Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A918DB4E/77E7F9A00CE511EAA20DDD82C4F9AE02/3C719B64EA8B11EEAFEF872BC4F9AE02.roa
File: 3C719B64EA8B11EEAFEF872BC4F9AE02.roa (raw, json)
Hash identifier: e94LgWmWYRWK+pHRKXMOqrVW5jepjiqRlZQXyc1Fd9U=
Subject key identifier: 98:52:3D:CC:69:BC:CE:6C:8D:ED:09:EF:D4:25:AE:92:B4:7A:76:51
Certificate issuer: /CN=A918DB4E/serialNumber=42758DE0CC0CF62C2AEEE93E0EEE67903A502CCC
Certificate serial: 0BBA
Authority key identifier: 42:75:8D:E0:CC:0C:F6:2C:2A:EE:E9:3E:0E:EE:67:90:3A:50:2C:CC
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QnWN4MwM9iwq7uk-Du5nkDpQLMw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918DB4E/77E7F9A00CE511EAA20DDD82C4F9AE02/3C719B64EA8B11EEAFEF872BC4F9AE02.roa
Signing time: Wed 24 Jul 2024 19:37:19 +0000
ROA not before: Wed 24 Jul 2024 19:37:19 +0000
ROA not after: Sun 31 Aug 2025 00:00:00 +0000
asID: 137883
IP address blocks: 2402:f840::/32 maxlen: 32
2402:f840::/48 maxlen: 48
2402:f840:1::/48 maxlen: 48
2402:f840:2::/48 maxlen: 48
2402:f840:3::/48 maxlen: 48
2402:f840:4::/48 maxlen: 48
2402:f840:5::/48 maxlen: 48
2402:f840:6::/48 maxlen: 48
2402:f840:7::/48 maxlen: 48
2402:f840:8::/48 maxlen: 48
2402:f840:9::/48 maxlen: 48
2402:f840:a::/48 maxlen: 48
2402:f840:b::/48 maxlen: 48
2402:f840:c::/48 maxlen: 48
2402:f840:d::/48 maxlen: 48
2402:f840:e::/48 maxlen: 48
2402:f840:f::/48 maxlen: 48
2402:f840:10::/48 maxlen: 48
2402:f840:11::/48 maxlen: 48
2402:f840:12::/48 maxlen: 48
2402:f840:13::/48 maxlen: 48
2402:f840:14::/48 maxlen: 48
2402:f840:15::/48 maxlen: 48
2402:f840:16::/48 maxlen: 48
2402:f840:17::/48 maxlen: 48
2402:f840:18::/48 maxlen: 48
2402:f840:19::/48 maxlen: 48
2402:f840:1a::/48 maxlen: 48
2402:f840:1b::/48 maxlen: 48
2402:f840:1c::/48 maxlen: 48
2402:f840:1d::/48 maxlen: 48
2402:f840:1e::/48 maxlen: 48
2402:f840:1f::/48 maxlen: 48
2402:f840:20::/48 maxlen: 48
2402:f840:21::/48 maxlen: 48
2402:f840:22::/48 maxlen: 48
2402:f840:23::/48 maxlen: 48
2402:f840:24::/48 maxlen: 48
2402:f840:25::/48 maxlen: 48
2402:f840:26::/48 maxlen: 48
2402:f840:27::/48 maxlen: 48
2402:f840:28::/48 maxlen: 48
2402:f840:29::/48 maxlen: 48
2402:f840:2a::/48 maxlen: 48
2402:f840:2b::/48 maxlen: 48
2402:f840:2c::/48 maxlen: 48
2402:f840:2d::/48 maxlen: 48
2402:f840:2e::/48 maxlen: 48
2402:f840:2f::/48 maxlen: 48
2402:f840:30::/48 maxlen: 48
2402:f840:31::/48 maxlen: 48
