Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A915F89C/6907C3E21D8311E29B35A5D808B02CD2/2569B02206D411EF9B54220DC4F9AE02.roa
File: 2569B02206D411EF9B54220DC4F9AE02.roa (raw, json)
Hash identifier: Z7+E622B8DMo/yK2Z7BW8RNahF/RX8d+spDwkYurXFA=
Subject key identifier: 24:BC:2C:3A:B7:63:46:CE:38:EC:DF:57:9E:73:4F:C6:D6:47:76:5E
Certificate issuer: /CN=A915F89C/serialNumber=AF8F0CFB47FBFCC7C4933C473CDB36442B5051CE
Certificate serial: 3555
Authority key identifier: AF:8F:0C:FB:47:FB:FC:C7:C4:93:3C:47:3C:DB:36:44:2B:50:51:CE
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r48M-0f7_MfEkzxHPNs2RCtQUc4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915F89C/6907C3E21D8311E29B35A5D808B02CD2/2569B02206D411EF9B54220DC4F9AE02.roa
Signing time: Tue 30 Apr 2024 09:29:30 +0000
ROA not before: Tue 30 Apr 2024 09:29:30 +0000
ROA not after: Thu 31 Oct 2024 00:00:00 +0000
asID: 9506
IP address blocks: 14.100.0.0/17 maxlen: 17
14.100.0.0/22 maxlen: 22
14.100.4.0/22 maxlen: 22
14.100.8.0/22 maxlen: 22
14.100.12.0/22 maxlen: 22
14.100.16.0/22 maxlen: 22
14.100.20.0/22 maxlen: 22
14.100.24.0/22 maxlen: 22
14.100.28.0/22 maxlen: 22
14.100.32.0/22 maxlen: 22
14.100.36.0/22 maxlen: 22
14.100.40.0/22 maxlen: 22
14.100.44.0/22 maxlen: 22
14.100.48.0/22 maxlen: 22
14.100.52.0/22 maxlen: 22
14.100.56.0/22 maxlen: 22
14.100.60.0/22 maxlen: 22
14.100.64.0/22 maxlen: 22
14.100.68.0/22 maxlen: 22
42.60.0.0/16 maxlen: 24
42.61.128.0/17 maxlen: 24
101.78.64.0/18 maxlen: 24
115.66.0.0/16 maxlen: 17
115.66.33.0/24 maxlen: 24
116.14.0.0/15 maxlen: 15
116.14.0.0/16 maxlen: 16
116.14.0.0/17 maxlen: 17
116.14.16.0/23 maxlen: 23
116.14.64.0/21 maxlen: 21
116.14.128.0/17 maxlen: 17
116.15.0.0/16 maxlen: 24
118.200.0.0/16 maxlen: 24
118.201.0.0/17 maxlen: 24
118.201.192.0/18 maxlen: 18
118.201.224.0/19 maxlen: 24
119.74.0.0/16 maxlen: 16
119.74.16.0/22 maxlen: 22
119.74.74.0/23 maxlen: 23
119.74.226.0/24 maxlen: 24
119.74.232.0/22 maxlen: 22
121.6.0.0/16 maxlen: 24
121.7.0.0/16 maxlen: 24
180.255.64.0/18 maxlen: 18
219.74.0.0/16 maxlen: 24
219.75.0.0/17 maxlen: 17
219.75.0.0/24 maxlen: 24
219.75.2.0/24 maxlen: 24
219.75.3.0/24 maxlen: 24
219.75.4.0/24 maxlen: 24
219.75.5.0/24 maxlen: 24
219.75.6.0/23 maxlen: 23
219.75.7.0/24 maxlen: 24
219.75.8.0/24 maxlen: 24
219.75.9.0/24 maxlen: 24
219.75.10.0/23 maxlen: 23
219.75.12.0/23 maxlen: 23
219.75.14.0/23 maxlen: 23
219.75.16.0/24 maxlen: 24
219.75.17.0/24 maxlen: 24
219.75.18.0/23 maxlen: 23
219.75.20.0/23 maxlen: 23
219.75.22.0/24 maxlen: 24
219.75.23.0/24 maxlen: 24
219.75.24.0/24 maxlen: 24
219.75.25.0/24 maxlen: 24
219.75.26.0/24 maxlen: 24
219.75.28.0/24 maxlen: 24
219.75.30.0/24 maxlen: 24
219.75.31.0/24 maxlen: 24
219.75.32.0/24 maxlen: 24
219.75.34.0/24 maxlen: 24
219.75.35.0/24 maxlen: 24
219.75.36.0/24 maxlen: 24
219.75.37.0/24 maxlen: 24
