Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91DF93A/FF51E59EE5F311EAB3A91561C4F9AE02/007CF9924F1111EFA7D2F345C4F9AE02.roa
File: 007CF9924F1111EFA7D2F345C4F9AE02.roa (raw, json)
Hash identifier: USwhKOtUAYw8MFn1BXt5pSc1VM2o2X7NQRCh9KM+x7o=
Subject key identifier: 90:CE:A7:27:75:9B:FB:0B:4D:84:D2:52:91:6E:98:FF:54:74:B3:EE
Certificate issuer: /CN=A91DF93A/serialNumber=07A1C08545CACC65E0882D49E9F2F8CFD2BE8260
Certificate serial: 0813
Authority key identifier: 07:A1:C0:85:45:CA:CC:65:E0:88:2D:49:E9:F2:F8:CF:D2:BE:82:60
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B6HAhUXKzGXgiC1J6fL4z9K-gmA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91DF93A/FF51E59EE5F311EAB3A91561C4F9AE02/007CF9924F1111EFA7D2F345C4F9AE02.roa
Signing time: Wed 31 Jul 2024 07:46:31 +0000
ROA not before: Wed 31 Jul 2024 07:46:31 +0000
ROA not after: Sun 31 Aug 2025 00:00:00 +0000
asID: 10122
IP address blocks: 103.139.72.0/24 maxlen: 24
103.139.73.0/24 maxlen: 24
164.90.64.0/24 maxlen: 24
164.90.65.0/24 maxlen: 24
164.90.66.0/24 maxlen: 24
164.90.67.0/24 maxlen: 24
164.90.68.0/24 maxlen: 24
164.90.69.0/24 maxlen: 24
164.90.71.0/24 maxlen: 24
164.90.72.0/24 maxlen: 24
164.90.73.0/24 maxlen: 24
164.90.74.0/24 maxlen: 24
164.90.76.0/24 maxlen: 24
164.90.77.0/24 maxlen: 24
164.90.78.0/24 maxlen: 24
164.90.79.0/24 maxlen: 24
164.90.80.0/24 maxlen: 24
164.90.81.0/24 maxlen: 24
164.90.82.0/24 maxlen: 24
164.90.83.0/24 maxlen: 24
164.90.84.0/24 maxlen: 24
164.90.85.0/24 maxlen: 24
164.90.86.0/24 maxlen: 24
164.90.87.0/24 maxlen: 24
164.90.88.0/24 maxlen: 24
164.90.89.0/24 maxlen: 24
164.90.90.0/24 maxlen: 24
164.90.91.0/24 maxlen: 24
164.90.92.0/24 maxlen: 24
164.90.93.0/24 maxlen: 24
164.90.94.0/24 maxlen: 24
164.90.95.0/24 maxlen: 24
164.90.96.0/24 maxlen: 24
164.90.97.0/24 maxlen: 24
164.90.98.0/24 maxlen: 24
164.90.101.0/24 maxlen: 24
164.90.102.0/24 maxlen: 24
164.90.103.0/24 maxlen: 24
164.90.104.0/24 maxlen: 24
164.90.105.0/24 maxlen: 24
164.90.106.0/24 maxlen: 24
164.90.107.0/24 maxlen: 24
164.90.108.0/24 maxlen: 24
164.90.109.0/24 maxlen: 24
164.90.110.0/24 maxlen: 24
164.90.111.0/24 maxlen: 24
164.90.113.0/24 maxlen: 24
164.90.114.0/24 maxlen: 24
164.90.115.0/24 maxlen: 24
164.90.116.0/24 maxlen: 24
164.90.117.0/24 maxlen: 24
164.90.121.0/24 maxlen: 24
164.90.122.0/24 maxlen: 24
164.90.125.0/24 maxlen: 24
164.90.126.0/24 maxlen: 24
164.90.127.0/24 maxlen: 24
202.63.32.0/24 maxlen: 24
202.63.33.0/24 maxlen: 24
202.63.34.0/24 maxlen: 24
202.63.35.0/24 maxlen: 24
202.63.36.0/24 maxlen: 24