2402:f840:32::/48 maxlen: 48
2402:f840:33::/48 maxlen: 48
2402:f840:34::/48 maxlen: 48
2402:f840:35::/48 maxlen: 48
2402:f840:36::/48 maxlen: 48
2402:f840:37::/48 maxlen: 48
2402:f840:38::/48 maxlen: 48
2402:f840:39::/48 maxlen: 48
2402:f840:3a::/48 maxlen: 48
2402:f840:3b::/48 maxlen: 48
2402:f840:3c::/48 maxlen: 48
2402:f840:3d::/48 maxlen: 48
2402:f840:3e::/48 maxlen: 48
2402:f840:3f::/48 maxlen: 48
2402:f840:40::/48 maxlen: 48
2402:f840:41::/48 maxlen: 48
2402:f840:42::/48 maxlen: 48
2402:f840:43::/48 maxlen: 48
2402:f840:44::/48 maxlen: 48
2402:f840:45::/48 maxlen: 48
2402:f840:46::/48 maxlen: 48
2402:f840:47::/48 maxlen: 48
2402:f840:48::/48 maxlen: 48
2402:f840:49::/48 maxlen: 48
2402:f840:4a::/48 maxlen: 48
2402:f840:4b::/48 maxlen: 48
2402:f840:4c::/48 maxlen: 48
2402:f840:4d::/48 maxlen: 48
2402:f840:4e::/48 maxlen: 48
2402:f840:4f::/48 maxlen: 48
2402:f840:50::/48 maxlen: 48
2402:f840:51::/48 maxlen: 48
2402:f840:52::/48 maxlen: 48
2402:f840:53::/48 maxlen: 48
2402:f840:54::/48 maxlen: 48
2402:f840:55::/48 maxlen: 48
2402:f840:56::/48 maxlen: 48
2402:f840:57::/48 maxlen: 48
2402:f840:58::/48 maxlen: 48
2402:f840:59::/48 maxlen: 48
2402:f840:5a::/48 maxlen: 48
2402:f840:5b::/48 maxlen: 48
2402:f840:5c::/48 maxlen: 48
2402:f840:5d::/48 maxlen: 48
2402:f840:5e::/48 maxlen: 48
2402:f840:5f::/48 maxlen: 48
2402:f840:60::/48 maxlen: 48
2402:f840:61::/48 maxlen: 48
2402:f840:62::/48 maxlen: 48
2402:f840:63::/48 maxlen: 48
2402:f840:64::/48 maxlen: 48
2402:f840:65::/48 maxlen: 48
2402:f840:66::/48 maxlen: 48
2402:f840:67::/48 maxlen: 48
2402:f840:68::/48 maxlen: 48
2402:f840:69::/48 maxlen: 48
2402:f840:6a::/48 maxlen: 48
2402:f840:6b::/48 maxlen: 48
2402:f840:6c::/48 maxlen: 48
2402:f840:6d::/48 maxlen: 48
2402:f840:6e::/48 maxlen: 48
2402:f840:6f::/48 maxlen: 48
2402:f840:70::/48 maxlen: 48
2402:f840:71::/48 maxlen: 48
2402:f840:72::/48 maxlen: 48
2402:f840:73::/48 maxlen: 48
2402:f840:74::/48 maxlen: 48
2402:f840:75::/48 maxlen: 48
2402:f840:76::/48 maxlen: 48
2402:f840:77::/48 maxlen: 48
2402:f840:78::/48 maxlen: 48
2402:f840:79::/48 maxlen: 48
2402:f840:7a::/48 maxlen: 48
2402:f840:7b::/48 maxlen: 48
2402:f840:7c::/48 maxlen: 48
2402:f840:7d::/48 maxlen: 48
2402:f840:7e::/48 maxlen: 48
2402:f840:7f::/48 maxlen: 48
2402:f840:80::/48 maxlen: 48
2402:f840:81::/48 maxlen: 48
2402:f840:82::/48 maxlen: 48
