:41:47:77:77:B1:A0:CC:76:65:6F:4B:67:81:18
X509v3 Authority Key Identifier:
keyid:61:BF:3E:D4:C3:BF:BC:09:16:EF:94:80:AA:FF:22:2A:43:7A:F0:2C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/5CC0FB0627C811EF9719D685C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
27.145.0.0/16
58.8.0.0/14
58.97.0.0/17
61.90.0.0/15
103.3.176.0/22
110.168.0.0/14
114.109.0.0/16
115.87.0.0/16
119.46.0.0/16
119.76.0.0/16
124.120.0.0-124.122.255.255
171.96.0.0/13
182.17.0.0/16
202.93.48.0/20
202.133.128.0/18
202.176.64.0-202.176.191.255
203.118.64.0/18
203.144.128.0-203.144.239.255
203.144.244.0/24
203.144.246.0/24
203.144.254.0/23
203.153.128.0/20
210.86.128.0-210.86.223.255
210.213.0.0/18
IPv6:
2001:fb0::/31
2405:4000:800:1:0:0:0:15e-2405:4000:800:1:0:0:0:165
2405:4000:800:6::/63
2405:4000:801::-2405:4000:801:5:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
92:3c:8d:af:be:47:ff:63:7c:56:db:3e:27:94:6d:61:2c:a7:
91:d4:9a:ae:8e:eb:7d:19:0a:82:25:b8:a6:36:39:84:01:d5:
78:48:61:2d:91:d6:fe:01:cc:9a:7a:4e:8e:31:ec:08:55:4a:
c1:0f:ae:81:96:1e:4b:65:b3:39:c1:93:c2:16:0d:6b:ea:39:
6e:3f:80:10:a1:32:3f:d2:90:fd:53:c4:45:51:aa:a7:44:ef:
3d:00:b4:75:32:94:98:97:e0:28:e3:48:68:ea:bc:bf:89:7b:
f9:53:22:16:5c:54:3b:e4:a6:ae:85:43:be:57:97:fc:30:c7:
a8:15:ab:34:ee:f8:5b:6f:1a:ef:bf:25:4f:7f:b0:5c:54:c8:
8d:1d:70:e4:b4:e5:da:37:2d:6f:b0:a0:52:95:26:70:a1:d7:
94:3b:cf:d5:65:54:03:27:a7:e1:b6:5a:9c:02:f4:a2:a9:bd:
31:f5:0f:a5:3b:1f:71:3f:1f:ae:db:d4:b1:25:dc:67:e2:ad:
0c:ec:22:be:98:7e:54:9b:2c:2f:bd:a9:39:08:d8:27:20:6d:
b5:f6:4f:bd:9a:c7:7c:a4:3a:d5:13:1f:1d:1c:a0:6f:52:22:
d6:61:65:72:cd:2c:12:3c:20:b8:c0:b9:c5:17:54:65:dc:22:
22:b2:43:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 20:59:38 2025 by rpki-client