Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/5B18AC5893FE11EE91B9AB4CC4F9AE02.roa
File: 5B18AC5893FE11EE91B9AB4CC4F9AE02.roa (raw, json)
Hash identifier: o9nDVrGSKrLyu0rU62tgTxEHdcdeA4fvhM65jZTjFGw=
Subject key identifier: 9E:85:CD:BC:C0:56:DD:A7:FA:B8:03:A6:AF:96:F7:0C:8C:22:B7:47
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: 7F89
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/5B18AC5893FE11EE91B9AB4CC4F9AE02.roa
Signing time: Wed 06 Dec 2023 06:11:56 +0000
ROA not before: Wed 06 Dec 2023 06:11:56 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 58678
IP address blocks: 43.241.28.0/22 maxlen: 24
43.241.128.0/22 maxlen: 24
43.241.132.0/22 maxlen: 24
43.242.208.0/24 maxlen: 24
43.242.209.0/24 maxlen: 24
43.242.210.0/24 maxlen: 24
43.242.211.0/24 maxlen: 24
43.242.224.0/22 maxlen: 24
43.242.228.0/22 maxlen: 24
45.64.84.0/22 maxlen: 24
45.114.192.0/22 maxlen: 24
45.117.0.0/22 maxlen: 23
45.117.0.0/23 maxlen: 24
45.117.3.0/24 maxlen: 24
45.127.120.0/22 maxlen: 24
45.250.248.0/24 maxlen: 24
45.250.249.0/24 maxlen: 24
45.250.250.0/24 maxlen: 24
103.14.232.0/22 maxlen: 24
103.17.12.0/23 maxlen: 24
103.26.52.0/22 maxlen: 22
103.26.52.0/24 maxlen: 24
103.26.53.0/24 maxlen: 24
103.26.54.0/24 maxlen: 24
103.26.55.0/24 maxlen: 24
103.26.56.0/22 maxlen: 24
103.42.160.0/22 maxlen: 24
103.48.56.0/23 maxlen: 24
103.48.58.0/24 maxlen: 24
103.48.59.0/24 maxlen: 24
103.48.100.0/22 maxlen: 24
103.57.96.0/23 maxlen: 24
103.59.212.0/22 maxlen: 24
103.66.80.0/22 maxlen: 22
103.66.80.0/24 maxlen: 24
103.66.81.0/24 maxlen: 24
103.66.82.0/24 maxlen: 24
103.66.83.0/24 maxlen: 24
103.69.238.0/24 maxlen: 24
103.74.236.0/22 maxlen: 24
103.77.152.0/22 maxlen: 23
103.77.152.0/23 maxlen: 24
103.77.154.0/24 maxlen: 24
103.89.40.0/22 maxlen: 24
103.111.132.0/22 maxlen: 24
103.112.32.0/24 maxlen: 24
103.112.33.0/24 maxlen: 24
103.112.34.0/24 maxlen: 24
103.112.35.0/24 maxlen: 24
103.117.184.0/24 maxlen: 24
103.117.187.0/24 maxlen: 24
103.132.228.0/23 maxlen: 24
103.137.152.0/22 maxlen: 24
103.148.207.0/24 maxlen: 24
103.153.151.0/24 maxlen: 24
103.155.170.0/24 maxlen: 24
103.162.190.0/23 maxlen: 24
103.163.188.0/24 maxlen: 24
103.163.189.0/24 maxlen: 24
103.168.62.0/24 maxlen: 24
103.168.63.0/24 maxlen: 24
103.173.208.0/23 maxlen: 24
103.174.30.0/24 maxlen: 24
103.174.38.0/24 maxlen: 24
103.178.212.0/23 maxlen: 24
103.181.209.0/24 maxlen: 24
103.185.11.0/24 maxlen: 24
103.204.119.0/24 maxlen: 24
103.209.18.0/24 maxlen: 24
103.209.19.0/24 maxlen: 24
103.215.114.0/23 maxlen: 24
103.216.144.0/22 maxlen: 24
103.218.100.0/22 maxlen: 24
103.219.164.0/24 maxlen: 24
103.219.165.0/24 maxlen: 24
103.219.166.0/24 maxlen: 24
103.219.167.0/24 maxlen: 24
103.220.80.0/22 maxlen: 24
103.220.212.0/22 maxlen: 24
103.226.0.0/22 maxlen: 24
103.226.4.0/22 maxlen: 24
103.226.28.0/22 maxlen: 24
103.232.24.0/22 maxlen: 24
124.108.16.0/22 maxlen: 24
2001:df6:f180::/48 maxlen: 48
2404:bd00::/48 maxlen: 48
2404:bd00:1::/48 maxlen: 48
2404:bd00:2::/48 maxlen: 48
2404:bd00:3::/48 maxlen: 48
2404:bd00:4::/48 maxlen: 48
2404:bd00:5::/48 maxlen: 48
2404:bd00:6::/48 maxlen: 48
2404:bd00:7::/48 maxlen: 48
2404:bd00:8::/48 maxlen: 48
2404:bd00:a::/48 maxlen: 48
2404:bd00:b::/48 maxlen: 48
2404:bd00:c::/48 maxlen: 48
2404:bd00:d::/48 maxlen: 48
2404:bd00:e::/48 maxlen: 48
