Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A914EAE4/6753B8AE257511E7AC0D172AC4F9AE02/09E2992EC11711EA98A6A253C4F9AE02.roa
File: 09E2992EC11711EA98A6A253C4F9AE02.roa (raw, json)
Hash identifier: yfr/pkuZjQYrKaaSgTMh31gFUmAyCI82/pd9IQUIs3M=
Subject key identifier: DF:B6:7D:AA:95:31:80:82:31:0A:1B:B3:BB:B9:17:62:7E:0C:53:EC
Certificate issuer: /CN=A914EAE4/serialNumber=AD56B67187A98BA314084405797BD9656E8AC8BA
Certificate serial: 1E30
Authority key identifier: AD:56:B6:71:87:A9:8B:A3:14:08:44:05:79:7B:D9:65:6E:8A:C8:BA
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rVa2cYepi6MUCEQFeXvZZW6KyLo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914EAE4/6753B8AE257511E7AC0D172AC4F9AE02/09E2992EC11711EA98A6A253C4F9AE02.roa
Signing time: Fri 20 Sep 2024 16:35:05 +0000
ROA not before: Fri 20 Sep 2024 16:35:05 +0000
ROA not after: Mon 01 Dec 2025 00:00:00 +0000
asID: 58543
IP address blocks: 121.10.24.0/22 maxlen: 22
121.10.104.0/23 maxlen: 23
121.10.106.0/24 maxlen: 24
121.10.107.0/24 maxlen: 24
121.10.108.0/23 maxlen: 23
121.10.110.0/23 maxlen: 23
121.10.112.0/22 maxlen: 22
121.10.116.0/22 maxlen: 22
121.10.120.0/21 maxlen: 21
121.10.132.0/24 maxlen: 24
121.10.133.0/24 maxlen: 24
121.10.134.0/24 maxlen: 24
121.10.135.0/24 maxlen: 24
121.10.136.0/22 maxlen: 22
121.10.140.0/22 maxlen: 22
121.10.172.0/23 maxlen: 23
121.10.240.0/21 maxlen: 21
121.11.0.0/24 maxlen: 24
121.11.64.0/21 maxlen: 21
121.11.72.0/22 maxlen: 22
121.11.76.0/22 maxlen: 22
121.11.80.0/20 maxlen: 20
121.11.148.0/24 maxlen: 24
121.11.149.0/24 maxlen: 24
121.11.150.0/24 maxlen: 24
121.11.158.0/24 maxlen: 24
121.11.159.0/24 maxlen: 24
121.11.171.0/24 maxlen: 24
121.11.252.0/22 maxlen: 22
121.12.92.0/24 maxlen: 24
121.12.95.0/24 maxlen: 24
121.12.96.0/22 maxlen: 22
121.12.255.0/24 maxlen: 24
121.14.160.0/20 maxlen: 20
121.14.176.0/20 maxlen: 20
121.14.208.0/20 maxlen: 20
121.14.224.0/20 maxlen: 20
121.14.240.0/20 maxlen: 20
121.15.220.0/23 maxlen: 23
121.15.222.0/24 maxlen: 24
121.15.245.0/24 maxlen: 24
121.15.246.0/23 maxlen: 23
121.15.253.0/24 maxlen: 24
121.32.224.0/23 maxlen: 23
121.32.226.0/23 maxlen: 23
121.32.228.0/23 maxlen: 23
121.32.230.0/23 maxlen: 23
121.32.232.0/21 maxlen: 21
125.88.16.0/23 maxlen: 23
125.89.70.0/24 maxlen: 24
125.89.71.0/24 maxlen: 24
125.89.72.0/24 maxlen: 24
125.89.73.0/24 maxlen: 24
125.89.74.0/24 maxlen: 24
125.89.75.0/24 maxlen: 24
125.89.76.0/24 maxlen: 24
125.89.77.0/24 maxlen: 24
125.89.78.0/24 maxlen: 24
125.89.79.0/24 maxlen: 24
125.90.64.0/24 maxlen: 24
125.90.65.0/24 maxlen: 24
125.90.66.0/24 maxlen: 24
125.90.67.0/24 maxlen: 24
125.90.88.0/24 maxlen: 24
125.90.93.0/24 maxlen: 24
125.90.192.0/22 maxlen: 22
125.90.196.0/23 maxlen: 23
125.90.204.0/22 maxlen: 22
125.91.0.0/20 maxlen: 20
125.93.53.0/24 maxlen: 24
202.96.140.0/24 maxlen: 24
202.103.178.0/24 maxlen: 24
202.104.186.0/24 maxlen: 24
202.104.187.0/24 maxlen: 24
202.104.188.0/24 maxlen: 24
202.104.236.0/22 maxlen: 22
202.104.240.0/23 maxlen: 23
202.104.242.0/24 maxlen: 24
202.105.176.0/24 maxlen: 24
