Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A914DA2D/8383620A50D511E79ECE4013C4F9AE02/0FF5D44E2D4111EF95727E68C4F9AE02.roa
File: 0FF5D44E2D4111EF95727E68C4F9AE02.roa (raw, json)
Hash identifier: dz1w9KMYV0J3s0v0z0+oiJlF6MyfeRlAbTi9HOXvH10=
Subject key identifier: E6:94:C9:F7:19:17:35:1F:1F:30:0B:FD:04:25:2D:90:F2:B4:3F:19
Certificate issuer: /CN=A914DA2D/serialNumber=29962325DE0BADE4DC9DDBC576AE277012BC3758
Certificate serial: 1997
Authority key identifier: 29:96:23:25:DE:0B:AD:E4:DC:9D:DB:C5:76:AE:27:70:12:BC:37:58
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KZYjJd4LreTcndvFdq4ncBK8N1g.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914DA2D/8383620A50D511E79ECE4013C4F9AE02/0FF5D44E2D4111EF95727E68C4F9AE02.roa
Signing time: Tue 18 Jun 2024 07:04:54 +0000
ROA not before: Tue 18 Jun 2024 07:04:54 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 17882
IP address blocks: 14.1.124.0/24 maxlen: 24
14.1.125.0/24 maxlen: 24
14.1.126.0/24 maxlen: 24
14.1.127.0/24 maxlen: 24
103.11.192.0/24 maxlen: 24
103.11.193.0/24 maxlen: 24
103.11.194.0/24 maxlen: 24
103.11.195.0/24 maxlen: 24
103.48.184.0/24 maxlen: 24
103.48.185.0/24 maxlen: 24
103.48.186.0/24 maxlen: 24
103.48.187.0/24 maxlen: 24
103.79.156.0/23 maxlen: 24
103.212.116.0/24 maxlen: 24
103.212.117.0/24 maxlen: 24
103.212.118.0/24 maxlen: 24
103.212.119.0/24 maxlen: 24
103.219.136.0/24 maxlen: 24
103.219.137.0/24 maxlen: 24
103.219.138.0/24 maxlen: 24
103.219.139.0/24 maxlen: 24
103.239.56.0/24 maxlen: 24
103.239.57.0/24 maxlen: 24
103.239.58.0/24 maxlen: 24
103.239.59.0/24 maxlen: 24
122.201.16.0/24 maxlen: 24
122.201.17.0/24 maxlen: 24
122.201.18.0/24 maxlen: 24
122.201.19.0/24 maxlen: 24
122.201.20.0/24 maxlen: 24
122.201.21.0/24 maxlen: 24
122.201.22.0/24 maxlen: 24
122.201.23.0/24 maxlen: 24
122.201.24.0/24 maxlen: 24
122.201.25.0/24 maxlen: 24
122.201.26.0/24 maxlen: 24
122.201.27.0/24 maxlen: 24
122.201.28.0/24 maxlen: 24
122.201.29.0/24 maxlen: 24
122.201.30.0/24 maxlen: 24
122.201.31.0/24 maxlen: 24
139.5.216.0/24 maxlen: 24
139.5.217.0/24 maxlen: 24
139.5.218.0/24 maxlen: 24
139.5.219.0/24 maxlen: 24
150.129.140.0/24 maxlen: 24
150.129.141.0/24 maxlen: 24
150.129.142.0/24 maxlen: 24
150.129.143.0/24 maxlen: 24
202.70.33.0/24 maxlen: 24
202.70.34.0/24 maxlen: 24
202.70.35.0/24 maxlen: 24
202.70.36.0/24 maxlen: 24
202.70.37.0/24 maxlen: 24
202.70.38.0/24 maxlen: 24
202.70.39.0/24 maxlen: 24
202.70.40.0/24 maxlen: 24
202.70.41.0/24 maxlen: 24
202.70.42.0/24 maxlen: 24
202.70.43.0/24 maxlen: 24
202.70.44.0/24 maxlen: 24
202.70.45.0/24 maxlen: 24
202.70.46.0/24 maxlen: 24
202.70.47.0/24 maxlen: 24
203.17.23.0/24 maxlen: 24
203.21.120.0/24 maxlen: 24
203.23.49.0/24 maxlen: 24
203.23.199.0/24 maxlen: 24
203.98.76.0/23 maxlen: 24
2405:5700::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A914DA2D/8383620A50D511E79ECE4013C4F9AE02/KZYjJd4LreTcndvFdq4ncBK8N1g.crl
