Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91DC31B/D0ECCD48893D11EB916DF022C4F9AE02/A66095C6465C11EE85F77F3EC4F9AE02.roa
File: A66095C6465C11EE85F77F3EC4F9AE02.roa (raw, json)
Hash identifier: ypfsUv8dujxM6Doc46KPm7faHLpqj037IFwXuUnu61o=
Subject key identifier: 5B:BF:81:72:80:7A:73:2D:0A:83:E0:C3:AB:A8:20:4F:06:71:23:DE
Certificate issuer: /CN=A91DC31B/serialNumber=8B8AD5CA1C3E8B8CF468B5F496A91ABB0E48CFA8
Certificate serial: 05D1
Authority key identifier: 8B:8A:D5:CA:1C:3E:8B:8C:F4:68:B5:F4:96:A9:1A:BB:0E:48:CF:A8
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/i4rVyhw-i4z0aLX0lqkauw5Iz6g.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91DC31B/D0ECCD48893D11EB916DF022C4F9AE02/A66095C6465C11EE85F77F3EC4F9AE02.roa
Signing time: Sat 13 Jan 2024 00:11:46 +0000
ROA not before: Sat 13 Jan 2024 00:11:46 +0000
ROA not after: Mon 31 Mar 2025 00:00:00 +0000
asID: 0
IP address blocks: 166.81.0.0/24 maxlen: 24
166.81.1.0/24 maxlen: 24
166.81.3.0/24 maxlen: 24
166.81.4.0/24 maxlen: 24
166.81.7.0/24 maxlen: 24
166.81.8.0/24 maxlen: 24
166.81.31.0/24 maxlen: 24
166.81.36.0/24 maxlen: 24
166.81.37.0/24 maxlen: 24
166.81.41.0/24 maxlen: 24
166.81.42.0/24 maxlen: 24
166.81.43.0/24 maxlen: 24
166.81.44.0/24 maxlen: 24
166.81.45.0/24 maxlen: 24
166.81.46.0/24 maxlen: 24
166.81.47.0/24 maxlen: 24
166.81.48.0/24 maxlen: 24
166.81.49.0/24 maxlen: 24
166.81.50.0/24 maxlen: 24
166.81.71.0/24 maxlen: 24
166.81.72.0/24 maxlen: 24
166.81.73.0/24 maxlen: 24
166.81.74.0/24 maxlen: 24
166.81.75.0/24 maxlen: 24
166.81.76.0/24 maxlen: 24
166.81.77.0/24 maxlen: 24
166.81.78.0/24 maxlen: 24
166.81.79.0/24 maxlen: 24
166.81.80.0/24 maxlen: 24
166.81.81.0/24 maxlen: 24
166.81.82.0/24 maxlen: 24
166.81.83.0/24 maxlen: 24
166.81.84.0/24 maxlen: 24
166.81.85.0/24 maxlen: 24
166.81.86.0/24 maxlen: 24
166.81.87.0/24 maxlen: 24
166.81.88.0/24 maxlen: 24
166.81.89.0/24 maxlen: 24
166.81.90.0/24 maxlen: 24
166.81.91.0/24 maxlen: 24
166.81.92.0/24 maxlen: 24
166.81.93.0/24 maxlen: 24
166.81.94.0/24 maxlen: 24
166.81.95.0/24 maxlen: 24
166.81.96.0/24 maxlen: 24
166.81.97.0/24 maxlen: 24
166.81.98.0/24 maxlen: 24
166.81.99.0/24 maxlen: 24
166.81.100.0/24 maxlen: 24
166.81.107.0/24 maxlen: 24
166.81.108.0/24 maxlen: 24
166.81.109.0/24 maxlen: 24
166.81.110.0/24 maxlen: 24
166.81.111.0/24 maxlen: 24
166.81.112.0/24 maxlen: 24
166.81.113.0/24 maxlen: 24
166.81.114.0/24 maxlen: 24
166.81.115.0/24 maxlen: 24
166.81.116.0/24 maxlen: 24
166.81.117.0/24 maxlen: 24
166.81.118.0/24 maxlen: 24
166.81.119.0/24 maxlen: 24
166.81.120.0/24 maxlen: 24
166.81.121.0/24 maxlen: 24
166.81.122.0/24 maxlen: 24
166.81.123.0/24 maxlen: 24
166.81.124.0/24 maxlen: 24
166.81.125.0/24 maxlen: 24
166.81.126.0/24 maxlen: 24
166.81.127.0/24 maxlen: 24
166.81.128.0/24 maxlen: 24
166.81.129.0/24 maxlen: 24
166.81.130.0/24 maxlen: 24
166.81.131.0/24 maxlen: 24
166.81.132.0/24 maxlen: 24
166.81.133.0/24 maxlen: 24
166.81.134.0/24 maxlen: 24
166.81.135.0/24 maxlen: 24
166.81.136.0/24 maxlen: 24
166.81.137.0/24 maxlen: 24
166.81.138.0/24 maxlen: 24