202.105.178.0/24 maxlen: 24
202.105.179.0/24 maxlen: 24
202.105.182.0/24 maxlen: 24
202.105.232.0/23 maxlen: 23
218.15.112.0/22 maxlen: 22
218.16.223.0/24 maxlen: 24
218.16.224.0/22 maxlen: 22
218.16.228.0/23 maxlen: 23
218.30.131.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A914EAE4/6753B8AE257511E7AC0D172AC4F9AE02/rVa2cYepi6MUCEQFeXvZZW6KyLo.crl
rsync://rpki.apnic.net/member_repository/A914EAE4/6753B8AE257511E7AC0D172AC4F9AE02/rVa2cYepi6MUCEQFeXvZZW6KyLo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rVa2cYepi6MUCEQFeXvZZW6KyLo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 19 Mar 2025 16:18:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7728 (0x1e30)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914EAE4
Validity
Not Before: Sep 20 16:35:05 2024 GMT
Not After : Dec 1 00:00:00 2025 GMT
Subject: CN=66eda439-35f7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:5e:20:1b:52:e4:27:e0:3f:7a:0d:78:5b:68:
13:19:37:3a:56:c9:f6:75:02:8c:fe:a0:67:3a:c0:
ce:67:72:95:c8:f5:61:53:60:2b:3c:eb:68:1b:98:
80:d0:9f:54:49:c2:21:d1:5c:1f:73:b4:74:bb:83:
2f:ca:7f:d9:17:61:57:4c:44:db:3b:c9:83:d8:84:
f9:17:40:01:6d:24:cb:9a:cc:68:c0:94:a7:f6:20:
a1:69:52:32:86:37:ca:95:c1:98:90:ae:55:c7:24:
ba:3a:75:21:63:ab:e3:19:e6:f8:8f:6d:48:21:6b:
89:85:2b:71:89:d9:08:1b:b1:e4:d7:28:6a:23:f7:
da:d3:a7:6e:d6:ad:aa:a8:66:ed:b1:99:57:53:45:
01:75:1e:be:bd:45:dd:df:52:54:9d:9f:39:00:13:
b7:f8:7a:ff:50:77:39:f6:66:61:e0:29:c0:83:00:
44:73:b3:a8:83:4b:7d:74:e1:e7:b9:d4:64:12:33:
ab:1c:a8:1a:2e:43:72:08:ac:ee:6d:c9:02:1a:c4:
b7:f7:17:8e:a0:ab:92:21:76:ca:6b:05:8f:e9:1c:
00:57:e0:fd:d4:97:c2:0d:72:d0:a8:e7:ab:a6:e8:
55:47:f4:32:17:7d:49:5b:85:b7:c4:d8:5c:56:32:
9d:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:B6:7D:AA:95:31:80:82:31:0A:1B:B3:BB:B9:17:62:7E:0C:53:EC
X509v3 Authority Key Identifier:
keyid:AD:56:B6:71:87:A9:8B:A3:14:08:44:05:79:7B:D9:65:6E:8A:C8:BA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914EAE4/6753B8AE257511E7AC0D172AC4F9AE02/rVa2cYepi6MUCEQFeXvZZW6KyLo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rVa2cYepi6MUCEQFeXvZZW6KyLo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914EAE4/6753B8AE257511E7AC0D172AC4F9AE02/09E2992EC11711EA98A6A253C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
121.10.24.0/22
121.10.104.0-121.10.127.255
121.10.132.0-121.10.143.255
121.10.172.0/23
121.10.240.0/21
121.11.0.0/24
121.11.64.0/19
121.11.148.0-121.11.150.255
121.11.158.0/23
121.11.171.0/24
121.11.252.0/22
121.12.92.0/24
121.12.95.0-121.12.99.255
121.12.255.0/24
121.14.160.0/19
121.14.208.0-121.14.255.255
121.15.220.0-121.15.222.255
121.15.245.0-121.15.247.255
121.15.253.0/24
121.32.224.0/20
125.88.16.0/23
125.89.70.0-125.89.79.255
125.90.64.0/22
125.90.88.0/24
125.90.93.0/24
125.90.192.0-125.90.197.255
125.90.204.0/22
125.91.0.0/20
125.93.53.0/24
202.96.140.0/24
202.103.178.0/24
202.104.186.0-202.104.188.255
202.104.236.0-202.104.242.255
202.105.176.0/24
202.105.178.0/23
202.105.182.0/24
202.105.232.0/23
218.15.112.0/22
218.16.223.0-218.16.229.255
