Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9195BA9/DF7A7F14838E11EA8CEA0960C4F9AE02/E9EDE9AAF05A11ECBD921381C4F9AE02.roa
File: E9EDE9AAF05A11ECBD921381C4F9AE02.roa (raw, json)
Hash identifier: HboE+xy7piKC3zUkYtpAMfNbbtMEPRumlNey38Milh0=
Subject key identifier: EA:24:02:54:2C:EB:0F:0C:C6:B4:71:D0:B7:7A:7C:F8:FD:1B:29:B4
Certificate issuer: /CN=A9195BA9/serialNumber=DA9D1F9C4FD9A27C75DACA7DE2299568380C0859
Certificate serial: 08C4
Authority key identifier: DA:9D:1F:9C:4F:D9:A2:7C:75:DA:CA:7D:E2:29:95:68:38:0C:08:59
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2p0fnE_Zonx12sp94imVaDgMCFk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9195BA9/DF7A7F14838E11EA8CEA0960C4F9AE02/E9EDE9AAF05A11ECBD921381C4F9AE02.roa
Signing time: Tue 02 Jan 2024 21:18:52 +0000
ROA not before: Tue 02 Jan 2024 21:18:52 +0000
ROA not after: Sun 02 Mar 2025 00:00:00 +0000
asID: 18106
IP address blocks: 45.121.84.0/22 maxlen: 22
45.121.84.0/24 maxlen: 24
45.121.85.0/24 maxlen: 24
45.121.86.0/24 maxlen: 24
45.121.87.0/24 maxlen: 24
103.4.196.0/22 maxlen: 22
103.4.196.0/24 maxlen: 24
103.4.197.0/24 maxlen: 24
103.4.198.0/24 maxlen: 24
103.4.199.0/24 maxlen: 24
103.26.220.0/22 maxlen: 22
103.60.60.0/22 maxlen: 22
103.60.60.0/24 maxlen: 24
103.60.61.0/24 maxlen: 24
103.60.62.0/24 maxlen: 24
103.60.63.0/24 maxlen: 24
103.247.108.0/22 maxlen: 22
103.247.108.0/24 maxlen: 24
103.247.109.0/24 maxlen: 24
103.247.110.0/24 maxlen: 24
103.247.111.0/24 maxlen: 24
202.55.64.0/19 maxlen: 20
202.55.64.0/24 maxlen: 24
202.55.65.0/24 maxlen: 24
202.55.66.0/24 maxlen: 24
202.55.67.0/24 maxlen: 24
202.55.68.0/24 maxlen: 24
202.55.69.0/24 maxlen: 24
202.55.70.0/24 maxlen: 24
202.55.71.0/24 maxlen: 24
202.55.72.0/24 maxlen: 24
202.55.73.0/24 maxlen: 24
202.55.74.0/24 maxlen: 24
202.55.75.0/24 maxlen: 24
202.55.76.0/24 maxlen: 24
202.55.77.0/24 maxlen: 24
202.55.78.0/24 maxlen: 24
202.55.79.0/24 maxlen: 24
202.55.80.0/24 maxlen: 24
202.55.81.0/24 maxlen: 24
202.55.83.0/24 maxlen: 24
202.55.84.0/24 maxlen: 24
202.55.85.0/24 maxlen: 24
202.55.86.0/24 maxlen: 24
202.55.87.0/24 maxlen: 24
202.55.88.0/24 maxlen: 24
202.55.89.0/24 maxlen: 24
202.55.90.0/24 maxlen: 24
202.55.91.0/24 maxlen: 24
202.55.92.0/24 maxlen: 24
202.55.93.0/24 maxlen: 24
202.55.94.0/24 maxlen: 24
202.55.95.0/24 maxlen: 24
202.73.32.0/19 maxlen: 19
202.73.32.0/20 maxlen: 20
202.73.32.0/24 maxlen: 24
202.73.33.0/24 maxlen: 24
202.73.34.0/24 maxlen: 24
202.73.35.0/24 maxlen: 24
