Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A916C83B/E4E10B4A1D8811E2A012CBE108B02CD2/F6296404F82F11EEA21E8113C4F9AE02.roa
File: F6296404F82F11EEA21E8113C4F9AE02.roa (raw, json)
Hash identifier: UG+h1sICZ9vF3OGLGpKSPylE4KzmceigyDrwLTRT10s=
Subject key identifier: 46:5E:C7:30:A9:E6:33:39:88:FE:B1:D8:E5:BD:BB:52:4A:1D:CC:45
Certificate issuer: /CN=A916C83B/serialNumber=E76EB256C0FCB07E2907978343E9AD9DD21FE206
Certificate serial: 3714
Authority key identifier: E7:6E:B2:56:C0:FC:B0:7E:29:07:97:83:43:E9:AD:9D:D2:1F:E2:06
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/526yVsD8sH4pB5eDQ-mtndIf4gY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916C83B/E4E10B4A1D8811E2A012CBE108B02CD2/F6296404F82F11EEA21E8113C4F9AE02.roa
Signing time: Fri 04 Oct 2024 14:39:43 +0000
ROA not before: Fri 04 Oct 2024 14:39:43 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 150382
IP address blocks: 111.88.76.0/24 maxlen: 24
111.88.77.0/24 maxlen: 24
111.88.79.0/24 maxlen: 24
111.88.138.0/24 maxlen: 24
111.88.139.0/24 maxlen: 24
111.88.144.0/24 maxlen: 24
111.88.145.0/24 maxlen: 24
111.88.146.0/24 maxlen: 24
111.88.147.0/24 maxlen: 24
111.88.148.0/24 maxlen: 24
111.88.149.0/24 maxlen: 24
111.88.150.0/24 maxlen: 24
111.88.151.0/24 maxlen: 24
111.88.152.0/24 maxlen: 24
111.88.153.0/24 maxlen: 24
111.88.154.0/24 maxlen: 24
111.88.155.0/24 maxlen: 24
111.88.156.0/24 maxlen: 24
111.88.157.0/24 maxlen: 24
111.88.158.0/24 maxlen: 24
111.88.159.0/24 maxlen: 24
111.88.164.0/24 maxlen: 24
111.88.165.0/24 maxlen: 24
111.88.166.0/24 maxlen: 24
111.88.167.0/24 maxlen: 24
111.88.184.0/24 maxlen: 24
111.88.185.0/24 maxlen: 24
111.88.186.0/24 maxlen: 24
111.88.187.0/24 maxlen: 24
111.88.188.0/24 maxlen: 24
111.88.189.0/24 maxlen: 24
111.88.190.0/24 maxlen: 24
111.88.191.0/24 maxlen: 24
111.88.232.0/24 maxlen: 24
111.88.234.0/24 maxlen: 24
111.88.235.0/24 maxlen: 24
111.88.236.0/24 maxlen: 24
111.88.237.0/24 maxlen: 24
111.88.240.0/24 maxlen: 24
111.88.241.0/24 maxlen: 24
111.88.242.0/24 maxlen: 24
111.88.243.0/24 maxlen: 24
111.88.244.0/24 maxlen: 24
111.88.245.0/24 maxlen: 24
111.88.246.0/24 maxlen: 24
111.88.247.0/24 maxlen: 24
111.88.248.0/24 maxlen: 24
111.88.251.0/24 maxlen: 24
111.88.252.0/24 maxlen: 24
111.88.253.0/24 maxlen: 24
111.88.254.0/24 maxlen: 24
115.186.1.0/24 maxlen: 24
115.186.10.0/24 maxlen: 24
115.186.11.0/24 maxlen: 24
115.186.12.0/24 maxlen: 24
115.186.13.0/24 maxlen: 24
115.186.16.0/24 maxlen: 24
115.186.18.0/24 maxlen: 24
115.186.19.0/24 maxlen: 24
115.186.22.0/24 maxlen: 24
115.186.24.0/24 maxlen: 24
115.186.26.0/24 maxlen: 24
115.186.27.0/24 maxlen: 24
115.186.28.0/24 maxlen: 24
115.186.29.0/24 maxlen: 24
115.186.41.0/24 maxlen: 24
115.186.48.0/24 maxlen: 24
115.186.49.0/24 maxlen: 24
115.186.50.0/24 maxlen: 24
115.186.51.0/24 maxlen: 24
115.186.52.0/24 maxlen: 24
115.186.53.0/24 maxlen: 24
115.186.54.0/24 maxlen: 24
115.186.55.0/24 maxlen: 24
