Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A911CA78/BE8846D235D811EAA730EC46C4F9AE02/041A5B042C6911F098B91B76C4F9AE02.roa
File: 041A5B042C6911F098B91B76C4F9AE02.roa (raw, json)
Hash identifier: 7InJtR6Cn1ch7c1XpQQ6/w3PhjmqyqgTlZD0H0dlaLQ=
Subject key identifier: E8:C1:C3:AD:B1:5A:31:69:8D:66:DB:83:4E:F2:18:4C:07:35:93:57
Certificate issuer: /CN=A911CA78/serialNumber=40562C143A29CB19C70FFC9B99B60BBECD1D73B6
Certificate serial: 0CD4
Authority key identifier: 40:56:2C:14:3A:29:CB:19:C7:0F:FC:9B:99:B6:0B:BE:CD:1D:73:B6
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QFYsFDopyxnHD_ybmbYLvs0dc7Y.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911CA78/BE8846D235D811EAA730EC46C4F9AE02/041A5B042C6911F098B91B76C4F9AE02.roa
Signing time: Fri 09 May 2025 00:43:40 +0000
ROA not before: Fri 09 May 2025 00:43:40 +0000
ROA not after: Mon 02 Mar 2026 00:00:00 +0000
asID: 17971
IP address blocks: 49.236.192.0/20 maxlen: 24
103.17.168.0/22 maxlen: 24
112.137.160.0/20 maxlen: 24
119.110.96.0/20 maxlen: 24
202.71.96.0/20 maxlen: 23
202.71.96.0/21 maxlen: 24
202.71.104.0/22 maxlen: 24
202.71.108.0/24 maxlen: 24
202.71.110.0/23 maxlen: 24
202.75.32.0/20 maxlen: 23
202.75.32.0/21 maxlen: 24
202.75.40.0/24 maxlen: 24
202.75.42.0/23 maxlen: 24
202.75.44.0/22 maxlen: 24
202.75.48.0/20 maxlen: 24
202.165.3.0/24 maxlen: 24
210.48.144.0/20 maxlen: 20
210.48.145.0/24 maxlen: 24
210.48.148.0/23 maxlen: 24
210.48.150.0/24 maxlen: 24
210.48.151.0/24 maxlen: 24
210.48.152.0/24 maxlen: 24
210.48.153.0/24 maxlen: 24
210.48.154.0/24 maxlen: 24
210.48.156.0/24 maxlen: 24
210.48.157.0/24 maxlen: 24
210.48.158.0/24 maxlen: 24
210.48.159.0/24 maxlen: 24
218.100.22.0/24 maxlen: 24
2401:b000::/32 maxlen: 32
2401:b000::/48 maxlen: 48
2401:b000:0:5::/64 maxlen: 64
2401:b000:0:6::/64 maxlen: 64
2401:b000:10::/48 maxlen: 48
2404:b8::/48 maxlen: 48
2404:b8:0:1::/64 maxlen: 64
2404:b8:3::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A911CA78/BE8846D235D811EAA730EC46C4F9AE02/QFYsFDopyxnHD_ybmbYLvs0dc7Y.crl
rsync://rpki.apnic.net/member_repository/A911CA78/BE8846D235D811EAA730EC46C4F9AE02/QFYsFDopyxnHD_ybmbYLvs0dc7Y.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QFYsFDopyxnHD_ybmbYLvs0dc7Y.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 23 May 2025 19:21:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3284 (0xcd4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911CA78, serialNumber=40562C143A29CB19C70FFC9B99B60BBECD1D73B6
Validity
Not Before: May 9 00:43:40 2025 GMT
Not After : Mar 2 00:00:00 2026 GMT
