Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91406AA/8F5BB4F886C111EBBAB3184BC4F9AE02/3C30815CABB611ED8370AB5DC4F9AE02.roa
File: 3C30815CABB611ED8370AB5DC4F9AE02.roa (raw, json)
Hash identifier: 6i/Ve3m1hFkvDftiC9NwPH95rOM487fn7m8fMau1LG8=
Subject key identifier: B8:E4:18:E2:6A:CF:6A:4F:D5:5A:E2:1A:38:28:72:03:D2:6D:33:6A
Certificate issuer: /CN=A91406AA/serialNumber=315513E54AB0C99B8BCA84042E38358B60DB1B2C
Certificate serial: 06C8
Authority key identifier: 31:55:13:E5:4A:B0:C9:9B:8B:CA:84:04:2E:38:35:8B:60:DB:1B:2C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MVUT5UqwyZuLyoQELjg1i2DbGyw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91406AA/8F5BB4F886C111EBBAB3184BC4F9AE02/3C30815CABB611ED8370AB5DC4F9AE02.roa
Signing time: Mon 14 Oct 2024 22:52:37 +0000
ROA not before: Mon 14 Oct 2024 22:52:37 +0000
ROA not after: Mon 01 Dec 2025 00:00:00 +0000
asID: 140220
IP address blocks: 60.234.11.0/24 maxlen: 24
60.234.12.0/24 maxlen: 24
60.234.13.0/24 maxlen: 24
60.234.14.0/24 maxlen: 24
60.234.15.0/24 maxlen: 24
60.234.50.0/24 maxlen: 24
60.234.51.0/24 maxlen: 24
60.234.52.0/24 maxlen: 24
60.234.53.0/24 maxlen: 24
60.234.63.0/24 maxlen: 24
60.234.68.0/24 maxlen: 24
60.234.88.0/24 maxlen: 24
60.234.90.0/23 maxlen: 24
60.234.92.0/23 maxlen: 24
60.234.94.0/24 maxlen: 24
60.234.95.0/24 maxlen: 24
60.234.96.0/24 maxlen: 24
60.234.98.0/24 maxlen: 24
60.234.99.0/24 maxlen: 24
60.234.108.0/24 maxlen: 24
60.234.109.0/24 maxlen: 24
60.234.110.0/24 maxlen: 24
60.234.111.0/24 maxlen: 24
60.234.112.0/24 maxlen: 24
60.234.113.0/24 maxlen: 24
60.234.114.0/24 maxlen: 24
60.234.115.0/24 maxlen: 24
60.234.124.0/24 maxlen: 24
60.234.125.0/24 maxlen: 24
60.234.126.0/24 maxlen: 24
60.234.127.0/24 maxlen: 24
60.234.128.0/24 maxlen: 24
60.234.129.0/24 maxlen: 24
60.234.130.0/24 maxlen: 24
60.234.131.0/24 maxlen: 24
60.234.132.0/24 maxlen: 24
60.234.133.0/24 maxlen: 24
60.234.134.0/24 maxlen: 24
60.234.135.0/24 maxlen: 24
60.234.136.0/24 maxlen: 24
60.234.137.0/24 maxlen: 24
60.234.138.0/24 maxlen: 24
60.234.139.0/24 maxlen: 24
60.234.140.0/24 maxlen: 24
60.234.141.0/24 maxlen: 24
60.234.142.0/24 maxlen: 24
60.234.143.0/24 maxlen: 24
60.234.144.0/23 maxlen: 24
60.234.146.0/23 maxlen: 24
60.234.148.0/24 maxlen: 24
60.234.149.0/24 maxlen: 24
60.234.150.0/23 maxlen: 24
60.234.152.0/21 maxlen: 24
60.234.161.0/24 maxlen: 24
60.234.162.0/23 maxlen: 24
60.234.164.0/24 maxlen: 24
60.234.165.0/24 maxlen: 24
60.234.166.0/24 maxlen: 24
60.234.167.0/24 maxlen: 24
60.234.168.0/24 maxlen: 24
60.234.169.0/24 maxlen: 24
60.234.171.0/24 maxlen: 24
60.234.172.0/24 maxlen: 24
60.234.173.0/24 maxlen: 24
60.234.174.0/24 maxlen: 24
60.234.175.0/24 maxlen: 24
60.234.176.0/24 maxlen: 24
60.234.178.0/24 maxlen: 24
60.234.181.0/24 maxlen: 24
60.234.182.0/23 maxlen: 24
60.234.184.0/23 maxlen: 24
60.234.186.0/24 maxlen: 24
