Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A911647C/437CC406851311EAAA0B0A7FC4F9AE02/553170245AC511EBA052F663C4F9AE02.roa
File: 553170245AC511EBA052F663C4F9AE02.roa (raw, json)
Hash identifier: 1WjAWoIgFya9zcz3aaAfAZPj3TaOx48UOEMbOt7aBvY=
Subject key identifier: 2C:CE:10:DB:4D:FA:61:21:E9:CA:AF:ED:D2:3E:7B:1F:97:90:50:5D
Certificate issuer: /CN=A911647C/serialNumber=436B2C5F03F91CA741C6A249DC015A6D544A62A6
Certificate serial: 0ADF
Authority key identifier: 43:6B:2C:5F:03:F9:1C:A7:41:C6:A2:49:DC:01:5A:6D:54:4A:62:A6
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Q2ssXwP5HKdBxqJJ3AFabVRKYqY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911647C/437CC406851311EAAA0B0A7FC4F9AE02/553170245AC511EBA052F663C4F9AE02.roa
Signing time: Wed 02 Jul 2025 20:29:45 +0000
ROA not before: Wed 02 Jul 2025 20:29:45 +0000
ROA not after: Mon 31 Aug 2026 00:00:00 +0000
asID: 9269
IP address blocks: 14.136.0.0/16 maxlen: 24
14.198.0.0/17 maxlen: 24
14.198.128.0/18 maxlen: 24
14.198.192.0/19 maxlen: 24
14.198.224.0/20 maxlen: 24
14.199.0.0/16 maxlen: 24
43.224.232.0/22 maxlen: 24
58.176.0.0/15 maxlen: 15
58.176.0.0/16 maxlen: 24
58.177.0.0/16 maxlen: 24
59.148.0.0/15 maxlen: 15
59.148.0.0/16 maxlen: 24
59.149.0.0/16 maxlen: 24
61.92.0.0/15 maxlen: 15
61.92.0.0/16 maxlen: 24
61.93.0.0/16 maxlen: 24
61.238.0.0/15 maxlen: 15
61.238.0.0/16 maxlen: 24
61.239.0.0/16 maxlen: 24
61.244.0.0/16 maxlen: 24
103.243.0.0/22 maxlen: 24
110.235.0.0/17 maxlen: 24
119.246.0.0/15 maxlen: 15
119.246.0.0/16 maxlen: 24
119.247.0.0/16 maxlen: 24
123.202.0.0/15 maxlen: 15
123.202.0.0/16 maxlen: 24
123.203.0.0/16 maxlen: 24
124.244.0.0/16 maxlen: 24
183.178.0.0/15 maxlen: 15
183.178.0.0/16 maxlen: 24
183.179.0.0/16 maxlen: 24
202.77.4.0/22 maxlen: 24
202.77.24.0/21 maxlen: 24
202.77.32.0/19 maxlen: 24
203.80.64.0/18 maxlen: 24
203.80.192.0/18 maxlen: 24
203.185.0.0/18 maxlen: 24
203.186.0.0/16 maxlen: 24
210.6.0.0/16 maxlen: 24
2401:f400::/32 maxlen: 32
2403:f500::/32 maxlen: 32
2403:f500::/35 maxlen: 35
2403:f500:2000::/35 maxlen: 35
2403:f500:6000::/35 maxlen: 35
2403:f500:8000::/35 maxlen: 35
2403:f500:a000::/35 maxlen: 35
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A911647C/437CC406851311EAAA0B0A7FC4F9AE02/Q2ssXwP5HKdBxqJJ3AFabVRKYqY.crl
rsync://rpki.apnic.net/member_repository/A911647C/437CC406851311EAAA0B0A7FC4F9AE02/Q2ssXwP5HKdBxqJJ3AFabVRKYqY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Q2ssXwP5HKdBxqJJ3AFabVRKYqY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 09 Jul 2025 20:29:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2783 (0xadf)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911647C, serialNumber=436B2C5F03F91CA741C6A249DC015A6D544A62A6
Validity
Not Before: Jul 2 20:29:45 2025 GMT
