Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/ECC9D610431C11EDBDB23573C4F9AE02.roa
File: ECC9D610431C11EDBDB23573C4F9AE02.roa (raw, json)
Hash identifier: GrtiicZfXNhBAbU4HXlImR3o5sorg6p3bHmGbD8cfdo=
Subject key identifier: 00:E4:55:52:4D:3A:0F:7F:CE:D9:EE:1B:56:BF:90:BB:BF:89:6F:50
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: 69F3
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/ECC9D610431C11EDBDB23573C4F9AE02.roa
Signing time: Wed 10 May 2023 16:12:21 +0000
ROA not before: Wed 10 May 2023 16:12:21 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 132453
IP address blocks: 103.21.184.0/22 maxlen: 24
103.57.70.0/23 maxlen: 23
103.57.70.0/24 maxlen: 24
103.57.71.0/24 maxlen: 24
103.227.68.0/22 maxlen: 22
103.227.68.0/24 maxlen: 24
103.227.69.0/24 maxlen: 24
103.227.70.0/24 maxlen: 24
103.227.71.0/24 maxlen: 24
103.240.192.0/22 maxlen: 22
103.240.192.0/24 maxlen: 24
103.240.193.0/24 maxlen: 24
103.240.194.0/24 maxlen: 24
103.240.195.0/24 maxlen: 24
103.240.232.0/22 maxlen: 22
103.240.232.0/24 maxlen: 24
103.240.233.0/24 maxlen: 24
103.240.234.0/24 maxlen: 24
103.240.235.0/24 maxlen: 24
103.240.236.0/22 maxlen: 22
103.240.236.0/24 maxlen: 24
103.240.237.0/24 maxlen: 24
103.240.238.0/24 maxlen: 24
103.240.239.0/24 maxlen: 24
103.245.12.0/22 maxlen: 22
103.245.12.0/24 maxlen: 24
103.245.13.0/24 maxlen: 24
103.245.14.0/24 maxlen: 24
103.245.15.0/24 maxlen: 24
103.248.84.0/22 maxlen: 22
103.248.84.0/24 maxlen: 24
103.248.85.0/24 maxlen: 24
103.248.86.0/24 maxlen: 24
103.248.87.0/24 maxlen: 24
103.252.216.0/22 maxlen: 22
103.252.216.0/24 maxlen: 24
103.252.217.0/24 maxlen: 24
103.252.218.0/24 maxlen: 24
103.252.219.0/24 maxlen: 24
103.253.172.0/22 maxlen: 22
103.253.172.0/24 maxlen: 24
103.253.173.0/24 maxlen: 24
103.253.174.0/24 maxlen: 24
103.253.175.0/24 maxlen: 24
111.125.196.0/22 maxlen: 24
150.129.180.0/22 maxlen: 22
150.129.180.0/24 maxlen: 24
150.129.181.0/24 maxlen: 24
150.129.182.0/24 maxlen: 24
150.129.183.0/24 maxlen: 24
150.129.236.0/22 maxlen: 22
150.129.236.0/24 maxlen: 24
150.129.237.0/24 maxlen: 24
150.129.238.0/24 maxlen: 24
150.129.239.0/24 maxlen: 24
150.129.248.0/22 maxlen: 22
150.129.248.0/24 maxlen: 24
150.129.249.0/24 maxlen: 24
150.129.250.0/24 maxlen: 24
150.129.251.0/24 maxlen: 24
150.242.60.0/22 maxlen: 22
150.242.60.0/24 maxlen: 24
150.242.61.0/24 maxlen: 24
150.242.62.0/24 maxlen: 24
150.242.63.0/24 maxlen: 24
150.242.64.0/22 maxlen: 22
150.242.64.0/24 maxlen: 24
150.242.65.0/24 maxlen: 24
150.242.66.0/24 maxlen: 24
150.242.67.0/24 maxlen: 24
150.242.72.0/22 maxlen: 22
150.242.72.0/24 maxlen: 24
150.242.73.0/24 maxlen: 24
150.242.74.0/24 maxlen: 24
150.242.75.0/24 maxlen: 24
150.242.84.0/22 maxlen: 22
150.242.84.0/24 maxlen: 24
150.242.85.0/24 maxlen: 24
150.242.86.0/24 maxlen: 24
150.242.87.0/24 maxlen: 24
