Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/1C95913A3C3211EA8131794FC4F9AE02.roa
File: 1C95913A3C3211EA8131794FC4F9AE02.roa (raw, json)
Hash identifier: siDXX9KQU+Z8oONIkqEbCiSwxExYUm7IC5yV80pHcI4=
Subject key identifier: 2E:5E:D9:E5:73:FE:AA:E3:FB:65:51:6E:D0:28:B7:FA:11:F5:F8:7C
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: 86A8
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/1C95913A3C3211EA8131794FC4F9AE02.roa
Signing time: Wed 24 Apr 2024 10:35:38 +0000
ROA not before: Wed 24 Apr 2024 10:35:38 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 9829
IP address blocks: 45.122.148.0/22 maxlen: 22
59.178.0.0/18 maxlen: 18
59.178.0.0/20 maxlen: 20
59.178.16.0/20 maxlen: 20
59.178.32.0/20 maxlen: 20
59.178.48.0/20 maxlen: 20
59.178.64.0/18 maxlen: 18
59.178.64.0/20 maxlen: 20
59.178.80.0/20 maxlen: 20
59.178.96.0/20 maxlen: 20
59.178.112.0/20 maxlen: 20
59.178.128.0/18 maxlen: 18
59.178.128.0/20 maxlen: 20
59.178.144.0/20 maxlen: 20
59.178.160.0/20 maxlen: 20
59.178.176.0/20 maxlen: 20
59.178.192.0/18 maxlen: 18
59.178.192.0/20 maxlen: 20
59.178.208.0/20 maxlen: 20
59.178.224.0/20 maxlen: 20
59.178.240.0/20 maxlen: 20
59.182.0.0/18 maxlen: 18
59.182.0.0/20 maxlen: 20
59.182.16.0/20 maxlen: 20
59.182.32.0/20 maxlen: 20
59.182.48.0/20 maxlen: 20
59.182.64.0/18 maxlen: 18
59.182.64.0/20 maxlen: 20
59.182.80.0/20 maxlen: 20
59.182.96.0/20 maxlen: 20
59.182.112.0/20 maxlen: 20
59.182.128.0/18 maxlen: 18
59.182.128.0/20 maxlen: 20
59.182.144.0/20 maxlen: 20
59.182.160.0/20 maxlen: 20
59.182.176.0/20 maxlen: 20
59.182.192.0/18 maxlen: 18
59.182.192.0/20 maxlen: 20
59.182.208.0/20 maxlen: 20
59.182.224.0/20 maxlen: 20
59.182.240.0/20 maxlen: 20
59.183.0.0/18 maxlen: 18
59.183.0.0/20 maxlen: 20
59.183.16.0/20 maxlen: 20
59.183.32.0/20 maxlen: 20
59.183.48.0/20 maxlen: 20
59.183.64.0/18 maxlen: 18
59.183.64.0/20 maxlen: 20
59.183.80.0/20 maxlen: 20
59.183.96.0/20 maxlen: 20
59.183.112.0/20 maxlen: 20
59.183.128.0/18 maxlen: 18
59.183.128.0/20 maxlen: 20
59.183.144.0/20 maxlen: 20
59.183.160.0/20 maxlen: 20
59.183.176.0/20 maxlen: 20
59.183.192.0/18 maxlen: 18
59.183.192.0/20 maxlen: 20
59.183.208.0/20 maxlen: 20
59.183.224.0/20 maxlen: 20
59.183.240.0/20 maxlen: 20
59.184.0.0/18 maxlen: 18
59.184.0.0/20 maxlen: 20
59.184.16.0/20 maxlen: 20
59.184.32.0/20 maxlen: 20
59.184.48.0/20 maxlen: 20
59.184.64.0/18 maxlen: 18
59.184.64.0/20 maxlen: 20
59.184.80.0/20 maxlen: 20
59.184.96.0/20 maxlen: 20
59.184.112.0/20 maxlen: 20
59.184.128.0/18 maxlen: 18