2404:bd00:f::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 03 May 2024 15:38:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 32649 (0x7f89)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Validity
Not Before: Dec 6 06:11:56 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=657010ab-d787
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:03:6d:30:69:99:a5:f6:05:d9:6e:bb:9f:22:
ef:75:35:ce:27:53:df:db:83:ba:a6:44:11:94:94:
a1:25:7b:97:61:f1:db:79:93:6a:b2:ab:23:77:e8:
82:03:a3:ed:32:64:a8:cd:47:14:1e:13:51:b1:ec:
f6:84:51:27:3d:02:f6:04:8c:48:27:e1:73:14:21:
62:19:bc:3e:5d:40:7a:be:85:7b:c9:03:50:9a:ae:
4e:a0:ba:85:31:8c:37:0d:78:6a:01:ea:c6:45:0f:
99:fa:fb:cd:0d:51:36:f2:36:d3:59:36:7a:8d:c9:
0c:bf:a5:f8:62:d5:e5:db:26:68:44:7d:be:39:0d:
10:02:7f:42:d6:f4:ad:51:ae:04:34:2c:8b:d2:17:
60:c7:64:fa:15:39:07:fa:b5:a5:bb:df:13:ed:34:
5f:ab:6d:72:29:d4:42:bd:d1:6c:bd:7a:83:8f:ed:
97:5a:c9:21:be:c1:00:23:0d:1e:4e:48:7f:84:fd:
1b:53:08:86:fe:5f:4d:14:71:d3:13:92:9e:4c:11:
f9:bf:e7:90:4a:cf:08:55:6f:7d:ba:f5:a2:a4:45:
f8:3d:4f:4b:93:ca:74:20:8e:c6:f8:db:88:f2:26:
f2:a3:ff:1c:8a:51:1b:3d:da:a8:5f:98:ae:66:d8:
8b:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:85:CD:BC:C0:56:DD:A7:FA:B8:03:A6:AF:96:F7:0C:8C:22:B7:47
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/5B18AC5893FE11EE91B9AB4CC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
43.241.28.0/22
43.241.128.0/21
43.242.208.0/22
43.242.224.0/21
45.64.84.0/22
45.114.192.0/22
45.117.0.0/22
45.127.120.0/22
45.250.248.0-45.250.250.255
103.14.232.0/22
103.17.12.0/23
103.26.52.0-103.26.59.255
103.42.160.0/22
103.48.56.0/22
103.48.100.0/22
103.57.96.0/23
103.59.212.0/22
103.66.80.0/22
103.69.238.0/24
103.74.236.0/22
103.77.152.0/22
103.89.40.0/22
103.111.132.0/22
103.112.32.0/22
103.117.184.0/24
103.117.187.0/24
103.132.228.0/23
103.137.152.0/22
103.148.207.0/24
103.153.151.0/24
103.155.170.0/24
103.162.190.0/23
103.163.188.0/23
103.168.62.0/23
103.173.208.0/23
103.174.30.0/24
103.174.38.0/24
103.178.212.0/23
103.181.209.0/24
103.185.11.0/24
103.204.119.0/24
103.209.18.0/23
103.215.114.0/23
103.216.144.0/22
103.218.100.0/22
103.219.164.0/22
103.220.80.0/22
103.220.212.0/22
103.226.0.0/21
103.226.28.0/22
103.232.24.0/22
124.108.16.0/22
IPv6:
2001:df6:f180::/48
2404:bd00::-2404:bd00:8:ffff:ffff:ffff:ffff:ffff
2404:bd00:a::-2404:bd00:f:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
29:d3:a1:0e:65:b4:98:00:aa:25:65:bb:b1:3f:d9:f6:a6:3a:
8e:7a:a0:f0:67:66:2b:b9:81:3c:cb:d0:b1:14:b2:a1:07:9e:
6d:6d:86:7a:b3:3f:9a:45:72:87:06:6b:e0:f9:12:18:ae:44:
95:7b:6e:82:c8:08:16:73:a0:0c:98:9b:e2:9d:8d:62:8b:53:
ee:1c:4a:bf:3b:2d:0a:8e:50:ab:ba:b3:63:ec:41:ea:d3:f1:
c7:b8:a6:de:72:c8:79:51:8f:8c:54:c7:2b:d1:bd:8a:34:fa:
f1:40:c5:6f:85:d0:21:41:d2:16:da:98:67:33:f3:54:c1:37:
01:d7:ba:2b:62:91:72:72:b4:93:53:c9:fc:1e:8c:5b:2e:a5:
6b:98:ec:2b:90:06:f6:d4:aa:a7:c2:9f:df:7e:e0:c5:f7:4e:
94:8f:fe:4e:72:d8:d6:ad:c2:92:34:5d:ee:62:7c:56:b4:95:
55:4e:42:f0:a3:d5:c6:89:7b:7e:bf:b5:5c:c7:f1:83:0c:d2:
ff:aa:0c:27:8e:9b:09:f3:aa:c0:bc:d3:eb:6a:44:c0:14:be:
99:97:96:6b:96:54:b1:4a:8e:2d:09:04:a6:73:40:a5:f3:5b:
69:c7:1e:61:6f:f9:87:5f:8d:25:a0:61:e3:5a:e9:4a:b4:82:
d7:fc:bf:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 27 10:19:34 2024 by rpki-client on console-ams.rpki-client.org