Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9119333/065DA3BAB84411E5B5357B2FC4F9AE02/443C3AF2D3F611EFB03C5C14C4F9AE02.roa
File: 443C3AF2D3F611EFB03C5C14C4F9AE02.roa (raw, json)
Hash identifier: QalrWEPHK1c0+wAh4Y9v/QxVAuOH9u4KL51JrDmBQPs=
Subject key identifier: 7B:A8:C1:CD:7E:60:80:82:A6:C3:A0:71:81:97:CE:C0:C1:7C:60:7E
Certificate issuer: /CN=A9119333/serialNumber=699E6742567BE7329CC3A786DEB7857E2C2420F9
Certificate serial: 22AC
Authority key identifier: 69:9E:67:42:56:7B:E7:32:9C:C3:A7:86:DE:B7:85:7E:2C:24:20:F9
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aZ5nQlZ75zKcw6eG3reFfiwkIPk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9119333/065DA3BAB84411E5B5357B2FC4F9AE02/443C3AF2D3F611EFB03C5C14C4F9AE02.roa
Signing time: Fri 02 May 2025 16:23:53 +0000
ROA not before: Fri 02 May 2025 16:23:53 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 45650
IP address blocks: 43.245.84.0/22 maxlen: 24
45.64.114.0/24 maxlen: 24
45.64.115.0/24 maxlen: 24
103.10.28.0/22 maxlen: 24
103.41.172.0/22 maxlen: 24
103.129.132.0/22 maxlen: 24
110.44.112.0/20 maxlen: 24
150.107.106.0/23 maxlen: 24
2404:7c00::/48 maxlen: 48
2404:7c00:1::/48 maxlen: 48
2404:7c00:40::/44 maxlen: 44
2404:7c00:40::/48 maxlen: 48
2404:7c00:41::/48 maxlen: 48
2404:7c00:42::/48 maxlen: 48
2404:7c00:43::/48 maxlen: 48
2404:7c00:44::/48 maxlen: 48
2404:7c00:46::/48 maxlen: 48
2404:7c00:47::/48 maxlen: 48
2404:7c00:48::/48 maxlen: 48
2404:7c00:49::/48 maxlen: 48
2404:7c00:4a::/48 maxlen: 48
2404:7c00:4b::/48 maxlen: 48
2404:7c00:4d::/48 maxlen: 48
2404:7c00:4e::/48 maxlen: 48
2404:7c00:4f::/48 maxlen: 48
2404:7c00:50::/44 maxlen: 44
2404:7c00:51::/48 maxlen: 48
2404:7c00:52::/48 maxlen: 48
2404:7c00:53::/48 maxlen: 48
2404:7c00:60::/44 maxlen: 44
2404:7c00:61::/48 maxlen: 48
2404:7c00:62::/48 maxlen: 48
2404:7c00:63::/48 maxlen: 48
2404:7c00:64::/48 maxlen: 48
2404:7c00:65::/48 maxlen: 48
2404:7c00:70::/44 maxlen: 44
2404:7c00:80::/44 maxlen: 44
2404:7c00:81::/48 maxlen: 48
2404:7c00:100::/40 maxlen: 48
2404:7c00:7c00::/44 maxlen: 44
2404:7c00:7c10::/44 maxlen: 44
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9119333/065DA3BAB84411E5B5357B2FC4F9AE02/aZ5nQlZ75zKcw6eG3reFfiwkIPk.crl
rsync://rpki.apnic.net/member_repository/A9119333/065DA3BAB84411E5B5357B2FC4F9AE02/aZ5nQlZ75zKcw6eG3reFfiwkIPk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aZ5nQlZ75zKcw6eG3reFfiwkIPk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 17 May 2025 15:48:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8876 (0x22ac)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9119333, serialNumber=699E6742567BE7329CC3A786DEB7857E2C2420F9
Validity
