Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/E108D92ECDDD11EDAB222013C4F9AE02.roa
File: E108D92ECDDD11EDAB222013C4F9AE02.roa (raw, json)
Hash identifier: x9AXbdwCL8FJjY9yPplK0R73Qxp5Qw/9Mwj3FvRJD9M=
Subject key identifier: 37:85:6C:78:51:19:C1:62:67:A2:C8:BF:1F:6B:FD:3C:36:7F:98:B6
Certificate issuer: /CN=A91A560A/serialNumber=167C3B221775FEC05039468150CE814756AC6F0A
Certificate serial: 4556
Authority key identifier: 16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/E108D92ECDDD11EDAB222013C4F9AE02.roa
Signing time: Thu 05 Sep 2024 03:32:18 +0000
ROA not before: Thu 05 Sep 2024 03:32:18 +0000
ROA not after: Fri 31 Oct 2025 00:00:00 +0000
asID: 131429
IP address blocks: 42.1.64.0/18 maxlen: 24
45.121.24.0/22 maxlen: 24
59.153.220.0/22 maxlen: 24
59.153.224.0/22 maxlen: 24
59.153.228.0/22 maxlen: 24
59.153.232.0/22 maxlen: 24
59.153.236.0/22 maxlen: 24
59.153.240.0/22 maxlen: 24
59.153.244.0/22 maxlen: 24
59.153.248.0/22 maxlen: 24
59.153.252.0/22 maxlen: 24
103.7.174.0/23 maxlen: 24
103.53.252.0/22 maxlen: 24
103.156.0.0/23 maxlen: 23
103.156.0.0/24 maxlen: 24
103.156.1.0/24 maxlen: 24
103.156.2.0/23 maxlen: 23
103.156.2.0/24 maxlen: 24
103.156.3.0/24 maxlen: 24
103.156.4.0/23 maxlen: 23
103.156.4.0/24 maxlen: 24
103.156.5.0/24 maxlen: 24
103.156.6.0/24 maxlen: 24
103.156.7.0/24 maxlen: 24
103.156.8.0/24 maxlen: 24
103.156.9.0/24 maxlen: 24
103.156.38.0/24 maxlen: 24
103.156.39.0/24 maxlen: 24
103.156.40.0/24 maxlen: 24
103.156.41.0/24 maxlen: 24
103.156.42.0/24 maxlen: 24
103.156.43.0/24 maxlen: 24
103.156.44.0/24 maxlen: 24
103.156.45.0/24 maxlen: 24
103.156.46.0/24 maxlen: 24
103.156.47.0/24 maxlen: 24
103.156.48.0/24 maxlen: 24
103.156.49.0/24 maxlen: 24
103.156.58.0/24 maxlen: 24
103.156.59.0/24 maxlen: 24
103.156.60.0/24 maxlen: 24
103.156.61.0/24 maxlen: 24
103.199.20.0/22 maxlen: 24
103.199.24.0/22 maxlen: 24
103.199.28.0/22 maxlen: 24
103.199.32.0/22 maxlen: 24
103.199.36.0/22 maxlen: 24
103.199.40.0/22 maxlen: 24
103.199.44.0/22 maxlen: 24
103.199.48.0/22 maxlen: 24
103.199.52.0/22 maxlen: 24
103.199.56.0/22 maxlen: 24
103.199.60.0/22 maxlen: 24
103.199.64.0/22 maxlen: 24
103.199.68.0/22 maxlen: 24
103.199.72.0/22 maxlen: 24
103.199.76.0/22 maxlen: 24
137.59.24.0/22 maxlen: 24
137.59.28.0/22 maxlen: 24
137.59.32.0/22 maxlen: 24
