Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91406AA/8F5BB4F886C111EBBAB3184BC4F9AE02/26315108EA4B11EFB0DB7E15C4F9AE02.roa
File: 26315108EA4B11EFB0DB7E15C4F9AE02.roa (raw, json)
Hash identifier: vcLeM/8aLXA6kJaXD3eBUKS3cxBblLht0RAaQ44E1GM=
Subject key identifier: 16:0E:2F:85:29:A8:DD:E0:A2:EB:51:20:22:E3:D2:D4:20:73:CB:F7
Certificate issuer: /CN=A91406AA/serialNumber=315513E54AB0C99B8BCA84042E38358B60DB1B2C
Certificate serial: 0726
Authority key identifier: 31:55:13:E5:4A:B0:C9:9B:8B:CA:84:04:2E:38:35:8B:60:DB:1B:2C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MVUT5UqwyZuLyoQELjg1i2DbGyw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91406AA/8F5BB4F886C111EBBAB3184BC4F9AE02/26315108EA4B11EFB0DB7E15C4F9AE02.roa
Signing time: Thu 13 Feb 2025 20:43:16 +0000
ROA not before: Thu 13 Feb 2025 20:43:16 +0000
ROA not after: Mon 01 Dec 2025 00:00:00 +0000
asID: 9790
IP address blocks: 60.234.0.0/16 maxlen: 20
101.98.0.0/16 maxlen: 20
101.100.128.0/19 maxlen: 24
103.224.128.0/22 maxlen: 24
103.237.40.0/22 maxlen: 24
110.44.16.0/22 maxlen: 24
118.148.64.0/20 maxlen: 24
118.148.80.0/20 maxlen: 24
118.148.96.0/20 maxlen: 24
118.148.112.0/20 maxlen: 24
118.149.64.0/20 maxlen: 24
118.149.80.0/20 maxlen: 24
118.149.96.0/20 maxlen: 24
118.149.112.0/20 maxlen: 24
119.224.0.0/18 maxlen: 22
119.224.64.0/19 maxlen: 22
119.224.128.0/20 maxlen: 20
121.98.0.0/15 maxlen: 20
124.197.0.0/18 maxlen: 22
202.49.92.0/22 maxlen: 24
202.49.244.0/22 maxlen: 24
202.50.124.0/22 maxlen: 24
202.50.170.0/24 maxlen: 24
202.53.176.0/20 maxlen: 20
202.89.128.0/19 maxlen: 20
202.180.64.0/18 maxlen: 20
202.189.160.0/20 maxlen: 20
202.191.32.0/20 maxlen: 20
203.184.0.0/18 maxlen: 20
2400:4800::/32 maxlen: 32
2402:6000::/32 maxlen: 32
2402:8200::/32 maxlen: 32
2404:4400::/28 maxlen: 36
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91406AA/8F5BB4F886C111EBBAB3184BC4F9AE02/MVUT5UqwyZuLyoQELjg1i2DbGyw.crl
rsync://rpki.apnic.net/member_repository/A91406AA/8F5BB4F886C111EBBAB3184BC4F9AE02/MVUT5UqwyZuLyoQELjg1i2DbGyw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MVUT5UqwyZuLyoQELjg1i2DbGyw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 21 Feb 2025 05:15:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1830 (0x726)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91406AA
Validity
Not Before: Feb 13 20:43:16 2025 GMT
Not After : Dec 1 00:00:00 2025 GMT
Subject: CN=67ae5963-6ce2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:f1:cf:fa:66:f9:ff:53:be:05:db:8f:9a:d5:
44:85:3f:18:36:1e:bb:bd:a3:b5:8c:d4:1d:1e:26:
87:3b:19:dd:4f:4c:04:35:7e:61:4a:8a:24:db:08:
f9:49:6c:e9:69:4f:30:f9:c8:41:9e:d0:91:ea:2e:
11:5d:4e:6b:21:cb:b1:ff:21:73:be:3f:84:08:75:
fe:1c:9a:e2:d6:b6:db:70:ce:28:a1:b6:b6:8d:8e:
33:84:b1:6d:9b:8b:92:b7:8c:87:8c:85:3c:40:0a:
d7:7d:ce:cb:f1:91:ce:22:5c:bc:cb:98:67:41:17:
02:9f:90:6d:40:7f:a6:25:18:0d:55:56:eb:fd:d2:
8d:72:d5:a5:a6:04:a8:68:08:c0:b5:28:18:f1:4c:
fb:22:0f:17:35:47:4f:b6:c3:9b:ee:5f:35:79:61:
81:3a:25:0f:8e:5c:ba:eb:01:19:e1:c2:8f:d2:87:
3f:41:f2:ec:a0:24:7e:39:19:4d:6f:91:0d:32:97:
99:41:bd:04:38:d9:aa:81:d0:52:5a:18:9d:de:17:
21:55:15:b8:11:5c:6e:39:4a:fa:27:ff:cb:06:a1:
1e:8b:2a:b7:1a:a9:0c:9c:73:b7:e7:e0:43:ce:b7:
4e:ed:32:87:9c:81:4b:8f:24:ba:4c:34:30:8c:1f:
87:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:0E:2F:85:29:A8:DD:E0:A2:EB:51:20:22:E3:D2:D4:20:73:CB:F7
X509v3 Authority Key Identifier:
keyid:31:55:13:E5:4A:B0:C9:9B:8B:CA:84:04:2E:38:35:8B:60:DB:1B:2C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91406AA/8F5BB4F886C111EBBAB3184BC4F9AE02/MVUT5UqwyZuLyoQELjg1i2DbGyw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MVUT5UqwyZuLyoQELjg1i2DbGyw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91406AA/8F5BB4F886C111EBBAB3184BC4F9AE02/26315108EA4B11EFB0DB7E15C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
60.234.0.0/16
101.98.0.0/16
101.100.128.0/19
103.224.128.0/22
103.237.40.0/22
110.44.16.0/22
118.148.64.0/18
118.149.64.0/18
119.224.0.0-119.224.95.255
119.224.128.0/20
121.98.0.0/15
124.197.0.0/18
202.49.92.0/22
202.49.244.0/22
202.50.124.0/22
202.50.170.0/24
202.53.176.0/20
202.89.128.0/19
202.180.64.0/18
202.189.160.0/20
202.191.32.0/20
203.184.0.0/18
IPv6:
2400:4800::/32
2402:6000::/32
2402:8200::/32
2404:4400::/28
Signature Algorithm: sha256WithRSAEncryption
4f:08:b0:da:08:5c:01:36:db:d8:f2:f5:0b:86:74:a8:b6:46:
13:10:08:75:60:e2:87:8d:e9:ae:d7:6c:30:a5:4b:60:03:01:
07:c4:96:39:9d:68:7e:42:56:e6:e4:2d:db:c4:10:0e:a3:ad:
86:4c:35:79:6b:7b:59:1c:3d:64:12:e5:a7:eb:9f:da:f3:a5:
21:f6:f6:73:23:fd:ce:05:91:6a:c8:18:38:b2:ab:fb:b3:7d:
ef:6b:e7:26:e7:20:fa:72:5e:cb:31:d1:36:f7:7d:5c:78:bb:
c8:8b:96:09:0b:98:e2:54:fd:ee:eb:01:b7:23:38:69:4a:a0:
bd:12:0c:b4:65:84:5a:57:0f:72:a1:cb:87:54:30:db:f3:f1:
9b:c2:9c:1b:95:3c:90:a8:68:bb:fb:19:77:ca:5f:d7:7f:b5:
45:e2:f5:3e:10:e6:d0:d9:20:b1:65:95:e6:a4:ee:00:29:34:
d2:15:33:47:72:d2:a7:c6:91:9c:63:73:a9:e7:04:1c:b0:ab:
30:5b:e2:2d:21:6b:43:55:cb:30:f6:05:26:cc:aa:e6:7e:6a:
42:e3:9c:0d:d6:bc:65:94:2c:5d:48:11:ba:76:d5:0e:d6:79:
0a:a8:62:ba:0e:e0:01:7e:34:9c:f0:b1:24:a6:85:e8:7e:66:
1c:90:49:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:24:46 2025 by rpki-client