Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9157D67/69E6C16A442A11EB9599AD38C4F9AE02/B803EDC45E9711EF8BA65030C4F9AE02.roa
File: B803EDC45E9711EF8BA65030C4F9AE02.roa (raw, json)
Hash identifier: jo+knF2FLvXvFBoAEPzT8eMJoktUfF3Bq+HOjC00xWY=
Subject key identifier: 72:0E:70:29:36:A1:0D:6E:CD:B0:66:8B:71:16:9C:63:B1:92:3A:9E
Certificate issuer: /CN=A9157D67/serialNumber=39C43967570087F583E425A9FE9B69B9506A59BD
Certificate serial: 0A6E
Authority key identifier: 39:C4:39:67:57:00:87:F5:83:E4:25:A9:FE:9B:69:B9:50:6A:59:BD
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OcQ5Z1cAh_WD5CWp_ptpuVBqWb0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9157D67/69E6C16A442A11EB9599AD38C4F9AE02/B803EDC45E9711EF8BA65030C4F9AE02.roa
Signing time: Tue 19 Nov 2024 08:30:35 +0000
ROA not before: Tue 19 Nov 2024 08:30:35 +0000
ROA not after: Sun 31 Aug 2025 00:00:00 +0000
asID: 132203
IP address blocks: 43.128.222.0/23 maxlen: 23
43.130.0.0/17 maxlen: 24
43.130.128.0/18 maxlen: 24
43.131.0.0/18 maxlen: 24
43.131.224.0/19 maxlen: 24
43.132.12.0/22 maxlen: 22
43.132.16.0/22 maxlen: 22
43.132.28.0/22 maxlen: 22
43.132.32.0/22 maxlen: 22
43.132.40.0/22 maxlen: 22
43.132.52.0/22 maxlen: 22
43.132.68.0/24 maxlen: 24
43.132.96.0/19 maxlen: 24
43.132.128.0/17 maxlen: 24
43.134.0.0/18 maxlen: 18
43.134.64.0/18 maxlen: 18
43.135.58.0/24 maxlen: 24
43.135.187.0/24 maxlen: 24
43.135.192.0/19 maxlen: 19
43.135.221.0/24 maxlen: 24
43.152.76.0/22 maxlen: 22
43.152.80.0/22 maxlen: 22
43.152.92.0/23 maxlen: 23
43.152.96.0/19 maxlen: 24
43.152.192.0/19 maxlen: 19
43.152.224.0/19 maxlen: 19
43.153.0.0/18 maxlen: 18
43.153.64.0/18 maxlen: 18
43.153.128.0/18 maxlen: 18
43.153.164.0/24 maxlen: 24
43.153.187.0/24 maxlen: 24
43.153.192.0/18 maxlen: 18
43.153.250.0/23 maxlen: 23
43.154.0.0/18 maxlen: 18
43.154.64.0/18 maxlen: 18
43.154.128.0/18 maxlen: 18
43.154.192.0/18 maxlen: 18
43.155.0.0/17 maxlen: 18
43.155.127.0/24 maxlen: 24
43.155.128.0/17 maxlen: 18
43.156.0.0/18 maxlen: 18
43.156.64.0/18 maxlen: 18
43.156.128.0/18 maxlen: 18
43.156.192.0/18 maxlen: 18
43.156.252.0/24 maxlen: 24
43.156.254.0/24 maxlen: 24
43.157.0.0/17 maxlen: 24
43.157.128.0/18 maxlen: 24
43.157.192.0/18 maxlen: 24
43.158.0.0/16 maxlen: 16
43.158.0.0/17 maxlen: 24
43.158.128.0/18 maxlen: 24
43.158.192.0/18 maxlen: 24
43.159.0.0/16 maxlen: 16
43.159.0.0/20 maxlen: 24
43.159.16.0/20 maxlen: 24
43.159.32.0/19 maxlen: 24
43.159.76.0/24 maxlen: 24
43.159.128.0/18 maxlen: 24
43.159.192.0/18 maxlen: 24
43.160.0.0/16 maxlen: 24
43.161.0.0/17 maxlen: 24
43.161.128.0/17 maxlen: 24
43.162.0.0/17 maxlen: 24
43.162.128.0/17 maxlen: 24
43.163.0.0/16 maxlen: 16
43.163.0.0/17 maxlen: 17
43.163.0.0/18 maxlen: 24
43.163.64.0/18 maxlen: 24
43.163.128.0/18 maxlen: 18
