Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9182F75/3C8CF63EFCBD11E688D3125EC4F9AE02/A3B7573EF01A11EE935E4329C4F9AE02.roa
File: A3B7573EF01A11EE935E4329C4F9AE02.roa (raw, json)
Hash identifier: WA5ikv41pY4Bzl1xNf46w/nTz1YDB+6f/VZ1EYjQOB8=
Subject key identifier: BB:9D:61:AE:F5:04:27:D1:16:FF:0C:2B:37:78:C0:2F:33:72:27:CE
Certificate issuer: /CN=A9182F75/serialNumber=420D8C2EC3D2479C5423ABFF74782B8A8A4B7DEA
Certificate serial: 1B14
Authority key identifier: 42:0D:8C:2E:C3:D2:47:9C:54:23:AB:FF:74:78:2B:8A:8A:4B:7D:EA
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Qg2MLsPSR5xUI6v_dHgriopLfeo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9182F75/3C8CF63EFCBD11E688D3125EC4F9AE02/A3B7573EF01A11EE935E4329C4F9AE02.roa
Signing time: Tue 02 Apr 2024 16:54:16 +0000
ROA not before: Tue 02 Apr 2024 16:54:16 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 132220
IP address blocks: 45.125.152.0/22 maxlen: 22
45.125.152.0/24 maxlen: 24
45.125.153.0/24 maxlen: 24
45.125.154.0/24 maxlen: 24
45.125.155.0/24 maxlen: 24
45.250.232.0/22 maxlen: 22
45.250.232.0/24 maxlen: 24
45.250.233.0/24 maxlen: 24
45.250.234.0/24 maxlen: 24
45.250.235.0/24 maxlen: 24
103.7.148.0/22 maxlen: 22
103.7.148.0/24 maxlen: 24
103.7.149.0/24 maxlen: 24
103.7.150.0/24 maxlen: 24
103.7.151.0/24 maxlen: 24
103.216.52.0/22 maxlen: 22
103.216.52.0/24 maxlen: 24
103.216.53.0/24 maxlen: 24
103.216.54.0/24 maxlen: 24
103.216.55.0/24 maxlen: 24
157.119.176.0/22 maxlen: 22
157.119.177.0/24 maxlen: 24
157.119.179.0/24 maxlen: 24
183.87.160.0/19 maxlen: 19
183.87.160.0/20 maxlen: 20
183.87.160.0/24 maxlen: 24
183.87.161.0/24 maxlen: 24
183.87.162.0/24 maxlen: 24
183.87.163.0/24 maxlen: 24
183.87.164.0/24 maxlen: 24
183.87.165.0/24 maxlen: 24
183.87.166.0/24 maxlen: 24
183.87.167.0/24 maxlen: 24
183.87.168.0/24 maxlen: 24
183.87.169.0/24 maxlen: 24
183.87.170.0/24 maxlen: 24
183.87.171.0/24 maxlen: 24
183.87.172.0/24 maxlen: 24
183.87.173.0/24 maxlen: 24
183.87.174.0/24 maxlen: 24
183.87.175.0/24 maxlen: 24
183.87.176.0/24 maxlen: 24
183.87.177.0/24 maxlen: 24
183.87.178.0/24 maxlen: 24
183.87.179.0/24 maxlen: 24
183.87.180.0/24 maxlen: 24
183.87.181.0/24 maxlen: 24
183.87.182.0/24 maxlen: 24
183.87.183.0/24 maxlen: 24
183.87.184.0/24 maxlen: 24
183.87.185.0/24 maxlen: 24
183.87.186.0/24 maxlen: 24
183.87.187.0/24 maxlen: 24
183.87.188.0/24 maxlen: 24
183.87.189.0/24 maxlen: 24
183.87.190.0/24 maxlen: 24
183.87.191.0/24 maxlen: 24
183.87.193.0/24 maxlen: 24
183.87.194.0/23 maxlen: 24
183.87.196.0/22 maxlen: 22
183.87.196.0/24 maxlen: 24
183.87.197.0/24 maxlen: 24
183.87.198.0/24 maxlen: 24
183.87.199.0/24 maxlen: 24
183.87.200.0/21 maxlen: 21
183.87.200.0/24 maxlen: 24
183.87.201.0/24 maxlen: 24
183.87.202.0/24 maxlen: 24
183.87.203.0/24 maxlen: 24
183.87.204.0/24 maxlen: 24
183.87.205.0/24 maxlen: 24
183.87.206.0/24 maxlen: 24
183.87.207.0/24 maxlen: 24
183.87.208.0/24 maxlen: 24
2403:7100::/32 maxlen: 32
2403:7100::/48 maxlen: 48
2403:7100:1::/48 maxlen: 48
2403:7100:2::/48 maxlen: 48
2403:7100:3::/48 maxlen: 48
2403:7100:4::/48 maxlen: 48
2403:7100:5::/48 maxlen: 48
2403:7100:6::/48 maxlen: 48
2403:7100:7::/48 maxlen: 48
2403:7100:8::/48 maxlen: 48
2403:7100:9::/48 maxlen: 48
2403:7100:a::/48 maxlen: 48
