Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A916C83B/E4E10B4A1D8811E2A012CBE108B02CD2/783D680CDE2E11EFB1ED1081C4F9AE02.roa
File: 783D680CDE2E11EFB1ED1081C4F9AE02.roa (raw, json)
Hash identifier: xklgXiEL7v6c8CAM+mgBS/CGBIX6quPaiRtlZHrdXA4=
Subject key identifier: 76:E3:84:F1:31:FB:B5:B0:41:09:5B:A9:EC:CC:E4:0E:F3:AA:05:0E
Certificate issuer: /CN=A916C83B/serialNumber=E76EB256C0FCB07E2907978343E9AD9DD21FE206
Certificate serial: 3757
Authority key identifier: E7:6E:B2:56:C0:FC:B0:7E:29:07:97:83:43:E9:AD:9D:D2:1F:E2:06
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/526yVsD8sH4pB5eDQ-mtndIf4gY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916C83B/E4E10B4A1D8811E2A012CBE108B02CD2/783D680CDE2E11EFB1ED1081C4F9AE02.roa
Signing time: Wed 29 Jan 2025 10:47:44 +0000
ROA not before: Wed 29 Jan 2025 10:47:44 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 38710
IP address blocks: 111.88.96.0/19 maxlen: 19
111.88.144.0/20 maxlen: 23
111.88.164.0/22 maxlen: 23
111.88.168.0/22 maxlen: 24
111.88.184.0/22 maxlen: 23
111.88.188.0/22 maxlen: 23
111.88.233.0/24 maxlen: 24
111.88.238.0/24 maxlen: 24
111.88.239.0/24 maxlen: 24
111.88.244.0/22 maxlen: 22
115.186.10.0/23 maxlen: 23
115.186.12.0/23 maxlen: 23
115.186.14.0/24 maxlen: 24
115.186.16.0/24 maxlen: 24
115.186.17.0/24 maxlen: 24
115.186.21.0/24 maxlen: 24
115.186.23.0/24 maxlen: 24
115.186.24.0/23 maxlen: 23
115.186.25.0/24 maxlen: 24
115.186.30.0/23 maxlen: 24
115.186.32.0/20 maxlen: 22
115.186.32.0/24 maxlen: 24
115.186.33.0/24 maxlen: 24
115.186.34.0/24 maxlen: 24
115.186.35.0/24 maxlen: 24
115.186.36.0/22 maxlen: 23
115.186.36.0/23 maxlen: 24
115.186.40.0/24 maxlen: 24
115.186.42.0/24 maxlen: 24
115.186.43.0/24 maxlen: 24
115.186.44.0/24 maxlen: 24
115.186.45.0/24 maxlen: 24
115.186.46.0/24 maxlen: 24
115.186.47.0/24 maxlen: 24
115.186.56.0/21 maxlen: 23
115.186.56.0/22 maxlen: 24
115.186.60.0/23 maxlen: 24
115.186.63.0/24 maxlen: 24
115.186.64.0/19 maxlen: 23
115.186.76.0/22 maxlen: 24
115.186.80.0/21 maxlen: 24
115.186.90.0/24 maxlen: 24
115.186.96.0/20 maxlen: 23
115.186.96.0/22 maxlen: 24
115.186.101.0/24 maxlen: 24
115.186.102.0/23 maxlen: 24
115.186.104.0/24 maxlen: 24
115.186.106.0/23 maxlen: 24
115.186.108.0/22 maxlen: 24
115.186.112.0/20 maxlen: 23
115.186.112.0/23 maxlen: 24
115.186.115.0/24 maxlen: 24
115.186.117.0/24 maxlen: 24
115.186.118.0/23 maxlen: 24
115.186.120.0/23 maxlen: 24
115.186.125.0/24 maxlen: 24
115.186.126.0/24 maxlen: 24
117.102.0.0/21 maxlen: 21
117.102.0.0/22 maxlen: 22
117.102.0.0/23 maxlen: 24
117.102.2.0/24 maxlen: 24
117.102.3.0/24 maxlen: 24
117.102.4.0/24 maxlen: 24
117.102.5.0/24 maxlen: 24
117.102.6.0/24 maxlen: 24
117.102.7.0/24 maxlen: 24
117.102.8.0/24 maxlen: 24
117.102.9.0/24 maxlen: 24
117.102.12.0/23 maxlen: 23