43.163.192.0/18 maxlen: 24
43.164.0.0/16 maxlen: 24
43.165.0.0/16 maxlen: 24
43.166.0.0/16 maxlen: 24
43.167.0.0/16 maxlen: 24
43.168.0.0/16 maxlen: 24
43.169.0.0/16 maxlen: 24
43.170.0.0/16 maxlen: 24
43.171.0.0/16 maxlen: 24
43.172.0.0/16 maxlen: 24
43.173.0.0/16 maxlen: 24
101.32.140.0/24 maxlen: 24
101.33.4.0/23 maxlen: 23
101.33.17.0/24 maxlen: 24
101.33.18.0/23 maxlen: 23
101.33.26.0/23 maxlen: 23
101.33.30.0/23 maxlen: 23
101.33.41.0/24 maxlen: 24
101.33.114.0/23 maxlen: 24
150.109.90.0/24 maxlen: 24
150.109.91.0/24 maxlen: 24
240d:c000::/24 maxlen: 32
240d:c000:1000::/36 maxlen: 36
240d:c000:2000::/36 maxlen: 36
240d:c000:3000::/36 maxlen: 36
240d:c000:6000::/36 maxlen: 36
240d:c000:6000::/44 maxlen: 48
240d:c000:7000::/44 maxlen: 44
240d:c000:f000::/36 maxlen: 36
240d:c000:f000::/44 maxlen: 44
240d:c000:f010::/44 maxlen: 44
240d:c000:f020::/44 maxlen: 44
240d:c000:f030::/44 maxlen: 44
240d:c000:f040::/44 maxlen: 44
240d:c000:f050::/44 maxlen: 44
240d:c000:f060::/44 maxlen: 44
240d:c000:f070::/44 maxlen: 44
240d:c000:f0c0::/44 maxlen: 44
240d:c000:f0d0::/44 maxlen: 44
240d:c000:f0e0::/44 maxlen: 44
240d:c000:f0f0::/44 maxlen: 44
240d:c010::/48 maxlen: 48
240d:c010::/56 maxlen: 56
240d:c010:0:100::/56 maxlen: 56
240d:c010:10::/48 maxlen: 48
240d:c010:11::/48 maxlen: 48
240d:c010:12::/48 maxlen: 48
240d:c010:14::/48 maxlen: 48
240d:c010:16::/48 maxlen: 48
240d:c010:17::/48 maxlen: 48
240d:c010:20::/44 maxlen: 44
240d:c010:20::/56 maxlen: 56
240d:c010:20:100::/56 maxlen: 56
240d:c010:20:200::/56 maxlen: 56
240d:c010:30::/56 maxlen: 56
240d:c010:30:100::/56 maxlen: 56
240d:c010:50::/48 maxlen: 48
240d:c010:57::/48 maxlen: 48
240d:c010:58::/47 maxlen: 48
240d:c010:5c::/46 maxlen: 48
240d:c010:60::/48 maxlen: 48
240d:c010:66::/47 maxlen: 48
240d:c010:68::/48 maxlen: 48
240d:c010:6c::/47 maxlen: 48
240d:c010:6e::/48 maxlen: 48
240d:c040::/44 maxlen: 44
240d:c040:10::/44 maxlen: 44
240d:c040:20::/44 maxlen: 44
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9157D67/69E6C16A442A11EB9599AD38C4F9AE02/OcQ5Z1cAh_WD5CWp_ptpuVBqWb0.crl
rsync://rpki.apnic.net/member_repository/A9157D67/69E6C16A442A11EB9599AD38C4F9AE02/OcQ5Z1cAh_WD5CWp_ptpuVBqWb0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OcQ5Z1cAh_WD5CWp_ptpuVBqWb0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 27 Nov 2024 20:33:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2670 (0xa6e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9157D67/serialNumber=39C43967570087F583E425A9FE9B69B9506A59BD
Validity
Not Before: Nov 19 08:30:35 2024 GMT
Not After : Aug 31 00:00:00 2025 GMT
Subject: CN=673c4cab-c1d4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:fd:e8:bd:9c:6a:52:bc:f1:22:7c:38:07:f2:
8f:05:9e:31:68:40:92:10:2a:df:fd:0d:bd:41:63:
57:a3:07:39:26:ed:98:50:df:49:22:4f:6e:dd:2a:
d6:e1:4f:c8:7b:50:02:54:3f:7e:18:c1:d1:a4:05:
51:d7:d2:fa:45:f1:66:a2:12:43:21:0e:b6:c0:d6:
71:ea:18:48:91:5f:97:4d:d7:36:d4:53:c7:7a:05:
bb:86:27:58:39:fa:e0:bf:6c:02:72:32:1d:ad:6b:
3e:bc:ac:ad:b8:7d:cf:41:84:ff:19:de:9f:c3:5b:
ac:c2:8d:2a:5b:05:50:26:c6:dd:41:bc:d9:b4:c7:
55:61:5d:b1:d3:3d:c7:b1:49:a5:66:22:2f:03:89:
7d:c3:26:c4:f5:cf:2a:7f:87:a1:97:7e:86:87:5c:
e8:d9:e9:ea:0a:3e:c5:84:17:ba:5f:76:e9:9f:a3:
d2:9c:88:93:95:76:a5:d5:ad:38:3d:dc:4c:70:ec:
69:59:95:b4:99:a3:a5:f6:41:1c:73:38:b9:28:b8:
7b:c0:ae:b0:09:2f:aa:ad:12:84:47:5e:0e:5d:dc:
84:f5:ed:b9:d8:30:e8:08:8c:70:fb:ea:56:ab:46:
80:04:92:d9:00:7e:e7:e9:91:dc:92:40:d2:80:b3:
a3:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:0E:70:29:36:A1:0D:6E:CD:B0:66:8B:71:16:9C:63:B1:92:3A:9E
X509v3 Authority Key Identifier:
keyid:39:C4:39:67:57:00:87:F5:83:E4:25:A9:FE:9B:69:B9:50:6A:59:BD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9157D67/69E6C16A442A11EB9599AD38C4F9AE02/OcQ5Z1cAh_WD5CWp_ptpuVBqWb0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OcQ5Z1cAh_WD5CWp_ptpuVBqWb0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9157D67/69E6C16A442A11EB9599AD38C4F9AE02/B803EDC45E9711EF8BA65030C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
43.128.222.0/23
43.130.0.0-43.130.191.255
43.131.0.0/18
43.131.224.0/19
43.132.12.0-43.132.19.255
43.132.28.0-43.132.35.255
43.132.40.0/22
43.132.52.0/22
43.132.68.0/24
43.132.96.0-43.132.255.255
43.134.0.0/17
43.135.58.0/24
43.135.187.0/24
43.135.192.0/19
43.152.76.0-43.152.83.255
43.152.92.0/23
43.152.96.0/19
43.152.192.0-43.173.255.255
101.32.140.0/24
101.33.4.0/23
101.33.17.0-101.33.19.255
101.33.26.0/23
101.33.30.0/23
101.33.41.0/24
101.33.114.0/23
150.109.90.0/23
IPv6:
240d:c000::/24
Signature Algorithm: sha256WithRSAEncryption
b1:32:90:fd:2e:2f:74:08:eb:45:a7:aa:00:07:5e:41:96:3d:
f0:7f:79:61:ea:92:61:48:76:b3:6f:b1:d1:f1:e4:39:50:87:
df:2f:4e:cc:92:a7:b6:0f:6c:1d:99:63:59:5c:d9:b4:94:b2:
0f:0e:6e:d8:f8:17:88:72:aa:f3:ca:02:16:ad:88:6a:34:67:
38:b4:db:6c:00:fe:dc:77:4a:5c:f2:3c:1a:35:b4:12:71:14:
f2:f4:b6:47:86:0e:1f:c1:d3:2c:ac:81:11:bc:e4:e3:a5:db:
58:ee:f1:d1:55:a7:8b:bd:2d:3c:a4:99:b1:01:c7:48:09:c6:
de:7d:bd:c7:27:e3:d4:c7:88:59:db:c7:24:98:78:9d:ea:d1:
47:2d:72:61:43:fe:60:98:87:74:dc:88:be:ac:fe:2b:e7:b7:
19:a3:f9:08:85:7c:4d:6b:d7:f2:c4:51:1b:ca:76:41:8e:b3:
2e:76:bb:93:6f:fd:15:da:79:d4:fa:1f:a7:87:3b:56:0c:1d:
81:df:73:6a:6a:eb:fe:17:06:1f:8b:63:e5:32:93:58:d1:cf:
f9:38:e0:04:3e:6f:53:17:13:4d:1d:67:22:9c:fa:ab:d1:c6:
b7:9a:71:1f:8d:58:32:06:c1:ad:9c:ec:7b:66:d9:c6:63:dd:
b6:da:7c:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 23:11:44 2024 by rpki-client on console-fra.rpki-client.org