Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9132B1E/8936CC04883211EA84861B70C4F9AE02/ABF4F248555511F0A341047BC4F9AE02.roa
File: ABF4F248555511F0A341047BC4F9AE02.roa (raw, json)
Hash identifier: I1d1RCJ4rw/8orQ3As1NQw/eL62cfyC0BCN7vQ6zw48=
Subject key identifier: FD:CE:1B:B8:44:BD:CD:F9:62:CE:C5:36:00:59:F8:0A:5F:CB:79:40
Certificate issuer: /CN=A9132B1E/serialNumber=ABD43548659CBB276EF8D35B8212F838E8CEB75F
Certificate serial: 0AA9
Authority key identifier: AB:D4:35:48:65:9C:BB:27:6E:F8:D3:5B:82:12:F8:38:E8:CE:B7:5F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q9Q1SGWcuydu-NNbghL4OOjOt18.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9132B1E/8936CC04883211EA84861B70C4F9AE02/ABF4F248555511F0A341047BC4F9AE02.roa
Signing time: Mon 30 Jun 2025 01:58:09 +0000
ROA not before: Mon 30 Jun 2025 01:58:09 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 2706
IP address blocks: 116.92.0.0/24 maxlen: 24
116.92.2.0/24 maxlen: 24
116.92.10.0/24 maxlen: 24
116.92.14.0/24 maxlen: 24
116.92.128.0/23 maxlen: 24
116.92.130.0/24 maxlen: 24
116.92.133.0/24 maxlen: 24
116.92.184.0/21 maxlen: 24
116.92.192.0/19 maxlen: 24
116.92.224.0/20 maxlen: 24
116.92.240.0/21 maxlen: 24
202.14.67.0/24 maxlen: 24
202.14.68.0/24 maxlen: 24
202.64.0.0/20 maxlen: 24
202.64.16.0/21 maxlen: 24
202.64.24.0/24 maxlen: 24
202.64.26.0/23 maxlen: 24
202.64.28.0/22 maxlen: 24
202.64.32.0/20 maxlen: 24
202.64.48.0/21 maxlen: 24
202.64.57.0/24 maxlen: 24
202.64.58.0/23 maxlen: 24
202.64.60.0/23 maxlen: 24
202.64.62.0/24 maxlen: 24
202.64.66.0/23 maxlen: 24
202.64.68.0/22 maxlen: 24
202.64.72.0/21 maxlen: 24
202.64.80.0/22 maxlen: 24
202.64.84.0/23 maxlen: 24
202.64.86.0/24 maxlen: 24
202.64.88.0/21 maxlen: 24
202.64.96.0/22 maxlen: 24
202.64.101.0/24 maxlen: 24
202.64.104.0/22 maxlen: 24
202.64.108.0/24 maxlen: 24
202.64.112.0/21 maxlen: 24
202.64.120.0/24 maxlen: 24
202.64.122.0/24 maxlen: 24
202.64.124.0/22 maxlen: 24
202.64.129.0/24 maxlen: 24
202.64.130.0/24 maxlen: 24
202.64.132.0/22 maxlen: 24
202.64.136.0/24 maxlen: 24
202.64.138.0/24 maxlen: 24
202.64.140.0/22 maxlen: 24
202.64.144.0/21 maxlen: 24
202.64.152.0/22 maxlen: 24
202.64.157.0/24 maxlen: 24
202.64.158.0/23 maxlen: 24
202.64.160.0/21 maxlen: 24
202.64.168.0/22 maxlen: 24
202.64.172.0/23 maxlen: 24
202.64.175.0/24 maxlen: 24
202.64.176.0/23 maxlen: 24
202.64.178.0/24 maxlen: 24
202.64.180.0/22 maxlen: 24
202.64.184.0/21 maxlen: 24
202.64.193.0/24 maxlen: 24
202.64.194.0/23 maxlen: 24
202.64.196.0/22 maxlen: 24
202.64.200.0/21 maxlen: 24
202.64.208.0/23 maxlen: 24
202.64.211.0/24 maxlen: 24
