Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9178EB0/65D1DB2CDAEA11EA958EB35BC4F9AE02/5DC77B0E30AB11EC876F1B41C4F9AE02.roa
File: 5DC77B0E30AB11EC876F1B41C4F9AE02.roa (raw, json)
Hash identifier: eAvchTE2mjoaLizoiap/tIEL3DGgf3r4bWQpO2iGLTU=
Subject key identifier: 4B:F8:BB:C8:E7:B8:CC:5A:41:86:F0:97:D8:83:DD:54:1E:F4:14:22
Certificate issuer: /CN=A9178EB0/serialNumber=AAA62DB47F012B26DD8698E2CC35DE8F29437761
Certificate serial: 07CF
Authority key identifier: AA:A6:2D:B4:7F:01:2B:26:DD:86:98:E2:CC:35:DE:8F:29:43:77:61
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qqYttH8BKybdhpjizDXejylDd2E.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9178EB0/65D1DB2CDAEA11EA958EB35BC4F9AE02/5DC77B0E30AB11EC876F1B41C4F9AE02.roa
Signing time: Tue 10 Dec 2024 21:20:12 +0000
ROA not before: Tue 10 Dec 2024 21:20:12 +0000
ROA not after: Sat 31 Jan 2026 00:00:00 +0000
asID: 45753
IP address blocks: 103.1.224.0/22 maxlen: 22
103.1.224.0/24 maxlen: 24
103.1.225.0/24 maxlen: 24
103.1.226.0/24 maxlen: 24
103.1.227.0/24 maxlen: 24
103.199.104.0/22 maxlen: 24
112.121.160.0/19 maxlen: 19
112.121.160.0/24 maxlen: 24
112.121.161.0/24 maxlen: 24
112.121.162.0/24 maxlen: 24
112.121.163.0/24 maxlen: 24
112.121.164.0/24 maxlen: 24
112.121.165.0/24 maxlen: 24
112.121.166.0/24 maxlen: 24
112.121.167.0/24 maxlen: 24
112.121.168.0/24 maxlen: 24
112.121.169.0/24 maxlen: 24
112.121.170.0/24 maxlen: 24
112.121.172.0/24 maxlen: 24
112.121.173.0/24 maxlen: 24
112.121.174.0/24 maxlen: 24
112.121.175.0/24 maxlen: 24
112.121.176.0/24 maxlen: 24
112.121.177.0/24 maxlen: 24
112.121.178.0/24 maxlen: 24
112.121.179.0/24 maxlen: 24
112.121.180.0/24 maxlen: 24
112.121.181.0/24 maxlen: 24
112.121.182.0/24 maxlen: 24
112.121.183.0/24 maxlen: 24
112.121.184.0/24 maxlen: 24
112.121.185.0/24 maxlen: 24
112.121.186.0/24 maxlen: 24
112.121.187.0/24 maxlen: 24
112.121.188.0/24 maxlen: 24
112.121.189.0/24 maxlen: 24
112.121.190.0/24 maxlen: 24
112.121.191.0/24 maxlen: 24
137.59.20.0/22 maxlen: 24
180.178.32.0/19 maxlen: 19
180.178.32.0/24 maxlen: 24
180.178.33.0/24 maxlen: 24
180.178.34.0/24 maxlen: 24
180.178.35.0/24 maxlen: 24
180.178.36.0/24 maxlen: 24
180.178.37.0/24 maxlen: 24
180.178.38.0/24 maxlen: 24
180.178.39.0/24 maxlen: 24
180.178.40.0/24 maxlen: 24
180.178.41.0/24 maxlen: 24
180.178.42.0/24 maxlen: 24
180.178.43.0/24 maxlen: 24
180.178.44.0/24 maxlen: 24
180.178.45.0/24 maxlen: 24
180.178.46.0/24 maxlen: 24
180.178.47.0/24 maxlen: 24
180.178.48.0/24 maxlen: 24
180.178.49.0/24 maxlen: 24
180.178.50.0/24 maxlen: 24
180.178.51.0/24 maxlen: 24
180.178.52.0/24 maxlen: 24
180.178.53.0/24 maxlen: 24
180.178.54.0/24 maxlen: 24
180.178.55.0/24 maxlen: 24
180.178.56.0/24 maxlen: 24
180.178.57.0/24 maxlen: 24
180.178.58.0/24 maxlen: 24
180.178.59.0/24 maxlen: 24
