Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A916BCDF/F858344EE36D11E8956F3516C4F9AE02/AA47599A985F11EEBA5D186DC4F9AE02.roa
File: AA47599A985F11EEBA5D186DC4F9AE02.roa (raw, json)
Hash identifier: abD2sJSusd+EergprKNOfnX9AY5e5SRUlXGm1ps4L/Y=
Subject key identifier: 78:42:FE:49:3D:98:B7:A4:8A:9D:2D:1A:BD:A2:59:EE:FD:51:AB:EE
Certificate issuer: /CN=A916BCDF/serialNumber=51AAAC7F6F58F747072C87EC2F4878EF1CB8F4CE
Certificate serial: 11BD
Authority key identifier: 51:AA:AC:7F:6F:58:F7:47:07:2C:87:EC:2F:48:78:EF:1C:B8:F4:CE
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Uaqsf29Y90cHLIfsL0h47xy49M4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916BCDF/F858344EE36D11E8956F3516C4F9AE02/AA47599A985F11EEBA5D186DC4F9AE02.roa
Signing time: Sat 02 Nov 2024 17:25:47 +0000
ROA not before: Sat 02 Nov 2024 17:25:47 +0000
ROA not after: Tue 30 Dec 2025 00:00:00 +0000
asID: 20473
IP address blocks: 43.224.32.0/22 maxlen: 24
103.43.72.0/22 maxlen: 32
202.182.96.0/20 maxlen: 23
202.182.96.0/25 maxlen: 32
202.182.96.128/25 maxlen: 32
202.182.97.0/25 maxlen: 32
202.182.97.128/25 maxlen: 32
202.182.98.0/24 maxlen: 32
202.182.99.0/25 maxlen: 32
202.182.99.128/25 maxlen: 32
202.182.100.0/24 maxlen: 32
202.182.101.0/25 maxlen: 32
202.182.101.128/25 maxlen: 32
202.182.102.0/25 maxlen: 32
202.182.102.128/25 maxlen: 32
202.182.103.0/25 maxlen: 32
202.182.103.128/25 maxlen: 32
202.182.104.0/25 maxlen: 32
202.182.104.128/25 maxlen: 32
202.182.105.0/25 maxlen: 32
202.182.105.128/25 maxlen: 32
202.182.106.0/25 maxlen: 32
202.182.106.128/25 maxlen: 32
202.182.107.0/25 maxlen: 32
202.182.107.128/25 maxlen: 32
202.182.108.0/25 maxlen: 32
202.182.108.128/25 maxlen: 32
202.182.109.0/25 maxlen: 32
202.182.109.128/25 maxlen: 32
202.182.110.0/25 maxlen: 32
202.182.110.128/25 maxlen: 32
202.182.111.0/25 maxlen: 32
202.182.111.128/25 maxlen: 32
202.182.112.0/20 maxlen: 32
2401:c080:1000::/38 maxlen: 38
2401:c080:1400::/38 maxlen: 38
2401:c080:1800::/38 maxlen: 38
2401:c080:18fb::/48 maxlen: 48
2401:c080:1c00::/38 maxlen: 38
2401:c080:2000::/38 maxlen: 38
2401:c080:2400::/38 maxlen: 38
2401:c080:3000::/38 maxlen: 38
2401:c080:3400::/38 maxlen: 38
2401:c080:3800::/38 maxlen: 38
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A916BCDF/F858344EE36D11E8956F3516C4F9AE02/Uaqsf29Y90cHLIfsL0h47xy49M4.crl