137.59.36.0/22 maxlen: 24
137.59.40.0/22 maxlen: 24
137.59.44.0/22 maxlen: 24
2402:9d80::/32 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl
rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 02 Dec 2024 11:15:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 17750 (0x4556)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A560A/serialNumber=167C3B221775FEC05039468150CE814756AC6F0A
Validity
Not Before: Sep 5 03:32:18 2024 GMT
Not After : Oct 31 00:00:00 2025 GMT
Subject: CN=66d92642-410e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:e6:02:4e:85:70:a6:b9:9b:33:1e:e5:44:51:
a5:ac:c4:d1:dc:cd:e4:f1:18:19:1b:15:5a:26:1e:
6f:44:d5:fe:0d:05:d8:6e:8b:39:95:c5:63:7b:3c:
58:af:66:bd:40:5f:9a:e1:83:cf:a4:68:16:c7:12:
89:5e:19:7a:5f:6e:a9:0f:77:8b:7b:bc:36:cc:aa:
a4:5d:3a:63:6b:f6:2c:4d:b2:b7:5c:f1:90:47:89:
7e:7d:d5:94:f1:ce:62:62:d3:47:76:04:64:e7:88:
f2:70:7f:10:69:40:ee:ff:f8:b4:0f:f3:ae:6b:bc:
07:1b:3f:43:3d:00:1c:d5:44:e3:04:33:46:c0:3f:
45:be:0d:d1:9d:ac:0a:51:ce:9b:ad:d1:05:ec:4c:
09:af:5f:ed:cb:c3:c8:04:d5:51:dd:83:ef:12:da:
7f:70:ec:ce:55:19:4d:39:06:71:63:30:c8:23:c2:
43:ad:2b:fe:3e:b5:f6:17:ce:85:52:e4:17:dd:2b:
9c:95:a1:f5:69:1b:e0:f2:a2:3e:df:4e:f1:2f:7a:
b4:75:8e:7e:71:b5:c3:11:6a:b1:be:ba:bb:87:da:
20:67:a9:e6:89:05:e1:45:2d:0d:d2:ca:ba:09:b8:
8c:84:2d:92:6e:ed:19:9c:9e:a1:e0:03:36:f2:7c:
91:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:85:6C:78:51:19:C1:62:67:A2:C8:BF:1F:6B:FD:3C:36:7F:98:B6
X509v3 Authority Key Identifier:
keyid:16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/E108D92ECDDD11EDAB222013C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
42.1.64.0/18
45.121.24.0/22
59.153.220.0-59.153.255.255
103.7.174.0/23
103.53.252.0/22
103.156.0.0-103.156.9.255
103.156.38.0-103.156.49.255
103.156.58.0-103.156.61.255
103.199.20.0-103.199.79.255
137.59.24.0-137.59.47.255
IPv6:
2402:9d80::/32
Signature Algorithm: sha256WithRSAEncryption
5f:94:93:d9:2e:7c:0e:3e:f4:18:53:c7:ea:44:76:82:76:7b:
95:09:89:f7:ac:06:a3:92:fa:64:23:48:d0:fd:c4:0c:29:73:
42:ff:a3:7e:22:21:08:e6:32:9a:22:71:7a:bd:a7:b8:fa:a8:
10:f3:91:fc:3f:1c:c6:82:f4:04:56:17:e8:c0:05:5c:77:25:
9c:c3:62:15:86:ca:7c:18:eb:38:0a:17:b4:73:1d:5c:b6:fd:
fa:d4:45:de:28:21:79:4a:5b:6e:ad:f8:02:db:91:80:e5:03:
c9:f8:73:27:2c:42:21:36:c7:36:82:60:38:2c:95:f3:ad:3f:
fe:5a:b9:53:61:c4:8e:c1:45:eb:d5:3d:45:90:3e:68:15:b7:
e9:b5:19:36:ac:07:c4:21:5b:9a:a1:3b:67:2d:08:1a:e3:ae:
ae:f0:0e:61:f8:cf:5d:f1:1c:6c:a2:f2:da:4d:29:92:12:76:
70:39:c5:7b:f2:d0:9f:87:57:c0:5b:42:39:8f:f0:67:41:fe:
ed:cb:9c:12:83:9e:73:a0:6f:7a:e2:00:8e:c8:ce:3a:ce:77:
2f:02:ac:7a:51:4d:d5:58:c9:0a:31:60:d0:8d:eb:9b:65:ca:
23:ee:7e:97:4d:7e:14:8b:fc:28:9b:f6:08:60:84:95:8a:09:
63:f0:14:6c
-----BEGIN CERTIFICATE-----
MIIF5zCCBM+gAwIBAgICRVYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QTU2MEExMTAvBgNVBAUTKDE2N0MzQjIyMTc3NUZFQzA1MDM5NDY4MTUwQ0U4MTQ3
NTZBQzZGMEEwHhcNMjQwOTA1MDMzMjE4WhcNMjUxMDMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02NmQ5MjY0Mi00MTBlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEApOYCToVwprmbMx7lRFGlrMTR3M3k8RgZGxVaJh5vRNX+DQXYbos5lcVjezxY
r2a9QF+a4YPPpGgWxxKJXhl6X26pD3eLe7w2zKqkXTpja/YsTbK3XPGQR4l+fdWU
8c5iYtNHdgRk54jycH8QaUDu//i0D/Oua7wHGz9DPQAc1UTjBDNGwD9Fvg3RnawK
Uc6brdEF7EwJr1/ty8PIBNVR3YPvEtp/cOzOVRlNOQZxYzDII8JDrSv+PrX2F86F
UuQX3SuclaH1aRvg8qI+307xL3q0dY5+cbXDEWqxvrq7h9ogZ6nmiQXhRS0N0sq6
CbiMhC2Sbu0ZnJ6h4AM28nyR2wIDAQABo4IDCzCCAwcwHQYDVR0OBBYEFDeFbHhR
GcFiZ6LIvx9r/Tw2f5i2MB8GA1UdIwQYMBaAFBZ8OyIXdf7AUDlGgVDOgUdWrG8K
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNTYwQS9BQUVCMTkxQTFE
OEExMUUyQTM4N0QwRTQwOEIwMkNEMi9Gbnc3SWhkMV9zQlFPVWFCVU02QlIxYXNi
d28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0ZudzdJaGQxX3NCUU9VYUJVTTZCUjFhc2J3by5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
QTU2MEEvQUFFQjE5MUExRDhBMTFFMkEzODdEMEU0MDhCMDJDRDIvRTEwOEQ5MkVD
REREMTFFREFCMjIyMDEzQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwgZQGCCsGAQUFBwEHAQH/
BIGEMIGBMHAEAgABMGoDBAYqAUADBAIteRgwCwMEAjuZ3AMDATuYAwQBZweuAwQC
ZzX8MAsDAwJnnAMEAWecCDAMAwQBZ5wmAwQBZ5wwMAwDBAFnnDoDBAFnnDwwDAME
AmfHFAMEBGfHQDAMAwQDiTsYAwQEiTsgMA0EAgACMAcDBQAkAp2AMA0GCSqGSIb3
DQEBCwUAA4IBAQBflJPZLnwOPvQYU8fqRHaCdnuVCYn3rAajkvpkI0jQ/cQMKXNC
/6N+IiEI5jKaInF6vae4+qgQ85H8PxzGgvQEVhfowAVcdyWcw2IVhsp8GOs4Che0
cx1ctv361EXeKCF5SlturfgC25GA5QPJ+HMnLEIhNsc2gmA4LJXzrT/+WrlTYcSO
wUXr1T1FkD5oFbfptRk2rAfEIVuaoTtnLQga466u8A5h+M9d8RxsovLaTSmSEnZw
OcV78tCfh1fAW0I5j/BnQf7ty5wSg55zoG964gCOyM46zncvAqx6UU3VWMkKMWDQ
jeubZcoj7n6XTX4Ui/wom/YIYISViglj8BRs
-----END CERTIFICATE-----
Generated at Mon Nov 25 13:17:33 2024 by rpki-client on console-ams.rpki-client.org