Not After : Aug 31 00:00:00 2026 GMT
Subject: CN=686596b9-314c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:9f:3e:0d:fc:8f:60:98:be:f1:5a:a9:4c:e4:
70:fe:57:13:d9:14:f1:7f:e4:ae:7c:21:85:6a:7b:
c8:6d:cf:3d:2c:d8:84:03:d8:bc:1c:26:0f:d8:7b:
ae:cd:c2:50:36:27:a2:34:cd:80:67:f1:90:1a:ff:
73:55:a2:43:03:63:02:5d:fd:f9:89:eb:8d:a9:80:
87:d2:92:cb:4f:e7:da:95:05:f9:49:6c:78:f5:60:
86:3c:f3:3d:4a:3d:be:0d:f9:fa:2a:a8:26:3e:43:
c2:03:11:39:23:21:c2:a0:55:14:a3:28:d4:5b:e8:
11:5b:0a:b8:13:66:ff:bd:24:ff:3b:cb:4f:03:a1:
52:f9:7b:36:96:9c:eb:f3:ae:d9:56:35:03:68:b9:
2f:cc:c8:4c:94:15:47:75:0c:c9:41:bc:48:82:fc:
cd:8c:c2:a3:fb:37:08:ec:ac:11:84:4e:ca:b9:9f:
69:2f:6f:72:02:1e:dd:a6:48:40:07:1e:32:a7:d1:
ce:5c:c4:23:0c:04:2d:f5:58:d8:0d:f8:72:2e:cb:
c4:c6:42:2c:d3:c9:6a:e9:bf:26:b6:9d:8d:d7:84:
ac:82:12:76:02:26:d8:94:8d:fe:5f:cb:16:a9:de:
92:13:9a:b2:e3:80:ae:2c:ee:80:a3:25:4a:24:b0:
80:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:CE:10:DB:4D:FA:61:21:E9:CA:AF:ED:D2:3E:7B:1F:97:90:50:5D
X509v3 Authority Key Identifier:
keyid:43:6B:2C:5F:03:F9:1C:A7:41:C6:A2:49:DC:01:5A:6D:54:4A:62:A6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911647C/437CC406851311EAAA0B0A7FC4F9AE02/Q2ssXwP5HKdBxqJJ3AFabVRKYqY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Q2ssXwP5HKdBxqJJ3AFabVRKYqY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911647C/437CC406851311EAAA0B0A7FC4F9AE02/553170245AC511EBA052F663C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
14.136.0.0/16
14.198.0.0-14.198.239.255
14.199.0.0/16
43.224.232.0/22
58.176.0.0/15
59.148.0.0/15
61.92.0.0/15
61.238.0.0/15
61.244.0.0/16
103.243.0.0/22
110.235.0.0/17
119.246.0.0/15
123.202.0.0/15
124.244.0.0/16
183.178.0.0/15
202.77.4.0/22
202.77.24.0-202.77.63.255
203.80.64.0/18
203.80.192.0/18
203.185.0.0/18
203.186.0.0/16
210.6.0.0/16
IPv6:
2401:f400::/32
2403:f500::/32
Signature Algorithm: sha256WithRSAEncryption
8a:0e:ce:da:8d:ec:3d:de:46:4c:ea:00:c4:7f:94:21:c6:f9:
11:0d:a8:b9:e9:5c:4b:44:73:89:f2:6b:a5:33:10:ff:bf:55:
e5:ff:3c:91:2c:d7:0a:2d:6d:41:b0:ca:5d:f8:8a:c9:37:62:
6f:7b:da:08:49:fa:17:70:84:69:b8:01:ed:70:26:31:c0:73:
88:7b:57:d2:39:5c:fb:99:f3:e7:13:e9:6a:2b:cd:0d:71:56:
82:bb:89:ff:dd:c1:54:9b:e6:78:f9:04:ed:b2:4d:a9:cc:eb:
b3:75:04:64:f5:00:ab:8e:eb:08:1d:e9:51:0c:e5:3d:28:cc:
9a:4f:73:32:59:18:28:ad:57:46:c0:a4:5a:ad:e2:68:4c:54:
64:1f:3f:e1:0c:00:38:05:bb:df:36:ed:7e:3c:13:a5:eb:1f:
ea:bb:73:2d:5d:19:fe:5c:26:90:fe:b0:1e:f8:dd:18:9e:b0:
59:d1:87:a9:72:a3:2c:20:21:19:3e:35:0b:38:1c:4b:2c:19:
61:90:31:c5:6d:72:53:38:1e:b5:72:a5:cc:42:bb:9c:1f:4b:
28:17:0f:5d:0d:ba:43:e7:b2:2b:43:ce:87:55:00:05:08:4f:
da:4d:e8:31:ee:0b:90:46:0d:e8:fb:03:b2:3c:8e:9e:06:03:
1a:ce:b5:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 4 18:56:12 2025 by rpki-client