180.178.60.0/24 maxlen: 24
180.178.61.0/24 maxlen: 24
180.178.62.0/24 maxlen: 24
180.178.63.0/24 maxlen: 24
182.16.0.0/17 maxlen: 17
182.16.0.0/18 maxlen: 18
182.16.0.0/24 maxlen: 24
182.16.1.0/24 maxlen: 24
182.16.2.0/24 maxlen: 24
182.16.3.0/24 maxlen: 24
182.16.4.0/24 maxlen: 24
182.16.5.0/24 maxlen: 24
182.16.6.0/24 maxlen: 24
182.16.7.0/24 maxlen: 24
182.16.8.0/24 maxlen: 24
182.16.9.0/24 maxlen: 24
182.16.10.0/24 maxlen: 24
182.16.11.0/24 maxlen: 24
182.16.12.0/24 maxlen: 24
182.16.13.0/24 maxlen: 24
182.16.14.0/24 maxlen: 24
182.16.15.0/24 maxlen: 24
182.16.16.0/24 maxlen: 24
182.16.17.0/24 maxlen: 24
182.16.18.0/24 maxlen: 24
182.16.19.0/24 maxlen: 24
182.16.20.0/24 maxlen: 24
182.16.21.0/24 maxlen: 24
182.16.22.0/24 maxlen: 24
182.16.23.0/24 maxlen: 24
182.16.24.0/24 maxlen: 24
182.16.25.0/24 maxlen: 24
182.16.26.0/24 maxlen: 24
182.16.27.0/24 maxlen: 24
182.16.28.0/24 maxlen: 24
182.16.29.0/24 maxlen: 24
182.16.30.0/24 maxlen: 24
182.16.31.0/24 maxlen: 24
182.16.32.0/24 maxlen: 24
182.16.33.0/24 maxlen: 24
182.16.34.0/24 maxlen: 24
182.16.35.0/24 maxlen: 24
182.16.36.0/24 maxlen: 24
182.16.37.0/24 maxlen: 24
182.16.38.0/24 maxlen: 24
182.16.39.0/24 maxlen: 24
182.16.40.0/24 maxlen: 24
182.16.41.0/24 maxlen: 24
182.16.42.0/24 maxlen: 24
182.16.43.0/24 maxlen: 24
182.16.44.0/24 maxlen: 24
182.16.45.0/24 maxlen: 24
182.16.46.0/24 maxlen: 24
182.16.47.0/24 maxlen: 24
182.16.48.0/24 maxlen: 24
182.16.49.0/24 maxlen: 24
182.16.50.0/24 maxlen: 24
182.16.51.0/24 maxlen: 24
182.16.52.0/24 maxlen: 24
182.16.53.0/24 maxlen: 24
182.16.54.0/24 maxlen: 24
182.16.55.0/24 maxlen: 24
182.16.56.0/24 maxlen: 24
182.16.57.0/24 maxlen: 24
182.16.58.0/24 maxlen: 24
182.16.59.0/24 maxlen: 24
182.16.60.0/24 maxlen: 24
182.16.61.0/24 maxlen: 24
182.16.62.0/24 maxlen: 24
182.16.63.0/24 maxlen: 24
182.16.64.0/21 maxlen: 21
182.16.64.0/24 maxlen: 24
182.16.65.0/24 maxlen: 24
182.16.66.0/24 maxlen: 24
182.16.67.0/24 maxlen: 24
182.16.68.0/24 maxlen: 24
182.16.69.0/24 maxlen: 24
182.16.70.0/24 maxlen: 24
182.16.71.0/24 maxlen: 24
182.16.72.0/24 maxlen: 24
182.16.73.0/24 maxlen: 24
182.16.74.0/24 maxlen: 24
182.16.75.0/24 maxlen: 24
182.16.76.0/24 maxlen: 24
182.16.77.0/24 maxlen: 24
182.16.78.0/24 maxlen: 24
182.16.79.0/24 maxlen: 24
182.16.80.0/24 maxlen: 24
182.16.81.0/24 maxlen: 24
182.16.82.0/24 maxlen: 24
182.16.83.0/24 maxlen: 24
182.16.84.0/24 maxlen: 24
182.16.85.0/24 maxlen: 24
182.16.86.0/24 maxlen: 24
182.16.87.0/24 maxlen: 24
182.16.88.0/24 maxlen: 24
182.16.89.0/24 maxlen: 24
182.16.90.0/24 maxlen: 24
182.16.91.0/24 maxlen: 24
182.16.92.0/24 maxlen: 24
182.16.93.0/24 maxlen: 24
182.16.94.0/24 maxlen: 24
182.16.95.0/24 maxlen: 24
182.16.96.0/24 maxlen: 24
182.16.97.0/24 maxlen: 24
182.16.98.0/24 maxlen: 24