150.242.172.0/22 maxlen: 22
150.242.172.0/24 maxlen: 24
150.242.173.0/24 maxlen: 24
150.242.174.0/24 maxlen: 24
150.242.175.0/24 maxlen: 24
2400:80c0::/32 maxlen: 36
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 03 May 2024 15:38:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 27123 (0x69f3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Validity
Not Before: May 10 16:12:21 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=645bc265-e5a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:c7:ad:2a:10:06:af:00:33:05:80:fc:45:20:
f8:0b:2e:f9:29:90:71:dd:5a:c8:ec:45:06:7b:97:
42:13:a6:b3:52:8d:d4:4a:d5:d0:4f:eb:34:39:2e:
35:02:f2:c7:55:72:4e:af:c2:51:92:97:33:64:9e:
e7:ae:4b:3d:0a:de:3c:47:0c:c1:28:d4:8d:20:ad:
6f:f8:a3:c4:f5:5c:99:2f:55:82:d7:c0:26:cb:3a:
f0:c1:c6:bc:aa:0f:fa:13:68:fd:58:4e:0e:ea:2f:
73:fc:e0:dd:d3:6e:30:d8:37:ce:42:47:27:bf:c7:
fc:da:ca:f2:f9:1c:af:99:c7:7d:b6:80:81:13:70:
b4:8e:c7:ba:9e:0c:67:d5:c7:9c:f3:5e:95:81:0a:
af:ee:ba:f3:0a:11:6a:85:b5:d4:50:8b:42:a2:d7:
bc:bd:2c:30:e3:79:42:f4:ff:db:20:27:0d:41:4a:
15:d8:73:20:96:c5:df:83:3b:fc:0c:96:29:2a:a1:
2c:db:27:7d:60:90:60:f3:b7:0f:5a:e1:61:aa:3a:
89:f5:d1:b3:c7:a1:2d:55:81:88:2c:25:2c:29:db:
ef:4b:1b:ee:c2:8a:f6:3e:91:b7:ef:cc:e7:6e:d8:
7d:1c:19:ae:90:70:0a:cd:a9:8d:72:1b:f1:eb:5e:
ca:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:E4:55:52:4D:3A:0F:7F:CE:D9:EE:1B:56:BF:90:BB:BF:89:6F:50
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/ECC9D610431C11EDBDB23573C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.21.184.0/22
103.57.70.0/23
103.227.68.0/22
103.240.192.0/22
103.240.232.0/21
103.245.12.0/22
103.248.84.0/22
103.252.216.0/22
103.253.172.0/22
111.125.196.0/22
150.129.180.0/22
150.129.236.0/22
150.129.248.0/22
150.242.60.0-150.242.67.255
150.242.72.0/22
150.242.84.0/22
150.242.172.0/22
IPv6:
2400:80c0::/32
Signature Algorithm: sha256WithRSAEncryption
b5:ba:fd:94:0c:61:2b:79:c0:cd:c8:51:de:89:f4:24:f9:b9:
25:4a:e3:84:17:8d:97:53:0e:8c:2c:f0:11:03:e0:b4:4d:7c:
45:c6:40:f7:23:09:48:55:98:61:be:87:f6:5f:10:4e:6e:b0:
da:5d:f6:e6:0e:89:82:0e:7e:9f:7c:40:c1:3b:db:e6:22:1a:
d9:f4:02:f3:6f:f6:f7:1e:0b:42:13:da:cb:27:23:bc:5a:88:
ee:c0:04:7f:48:3d:96:35:f0:2f:03:7a:25:81:9d:92:fa:47:
81:92:55:9d:ea:35:f8:ec:cb:d6:92:30:27:5e:1f:f3:6b:9c:
bf:bd:e5:c8:43:4b:7d:a6:1e:d5:65:aa:46:66:6a:a5:66:03:
99:df:bf:60:59:22:5f:42:ad:7a:c7:68:67:4f:82:2c:d5:b7:
ef:51:95:e9:e9:fa:f2:31:af:3b:51:b1:71:35:e0:46:eb:2e:
6e:7a:50:78:1d:44:ea:31:e7:b9:75:1a:a4:c5:f5:8a:3c:b3:
cf:31:07:54:23:e4:56:f3:64:90:9c:d2:67:23:1d:ce:58:e3:
51:a4:44:f4:a7:67:3d:24:93:2d:db:a3:3e:36:20:0e:4a:cd:
85:db:b0:66:a4:ba:74:5f:3d:a8:c5:88:b0:50:fa:be:43:b4:
f0:1f:5f:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 27 10:19:48 2024 by rpki-client on console-ams.rpki-client.org