Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91733A8/14202384A1B411EAAF2E630FC4F9AE02/F6810AC0D0DC11EA9B1DF432C4F9AE02.roa
File: F6810AC0D0DC11EA9B1DF432C4F9AE02.roa (raw, json)
Hash identifier: 1O8CvPoCX59yxkCTRAfeqT87JzO1ZPyxP3FQ7V/8EC0=
Subject key identifier: 00:9B:38:52:91:78:84:93:B7:7D:F2:6C:A1:65:88:02:B3:C3:88:69
Certificate issuer: /CN=A91733A8/serialNumber=8DC66A64753643B0E70FB9B2BD4009CBEC705441
Certificate serial: 08BB
Authority key identifier: 8D:C6:6A:64:75:36:43:B0:E7:0F:B9:B2:BD:40:09:CB:EC:70:54:41
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jcZqZHU2Q7DnD7myvUAJy-xwVEE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91733A8/14202384A1B411EAAF2E630FC4F9AE02/F6810AC0D0DC11EA9B1DF432C4F9AE02.roa
Signing time: Wed 24 Jul 2024 05:47:12 +0000
ROA not before: Wed 24 Jul 2024 05:47:12 +0000
ROA not after: Wed 30 Jul 2025 00:00:00 +0000
asID: 9260
IP address blocks: 43.245.204.0/24 maxlen: 24
43.245.205.0/24 maxlen: 24
43.245.206.0/24 maxlen: 24
43.245.207.0/24 maxlen: 24
103.31.80.0/22 maxlen: 22
103.31.80.0/23 maxlen: 24
103.31.82.0/24 maxlen: 24
103.31.83.0/24 maxlen: 24
125.209.64.0/18 maxlen: 18
125.209.64.0/24 maxlen: 24
125.209.65.0/24 maxlen: 24
125.209.66.0/24 maxlen: 24
125.209.67.0/24 maxlen: 24
125.209.68.0/24 maxlen: 24
125.209.69.0/24 maxlen: 24
125.209.70.0/24 maxlen: 24
125.209.71.0/24 maxlen: 24
125.209.72.0/24 maxlen: 24
125.209.73.0/24 maxlen: 24
125.209.74.0/24 maxlen: 24
125.209.75.0/24 maxlen: 24
125.209.76.0/24 maxlen: 24
125.209.77.0/24 maxlen: 24
125.209.78.0/24 maxlen: 24
125.209.79.0/24 maxlen: 24
125.209.80.0/24 maxlen: 24
125.209.81.0/24 maxlen: 24
125.209.82.0/24 maxlen: 24
125.209.83.0/24 maxlen: 24
125.209.84.0/24 maxlen: 24
125.209.85.0/24 maxlen: 24
125.209.86.0/24 maxlen: 24
125.209.87.0/24 maxlen: 24
125.209.88.0/24 maxlen: 24
125.209.89.0/24 maxlen: 24
125.209.90.0/24 maxlen: 24
125.209.91.0/24 maxlen: 24
125.209.92.0/24 maxlen: 24
125.209.93.0/24 maxlen: 24
125.209.94.0/24 maxlen: 24
125.209.95.0/24 maxlen: 24
125.209.96.0/24 maxlen: 24
125.209.97.0/24 maxlen: 24
125.209.98.0/24 maxlen: 24
125.209.99.0/24 maxlen: 24
125.209.100.0/24 maxlen: 24
125.209.101.0/24 maxlen: 24
125.209.102.0/24 maxlen: 24
125.209.103.0/24 maxlen: 24
125.209.104.0/24 maxlen: 24
125.209.105.0/24 maxlen: 24
125.209.106.0/24 maxlen: 24
125.209.107.0/24 maxlen: 24
125.209.108.0/24 maxlen: 24
125.209.109.0/24 maxlen: 24
125.209.110.0/24 maxlen: 24
125.209.111.0/24 maxlen: 24
125.209.112.0/24 maxlen: 24
125.209.113.0/24 maxlen: 24
125.209.114.0/24 maxlen: 24
125.209.115.0/24 maxlen: 24
125.209.116.0/24 maxlen: 24
125.209.117.0/24 maxlen: 24
125.209.118.0/24 maxlen: 24
125.209.119.0/24 maxlen: 24
125.209.120.0/21 maxlen: 21
125.209.120.0/24 maxlen: 24
125.209.121.0/24 maxlen: 24