117.102.12.0/24 maxlen: 24
117.102.14.0/23 maxlen: 23
117.102.16.0/24 maxlen: 24
117.102.17.0/24 maxlen: 24
117.102.18.0/23 maxlen: 24
117.102.20.0/22 maxlen: 23
117.102.24.0/22 maxlen: 22
117.102.24.0/23 maxlen: 24
117.102.26.0/24 maxlen: 24
117.102.28.0/24 maxlen: 24
117.102.32.0/24 maxlen: 24
117.102.33.0/24 maxlen: 24
117.102.34.0/24 maxlen: 24
117.102.35.0/24 maxlen: 24
117.102.36.0/24 maxlen: 24
117.102.37.0/24 maxlen: 24
117.102.38.0/24 maxlen: 24
117.102.39.0/24 maxlen: 24
117.102.40.0/24 maxlen: 24
117.102.41.0/24 maxlen: 24
117.102.42.0/24 maxlen: 24
117.102.43.0/24 maxlen: 24
117.102.44.0/24 maxlen: 24
117.102.45.0/24 maxlen: 24
117.102.46.0/24 maxlen: 24
117.102.47.0/24 maxlen: 24
203.81.192.0/21 maxlen: 22
203.81.192.0/24 maxlen: 24
203.81.193.0/24 maxlen: 24
203.81.194.0/24 maxlen: 24
203.81.195.0/24 maxlen: 24
203.81.196.0/24 maxlen: 24
203.81.197.0/24 maxlen: 24
203.81.198.0/23 maxlen: 24
203.81.208.0/20 maxlen: 23
203.81.208.0/22 maxlen: 24
203.81.213.0/24 maxlen: 24
203.81.215.0/24 maxlen: 24
203.81.224.0/20 maxlen: 23
203.81.230.0/24 maxlen: 24
203.81.239.0/24 maxlen: 24
2406:7000::/32 maxlen: 32
2406:7000::/48 maxlen: 48
2406:7000:1::/48 maxlen: 48
2406:7000:2::/48 maxlen: 48
2406:7000:3::/48 maxlen: 48
2406:7000:4::/48 maxlen: 48
2406:7000:5::/48 maxlen: 48
2406:7000:6::/48 maxlen: 48
2406:7000:7::/48 maxlen: 48
2406:7000:8::/48 maxlen: 48
2406:7000:9::/48 maxlen: 48
2406:7000:a::/48 maxlen: 48
2406:7000:b::/48 maxlen: 48
2406:7000:c::/48 maxlen: 48
2406:7000:d::/48 maxlen: 48
2406:7000:e::/48 maxlen: 48
2406:7000:f::/48 maxlen: 48
2406:7000:10::/48 maxlen: 48
2406:7000:11::/48 maxlen: 48
2406:7000:12::/48 maxlen: 48
2406:7000:13::/48 maxlen: 48
2406:7000:14::/48 maxlen: 48
2406:7000:15::/48 maxlen: 48
2406:7000:16::/48 maxlen: 48
2406:7000:17::/48 maxlen: 48
2406:7000:18::/48 maxlen: 48
2406:7000:19::/48 maxlen: 48
2406:7000:1a::/48 maxlen: 48
2406:7000:1b::/48 maxlen: 48
2406:7000:1c::/48 maxlen: 48
2406:7000:1d::/48 maxlen: 48
2406:7000:1e::/48 maxlen: 48
2406:7000:1f::/48 maxlen: 48
2406:7000:20::/48 maxlen: 48
2406:7000:21::/48 maxlen: 48
2406:7000:22::/48 maxlen: 48
2406:7000:23::/48 maxlen: 48
2406:7000:24::/48 maxlen: 48
2406:7000:25::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A916C83B/E4E10B4A1D8811E2A012CBE108B02CD2/526yVsD8sH4pB5eDQ-mtndIf4gY.crl
rsync://rpki.apnic.net/member_repository/A916C83B/E4E10B4A1D8811E2A012CBE108B02CD2/526yVsD8sH4pB5eDQ-mtndIf4gY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/526yVsD8sH4pB5eDQ-mtndIf4gY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 21 Feb 2025 05:15:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 14167 (0x3757)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916C83B
Validity
Not Before: Jan 29 10:47:44 2025 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=679a0750-7c73
