Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A917EB41/18D7955617BE11ED8B325938C4F9AE02/22D1D50A58BC11ED96790F65C4F9AE02.roa
File: 22D1D50A58BC11ED96790F65C4F9AE02.roa (raw, json)
Hash identifier: 38M/018HE8j1auWfLuzY8vpRa41iqNX3JHdrD2gzEG8=
Subject key identifier: 2D:B7:36:50:E7:29:0D:41:18:85:14:56:E9:DB:0A:C6:09:F7:1B:76
Certificate issuer: /CN=A917EB41/serialNumber=9F43B26ABA728E82F626337FA26521F8E69FBBCB
Certificate serial: 016A
Authority key identifier: 9F:43:B2:6A:BA:72:8E:82:F6:26:33:7F:A2:65:21:F8:E6:9F:BB:CB
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n0OyarpyjoL2JjN_omUh-Oafu8s.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917EB41/18D7955617BE11ED8B325938C4F9AE02/22D1D50A58BC11ED96790F65C4F9AE02.roa
Signing time: Wed 03 Jan 2024 04:25:15 +0000
ROA not before: Wed 03 Jan 2024 04:25:15 +0000
ROA not after: Sun 02 Mar 2025 00:00:00 +0000
asID: 9824
IP address blocks: 27.136.0.0/13 maxlen: 24
42.144.0.0/13 maxlen: 24
59.166.0.0/16 maxlen: 24
59.168.0.0/14 maxlen: 24
60.58.0.0/15 maxlen: 24
60.60.0.0/15 maxlen: 24
60.62.0.0/16 maxlen: 24
61.21.0.0/16 maxlen: 24
61.22.0.0/15 maxlen: 24
61.24.0.0/14 maxlen: 24
110.128.0.0/13 maxlen: 24
116.64.0.0/15 maxlen: 24
116.214.16.0/21 maxlen: 24
116.220.0.0/14 maxlen: 24
119.168.0.0/13 maxlen: 24
124.140.0.0/14 maxlen: 24
124.144.0.0/15 maxlen: 24
125.8.0.0/13 maxlen: 24
203.165.0.0/16 maxlen: 24
210.20.0.0/16 maxlen: 24
210.194.0.0/16 maxlen: 24
220.152.0.0/18 maxlen: 24
220.152.64.0/19 maxlen: 24
2001:ff0::/32 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A917EB41/18D7955617BE11ED8B325938C4F9AE02/n0OyarpyjoL2JjN_omUh-Oafu8s.crl
rsync://rpki.apnic.net/member_repository/A917EB41/18D7955617BE11ED8B325938C4F9AE02/n0OyarpyjoL2JjN_omUh-Oafu8s.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n0OyarpyjoL2JjN_omUh-Oafu8s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 27 Nov 2024 20:33:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 362 (0x16a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917EB41/serialNumber=9F43B26ABA728E82F626337FA26521F8E69FBBCB
Validity
Not Before: Jan 3 04:25:15 2024 GMT
Not After : Mar 2 00:00:00 2025 GMT
Subject: CN=6594e1ab-6833
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:6d:6d:f4:c1:ae:9a:b1:a2:56:1d:fd:1d:ea:
0f:3a:fb:73:25:41:c0:f4:2d:23:71:e4:23:f3:eb:
92:ee:85:f2:25:7e:c9:b5:da:ce:60:fa:96:53:ca:
bc:bc:f0:c7:de:5b:c5:48:8b:61:6c:65:ef:ac:ab:
b6:7f:84:ae:b1:af:b3:91:e5:97:45:2e:7e:91:b6:
9e:25:6d:92:5a:49:b9:ec:d6:c7:a7:35:e9:80:fe:
1f:b2:a1:11:a5:30:bf:9e:57:e5:61:4f:bd:05:df:
9d:7f:0a:4c:f4:7e:69:6d:30:f2:8a:a7:fa:2e:7c:
95:ff:a9:bf:85:c4:47:9c:36:39:67:68:3d:cb:34:
8b:ae:a7:67:7c:df:b8:3f:6e:3b:ed:c6:a2:25:da:
d7:b8:81:60:28:04:2a:8a:dc:26:ce:30:2b:f7:83:
1d:c1:96:35:71:43:74:c6:7b:d3:36:c2:28:05:a6:
b4:8c:07:46:f9:a3:bc:f5:0c:99:88:05:9e:88:4d:
bf:7f:c6:08:1d:52:c1:8d:f4:6b:69:7f:58:f4:75:
5e:91:90:9a:78:eb:b6:8d:0d:52:b5:7f:9d:1b:1b:
80:60:3e:09:a0:b9:a0:8f:67:66:a1:28:77:0f:d6:
4a:fd:5f:e6:0c:89:eb:04:77:c2:1a:97:ff:a5:a6:
44:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:B7:36:50:E7:29:0D:41:18:85:14:56:E9:DB:0A:C6:09:F7:1B:76
X509v3 Authority Key Identifier:
keyid:9F:43:B2:6A:BA:72:8E:82:F6:26:33:7F:A2:65:21:F8:E6:9F:BB:CB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917EB41/18D7955617BE11ED8B325938C4F9AE02/n0OyarpyjoL2JjN_omUh-Oafu8s.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n0OyarpyjoL2JjN_omUh-Oafu8s.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917EB41/18D7955617BE11ED8B325938C4F9AE02/22D1D50A58BC11ED96790F65C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
27.136.0.0/13
42.144.0.0/13
59.166.0.0/16
59.168.0.0/14
60.58.0.0-60.62.255.255
61.21.0.0-61.27.255.255
110.128.0.0/13
116.64.0.0/15
116.214.16.0/21
116.220.0.0/14
119.168.0.0/13
124.140.0.0-124.145.255.255
125.8.0.0/13
203.165.0.0/16
210.20.0.0/16
210.194.0.0/16
220.152.0.0-220.152.95.255
IPv6:
2001:ff0::/32
Signature Algorithm: sha256WithRSAEncryption
6f:8b:df:6e:b4:3a:3d:2b:c2:34:a7:7a:7d:95:1c:34:91:c8:
75:c4:52:a5:8d:54:f8:83:d0:c9:ec:42:aa:b3:f9:6a:61:2a:
50:2e:c5:a2:34:bf:f3:16:8b:58:05:3c:a6:69:98:bc:bb:73:
83:40:96:cc:b5:42:65:e2:57:95:ea:e0:95:d5:59:85:bb:e2:
88:9c:af:bd:d2:70:d2:44:2c:10:c0:23:67:bb:1d:22:92:38:
4c:c7:8b:6e:02:ec:e0:da:2a:d1:7b:e8:25:b4:df:92:a3:61:
5a:41:e3:69:65:a5:43:93:18:b0:97:c9:45:28:d1:bf:29:b7:
b4:69:f6:b6:d1:d2:06:26:c1:21:95:b1:ab:c2:8e:ab:84:07:
0c:cd:4d:c0:2b:82:5d:a2:70:a7:dd:c5:49:3f:06:0b:72:b1:
ac:1a:a5:2d:57:df:7e:55:a4:fb:cd:b8:87:d6:39:0a:f8:62:
95:66:f8:14:3a:c7:9b:5a:45:4c:53:ca:53:aa:95:61:c9:5c:
fd:19:61:fa:c0:9a:63:c6:0e:b2:49:9c:9f:cf:a4:de:f0:73:
18:8e:c7:e5:27:9e:ab:2b:df:b5:6e:8e:81:1f:00:18:c3:21:
5a:3a:e3:e3:35:5b:b2:a5:f7:90:02:db:9e:99:39:53:84:61:
3c:df:28:00
-----BEGIN CERTIFICATE-----
MIIF8DCCBNigAwIBAgICAWowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
N0VCNDExMTAvBgNVBAUTKDlGNDNCMjZBQkE3MjhFODJGNjI2MzM3RkEyNjUyMUY4
RTY5RkJCQ0IwHhcNMjQwMTAzMDQyNTE1WhcNMjUwMzAyMDAwMDAwWjAYMRYwFAYD
VQQDEw02NTk0ZTFhYi02ODMzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAw21t9MGumrGiVh39HeoPOvtzJUHA9C0jceQj8+uS7oXyJX7JtdrOYPqWU8q8
vPDH3lvFSIthbGXvrKu2f4Susa+zkeWXRS5+kbaeJW2SWkm57NbHpzXpgP4fsqER
pTC/nlflYU+9Bd+dfwpM9H5pbTDyiqf6LnyV/6m/hcRHnDY5Z2g9yzSLrqdnfN+4
P2477caiJdrXuIFgKAQqitwmzjAr94MdwZY1cUN0xnvTNsIoBaa0jAdG+aO89QyZ
iAWeiE2/f8YIHVLBjfRraX9Y9HVekZCaeOu2jQ1StX+dGxuAYD4JoLmgj2dmoSh3
D9ZK/V/mDInrBHfCGpf/paZEJwIDAQABo4IDFDCCAxAwHQYDVR0OBBYEFC23NlDn
KQ1BGIUUVunbCsYJ9xt2MB8GA1UdIwQYMBaAFJ9Dsmq6co6C9iYzf6JlIfjmn7vL
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3RUI0MS8xOEQ3OTU1NjE3
QkUxMUVEOEIzMjU5MzhDNEY5QUUwMi9uME95YXJweWpvTDJKak5fb21VaC1PYWZ1
OHMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL24wT3lhcnB5am9MMkpqTl9vbVVoLU9hZnU4cy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
N0VCNDEvMThENzk1NTYxN0JFMTFFRDhCMzI1OTM4QzRGOUFFMDIvMjJEMUQ1MEE1
OEJDMTFFRDk2NzkwRjY1QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwgZ0GCCsGAQUFBwEHAQH/
BIGNMIGKMHkEAgABMHMDAwMbiAMDAyqQAwMAO6YDAwI7qDAKAwMBPDoDAwA8PjAK
AwMAPRUDAwI9GAMDA26AAwMBdEADBAN01hADAwJ03AMDA3eoMAoDAwJ8jAMDAXyQ
AwMDfQgDAwDLpQMDANIUAwMA0sIwCwMDA9yYAwQF3JhAMA0EAgACMAcDBQAgAQ/w
MA0GCSqGSIb3DQEBCwUAA4IBAQBvi99utDo9K8I0p3p9lRw0kch1xFKljVT4g9DJ
7EKqs/lqYSpQLsWiNL/zFotYBTymaZi8u3ODQJbMtUJl4leV6uCV1VmFu+KInK+9
0nDSRCwQwCNnux0ikjhMx4tuAuzg2irRe+gltN+So2FaQeNpZaVDkxiwl8lFKNG/
Kbe0afa20dIGJsEhlbGrwo6rhAcMzU3AK4JdonCn3cVJPwYLcrGsGqUtV99+VaT7
zbiH1jkK+GKVZvgUOsebWkVMU8pTqpVhyVz9GWH6wJpjxg6ySZyfz6Te8HMYjsfl
J56rK9+1bo6BHwAYwyFaOuPjNVuypfeQAtuemTlThGE83ygA
-----END CERTIFICATE-----
Generated at Thu Nov 21 03:21:47 2024 by rpki-client on console-ams.rpki-client.org