182.16.100.0/24 maxlen: 24
182.16.101.0/24 maxlen: 24
182.16.102.0/24 maxlen: 24
182.16.103.0/24 maxlen: 24
182.16.104.0/24 maxlen: 24
182.16.105.0/24 maxlen: 24
182.16.106.0/24 maxlen: 24
182.16.107.0/24 maxlen: 24
182.16.108.0/24 maxlen: 24
182.16.109.0/24 maxlen: 24
182.16.110.0/24 maxlen: 24
182.16.111.0/24 maxlen: 24
182.16.112.0/24 maxlen: 24
182.16.113.0/24 maxlen: 24
182.16.114.0/24 maxlen: 24
182.16.115.0/24 maxlen: 24
182.16.116.0/24 maxlen: 24
182.16.117.0/24 maxlen: 24
182.16.118.0/24 maxlen: 24
182.16.119.0/24 maxlen: 24
182.16.120.0/24 maxlen: 24
182.16.121.0/24 maxlen: 24
182.16.122.0/24 maxlen: 24
182.16.123.0/24 maxlen: 24
182.16.124.0/24 maxlen: 24
182.16.125.0/24 maxlen: 24
182.16.126.0/24 maxlen: 24
182.16.127.0/24 maxlen: 24
2406:8680::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9178EB0/65D1DB2CDAEA11EA958EB35BC4F9AE02/qqYttH8BKybdhpjizDXejylDd2E.crl
rsync://rpki.apnic.net/member_repository/A9178EB0/65D1DB2CDAEA11EA958EB35BC4F9AE02/qqYttH8BKybdhpjizDXejylDd2E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qqYttH8BKybdhpjizDXejylDd2E.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 21 Feb 2025 05:15:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1999 (0x7cf)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9178EB0
Validity
Not Before: Dec 10 21:20:12 2024 GMT
Not After : Jan 31 00:00:00 2026 GMT
Subject: CN=6758b08c-a986
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:78:02:9f:ca:ec:8e:1d:e3:84:f0:f0:3e:ad:
02:1d:88:ff:0f:54:bd:6f:3d:e3:06:1b:8b:86:da:
5d:57:62:1b:4c:b8:71:b9:0e:67:81:d7:af:bb:35:
f9:94:42:63:aa:be:b5:d1:e2:ce:ae:d8:8a:9d:1d:
87:e6:09:92:15:3b:93:ba:57:57:c1:db:ff:43:d4:
9a:2a:56:01:43:c1:a1:c4:8e:46:fe:af:cf:43:5f:
e6:ed:92:75:0f:27:92:23:68:eb:74:62:41:83:dd:
c0:62:b8:e6:bf:0f:37:76:08:c9:01:c6:fc:9d:35:
db:d9:b6:af:66:8d:ed:20:3b:a0:08:17:61:33:96:
78:e3:7c:73:5a:a0:cb:cf:80:52:31:bb:5c:6c:12:
b7:65:cd:8a:00:77:cb:31:7b:95:4f:f9:57:2b:84:
f5:81:5b:5e:95:06:1a:38:1d:f0:dc:ed:a4:cc:94:
b5:2f:32:6e:3d:3e:5b:2c:1b:b7:25:ba:1d:da:06:
86:e0:e1:8d:f1:7f:81:1f:aa:d4:64:46:e5:3d:ad:
94:b9:5b:19:8d:30:15:7e:ed:20:67:20:58:14:22:
34:21:36:c8:74:5a:e8:1b:d8:aa:e6:2d:03:98:25:
bc:cb:aa:e9:78:2c:3e:c7:a2:05:27:53:2c:4f:bb:
18:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:F8:BB:C8:E7:B8:CC:5A:41:86:F0:97:D8:83:DD:54:1E:F4:14:22
X509v3 Authority Key Identifier:
keyid:AA:A6:2D:B4:7F:01:2B:26:DD:86:98:E2:CC:35:DE:8F:29:43:77:61
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9178EB0/65D1DB2CDAEA11EA958EB35BC4F9AE02/qqYttH8BKybdhpjizDXejylDd2E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qqYttH8BKybdhpjizDXejylDd2E.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9178EB0/65D1DB2CDAEA11EA958EB35BC4F9AE02/5DC77B0E30AB11EC876F1B41C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.1.224.0/22