219.75.39.0/24 maxlen: 24
219.75.40.0/24 maxlen: 24
219.75.41.0/24 maxlen: 24
219.75.42.0/24 maxlen: 24
219.75.43.0/24 maxlen: 24
219.75.44.0/22 maxlen: 22
219.75.48.0/24 maxlen: 24
219.75.49.0/24 maxlen: 24
219.75.50.0/24 maxlen: 24
219.75.51.0/24 maxlen: 24
219.75.52.0/23 maxlen: 23
219.75.54.0/24 maxlen: 24
219.75.55.0/24 maxlen: 24
219.75.56.0/24 maxlen: 24
219.75.57.0/24 maxlen: 24
219.75.58.0/24 maxlen: 24
219.75.59.0/24 maxlen: 24
219.75.60.0/24 maxlen: 24
219.75.61.0/24 maxlen: 24
219.75.62.0/24 maxlen: 24
219.75.63.0/24 maxlen: 24
219.75.64.0/24 maxlen: 24
219.75.65.0/24 maxlen: 24
219.75.66.0/24 maxlen: 24
219.75.67.0/24 maxlen: 24
219.75.68.0/24 maxlen: 24
219.75.70.0/24 maxlen: 24
219.75.71.0/24 maxlen: 24
219.75.72.0/24 maxlen: 24
219.75.73.0/24 maxlen: 24
219.75.74.0/24 maxlen: 24
219.75.75.0/24 maxlen: 24
219.75.76.0/24 maxlen: 24
219.75.77.0/24 maxlen: 24
219.75.78.0/24 maxlen: 24
219.75.79.0/24 maxlen: 24
219.75.80.0/24 maxlen: 24
219.75.81.0/24 maxlen: 24
219.75.82.0/24 maxlen: 24
219.75.83.0/24 maxlen: 24
219.75.84.0/24 maxlen: 24
219.75.85.0/24 maxlen: 24
219.75.86.0/23 maxlen: 24
219.75.88.0/24 maxlen: 24
219.75.89.0/24 maxlen: 24
219.75.90.0/24 maxlen: 24
219.75.91.0/24 maxlen: 24
219.75.92.0/23 maxlen: 23
219.75.94.0/23 maxlen: 23
219.75.98.0/24 maxlen: 24
219.75.99.0/24 maxlen: 24
219.75.100.0/24 maxlen: 24
219.75.101.0/24 maxlen: 24
219.75.102.0/23 maxlen: 23
219.75.104.0/24 maxlen: 24
219.75.105.0/24 maxlen: 24
219.75.106.0/23 maxlen: 23
219.75.108.0/23 maxlen: 23
219.75.110.0/24 maxlen: 24
219.75.111.0/24 maxlen: 24
219.75.112.0/23 maxlen: 23
219.75.114.0/24 maxlen: 24
219.75.115.0/24 maxlen: 24
219.75.116.0/23 maxlen: 23
219.75.118.0/24 maxlen: 24
219.75.119.0/24 maxlen: 24
219.75.120.0/24 maxlen: 24
219.75.121.0/24 maxlen: 24
219.75.122.0/24 maxlen: 24
219.75.123.0/24 maxlen: 24
219.75.125.0/24 maxlen: 24
219.75.126.0/23 maxlen: 23
220.255.0.0/22 maxlen: 22
220.255.0.0/24 maxlen: 24
220.255.1.0/24 maxlen: 24
220.255.2.0/24 maxlen: 24
220.255.3.0/24 maxlen: 24
220.255.4.0/22 maxlen: 22
220.255.4.0/24 maxlen: 24
220.255.5.0/24 maxlen: 24
220.255.6.0/24 maxlen: 24
220.255.7.0/24 maxlen: 24
220.255.16.0/20 maxlen: 20
220.255.32.0/19 maxlen: 19
220.255.64.0/18 maxlen: 18
220.255.128.0/17 maxlen: 17
220.255.175.0/24 maxlen: 24
220.255.206.0/23 maxlen: 23
220.255.221.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A915F89C/6907C3E21D8311E29B35A5D808B02CD2/r48M-0f7_MfEkzxHPNs2RCtQUc4.crl
rsync://rpki.apnic.net/member_repository/A915F89C/6907C3E21D8311E29B35A5D808B02CD2/r48M-0f7_MfEkzxHPNs2RCtQUc4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r48M-0f7_MfEkzxHPNs2RCtQUc4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 29 May 2024 14:24:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13653 (0x3555)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915F89C/serialNumber=AF8F0CFB47FBFCC7C4933C473CDB36442B5051CE
