Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A913D1EA/9C932B48173A11EBA3B97E7FC4F9AE02/601DCC529DA211EFA41BEC0DC4F9AE02.roa
File: 601DCC529DA211EFA41BEC0DC4F9AE02.roa (raw, json)
Hash identifier: 1BHbw59gb/yO1/nis+2geLalX3TlK0Iokwr/SPuQQ3o=
Subject key identifier: 48:46:C7:C0:EE:7B:C9:CF:6A:B2:59:10:61:E6:E4:15:2F:20:06:30
Certificate issuer: /CN=A913D1EA/serialNumber=E692C5B60B3EF1C2044439FC390AD56DC3CBCD63
Certificate serial: 073B
Authority key identifier: E6:92:C5:B6:0B:3E:F1:C2:04:44:39:FC:39:0A:D5:6D:C3:CB:CD:63
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5pLFtgs-8cIERDn8OQrVbcPLzWM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A913D1EA/9C932B48173A11EBA3B97E7FC4F9AE02/601DCC529DA211EFA41BEC0DC4F9AE02.roa
Signing time: Fri 08 Nov 2024 07:23:39 +0000
ROA not before: Fri 08 Nov 2024 07:23:39 +0000
ROA not after: Tue 30 Dec 2025 00:00:00 +0000
asID: 135607
IP address blocks: 61.245.4.0/24 maxlen: 24
61.245.5.0/24 maxlen: 24
61.245.6.0/24 maxlen: 24
61.245.7.0/24 maxlen: 24
61.245.8.0/24 maxlen: 24
61.245.9.0/24 maxlen: 24
61.245.12.0/24 maxlen: 24
61.245.13.0/24 maxlen: 24
61.245.14.0/24 maxlen: 24
61.245.15.0/24 maxlen: 24
61.245.16.0/24 maxlen: 24
61.245.17.0/24 maxlen: 24
61.245.18.0/24 maxlen: 24
61.245.19.0/24 maxlen: 24
61.245.20.0/24 maxlen: 24
61.245.21.0/24 maxlen: 24
61.245.22.0/24 maxlen: 24
61.245.23.0/24 maxlen: 24
61.245.24.0/24 maxlen: 24
61.245.25.0/24 maxlen: 24
61.245.26.0/24 maxlen: 24
61.245.27.0/24 maxlen: 24
61.245.28.0/24 maxlen: 24
61.245.29.0/24 maxlen: 24
61.245.30.0/24 maxlen: 24
61.245.121.0/24 maxlen: 24
61.245.122.0/24 maxlen: 24
61.245.123.0/24 maxlen: 24
103.76.160.0/23 maxlen: 23
103.76.160.0/24 maxlen: 24
103.76.161.0/24 maxlen: 24
103.100.100.0/23 maxlen: 23
103.100.100.0/24 maxlen: 24
103.100.101.0/24 maxlen: 24
126.209.0.0/24 maxlen: 24
126.209.1.0/24 maxlen: 24
126.209.2.0/24 maxlen: 24
126.209.3.0/24 maxlen: 24
126.209.4.0/24 maxlen: 24
126.209.5.0/24 maxlen: 24
126.209.6.0/24 maxlen: 24
126.209.7.0/24 maxlen: 24
126.209.8.0/24 maxlen: 24
126.209.9.0/24 maxlen: 24
126.209.10.0/24 maxlen: 24
126.209.11.0/24 maxlen: 24
126.209.12.0/24 maxlen: 24
126.209.13.0/24 maxlen: 24
126.209.14.0/24 maxlen: 24
126.209.15.0/24 maxlen: 24
126.209.16.0/24 maxlen: 24
126.209.17.0/24 maxlen: 24
126.209.18.0/24 maxlen: 24
126.209.19.0/24 maxlen: 24
126.209.20.0/24 maxlen: 24
126.209.21.0/24 maxlen: 24
126.209.22.0/24 maxlen: 24
126.209.23.0/24 maxlen: 24
126.209.24.0/24 maxlen: 24
126.209.25.0/24 maxlen: 24
126.209.26.0/24 maxlen: 24
126.209.27.0/24 maxlen: 24
126.209.28.0/24 maxlen: 24
126.209.29.0/24 maxlen: 24
126.209.30.0/24 maxlen: 24
126.209.31.0/24 maxlen: 24
126.209.32.0/24 maxlen: 24
126.209.33.0/24 maxlen: 24
126.209.34.0/24 maxlen: 24
126.209.35.0/24 maxlen: 24
126.209.36.0/24 maxlen: 24
126.209.37.0/24 maxlen: 24
126.209.38.0/24 maxlen: 24
126.209.39.0/24 maxlen: 24
126.209.40.0/24 maxlen: 24
126.209.41.0/24 maxlen: 24
126.209.42.0/24 maxlen: 24
126.209.43.0/24 maxlen: 24
126.209.44.0/24 maxlen: 24
126.209.45.0/24 maxlen: 24
126.209.46.0/24 maxlen: 24
126.209.47.0/24 maxlen: 24
126.209.48.0/24 maxlen: 24
126.209.49.0/24 maxlen: 24
126.209.50.0/24 maxlen: 24
126.209.51.0/24 maxlen: 24
126.209.52.0/24 maxlen: 24
126.209.53.0/24 maxlen: 24
126.209.54.0/24 maxlen: 24
126.209.55.0/24 maxlen: 24
126.209.56.0/24 maxlen: 24