59.184.128.0/20 maxlen: 20
59.184.144.0/20 maxlen: 20
59.184.160.0/20 maxlen: 20
59.184.176.0/20 maxlen: 20
59.184.192.0/18 maxlen: 18
59.184.192.0/20 maxlen: 20
59.184.208.0/20 maxlen: 20
59.184.224.0/20 maxlen: 20
59.184.240.0/20 maxlen: 20
59.185.0.0/18 maxlen: 18
59.185.0.0/20 maxlen: 20
59.185.16.0/20 maxlen: 20
59.185.32.0/20 maxlen: 20
59.185.48.0/20 maxlen: 20
59.185.64.0/18 maxlen: 18
59.185.64.0/20 maxlen: 20
59.185.80.0/20 maxlen: 20
59.185.96.0/20 maxlen: 20
59.185.112.0/20 maxlen: 20
59.185.128.0/18 maxlen: 18
59.185.128.0/20 maxlen: 20
59.185.144.0/20 maxlen: 20
59.185.160.0/20 maxlen: 20
59.185.176.0/20 maxlen: 20
59.185.192.0/18 maxlen: 18
59.185.192.0/20 maxlen: 20
59.185.208.0/20 maxlen: 20
59.185.224.0/20 maxlen: 20
59.185.240.0/20 maxlen: 20
103.204.48.0/22 maxlen: 22
120.56.0.0/16 maxlen: 16
120.56.0.0/18 maxlen: 18
120.56.0.0/20 maxlen: 20
120.56.16.0/20 maxlen: 20
120.56.32.0/20 maxlen: 20
120.56.48.0/20 maxlen: 20
120.56.64.0/18 maxlen: 18
120.56.64.0/20 maxlen: 20
120.56.80.0/20 maxlen: 20
120.56.96.0/20 maxlen: 20
120.56.112.0/20 maxlen: 20
120.56.128.0/18 maxlen: 18
120.56.128.0/20 maxlen: 20
120.56.144.0/20 maxlen: 20
120.56.160.0/20 maxlen: 20
120.56.176.0/20 maxlen: 20
120.56.192.0/18 maxlen: 18
120.56.192.0/20 maxlen: 20
120.56.208.0/20 maxlen: 20
120.56.224.0/20 maxlen: 20
120.56.240.0/20 maxlen: 20
120.60.0.0/16 maxlen: 16
120.60.0.0/18 maxlen: 18
120.60.0.0/20 maxlen: 20
120.60.16.0/20 maxlen: 20
120.60.32.0/20 maxlen: 20
120.60.48.0/20 maxlen: 20
120.60.64.0/18 maxlen: 18
120.60.64.0/20 maxlen: 20
120.60.80.0/20 maxlen: 20
120.60.96.0/20 maxlen: 20
120.60.112.0/20 maxlen: 20
120.60.128.0/18 maxlen: 18
120.60.128.0/20 maxlen: 20
120.60.144.0/20 maxlen: 20
120.60.160.0/20 maxlen: 20
120.60.176.0/20 maxlen: 20
120.60.192.0/18 maxlen: 18
120.60.192.0/20 maxlen: 20
120.60.208.0/20 maxlen: 20
120.60.224.0/20 maxlen: 20
120.60.240.0/20 maxlen: 20
120.61.0.0/16 maxlen: 16
120.61.0.0/18 maxlen: 18
120.61.0.0/20 maxlen: 20
120.61.16.0/20 maxlen: 20
120.61.32.0/20 maxlen: 20
120.61.48.0/20 maxlen: 20
120.61.64.0/18 maxlen: 18
120.61.64.0/20 maxlen: 20
120.61.80.0/20 maxlen: 20
120.61.96.0/20 maxlen: 20
120.61.112.0/20 maxlen: 20
120.61.128.0/18 maxlen: 18
120.61.128.0/20 maxlen: 20
120.61.144.0/20 maxlen: 20
120.61.160.0/20 maxlen: 20
120.61.176.0/20 maxlen: 20
120.61.192.0/18 maxlen: 18
120.61.192.0/20 maxlen: 20
120.61.208.0/20 maxlen: 20
120.61.224.0/20 maxlen: 20
120.61.240.0/20 maxlen: 20
182.60.0.0/18 maxlen: 18
182.60.0.0/20 maxlen: 20
