Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91406AA/8F5BB4F886C111EBBAB3184BC4F9AE02/D0DC58F432C611ECA639A749C4F9AE02.roa
File: D0DC58F432C611ECA639A749C4F9AE02.roa (raw, json)
Hash identifier: Q5buGIx3RmrP/klXOhAFhItEjvB2p2RJK4OtMIGtqog=
Subject key identifier: DE:43:1D:69:20:51:CF:9C:DA:6A:64:86:C9:4C:6E:DC:84:C2:0B:1B
Certificate issuer: /CN=A91406AA/serialNumber=315513E54AB0C99B8BCA84042E38358B60DB1B2C
Certificate serial: 06CA
Authority key identifier: 31:55:13:E5:4A:B0:C9:9B:8B:CA:84:04:2E:38:35:8B:60:DB:1B:2C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MVUT5UqwyZuLyoQELjg1i2DbGyw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91406AA/8F5BB4F886C111EBBAB3184BC4F9AE02/D0DC58F432C611ECA639A749C4F9AE02.roa
Signing time: Mon 14 Oct 2024 22:52:39 +0000
ROA not before: Mon 14 Oct 2024 22:52:39 +0000
ROA not after: Mon 01 Dec 2025 00:00:00 +0000
asID: 23655
IP address blocks: 103.4.152.0/22 maxlen: 22
103.66.124.0/22 maxlen: 22
103.232.104.0/22 maxlen: 22
111.69.0.0/16 maxlen: 17
111.69.0.0/21 maxlen: 21
111.69.16.0/20 maxlen: 20
111.69.20.0/24 maxlen: 24
111.69.32.0/22 maxlen: 22
111.69.36.0/22 maxlen: 22
111.69.51.0/24 maxlen: 24
111.69.64.0/24 maxlen: 24
111.69.68.0/22 maxlen: 22
111.69.68.0/24 maxlen: 24
111.69.196.0/22 maxlen: 22
111.69.212.0/22 maxlen: 22
118.148.16.0/20 maxlen: 20
118.148.28.0/22 maxlen: 22
118.148.32.0/24 maxlen: 24
118.148.56.0/22 maxlen: 22
118.148.60.0/22 maxlen: 22
118.148.64.0/18 maxlen: 18
118.148.64.0/23 maxlen: 23
118.148.66.0/23 maxlen: 23
118.148.68.0/23 maxlen: 23
118.148.70.0/23 maxlen: 23
118.148.72.0/23 maxlen: 23
118.148.74.0/23 maxlen: 23
118.148.80.0/23 maxlen: 23
118.148.82.0/23 maxlen: 23
118.148.84.0/23 maxlen: 23
118.148.86.0/23 maxlen: 23
118.148.100.0/23 maxlen: 23
118.148.102.0/23 maxlen: 23
118.148.112.0/23 maxlen: 23
118.148.114.0/23 maxlen: 23
118.148.116.0/23 maxlen: 23
118.148.118.0/23 maxlen: 23
118.148.120.0/23 maxlen: 23
118.148.122.0/23 maxlen: 23
118.148.124.0/23 maxlen: 23
118.148.126.0/23 maxlen: 23
118.149.16.0/20 maxlen: 20
118.149.25.0/24 maxlen: 24
118.149.32.0/24 maxlen: 24
118.149.33.0/24 maxlen: 24
118.149.56.0/22 maxlen: 22
118.149.60.0/22 maxlen: 22
118.149.64.0/18 maxlen: 18
118.149.72.0/23 maxlen: 23
118.149.74.0/23 maxlen: 23
118.149.76.0/23 maxlen: 23
118.149.78.0/23 maxlen: 23
118.149.80.0/23 maxlen: 23
118.149.82.0/23 maxlen: 23
118.149.84.0/23 maxlen: 23
118.149.86.0/23 maxlen: 23
118.149.92.0/23 maxlen: 23
118.149.94.0/23 maxlen: 23
123.255.0.0/18 maxlen: 19
