Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A919834A/2C0474746E3511E782DEFE55C4F9AE02/48EE1EC6A80311EBA56CEC52C4F9AE02.roa
File: 48EE1EC6A80311EBA56CEC52C4F9AE02.roa (raw, json)
Hash identifier: ycf4uNB94KvPwxW8YXzbudskFauWyZrYISPykOvSjI4=
Subject key identifier: E2:67:75:32:FD:C4:65:25:9D:F0:6F:F5:FF:43:B7:C1:08:1A:FF:6B
Certificate issuer: /CN=A919834A/serialNumber=F625D6BFCD421BD3DB97C6959414BC70946EABC4
Certificate serial: 18E7
Authority key identifier: F6:25:D6:BF:CD:42:1B:D3:DB:97:C6:95:94:14:BC:70:94:6E:AB:C4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9iXWv81CG9Pbl8aVlBS8cJRuq8Q.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A919834A/2C0474746E3511E782DEFE55C4F9AE02/48EE1EC6A80311EBA56CEC52C4F9AE02.roa
Signing time: Tue 02 Jan 2024 16:55:18 +0000
ROA not before: Tue 02 Jan 2024 16:55:18 +0000
ROA not after: Sun 02 Mar 2025 00:00:00 +0000
asID: 45326
IP address blocks: 103.30.28.0/22 maxlen: 22
103.30.28.0/23 maxlen: 23
103.30.28.0/24 maxlen: 24
103.30.29.0/24 maxlen: 24
103.30.30.0/23 maxlen: 23
103.30.30.0/24 maxlen: 24
103.30.31.0/24 maxlen: 24
119.18.144.0/21 maxlen: 21
119.18.144.0/22 maxlen: 22
119.18.144.0/23 maxlen: 23
119.18.144.0/24 maxlen: 24
119.18.145.0/24 maxlen: 24
119.18.146.0/23 maxlen: 23
119.18.146.0/24 maxlen: 24
119.18.147.0/24 maxlen: 24
119.18.148.0/22 maxlen: 22
119.18.148.0/23 maxlen: 23
119.18.148.0/24 maxlen: 24
119.18.149.0/24 maxlen: 24
119.18.150.0/23 maxlen: 23
119.18.150.0/24 maxlen: 24
119.18.151.0/24 maxlen: 24
202.5.32.0/19 maxlen: 19
202.5.32.0/20 maxlen: 20
202.5.32.0/21 maxlen: 21
202.5.32.0/22 maxlen: 22
202.5.32.0/23 maxlen: 23
202.5.32.0/24 maxlen: 24
202.5.33.0/24 maxlen: 24
202.5.34.0/23 maxlen: 23
202.5.34.0/24 maxlen: 24
202.5.35.0/24 maxlen: 24
202.5.36.0/22 maxlen: 22
202.5.36.0/23 maxlen: 23
202.5.36.0/24 maxlen: 24
202.5.37.0/24 maxlen: 24
202.5.38.0/23 maxlen: 23
202.5.38.0/24 maxlen: 24
202.5.39.0/24 maxlen: 24
202.5.40.0/21 maxlen: 21
202.5.40.0/22 maxlen: 22
202.5.40.0/23 maxlen: 23
202.5.40.0/24 maxlen: 24
202.5.41.0/24 maxlen: 24
202.5.42.0/23 maxlen: 23
202.5.42.0/24 maxlen: 24
202.5.43.0/24 maxlen: 24
202.5.44.0/22 maxlen: 22
202.5.44.0/23 maxlen: 23
202.5.44.0/24 maxlen: 24
202.5.45.0/24 maxlen: 24
202.5.46.0/23 maxlen: 23
202.5.46.0/24 maxlen: 24
202.5.47.0/24 maxlen: 24
202.5.48.0/20 maxlen: 20
202.5.48.0/21 maxlen: 21
202.5.48.0/22 maxlen: 22
202.5.48.0/23 maxlen: 23
202.5.48.0/24 maxlen: 24
202.5.49.0/24 maxlen: 24
202.5.50.0/23 maxlen: 23
202.5.50.0/24 maxlen: 24
202.5.51.0/24 maxlen: 24
202.5.52.0/22 maxlen: 22
202.5.52.0/23 maxlen: 23
202.5.52.0/24 maxlen: 24
202.5.53.0/24 maxlen: 24
202.5.54.0/23 maxlen: 23
202.5.54.0/24 maxlen: 24
202.5.55.0/24 maxlen: 24