166.81.139.0/24 maxlen: 24
166.81.140.0/24 maxlen: 24
166.81.141.0/24 maxlen: 24
166.81.142.0/24 maxlen: 24
166.81.143.0/24 maxlen: 24
166.81.144.0/24 maxlen: 24
166.81.145.0/24 maxlen: 24
166.81.146.0/24 maxlen: 24
166.81.147.0/24 maxlen: 24
166.81.148.0/24 maxlen: 24
166.81.149.0/24 maxlen: 24
166.81.150.0/24 maxlen: 24
166.81.151.0/24 maxlen: 24
166.81.152.0/24 maxlen: 24
166.81.153.0/24 maxlen: 24
166.81.154.0/24 maxlen: 24
166.81.155.0/24 maxlen: 24
166.81.156.0/24 maxlen: 24
166.81.157.0/24 maxlen: 24
166.81.158.0/24 maxlen: 24
166.81.159.0/24 maxlen: 24
166.81.160.0/24 maxlen: 24
166.81.161.0/24 maxlen: 24
166.81.162.0/24 maxlen: 24
166.81.163.0/24 maxlen: 24
166.81.164.0/24 maxlen: 24
166.81.165.0/24 maxlen: 24
166.81.166.0/24 maxlen: 24
166.81.167.0/24 maxlen: 24
166.81.168.0/24 maxlen: 24
166.81.169.0/24 maxlen: 24
166.81.170.0/24 maxlen: 24
166.81.171.0/24 maxlen: 24
166.81.172.0/24 maxlen: 24
166.81.173.0/24 maxlen: 24
166.81.174.0/24 maxlen: 24
166.81.175.0/24 maxlen: 24
166.81.176.0/24 maxlen: 24
166.81.177.0/24 maxlen: 24
166.81.178.0/24 maxlen: 24
166.81.179.0/24 maxlen: 24
166.81.180.0/24 maxlen: 24
166.81.181.0/24 maxlen: 24
166.81.182.0/24 maxlen: 24
166.81.183.0/24 maxlen: 24
166.81.184.0/24 maxlen: 24
166.81.185.0/24 maxlen: 24
166.81.186.0/24 maxlen: 24
166.81.187.0/24 maxlen: 24
166.81.188.0/24 maxlen: 24
166.81.189.0/24 maxlen: 24
166.81.190.0/24 maxlen: 24
166.81.191.0/24 maxlen: 24
166.81.192.0/24 maxlen: 24
166.81.193.0/24 maxlen: 24
166.81.194.0/24 maxlen: 24
166.81.195.0/24 maxlen: 24
166.81.196.0/24 maxlen: 24
166.81.197.0/24 maxlen: 24
166.81.198.0/24 maxlen: 24
166.81.199.0/24 maxlen: 24
166.81.200.0/24 maxlen: 24
166.81.201.0/24 maxlen: 24
166.81.202.0/24 maxlen: 24
166.81.203.0/24 maxlen: 24
166.81.204.0/24 maxlen: 24
166.81.205.0/24 maxlen: 24
166.81.206.0/24 maxlen: 24
166.81.207.0/24 maxlen: 24
166.81.208.0/24 maxlen: 24
166.81.209.0/24 maxlen: 24
166.81.210.0/24 maxlen: 24
166.81.211.0/24 maxlen: 24
166.81.212.0/24 maxlen: 24
166.81.213.0/24 maxlen: 24
166.81.214.0/24 maxlen: 24
166.81.215.0/24 maxlen: 24
166.81.216.0/24 maxlen: 24
166.81.217.0/24 maxlen: 24
166.81.218.0/24 maxlen: 24
166.81.219.0/24 maxlen: 24
166.81.220.0/24 maxlen: 24
166.81.221.0/24 maxlen: 24
166.81.222.0/24 maxlen: 24
166.81.223.0/24 maxlen: 24
166.81.224.0/24 maxlen: 24
166.81.225.0/24 maxlen: 24
166.81.226.0/24 maxlen: 24
166.81.227.0/24 maxlen: 24
166.81.228.0/24 maxlen: 24
166.81.229.0/24 maxlen: 24
166.81.230.0/24 maxlen: 24
166.81.231.0/24 maxlen: 24
166.81.232.0/24 maxlen: 24
166.81.233.0/24 maxlen: 24
166.81.234.0/24 maxlen: 24
166.81.235.0/24 maxlen: 24
166.81.236.0/24 maxlen: 24
166.81.237.0/24 maxlen: 24
166.81.238.0/24 maxlen: 24
166.81.239.0/24 maxlen: 24
166.81.240.0/24 maxlen: 24
166.81.241.0/24 maxlen: 24
166.81.242.0/24 maxlen: 24
166.81.243.0/24 maxlen: 24
166.81.244.0/24 maxlen: 24
166.81.245.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91DC31B/D0ECCD48893D11EB916DF022C4F9AE02/i4rVyhw-i4z0aLX0lqkauw5Iz6g.crl
