Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A912176D/93D17CD006A011EBB4090859C4F9AE02/7A97188E480811F0BF5AC634C4F9AE02.roa
File: 7A97188E480811F0BF5AC634C4F9AE02.roa (raw, json)
Hash identifier: icKx4Ois0//CCRKXA9FyImW/RJbFJcA0Vztw+V1Ne7s=
Subject key identifier: 40:DB:50:45:47:37:A3:22:7F:B1:2E:17:F8:7B:82:88:3B:0B:EF:50
Certificate issuer: /CN=A912176D/serialNumber=96F42E19F69D596A0318921590A17DD53233E595
Certificate serial: 07F7
Authority key identifier: 96:F4:2E:19:F6:9D:59:6A:03:18:92:15:90:A1:7D:D5:32:33:E5:95
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lvQuGfadWWoDGJIVkKF91TIz5ZU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912176D/93D17CD006A011EBB4090859C4F9AE02/7A97188E480811F0BF5AC634C4F9AE02.roa
Signing time: Fri 13 Jun 2025 03:42:50 +0000
ROA not before: Fri 13 Jun 2025 03:42:50 +0000
ROA not after: Mon 01 Dec 2025 00:00:00 +0000
asID: 55720
IP address blocks: 14.192.67.0/24 maxlen: 24
14.192.68.0/24 maxlen: 24
14.192.69.0/24 maxlen: 24
43.225.36.0/24 maxlen: 24
43.225.37.0/24 maxlen: 24
43.225.38.0/24 maxlen: 24
43.225.39.0/24 maxlen: 24
43.231.5.0/24 maxlen: 24
43.231.6.0/24 maxlen: 24
43.231.7.0/24 maxlen: 24
45.116.160.0/24 maxlen: 24
45.116.161.0/24 maxlen: 24
45.116.162.0/24 maxlen: 24
45.116.163.0/24 maxlen: 24
45.120.52.0/24 maxlen: 24
45.120.53.0/24 maxlen: 24
45.120.54.0/24 maxlen: 24
45.120.55.0/24 maxlen: 24
61.4.97.0/24 maxlen: 24
61.4.98.0/24 maxlen: 24
61.4.99.0/24 maxlen: 24
61.4.100.0/22 maxlen: 24
61.4.104.0/22 maxlen: 24
61.4.109.0/24 maxlen: 24
61.4.110.0/24 maxlen: 24
103.4.28.0/24 maxlen: 24
103.4.29.0/24 maxlen: 24
103.4.30.0/24 maxlen: 24
103.4.31.0/24 maxlen: 24
103.15.104.0/24 maxlen: 24
103.15.105.0/24 maxlen: 24
103.15.106.0/24 maxlen: 24
103.15.107.0/24 maxlen: 24
103.21.88.0/24 maxlen: 24
103.21.89.0/24 maxlen: 24
103.21.90.0/24 maxlen: 24
103.21.91.0/24 maxlen: 24
103.23.46.0/24 maxlen: 24
103.23.47.0/24 maxlen: 24
103.71.176.0/24 maxlen: 24
103.71.177.0/24 maxlen: 24
103.71.178.0/24 maxlen: 24
103.71.179.0/24 maxlen: 24
103.243.212.0/24 maxlen: 24
103.243.213.0/24 maxlen: 24
103.243.214.0/24 maxlen: 24
103.243.215.0/24 maxlen: 24
103.246.112.0/24 maxlen: 24
103.246.113.0/24 maxlen: 24
103.246.114.0/24 maxlen: 24
103.246.115.0/24 maxlen: 24
118.107.212.0/24 maxlen: 24
118.107.213.0/24 maxlen: 24
118.107.214.0/24 maxlen: 24
118.107.215.0/24 maxlen: 24
118.107.216.0/24 maxlen: 24
118.107.217.0/24 maxlen: 24
118.107.218.0/24 maxlen: 24
118.107.219.0/24 maxlen: 24
118.107.220.0/24 maxlen: 24
118.107.221.0/24 maxlen: 24
118.107.222.0/24 maxlen: 24
118.107.223.0/24 maxlen: 24
150.107.76.0/24 maxlen: 24
150.107.77.0/24 maxlen: 24
150.107.78.0/24 maxlen: 24
150.107.79.0/24 maxlen: 24
202.9.36.0/24 maxlen: 24
202.9.37.0/24 maxlen: 24
202.9.38.0/24 maxlen: 24
202.9.39.0/24 maxlen: 24
202.73.12.0/24 maxlen: 24
202.73.13.0/24 maxlen: 24
202.73.14.0/24 maxlen: 24
202.73.15.0/24 maxlen: 24
202.87.220.0/24 maxlen: 24
202.87.221.0/24 maxlen: 24
202.87.222.0/24 maxlen: 24
202.87.223.0/24 maxlen: 24
223.25.240.0/24 maxlen: 24
223.25.241.0/24 maxlen: 24
223.25.242.0/24 maxlen: 24
223.25.243.0/24 maxlen: 24
223.25.244.0/24 maxlen: 24
223.25.245.0/24 maxlen: 24
223.25.246.0/24 maxlen: 24
223.25.247.0/24 maxlen: 24
2402:9500::/32 maxlen: 32
2402:9500::/48 maxlen: 48
2402:9500:a00::/48 maxlen: 48
2402:9500:b00::/48 maxlen: 48
2402:9500:c00::/48 maxlen: 48
2402:9500:d00::/48 maxlen: 48
2402:9500:1000::/48 maxlen: 48
2402:9500:2000::/48 maxlen: 48
2402:9500:3000::/48 maxlen: 48
2402:9500:4000::/48 maxlen: 48
2402:9500:5000::/48 maxlen: 48
