Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/BD2F954EC4C511EE8795D21FC4F9AE02.roa
File: BD2F954EC4C511EE8795D21FC4F9AE02.roa (raw, json)
Hash identifier: GQOovrSQVa0ReQSBvNMzIwU2ebjDo5Utzxnzx8IgEI4=
Subject key identifier: 2D:02:48:D7:E1:5B:D9:39:EC:8E:6D:62:63:45:AB:27:76:B3:95:5A
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: 8584
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/BD2F954EC4C511EE8795D21FC4F9AE02.roa
Signing time: Thu 28 Mar 2024 09:20:12 +0000
ROA not before: Thu 28 Mar 2024 09:20:12 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 133982
IP address blocks: 45.118.156.0/24 maxlen: 24
45.118.157.0/24 maxlen: 24
45.118.158.0/24 maxlen: 24
45.118.159.0/24 maxlen: 24
103.46.200.0/24 maxlen: 24
103.46.201.0/24 maxlen: 24
103.46.202.0/24 maxlen: 24
103.46.203.0/24 maxlen: 24
103.48.196.0/24 maxlen: 24
103.48.197.0/24 maxlen: 24
103.48.198.0/24 maxlen: 24
103.48.199.0/24 maxlen: 24
103.56.228.0/24 maxlen: 24
103.56.229.0/24 maxlen: 24
103.56.230.0/24 maxlen: 24
103.56.231.0/24 maxlen: 24
103.57.84.0/22 maxlen: 24
103.85.143.0/24 maxlen: 24
103.87.56.0/24 maxlen: 24
103.87.57.0/24 maxlen: 24
103.87.58.0/24 maxlen: 24
103.87.59.0/24 maxlen: 24
103.92.40.0/22 maxlen: 24
103.95.80.0/24 maxlen: 24
103.95.81.0/24 maxlen: 24
103.95.82.0/24 maxlen: 24
103.95.83.0/24 maxlen: 24
103.108.4.0/24 maxlen: 24
103.108.5.0/24 maxlen: 24
103.108.6.0/24 maxlen: 24
103.108.7.0/24 maxlen: 24
103.110.48.0/24 maxlen: 24
103.110.49.0/24 maxlen: 24
103.120.50.0/24 maxlen: 24
103.120.51.0/24 maxlen: 24
103.139.56.0/24 maxlen: 24
103.157.227.0/24 maxlen: 24
103.160.26.0/23 maxlen: 24
103.161.56.0/23 maxlen: 24
103.164.188.0/24 maxlen: 24
103.170.80.0/23 maxlen: 24
103.172.72.0/23 maxlen: 24
103.177.120.0/23 maxlen: 24
103.181.166.0/24 maxlen: 24
103.205.146.0/24 maxlen: 24
103.211.12.0/24 maxlen: 24
103.211.13.0/24 maxlen: 24
103.211.14.0/24 maxlen: 24
103.211.15.0/24 maxlen: 24
103.211.16.0/24 maxlen: 24
103.211.17.0/24 maxlen: 24
103.211.18.0/24 maxlen: 24
103.211.19.0/24 maxlen: 24
103.211.52.0/24 maxlen: 24
103.211.53.0/24 maxlen: 24
103.211.54.0/24 maxlen: 24
103.211.55.0/24 maxlen: 24
103.212.144.0/24 maxlen: 24
103.212.145.0/24 maxlen: 24
103.212.146.0/24 maxlen: 24
103.212.147.0/24 maxlen: 24
103.212.156.0/24 maxlen: 24
103.212.157.0/24 maxlen: 24
103.212.158.0/24 maxlen: 24
103.212.159.0/24 maxlen: 24
103.214.60.0/24 maxlen: 24
103.214.61.0/24 maxlen: 24
103.214.62.0/24 maxlen: 24
103.214.63.0/24 maxlen: 24
110.235.216.0/22 maxlen: 24
110.235.224.0/24 maxlen: 24
110.235.225.0/24 maxlen: 24
110.235.226.0/24 maxlen: 24
110.235.227.0/24 maxlen: 24
110.235.228.0/24 maxlen: 24
110.235.229.0/24 maxlen: 24
110.235.230.0/24 maxlen: 24
110.235.231.0/24 maxlen: 24
110.235.232.0/24 maxlen: 24
110.235.233.0/24 maxlen: 24
110.235.234.0/24 maxlen: 24
110.235.235.0/24 maxlen: 24
110.235.236.0/24 maxlen: 24
110.235.237.0/24 maxlen: 24
110.235.238.0/24 maxlen: 24
110.235.239.0/24 maxlen: 24
139.5.240.0/24 maxlen: 24
139.5.241.0/24 maxlen: 24
139.5.242.0/24 maxlen: 24
139.5.243.0/24 maxlen: 24
139.5.248.0/24 maxlen: 24
139.5.249.0/24 maxlen: 24
139.5.250.0/24 maxlen: 24
139.5.251.0/24 maxlen: 24
139.5.252.0/22 maxlen: 24
144.48.72.0/22 maxlen: 24
146.196.32.0/22 maxlen: 24
146.196.36.0/24 maxlen: 24
146.196.37.0/24 maxlen: 24
146.196.38.0/24 maxlen: 24
146.196.39.0/24 maxlen: 24
160.202.36.0/22 maxlen: 24
192.140.152.0/24 maxlen: 24
192.140.153.0/24 maxlen: 24
192.140.154.0/24 maxlen: 24
192.140.155.0/24 maxlen: 24
202.173.124.0/22 maxlen: 24