103.199.104.0/22
112.121.160.0/19
137.59.20.0/22
180.178.32.0/19
182.16.0.0/17
IPv6:
2406:8680::/32
Signature Algorithm: sha256WithRSAEncryption
07:2a:67:d7:93:39:0b:6f:dd:9d:a2:5a:dd:de:15:f4:0d:95:
e8:4a:2d:44:4b:d3:2e:5a:43:f5:b5:eb:6f:97:2f:e9:36:11:
10:a4:43:5e:c0:43:ee:d8:df:67:cb:3a:80:61:0f:ae:d1:d1:
8d:39:5d:ee:4d:cd:63:ec:75:c1:b2:31:8c:eb:e7:d1:77:21:
4d:58:9d:7e:e2:1b:6b:00:db:3a:61:9a:90:f4:7f:74:01:ca:
c6:3e:49:6b:fd:0d:84:90:dd:73:ae:d7:0e:ee:29:49:f3:c0:
45:50:d8:74:04:d8:bf:46:f0:57:22:b7:be:87:25:a6:f1:c4:
a4:bb:e6:3d:27:a0:9d:a2:e2:be:b9:da:be:7b:0b:eb:fc:3c:
2d:3e:db:80:ad:dc:11:0d:90:0e:95:80:1b:8b:8c:61:1b:1e:
c0:83:45:4a:30:38:cd:c7:db:0c:c8:0b:66:5c:8e:d8:ad:93:
66:fa:f8:53:28:13:d9:c3:69:3a:a6:d4:9b:81:0b:51:61:c7:
09:37:01:09:98:5a:d4:c0:c2:7b:1e:b9:58:d3:1a:75:bf:ac:
43:0d:49:2d:14:4d:4c:ac:4b:f7:27:2a:df:a7:7c:89:d5:6e:
f0:54:21:c4:50:44:a4:36:5a:77:1b:97:9b:05:f1:44:be:81:
92:bd:8d:d2
-----BEGIN CERTIFICATE-----
MIIFnjCCBIagAwIBAgICB88wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NzhFQjAxMTAvBgNVBAUTKEFBQTYyREI0N0YwMTJCMjZERDg2OThFMkNDMzVERThG
Mjk0Mzc3NjEwHhcNMjQxMjEwMjEyMDEyWhcNMjYwMTMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02NzU4YjA4Yy1hOTg2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAwHgCn8rsjh3jhPDwPq0CHYj/D1S9bz3jBhuLhtpdV2IbTLhxuQ5ngdevuzX5
lEJjqr610eLOrtiKnR2H5gmSFTuTuldXwdv/Q9SaKlYBQ8GhxI5G/q/PQ1/m7ZJ1
DyeSI2jrdGJBg93AYrjmvw83dgjJAcb8nTXb2bavZo3tIDugCBdhM5Z443xzWqDL
z4BSMbtcbBK3Zc2KAHfLMXuVT/lXK4T1gVtelQYaOB3w3O2kzJS1LzJuPT5bLBu3
Jbod2gaG4OGN8X+BH6rUZEblPa2UuVsZjTAVfu0gZyBYFCI0ITbIdFroG9iq5i0D
mCW8y6rpeCw+x6IFJ1MsT7sYRQIDAQABo4ICwjCCAr4wHQYDVR0OBBYEFEv4u8jn
uMxaQYbwl9iD3VQe9BQiMB8GA1UdIwQYMBaAFKqmLbR/ASsm3YaY4sw13o8pQ3dh
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3OEVCMC82NUQxREIyQ0RB
RUExMUVBOTU4RUIzNUJDNEY5QUUwMi9xcVl0dEg4Qkt5YmRocGppekRYZWp5bERk
MkUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3FxWXR0SDhCS3liZGhwaml6RFhlanlsRGQyRS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
NzhFQjAvNjVEMURCMkNEQUVBMTFFQTk1OEVCMzVCQzRGOUFFMDIvNURDNzdCMEUz
MEFCMTFFQzg3NkYxQjQxQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwTAYIKwYBBQUHAQcBAf8E
PTA7MCoEAgABMCQDBAJnAeADBAJnx2gDBAVweaADBAKJOxQDBAW0siADBAe2EAAw
DQQCAAIwBwMFACQGhoAwDQYJKoZIhvcNAQELBQADggEBAAcqZ9eTOQtv3Z2iWt3e
FfQNlehKLURL0y5aQ/W162+XL+k2ERCkQ17AQ+7Y32fLOoBhD67R0Y05Xe5NzWPs
dcGyMYzr59F3IU1YnX7iG2sA2zphmpD0f3QBysY+SWv9DYSQ3XOu1w7uKUnzwEVQ
2HQE2L9G8Fcit76HJabxxKS75j0noJ2i4r652r57C+v8PC0+24Ct3BENkA6VgBuL
jGEbHsCDRUowOM3H2wzIC2Zcjtitk2b6+FMoE9nDaTqm1JuBC1Fhxwk3AQmYWtTA
wnseuVjTGnW/rEMNSS0UTUysS/cnKt+nfInVbvBUIcRQRKQ2Wncbl5sF8US+gZK9
jdI=
-----END CERTIFICATE-----
Generated at Sun Feb 16 20:15:09 2025 by rpki-client