126.209.57.0/24 maxlen: 24
126.209.61.0/24 maxlen: 24
126.209.62.0/24 maxlen: 24
126.209.63.0/24 maxlen: 24
2401:e740::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A913D1EA/9C932B48173A11EBA3B97E7FC4F9AE02/5pLFtgs-8cIERDn8OQrVbcPLzWM.crl
rsync://rpki.apnic.net/member_repository/A913D1EA/9C932B48173A11EBA3B97E7FC4F9AE02/5pLFtgs-8cIERDn8OQrVbcPLzWM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5pLFtgs-8cIERDn8OQrVbcPLzWM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 27 Nov 2024 20:33:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1851 (0x73b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A913D1EA/serialNumber=E692C5B60B3EF1C2044439FC390AD56DC3CBCD63
Validity
Not Before: Nov 8 07:23:39 2024 GMT
Not After : Dec 30 00:00:00 2025 GMT
Subject: CN=672dbc7b-43fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:e5:a6:2e:1e:8b:54:9f:48:70:f6:db:3d:ca:
2e:28:22:e7:68:90:4f:79:12:00:61:e4:98:82:24:
3e:82:95:98:76:e0:c7:ed:7e:a3:62:3b:df:0c:89:
4c:45:d0:3b:b9:df:e6:08:de:0b:06:82:e3:7b:4d:
5b:fd:3c:1b:ea:ba:9f:25:2c:a8:90:67:67:2e:94:
8b:3f:72:25:dc:5d:fc:ad:1d:d1:e4:6c:ac:30:cf:
d4:92:4e:5a:60:cb:d1:19:76:a5:68:85:c7:88:b5:
f8:db:00:ee:57:eb:25:28:63:84:d6:f0:67:6b:4d:
5d:f6:b9:fe:17:a4:1a:8c:f4:cd:17:12:4c:e8:ea:
68:d9:44:e7:ae:7d:1f:de:01:3d:5c:49:8b:cb:36:
ba:87:c5:05:d9:22:66:af:34:99:76:6f:c6:00:27:
9d:3f:bb:a5:0e:74:77:94:77:e9:5e:ae:1d:04:83:
3c:b6:0a:70:b2:e8:fa:45:4d:ed:a5:54:f0:3d:ec:
2c:68:b9:71:f3:d5:73:70:40:95:23:5c:6e:3c:f6:
24:a5:13:08:32:03:c3:5e:06:58:31:fa:23:fe:a7:
04:5e:0f:41:18:b1:a2:a4:41:b1:4c:ed:03:1e:81:
5e:87:81:46:89:8f:4e:f6:0f:95:8d:ff:31:dc:9c:
14:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:46:C7:C0:EE:7B:C9:CF:6A:B2:59:10:61:E6:E4:15:2F:20:06:30
X509v3 Authority Key Identifier:
keyid:E6:92:C5:B6:0B:3E:F1:C2:04:44:39:FC:39:0A:D5:6D:C3:CB:CD:63
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A913D1EA/9C932B48173A11EBA3B97E7FC4F9AE02/5pLFtgs-8cIERDn8OQrVbcPLzWM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5pLFtgs-8cIERDn8OQrVbcPLzWM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913D1EA/9C932B48173A11EBA3B97E7FC4F9AE02/601DCC529DA211EFA41BEC0DC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
61.245.4.0-61.245.9.255
61.245.12.0-61.245.30.255
61.245.121.0-61.245.123.255
103.76.160.0/23
103.100.100.0/23
126.209.0.0-126.209.57.255
126.209.61.0-126.209.63.255
IPv6:
2401:e740::/32
Signature Algorithm: sha256WithRSAEncryption
8b:f3:a2:6b:59:de:99:29:70:12:99:27:4e:bd:b2:05:0c:ea:
c0:a6:21:74:cf:b0:be:c4:b8:ff:50:55:9e:de:2d:57:d5:f3:
3e:22:91:32:77:03:ac:1d:c1:4e:dc:62:f9:e0:96:37:da:07:
e3:ca:07:ea:b5:b6:c8:26:b5:d8:96:96:94:30:d8:7a:e5:7a:
40:24:cc:e6:56:26:89:17:e1:81:b7:d3:57:2f:20:49:67:bf:
d6:2d:1c:29:c7:7e:a0:d1:d8:4c:19:1d:80:35:d8:cf:a4:55:
41:e1:36:ef:b2:82:65:69:86:59:08:0d:06:b8:fc:9e:cb:81:
01:a7:bb:e3:49:c6:3e:e2:bf:71:58:49:3c:f8:db:22:13:5a:
2d:44:24:38:11:5f:3b:77:28:08:af:c3:9c:30:49:7e:4f:b9:
40:26:c0:65:20:d4:e2:5b:6f:c3:41:4b:ad:ea:b2:ff:2e:4d:
13:e3:71:ea:91:44:ed:bd:8e:1b:6e:14:b9:ba:60:6e:23:1f:
90:d5:de:22:7d:72:1f:89:7e:51:f3:b0:03:ee:a1:ca:39:e3:
85:ac:41:37:89:bc:e5:ce:a8:8b:3e:66:af:c9:eb:73:23:86:
95:9c:d3:b6:46:4c:59:6c:0d:88:23:d8:0f:ee:2a:73:58:c5:
2e:f6:f5:e8
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed Nov 20 23:11:44 2024 by rpki-client on console-fra.rpki-client.org