2402:9500:6000::/48 maxlen: 48
2402:9500:7000::/48 maxlen: 48
2402:9500:8000::/48 maxlen: 48
2402:9500:9000::/48 maxlen: 48
2402:9500:e000::/48 maxlen: 48
2402:9500:f000::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A912176D/93D17CD006A011EBB4090859C4F9AE02/lvQuGfadWWoDGJIVkKF91TIz5ZU.crl
rsync://rpki.apnic.net/member_repository/A912176D/93D17CD006A011EBB4090859C4F9AE02/lvQuGfadWWoDGJIVkKF91TIz5ZU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lvQuGfadWWoDGJIVkKF91TIz5ZU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 09 Jul 2025 21:30:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2039 (0x7f7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912176D, serialNumber=96F42E19F69D596A0318921590A17DD53233E595
Validity
Not Before: Jun 13 03:42:50 2025 GMT
Not After : Dec 1 00:00:00 2025 GMT
Subject: CN=684b9e3a-95dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:76:0b:67:a9:02:7d:29:4b:22:45:58:2a:48:
37:10:72:62:48:9d:5d:0b:26:63:d7:d2:66:4b:0f:
b9:96:0a:dc:35:31:40:69:b2:67:bd:7a:93:2a:53:
e7:8e:46:b3:52:e6:50:41:e9:d0:19:ed:2a:82:33:
3e:61:19:0b:31:b9:61:2e:7c:be:71:d0:8b:a8:77:
85:4f:2a:03:14:3d:8d:c5:e8:01:9f:a6:2d:77:66:
d7:b2:d8:f8:fd:1c:43:83:95:ab:c7:3a:7f:f8:d0:
03:f5:17:fc:8a:22:4a:56:19:36:4f:91:42:56:c3:
b8:af:93:7b:71:72:dc:86:15:e2:54:7d:28:27:d2:
40:52:42:0a:2e:ba:01:28:44:eb:04:58:a2:66:59:
c8:c1:e8:c1:c1:be:6a:87:ad:39:93:b2:cb:47:71:
18:70:ff:13:82:35:1d:04:9e:5e:60:14:f9:32:8e:
64:22:69:70:b1:01:ea:27:64:b7:1f:65:10:85:63:
95:f7:30:f5:ae:8f:7f:2e:e4:95:a3:04:a0:55:bc:
cf:0b:aa:d8:d5:e3:f0:5e:27:a5:ce:fb:b1:6b:f1:
9f:c9:af:7e:e4:ac:49:5b:87:c9:77:b5:fc:31:2b:
4d:6f:3d:3d:94:69:45:2f:8b:b2:6f:69:f3:48:f3:
0c:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:DB:50:45:47:37:A3:22:7F:B1:2E:17:F8:7B:82:88:3B:0B:EF:50
X509v3 Authority Key Identifier:
keyid:96:F4:2E:19:F6:9D:59:6A:03:18:92:15:90:A1:7D:D5:32:33:E5:95
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912176D/93D17CD006A011EBB4090859C4F9AE02/lvQuGfadWWoDGJIVkKF91TIz5ZU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lvQuGfadWWoDGJIVkKF91TIz5ZU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912176D/93D17CD006A011EBB4090859C4F9AE02/7A97188E480811F0BF5AC634C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
14.192.67.0-14.192.69.255
43.225.36.0/22
43.231.5.0-43.231.7.255
45.116.160.0/22
45.120.52.0/22
61.4.97.0-61.4.107.255
61.4.109.0-61.4.110.255
103.4.28.0/22
103.15.104.0/22
103.21.88.0/22
103.23.46.0/23
103.71.176.0/22
103.243.212.0/22
103.246.112.0/22
118.107.212.0-118.107.223.255
150.107.76.0/22
202.9.36.0/22
202.73.12.0/22
202.87.220.0/22
223.25.240.0/21
IPv6:
2402:9500::/32
Signature Algorithm: sha256WithRSAEncryption
24:9d:a7:27:e6:9a:7c:ee:78:a4:6f:99:88:52:57:a2:5e:36:
dc:b9:e1:60:52:d2:2d:7d:48:19:52:94:45:96:59:d2:70:06:
fc:a8:48:78:b7:73:51:d8:63:64:85:f5:6f:55:38:28:29:49:
42:5f:3b:a9:f3:ac:d4:eb:11:eb:ad:90:a6:71:f8:19:55:83:
b2:6e:a2:07:97:c6:c7:27:b8:c6:32:68:1d:bf:79:07:46:f6:
85:63:71:44:0d:02:51:45:b2:30:9e:8e:38:5f:30:07:f1:3b:
77:b5:a4:e0:e8:b9:06:af:86:59:78:95:57:39:78:65:63:18:
66:b5:3a:26:b2:2e:da:c1:ac:60:c2:43:e2:d8:ad:44:43:7c:
5a:28:7c:34:7f:9d:95:66:c2:d8:9b:11:17:1b:25:35:58:2d:
50:7e:40:c9:9f:9b:40:d3:ee:3c:c4:87:16:1b:ed:ce:99:7d:
8b:d1:0a:56:29:a5:65:93:24:39:72:6a:79:56:2b:4a:ae:35:
75:63:22:75:4c:2a:d7:55:b5:3e:24:3f:48:2a:1a:28:2f:2d:
2f:96:4e:51:89:b1:58:fb:cb:cf:74:62:9d:05:6e:46:6e:4b:
b7:25:10:91:2e:07:ce:f1:5d:9c:18:c6:8f:96:f4:08:06:24:
2c:0a:a9:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 3 00:24:10 2025 by rpki-client