Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91275FD/E1EFD9B6DECE11E4A14F0068C4F9AE02/86E6EFE02B1D11F0A0D87F83C4F9AE02.roa
File: 86E6EFE02B1D11F0A0D87F83C4F9AE02.roa (raw, json)
Hash identifier: xJZIsYSxPA6k0U5ByKD8Ou7VqCNqF6Caxc86+HoKlvs=
Subject key identifier: E1:53:33:B1:CB:22:21:D5:D6:68:5F:99:82:45:92:EC:AB:FD:DF:E5
Certificate issuer: /CN=A91275FD/serialNumber=4E10F13F295FBF2B359C84DDD1651BC851AA8AF5
Certificate serial: 2714
Authority key identifier: 4E:10:F1:3F:29:5F:BF:2B:35:9C:84:DD:D1:65:1B:C8:51:AA:8A:F5
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ThDxPylfvys1nITd0WUbyFGqivU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91275FD/E1EFD9B6DECE11E4A14F0068C4F9AE02/86E6EFE02B1D11F0A0D87F83C4F9AE02.roa
Signing time: Wed 07 May 2025 08:30:27 +0000
ROA not before: Wed 07 May 2025 08:30:27 +0000
ROA not after: Wed 30 Jul 2025 00:00:00 +0000
asID: 17970
IP address blocks: 43.255.216.0/22 maxlen: 22
61.9.0.0/17 maxlen: 17
61.9.0.0/19 maxlen: 19
61.9.32.0/19 maxlen: 19
61.9.80.0/21 maxlen: 21
61.9.96.0/19 maxlen: 19
61.9.96.0/22 maxlen: 22
61.9.111.0/24 maxlen: 24
61.14.192.0/21 maxlen: 24
103.239.200.0/22 maxlen: 22
202.81.160.0/20 maxlen: 20
202.81.160.0/22 maxlen: 22
202.81.164.0/22 maxlen: 22
202.81.168.0/22 maxlen: 22
202.81.172.0/22 maxlen: 22
202.81.173.0/24 maxlen: 24
202.81.174.0/24 maxlen: 24
203.76.192.0/20 maxlen: 20
203.76.192.0/22 maxlen: 22
203.76.195.0/24 maxlen: 24
203.76.196.0/22 maxlen: 22
203.76.196.0/24 maxlen: 24
203.76.200.0/22 maxlen: 22
203.76.204.0/22 maxlen: 22
219.90.80.0/20 maxlen: 20
219.90.80.0/22 maxlen: 22
219.90.84.0/22 maxlen: 22
219.90.84.0/24 maxlen: 24
219.90.86.0/24 maxlen: 24
219.90.87.0/24 maxlen: 24
219.90.88.0/22 maxlen: 22
219.90.90.0/24 maxlen: 24
219.90.91.0/24 maxlen: 24
219.90.92.0/22 maxlen: 22
219.90.92.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91275FD/E1EFD9B6DECE11E4A14F0068C4F9AE02/ThDxPylfvys1nITd0WUbyFGqivU.crl
rsync://rpki.apnic.net/member_repository/A91275FD/E1EFD9B6DECE11E4A14F0068C4F9AE02/ThDxPylfvys1nITd0WUbyFGqivU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ThDxPylfvys1nITd0WUbyFGqivU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 19 May 2025 15:39:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 10004 (0x2714)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91275FD, serialNumber=4E10F13F295FBF2B359C84DDD1651BC851AA8AF5
Validity
Not Before: May 7 08:30:27 2025 GMT
Not After : Jul 30 00:00:00 2025 GMT