218.30.131.0/24
Signature Algorithm: sha256WithRSAEncryption
ba:57:7c:92:25:14:0a:b6:d7:ee:17:e9:97:ac:80:2b:20:7f:
72:66:3b:46:79:e5:cd:26:38:53:84:8c:63:c2:be:3b:c7:15:
42:a4:03:33:66:75:a1:94:b2:73:95:04:25:06:53:d2:15:2d:
2c:42:d7:fc:ca:3a:a9:a1:09:91:f2:96:ca:08:dd:b6:85:e7:
db:59:9c:2e:18:a7:ed:11:b0:4e:78:c4:5e:17:9b:e2:df:92:
2c:07:d8:9b:00:dc:db:95:78:a2:39:88:cc:33:26:a2:86:7c:
c5:3e:14:39:ed:72:09:ca:8d:c7:af:f7:37:e0:b4:5f:26:0b:
87:f7:70:20:0f:67:eb:50:95:b4:10:5b:43:92:c9:43:98:b0:
0f:a3:00:5b:8a:78:0c:5c:fa:54:71:8a:4d:ee:1e:a3:18:00:
fd:7f:cb:06:5d:e9:02:fe:8c:ee:30:8a:9e:e7:00:16:86:ed:
ee:64:73:bc:1a:00:89:e1:a0:29:d7:01:d4:97:a1:be:f0:52:
26:f7:bb:36:fa:b1:c6:54:6e:b2:e6:43:19:d0:48:2f:4e:c0:
72:67:aa:a2:03:b3:b8:39:9c:f2:d2:fc:1f:1b:c4:42:32:8f:
88:e9:cc:2b:85:92:b8:8b:5f:b6:69:7b:69:22:a5:98:90:be:
d9:07:86:da
-----BEGIN CERTIFICATE-----
MIIGxDCCBaygAwIBAgICHjAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NEVBRTQxMTAvBgNVBAUTKEFENTZCNjcxODdBOThCQTMxNDA4NDQwNTc5N0JEOTY1
NkU4QUM4QkEwHhcNMjQwOTIwMTYzNTA1WhcNMjUxMjAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02NmVkYTQzOS0zNWY3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAyF4gG1LkJ+A/eg14W2gTGTc6Vsn2dQKM/qBnOsDOZ3KVyPVhU2ArPOtoG5iA
0J9UScIh0Vwfc7R0u4Mvyn/ZF2FXTETbO8mD2IT5F0ABbSTLmsxowJSn9iChaVIy
hjfKlcGYkK5VxyS6OnUhY6vjGeb4j21IIWuJhStxidkIG7Hk1yhqI/fa06du1q2q
qGbtsZlXU0UBdR6+vUXd31JUnZ85ABO3+Hr/UHc59mZh4CnAgwBEc7Oog0t9dOHn
udRkEjOrHKgaLkNyCKzubckCGsS39xeOoKuSIXbKawWP6RwAV+D91JfCDXLQqOer
puhVR/QyF31JW4W3xNhcVjKdxQIDAQABo4ID6DCCA+QwHQYDVR0OBBYEFN+2faqV
MYCCMQobs7u5F2J+DFPsMB8GA1UdIwQYMBaAFK1WtnGHqYujFAhEBXl72WVuisi6
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0RUFFNC82NzUzQjhBRTI1
NzUxMUU3QUMwRDE3MkFDNEY5QUUwMi9yVmEyY1llcGk2TVVDRVFGZVh2WlpXNkt5
TG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3JWYTJjWWVwaTZNVUNFUUZlWHZaWlc2S3lMby5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
NEVBRTQvNjc1M0I4QUUyNTc1MTFFN0FDMEQxNzJBQzRGOUFFMDIvMDlFMjk5MkVD
MTE3MTFFQTk4QTZBMjUzQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwggFwBggrBgEFBQcBBwEB
/wSCAV8wggFbMIIBVwQCAAEwggFPAwQCeQoYMAwDBAN5CmgDBAd5CgAwDAMEAnkK
hAMEBHkKgAMEAXkKrAMEA3kK8AMEAHkLAAMEBXkLQDAMAwQCeQuUAwQAeQuWAwQB
eQueAwQAeQurAwQCeQv8AwQAeQxcMAwDBAB5DF8DBAJ5DGADBAB5DP8DBAV5DqAw
CwMEBHkO0AMDAHkOMAwDBAJ5D9wDBAB5D94wDAMEAHkP9QMEA3kP8AMEAHkP/QME
BHkg4AMEAX1YEDAMAwQBfVlGAwQEfVlAAwQCfVpAAwQAfVpYAwQAfVpdMAwDBAZ9
WsADBAF9WsQDBAJ9WswDBAR9WwADBAB9XTUDBADKYIwDBADKZ7IwDAMEAcpougME
AMpovDAMAwQCymjsAwQAymjyAwQAymmwAwQBymmyAwQAymm2AwQBymnoAwQC2g9w
MAwDBADaEN8DBAHaEOQDBADaHoMwDQYJKoZIhvcNAQELBQADggEBALpXfJIlFAq2
1+4X6ZesgCsgf3JmO0Z55c0mOFOEjGPCvjvHFUKkAzNmdaGUsnOVBCUGU9IVLSxC
1/zKOqmhCZHylsoI3baF59tZnC4Yp+0RsE54xF4Xm+LfkiwH2JsA3NuVeKI5iMwz
JqKGfMU+FDntcgnKjcev9zfgtF8mC4f3cCAPZ+tQlbQQW0OSyUOYsA+jAFuKeAxc
+lRxik3uHqMYAP1/ywZd6QL+jO4wip7nABaG7e5kc7waAInhoCnXAdSXob7wUib3
uzb6scZUbrLmQxnQSC9OwHJnqqIDs7g5nPLS/B8bxEIyj4jpzCuFkriLX7Zpe2ki
pZiQvtkHhto=
-----END CERTIFICATE-----
Generated at Thu Mar 13 21:48:58 2025 by rpki-client