Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/AF09579890EA11EEAF3A9E4FC4F9AE02.roa
File: AF09579890EA11EEAF3A9E4FC4F9AE02.roa (raw, json)
Hash identifier: I+ysiudVJYy2VeKnQxeC1X+PCF/LC8V7VmXxv+jf1Os=
Subject key identifier: 41:E8:7E:C6:AD:98:6B:B1:AE:99:77:7E:C1:DF:21:71:8A:84:63:B6
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: 83AD
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/AF09579890EA11EEAF3A9E4FC4F9AE02.roa
Signing time: Tue 27 Feb 2024 05:07:18 +0000
ROA not before: Tue 27 Feb 2024 05:07:18 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 132296
IP address blocks: 43.248.68.0/24 maxlen: 24
43.248.69.0/24 maxlen: 24
43.248.70.0/24 maxlen: 24
43.248.71.0/24 maxlen: 24
45.119.12.0/24 maxlen: 24
45.119.13.0/24 maxlen: 24
45.119.14.0/24 maxlen: 24
45.119.15.0/24 maxlen: 24
103.57.252.0/24 maxlen: 24
103.57.253.0/24 maxlen: 24
103.57.254.0/24 maxlen: 24
103.57.255.0/24 maxlen: 24
103.116.169.0/24 maxlen: 24
103.148.138.0/23 maxlen: 24
103.155.212.0/24 maxlen: 24
103.155.213.0/24 maxlen: 24
103.157.206.0/23 maxlen: 24
103.157.230.0/24 maxlen: 24
103.157.231.0/24 maxlen: 24
103.162.224.0/24 maxlen: 24
103.162.225.0/24 maxlen: 24
103.171.126.0/23 maxlen: 24
103.174.26.0/24 maxlen: 24
103.174.27.0/24 maxlen: 24
103.176.75.0/24 maxlen: 24
103.177.58.0/23 maxlen: 24
103.177.128.0/24 maxlen: 24
103.177.129.0/24 maxlen: 24
103.181.147.0/24 maxlen: 24
103.201.136.0/24 maxlen: 24
103.201.137.0/24 maxlen: 24
103.204.164.0/24 maxlen: 24
103.204.166.0/24 maxlen: 24
103.255.36.0/24 maxlen: 24
103.255.37.0/24 maxlen: 24
103.255.38.0/24 maxlen: 24
103.255.39.0/24 maxlen: 24
2001:df5:ff80::/48 maxlen: 48
2402:5c80::/32 maxlen: 32
2407:6fc0::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 02 May 2024 11:49:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 33709 (0x83ad)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Validity
Not Before: Feb 27 05:07:18 2024 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=65dd6e05-d692
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:b7:71:18:c3:18:2a:c0:e1:28:1e:35:dc:95:
55:6c:41:ed:0b:35:35:0c:08:59:ae:d1:b8:7f:f7:
c8:14:2c:bc:e9:0a:23:b6:0b:57:48:bc:0d:d8:12:
16:cf:f2:89:33:26:96:0c:ca:02:86:a0:7b:5b:43:
39:c8:99:db:68:e5:0e:5a:04:04:31:02:90:f1:b6:
e2:3f:21:8a:0f:7b:61:ae:f8:6c:ad:b3:f4:70:9b:
a5:0e:d5:83:aa:ec:2d:12:a7:3b:e9:b1:5c:ba:92:
3e:d7:75:50:f5:55:9c:fc:4e:95:f3:9d:9b:01:13:
c2:7d:10:ca:e8:f1:52:e4:1d:2a:4e:e8:de:d3:3d:
04:86:92:bf:ed:1e:ea:48:b6:6c:94:75:37:d7:ba:
57:60:a1:2e:d9:69:0a:8d:33:87:bd:5b:9c:2e:ee:
66:6e:d0:6d:69:bf:eb:f9:3c:06:9e:3a:e4:5b:e0:
30:96:15:47:70:5a:3d:4f:7e:07:e9:63:08:26:a4:
60:5e:1d:84:85:71:cd:56:ae:e9:b3:b2:59:d4:a0:
bd:cf:8a:e5:c3:14:2b:97:0e:7d:ea:52:a6:da:52:
cf:d7:c3:af:98:5b:41:b5:37:77:3a:63:54:78:f4:
c8:25:74:6b:a0:a4:7c:c4:84:7e:dd:1f:ae:0e:3a:
6d:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:E8:7E:C6:AD:98:6B:B1:AE:99:77:7E:C1:DF:21:71:8A:84:63:B6
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/AF09579890EA11EEAF3A9E4FC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
43.248.68.0/22
45.119.12.0/22
103.57.252.0/22
103.116.169.0/24
103.148.138.0/23
103.155.212.0/23
103.157.206.0/23
103.157.230.0/23
103.162.224.0/23
103.171.126.0/23
103.174.26.0/23
103.176.75.0/24
103.177.58.0/23
