Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9186214/C65D5364331A11E4AF2AB37CC4F9AE02/FE63F4649CD511E9A6A86527C4F9AE02.roa
File: FE63F4649CD511E9A6A86527C4F9AE02.roa (raw, json)
Hash identifier: L4suwjQPqxycoR3lZ3WB64AG3YWx6Yom+ZEatdR3hSk=
Subject key identifier: 9B:CE:AA:5F:49:2B:94:4B:01:E2:7C:C2:17:F8:9A:4D:DA:6F:42:C3
Certificate issuer: /CN=A9186214/serialNumber=F3DB9F162008BD666CBF8C99607814CFAB24D7E7
Certificate serial: 3421
Authority key identifier: F3:DB:9F:16:20:08:BD:66:6C:BF:8C:99:60:78:14:CF:AB:24:D7:E7
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/89ufFiAIvWZsv4yZYHgUz6sk1-c.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9186214/C65D5364331A11E4AF2AB37CC4F9AE02/FE63F4649CD511E9A6A86527C4F9AE02.roa
Signing time: Tue 30 Jul 2024 16:02:51 +0000
ROA not before: Tue 30 Jul 2024 16:02:51 +0000
ROA not after: Sun 02 Mar 2025 00:00:00 +0000
asID: 4787
IP address blocks: 45.126.80.0/22 maxlen: 22
101.50.16.0/21 maxlen: 21
101.50.16.0/24 maxlen: 24
101.50.24.0/21 maxlen: 21
101.50.24.0/24 maxlen: 24
101.128.64.0/18 maxlen: 24
103.61.248.0/22 maxlen: 22
103.86.148.0/22 maxlen: 22
103.86.148.0/23 maxlen: 23
103.86.149.0/24 maxlen: 24
103.86.150.0/23 maxlen: 23
103.86.150.0/24 maxlen: 24
103.86.152.0/22 maxlen: 22
103.86.152.0/24 maxlen: 24
103.86.156.0/22 maxlen: 22
103.86.156.0/24 maxlen: 24
103.86.160.0/22 maxlen: 22
103.87.76.0/22 maxlen: 22
103.87.76.0/24 maxlen: 24
103.87.80.0/22 maxlen: 22
103.87.80.0/24 maxlen: 24
103.87.84.0/22 maxlen: 22
103.87.84.0/24 maxlen: 24
103.87.152.0/22 maxlen: 22
103.87.152.0/24 maxlen: 24
103.109.152.0/22 maxlen: 22
103.109.152.0/24 maxlen: 24
103.109.156.0/22 maxlen: 22
103.109.156.0/24 maxlen: 24
103.109.160.0/22 maxlen: 22
103.109.160.0/24 maxlen: 24
103.109.164.0/22 maxlen: 22
103.109.164.0/24 maxlen: 24
103.109.168.0/22 maxlen: 22
103.109.168.0/24 maxlen: 24
103.109.172.0/22 maxlen: 22
103.109.172.0/24 maxlen: 24
103.109.188.0/22 maxlen: 22
103.109.188.0/24 maxlen: 24
103.109.192.0/22 maxlen: 22
103.109.192.0/24 maxlen: 24
103.109.196.0/22 maxlen: 22
103.109.196.0/24 maxlen: 24
103.109.200.0/22 maxlen: 22
103.109.200.0/24 maxlen: 24
103.111.184.0/22 maxlen: 22
103.111.184.0/24 maxlen: 24
103.111.188.0/22 maxlen: 22
103.111.188.0/24 maxlen: 24
103.111.200.0/22 maxlen: 22
103.111.200.0/24 maxlen: 24
103.111.204.0/22 maxlen: 22
103.111.204.0/24 maxlen: 24
103.111.208.0/22 maxlen: 22
103.111.208.0/24 maxlen: 24
103.111.212.0/22 maxlen: 22
103.111.212.0/24 maxlen: 24
103.113.48.0/22 maxlen: 22
103.113.48.0/24 maxlen: 24
103.113.52.0/22 maxlen: 22
103.113.52.0/24 maxlen: 24
103.113.72.0/22 maxlen: 22
103.113.72.0/24 maxlen: 24
103.113.76.0/22 maxlen: 22
103.113.76.0/24 maxlen: 24
103.113.116.0/22 maxlen: 22
103.113.116.0/24 maxlen: 24
103.113.120.0/22 maxlen: 22
103.113.120.0/24 maxlen: 24
103.113.128.0/22 maxlen: 22
103.113.128.0/24 maxlen: 24
103.113.132.0/22 maxlen: 22
103.113.132.0/24 maxlen: 24
103.114.80.0/22 maxlen: 22
103.114.80.0/24 maxlen: 24
103.114.84.0/22 maxlen: 22
103.114.84.0/24 maxlen: 24
103.114.108.0/22 maxlen: 22
103.114.108.0/24 maxlen: 24
103.114.112.0/22 maxlen: 22
103.114.112.0/24 maxlen: 24
103.114.116.0/22 maxlen: 22