2402:f840:83::/48 maxlen: 48
2402:f840:84::/48 maxlen: 48
2402:f840:85::/48 maxlen: 48
2402:f840:86::/48 maxlen: 48
2402:f840:87::/48 maxlen: 48
2402:f840:88::/48 maxlen: 48
2402:f840:89::/48 maxlen: 48
2402:f840:8a::/48 maxlen: 48
2402:f840:8b::/48 maxlen: 48
2402:f840:8c::/48 maxlen: 48
2402:f840:8d::/48 maxlen: 48
2402:f840:8e::/48 maxlen: 48
2402:f840:8f::/48 maxlen: 48
2402:f840:90::/48 maxlen: 48
2402:f840:91::/48 maxlen: 48
2402:f840:92::/48 maxlen: 48
2402:f840:93::/48 maxlen: 48
2402:f840:94::/48 maxlen: 48
2402:f840:95::/48 maxlen: 48
2402:f840:96::/48 maxlen: 48
2402:f840:97::/48 maxlen: 48
2402:f840:98::/48 maxlen: 48
2402:f840:99::/48 maxlen: 48
2402:f840:9a::/48 maxlen: 48
2402:f840:9b::/48 maxlen: 48
2402:f840:9c::/48 maxlen: 48
2402:f840:9d::/48 maxlen: 48
2402:f840:9e::/48 maxlen: 48
2402:f840:9f::/48 maxlen: 48
2402:f840:a0::/48 maxlen: 48
2402:f840:a1::/48 maxlen: 48
2402:f840:a2::/48 maxlen: 48
2402:f840:a3::/48 maxlen: 48
2402:f840:a4::/48 maxlen: 48
2402:f840:a5::/48 maxlen: 48
2402:f840:a6::/48 maxlen: 48
2402:f840:a7::/48 maxlen: 48
2402:f840:a8::/48 maxlen: 48
2402:f840:a9::/48 maxlen: 48
2402:f840:aa::/48 maxlen: 48
2402:f840:ab::/48 maxlen: 48
2402:f840:ac::/48 maxlen: 48
2402:f840:ad::/48 maxlen: 48
2402:f840:ae::/48 maxlen: 48
2402:f840:af::/48 maxlen: 48
2402:f840:b0::/48 maxlen: 48
2402:f840:b1::/48 maxlen: 48
2402:f840:b2::/48 maxlen: 48
2402:f840:b3::/48 maxlen: 48
2402:f840:b4::/48 maxlen: 48
2402:f840:b5::/48 maxlen: 48
2402:f840:b6::/48 maxlen: 48
2402:f840:b7::/48 maxlen: 48
2402:f840:b8::/48 maxlen: 48
2402:f840:b9::/48 maxlen: 48
2402:f840:ba::/48 maxlen: 48
2402:f840:bb::/48 maxlen: 48
2402:f840:bc::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918DB4E/77E7F9A00CE511EAA20DDD82C4F9AE02/QnWN4MwM9iwq7uk-Du5nkDpQLMw.crl
rsync://rpki.apnic.net/member_repository/A918DB4E/77E7F9A00CE511EAA20DDD82C4F9AE02/QnWN4MwM9iwq7uk-Du5nkDpQLMw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QnWN4MwM9iwq7uk-Du5nkDpQLMw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 29 Nov 2024 18:35:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3002 (0xbba)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918DB4E/serialNumber=42758DE0CC0CF62C2AEEE93E0EEE67903A502CCC
Validity
Not Before: Jul 24 19:37:19 2024 GMT
Not After : Aug 31 00:00:00 2025 GMT