Not Before: May 2 16:23:53 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6814f199-0845
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f6:50:cb:99:f3:4c:d8:7d:b8:0a:e9:7f:17:f4:
67:d3:d0:be:06:a0:4d:40:a6:60:bc:e6:91:0e:f3:
15:43:45:5f:4b:b7:0e:9d:8c:b7:d5:ef:c7:9e:46:
47:72:3b:08:19:e8:f2:b6:78:5e:14:6b:04:db:a6:
bd:ff:51:ac:f7:2c:7d:81:54:5a:c9:bd:8c:a1:43:
e0:01:f4:d6:3e:37:22:c5:76:8e:d8:2c:db:a8:e0:
13:ce:7d:95:91:cd:ff:20:88:dd:63:b4:56:80:f9:
9c:93:8f:2c:9e:71:93:f9:9e:82:2d:b5:e9:0b:ea:
71:eb:1d:1d:06:7a:38:e7:53:fe:3c:10:7f:ab:77:
15:e4:49:0b:16:e0:ce:c0:4a:7c:9b:e6:b3:f8:11:
77:28:4a:d0:74:7f:b4:25:d0:93:b1:c3:08:53:e8:
7a:28:6a:f2:20:0b:1a:af:64:06:57:79:61:54:45:
cb:52:c3:ae:4b:64:c4:93:2a:b8:0e:db:be:cf:82:
63:1b:2b:1a:f7:98:18:4d:04:bb:cd:99:e0:e5:7b:
42:3d:8a:1c:df:29:e8:62:ae:2b:bc:bb:7e:42:3f:
4f:de:dc:82:3c:f4:09:ce:e3:76:c5:89:c2:36:82:
14:d4:ed:7a:59:30:6a:83:86:e6:88:02:b9:49:47:
8b:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:A8:C1:CD:7E:60:80:82:A6:C3:A0:71:81:97:CE:C0:C1:7C:60:7E
X509v3 Authority Key Identifier:
keyid:69:9E:67:42:56:7B:E7:32:9C:C3:A7:86:DE:B7:85:7E:2C:24:20:F9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9119333/065DA3BAB84411E5B5357B2FC4F9AE02/aZ5nQlZ75zKcw6eG3reFfiwkIPk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aZ5nQlZ75zKcw6eG3reFfiwkIPk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9119333/065DA3BAB84411E5B5357B2FC4F9AE02/443C3AF2D3F611EFB03C5C14C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
43.245.84.0/22
45.64.114.0/23
103.10.28.0/22
103.41.172.0/22
103.129.132.0/22
110.44.112.0/20
150.107.106.0/23
IPv6:
2404:7c00::/47
2404:7c00:40::-2404:7c00:8f:ffff:ffff:ffff:ffff:ffff
2404:7c00:100::/40
2404:7c00:7c00::/43
Signature Algorithm: sha256WithRSAEncryption
a8:9f:11:40:fd:7e:91:b4:d7:0d:d6:38:39:6b:4c:28:43:89:
1f:fd:43:a5:1f:3d:e6:80:df:e2:fb:ec:fb:e6:52:db:7a:50:
5c:9a:06:4c:93:d7:3f:a9:8b:9f:6c:f1:a9:fe:a6:a8:0b:72:
3e:50:a0:58:30:39:9b:f6:c6:cf:b9:04:0d:60:83:20:01:b2:
0e:49:64:d2:34:45:f6:37:81:fa:84:dd:c6:06:a9:36:54:8a:
2d:d6:7f:b5:d2:ce:9e:f2:7c:90:0b:f2:3d:c9:4f:b0:24:e9:
c4:4e:67:a4:95:be:ac:6d:09:0b:9b:c0:27:9b:b3:39:88:ab:
0d:5b:b2:7c:09:b4:60:de:30:af:0e:7b:59:75:4c:54:9c:40:
0f:ea:f8:99:d6:44:05:66:57:91:b0:f5:b6:11:d3:d1:67:95:
ee:3b:08:6e:ab:40:9b:0e:6c:f3:ac:65:6e:45:6b:92:f0:27:
2e:80:8c:5d:2f:f2:ae:46:f7:3c:48:fd:29:a5:bb:54:b4:0a:
40:ad:8a:0d:c2:aa:d8:0d:bd:50:ca:9a:34:c0:31:46:71:4a:
81:e4:10:75:a8:c9:6b:22:ff:ef:17:92:f0:93:73:cb:c8:93:
3d:e2:3b:77:0c:da:8b:db:74:12:e9:f3:68:5c:54:91:53:94:
37:45:e7:8c
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sun May 11 16:22:24 2025 by rpki-client