60.234.187.0/24 maxlen: 24
60.234.188.0/24 maxlen: 24
60.234.189.0/24 maxlen: 24
60.234.190.0/24 maxlen: 24
60.234.192.0/24 maxlen: 24
60.234.193.0/24 maxlen: 24
60.234.194.0/23 maxlen: 24
60.234.196.0/23 maxlen: 24
60.234.198.0/23 maxlen: 24
60.234.201.0/24 maxlen: 24
60.234.202.0/23 maxlen: 24
60.234.204.0/24 maxlen: 24
60.234.207.0/24 maxlen: 24
60.234.208.0/20 maxlen: 24
60.234.224.0/19 maxlen: 24
202.127.8.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91406AA/8F5BB4F886C111EBBAB3184BC4F9AE02/MVUT5UqwyZuLyoQELjg1i2DbGyw.crl
rsync://rpki.apnic.net/member_repository/A91406AA/8F5BB4F886C111EBBAB3184BC4F9AE02/MVUT5UqwyZuLyoQELjg1i2DbGyw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MVUT5UqwyZuLyoQELjg1i2DbGyw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 01 Dec 2024 17:11:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1736 (0x6c8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91406AA/serialNumber=315513E54AB0C99B8BCA84042E38358B60DB1B2C
Validity
Not Before: Oct 14 22:52:37 2024 GMT
Not After : Dec 1 00:00:00 2025 GMT
Subject: CN=670da0b5-520d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:70:59:ac:f0:a7:30:93:09:b0:e8:53:db:6b:
dd:18:4b:26:bb:93:61:95:09:b1:0b:08:b1:f9:7f:
2a:70:17:8f:df:e7:e8:10:af:7f:f2:0b:df:7a:d2:
73:7a:2f:3a:2c:b0:a5:6d:64:70:7a:16:89:ef:bb:
39:2e:d9:e0:31:b7:e9:65:f7:29:d9:1e:2a:b5:51:
e0:49:a4:1b:2b:a6:38:db:f7:51:f2:bb:d8:57:59:
43:85:b0:0e:fc:49:bc:1e:be:69:ef:23:33:4f:99:
79:13:fd:88:91:c4:dc:b6:44:81:30:b1:fe:d8:3e:
10:38:3f:2d:e9:ef:f3:1f:a4:a1:a1:11:81:53:58:
41:4e:71:14:22:7d:f6:47:ad:cc:f6:d1:71:74:74:
92:6f:53:16:90:6e:ac:5d:76:8c:87:80:2d:16:45:
e5:ea:84:c4:af:91:bc:60:04:eb:5c:68:33:b1:ee:
ae:10:3b:50:b4:ec:4b:04:b4:9c:62:21:fe:04:78:
21:49:8b:88:fc:00:4b:2d:64:e5:e6:56:47:5c:7a:
be:00:dc:07:aa:12:e3:bd:ab:04:59:b2:a7:99:e7:
7a:71:03:e7:1a:d2:f8:af:61:a7:c2:7e:88:2a:f9:
a1:9e:45:4e:d3:da:a6:c4:08:f6:43:33:3f:ba:8e:
0b:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:E4:18:E2:6A:CF:6A:4F:D5:5A:E2:1A:38:28:72:03:D2:6D:33:6A
X509v3 Authority Key Identifier:
keyid:31:55:13:E5:4A:B0:C9:9B:8B:CA:84:04:2E:38:35:8B:60:DB:1B:2C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91406AA/8F5BB4F886C111EBBAB3184BC4F9AE02/MVUT5UqwyZuLyoQELjg1i2DbGyw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MVUT5UqwyZuLyoQELjg1i2DbGyw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91406AA/8F5BB4F886C111EBBAB3184BC4F9AE02/3C30815CABB611ED8370AB5DC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
60.234.11.0-60.234.15.255
60.234.50.0-60.234.53.255
60.234.63.0/24
60.234.68.0/24
60.234.88.0/24
60.234.90.0-60.234.96.255
60.234.98.0/23
60.234.108.0-60.234.115.255
60.234.124.0-60.234.159.255
60.234.161.0-60.234.169.255
60.234.171.0-60.234.176.255
60.234.178.0/24
60.234.181.0-60.234.190.255
60.234.192.0/21
60.234.201.0-60.234.204.255