Subject: CN=681b1a22-6a96
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:f6:c0:55:42:11:fd:db:fa:d4:c5:89:59:f0:
7a:b0:d1:bb:4f:f6:f9:a8:26:48:c2:b1:ac:6f:1a:
5d:15:ab:d4:aa:f8:5f:3d:0c:06:43:70:f9:c3:b0:
0e:3d:ee:12:78:a1:03:1e:ca:19:75:9e:8c:c3:30:
4b:e3:ce:e7:7b:8d:0e:c5:1e:32:de:ab:75:a7:08:
df:55:17:40:fa:e6:69:57:cb:c3:12:d9:7f:fc:5c:
2f:17:65:73:0c:96:2c:d1:71:18:41:3c:64:b5:8a:
9e:b1:fc:15:fc:24:8a:78:3b:a9:5d:61:73:1a:7b:
88:2c:94:ff:a8:f6:a8:ba:7a:3c:14:fc:f2:44:59:
7e:95:53:40:92:b0:94:fb:b6:e8:fd:fe:fc:74:1b:
ab:9c:f9:b9:6d:44:d0:bf:fc:3d:03:91:80:43:21:
48:a1:7e:ea:c0:dc:54:51:87:d8:7b:71:19:52:76:
21:10:f3:a4:81:eb:13:86:6d:55:29:42:0b:7f:28:
88:7a:7a:3a:81:46:98:7e:14:d7:23:31:de:10:4f:
d7:65:37:f2:2c:3d:cc:ad:c3:f5:1e:df:5e:38:37:
41:c3:b4:be:2d:05:7f:9f:88:b0:4c:c9:26:85:b5:
aa:39:9a:9e:1e:3c:65:27:3c:4f:65:72:33:6a:b4:
0a:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:53:33:B1:CB:22:21:D5:D6:68:5F:99:82:45:92:EC:AB:FD:DF:E5
X509v3 Authority Key Identifier:
keyid:4E:10:F1:3F:29:5F:BF:2B:35:9C:84:DD:D1:65:1B:C8:51:AA:8A:F5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91275FD/E1EFD9B6DECE11E4A14F0068C4F9AE02/ThDxPylfvys1nITd0WUbyFGqivU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ThDxPylfvys1nITd0WUbyFGqivU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91275FD/E1EFD9B6DECE11E4A14F0068C4F9AE02/86E6EFE02B1D11F0A0D87F83C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
43.255.216.0/22
61.9.0.0/17
61.14.192.0/21
103.239.200.0/22
202.81.160.0/20
203.76.192.0/20
219.90.80.0/20
Signature Algorithm: sha256WithRSAEncryption
30:ec:2f:71:f5:16:ee:b1:63:5d:6b:7f:fd:5d:5a:c0:67:26:
67:40:6e:53:aa:b4:a8:2a:5a:d8:96:df:f1:e6:40:ba:cb:51:
7f:31:d1:07:fa:3f:d2:09:87:e7:1c:7e:97:78:17:3b:ba:59:
7d:92:80:d5:96:5f:1e:3a:09:64:6b:d4:6b:86:9f:a6:e1:2e:
8f:a7:55:43:15:12:a0:ec:5b:5d:07:f2:bf:c7:66:cd:d0:b5:
36:86:77:0d:91:7b:d1:35:7a:f2:e4:ed:3d:14:0c:97:51:cb:
76:18:21:38:9c:6e:b4:9d:7e:47:14:33:18:8e:84:8c:4b:38:
f4:94:00:22:66:c4:40:87:a1:3d:79:6d:f9:9a:c6:e3:94:b0:
e6:0d:5f:f8:3f:8a:7e:8b:57:f7:72:de:71:b9:c1:80:bf:7e:
c5:c2:97:b3:86:fd:0f:58:6c:95:77:e0:a2:48:4e:06:f5:de:
f3:1b:d4:26:d6:a0:87:68:7b:0d:3e:2f:de:2f:12:e5:61:d9:
07:fa:55:f6:ad:11:ea:20:90:62:50:16:cd:8c:8a:3f:1a:82:
be:fd:88:18:34:c4:49:0d:55:cb:f7:76:41:fa:b5:b7:65:d1:
98:73:29:18:06:f1:85:f0:6a:86:06:4c:e0:19:ab:c7:21:91:
87:8f:24:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 14 08:31:00 2025 by rpki-client