202.5.56.0/21 maxlen: 21
202.5.56.0/22 maxlen: 22
202.5.56.0/23 maxlen: 23
202.5.56.0/24 maxlen: 24
202.5.57.0/24 maxlen: 24
202.5.58.0/23 maxlen: 23
202.5.58.0/24 maxlen: 24
202.5.59.0/24 maxlen: 24
202.5.60.0/22 maxlen: 22
202.5.60.0/23 maxlen: 23
202.5.60.0/24 maxlen: 24
202.5.61.0/24 maxlen: 24
202.5.62.0/23 maxlen: 23
202.5.62.0/24 maxlen: 24
202.5.63.0/24 maxlen: 24
2401:8a40::/32 maxlen: 32
2401:8a40::/33 maxlen: 35
2401:8a40::/48 maxlen: 48
2401:8a40:1::/48 maxlen: 48
2401:8a40:2::/48 maxlen: 48
2401:8a40:3::/48 maxlen: 48
2401:8a40:4::/48 maxlen: 48
2401:8a40:5::/48 maxlen: 48
2401:8a40:6::/48 maxlen: 48
2401:8a40:7::/48 maxlen: 48
2401:8a40:8::/48 maxlen: 48
2401:8a40:9::/48 maxlen: 48
2401:8a40:a::/48 maxlen: 48
2401:8a40:b::/48 maxlen: 48
2401:8a40:c::/48 maxlen: 48
2401:8a40:d::/48 maxlen: 48
2401:8a40:e::/48 maxlen: 48
2401:8a40:f::/48 maxlen: 48
2401:8a40:10::/48 maxlen: 48
2401:8a40:11::/48 maxlen: 48
2401:8a40:12::/48 maxlen: 48
2401:8a40:13::/48 maxlen: 48
2401:8a40:14::/48 maxlen: 48
2401:8a40:15::/48 maxlen: 48
2401:8a40:16::/48 maxlen: 48
2401:8a40:17::/48 maxlen: 48
2401:8a40:18::/48 maxlen: 48
2401:8a40:19::/48 maxlen: 48
2401:8a40:1a::/48 maxlen: 48
2401:8a40:1b::/48 maxlen: 48
2401:8a40:1c::/48 maxlen: 48
2401:8a40:1d::/48 maxlen: 48
2401:8a40:1e::/48 maxlen: 48
2401:8a40:1f::/48 maxlen: 48
2401:8a40:20::/48 maxlen: 48
2401:8a40:21::/48 maxlen: 48
2401:8a40:22::/48 maxlen: 48
2401:8a40:23::/48 maxlen: 48
2401:8a40:24::/48 maxlen: 48
2401:8a40:25::/48 maxlen: 48
2401:8a40:26::/48 maxlen: 48
2401:8a40:27::/48 maxlen: 48
2401:8a40:28::/48 maxlen: 48
2401:8a40:29::/48 maxlen: 48
2401:8a40:2a::/48 maxlen: 48
2401:8a40:2b::/48 maxlen: 48
2401:8a40:2c::/48 maxlen: 48
2401:8a40:2d::/48 maxlen: 48
2401:8a40:2e::/48 maxlen: 48
2401:8a40:2f::/48 maxlen: 48
2401:8a40:30::/48 maxlen: 48
2401:8a40:31::/48 maxlen: 48
2401:8a40:32::/48 maxlen: 48
2401:8a40:33::/48 maxlen: 48
2401:8a40:34::/48 maxlen: 48
2401:8a40:35::/48 maxlen: 48
2401:8a40:36::/48 maxlen: 48
2401:8a40:37::/48 maxlen: 48
2401:8a40:38::/48 maxlen: 48
2401:8a40:39::/48 maxlen: 48
2401:8a40:3a::/48 maxlen: 48
2401:8a40:3b::/48 maxlen: 48
2401:8a40:3c::/48 maxlen: 48
2401:8a40:3d::/48 maxlen: 48
2401:8a40:3e::/48 maxlen: 48
2401:8a40:3f::/48 maxlen: 48
2401:8a40:40::/48 maxlen: 48
2401:8a40:41::/48 maxlen: 48
2401:8a40:42::/48 maxlen: 48
2401:8a40:43::/48 maxlen: 48
2401:8a40:44::/48 maxlen: 48
2401:8a40:45::/48 maxlen: 48
2401:8a40:46::/48 maxlen: 48
2401:8a40:47::/48 maxlen: 48
2401:8a40:48::/48 maxlen: 48
2401:8a40:49::/48 maxlen: 48
2401:8a40:4a::/48 maxlen: 48
2401:8a40:4b::/48 maxlen: 48
2401:8a40:4c::/48 maxlen: 48
2401:8a40:4d::/48 maxlen: 48
2401:8a40:4e::/48 maxlen: 48