60.234.207.0-60.234.255.255
202.127.8.0/22
Signature Algorithm: sha256WithRSAEncryption
b9:9a:a0:65:7b:f9:34:4a:b4:31:86:07:87:8c:ee:d6:12:62:
1e:23:48:fa:a1:05:07:ac:ce:08:47:4f:68:c8:c6:f7:de:00:
8c:1c:34:82:75:c5:5d:5e:03:82:83:6c:f2:33:86:fa:9b:be:
cb:1c:31:2a:b0:40:e2:72:96:6f:aa:ae:88:e9:0d:fc:e1:1d:
9a:c4:93:3b:01:db:ac:37:90:86:5b:35:df:0a:87:ac:1b:84:
49:f5:70:af:2e:5f:b0:02:63:a1:2b:44:bb:00:05:99:0e:e4:
bd:d1:cb:fb:58:7c:bf:6b:f4:57:c3:98:10:60:bf:48:0b:c4:
97:8a:6f:08:12:8f:e4:20:3d:05:73:d9:17:bb:8e:a6:84:24:
b4:c8:29:b0:86:14:6c:60:af:8a:f6:6d:80:d2:41:d2:fb:4d:
f0:ec:12:9e:0b:f5:21:8a:5e:e0:ab:ea:ee:0e:d9:1c:35:cc:
71:c7:15:7f:83:88:50:48:c1:d8:9d:26:e8:80:f9:b0:5c:72:
6a:82:b6:e5:39:73:2f:8c:d9:bf:40:41:3d:9b:15:4a:16:14:
80:45:bb:69:9b:40:a2:18:35:d3:43:4e:04:f5:5e:51:22:b7:
ad:8c:04:2c:28:96:62:a1:ab:ce:05:50:be:32:7b:cd:9f:4f:
5e:52:11:c0
-----BEGIN CERTIFICATE-----
MIIGJTCCBQ2gAwIBAgICBsgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NDA2QUExMTAvBgNVBAUTKDMxNTUxM0U1NEFCMEM5OUI4QkNBODQwNDJFMzgzNThC
NjBEQjFCMkMwHhcNMjQxMDE0MjI1MjM3WhcNMjUxMjAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02NzBkYTBiNS01MjBkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAv3BZrPCnMJMJsOhT22vdGEsmu5NhlQmxCwix+X8qcBeP3+foEK9/8gvfetJz
ei86LLClbWRwehaJ77s5LtngMbfpZfcp2R4qtVHgSaQbK6Y42/dR8rvYV1lDhbAO
/Em8Hr5p7yMzT5l5E/2IkcTctkSBMLH+2D4QOD8t6e/zH6ShoRGBU1hBTnEUIn32
R63M9tFxdHSSb1MWkG6sXXaMh4AtFkXl6oTEr5G8YATrXGgzse6uEDtQtOxLBLSc
YiH+BHghSYuI/ABLLWTl5lZHXHq+ANwHqhLjvasEWbKnmed6cQPnGtL4r2Gnwn6I
KvmhnkVO09qmxAj2QzM/uo4LfQIDAQABo4IDSTCCA0UwHQYDVR0OBBYEFLjkGOJq
z2pP1VriGjgocgPSbTNqMB8GA1UdIwQYMBaAFDFVE+VKsMmbi8qEBC44NYtg2xss
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0MDZBQS84RjVCQjRGODg2
QzExMUVCQkFCMzE4NEJDNEY5QUUwMi9NVlVUNVVxd3ladUx5b1FFTGpnMWkyRGJH
eXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL01WVVQ1VXF3eVp1THlvUUVMamcxaTJEYkd5dy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
NDA2QUEvOEY1QkI0Rjg4NkMxMTFFQkJBQjMxODRCQzRGOUFFMDIvM0MzMDgxNUNB
QkI2MTFFRDgzNzBBQjVEQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwgdIGCCsGAQUFBwEHAQH/
BIHCMIG/MIG8BAIAATCBtTAMAwQAPOoLAwQEPOoAMAwDBAE86jIDBAE86jQDBAA8
6j8DBAA86kQDBAA86lgwDAMEATzqWgMEADzqYAMEATzqYjAMAwQCPOpsAwQCPOpw
MAwDBAI86nwDBAU86oAwDAMEADzqoQMEATzqqDAMAwQAPOqrAwQAPOqwAwQAPOqy
MAwDBAA86rUDBAA86r4DBAM86sAwDAMEADzqyQMEADzqzDALAwQAPOrPAwMAPOoD
BALKfwgwDQYJKoZIhvcNAQELBQADggEBALmaoGV7+TRKtDGGB4eM7tYSYh4jSPqh
BQeszghHT2jIxvfeAIwcNIJ1xV1eA4KDbPIzhvqbvsscMSqwQOJylm+qrojpDfzh
HZrEkzsB26w3kIZbNd8Kh6wbhEn1cK8uX7ACY6ErRLsABZkO5L3Ry/tYfL9r9FfD
mBBgv0gLxJeKbwgSj+QgPQVz2Re7jqaEJLTIKbCGFGxgr4r2bYDSQdL7TfDsEp4L
9SGKXuCr6u4O2Rw1zHHHFX+DiFBIwdidJuiA+bBccmqCtuU5cy+M2b9AQT2bFUoW
FIBFu2mbQKIYNdNDTgT1XlEit62MBCwolmKhq84FUL4ye82fT15SEcA=
-----END CERTIFICATE-----
Generated at Sun Nov 24 23:07:48 2024 by rpki-client on console-ams.rpki-client.org