115.186.64.0/24 maxlen: 24
115.186.65.0/24 maxlen: 24
115.186.66.0/24 maxlen: 24
115.186.67.0/24 maxlen: 24
115.186.68.0/24 maxlen: 24
115.186.69.0/24 maxlen: 24
115.186.70.0/24 maxlen: 24
115.186.71.0/24 maxlen: 24
115.186.72.0/24 maxlen: 24
115.186.73.0/24 maxlen: 24
115.186.74.0/24 maxlen: 24
115.186.75.0/24 maxlen: 24
115.186.88.0/24 maxlen: 24
115.186.89.0/24 maxlen: 24
115.186.91.0/24 maxlen: 24
115.186.92.0/24 maxlen: 24
115.186.93.0/24 maxlen: 24
115.186.94.0/24 maxlen: 24
115.186.95.0/24 maxlen: 24
115.186.97.0/24 maxlen: 24
115.186.99.0/24 maxlen: 24
115.186.100.0/24 maxlen: 24
115.186.105.0/24 maxlen: 24
115.186.114.0/24 maxlen: 24
115.186.116.0/24 maxlen: 24
115.186.122.0/24 maxlen: 24
115.186.123.0/24 maxlen: 24
115.186.124.0/24 maxlen: 24
115.186.125.0/24 maxlen: 24
115.186.127.0/24 maxlen: 24
117.102.10.0/24 maxlen: 24
117.102.11.0/24 maxlen: 24
117.102.13.0/24 maxlen: 24
117.102.14.0/24 maxlen: 24
117.102.15.0/24 maxlen: 24
117.102.20.0/24 maxlen: 24
117.102.21.0/24 maxlen: 24
117.102.22.0/24 maxlen: 24
117.102.23.0/24 maxlen: 24
117.102.27.0/24 maxlen: 24
117.102.29.0/24 maxlen: 24
117.102.30.0/24 maxlen: 24
117.102.31.0/24 maxlen: 24
203.81.200.0/24 maxlen: 24
203.81.201.0/24 maxlen: 24
203.81.202.0/24 maxlen: 24
203.81.203.0/24 maxlen: 24
203.81.204.0/24 maxlen: 24
203.81.205.0/24 maxlen: 24
203.81.206.0/24 maxlen: 24
203.81.207.0/24 maxlen: 24
203.81.212.0/24 maxlen: 24
203.81.214.0/24 maxlen: 24
203.81.216.0/24 maxlen: 24
203.81.217.0/24 maxlen: 24
203.81.218.0/24 maxlen: 24
203.81.219.0/24 maxlen: 24
203.81.220.0/24 maxlen: 24
203.81.221.0/24 maxlen: 24
203.81.222.0/24 maxlen: 24
203.81.223.0/24 maxlen: 24
203.81.224.0/24 maxlen: 24
203.81.225.0/24 maxlen: 24
203.81.226.0/24 maxlen: 24
203.81.227.0/24 maxlen: 24
203.81.228.0/24 maxlen: 24
203.81.229.0/24 maxlen: 24
203.81.231.0/24 maxlen: 24
203.81.232.0/24 maxlen: 24
203.81.233.0/24 maxlen: 24
203.81.234.0/24 maxlen: 24
203.81.235.0/24 maxlen: 24
203.81.236.0/24 maxlen: 24
203.81.237.0/24 maxlen: 24
203.81.238.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A916C83B/E4E10B4A1D8811E2A012CBE108B02CD2/526yVsD8sH4pB5eDQ-mtndIf4gY.crl
rsync://rpki.apnic.net/member_repository/A916C83B/E4E10B4A1D8811E2A012CBE108B02CD2/526yVsD8sH4pB5eDQ-mtndIf4gY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/526yVsD8sH4pB5eDQ-mtndIf4gY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 29 Nov 2024 14:30:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 14100 (0x3714)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916C83B/serialNumber=E76EB256C0FCB07E2907978343E9AD9DD21FE206
Validity
Not Before: Oct 4 14:39:43 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=66fffe2f-ff27
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:ff:6d:fa:6d:92:64:5c:b5:09:fa:18:2b:42:
53:a8:d4:ed:39:d9:66:1b:7e:5f:e6:a3:c1:fe:f6:
35:89:e7:b5:d4:bb:82:79:6a:91:fe:a6:10:4f:78:
43:ac:d6:4e:19:c8:f2:b0:fd:20:ae:a8:a0:57:b2:
c0:3c:13:08:70:21:95:a5:0c:a1:70:8e:5a:21:fd:
b5:b6:72:70:a3:64:5a:12:31:8f:d6:84:a5:22:81:
f0:38:d6:09:84:1e:77:c7:38:1c:ae:f1:d6:a6:7d:
16:08:be:49:b9:b7:b0:f5:8b:4b:24:15:50:d3:21:
87:9a:bf:65:e8:ab:d0:9f:7a:15:28:fe:ca:a9:89:
9a:d9:60:98:89:a2:af:77:1b:33:80:c4:7f:b6:58:
8a:d1:42:dd:bf:9f:e4:c7:7b:cf:f6:63:5a:fe:a2:
51:d8:c7:10:52:2f:df:4a:d6:a1:37:52:cd:c7:e7:
df:84:f8:c8:45:b4:e8:5c:bb:f6:08:79:31:98:d0:
7d:f2:22:ff:11:14:b3:16:9f:27:38:e4:26:6c:89:
01:ec:e9:c8:ef:b7:f5:87:2d:8b:9b:70:ff:f6:fd:
12:b6:e4:58:43:3f:59:e3:e5:99:f1:5b:e0:c1:e6:
59:10:d2:4c:c6:3c:eb:26:d4:a5:03:e6:e9:36:a0:
22:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:5E:C7:30:A9:E6:33:39:88:FE:B1:D8:E5:BD:BB:52:4A:1D:CC:45
X509v3 Authority Key Identifier:
keyid:E7:6E:B2:56:C0:FC:B0:7E:29:07:97:83:43:E9:AD:9D:D2:1F:E2:06
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916C83B/E4E10B4A1D8811E2A012CBE108B02CD2/526yVsD8sH4pB5eDQ-mtndIf4gY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/526yVsD8sH4pB5eDQ-mtndIf4gY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916C83B/E4E10B4A1D8811E2A012CBE108B02CD2/F6296404F82F11EEA21E8113C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
111.88.76.0/23
111.88.79.0/24
111.88.138.0/23
111.88.144.0/20
111.88.164.0/22
111.88.184.0/21
111.88.232.0/24
111.88.234.0-111.88.237.255
111.88.240.0-111.88.248.255
111.88.251.0-111.88.254.255
115.186.1.0/24
115.186.10.0-115.186.13.255
115.186.16.0/24
115.186.18.0/23
115.186.22.0/24
115.186.24.0/24
115.186.26.0-115.186.29.255
115.186.41.0/24
115.186.48.0/21
115.186.64.0-115.186.75.255
115.186.88.0/23
115.186.91.0-115.186.95.255
115.186.97.0/24
115.186.99.0-115.186.100.255
115.186.105.0/24
115.186.114.0/24
115.186.116.0/24
115.186.122.0-115.186.125.255
115.186.127.0/24
117.102.10.0/23
117.102.13.0-117.102.15.255
117.102.20.0/22
117.102.27.0/24
117.102.29.0-117.102.31.255
203.81.200.0/21
203.81.212.0/24
203.81.214.0/24
203.81.216.0-203.81.229.255
203.81.231.0-203.81.238.255
Signature Algorithm: sha256WithRSAEncryption
30:64:10:b3:b9:bd:72:a9:14:c2:b6:44:9b:3d:18:7f:4b:66:
98:3a:ff:57:f3:b6:43:a2:02:bd:f8:43:21:a6:32:c2:72:8d:
eb:4b:c3:5d:9b:3e:a1:69:a4:27:4e:85:73:bf:c0:fb:13:08:
d2:36:14:8f:0a:93:47:ee:1d:81:c4:c7:fd:db:00:8f:f7:6e:
e9:99:8e:19:28:8e:c8:43:ee:cc:81:c3:36:d7:30:4a:67:98:
8b:35:95:08:de:d5:8a:b2:94:63:fa:61:6f:66:fe:dc:9f:73:
fd:78:63:8c:05:2c:76:0e:cb:9a:d3:78:7b:1d:e8:90:c9:7c:
8a:d8:5f:f8:88:16:79:eb:44:61:30:56:33:76:03:d1:5a:8e:
0d:7e:2f:66:83:63:f7:a5:24:d6:a6:5c:23:07:27:61:c2:1a:
f8:45:25:38:35:33:ad:8d:0b:c3:d7:f3:57:d2:65:49:17:11:
fc:e4:24:21:a0:da:4c:99:8c:68:8d:47:0b:e4:78:fb:00:a3:
c1:b9:8e:f3:06:19:46:17:db:4d:59:e3:a9:45:41:9a:6f:6c:
fc:a4:bd:31:5f:53:0f:b3:ab:61:c7:8e:e6:4f:b3:c1:76:35:
c4:1c:07:df:34:41:f8:9c:01:1f:6d:c6:fd:52:e8:ca:48:05:
45:b4:90:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 15:25:38 2024 by rpki-client on console-fra.rpki-client.org