2401:8a40:4f::/48 maxlen: 48
2401:8a40:50::/48 maxlen: 48
2401:8a40:51::/48 maxlen: 48
2401:8a40:52::/48 maxlen: 48
2401:8a40:53::/48 maxlen: 48
2401:8a40:54::/48 maxlen: 48
2401:8a40:55::/48 maxlen: 48
2401:8a40:56::/48 maxlen: 48
2401:8a40:57::/48 maxlen: 48
2401:8a40:58::/48 maxlen: 48
2401:8a40:59::/48 maxlen: 48
2401:8a40:5a::/48 maxlen: 48
2401:8a40:5b::/48 maxlen: 48
2401:8a40:5c::/48 maxlen: 48
2401:8a40:5d::/48 maxlen: 48
2401:8a40:5e::/48 maxlen: 48
2401:8a40:5f::/48 maxlen: 48
2401:8a40:60::/48 maxlen: 48
2401:8a40:61::/48 maxlen: 48
2401:8a40:62::/48 maxlen: 48
2401:8a40:63::/48 maxlen: 48
2401:8a40:8000::/33 maxlen: 35
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A919834A/2C0474746E3511E782DEFE55C4F9AE02/9iXWv81CG9Pbl8aVlBS8cJRuq8Q.crl
rsync://rpki.apnic.net/member_repository/A919834A/2C0474746E3511E782DEFE55C4F9AE02/9iXWv81CG9Pbl8aVlBS8cJRuq8Q.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9iXWv81CG9Pbl8aVlBS8cJRuq8Q.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 15 May 2024 02:42:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6375 (0x18e7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A919834A/serialNumber=F625D6BFCD421BD3DB97C6959414BC70946EABC4
Validity
Not Before: Jan 2 16:55:18 2024 GMT
Not After : Mar 2 00:00:00 2025 GMT
Subject: CN=65943ff5-c371
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:60:3e:ea:b2:1f:c3:02:26:5f:e0:66:2d:d5:
a6:b5:f7:af:4b:d4:9a:c1:2b:03:cf:bf:d1:46:38:
0b:07:0a:d1:43:23:7c:8f:00:fa:ae:3c:65:37:1e:
9e:cd:c4:7c:c1:92:b6:1a:1f:c6:cb:c8:bf:42:91:
08:c5:55:bb:ee:b1:8e:bf:d7:65:04:6a:0c:20:57:
5f:0e:d1:6e:6f:7f:d6:00:23:f4:9d:72:84:45:99:
95:c4:b9:46:0c:11:66:6f:b8:84:02:ff:3a:eb:05:
34:93:95:c7:f0:ae:6d:a7:61:93:90:19:bc:a7:35:
05:78:c6:af:71:40:e1:4c:0a:73:21:e4:a0:e4:92:
a5:fd:04:e0:a3:22:cb:a4:bb:79:86:f3:9a:47:c6:
f9:95:16:0d:5a:0b:36:62:7f:48:28:27:ca:f5:98:
09:2d:75:08:c2:fb:e8:f8:d2:76:87:8b:de:f2:49:
2c:ce:73:09:85:31:e4:32:df:55:12:60:99:aa:b9:
3e:bf:f7:30:10:fb:7c:8a:94:bb:c1:38:4e:64:0b:
52:64:a5:9e:5c:9f:48:71:4a:b0:c8:be:52:67:30:
40:8e:b0:88:ab:3a:4f:4f:bb:f4:93:68:49:34:29:
77:e4:3a:4b:00:64:23:96:cb:e2:2a:b6:92:9c:ed:
99:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:67:75:32:FD:C4:65:25:9D:F0:6F:F5:FF:43:B7:C1:08:1A:FF:6B
X509v3 Authority Key Identifier:
keyid:F6:25:D6:BF:CD:42:1B:D3:DB:97:C6:95:94:14:BC:70:94:6E:AB:C4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A919834A/2C0474746E3511E782DEFE55C4F9AE02/9iXWv81CG9Pbl8aVlBS8cJRuq8Q.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9iXWv81CG9Pbl8aVlBS8cJRuq8Q.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919834A/2C0474746E3511E782DEFE55C4F9AE02/48EE1EC6A80311EBA56CEC52C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.30.28.0/22