2401:9640::/32 maxlen: 32
2401:9640:800::/37 maxlen: 37
2401:9640:1000::/37 maxlen: 37
2401:9640:1800::/37 maxlen: 37
2401:9640:2000::/37 maxlen: 37
2401:9640:2800::/37 maxlen: 37
2401:9640:3000::/37 maxlen: 37
2401:9640:3800::/37 maxlen: 37
2401:9640:4000::/37 maxlen: 37
2401:9640:4800::/37 maxlen: 37
2401:9640:5000::/37 maxlen: 37
2401:9640:5800::/37 maxlen: 37
2401:9640:6000::/37 maxlen: 37
2401:9640:6800::/37 maxlen: 37
2401:9640:7000::/37 maxlen: 37
2401:9640:7800::/37 maxlen: 37
2401:9640:8000::/37 maxlen: 37
2401:9640:8800::/37 maxlen: 37
2407:aec0::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 03 May 2024 15:38:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 34180 (0x8584)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Validity
Not Before: Mar 28 09:20:12 2024 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=6605364b-9477
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:82:81:66:19:24:eb:db:ec:3f:aa:55:4f:22:
e0:d3:d0:e8:a9:43:ea:5c:a7:ce:f3:7c:ab:6f:63:
a7:2b:ef:94:5f:41:fa:bd:10:7c:b7:c6:09:b7:45:
c0:d2:f4:af:d1:79:67:e4:0f:58:78:99:8f:f4:f5:
e9:66:0c:78:92:9f:e1:29:38:ad:37:18:9a:79:a1:
c5:67:a8:79:98:6b:3c:31:4c:b9:6c:7f:c7:93:2b:
41:68:56:d2:83:c1:b0:ae:41:c8:48:8d:e1:24:45:
35:49:c4:9e:ce:ee:94:b5:ac:96:11:6e:f7:9a:eb:
38:7c:18:08:25:57:49:f2:bb:5f:15:17:78:29:5d:
f0:df:ce:f8:2f:9b:6f:2e:bd:f3:64:23:9a:ca:bc:
82:2a:78:72:6c:ef:fb:80:f4:21:7a:5b:a3:66:1b:
29:16:36:e5:fb:df:1e:6b:00:5d:f6:4d:00:b5:b7:
ed:fe:fe:e3:ba:e4:8b:63:78:ec:0f:75:22:2a:2e:
e4:50:80:9a:44:41:e4:b0:50:32:88:2c:ce:18:98:
c9:0c:bc:20:16:b4:5c:fc:b5:03:8e:c7:44:a7:e0:
09:1a:79:bd:76:da:2e:9b:31:80:4a:23:ce:74:98:
82:96:94:35:71:bf:d4:17:31:71:02:02:9c:69:81:
16:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:02:48:D7:E1:5B:D9:39:EC:8E:6D:62:63:45:AB:27:76:B3:95:5A
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/BD2F954EC4C511EE8795D21FC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.118.156.0/22
103.46.200.0/22
103.48.196.0/22
103.56.228.0/22
103.57.84.0/22
103.85.143.0/24
103.87.56.0/22
103.92.40.0/22
103.95.80.0/22
103.108.4.0/22
103.110.48.0/23
103.120.50.0/23
103.139.56.0/24
103.157.227.0/24
103.160.26.0/23
103.161.56.0/23
103.164.188.0/24
103.170.80.0/23
103.172.72.0/23
103.177.120.0/23
103.181.166.0/24
103.205.146.0/24
103.211.12.0-103.211.19.255
103.211.52.0/22
103.212.144.0/22
103.212.156.0/22
103.214.60.0/22
110.235.216.0/22
110.235.224.0/20
139.5.240.0/22
139.5.248.0/21
144.48.72.0/22
146.196.32.0/21
160.202.36.0/22
192.140.152.0/22
202.173.124.0/22
IPv6:
2401:9640::/32
2407:aec0::/32
Signature Algorithm: sha256WithRSAEncryption
b3:50:0e:1d:65:5a:ee:fc:fa:2c:11:78:07:ff:5a:16:3b:db:
5e:e6:89:22:44:df:b6:a0:1c:53:fd:4e:7c:5d:d4:bf:7a:8e:
41:2b:da:34:57:2c:2a:de:f9:0f:12:0c:38:69:86:8c:da:4d:
a8:da:31:5a:ce:87:d0:c3:9c:05:87:d4:1e:7b:fb:af:33:92:
d8:ac:49:2d:ed:46:5c:08:a1:0e:55:94:40:a0:bc:ae:36:08:
1d:c1:68:40:e5:9d:0e:4f:75:37:3c:c3:f3:7c:92:2b:cf:04:
ef:5b:4e:ac:07:01:3e:b6:d8:9d:27:a3:45:e1:3e:2f:d1:51:
f7:ea:d1:d9:eb:57:ef:e2:06:5f:59:1d:24:c8:9a:b8:da:e7:
de:2d:2d:5e:2c:be:3f:e3:46:2d:d3:50:f8:ed:d1:dd:13:3e:
08:1e:21:30:b7:93:69:be:71:38:f8:2a:b2:ed:0f:30:2f:d2:
66:cd:a0:b5:c6:cf:fa:15:29:4d:ab:60:70:5b:79:d7:85:5d:
83:8e:20:3c:b4:e6:d5:2c:d9:46:90:ea:0c:f9:8b:36:27:f3:
c2:fb:b9:79:60:7a:a6:49:2b:b6:d3:04:11:6f:50:55:f9:e5:
f9:5e:a8:f3:93:50:7e:99:a5:66:30:84:80:d3:df:ba:68:1e:
f0:1a:54:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 27 10:19:45 2024 by rpki-client on console-ams.rpki-client.org