202.63.37.0/24 maxlen: 24
202.63.38.0/24 maxlen: 24
202.63.39.0/24 maxlen: 24
202.63.40.0/24 maxlen: 24
202.63.41.0/24 maxlen: 24
202.63.42.0/24 maxlen: 24
202.63.43.0/24 maxlen: 24
202.63.44.0/24 maxlen: 24
202.63.45.0/24 maxlen: 24
202.63.46.0/24 maxlen: 24
202.63.47.0/24 maxlen: 24
202.63.48.0/24 maxlen: 24
202.63.49.0/24 maxlen: 24
202.63.50.0/24 maxlen: 24
202.63.51.0/24 maxlen: 24
202.63.52.0/24 maxlen: 24
202.63.53.0/24 maxlen: 24
202.63.54.0/24 maxlen: 24
202.63.55.0/24 maxlen: 24
202.63.56.0/24 maxlen: 24
202.63.57.0/24 maxlen: 24
202.63.58.0/24 maxlen: 24
202.63.59.0/24 maxlen: 24
202.63.60.0/24 maxlen: 24
202.63.61.0/24 maxlen: 24
202.63.62.0/24 maxlen: 24
202.63.63.0/24 maxlen: 24
202.168.96.0/24 maxlen: 24
202.168.97.0/24 maxlen: 24
202.168.99.0/24 maxlen: 24
202.168.100.0/24 maxlen: 24
202.168.101.0/24 maxlen: 24
202.168.102.0/24 maxlen: 24
202.168.103.0/24 maxlen: 24
202.168.104.0/24 maxlen: 24
202.168.105.0/24 maxlen: 24
202.168.106.0/24 maxlen: 24
202.168.107.0/24 maxlen: 24
202.168.108.0/24 maxlen: 24
202.168.109.0/24 maxlen: 24
202.168.110.0/24 maxlen: 24
202.168.112.0/24 maxlen: 24
202.168.113.0/24 maxlen: 24
202.168.114.0/24 maxlen: 24
202.168.115.0/24 maxlen: 24
202.168.116.0/24 maxlen: 24
202.168.117.0/24 maxlen: 24
202.168.118.0/24 maxlen: 24
202.168.119.0/24 maxlen: 24
202.168.120.0/24 maxlen: 24
202.168.121.0/24 maxlen: 24
202.168.122.0/24 maxlen: 24
202.168.123.0/24 maxlen: 24
202.168.124.0/23 maxlen: 23
202.168.124.0/24 maxlen: 24
202.168.125.0/24 maxlen: 24
202.168.126.0/24 maxlen: 24
202.168.127.0/24 maxlen: 24
2404:efc0:155::/48 maxlen: 48
2404:efc0:235::/48 maxlen: 48
2404:efc0:236::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91DF93A/FF51E59EE5F311EAB3A91561C4F9AE02/B6HAhUXKzGXgiC1J6fL4z9K-gmA.crl
rsync://rpki.apnic.net/member_repository/A91DF93A/FF51E59EE5F311EAB3A91561C4F9AE02/B6HAhUXKzGXgiC1J6fL4z9K-gmA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B6HAhUXKzGXgiC1J6fL4z9K-gmA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 01 Dec 2024 17:11:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2067 (0x813)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91DF93A/serialNumber=07A1C08545CACC65E0882D49E9F2F8CFD2BE8260
Validity
Not Before: Jul 31 07:46:31 2024 GMT
Not After : Aug 31 00:00:00 2025 GMT
Subject: CN=66a9ebd7-3208
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:c8:c8:79:39:e5:24:92:da:0c:db:14:ea:f4:
d8:23:05:c9:8f:16:1c:da:5b:f2:4f:2b:c2:7a:3e:
54:10:52:4a:c4:db:be:2c:52:6c:a5:c4:80:be:7f:
55:41:22:c0:10:41:d5:9d:40:af:db:3e:ab:f4:ae:
f4:54:85:00:d2:03:be:2f:48:8c:6f:f7:a2:34:cb:
0a:f1:15:44:92:6b:0e:5b:8e:95:68:e4:34:3d:22:
d3:48:63:f8:1a:d5:de:26:bb:81:a3:42:24:48:4b:
df:59:cf:83:07:76:f7:87:13:f8:93:75:bf:a8:fe:
0e:05:3a:d0:d7:cd:d0:1d:e5:c0:45:59:aa:07:5e:
02:aa:d3:8e:80:d1:c5:24:7c:65:45:46:e9:79:a4:
22:02:6f:74:60:59:ab:50:42:d7:d9:18:68:3d:1b:
29:8d:eb:00:68:61:bb:82:94:c1:2b:ed:7c:da:98:
32:e9:2a:c7:5e:36:2b:f8:73:00:5c:49:73:49:64:
a6:f2:93:57:5d:66:43:78:b7:76:83:f9:0d:80:71:
93:9a:4b:94:b3:d7:de:fd:7b:a8:6f:ef:1f:82:74:
5b:2c:a2:3e:bd:17:1f:e5:14:b8:ad:c5:a0:9d:f3:
72:77:41:a0:b3:3a:20:ef:2f:d9:12:22:93:95:27:
c8:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:CE:A7:27:75:9B:FB:0B:4D:84:D2:52:91:6E:98:FF:54:74:B3:EE
X509v3 Authority Key Identifier:
keyid:07:A1:C0:85:45:CA:CC:65:E0:88:2D:49:E9:F2:F8:CF:D2:BE:82:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91DF93A/FF51E59EE5F311EAB3A91561C4F9AE02/B6HAhUXKzGXgiC1J6fL4z9K-gmA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B6HAhUXKzGXgiC1J6fL4z9K-gmA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DF93A/FF51E59EE5F311EAB3A91561C4F9AE02/007CF9924F1111EFA7D2F345C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.139.72.0/23
164.90.64.0-164.90.69.255
164.90.71.0-164.90.74.255
164.90.76.0-164.90.98.255
164.90.101.0-164.90.111.255
164.90.113.0-164.90.117.255
164.90.121.0-164.90.122.255
164.90.125.0-164.90.127.255
202.63.32.0/19
202.168.96.0/23
202.168.99.0-202.168.110.255
202.168.112.0/20
IPv6:
2404:efc0:155::/48
2404:efc0:235::-2404:efc0:236:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
39:61:fe:f9:26:9c:af:6b:38:34:3f:d1:5c:4a:0a:dd:64:b1:
b6:c4:6a:92:a9:13:c4:00:f6:33:fd:80:82:61:16:c8:9a:0f:
d3:a6:1d:99:d2:e6:80:0d:08:fe:2b:f1:cf:8f:b0:74:b5:c2:
93:7a:e4:d4:fe:0b:88:57:11:bb:14:6f:32:25:b3:c1:57:de:
f4:a4:ba:c8:ba:cf:a4:aa:d7:b2:10:81:7d:e5:cc:ff:8a:68:
2d:73:d2:4d:e8:36:f8:64:64:d8:f6:cb:f4:39:e0:b7:a0:41:
8a:6d:20:4e:79:74:ad:a3:e6:79:cf:dc:6d:59:90:53:c0:41:
70:7d:4c:b1:a3:09:ae:68:61:dc:88:54:ea:2f:2a:b1:c7:d9:
67:dd:37:28:75:fa:fa:7f:48:1d:01:a0:ff:8b:15:51:13:e9:
29:bf:ba:18:d2:e7:cd:df:75:c9:f0:42:6f:94:3c:b3:dc:ce:
f5:ca:bb:fa:a8:57:d5:7a:80:2b:8e:bb:ff:a8:36:eb:31:40:
f5:4c:f9:6b:0d:fa:00:4a:e6:5f:63:91:b4:8f:d7:06:83:14:
a3:1c:be:c1:d4:7f:3f:0c:82:2f:cd:7d:95:3d:10:d5:ed:14:
c3:49:17:6d:a6:af:52:ed:73:68:ad:a5:76:38:76:22:f0:d8:
da:12:21:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 24 21:45:14 2024 by rpki-client on console-ams.rpki-client.org