123.255.4.0/23 maxlen: 23
123.255.13.0/24 maxlen: 24
163.47.220.0/22 maxlen: 22
202.27.38.0/23 maxlen: 23
202.27.186.0/23 maxlen: 23
202.36.220.0/23 maxlen: 23
202.49.115.0/24 maxlen: 24
202.124.96.0/20 maxlen: 20
202.124.112.0/20 maxlen: 20
202.124.122.0/24 maxlen: 24
203.86.192.0/20 maxlen: 21
2406:e000::/32 maxlen: 32
2406:e000:300::/48 maxlen: 48
2406:e000:319::/48 maxlen: 48
2406:e000:320::/48 maxlen: 48
2406:e000:324::/48 maxlen: 48
2406:e000:325::/48 maxlen: 48
2406:e000:326::/48 maxlen: 48
2406:e000:327::/48 maxlen: 48
2406:e000:328::/48 maxlen: 48
2406:e000:329::/48 maxlen: 48
2406:e000:32a::/48 maxlen: 48
2406:e000:32b::/48 maxlen: 48
2406:e000:32c::/48 maxlen: 48
2406:e000:32d::/48 maxlen: 48
2406:e000:32e::/48 maxlen: 48
2406:e000:32f::/48 maxlen: 48
2406:e000:330::/48 maxlen: 48
2406:e000:331::/48 maxlen: 48
2406:e000:332::/48 maxlen: 48
2406:e000:335::/48 maxlen: 48
2406:e000:336::/48 maxlen: 48
2406:e000:337::/48 maxlen: 48
2406:e000:338::/48 maxlen: 48
2406:e000:339::/48 maxlen: 48
2406:e000:33a::/48 maxlen: 48
2406:e000:33c::/48 maxlen: 48
2406:e000:33d::/48 maxlen: 48
2406:e000:340::/48 maxlen: 48
2406:e000:341::/48 maxlen: 48
2406:e000:343::/48 maxlen: 48
2406:e000:344::/48 maxlen: 48
2406:e000:345::/48 maxlen: 48
2406:e000:348::/48 maxlen: 48
2406:e000:349::/48 maxlen: 48
2406:e000:366::/48 maxlen: 48
2406:e000:367::/48 maxlen: 48
2406:e000:369::/48 maxlen: 48
2406:e000:370::/48 maxlen: 48
2406:e000:371::/48 maxlen: 48
2406:e000:373::/48 maxlen: 48
2406:e000:374::/48 maxlen: 48
2406:e000:375::/48 maxlen: 48
2406:e000:376::/48 maxlen: 48
2406:e000:377::/48 maxlen: 48
2406:e000:379::/48 maxlen: 48
2406:e000:380::/48 maxlen: 48
2406:e000:382::/48 maxlen: 48
2406:e000:383::/48 maxlen: 48
2406:e000:384::/48 maxlen: 48
2406:e000:385::/48 maxlen: 48
2406:e000:386::/48 maxlen: 48
2406:e000:387::/48 maxlen: 48
2406:e000:389::/48 maxlen: 48
2406:e000:390::/48 maxlen: 48
2406:e000:391::/48 maxlen: 48
2406:e000:392::/48 maxlen: 48
2406:e000:c04::/48 maxlen: 48
2406:e000:c0e::/48 maxlen: 48
2406:e000:c0f::/48 maxlen: 48
2406:e000:c10::/48 maxlen: 48
2406:e000:c19::/48 maxlen: 48
2406:e000:c1a::/48 maxlen: 48
2406:e000:c1b::/48 maxlen: 48
2406:e000:c1c::/48 maxlen: 48
2406:e000:c1d::/48 maxlen: 48
2406:e000:c22::/48 maxlen: 48
2406:e000:c23::/48 maxlen: 48
2406:e000:c24::/48 maxlen: 48
2406:e000:c25::/48 maxlen: 48
2406:e000:c26::/48 maxlen: 48
2406:e000:c28::/48 maxlen: 48
2406:e000:6000::/37 maxlen: 37
2406:e000:6800::/37 maxlen: 37
2406:e001:800::/37 maxlen: 37