Subject: CN=66a157ee-e21c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:f7:b4:b0:5e:fb:f0:ce:ad:9b:f4:80:5a:a0:
2c:44:5e:ca:bd:de:4c:46:f7:42:a9:41:50:a1:00:
0b:cb:39:01:0e:b7:bb:45:bc:7c:0e:b8:50:71:e4:
50:8c:0d:38:1e:34:39:60:8a:0e:ba:11:81:9e:35:
9a:2d:90:7c:38:7f:0e:17:7b:e1:92:06:55:1c:b9:
46:d4:c1:79:10:2a:dc:3b:7b:04:a2:24:27:80:60:
c2:60:ea:df:95:99:b9:ca:d1:43:a5:fb:9f:11:e0:
94:f8:42:d4:22:b4:b3:7e:de:c3:96:ba:79:44:f4:
96:7e:b9:b3:d5:a1:91:b5:44:6c:78:db:84:d0:dd:
77:9c:ff:f0:01:56:d6:2d:91:7c:c8:4f:d4:c2:f4:
7d:39:27:78:90:3d:f9:7b:d8:6c:28:32:92:00:4f:
66:54:c8:3f:15:5a:ea:06:4c:84:a5:e1:7a:ec:eb:
64:c5:33:8f:a8:2a:91:b2:7a:04:e7:8d:e7:01:ed:
4d:bf:2e:c6:b6:a7:b4:95:a5:b3:20:9c:e1:35:29:
dd:ce:33:fd:39:e2:3b:a9:0f:7e:58:ac:16:82:19:
8a:50:b2:13:c2:92:6d:1b:88:fe:e8:75:56:62:e8:
9c:59:f1:97:55:3b:ab:c9:90:c9:c1:e2:e3:55:fa:
eb:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:52:3D:CC:69:BC:CE:6C:8D:ED:09:EF:D4:25:AE:92:B4:7A:76:51
X509v3 Authority Key Identifier:
keyid:42:75:8D:E0:CC:0C:F6:2C:2A:EE:E9:3E:0E:EE:67:90:3A:50:2C:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918DB4E/77E7F9A00CE511EAA20DDD82C4F9AE02/QnWN4MwM9iwq7uk-Du5nkDpQLMw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QnWN4MwM9iwq7uk-Du5nkDpQLMw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918DB4E/77E7F9A00CE511EAA20DDD82C4F9AE02/3C719B64EA8B11EEAFEF872BC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv6:
2402:f840::/32
Signature Algorithm: sha256WithRSAEncryption
3d:d4:75:c2:91:38:39:f0:52:d6:82:74:0d:25:10:4d:5b:00:
6d:1a:b7:02:14:2a:5b:d3:4a:11:1c:0e:fd:fa:ee:22:2f:48:
37:0b:3f:84:ba:e3:90:f7:c4:d6:f0:51:48:6c:3d:22:30:fd:
33:12:f9:61:f8:3d:cf:f8:24:05:c0:26:b2:4c:d5:88:f6:79:
6f:1c:84:1d:a1:c1:b0:3c:da:f2:2c:6c:99:02:fd:13:9e:5f:
b2:f9:f7:89:03:5e:9c:25:33:36:43:8f:5f:fc:c9:5b:c2:ba:
29:74:a7:e9:99:ce:36:b1:b6:c3:5b:17:b0:ca:53:f0:20:64:
b9:64:a6:aa:7e:79:a9:af:d9:ad:dc:51:42:8f:19:19:07:46:
8b:1c:c8:80:40:ab:f9:f6:4b:09:46:6f:86:88:c5:ab:2b:c6:
13:a9:e8:6b:ed:a4:90:70:e5:5e:79:f0:fd:f0:c8:5e:a2:4f:
f2:0b:b1:3f:67:af:58:93:f8:d4:6b:2d:39:8f:2e:2e:82:17:
93:da:fc:fe:c3:f0:83:2a:3e:a9:ea:a5:23:78:53:e9:db:87:
46:49:95:cc:f8:69:29:81:6e:3b:84:b0:e7:00:df:65:54:97:
90:7a:8a:5a:d4:cb:d6:b2:98:8c:de:3e:53:ed:f1:6c:8f:fc:
d1:a1:5d:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 19:50:07 2024 by rpki-client on console-ams.rpki-client.org