Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A917452D/AA42171E276811ED9A221730C4F9AE02/5ABAAD76D21811EE93095285C4F9AE02.roa
File: 5ABAAD76D21811EE93095285C4F9AE02.roa (raw, json)
Hash identifier: jqEeR5aXqpprEUgBz7NvCCwqJPX6Jw/fXVk1HSO4iwY=
Subject key identifier: DF:CC:5C:B4:9B:46:BF:F4:39:1A:D9:D6:4A:63:9C:43:2F:85:AF:35
Certificate issuer: /CN=A917452D/serialNumber=E4AE80372A867987BB2A0ABBE110AB804370D5E3
Certificate serial: 019E
Authority key identifier: E4:AE:80:37:2A:86:79:87:BB:2A:0A:BB:E1:10:AB:80:43:70:D5:E3
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5K6ANyqGeYe7Kgq74RCrgENw1eM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917452D/AA42171E276811ED9A221730C4F9AE02/5ABAAD76D21811EE93095285C4F9AE02.roa
Signing time: Fri 23 Feb 2024 08:00:42 +0000
ROA not before: Fri 23 Feb 2024 08:00:42 +0000
ROA not after: Sun 02 Mar 2025 00:00:00 +0000
asID: 9506
IP address blocks: 202.166.0.0/17 maxlen: 17
202.166.0.0/19 maxlen: 19
202.166.1.0/24 maxlen: 24
202.166.32.0/19 maxlen: 19
202.166.64.0/18 maxlen: 18
202.166.123.0/24 maxlen: 24
202.166.128.0/19 maxlen: 19
2400:d800::/30 maxlen: 30
2400:d800::/31 maxlen: 31
2400:d800::/32 maxlen: 32
2400:d801::/32 maxlen: 32
2400:d801:3f00::/40 maxlen: 40
2400:d801:9000::/36 maxlen: 44
2400:d801:a000::/36 maxlen: 44
2400:d802::/31 maxlen: 31
2400:d802::/32 maxlen: 32
2400:d802:500::/40 maxlen: 44
2400:d802:800::/40 maxlen: 44
2400:d802:1100::/40 maxlen: 44
2400:d802:1310::/44 maxlen: 44
2400:d802:1410::/44 maxlen: 44
2400:d802:1480::/41 maxlen: 44
2400:d802:1800::/40 maxlen: 44
2400:d802:1900::/40 maxlen: 44
2400:d802:1a00::/40 maxlen: 44
2400:d802:1c00::/40 maxlen: 44
2400:d802:1d00::/40 maxlen: 44
2400:d802:1f00::/40 maxlen: 44
2400:d802:2100::/40 maxlen: 44
2400:d802:2300::/40 maxlen: 44
2400:d802:2600::/40 maxlen: 44
2400:d802:2900::/40 maxlen: 44
2400:d802:2a00::/40 maxlen: 44
2400:d802:2d00::/40 maxlen: 44
2400:d802:3200::/40 maxlen: 44
2400:d802:3300::/40 maxlen: 44
2400:d802:3600::/40 maxlen: 44
2400:d802:3a00::/40 maxlen: 44
2400:d802:9d00::/40 maxlen: 44
2400:d802:9f00::/40 maxlen: 44
2400:d802:a000::/36 maxlen: 44
2400:d803::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A917452D/AA42171E276811ED9A221730C4F9AE02/5K6ANyqGeYe7Kgq74RCrgENw1eM.crl
rsync://rpki.apnic.net/member_repository/A917452D/AA42171E276811ED9A221730C4F9AE02/5K6ANyqGeYe7Kgq74RCrgENw1eM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5K6ANyqGeYe7Kgq74RCrgENw1eM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 28 May 2024 04:12:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 414 (0x19e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917452D/serialNumber=E4AE80372A867987BB2A0ABBE110AB804370D5E3
Validity
Not Before: Feb 23 08:00:42 2024 GMT
Not After : Mar 2 00:00:00 2025 GMT
Subject: CN=65d850a9-8418
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:26:2e:52:87:83:63:b3:34:8c:b7:d4:e1:be:
5f:08:b2:d6:4e:5b:86:ab:9f:4e:64:c9:a2:58:1d:
66:34:c4:71:07:3b:18:ba:f6:55:2c:21:80:c1:de:
58:2f:d6:b3:77:93:c5:85:a6:aa:5b:49:de:77:fc:
c5:c0:f9:f1:cf:24:76:83:ee:d9:62:52:05:ae:c1:
95:a4:72:81:1b:6b:fe:c8:bb:04:ad:7c:44:44:62:
bd:cc:a7:a5:87:98:8d:d3:9f:00:37:fd:56:27:ff:
31:d2:fe:fb:04:92:ac:81:52:a5:28:a8:ff:1f:f8:
d9:94:9b:7d:67:bb:d3:71:2f:3e:19:e7:df:2a:0b:
7e:4a:6c:df:da:63:4c:77:1f:40:4e:c9:c8:f1:41:
60:d5:8a:ea:b3:76:2a:b1:6c:71:9f:75:24:18:94:
64:f3:0c:48:36:77:59:77:a0:1a:df:5d:12:d3:a6:
d2:3c:7f:2a:65:20:c8:44:dd:26:98:b8:f4:ac:ba:
97:3a:a5:f3:df:54:ba:7a:4c:6d:85:24:7a:b6:01:
d9:04:d2:22:c6:79:ff:8e:f5:9b:4b:56:d3:6a:cc:
8b:b5:52:71:7b:5f:16:f5:e8:9d:80:64:92:80:c9:
1a:d1:89:c4:68:21:ab:73:f3:26:1e:71:a8:6f:db:
15:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:CC:5C:B4:9B:46:BF:F4:39:1A:D9:D6:4A:63:9C:43:2F:85:AF:35
X509v3 Authority Key Identifier:
keyid:E4:AE:80:37:2A:86:79:87:BB:2A:0A:BB:E1:10:AB:80:43:70:D5:E3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917452D/AA42171E276811ED9A221730C4F9AE02/5K6ANyqGeYe7Kgq74RCrgENw1eM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5K6ANyqGeYe7Kgq74RCrgENw1eM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917452D/AA42171E276811ED9A221730C4F9AE02/5ABAAD76D21811EE93095285C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
202.166.0.0-202.166.159.255
IPv6:
2400:d800::/30
Signature Algorithm: sha256WithRSAEncryption
e9:95:9d:15:3b:c7:d5:bc:30:ce:5e:e0:26:67:97:d1:ee:f1:
e1:50:dc:31:f8:a9:f9:e8:47:1c:2a:55:44:ca:be:06:02:49:
9d:32:6d:ac:a9:64:4c:ca:73:33:56:37:9b:14:65:61:f8:06:
c6:64:e5:28:d5:5e:d6:a6:d8:aa:c7:e7:a8:78:db:79:c9:45:
e4:ed:74:ad:9f:68:21:67:84:98:3a:f2:e5:90:e9:d7:b6:6a:
c5:b7:06:8e:a7:26:41:bd:ea:5e:d1:f4:c4:0c:ae:4a:4f:31:
f6:ed:57:96:de:b8:57:78:79:2c:c5:ff:8b:a2:cb:25:57:43:
22:1b:35:ba:33:70:f0:5a:b2:2c:56:59:42:3e:b1:81:78:75:
93:ca:b8:43:20:58:5c:cf:8d:7b:32:ba:2b:e3:45:35:91:7d:
23:97:35:3a:7f:1f:d5:45:78:d3:7e:d0:b8:46:c5:13:b0:a7:
f1:ca:ba:5f:f2:5b:5e:7f:f9:45:c5:f4:2c:c5:d8:6e:1c:da:
08:9b:0e:ef:a1:13:5c:af:1f:83:12:67:47:30:e5:f7:ac:83:
14:55:1d:73:7a:75:9d:e1:b4:6e:66:45:69:a4:47:65:75:cc:
27:a6:49:8d:45:b4:30:4e:2b:75:b7:8f:89:37:eb:04:bc:7a:
78:39:de:c2
-----BEGIN CERTIFICATE-----
MIIFhzCCBG+gAwIBAgICAZ4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NzQ1MkQxMTAvBgNVBAUTKEU0QUU4MDM3MkE4Njc5ODdCQjJBMEFCQkUxMTBBQjgw
NDM3MEQ1RTMwHhcNMjQwMjIzMDgwMDQyWhcNMjUwMzAyMDAwMDAwWjAYMRYwFAYD
VQQDEw02NWQ4NTBhOS04NDE4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA0yYuUoeDY7M0jLfU4b5fCLLWTluGq59OZMmiWB1mNMRxBzsYuvZVLCGAwd5Y
L9azd5PFhaaqW0ned/zFwPnxzyR2g+7ZYlIFrsGVpHKBG2v+yLsErXxERGK9zKel
h5iN058AN/1WJ/8x0v77BJKsgVKlKKj/H/jZlJt9Z7vTcS8+GeffKgt+Smzf2mNM
dx9ATsnI8UFg1Yrqs3YqsWxxn3UkGJRk8wxINndZd6Aa310S06bSPH8qZSDIRN0m
mLj0rLqXOqXz31S6ekxthSR6tgHZBNIixnn/jvWbS1bTasyLtVJxe18W9eidgGSS
gMka0YnEaCGrc/MmHnGob9sV2wIDAQABo4ICqzCCAqcwHQYDVR0OBBYEFN/MXLSb
Rr/0ORrZ1kpjnEMvha81MB8GA1UdIwQYMBaAFOSugDcqhnmHuyoKu+EQq4BDcNXj
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NDUyRC9BQTQyMTcxRTI3
NjgxMUVEOUEyMjE3MzBDNEY5QUUwMi81SzZBTnlxR2VZZTdLZ3E3NFJDcmdFTncx
ZU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzVLNkFOeXFHZVllN0tncTc0UkNyZ0VOdzFlTS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
NzQ1MkQvQUE0MjE3MUUyNzY4MTFFRDlBMjIxNzMwQzRGOUFFMDIvNUFCQUFENzZE
MjE4MTFFRTkzMDk1Mjg1QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwNQYIKwYBBQUHAQcBAf8E
JjAkMBMEAgABMA0wCwMDAcqmAwQFyqaAMA0EAgACMAcDBQIkANgAMA0GCSqGSIb3
DQEBCwUAA4IBAQDplZ0VO8fVvDDOXuAmZ5fR7vHhUNwx+Kn56EccKlVEyr4GAkmd
Mm2sqWRMynMzVjebFGVh+AbGZOUo1V7Wptiqx+eoeNt5yUXk7XStn2ghZ4SYOvLl
kOnXtmrFtwaOpyZBvepe0fTEDK5KTzH27VeW3rhXeHksxf+LosslV0MiGzW6M3Dw
WrIsVllCPrGBeHWTyrhDIFhcz417Mror40U1kX0jlzU6fx/VRXjTftC4RsUTsKfx
yrpf8ltef/lFxfQsxdhuHNoImw7voRNcrx+DEmdHMOX3rIMUVR1zenWd4bRuZkVp
pEdldcwnpkmNRbQwTit1t4+JN+sEvHp4Od7C
-----END CERTIFICATE-----
Generated at Tue May 21 05:35:02 2024 by rpki-client on console-ams.rpki-client.org