Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91DC31B/D0ECCD48893D11EB916DF022C4F9AE02/97C79A806C0511EF8B77D10EC4F9AE02.roa
File: 97C79A806C0511EF8B77D10EC4F9AE02.roa (raw, json)
Hash identifier: hcyonUFmxHDnVAf9RIiDBakzz9f3tlRJPynrnnL6Mf0=
Subject key identifier: 9C:3D:BC:AD:D3:63:0A:BB:0A:A3:3E:08:27:3A:C1:65:C5:A7:EC:88
Certificate issuer: /CN=A91DC31B/serialNumber=8B8AD5CA1C3E8B8CF468B5F496A91ABB0E48CFA8
Certificate serial: 0678
Authority key identifier: 8B:8A:D5:CA:1C:3E:8B:8C:F4:68:B5:F4:96:A9:1A:BB:0E:48:CF:A8
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/i4rVyhw-i4z0aLX0lqkauw5Iz6g.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91DC31B/D0ECCD48893D11EB916DF022C4F9AE02/97C79A806C0511EF8B77D10EC4F9AE02.roa
Signing time: Fri 06 Sep 2024 04:07:55 +0000
ROA not before: Fri 06 Sep 2024 04:07:55 +0000
ROA not after: Mon 31 Mar 2025 00:00:00 +0000
asID: 0
IP address blocks: 166.81.0.0/24 maxlen: 24
166.81.1.0/24 maxlen: 24
166.81.3.0/24 maxlen: 24
166.81.4.0/24 maxlen: 24
166.81.7.0/24 maxlen: 24
166.81.8.0/24 maxlen: 24
166.81.31.0/24 maxlen: 24
166.81.36.0/24 maxlen: 24
166.81.37.0/24 maxlen: 24
166.81.41.0/24 maxlen: 24
166.81.42.0/24 maxlen: 24
166.81.43.0/24 maxlen: 24
166.81.44.0/24 maxlen: 24
166.81.45.0/24 maxlen: 24
166.81.46.0/24 maxlen: 24
166.81.47.0/24 maxlen: 24
166.81.48.0/24 maxlen: 24
166.81.49.0/24 maxlen: 24
166.81.50.0/24 maxlen: 24
166.81.71.0/24 maxlen: 24
166.81.72.0/24 maxlen: 24
166.81.73.0/24 maxlen: 24
166.81.74.0/24 maxlen: 24
166.81.75.0/24 maxlen: 24
166.81.76.0/24 maxlen: 24
166.81.82.0/24 maxlen: 24
166.81.84.0/24 maxlen: 24
166.81.85.0/24 maxlen: 24
166.81.86.0/24 maxlen: 24
166.81.87.0/24 maxlen: 24
166.81.88.0/24 maxlen: 24
166.81.89.0/24 maxlen: 24
166.81.90.0/24 maxlen: 24
166.81.91.0/24 maxlen: 24
166.81.92.0/24 maxlen: 24
166.81.93.0/24 maxlen: 24
166.81.94.0/24 maxlen: 24
166.81.95.0/24 maxlen: 24
166.81.96.0/24 maxlen: 24
166.81.97.0/24 maxlen: 24
166.81.98.0/24 maxlen: 24
166.81.99.0/24 maxlen: 24
166.81.100.0/24 maxlen: 24
166.81.107.0/24 maxlen: 24
166.81.108.0/24 maxlen: 24
166.81.109.0/24 maxlen: 24
166.81.110.0/24 maxlen: 24
166.81.111.0/24 maxlen: 24
166.81.112.0/24 maxlen: 24
166.81.113.0/24 maxlen: 24
166.81.114.0/24 maxlen: 24
166.81.115.0/24 maxlen: 24
166.81.116.0/24 maxlen: 24
166.81.117.0/24 maxlen: 24
166.81.118.0/24 maxlen: 24
166.81.119.0/24 maxlen: 24
166.81.120.0/24 maxlen: 24
166.81.121.0/24 maxlen: 24
166.81.122.0/24 maxlen: 24
166.81.123.0/24 maxlen: 24
166.81.124.0/24 maxlen: 24
166.81.125.0/24 maxlen: 24
166.81.126.0/24 maxlen: 24
166.81.127.0/24 maxlen: 24
166.81.128.0/24 maxlen: 24
166.81.129.0/24 maxlen: 24
166.81.130.0/24 maxlen: 24
166.81.131.0/24 maxlen: 24
166.81.132.0/24 maxlen: 24
166.81.133.0/24 maxlen: 24
166.81.134.0/24 maxlen: 24
166.81.135.0/24 maxlen: 24
166.81.136.0/24 maxlen: 24
166.81.137.0/24 maxlen: 24
166.81.138.0/24 maxlen: 24
166.81.139.0/24 maxlen: 24
166.81.140.0/24 maxlen: 24
166.81.141.0/24 maxlen: 24
166.81.142.0/24 maxlen: 24