Subject: CN=681d4fbc-cf2d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f5:52:5d:e8:2b:7c:ef:31:d6:19:6d:43:82:9c:
ab:b3:bf:13:bc:d9:6d:27:ab:2b:7e:0f:14:b2:fe:
46:49:9f:62:d5:a5:78:2d:99:33:ec:60:6c:e0:e7:
0b:d6:06:73:6a:b6:9b:0d:cd:31:21:d2:63:bd:41:
41:5a:0d:43:c0:06:2c:1e:5c:7f:c7:a3:9e:11:ec:
2b:79:ca:24:77:94:5a:2e:71:94:88:d1:27:93:63:
9f:0d:d5:d7:9d:57:c7:0b:89:fb:3a:90:ab:ca:5e:
f6:f9:91:4f:c8:9c:7b:a5:07:b2:85:57:6f:be:5f:
f0:55:9f:aa:ec:dd:f6:d8:5d:3d:dc:4c:5e:f9:6d:
53:55:d5:0f:72:f6:f5:7f:98:dd:94:4f:00:29:31:
b3:e1:3d:5a:a0:b8:c4:74:b0:82:4a:b6:b7:61:29:
17:93:00:76:d3:6b:d0:a8:ef:84:50:21:1c:22:82:
cf:36:7b:74:ff:04:c0:5f:45:bf:c7:e1:6c:6e:b0:
46:e6:19:64:5d:3b:54:3b:b2:2f:78:96:b3:6f:78:
95:6a:e2:0d:78:b2:0c:96:91:c1:ed:d6:92:62:80:
5d:b3:eb:f2:7d:0a:38:3b:0e:fb:06:b1:94:e7:aa:
e5:41:be:dd:33:a5:0c:a5:e3:15:b7:c2:bb:3d:f6:
fe:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:C1:C3:AD:B1:5A:31:69:8D:66:DB:83:4E:F2:18:4C:07:35:93:57
X509v3 Authority Key Identifier:
keyid:40:56:2C:14:3A:29:CB:19:C7:0F:FC:9B:99:B6:0B:BE:CD:1D:73:B6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911CA78/BE8846D235D811EAA730EC46C4F9AE02/QFYsFDopyxnHD_ybmbYLvs0dc7Y.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QFYsFDopyxnHD_ybmbYLvs0dc7Y.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911CA78/BE8846D235D811EAA730EC46C4F9AE02/041A5B042C6911F098B91B76C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
49.236.192.0/20
103.17.168.0/22
112.137.160.0/20
119.110.96.0/20
202.71.96.0/20
202.75.32.0/19
202.165.3.0/24
210.48.144.0/20
218.100.22.0/24
IPv6:
2401:b000::/32
2404:b8::/48
2404:b8:3::/48
Signature Algorithm: sha256WithRSAEncryption
06:e2:a8:a4:be:62:39:eb:66:2f:4e:20:d5:a6:b3:4e:bc:51:
a3:12:f9:6a:8c:9e:bb:a4:6b:51:a8:bd:0d:ca:d9:50:7f:4a:
ea:60:27:3d:38:5d:33:0e:01:1e:09:46:7d:5c:c5:62:85:68:
fc:ed:4b:33:bc:1a:81:39:fc:d1:66:6a:9d:05:bb:0b:a7:51:
6a:ba:98:86:fa:e4:cb:87:a7:b0:84:42:ce:4a:55:a4:8b:69:
d1:08:1e:a0:09:c4:49:1a:ac:a2:30:23:84:5f:3a:2c:d5:5d:
68:af:83:13:f9:61:a9:c8:56:55:88:1b:26:a8:c1:f0:d4:25:
81:f5:47:08:71:e1:44:eb:13:3f:d1:0d:75:a6:7d:26:a7:07:
eb:a3:2a:75:58:3c:f1:ee:93:64:b6:cf:d0:70:5a:52:5c:79:
ad:48:a0:bb:41:82:f3:bf:e6:93:90:22:f5:97:5a:42:da:80:
3b:eb:c4:45:6c:74:10:5c:6b:97:73:b3:c7:86:b0:9a:3a:b4:
78:7b:cb:5f:4b:9e:2e:da:c8:d8:f5:0a:48:79:7f:16:1c:21:
b3:31:8b:03:c9:99:52:fe:98:8d:68:92:e0:86:f1:90:36:26:
d3:11:7d:0d:08:b4:01:fd:68:b0:58:c8:a0:00:cc:1d:54:10:
c9:a0:5b:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 17 20:48:34 2025 by rpki-client