rsync://rpki.apnic.net/member_repository/A916BCDF/F858344EE36D11E8956F3516C4F9AE02/Uaqsf29Y90cHLIfsL0h47xy49M4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Uaqsf29Y90cHLIfsL0h47xy49M4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 27 Nov 2024 17:09:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4541 (0x11bd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916BCDF/serialNumber=51AAAC7F6F58F747072C87EC2F4878EF1CB8F4CE
Validity
Not Before: Nov 2 17:25:47 2024 GMT
Not After : Dec 30 00:00:00 2025 GMT
Subject: CN=6726609b-8a2e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:1d:47:85:09:5b:c4:ce:46:81:09:1d:8c:12:
81:88:a7:c3:7a:5b:07:31:2d:3c:03:05:22:0e:cc:
e7:80:a2:e5:f4:96:5c:f5:98:7c:1d:6c:83:59:ad:
44:9c:95:11:59:60:5b:da:20:f9:58:13:fa:1f:ea:
54:55:80:19:73:54:d6:14:ba:8b:77:7a:73:6d:7d:
0d:be:47:fb:d2:40:24:b4:f9:e4:b8:c0:a9:35:0f:
26:60:dc:e0:0d:0f:24:43:f6:35:45:68:48:14:8e:
06:32:7c:e6:3c:50:76:25:0a:3a:1f:d6:c2:4f:63:
41:b7:86:20:97:20:fb:37:e1:3e:2e:51:d4:bb:a8:
7f:76:b0:26:c7:df:9e:d0:64:23:46:6c:d1:8f:39:
fe:84:ea:73:a4:76:09:90:aa:2e:80:6c:80:d0:21:
ec:95:ea:91:65:53:50:67:28:e7:8e:4b:f1:00:4f:
f6:ba:7b:3d:9e:b6:88:7a:7e:51:d2:50:72:9c:43:
f9:ff:76:0f:98:ef:84:fc:ac:9b:ee:ad:5b:2e:3e:
b7:6b:b7:83:36:37:df:c2:74:87:59:8d:78:62:62:
e1:d5:7d:58:ef:f3:fa:8b:5f:0b:41:99:36:30:f2:
20:43:ab:06:08:fe:2c:5f:9e:57:99:51:63:7c:d0:
d0:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:42:FE:49:3D:98:B7:A4:8A:9D:2D:1A:BD:A2:59:EE:FD:51:AB:EE
X509v3 Authority Key Identifier:
keyid:51:AA:AC:7F:6F:58:F7:47:07:2C:87:EC:2F:48:78:EF:1C:B8:F4:CE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916BCDF/F858344EE36D11E8956F3516C4F9AE02/Uaqsf29Y90cHLIfsL0h47xy49M4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Uaqsf29Y90cHLIfsL0h47xy49M4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916BCDF/F858344EE36D11E8956F3516C4F9AE02/AA47599A985F11EEBA5D186DC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
43.224.32.0/22
103.43.72.0/22
202.182.96.0/19
IPv6:
2401:c080:1000::-2401:c080:27ff:ffff:ffff:ffff:ffff:ffff
2401:c080:3000::-2401:c080:3bff:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
0b:61:f2:1b:5b:64:25:37:70:29:cc:1d:36:5f:94:f0:24:48:
b3:7e:b6:0d:41:65:39:2b:a5:4e:64:16:b1:7b:dc:02:d0:67:
d2:76:11:65:cb:ba:51:0a:60:90:a6:a8:ba:a9:b4:b1:dc:6f:
53:66:cc:82:74:57:2d:c4:a4:e9:39:9b:35:c4:98:a9:5f:0f:
37:ef:cc:8e:66:e8:25:5b:23:b0:86:f4:7a:a2:5c:ef:71:5a:
49:16:a1:5a:1e:dc:9e:74:29:41:d4:01:b2:ec:41:7c:4e:7d:
96:0a:6a:37:cb:4e:dd:d8:dd:b5:bc:0d:26:2e:43:c6:d8:f1:
82:f4:b2:7d:3d:84:34:bd:64:c8:0e:fa:f4:d0:82:c9:5e:db:
fe:8d:db:c1:69:28:70:80:1f:0a:94:9a:bb:ff:cb:4c:33:f6:
01:f8:7b:cf:65:30:a1:17:a1:e8:93:a6:bc:a6:9a:5f:17:16:
47:85:29:90:80:f1:32:5e:55:d6:6e:66:98:88:c9:b6:94:4a:
9a:d7:c9:06:9b:09:1c:fc:0e:1a:4e:6a:8a:d1:9d:85:07:d7:
99:1e:48:8e:d6:73:5a:8a:fd:74:5c:42:2c:cb:94:6b:49:ca:
b9:fd:00:76:e8:15:c6:6c:03:ce:64:71:49:e0:c5:fb:f9:89:
5a:da:01:d1
-----BEGIN CERTIFICATE-----
MIIFqTCCBJGgAwIBAgICEb0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NkJDREYxMTAvBgNVBAUTKDUxQUFBQzdGNkY1OEY3NDcwNzJDODdFQzJGNDg3OEVG
MUNCOEY0Q0UwHhcNMjQxMTAyMTcyNTQ3WhcNMjUxMjMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02NzI2NjA5Yi04YTJlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA4x1HhQlbxM5GgQkdjBKBiKfDelsHMS08AwUiDszngKLl9JZc9Zh8HWyDWa1E
nJURWWBb2iD5WBP6H+pUVYAZc1TWFLqLd3pzbX0Nvkf70kAktPnkuMCpNQ8mYNzg
DQ8kQ/Y1RWhIFI4GMnzmPFB2JQo6H9bCT2NBt4YglyD7N+E+LlHUu6h/drAmx9+e
0GQjRmzRjzn+hOpzpHYJkKougGyA0CHsleqRZVNQZyjnjkvxAE/2uns9nraIen5R
0lBynEP5/3YPmO+E/Kyb7q1bLj63a7eDNjffwnSHWY14YmLh1X1Y7/P6i18LQZk2
MPIgQ6sGCP4sX55XmVFjfNDQXwIDAQABo4ICzTCCAskwHQYDVR0OBBYEFHhC/kk9
mLekip0tGr2iWe79UavuMB8GA1UdIwQYMBaAFFGqrH9vWPdHByyH7C9IeO8cuPTO
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2QkNERi9GODU4MzQ0RUUz
NkQxMUU4OTU2RjM1MTZDNEY5QUUwMi9VYXFzZjI5WTkwY0hMSWZzTDBoNDd4eTQ5
TTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1VhcXNmMjlZOTBjSExJZnNMMGg0N3h5NDlNNC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
NkJDREYvRjg1ODM0NEVFMzZEMTFFODk1NkYzNTE2QzRGOUFFMDIvQUE0NzU5OUE5
ODVGMTFFRUJBNUQxODZEQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwVwYIKwYBBQUHAQcBAf8E
SDBGMBgEAgABMBIDBAIr4CADBAJnK0gDBAXKtmAwKgQCAAIwJDAQAwYEJAHAgBAD
BgMkAcCAIDAQAwYEJAHAgDADBgIkAcCAODANBgkqhkiG9w0BAQsFAAOCAQEAC2Hy
G1tkJTdwKcwdNl+U8CRIs362DUFlOSulTmQWsXvcAtBn0nYRZcu6UQpgkKaouqm0
sdxvU2bMgnRXLcSk6TmbNcSYqV8PN+/MjmboJVsjsIb0eqJc73FaSRahWh7cnnQp
QdQBsuxBfE59lgpqN8tO3djdtbwNJi5DxtjxgvSyfT2ENL1kyA769NCCyV7b/o3b
wWkocIAfCpSau//LTDP2Afh7z2UwoReh6JOmvKaaXxcWR4UpkIDxMl5V1m5mmIjJ
tpRKmtfJBpsJHPwOGk5qitGdhQfXmR5IjtZzWor9dFxCLMuUa0nKuf0AdugVxmwD
zmRxSeDF+/mJWtoB0Q==
-----END CERTIFICATE-----
Generated at Wed Nov 20 19:05:20 2024 by rpki-client on console-ams.rpki-client.org