166.81.143.0/24 maxlen: 24
166.81.144.0/24 maxlen: 24
166.81.145.0/24 maxlen: 24
166.81.146.0/24 maxlen: 24
166.81.147.0/24 maxlen: 24
166.81.148.0/24 maxlen: 24
166.81.149.0/24 maxlen: 24
166.81.150.0/24 maxlen: 24
166.81.151.0/24 maxlen: 24
166.81.152.0/24 maxlen: 24
166.81.153.0/24 maxlen: 24
166.81.154.0/24 maxlen: 24
166.81.155.0/24 maxlen: 24
166.81.156.0/24 maxlen: 24
166.81.157.0/24 maxlen: 24
166.81.158.0/24 maxlen: 24
166.81.159.0/24 maxlen: 24
166.81.160.0/24 maxlen: 24
166.81.161.0/24 maxlen: 24
166.81.162.0/24 maxlen: 24
166.81.163.0/24 maxlen: 24
166.81.164.0/24 maxlen: 24
166.81.165.0/24 maxlen: 24
166.81.166.0/24 maxlen: 24
166.81.167.0/24 maxlen: 24
166.81.168.0/24 maxlen: 24
166.81.169.0/24 maxlen: 24
166.81.170.0/24 maxlen: 24
166.81.171.0/24 maxlen: 24
166.81.172.0/24 maxlen: 24
166.81.173.0/24 maxlen: 24
166.81.174.0/24 maxlen: 24
166.81.175.0/24 maxlen: 24
166.81.176.0/24 maxlen: 24
166.81.177.0/24 maxlen: 24
166.81.178.0/24 maxlen: 24
166.81.179.0/24 maxlen: 24
166.81.180.0/24 maxlen: 24
166.81.181.0/24 maxlen: 24
166.81.182.0/24 maxlen: 24
166.81.183.0/24 maxlen: 24
166.81.184.0/24 maxlen: 24
166.81.185.0/24 maxlen: 24
166.81.186.0/24 maxlen: 24
166.81.187.0/24 maxlen: 24
166.81.188.0/24 maxlen: 24
166.81.189.0/24 maxlen: 24
166.81.190.0/24 maxlen: 24
166.81.191.0/24 maxlen: 24
166.81.192.0/24 maxlen: 24
166.81.193.0/24 maxlen: 24
166.81.194.0/24 maxlen: 24
166.81.195.0/24 maxlen: 24
166.81.196.0/24 maxlen: 24
166.81.197.0/24 maxlen: 24
166.81.198.0/24 maxlen: 24
166.81.199.0/24 maxlen: 24
166.81.200.0/24 maxlen: 24
166.81.201.0/24 maxlen: 24
166.81.202.0/24 maxlen: 24
166.81.203.0/24 maxlen: 24
166.81.204.0/24 maxlen: 24
166.81.205.0/24 maxlen: 24
166.81.206.0/24 maxlen: 24
166.81.207.0/24 maxlen: 24
166.81.208.0/24 maxlen: 24
166.81.209.0/24 maxlen: 24
166.81.210.0/24 maxlen: 24
166.81.211.0/24 maxlen: 24
166.81.212.0/24 maxlen: 24
166.81.213.0/24 maxlen: 24
166.81.214.0/24 maxlen: 24
166.81.215.0/24 maxlen: 24
166.81.216.0/24 maxlen: 24
166.81.217.0/24 maxlen: 24
166.81.218.0/24 maxlen: 24
166.81.219.0/24 maxlen: 24
166.81.220.0/24 maxlen: 24
166.81.221.0/24 maxlen: 24
166.81.222.0/24 maxlen: 24
166.81.223.0/24 maxlen: 24
166.81.224.0/24 maxlen: 24
166.81.225.0/24 maxlen: 24
166.81.226.0/24 maxlen: 24
166.81.227.0/24 maxlen: 24
166.81.228.0/24 maxlen: 24
166.81.229.0/24 maxlen: 24
166.81.230.0/24 maxlen: 24
166.81.231.0/24 maxlen: 24
166.81.232.0/24 maxlen: 24
166.81.233.0/24 maxlen: 24
166.81.234.0/24 maxlen: 24
166.81.235.0/24 maxlen: 24
166.81.236.0/24 maxlen: 24
166.81.237.0/24 maxlen: 24
166.81.238.0/24 maxlen: 24
166.81.239.0/24 maxlen: 24
166.81.240.0/24 maxlen: 24
166.81.241.0/24 maxlen: 24
166.81.242.0/24 maxlen: 24
166.81.243.0/24 maxlen: 24
166.81.244.0/24 maxlen: 24
166.81.245.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91DC31B/D0ECCD48893D11EB916DF022C4F9AE02/i4rVyhw-i4z0aLX0lqkauw5Iz6g.crl