Validity
Not Before: Apr 30 09:29:30 2024 GMT
Not After : Oct 31 00:00:00 2024 GMT
Subject: CN=6630b9fa-b197
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:4b:1f:bc:e0:c3:58:2d:85:1e:36:bc:c6:77:
b4:e4:45:58:64:2c:52:40:98:2b:36:9f:1c:0b:9a:
05:fd:0d:de:49:13:7a:47:cc:52:22:62:cc:ca:f5:
d5:7f:cb:91:d7:4b:29:59:43:40:35:d6:e2:d4:ac:
e8:51:a6:d1:7f:78:db:f7:48:8d:a2:1c:87:b5:37:
c9:c7:24:2d:a8:d0:6d:b1:83:45:cf:bc:31:e1:39:
5f:0e:08:76:b4:7b:7d:11:74:80:a9:04:ca:ec:54:
6d:75:08:83:69:bd:fd:51:ce:ec:30:22:c5:69:97:
10:d0:92:49:76:57:26:3f:13:7e:4b:a0:e1:31:38:
48:7d:82:64:a0:5f:80:05:09:e7:1e:90:2c:b9:44:
eb:2f:0b:b6:e7:5a:d0:f2:8f:48:90:f3:27:2b:ce:
dd:d4:ee:36:fc:51:59:29:f0:6f:98:20:a6:45:66:
67:3f:87:00:db:5a:5d:31:a8:42:9a:55:5f:bd:5e:
52:f5:bc:89:1f:04:e2:97:a2:e0:91:ae:99:dd:13:
2d:02:07:e8:12:5d:1e:41:e0:46:41:38:9c:61:ec:
0b:86:70:a1:ef:f9:73:f8:29:df:bf:69:b9:a1:f9:
27:e6:62:71:c6:76:e9:5e:e0:47:17:99:8a:ed:04:
18:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:BC:2C:3A:B7:63:46:CE:38:EC:DF:57:9E:73:4F:C6:D6:47:76:5E
X509v3 Authority Key Identifier:
keyid:AF:8F:0C:FB:47:FB:FC:C7:C4:93:3C:47:3C:DB:36:44:2B:50:51:CE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915F89C/6907C3E21D8311E29B35A5D808B02CD2/r48M-0f7_MfEkzxHPNs2RCtQUc4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r48M-0f7_MfEkzxHPNs2RCtQUc4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915F89C/6907C3E21D8311E29B35A5D808B02CD2/2569B02206D411EF9B54220DC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
14.100.0.0/17
42.60.0.0/16
42.61.128.0/17
101.78.64.0/18
115.66.0.0/16
116.14.0.0/15
118.200.0.0-118.201.127.255
118.201.192.0/18
119.74.0.0/16
121.6.0.0/15
180.255.64.0/18
219.74.0.0-219.75.127.255
220.255.0.0/21
220.255.16.0-220.255.255.255
Signature Algorithm: sha256WithRSAEncryption
07:65:d8:e7:92:80:9c:8d:7e:14:70:8e:99:da:27:9b:5e:ba:
57:e9:a1:12:13:e1:5a:1b:07:a3:df:d2:97:5a:d2:db:ea:ac:
b3:f4:5e:01:2a:00:e7:0b:6e:5e:6a:6a:23:13:a7:81:55:72:
49:d0:aa:c7:29:67:f4:93:ce:d7:99:96:6d:11:9a:1d:26:7a:
58:cc:d9:1a:b6:10:c5:06:48:d3:94:17:ad:f4:7d:55:01:92:
5d:34:d2:97:81:29:ff:39:fd:c6:3d:65:cd:99:ee:e4:ca:d7:
dd:ea:cf:12:ee:66:b7:ed:c3:d4:b0:5d:4e:a8:ce:96:fc:75:
94:93:de:91:cd:71:bb:23:39:c0:e0:6a:6f:a6:97:26:a4:8e:
c3:19:65:ed:43:0b:fb:f3:63:04:a1:41:6a:ad:e3:84:d2:e9:
57:60:dd:f7:76:0c:de:59:b0:98:73:81:96:7b:ca:17:1f:66:
0d:ac:d2:ba:8a:f8:28:7a:a4:b0:89:7f:0a:43:e7:31:42:66:
ce:2e:38:fc:5c:80:f4:f9:6b:ca:ea:e1:2d:41:ab:e1:19:2c:
c5:6f:5f:3c:d7:5c:2d:f8:97:3a:6a:2e:0a:d9:fe:1b:78:57:
e3:73:83:65:9d:21:60:d5:53:47:c3:0e:9c:3a:bb:b8:85:74:
d7:33:b6:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 22 16:21:39 2024 by rpki-client on console-ams.rpki-client.org