103.114.116.0/24 maxlen: 24
103.114.120.0/22 maxlen: 22
103.114.120.0/24 maxlen: 24
103.114.136.0/22 maxlen: 22
103.114.136.0/24 maxlen: 24
103.114.140.0/22 maxlen: 22
103.118.96.0/22 maxlen: 22
103.118.96.0/24 maxlen: 24
103.118.100.0/22 maxlen: 22
103.118.100.0/24 maxlen: 24
103.118.104.0/22 maxlen: 22
103.118.104.0/24 maxlen: 24
103.118.108.0/22 maxlen: 22
103.118.108.0/24 maxlen: 24
103.118.128.0/22 maxlen: 22
103.118.128.0/24 maxlen: 24
103.118.132.0/22 maxlen: 22
103.118.132.0/24 maxlen: 24
103.118.136.0/22 maxlen: 22
103.118.136.0/24 maxlen: 24
103.118.140.0/22 maxlen: 22
103.118.140.0/24 maxlen: 24
103.118.224.0/22 maxlen: 22
103.118.224.0/24 maxlen: 24
103.118.228.0/22 maxlen: 22
103.118.228.0/24 maxlen: 24
103.118.232.0/22 maxlen: 22
103.118.232.0/24 maxlen: 24
103.118.236.0/22 maxlen: 22
103.118.236.0/24 maxlen: 24
103.119.4.0/22 maxlen: 22
103.119.4.0/24 maxlen: 24
103.119.8.0/22 maxlen: 22
103.119.8.0/24 maxlen: 24
103.119.36.0/22 maxlen: 22
103.119.36.0/24 maxlen: 24
103.119.40.0/22 maxlen: 22
103.119.40.0/24 maxlen: 24
103.121.96.0/22 maxlen: 22
103.121.96.0/24 maxlen: 24
103.121.100.0/22 maxlen: 22
103.121.100.0/24 maxlen: 24
103.121.108.0/22 maxlen: 22
103.121.108.0/24 maxlen: 24
103.121.132.0/22 maxlen: 22
103.121.132.0/24 maxlen: 24
103.121.136.0/22 maxlen: 22
103.121.136.0/24 maxlen: 24
103.121.144.0/22 maxlen: 22
103.121.144.0/24 maxlen: 24
103.121.168.0/22 maxlen: 22
103.121.168.0/24 maxlen: 24
103.121.180.0/22 maxlen: 22
103.121.180.0/24 maxlen: 24
103.121.244.0/22 maxlen: 22
103.121.244.0/24 maxlen: 24
103.129.4.0/22 maxlen: 22
103.129.4.0/24 maxlen: 24
103.129.20.0/22 maxlen: 22
103.129.20.0/24 maxlen: 24
103.129.24.0/22 maxlen: 22
103.129.24.0/24 maxlen: 24
103.129.40.0/22 maxlen: 22
103.129.40.0/24 maxlen: 24
103.129.48.0/22 maxlen: 22
103.129.48.0/24 maxlen: 24
103.129.56.0/22 maxlen: 22
103.129.56.0/24 maxlen: 24
103.129.68.0/22 maxlen: 22
103.129.68.0/24 maxlen: 24
116.206.232.0/22 maxlen: 22
116.206.232.0/24 maxlen: 24
116.206.236.0/22 maxlen: 22
116.206.236.0/24 maxlen: 24
116.206.240.0/22 maxlen: 22
116.206.240.0/24 maxlen: 24
125.208.128.0/18 maxlen: 18
175.158.32.0/19 maxlen: 19
175.158.32.0/21 maxlen: 21
175.158.32.0/22 maxlen: 22
175.158.32.0/24 maxlen: 24
202.158.0.0/17 maxlen: 17
210.210.128.0/18 maxlen: 24
2001:d10::/48 maxlen: 48
2403:3440::/32 maxlen: 32
2403:3440::/48 maxlen: 48
2403:34c0::/32 maxlen: 32
2403:34c0::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9186214/C65D5364331A11E4AF2AB37CC4F9AE02/89ufFiAIvWZsv4yZYHgUz6sk1-c.crl
rsync://rpki.apnic.net/member_repository/A9186214/C65D5364331A11E4AF2AB37CC4F9AE02/89ufFiAIvWZsv4yZYHgUz6sk1-c.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/89ufFiAIvWZsv4yZYHgUz6sk1-c.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 01 Dec 2024 15:31:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13345 (0x3421)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9186214/serialNumber=F3DB9F162008BD666CBF8C99607814CFAB24D7E7
Validity
Not Before: Jul 30 16:02:51 2024 GMT
Not After : Mar 2 00:00:00 2025 GMT
Subject: CN=66a90eab-5ad3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:02:79:64:8e:53:e6:cc:cd:d3:3b:ea:36:47:
a2:a8:d1:ef:b2:05:71:4f:be:1b:c2:14:f2:53:d1:
e3:7a:a1:bb:fb:d2:63:e0:02:2f:34:46:63:54:5c:
49:b1:0d:85:a3:3b:af:d6:8e:f8:c5:f4:6b:69:a6:
ab:e4:87:16:56:f7:de:79:78:08:93:5f:02:b0:d0:
f6:03:54:4e:39:93:7e:a7:0e:11:70:7a:0d:96:ea:
72:f2:30:c1:03:26:26:86:41:dd:19:9d:9c:27:90:
d3:f7:8b:56:ef:f1:d0:b9:03:13:d4:49:67:f3:69:
0b:a8:5b:d2:82:04:ae:2c:0b:1c:a7:9d:d5:92:32:
7b:b6:68:1c:59:0c:8d:14:53:5b:f1:4b:52:25:08:
66:17:b4:54:be:b7:f6:87:50:e6:4e:26:1c:22:35:
79:24:d6:b0:f5:de:af:a6:c0:00:9b:22:af:ad:c6:
98:9a:b5:e9:bf:9c:a8:c9:18:0e:a1:05:a3:82:1a:
ff:d8:cb:f3:63:2f:8a:bc:a9:7b:12:02:f2:aa:f0:
68:39:fb:60:3c:23:c3:30:0f:4f:c6:25:c3:49:de:
b0:99:d9:ba:75:fb:10:4f:2d:58:5b:f7:06:d3:23:
26:d6:3f:ee:67:ca:a0:eb:da:6b:17:c9:9b:cd:df:
61:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:CE:AA:5F:49:2B:94:4B:01:E2:7C:C2:17:F8:9A:4D:DA:6F:42:C3
X509v3 Authority Key Identifier:
keyid:F3:DB:9F:16:20:08:BD:66:6C:BF:8C:99:60:78:14:CF:AB:24:D7:E7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9186214/C65D5364331A11E4AF2AB37CC4F9AE02/89ufFiAIvWZsv4yZYHgUz6sk1-c.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/89ufFiAIvWZsv4yZYHgUz6sk1-c.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9186214/C65D5364331A11E4AF2AB37CC4F9AE02/FE63F4649CD511E9A6A86527C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.126.80.0/22
101.50.16.0/20
101.128.64.0/18
103.61.248.0/22
103.86.148.0-103.86.163.255
103.87.76.0-103.87.87.255
103.87.152.0/22
103.109.152.0-103.109.175.255
103.109.188.0-103.109.203.255
103.111.184.0/21
103.111.200.0-103.111.215.255
103.113.48.0/21
103.113.72.0/21
103.113.116.0-103.113.123.255
103.113.128.0/21
103.114.80.0/21
103.114.108.0-103.114.123.255
103.114.136.0/21
103.118.96.0/20
103.118.128.0/20
103.118.224.0/20
103.119.4.0-103.119.11.255
103.119.36.0-103.119.43.255
103.121.96.0/21
103.121.108.0/22
103.121.132.0-103.121.139.255
103.121.144.0/22
103.121.168.0/22
103.121.180.0/22
103.121.244.0/22
103.129.4.0/22
103.129.20.0-103.129.27.255
103.129.40.0/22
103.129.48.0/22
103.129.56.0/22
103.129.68.0/22
116.206.232.0-116.206.243.255
125.208.128.0/18
175.158.32.0/19
202.158.0.0/17
210.210.128.0/18
IPv6:
2001:d10::/48
2403:3440::/32
2403:34c0::/32
Signature Algorithm: sha256WithRSAEncryption
1a:24:6c:16:b1:6b:9b:81:58:f7:75:51:bb:48:9b:0a:17:d8:
40:e4:1b:24:ec:4c:a0:07:48:81:2a:ab:c1:da:05:d5:46:1e:
60:54:d3:8b:fe:7a:ab:41:87:53:cb:ca:14:44:6e:98:56:10:
52:69:df:29:f7:e4:dd:ef:5c:6d:58:a5:c7:04:9e:2f:1f:7d:
44:2f:87:e2:91:5a:96:65:e0:7c:1c:25:72:8d:eb:2a:38:54:
6a:75:e9:19:8f:b7:cb:a0:f6:13:03:d8:66:51:4b:61:63:69:
ee:b8:90:93:ab:38:53:29:34:bd:7e:24:75:72:0d:80:64:53:
29:65:83:40:f8:5c:ee:c5:54:34:01:96:b1:26:2d:f3:53:c1:
27:3b:b6:34:b6:51:7b:46:fb:0b:b7:c1:53:27:00:67:af:98:
3d:7c:cb:67:ed:78:30:cd:30:ec:e6:4d:b8:d9:37:60:dc:f0:
b7:c8:17:df:5c:c7:7a:ae:99:d4:1c:6a:03:fa:c9:18:56:39:
e1:b4:a3:98:f4:8f:eb:5e:36:f3:f9:4b:38:b9:55:1e:ed:c1:
5d:13:7f:26:2c:10:67:95:a9:7a:22:ef:80:e9:b3:16:72:75:
13:81:19:1d:1a:fb:0d:91:f1:ef:87:c8:b2:4d:68:d8:1e:f9:
b9:30:cf:84
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sun Nov 24 17:20:09 2024 by rpki-client on console-fra.rpki-client.org