rsync://rpki.apnic.net/member_repository/A91DC31B/D0ECCD48893D11EB916DF022C4F9AE02/i4rVyhw-i4z0aLX0lqkauw5Iz6g.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/i4rVyhw-i4z0aLX0lqkauw5Iz6g.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 27 Oct 2024 17:25:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1656 (0x678)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91DC31B/serialNumber=8B8AD5CA1C3E8B8CF468B5F496A91ABB0E48CFA8
Validity
Not Before: Sep 6 04:07:55 2024 GMT
Not After : Mar 31 00:00:00 2025 GMT
Subject: CN=66da801b-f995
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:c6:1c:41:1f:7a:e9:db:25:45:32:10:64:32:
6c:49:c9:38:c0:27:a1:4e:41:0d:82:84:7c:ed:99:
cf:35:78:a5:9f:b8:f8:ce:77:d4:9a:2e:8a:4e:4c:
cb:e5:ac:ad:fa:61:a3:ce:88:76:db:01:5b:1e:95:
1d:d2:5d:12:c6:f0:5c:c6:ad:42:05:ca:57:7b:fa:
0c:0b:0a:f0:b3:05:18:9a:ad:c2:b7:64:22:29:69:
d0:d4:27:5f:c2:1f:ce:74:b1:89:fd:c3:5a:55:bf:
95:53:34:c3:5b:ec:97:67:af:e1:b9:d5:45:22:8b:
84:9a:6f:9f:ba:d7:85:d2:83:de:4f:81:aa:0d:f9:
bf:6e:a9:54:2f:e9:3b:ff:ba:8c:f1:9f:dc:1c:4b:
15:3a:4f:35:0a:98:1b:0d:07:e9:4f:da:e7:c8:b5:
d8:33:28:ba:7c:2a:d6:98:37:18:15:4e:3b:ab:32:
fd:9f:81:e1:df:d0:bf:dd:49:93:75:9b:91:d3:5e:
79:c7:26:1e:1f:bc:dd:9e:98:7a:cd:f2:dc:ba:26:
52:89:8e:d8:df:ef:d2:78:7a:60:1f:45:7c:e5:a8:
2a:50:10:c5:58:cf:4f:0f:f3:32:c1:db:d1:d9:3b:
9d:e1:7b:7c:f3:42:75:a9:f3:23:c7:8a:56:d3:e4:
1e:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:3D:BC:AD:D3:63:0A:BB:0A:A3:3E:08:27:3A:C1:65:C5:A7:EC:88
X509v3 Authority Key Identifier:
keyid:8B:8A:D5:CA:1C:3E:8B:8C:F4:68:B5:F4:96:A9:1A:BB:0E:48:CF:A8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91DC31B/D0ECCD48893D11EB916DF022C4F9AE02/i4rVyhw-i4z0aLX0lqkauw5Iz6g.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/i4rVyhw-i4z0aLX0lqkauw5Iz6g.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DC31B/D0ECCD48893D11EB916DF022C4F9AE02/97C79A806C0511EF8B77D10EC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
166.81.0.0/23
166.81.3.0-166.81.4.255
166.81.7.0-166.81.8.255
166.81.31.0/24
166.81.36.0/23
166.81.41.0-166.81.50.255
166.81.71.0-166.81.76.255
166.81.82.0/24
166.81.84.0-166.81.100.255
166.81.107.0-166.81.245.255
Signature Algorithm: sha256WithRSAEncryption
6b:85:92:51:2a:80:68:bf:1e:48:10:9b:16:71:67:d7:6a:22:
05:39:3d:f3:dd:01:63:d1:46:db:be:b3:25:a0:15:86:c9:29:
ab:26:38:83:1c:6b:72:73:b6:68:43:12:8a:8b:cb:0c:6d:3f:
44:85:40:af:45:c6:06:dc:a7:f9:76:7f:91:d9:18:c2:0d:bc:
cc:3d:ec:00:c1:53:09:81:f2:9f:a9:6a:15:78:24:db:d0:8c:
ed:4a:e0:51:59:8d:a2:41:e6:29:87:3f:a0:cd:45:cf:28:84:
48:45:98:1e:e4:81:0c:38:5d:40:c5:58:9d:1a:1a:d8:96:b6:
2b:f6:65:bc:6c:72:d8:77:29:97:e2:7f:52:be:3e:bb:df:e7:
41:e8:9f:a6:ec:c9:22:3a:df:a2:00:a9:45:f2:1a:3e:db:f0:
f0:be:a9:04:37:11:e7:1d:03:07:db:60:ff:52:44:f1:ae:f9:
52:5b:6f:12:09:71:fb:5c:0b:4e:ec:b2:78:d9:8a:96:d6:b2:
69:c0:9e:87:11:88:23:c3:09:36:bf:90:b6:6c:2b:36:2f:ae:
5c:5d:98:63:4d:b2:43:31:40:c6:15:48:d1:c8:1b:76:cb:b7:
c0:a6:29:52:e5:c3:b0:ea:6f:40:71:8a:59:69:a2:88:47:3b:
92:4c:a3:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 21 00:32:30 2024 by rpki-client on console-ams.rpki-client.org