182.60.16.0/20 maxlen: 20
182.60.32.0/20 maxlen: 20
182.60.48.0/20 maxlen: 20
182.60.64.0/18 maxlen: 18
182.60.64.0/20 maxlen: 20
182.60.80.0/20 maxlen: 20
182.60.96.0/20 maxlen: 20
182.60.112.0/20 maxlen: 20
182.60.128.0/18 maxlen: 18
182.60.128.0/20 maxlen: 20
182.60.144.0/20 maxlen: 20
182.60.160.0/20 maxlen: 20
182.60.176.0/20 maxlen: 20
182.60.192.0/18 maxlen: 18
182.60.192.0/20 maxlen: 20
182.60.208.0/20 maxlen: 20
182.60.224.0/20 maxlen: 20
182.60.240.0/20 maxlen: 20
2400:4f20::/32 maxlen: 36
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 03 May 2024 15:38:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 34472 (0x86a8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Validity
Not Before: Apr 24 10:35:38 2024 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=6628e07a-864b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:78:f0:68:d5:a7:09:6b:34:45:01:0e:f1:58:
f9:57:f6:b3:37:95:34:c9:1b:8a:7c:8b:df:30:89:
ab:53:67:f9:32:02:48:b2:9e:ff:96:11:ed:0a:23:
67:55:85:09:7e:60:23:e1:1f:80:2e:cb:8e:9c:09:
0f:ae:1d:9d:fb:79:20:7a:7d:b2:a3:20:d5:02:6e:
9f:d1:f9:8b:a5:06:d6:07:89:9a:7a:fb:2d:6d:8c:
21:39:53:6f:e5:32:35:1b:6f:21:67:72:ee:1e:8e:
9d:1a:8e:f4:82:e5:78:6e:66:ce:d2:b8:8b:3e:eb:
ce:e8:97:a0:0f:a9:0b:61:e6:37:17:11:1c:be:55:
0c:d5:9f:e8:45:50:56:c3:c3:de:63:db:a6:c7:5e:
4e:72:c5:ba:18:fc:b2:d1:c6:bb:54:dd:92:b7:5a:
25:5a:98:28:ea:e9:f9:b5:16:05:9b:e3:3f:02:9c:
09:35:d1:86:38:7e:a5:cf:14:c2:11:0d:a9:0e:79:
46:2c:08:33:bd:89:55:92:6d:c0:93:fe:c9:cc:93:
e1:21:cd:fc:cd:4e:89:fe:92:86:29:da:c9:a4:b5:
3f:46:2b:07:8c:55:d0:8b:0b:b1:a5:75:9a:c5:18:
74:eb:b6:25:a5:cf:b5:7f:ed:11:6a:f9:8c:35:e2:
2a:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:5E:D9:E5:73:FE:AA:E3:FB:65:51:6E:D0:28:B7:FA:11:F5:F8:7C
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/1C95913A3C3211EA8131794FC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.122.148.0/22
59.178.0.0/16
59.182.0.0-59.185.255.255
103.204.48.0/22
120.56.0.0/16
120.60.0.0/15
182.60.0.0/16
IPv6:
2400:4f20::/32
Signature Algorithm: sha256WithRSAEncryption
85:15:e1:f7:02:74:0f:37:0c:2e:65:24:b6:6f:0a:10:f3:46:
7a:a5:37:8f:33:6c:1f:95:d7:77:7a:5f:d6:a4:a1:64:de:47:
5e:f9:67:60:b8:7e:ea:de:66:83:13:6c:8d:bb:7a:15:86:5d:
62:07:7a:bf:a6:80:61:79:24:92:02:29:d0:d5:a3:d2:fe:34:
ad:b9:d3:9c:aa:11:91:1c:7a:56:ce:ac:d6:fb:25:34:bc:51:
7e:5f:59:6d:e9:39:4a:07:a4:99:4d:5d:18:47:80:32:25:8d:
ca:b7:1d:61:c5:1a:3f:bc:7b:fb:87:84:a4:86:39:b1:10:86:
f3:0e:e2:41:82:13:8b:da:6c:df:34:11:d4:8d:00:45:aa:e0:
de:cf:cb:61:81:bd:e5:5b:4b:01:07:aa:25:a9:cb:e3:3b:03:
48:1a:53:3c:7f:71:22:8a:4c:19:52:01:36:46:4d:fa:9c:a5:
16:ba:b0:7c:94:72:18:05:be:a7:78:37:07:b3:2e:7d:f1:a2:
1e:78:62:fd:13:14:43:82:0a:60:1e:38:be:04:3b:2a:dd:ed:
4b:a6:28:9b:e1:d3:27:d6:a2:78:28:de:4c:4b:81:0a:12:48:
c2:d1:a2:0d:21:e8:a8:29:bb:95:59:51:f8:94:47:a9:59:5c:
1b:25:2f:17
-----BEGIN CERTIFICATE-----
MIIFpzCCBI+gAwIBAgIDAIaoMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5
MThFREIyMTEwLwYDVQQFEygyOTZFREI2NEYzQUY2RTlEOTgwOTMyRTgxNkY5NTk4
M0UzQUJDODIzMB4XDTI0MDQyNDEwMzUzOFoXDTI0MDcwMTAwMDAwMFowGDEWMBQG
A1UEAxMNNjYyOGUwN2EtODY0YjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBALZ48GjVpwlrNEUBDvFY+Vf2szeVNMkbinyL3zCJq1Nn+TICSLKe/5YR7Qoj
Z1WFCX5gI+EfgC7LjpwJD64dnft5IHp9sqMg1QJun9H5i6UG1geJmnr7LW2MITlT
b+UyNRtvIWdy7h6OnRqO9ILleG5mztK4iz7rzuiXoA+pC2HmNxcRHL5VDNWf6EVQ
VsPD3mPbpsdeTnLFuhj8stHGu1TdkrdaJVqYKOrp+bUWBZvjPwKcCTXRhjh+pc8U
whENqQ55RiwIM72JVZJtwJP+ycyT4SHN/M1Oif6ShinayaS1P0YrB4xV0IsLsaV1
msUYdOu2JaXPtX/tEWr5jDXiKnUCAwEAAaOCAsowggLGMB0GA1UdDgQWBBQuXtnl
c/6q4/tlUW7QKLf6EfX4fDAfBgNVHSMEGDAWgBQpbttk869unZgJMugW+VmD46vI
IzAOBgNVHQ8BAf8EBAMCB4AwgYMGA1UdHwR8MHoweKB2oHSGcnJzeW5jOi8vcnBr
aS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkxOEVEQjIvMkE0M0UzMEM3
MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvS1c3YlpQT3ZicDJZQ1RMb0Z2bFpnLU9y
eUNNLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr
aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3
MkZEMUZGMi9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5Q00uY2VyMEoGA1UdIAEB
/wRAMD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBu
aWMubmV0L1JQS0kvQ1BTLnBkZjCBywYIKwYBBQUHAQsEgb4wgbswgYMGCCsGAQUF
BzALhndyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MThFREIyLzJBNDNFMzBDNzBFOTExRTJCMzZENEI2QjI5NzlCQjIwLzFDOTU5MTNB
M0MzMjExRUE4MTMxNzk0RkM0RjlBRTAyLnJvYTAzBggrBgEFBQcwDYYnaHR0cHM6
Ly9ycmRwLmFwbmljLm5ldC9ub3RpZmljYXRpb24ueG1sMFQGCCsGAQUFBwEHAQH/
BEUwQzAyBAIAATAsAwQCLXqUAwMAO7IwCgMDATu2AwMBO7gDBAJnzDADAwB4OAMD
AXg8AwMAtjwwDQQCAAIwBwMFACQATyAwDQYJKoZIhvcNAQELBQADggEBAIUV4fcC
dA83DC5lJLZvChDzRnqlN48zbB+V13d6X9akoWTeR175Z2C4fureZoMTbI27ehWG
XWIHer+mgGF5JJICKdDVo9L+NK2505yqEZEcelbOrNb7JTS8UX5fWW3pOUoHpJlN
XRhHgDIljcq3HWHFGj+8e/uHhKSGObEQhvMO4kGCE4vabN80EdSNAEWq4N7Py2GB
veVbSwEHqiWpy+M7A0gaUzx/cSKKTBlSATZGTfqcpRa6sHyUchgFvqd4NwezLn3x
oh54Yv0TFEOCCmAeOL4EOyrd7UumKJvh0yfWongo3kxLgQoSSMLRog0h6Kgpu5VZ
UfiUR6lZXBslLxc=
-----END CERTIFICATE-----
Generated at Sun Apr 28 15:51:14 2024 by rpki-client on console-fra.rpki-client.org