103.177.128.0/23
103.181.147.0/24
103.201.136.0/23
103.204.164.0/24
103.204.166.0/24
103.255.36.0/22
IPv6:
2001:df5:ff80::/48
2402:5c80::/32
2407:6fc0::/32
Signature Algorithm: sha256WithRSAEncryption
70:15:cc:ea:a2:4e:7c:ab:96:ea:54:fa:1d:97:cd:80:57:76:
60:7a:d4:3c:79:5b:98:a6:94:89:09:50:e1:8e:38:e3:85:9d:
82:7a:60:3c:9c:56:98:b3:b1:4c:44:0a:06:48:71:c2:c8:b6:
f9:42:d5:9c:83:98:d6:61:b9:2a:73:f1:d6:7d:15:d8:c8:4a:
9f:bd:da:74:28:0d:d4:9a:0e:9f:84:46:a0:7e:85:2a:fc:24:
be:06:06:ce:74:dd:a9:f1:7e:e6:1b:90:aa:2b:cb:1c:e5:1b:
d2:28:c5:41:d6:ec:28:00:d1:09:65:f3:5c:6d:f2:fd:eb:8f:
1f:fc:55:31:b0:e9:fc:4a:a0:ca:d4:ae:ee:e6:37:5f:5e:f6:
82:58:1d:c6:2e:e0:31:e5:0c:39:33:a5:c5:ca:fc:a8:b6:29:
a6:0f:37:ff:61:ae:71:aa:e9:01:8e:35:59:a3:8a:39:89:07:
3d:a5:05:17:1f:cf:fb:7e:27:e9:6f:7c:ea:f1:04:44:bb:f9:
65:ad:e5:57:e8:50:fe:e2:47:3c:a7:f8:8a:4c:ca:c4:aa:2d:
a5:97:02:98:35:85:3c:be:c9:7c:34:91:97:91:5d:3b:4d:1d:
92:6b:7b:e6:26:23:80:e9:43:26:81:26:b9:46:12:29:9d:9c:
d1:a1:d2:66
-----BEGIN CERTIFICATE-----
MIIGADCCBOigAwIBAgIDAIOtMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5
MThFREIyMTEwLwYDVQQFEygyOTZFREI2NEYzQUY2RTlEOTgwOTMyRTgxNkY5NTk4
M0UzQUJDODIzMB4XDTI0MDIyNzA1MDcxOFoXDTI0MDcwMTAwMDAwMFowGDEWMBQG
A1UEAxMNNjVkZDZlMDUtZDY5MjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAMG3cRjDGCrA4SgeNdyVVWxB7Qs1NQwIWa7RuH/3yBQsvOkKI7YLV0i8DdgS
Fs/yiTMmlgzKAoage1tDOciZ22jlDloEBDECkPG24j8hig97Ya74bK2z9HCbpQ7V
g6rsLRKnO+mxXLqSPtd1UPVVnPxOlfOdmwETwn0QyujxUuQdKk7o3tM9BIaSv+0e
6ki2bJR1N9e6V2ChLtlpCo0zh71bnC7uZm7QbWm/6/k8Bp465FvgMJYVR3BaPU9+
B+ljCCakYF4dhIVxzVau6bOyWdSgvc+K5cMUK5cOfepSptpSz9fDr5hbQbU3dzpj
VHj0yCV0a6CkfMSEft0frg46bVkCAwEAAaOCAyMwggMfMB0GA1UdDgQWBBRB6H7G
rZhrsa6Zd37B3yFxioRjtjAfBgNVHSMEGDAWgBQpbttk869unZgJMugW+VmD46vI
IzAOBgNVHQ8BAf8EBAMCB4AwgYMGA1UdHwR8MHoweKB2oHSGcnJzeW5jOi8vcnBr
aS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkxOEVEQjIvMkE0M0UzMEM3
MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvS1c3YlpQT3ZicDJZQ1RMb0Z2bFpnLU9y
eUNNLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr
aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3
MkZEMUZGMi9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5Q00uY2VyMEoGA1UdIAEB
/wRAMD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBu
aWMubmV0L1JQS0kvQ1BTLnBkZjCBywYIKwYBBQUHAQsEgb4wgbswgYMGCCsGAQUF
BzALhndyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MThFREIyLzJBNDNFMzBDNzBFOTExRTJCMzZENEI2QjI5NzlCQjIwL0FGMDk1Nzk4
OTBFQTExRUVBRjNBOUU0RkM0RjlBRTAyLnJvYTAzBggrBgEFBQcwDYYnaHR0cHM6
Ly9ycmRwLmFwbmljLm5ldC9ub3RpZmljYXRpb24ueG1sMIGsBggrBgEFBQcBBwEB
/wSBnDCBmTB4BAIAATByAwQCK/hEAwQCLXcMAwQCZzn8AwQAZ3SpAwQBZ5SKAwQB
Z5vUAwQBZ53OAwQBZ53mAwQBZ6LgAwQBZ6t+AwQBZ64aAwQAZ7BLAwQBZ7E6AwQB
Z7GAAwQAZ7WTAwQBZ8mIAwQAZ8ykAwQAZ8ymAwQCZ/8kMB0EAgACMBcDBwAgAQ31
/4ADBQAkAlyAAwUAJAdvwDANBgkqhkiG9w0BAQsFAAOCAQEAcBXM6qJOfKuW6lT6
HZfNgFd2YHrUPHlbmKaUiQlQ4Y4444WdgnpgPJxWmLOxTEQKBkhxwsi2+ULVnIOY
1mG5KnPx1n0V2MhKn73adCgN1JoOn4RGoH6FKvwkvgYGznTdqfF+5huQqivLHOUb
0ijFQdbsKADRCWXzXG3y/euPH/xVMbDp/EqgytSu7uY3X172glgdxi7gMeUMOTOl
xcr8qLYppg83/2GucarpAY41WaOKOYkHPaUFFx/P+34n6W986vEERLv5Za3lV+hQ
/uJHPKf4ikzKxKotpZcCmDWFPL7JfDSRl5FdO00dkmt75iYjgOlDJoEmuUYSKZ2c
0aHSZg==
-----END CERTIFICATE-----
Generated at Thu Apr 25 22:34:00 2024 by rpki-client on console-fra.rpki-client.org