2403:7100:b::/48 maxlen: 48
2403:7100:10::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9182F75/3C8CF63EFCBD11E688D3125EC4F9AE02/Qg2MLsPSR5xUI6v_dHgriopLfeo.crl
rsync://rpki.apnic.net/member_repository/A9182F75/3C8CF63EFCBD11E688D3125EC4F9AE02/Qg2MLsPSR5xUI6v_dHgriopLfeo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Qg2MLsPSR5xUI6v_dHgriopLfeo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 06 Jun 2024 07:25:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6932 (0x1b14)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9182F75/serialNumber=420D8C2EC3D2479C5423ABFF74782B8A8A4B7DEA
Validity
Not Before: Apr 2 16:54:16 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=660c3838-188d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:56:04:ef:3e:20:d3:2b:be:f6:1e:c9:dc:66:
92:a5:57:9d:3a:bb:07:a1:4d:b4:a0:50:8c:d4:59:
aa:52:72:2c:3a:54:79:6b:a9:39:a1:4d:08:f5:55:
b5:d2:8e:8e:4b:6b:41:10:ea:08:58:62:b2:3a:f0:
91:32:ea:cd:55:83:c2:5e:94:72:83:15:ae:e9:4f:
99:63:8a:32:f2:48:97:74:37:a4:7d:b0:16:88:49:
53:d8:51:82:e0:ad:52:79:80:65:b5:85:ff:ee:a8:
38:9f:19:31:f1:eb:1f:d7:89:22:26:19:a3:b0:60:
0c:4b:9a:58:d2:e6:58:78:f2:c0:1c:b6:42:e4:ee:
6c:41:05:8a:68:d0:0b:9f:a6:54:9b:49:54:4c:a3:
88:1a:7a:0b:1d:4d:a0:c5:3f:15:ac:95:db:74:e6:
22:e9:7d:56:af:ad:e1:80:06:3a:e6:cf:81:37:81:
43:3a:ad:2f:6d:37:cd:b1:33:9b:da:36:55:70:33:
69:f6:da:ef:0d:ba:11:d6:7d:f5:6e:73:df:97:25:
67:36:34:b7:d9:45:8f:73:94:b0:83:fc:68:6d:7d:
2b:71:81:da:78:b6:9a:26:60:cf:73:82:53:e6:96:
63:3c:4d:09:0e:ac:82:56:ef:92:c4:bd:9d:c6:79:
b7:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:9D:61:AE:F5:04:27:D1:16:FF:0C:2B:37:78:C0:2F:33:72:27:CE
X509v3 Authority Key Identifier:
keyid:42:0D:8C:2E:C3:D2:47:9C:54:23:AB:FF:74:78:2B:8A:8A:4B:7D:EA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9182F75/3C8CF63EFCBD11E688D3125EC4F9AE02/Qg2MLsPSR5xUI6v_dHgriopLfeo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Qg2MLsPSR5xUI6v_dHgriopLfeo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9182F75/3C8CF63EFCBD11E688D3125EC4F9AE02/A3B7573EF01A11EE935E4329C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.125.152.0/22
45.250.232.0/22
103.7.148.0/22
103.216.52.0/22
157.119.176.0/22
183.87.160.0/19
183.87.193.0-183.87.208.255
IPv6:
2403:7100::/32
Signature Algorithm: sha256WithRSAEncryption
07:a4:e7:4c:26:c2:6b:08:ee:ab:a0:35:ed:a4:0f:82:21:1e:
5d:43:00:3f:04:99:02:a4:2e:42:22:94:73:6d:ba:a4:22:cc:
84:d2:11:2b:03:84:4b:d9:fc:46:e8:df:27:bb:92:f1:34:ff:
3f:6a:9e:3e:80:ed:83:cd:ea:b7:0c:27:11:d3:a8:ec:4f:d9:
43:b0:38:88:3f:cf:cf:1b:03:1e:18:76:d7:6e:6c:22:58:a7:
ff:10:59:30:84:77:5f:6e:35:49:86:20:2b:c4:ce:ba:6d:45:
cd:18:8c:88:79:4b:a3:4d:7b:2f:9f:c1:21:80:ce:12:3c:6d:
ea:39:77:74:b4:b5:cf:66:b7:f6:49:ae:91:fd:61:65:1f:fa:
af:28:a4:2a:2a:1d:81:1c:88:aa:6c:fd:4b:7d:fb:8c:f9:ec:
91:23:96:a1:dd:3e:f8:38:c2:85:98:67:f2:1a:23:3c:17:cd:
7a:c9:67:51:e9:91:6b:32:e4:24:76:91:72:45:03:6d:5b:45:
2b:8c:4f:91:b2:b8:87:f6:2a:8d:35:ce:92:79:ad:f9:3f:55:
6e:3b:d6:20:cb:b8:57:6b:dc:b6:56:ab:20:7a:72:6d:5f:a1:
75:96:80:99:41:60:e5:b1:21:9e:73:7e:4b:dd:d0:47:16:37:
95:a9:b3:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 30 09:32:27 2024 by rpki-client on console-fra.rpki-client.org