125.209.122.0/24 maxlen: 24
125.209.123.0/24 maxlen: 24
125.209.124.0/24 maxlen: 24
125.209.125.0/24 maxlen: 24
125.209.126.0/24 maxlen: 24
125.209.127.0/24 maxlen: 24
202.141.224.0/19 maxlen: 19
202.141.224.0/20 maxlen: 20
202.141.224.0/21 maxlen: 21
202.141.224.0/22 maxlen: 24
202.141.228.0/24 maxlen: 24
202.141.229.0/24 maxlen: 24
202.141.231.0/24 maxlen: 24
202.141.232.0/24 maxlen: 24
202.141.233.0/24 maxlen: 24
202.141.234.0/24 maxlen: 24
202.141.235.0/24 maxlen: 24
202.141.237.0/24 maxlen: 24
202.141.238.0/24 maxlen: 24
202.141.239.0/24 maxlen: 24
202.141.240.0/24 maxlen: 24
202.141.241.0/24 maxlen: 24
202.141.242.0/24 maxlen: 24
202.141.243.0/24 maxlen: 24
202.141.245.0/24 maxlen: 24
202.141.246.0/24 maxlen: 24
202.141.247.0/24 maxlen: 24
202.141.248.0/24 maxlen: 24
202.141.249.0/24 maxlen: 24
202.141.250.0/24 maxlen: 24
202.141.251.0/24 maxlen: 24
202.141.252.0/24 maxlen: 24
202.141.253.0/24 maxlen: 24
202.141.254.0/24 maxlen: 24
202.141.255.0/24 maxlen: 24
202.142.160.0/19 maxlen: 19
202.142.160.0/21 maxlen: 21
202.142.160.0/24 maxlen: 24
202.142.161.0/24 maxlen: 24
202.142.162.0/24 maxlen: 24
202.142.163.0/24 maxlen: 24
202.142.164.0/24 maxlen: 24
202.142.165.0/24 maxlen: 24
202.142.166.0/24 maxlen: 24
202.142.167.0/24 maxlen: 24
202.142.168.0/24 maxlen: 24
202.142.169.0/24 maxlen: 24
202.142.170.0/24 maxlen: 24
202.142.171.0/24 maxlen: 24
202.142.172.0/24 maxlen: 24
202.142.173.0/24 maxlen: 24
202.142.174.0/24 maxlen: 24
202.142.175.0/24 maxlen: 24
202.142.176.0/24 maxlen: 24
202.142.177.0/24 maxlen: 24
202.142.178.0/24 maxlen: 24
202.142.179.0/24 maxlen: 24
202.142.180.0/24 maxlen: 24
202.142.181.0/24 maxlen: 24
202.142.182.0/24 maxlen: 24
202.142.183.0/24 maxlen: 24
202.142.184.0/24 maxlen: 24
202.142.185.0/24 maxlen: 24
202.142.186.0/24 maxlen: 24
202.142.187.0/24 maxlen: 24
202.142.188.0/24 maxlen: 24
202.142.189.0/24 maxlen: 24
202.142.190.0/24 maxlen: 24
202.142.191.0/24 maxlen: 24
2401:8e00::/32 maxlen: 32
2401:8e00:800::/48 maxlen: 48
2401:8e00:2000::/38 maxlen: 38
2401:8e00:2400::/38 maxlen: 38
2401:8e00:2800::/48 maxlen: 48
2401:8e00:3400::/38 maxlen: 38
2401:8e00:4000::/36 maxlen: 36
2401:8e00:4000::/38 maxlen: 38
2401:8e00:4004::/48 maxlen: 48
2401:8e00:400f::/48 maxlen: 48
2401:8e00:5000::/36 maxlen: 36
2401:8e00:6000::/36 maxlen: 36
2401:8e00:7000::/36 maxlen: 36
2401:8e00:8000::/48 maxlen: 48
2401:8e00:8004::/48 maxlen: 48
2401:8e00:9000::/40 maxlen: 40
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91733A8/14202384A1B411EAAF2E630FC4F9AE02/jcZqZHU2Q7DnD7myvUAJy-xwVEE.crl
rsync://rpki.apnic.net/member_repository/A91733A8/14202384A1B411EAAF2E630FC4F9AE02/jcZqZHU2Q7DnD7myvUAJy-xwVEE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jcZqZHU2Q7DnD7myvUAJy-xwVEE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 29 Nov 2024 19:56:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2235 (0x8bb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91733A8/serialNumber=8DC66A64753643B0E70FB9B2BD4009CBEC705441