119.18.144.0/21
202.5.32.0/19
IPv6:
2401:8a40::/32
Signature Algorithm: sha256WithRSAEncryption
89:c3:15:3e:26:11:31:af:dc:ce:ff:fd:0e:a7:ff:b0:b5:61:
97:16:fd:ef:2c:78:19:77:97:ca:de:a7:ac:1f:48:e1:8d:d3:
2a:03:36:e0:a0:38:ea:cd:cd:33:5d:7e:f7:52:66:cf:ee:85:
c2:20:11:92:ba:c1:3f:a6:98:82:86:73:29:40:b8:03:60:1d:
d7:3d:67:f2:da:f9:5a:32:2a:b6:ea:c2:c1:21:ef:cc:b7:e5:
05:93:e5:dc:95:da:cf:3d:5f:b1:0e:ba:90:75:4f:05:37:c6:
24:a9:4c:67:9d:e4:78:1a:f9:0a:41:bb:0e:65:3e:45:64:37:
40:b7:31:f9:3e:62:de:18:62:6e:06:bd:4b:44:1c:14:02:8b:
96:db:9d:8a:23:30:b1:f9:91:03:2b:6b:eb:9b:0d:f3:ca:07:
dd:98:40:67:5b:9e:42:07:0e:a7:92:d1:88:cc:82:2b:9e:eb:
b4:52:9d:6f:b9:f5:a2:71:1e:33:4a:69:a4:5b:ea:af:c1:1d:
46:6e:50:ea:8b:f4:64:18:27:29:5a:ad:dd:f6:df:54:0d:be:
3b:01:1f:78:d7:be:42:fd:2c:6a:68:cf:c7:6f:02:f1:84:9f:
2f:cc:8d:a7:3f:b9:be:44:fc:c1:43:4a:fd:79:a6:2a:e6:de:
05:be:ce:95
-----BEGIN CERTIFICATE-----
MIIFjDCCBHSgAwIBAgICGOcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OTgzNEExMTAvBgNVBAUTKEY2MjVENkJGQ0Q0MjFCRDNEQjk3QzY5NTk0MTRCQzcw
OTQ2RUFCQzQwHhcNMjQwMTAyMTY1NTE4WhcNMjUwMzAyMDAwMDAwWjAYMRYwFAYD
VQQDEw02NTk0M2ZmNS1jMzcxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAy2A+6rIfwwImX+BmLdWmtfevS9SawSsDz7/RRjgLBwrRQyN8jwD6rjxlNx6e
zcR8wZK2Gh/Gy8i/QpEIxVW77rGOv9dlBGoMIFdfDtFub3/WACP0nXKERZmVxLlG
DBFmb7iEAv866wU0k5XH8K5tp2GTkBm8pzUFeMavcUDhTApzIeSg5JKl/QTgoyLL
pLt5hvOaR8b5lRYNWgs2Yn9IKCfK9ZgJLXUIwvvo+NJ2h4ve8kksznMJhTHkMt9V
EmCZqrk+v/cwEPt8ipS7wThOZAtSZKWeXJ9IcUqwyL5SZzBAjrCIqzpPT7v0k2hJ
NCl35DpLAGQjlsviKraSnO2ZZwIDAQABo4ICsDCCAqwwHQYDVR0OBBYEFOJndTL9
xGUlnfBv9f9Dt8EIGv9rMB8GA1UdIwQYMBaAFPYl1r/NQhvT25fGlZQUvHCUbqvE
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5ODM0QS8yQzA0NzQ3NDZF
MzUxMUU3ODJERUZFNTVDNEY5QUUwMi85aVhXdjgxQ0c5UGJsOGFWbEJTOGNKUnVx
OFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzlpWFd2ODFDRzlQYmw4YVZsQlM4Y0pSdXE4US5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
OTgzNEEvMkMwNDc0NzQ2RTM1MTFFNzgyREVGRTU1QzRGOUFFMDIvNDhFRTFFQzZB
ODAzMTFFQkE1NkNFQzUyQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwOgYIKwYBBQUHAQcBAf8E
KzApMBgEAgABMBIDBAJnHhwDBAN3EpADBAXKBSAwDQQCAAIwBwMFACQBikAwDQYJ
KoZIhvcNAQELBQADggEBAInDFT4mETGv3M7//Q6n/7C1YZcW/e8seBl3l8rep6wf
SOGN0yoDNuCgOOrNzTNdfvdSZs/uhcIgEZK6wT+mmIKGcylAuANgHdc9Z/La+Voy
KrbqwsEh78y35QWT5dyV2s89X7EOupB1TwU3xiSpTGed5Hga+QpBuw5lPkVkN0C3
Mfk+Yt4YYm4GvUtEHBQCi5bbnYojMLH5kQMra+ubDfPKB92YQGdbnkIHDqeS0YjM
giue67RSnW+59aJxHjNKaaRb6q/BHUZuUOqL9GQYJylard3231QNvjsBH3jXvkL9
LGpoz8dvAvGEny/Mjac/ub5E/MFDSv15pirm3gW+zpU=
-----END CERTIFICATE-----
Generated at Wed May 8 17:47:34 2024 by rpki-client on console-ams.rpki-client.org