202.64.212.0/22 maxlen: 24
202.64.216.0/21 maxlen: 24
202.64.224.0/21 maxlen: 24
202.64.232.0/23 maxlen: 24
202.64.235.0/24 maxlen: 24
202.64.236.0/22 maxlen: 24
202.64.241.0/24 maxlen: 24
202.64.242.0/23 maxlen: 24
202.64.244.0/22 maxlen: 24
202.64.248.0/21 maxlen: 24
210.17.128.0/19 maxlen: 24
210.17.160.0/24 maxlen: 24
210.17.162.0/23 maxlen: 24
210.17.164.0/22 maxlen: 24
210.17.168.0/21 maxlen: 24
210.17.176.0/20 maxlen: 24
210.17.192.0/20 maxlen: 24
210.17.208.0/21 maxlen: 24
210.17.216.0/22 maxlen: 24
210.17.220.0/23 maxlen: 24
210.17.223.0/24 maxlen: 24
210.17.224.0/19 maxlen: 24
220.232.136.0/21 maxlen: 24
220.232.144.0/21 maxlen: 24
220.232.152.0/22 maxlen: 24
220.232.160.0/23 maxlen: 24
220.232.166.0/23 maxlen: 24
220.232.168.0/21 maxlen: 24
220.232.184.0/21 maxlen: 24
220.232.192.0/21 maxlen: 24
220.232.200.0/22 maxlen: 24
220.232.207.0/24 maxlen: 24
220.232.208.0/23 maxlen: 24
220.232.210.0/24 maxlen: 24
220.232.212.0/22 maxlen: 24
220.232.216.0/21 maxlen: 24
220.232.224.0/20 maxlen: 24
220.232.240.0/23 maxlen: 24
220.232.244.0/22 maxlen: 24
220.232.248.0/22 maxlen: 24
220.232.252.0/23 maxlen: 24
220.232.255.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9132B1E/8936CC04883211EA84861B70C4F9AE02/q9Q1SGWcuydu-NNbghL4OOjOt18.crl
rsync://rpki.apnic.net/member_repository/A9132B1E/8936CC04883211EA84861B70C4F9AE02/q9Q1SGWcuydu-NNbghL4OOjOt18.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q9Q1SGWcuydu-NNbghL4OOjOt18.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 10 Jul 2025 03:15:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2729 (0xaa9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9132B1E, serialNumber=ABD43548659CBB276EF8D35B8212F838E8CEB75F
Validity
Not Before: Jun 30 01:58:09 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6861ef31-692e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:c7:05:d8:a7:85:ce:ec:74:46:80:d2:26:ab:
c7:fa:ca:36:65:a9:8d:14:96:c0:a1:f2:e2:1e:f0:
6e:67:17:35:c2:0a:29:b3:ac:3d:b3:c3:7f:d5:6f:
05:21:55:c9:b6:67:00:59:37:f5:06:37:62:4f:08:
80:a2:25:ac:68:e8:6b:d8:fe:5b:51:81:fd:b0:71:
4f:e7:2b:a8:d6:c7:cb:8b:d4:c0:a4:ab:e0:bb:64:
b7:e7:86:b9:9b:0b:f4:02:95:5c:65:2f:11:80:70:
02:af:4a:84:24:55:ff:f1:13:02:ce:0c:25:d1:4d:
82:ab:96:4a:08:04:91:0d:d1:03:1c:4e:2e:f3:11:
bc:9c:84:71:60:ea:1d:a9:f8:82:31:64:65:7f:1e:
63:cc:97:c5:b9:25:a2:68:14:c3:5d:71:f8:5a:be:
01:36:85:a6:0b:81:00:76:2c:d1:78:3f:3f:ed:0e:
78:6d:a9:e1:32:84:c1:10:1f:ab:fa:9e:8a:82:11:
cd:09:38:32:08:14:c7:3a:bd:99:ea:8e:c6:07:1d:
d7:5b:7b:c8:c3:ae:2f:a5:be:cf:cd:91:b0:0f:e9:
76:1d:9b:6e:81:49:95:8d:0a:97:db:04:82:07:69:
6d:6c:e5:57:2a:8d:f1:cd:e0:b3:7b:39:d2:22:15:
a7:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:CE:1B:B8:44:BD:CD:F9:62:CE:C5:36:00:59:F8:0A:5F:CB:79:40
X509v3 Authority Key Identifier:
keyid:AB:D4:35:48:65:9C:BB:27:6E:F8:D3:5B:82:12:F8:38:E8:CE:B7:5F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9132B1E/8936CC04883211EA84861B70C4F9AE02/q9Q1SGWcuydu-NNbghL4OOjOt18.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q9Q1SGWcuydu-NNbghL4OOjOt18.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9132B1E/8936CC04883211EA84861B70C4F9AE02/ABF4F248555511F0A341047BC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
116.92.0.0/24
116.92.2.0/24
116.92.10.0/24
116.92.14.0/24
116.92.128.0-116.92.130.255
116.92.133.0/24
116.92.184.0-116.92.247.255
202.14.67.0-202.14.68.255
202.64.0.0-202.64.24.255
202.64.26.0-202.64.55.255
202.64.57.0-202.64.62.255
202.64.66.0-202.64.86.255
202.64.88.0-202.64.99.255
202.64.101.0/24
202.64.104.0-202.64.108.255
202.64.112.0-202.64.120.255
202.64.122.0/24
202.64.124.0/22
202.64.129.0-202.64.130.255
202.64.132.0-202.64.136.255
202.64.138.0/24
202.64.140.0-202.64.155.255
202.64.157.0-202.64.173.255
202.64.175.0-202.64.178.255
202.64.180.0-202.64.191.255
202.64.193.0-202.64.209.255
202.64.211.0-202.64.233.255
202.64.235.0-202.64.239.255
202.64.241.0-202.64.255.255
210.17.128.0-210.17.160.255
210.17.162.0-210.17.221.255
210.17.223.0-210.17.255.255
220.232.136.0-220.232.155.255
220.232.160.0/23
220.232.166.0-220.232.175.255
220.232.184.0-220.232.203.255
220.232.207.0-220.232.210.255
220.232.212.0-220.232.241.255
220.232.244.0-220.232.253.255
220.232.255.0/24
Signature Algorithm: sha256WithRSAEncryption
13:18:1d:14:16:3b:3b:3e:8d:82:a0:11:37:8d:33:6f:8d:9a:
3c:bd:89:65:27:24:4e:02:2e:90:fa:63:8d:ff:fd:f9:a1:7e:
5a:86:0b:01:dc:d6:b6:6d:a6:76:13:c6:9c:f4:47:ba:0a:f3:
c9:16:67:19:f0:2a:f5:3d:91:11:e9:b0:96:69:c5:67:1e:99:
fe:8a:a2:a8:a5:18:05:39:09:cf:97:98:43:d1:0f:b7:50:02:
a3:6d:37:99:19:8e:38:ec:ec:1f:d9:44:d8:df:e9:80:77:5d:
84:a6:b7:7c:15:c6:f3:b5:ba:7c:18:20:4f:4a:48:c3:cf:dc:
30:8f:78:92:2a:6c:ce:a9:b1:da:a2:60:37:7a:c5:55:76:73:
70:fe:d9:2c:d7:b0:61:db:52:aa:77:03:09:6a:f5:07:03:f9:
db:e4:c7:29:12:4b:b7:51:5d:b0:f6:24:53:67:80:b5:64:6d:
40:84:8f:78:99:31:bf:de:63:74:73:d2:54:45:ed:19:90:df:
97:8e:80:42:f2:03:9e:79:94:c6:e2:85:fa:b8:db:46:c9:55:
de:54:91:dd:4c:b3:7b:a0:96:5f:99:a2:b5:d9:8a:52:a2:a7:
08:1e:98:a2:6c:e7:0a:ce:cd:1e:67:78:51:20:68:55:8a:aa:
46:a2:c4:95
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Fri Jul 4 23:06:00 2025 by rpki-client