Validity
Not Before: Jul 24 05:47:12 2024 GMT
Not After : Jul 30 00:00:00 2025 GMT
Subject: CN=66a09560-6dbc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:99:8b:c5:86:25:38:26:11:a9:58:e5:5a:33:
a5:86:77:82:27:90:59:c6:f8:f7:8c:1e:01:eb:2c:
76:ed:95:f5:cb:c8:6a:7e:db:b2:70:78:d9:00:35:
e5:61:23:38:74:9a:76:b2:c8:65:40:e9:25:11:26:
c4:e1:b2:f0:2c:8c:27:0d:e4:67:87:d2:35:ed:df:
4d:f4:71:56:d0:f3:fb:45:b1:e6:f9:57:4b:34:d4:
db:43:30:60:d7:4c:b2:3b:c3:60:34:49:ac:78:50:
ab:41:27:d0:06:4a:d9:04:4b:4f:8c:29:ec:db:b8:
27:8c:86:f8:1c:76:64:c2:8a:ea:aa:aa:e5:a3:f7:
da:33:50:ed:c0:2e:a9:ed:7c:8a:d1:bd:e5:6c:17:
96:6d:64:f7:d7:f8:8a:1e:d0:f3:e4:0f:4e:f2:1f:
f8:2f:1e:e6:dc:e4:cb:cd:b1:83:05:09:8c:47:d7:
7a:a9:1f:a9:ce:47:61:1d:c3:2a:a3:79:53:7c:b8:
1d:9f:59:db:f4:de:8c:f2:d5:7b:a4:1d:05:73:67:
1f:3c:84:e9:38:35:dc:5c:f1:ed:43:b8:a4:5b:5d:
f0:b6:61:c3:93:fa:87:c6:ab:b4:32:a7:2b:07:b2:
78:ce:e3:6c:40:ef:e5:5d:0c:0b:26:ad:0d:a8:fb:
35:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:9B:38:52:91:78:84:93:B7:7D:F2:6C:A1:65:88:02:B3:C3:88:69
X509v3 Authority Key Identifier:
keyid:8D:C6:6A:64:75:36:43:B0:E7:0F:B9:B2:BD:40:09:CB:EC:70:54:41
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91733A8/14202384A1B411EAAF2E630FC4F9AE02/jcZqZHU2Q7DnD7myvUAJy-xwVEE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jcZqZHU2Q7DnD7myvUAJy-xwVEE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91733A8/14202384A1B411EAAF2E630FC4F9AE02/F6810AC0D0DC11EA9B1DF432C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
43.245.204.0/22
103.31.80.0/22
125.209.64.0/18
202.141.224.0/19
202.142.160.0/19
IPv6:
2401:8e00::/32
Signature Algorithm: sha256WithRSAEncryption
9c:cf:5f:92:71:20:21:c7:00:16:41:6f:55:5e:4b:46:45:f5:
e4:fc:35:6a:73:11:b9:3d:9a:19:c6:c3:1d:0a:0d:56:c0:7b:
f8:2d:7a:61:75:6e:0d:36:bb:64:e3:b2:66:da:2a:b2:20:27:
20:e1:35:ca:bd:b8:4a:f6:65:de:8b:69:39:a8:61:45:fe:8e:
13:c5:d2:bf:47:98:79:49:ad:42:59:5d:7f:36:eb:9d:3e:45:
f2:9e:3f:25:79:f9:dd:8b:3f:e9:c9:9c:57:9b:6a:75:b8:bc:
8c:a3:1b:79:a3:cb:30:eb:7b:bb:8c:c3:e3:e0:5d:49:27:40:
27:ea:5e:cf:1e:df:34:11:a8:63:f2:54:3a:8e:35:54:57:35:
30:34:e5:9f:38:c5:13:da:3b:26:6c:ef:63:bc:a2:61:46:cd:
be:60:f5:b2:9e:74:b3:29:b3:04:f1:6b:32:a1:8e:7a:db:3f:
7d:d1:f9:8d:f7:a7:10:6a:96:ea:e9:33:6e:89:da:d7:bc:4f:
e6:92:a2:67:6d:90:68:43:06:96:9e:6b:40:2d:dc:3d:aa:54:
3d:ff:cf:50:f0:c2:40:27:d6:54:35:a6:3b:af:b7:5b:c9:25:
a7:01:54:56:4d:05:69:70:e9:dd:d9:a8:16:8c:72:55:b9:4f:
cd:36:da:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 21:05:29 2024 by rpki-client on console-fra.rpki-client.org