rsync://rpki.apnic.net/member_repository/A914DA2D/8383620A50D511E79ECE4013C4F9AE02/KZYjJd4LreTcndvFdq4ncBK8N1g.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KZYjJd4LreTcndvFdq4ncBK8N1g.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 03 Jul 2024 16:44:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6551 (0x1997)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914DA2D/serialNumber=29962325DE0BADE4DC9DDBC576AE277012BC3758
Validity
Not Before: Jun 18 07:04:54 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=66713195-6ad1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:75:de:07:57:60:2e:c1:d4:ee:42:b9:a3:3c:
6f:56:fd:c9:39:bb:fa:b2:36:1a:46:01:ce:05:c8:
56:16:71:23:60:83:07:51:6f:64:c9:dc:fa:ac:65:
52:e7:c9:0e:34:9f:32:89:bc:cb:f7:6e:3e:90:d3:
8f:3f:cb:0a:91:b6:9d:89:ee:c8:db:75:e3:00:7f:
ee:43:b2:04:95:49:9e:6e:06:03:c9:bf:6b:2f:6b:
ea:7e:c9:1f:18:a0:53:5a:19:78:61:6a:64:34:f6:
95:41:7e:d5:34:8f:a6:0e:73:58:11:31:2e:4c:86:
ea:f3:92:34:c0:56:a7:13:e1:eb:d4:de:1a:f0:e7:
9a:7c:97:b2:bc:43:c2:fb:b6:46:b5:53:2f:63:be:
d9:e5:c9:0b:2c:2e:17:9e:90:a2:69:fa:d3:40:01:
43:05:3d:01:ff:3b:dd:37:60:21:6c:8e:95:27:78:
ec:60:cd:ed:f5:c5:24:f0:32:d6:b3:21:af:1a:a4:
77:86:cf:cf:8a:78:36:da:e2:a0:04:5b:41:9a:5c:
38:2d:98:a1:7c:d7:49:94:17:e7:f1:79:01:87:7c:
cc:2a:46:e5:82:97:89:35:ca:da:3d:be:6f:fa:f4:
e3:d3:cc:07:4d:82:d3:a8:d9:1a:fa:ad:a9:68:a8:
1b:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:94:C9:F7:19:17:35:1F:1F:30:0B:FD:04:25:2D:90:F2:B4:3F:19
X509v3 Authority Key Identifier:
keyid:29:96:23:25:DE:0B:AD:E4:DC:9D:DB:C5:76:AE:27:70:12:BC:37:58
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914DA2D/8383620A50D511E79ECE4013C4F9AE02/KZYjJd4LreTcndvFdq4ncBK8N1g.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KZYjJd4LreTcndvFdq4ncBK8N1g.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914DA2D/8383620A50D511E79ECE4013C4F9AE02/0FF5D44E2D4111EF95727E68C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
14.1.124.0/22
103.11.192.0/22
103.48.184.0/22
103.79.156.0/23
103.212.116.0/22
103.219.136.0/22
103.239.56.0/22
122.201.16.0/20
139.5.216.0/22
150.129.140.0/22
202.70.33.0-202.70.47.255
203.17.23.0/24
203.21.120.0/24
203.23.49.0/24
203.23.199.0/24
203.98.76.0/23
IPv6:
2405:5700::/32
Signature Algorithm: sha256WithRSAEncryption
69:36:13:d3:a4:db:a0:55:24:85:37:8c:72:8a:e8:9a:84:6c:
ed:fb:85:cc:36:30:cd:23:d7:e4:e8:b6:18:c6:63:68:fe:0f:
3f:84:d1:0d:d9:7f:05:b5:a3:ff:6f:6c:41:6d:60:5a:59:82:
01:a4:0b:a3:2c:93:e6:ae:46:11:e1:25:96:5c:59:86:cd:0d:
e4:5f:78:69:be:76:06:33:74:4b:df:df:12:9b:58:a6:a6:1a:
26:1f:1f:50:25:db:92:73:a5:76:7a:45:e1:56:0b:8c:f8:0f:
9f:e4:75:ef:ab:20:49:f6:d7:38:05:5a:cd:97:93:2a:0d:94:
c4:38:14:3d:9e:9c:e2:e8:bd:50:ad:cc:15:d0:57:6d:64:35:
24:6b:58:0c:cb:15:b3:a7:79:05:c7:31:21:ce:9d:14:35:7a:
08:7f:e7:d6:ae:57:ff:32:7c:8e:41:1a:03:2d:51:0f:0c:58:
ee:6d:97:6b:e2:4c:b4:b1:0f:33:3f:5f:41:06:7e:ee:fc:e4:
46:ca:71:c7:5b:51:37:f6:23:5f:0e:85:21:e3:04:93:0e:dd:
ee:73:10:a3:2b:b7:52:1a:02:10:f5:d0:df:e6:2d:72:90:26:
f4:5c:b4:e9:83:63:aa:29:7f:5e:a7:79:be:b1:f6:ee:5c:15:
fb:0c:ba:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 26 19:53:00 2024 by rpki-client on console-ams.rpki-client.org