rsync://rpki.apnic.net/member_repository/A91DC31B/D0ECCD48893D11EB916DF022C4F9AE02/i4rVyhw-i4z0aLX0lqkauw5Iz6g.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/i4rVyhw-i4z0aLX0lqkauw5Iz6g.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 02 May 2024 00:01:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1489 (0x5d1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91DC31B/serialNumber=8B8AD5CA1C3E8B8CF468B5F496A91ABB0E48CFA8
Validity
Not Before: Jan 13 00:11:46 2024 GMT
Not After : Mar 31 00:00:00 2025 GMT
Subject: CN=65a1d542-8f21
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:57:b8:c3:f6:2a:63:6d:1c:a3:21:80:71:58:
29:e1:3b:6d:6b:af:24:e3:52:97:27:53:9e:6d:74:
67:61:15:bf:a1:e5:5e:8e:25:8f:58:f0:50:d0:9b:
c0:f1:40:e8:7a:8a:54:c1:df:5c:45:76:61:41:db:
c1:64:03:de:7f:b1:bc:79:ae:8c:a1:50:a1:43:94:
d3:9b:3e:23:12:72:1b:9c:65:28:1c:09:79:01:c7:
3c:eb:0d:d8:85:40:57:75:40:46:96:b1:a9:f7:40:
ef:85:40:ec:a7:86:f4:98:82:f0:a9:10:fc:e3:56:
10:0e:97:c3:44:ab:bd:a4:35:fe:7b:dd:19:c6:15:
80:5e:9c:e6:fd:e4:c4:52:38:82:e0:2b:d6:4b:2b:
84:cb:d9:d0:af:b2:74:a9:7d:5e:f7:db:d7:f5:c0:
2c:e5:ff:d8:f4:ae:4a:21:a9:0c:30:63:dc:35:5a:
9e:a0:29:3c:03:35:cc:24:9e:be:c1:16:d1:80:40:
c5:98:d2:16:d1:9d:07:0c:60:44:a6:9b:6f:f6:25:
af:d2:83:80:09:06:90:5e:2c:da:dd:c9:c7:60:c6:
70:ae:9c:27:62:c9:3d:88:43:9c:3d:ab:19:12:a7:
e4:d4:3b:e0:e2:1b:2c:8a:37:04:6a:eb:ee:d0:f2:
b6:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:BF:81:72:80:7A:73:2D:0A:83:E0:C3:AB:A8:20:4F:06:71:23:DE
X509v3 Authority Key Identifier:
keyid:8B:8A:D5:CA:1C:3E:8B:8C:F4:68:B5:F4:96:A9:1A:BB:0E:48:CF:A8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91DC31B/D0ECCD48893D11EB916DF022C4F9AE02/i4rVyhw-i4z0aLX0lqkauw5Iz6g.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/i4rVyhw-i4z0aLX0lqkauw5Iz6g.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DC31B/D0ECCD48893D11EB916DF022C4F9AE02/A66095C6465C11EE85F77F3EC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
166.81.0.0/23
166.81.3.0-166.81.4.255
166.81.7.0-166.81.8.255
166.81.31.0/24
166.81.36.0/23
166.81.41.0-166.81.50.255
166.81.71.0-166.81.100.255
166.81.107.0-166.81.245.255
Signature Algorithm: sha256WithRSAEncryption
4a:55:a2:2a:db:d6:29:93:0d:59:db:35:e2:02:a6:b5:92:99:
56:5b:c3:03:2d:f6:14:1b:ae:0b:45:03:75:57:fa:8a:29:5f:
a7:28:90:65:e2:4a:a4:3d:14:5a:18:53:04:c3:f9:e3:fe:71:
b1:d8:d0:b5:21:a7:d3:74:ea:40:d3:ba:a1:87:32:b3:c5:09:
1b:39:ca:b6:6c:36:63:a4:71:4d:98:68:93:c2:96:e8:de:fa:
21:af:9f:1f:81:64:cf:fc:d7:43:08:22:32:d1:58:d7:46:bb:
7e:a7:24:a1:01:08:ec:7b:09:a5:ac:f9:b6:73:81:b7:3e:84:
17:51:bc:ea:c0:c0:c9:03:f6:d6:c9:be:e0:84:77:d0:68:a1:
18:9e:32:69:7e:df:f6:64:04:e8:e2:0b:3b:c5:e7:1f:f7:63:
0e:96:6a:68:6d:92:89:c9:3d:f3:7f:d7:9e:b6:58:35:6f:22:
d5:bd:80:7f:0a:d8:64:78:8d:3e:81:b4:57:b8:82:e4:37:32:
cb:44:db:0b:87:24:1b:b3:18:ca:42:58:cb:f8:de:cc:c1:dd:
e7:21:8c:15:80:e4:3a:95:28:74:d9:0d:be:1f:6d:9e:52:23:
a3:b5:7b:a2:cf:9f:f2:49:f1:23:75:22:07:57:42:7e:c1:2a:
ef:d1:fc:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 25 01:20:42 2024 by rpki-client on console-fra.rpki-client.org