202.73.36.0/24 maxlen: 24
202.73.37.0/24 maxlen: 24
202.73.38.0/24 maxlen: 24
202.73.39.0/24 maxlen: 24
202.73.40.0/24 maxlen: 24
202.73.41.0/24 maxlen: 24
202.73.42.0/24 maxlen: 24
202.73.43.0/24 maxlen: 24
202.73.44.0/24 maxlen: 24
202.73.45.0/24 maxlen: 24
202.73.46.0/24 maxlen: 24
202.73.47.0/24 maxlen: 24
202.73.48.0/20 maxlen: 20
202.73.48.0/24 maxlen: 24
202.73.49.0/24 maxlen: 24
202.73.50.0/24 maxlen: 24
202.73.51.0/24 maxlen: 24
202.73.52.0/24 maxlen: 24
202.73.53.0/24 maxlen: 24
202.73.54.0/24 maxlen: 24
202.73.55.0/24 maxlen: 24
202.73.56.0/24 maxlen: 24
202.73.57.0/24 maxlen: 24
202.73.58.0/24 maxlen: 24
202.73.59.0/24 maxlen: 24
202.73.60.0/24 maxlen: 24
202.73.61.0/24 maxlen: 24
202.73.62.0/24 maxlen: 24
202.73.63.0/24 maxlen: 24
202.83.96.0/20 maxlen: 20
202.83.96.0/24 maxlen: 24
202.83.97.0/24 maxlen: 24
202.83.98.0/24 maxlen: 24
202.83.99.0/24 maxlen: 24
202.83.100.0/24 maxlen: 24
202.83.101.0/24 maxlen: 24
202.83.102.0/24 maxlen: 24
202.83.103.0/24 maxlen: 24
202.83.104.0/24 maxlen: 24
202.83.105.0/24 maxlen: 24
202.83.106.0/24 maxlen: 24
202.83.107.0/24 maxlen: 24
202.83.108.0/24 maxlen: 24
202.83.109.0/24 maxlen: 24
202.83.110.0/24 maxlen: 24
202.83.111.0/24 maxlen: 24
2001:d98::/32 maxlen: 32
2001:d98::/36 maxlen: 36
2001:d98:1000::/36 maxlen: 36
2001:d98:2000::/36 maxlen: 36
2001:d98:3000::/36 maxlen: 36
2001:d98:4000::/36 maxlen: 36
2001:d98:5000::/36 maxlen: 36
2001:d98:6000::/36 maxlen: 36
2001:d98:7000::/36 maxlen: 36
2001:d98:8000::/36 maxlen: 36
2001:d98:9000::/36 maxlen: 36
2001:d98:a000::/36 maxlen: 36
2001:d98:b000::/36 maxlen: 36
2001:d98:c000::/36 maxlen: 36
2001:d98:d000::/36 maxlen: 36
2001:d98:e000::/36 maxlen: 36
2001:d98:f000::/36 maxlen: 36
2402:7480::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9195BA9/DF7A7F14838E11EA8CEA0960C4F9AE02/2p0fnE_Zonx12sp94imVaDgMCFk.crl
rsync://rpki.apnic.net/member_repository/A9195BA9/DF7A7F14838E11EA8CEA0960C4F9AE02/2p0fnE_Zonx12sp94imVaDgMCFk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2p0fnE_Zonx12sp94imVaDgMCFk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 27 Nov 2024 19:54:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2244 (0x8c4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9195BA9/serialNumber=DA9D1F9C4FD9A27C75DACA7DE2299568380C0859
Validity
Not Before: Jan 2 21:18:52 2024 GMT
Not After : Mar 2 00:00:00 2025 GMT
Subject: CN=65947dbb-2209
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:3d:38:dd:ee:c9:a3:21:45:65:17:8e:32:9a:
a3:8a:6f:21:76:44:34:26:24:97:d1:e5:63:74:c6:
0c:1c:3b:1f:09:28:5c:a0:b5:e7:38:e3:dc:a6:94:
75:cd:c3:24:f3:5d:d4:fd:4c:cb:9d:ed:79:9b:53:
0e:56:8b:a3:6d:a9:f0:7e:23:a6:5f:18:41:49:c5:
a7:c9:60:e0:49:0e:43:5f:e4:33:14:84:6d:4b:e5:
5d:b7:a8:0b:af:5c:80:cd:18:b4:9a:43:4d:7e:4f:
b7:56:23:23:00:48:05:ac:60:38:84:ba:8e:50:17:
6f:f3:e0:01:aa:7d:d5:ec:2e:e8:cd:59:ba:cf:8d:
f0:82:d8:7b:95:d4:4c:2a:a7:ee:dd:39:6e:e1:7c:
da:47:93:21:cd:f1:5b:94:74:1c:b1:a6:06:78:6e:
ac:db:46:3c:aa:94:92:0f:27:c0:01:27:ca:b0:71:
53:19:2f:a7:2b:aa:af:c8:0e:2f:07:e5:61:1f:a3:
a5:28:d4:41:be:7b:d9:58:aa:61:88:86:ac:04:49:
88:1e:2c:9a:a9:c1:a7:31:93:c3:3e:10:2e:f5:c3:
63:bd:6b:fb:df:61:5a:9b:e3:3c:df:a7:e0:71:56:
b3:06:68:4e:a0:24:95:52:2c:ec:b7:35:e9:da:64:
ac:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:24:02:54:2C:EB:0F:0C:C6:B4:71:D0:B7:7A:7C:F8:FD:1B:29:B4
X509v3 Authority Key Identifier:
keyid:DA:9D:1F:9C:4F:D9:A2:7C:75:DA:CA:7D:E2:29:95:68:38:0C:08:59
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9195BA9/DF7A7F14838E11EA8CEA0960C4F9AE02/2p0fnE_Zonx12sp94imVaDgMCFk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2p0fnE_Zonx12sp94imVaDgMCFk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9195BA9/DF7A7F14838E11EA8CEA0960C4F9AE02/E9EDE9AAF05A11ECBD921381C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.121.84.0/22
103.4.196.0/22
103.26.220.0/22
103.60.60.0/22
103.247.108.0/22
202.55.64.0/19
202.73.32.0/19
202.83.96.0/20
IPv6:
2001:d98::/32
2402:7480::/32
Signature Algorithm: sha256WithRSAEncryption
50:ca:45:c6:95:23:02:37:89:11:a6:0a:d1:2a:0d:4d:96:a7:
a1:ee:35:b6:a7:ac:53:51:00:fb:a3:59:a0:ce:7a:1b:15:e9:
a2:cf:a3:c0:43:07:e8:a4:ba:ca:b2:53:0d:ae:74:74:9b:db:
68:62:28:94:7e:19:24:4d:02:65:a2:bd:71:ca:bc:5b:e0:ae:
cd:93:a1:d1:58:31:28:1a:b9:af:1b:d6:20:8c:d1:97:43:3d:
46:1d:3c:bd:a0:6c:59:d0:28:76:7b:8b:f6:7a:d0:ce:26:dd:
9f:86:bb:a4:89:c7:4f:48:4f:6d:2a:d2:eb:bd:fe:93:86:63:
5f:8d:76:22:18:ed:98:40:3a:9d:be:14:8f:4a:1d:1e:2c:8e:
4f:8f:07:7e:8f:d7:e0:af:37:e7:b2:42:7e:f3:16:9b:cf:af:
30:07:86:d1:2a:c8:56:56:e5:b1:4c:fc:3b:56:1d:69:18:1d:
85:7e:c3:79:d8:5f:5c:bc:ae:e0:41:19:ae:d9:d9:30:80:c8:
14:bb:d5:b1:8b:a7:19:1c:ab:37:56:ec:d0:cb:f1:7d:eb:31:
90:7e:45:02:fa:0f:ab:af:d9:f6:fc:d1:b6:17:da:c2:13:b0:
5c:d2:e1:d7:40:c6:f6:82:c9:2c:97:d8:93:0e:28:ac:e5:fb:
c9:c0:a9:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 21:52:43 2024 by rpki-client on console-fra.rpki-client.org