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:8e:db:3e:fa:1d:6f:83:d7:9b:cf:a5:74:5d:
75:46:af:75:10:be:3e:95:84:ea:58:e3:87:1b:9d:
71:c9:67:c7:1d:72:1b:12:d1:e6:5b:b4:6a:9b:c5:
36:f8:5c:d5:96:3b:f9:eb:25:38:13:43:11:d1:01:
50:63:d4:68:7e:09:31:d5:d5:49:e7:ec:f8:7a:62:
0f:c1:fe:9d:4f:44:00:29:b7:84:09:4c:73:11:a0:
90:1b:ad:74:e2:a5:5b:be:d3:d5:a1:49:67:e8:bd:
06:21:1e:4d:f4:2f:cf:93:47:e5:14:74:93:04:ab:
5a:d7:51:ef:95:db:ef:22:41:e6:50:3d:5f:80:20:
f7:c6:ea:7b:da:e9:68:27:f6:b7:98:ea:70:72:a3:
f4:3f:eb:3b:af:62:c6:dc:45:cf:1e:dd:c7:9b:61:
18:41:e8:bd:c9:cd:3d:b2:2f:9d:e5:c7:15:3f:70:
e8:79:91:aa:62:ba:db:0b:5c:39:e3:92:05:c0:98:
f2:b9:30:39:56:12:56:35:c5:8c:e6:58:74:63:78:
c4:a0:6e:cf:0e:bd:87:d7:b2:df:eb:47:f7:2a:58:
35:f9:4f:a8:49:4f:a4:ef:87:9c:56:ef:b7:b8:15:
b3:27:8b:f9:8a:46:aa:88:00:fb:e9:0c:b2:db:c8:
6d:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:E3:84:F1:31:FB:B5:B0:41:09:5B:A9:EC:CC:E4:0E:F3:AA:05:0E
X509v3 Authority Key Identifier:
keyid:E7:6E:B2:56:C0:FC:B0:7E:29:07:97:83:43:E9:AD:9D:D2:1F:E2:06
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916C83B/E4E10B4A1D8811E2A012CBE108B02CD2/526yVsD8sH4pB5eDQ-mtndIf4gY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/526yVsD8sH4pB5eDQ-mtndIf4gY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916C83B/E4E10B4A1D8811E2A012CBE108B02CD2/783D680CDE2E11EFB1ED1081C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
111.88.96.0/19
111.88.144.0/20
111.88.164.0-111.88.171.255
111.88.184.0/21
111.88.233.0/24
111.88.238.0/23
111.88.244.0/22
115.186.10.0-115.186.14.255
115.186.16.0/23
115.186.21.0/24
115.186.23.0-115.186.25.255
115.186.30.0-115.186.47.255
115.186.56.0-115.186.127.255
117.102.0.0-117.102.9.255
117.102.12.0-117.102.28.255
117.102.32.0/20
203.81.192.0/21
203.81.208.0-203.81.239.255
IPv6:
2406:7000::/32
Signature Algorithm: sha256WithRSAEncryption
21:bb:ba:b8:14:50:4c:b2:39:62:05:e4:e7:d0:60:3d:1d:e9:
db:9d:94:77:20:74:19:70:f3:b6:4d:0c:df:59:da:e3:a7:df:
79:a1:f7:56:99:08:21:a7:ba:b0:34:f2:f2:88:61:e8:23:f5:
0c:96:04:2f:e5:6d:54:a6:ac:9f:51:a8:3b:67:14:65:6e:a3:
3b:b5:39:cb:84:e9:83:48:02:c1:67:7a:c5:8f:c4:e8:9d:90:
0c:a1:9e:34:ec:66:df:04:59:fc:a1:5f:4e:ba:15:c4:4a:8f:
c1:27:c3:c0:43:51:83:01:1e:00:b3:16:e1:b9:50:40:37:ad:
43:76:94:a5:33:c9:57:d5:ce:db:01:42:0f:1c:89:7d:0c:3a:
05:28:f4:fa:24:f3:76:09:a5:8d:d3:56:1b:f9:24:7b:27:b0:
93:71:fa:41:a2:f1:09:91:34:5e:e2:e9:94:80:8e:65:6a:03:
b6:ae:57:dd:e7:0c:c9:09:a9:13:ff:e1:bd:6d:da:41:c4:68:
ca:55:b6:98:66:93:d6:7a:b5:40:14:3d:e9:e8:a7:56:ce:69:
e3:ea:be:f1:b3:7d:4b:75:d4:8e:1f:1e:ec:20:de:89:cd:89:
1d:52:c8:c4:f9:33:be:d3:1c:67:c3:ee:93:33:31:f3:07:dc:
14:c4:7a:89
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Thu Feb 20 03:16:31 2025 by rpki-client