2406:e001:1800::/37 maxlen: 37
2406:e001:2000::/37 maxlen: 37
2406:e001:2800::/37 maxlen: 37
2406:e001:3000::/37 maxlen: 37
2406:e001:3800::/37 maxlen: 37
2406:e001:4000::/37 maxlen: 37
2406:e001:5000::/37 maxlen: 37
2406:e001:6000::/37 maxlen: 37
2406:e001:7000::/37 maxlen: 37
2406:e001:8800::/37 maxlen: 37
2406:e001:9800::/37 maxlen: 37
2406:e001:a800::/37 maxlen: 37
2406:e001:b000::/37 maxlen: 37
2406:e001:c000::/37 maxlen: 37
2406:e001:e800::/37 maxlen: 37
2406:e001:f800::/37 maxlen: 37
2406:e002:800::/37 maxlen: 37
2406:e002:2800::/37 maxlen: 37
2406:e002:3800::/37 maxlen: 37
2406:e002:4000::/37 maxlen: 37
2406:e002:4800::/37 maxlen: 37
2406:e002:5800::/37 maxlen: 37
2406:e002:6000::/37 maxlen: 37
2406:e002:6800::/37 maxlen: 37
2406:e002:7000::/37 maxlen: 37
2406:e002:7800::/37 maxlen: 37
2406:e002:8000::/37 maxlen: 37
2406:e002:8800::/37 maxlen: 37
2406:e002:9000::/37 maxlen: 37
2406:e002:9800::/37 maxlen: 37
2406:e002:a000::/37 maxlen: 37
2406:e002:a800::/37 maxlen: 37
2406:e002:b000::/37 maxlen: 37
2406:e002:b800::/37 maxlen: 37
2406:e002:c000::/38 maxlen: 38
2406:e006::/34 maxlen: 34
2406:e006:4000::/34 maxlen: 34
2406:e007:8000::/34 maxlen: 34
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91406AA/8F5BB4F886C111EBBAB3184BC4F9AE02/MVUT5UqwyZuLyoQELjg1i2DbGyw.crl
rsync://rpki.apnic.net/member_repository/A91406AA/8F5BB4F886C111EBBAB3184BC4F9AE02/MVUT5UqwyZuLyoQELjg1i2DbGyw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MVUT5UqwyZuLyoQELjg1i2DbGyw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 01 Dec 2024 17:11:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1738 (0x6ca)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91406AA/serialNumber=315513E54AB0C99B8BCA84042E38358B60DB1B2C
Validity
Not Before: Oct 14 22:52:39 2024 GMT
Not After : Dec 1 00:00:00 2025 GMT
Subject: CN=670da0b7-596a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:e7:c1:15:58:1d:cc:08:4f:fb:88:62:36:46:
52:f5:1d:8a:03:91:30:45:e6:c3:84:6f:f3:6a:a8:
66:cb:2f:34:4b:ce:d9:50:d9:56:fc:4c:3b:3e:6f:
bd:13:a2:a3:d7:1f:f8:a7:01:14:b6:9a:40:2c:da:
5a:1e:27:f4:95:3b:8a:b8:b3:76:ca:28:61:0b:d9:
a5:d9:5e:79:97:a6:da:51:82:27:40:ff:e2:62:e6:
2f:9b:d9:6c:cf:70:d4:1b:fc:81:5b:08:ba:88:23:
88:2d:9b:e0:ab:0b:20:4d:c1:5c:70:28:a0:fb:fe:
7a:00:83:14:28:5d:c8:ef:b7:59:80:63:48:e5:86:
58:f9:70:9e:d8:29:36:eb:26:22:84:1a:b9:3a:c7:
aa:71:d6:ae:bc:15:9c:9c:97:33:35:b2:93:0b:c4:
28:f0:e7:90:fc:59:95:50:0f:4f:f7:63:10:63:1d:
5f:ca:56:e3:a9:3f:8d:34:69:e4:45:ae:ac:7b:84:
b7:bf:e8:6f:08:4c:5d:b8:e5:33:f9:53:1a:37:fa:
0a:d3:d0:83:9a:7a:57:39:33:ac:eb:3f:e9:0c:c3:
74:4e:e9:5c:1f:d5:e8:93:48:57:95:94:7f:27:1d:
c4:f8:85:6a:6c:5b:df:23:ef:45:c1:49:29:f0:02:
6f:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:43:1D:69:20:51:CF:9C:DA:6A:64:86:C9:4C:6E:DC:84:C2:0B:1B
X509v3 Authority Key Identifier:
keyid:31:55:13:E5:4A:B0:C9:9B:8B:CA:84:04:2E:38:35:8B:60:DB:1B:2C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91406AA/8F5BB4F886C111EBBAB3184BC4F9AE02/MVUT5UqwyZuLyoQELjg1i2DbGyw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MVUT5UqwyZuLyoQELjg1i2DbGyw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91406AA/8F5BB4F886C111EBBAB3184BC4F9AE02/D0DC58F432C611ECA639A749C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.4.152.0/22
103.66.124.0/22
103.232.104.0/22
111.69.0.0/16
118.148.16.0-118.148.32.255
118.148.56.0-118.148.127.255
118.149.16.0-118.149.33.255
118.149.56.0-118.149.127.255
123.255.0.0/18
163.47.220.0/22
202.27.38.0/23
202.27.186.0/23
202.36.220.0/23
202.49.115.0/24
202.124.96.0/19
203.86.192.0/20
IPv6:
2406:e000::/32
2406:e001:800::/37
2406:e001:1800::-2406:e001:47ff:ffff:ffff:ffff:ffff:ffff
2406:e001:5000::/37
2406:e001:6000::/37
2406:e001:7000::/37
2406:e001:8800::/37
2406:e001:9800::/37
2406:e001:a800::-2406:e001:b7ff:ffff:ffff:ffff:ffff:ffff
2406:e001:c000::/37
2406:e001:e800::/37
2406:e001:f800::/37
2406:e002:800::/37
2406:e002:2800::/37
2406:e002:3800::-2406:e002:4fff:ffff:ffff:ffff:ffff:ffff
2406:e002:5800::-2406:e002:c3ff:ffff:ffff:ffff:ffff:ffff
2406:e006::/33
2406:e007:8000::/34
Signature Algorithm: sha256WithRSAEncryption
ae:d2:c1:d7:bb:cd:10:8b:f3:7e:82:8a:b7:1f:11:3a:90:4c:
c2:8e:70:d7:8c:26:cf:7a:20:29:25:0f:93:45:98:9c:eb:21:
b8:56:97:fe:31:92:03:03:90:ae:f3:5e:04:f0:97:c8:9f:51:
ef:51:87:0f:09:64:c0:1f:25:0a:bf:4b:e3:ae:c5:43:47:8d:
cb:f5:66:11:ff:06:a4:e8:ca:3c:33:94:66:0d:98:b6:07:04:
bd:71:40:e8:6d:a4:47:1d:81:6b:3d:b1:06:8c:00:0a:31:52:
aa:42:5e:8a:ce:e1:b5:ba:27:43:26:3f:f4:23:cc:06:ea:30:
00:b6:3f:a0:2a:41:29:5a:4c:2b:11:8d:84:df:a8:7f:d0:84:
b0:7c:51:eb:3c:8d:08:95:21:9e:da:a8:10:14:ef:fe:6e:68:
6e:4b:15:81:9a:2b:6f:e9:36:17:da:90:3b:de:c4:f6:10:c4:
cb:51:0c:d8:6c:b4:01:fc:71:ba:39:54:fd:eb:ae:76:8a:02:
e3:7a:cc:99:3f:62:bb:bc:ee:b9:aa:a3:f4:4b:8d:d7:aa:b8:
49:da:41:fb:2f:eb:64:b0:98:e7:e8:18:b8:fd:2f:87:33:cf:
52:a3:1b:c4:60:b0:50:cc:80:94:8c:62:38:d8:30:49:ef:a1:
6a:a3:1e:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 24 23:58:45 2024 by rpki-client on console-fra.rpki-client.org