Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/674B4ED227C811EFAECE0786C4F9AE02.roa
File: 674B4ED227C811EFAECE0786C4F9AE02.roa (raw, json)
Hash identifier: oeuxwzfyZ7LWx80GSOM86/n3uH8dEaVZdiylZT1ZMOI=
Subject key identifier: 9F:0F:2F:8A:BB:54:AD:E1:8E:86:90:09:8F:E9:D3:C7:E6:89:21:84
Certificate issuer: /CN=A9137ABC/serialNumber=61BF3ED4C3BFBC0916EF9480AAFF222A437AF02C
Certificate serial: 3A3E
Authority key identifier: 61:BF:3E:D4:C3:BF:BC:09:16:EF:94:80:AA:FF:22:2A:43:7A:F0:2C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/674B4ED227C811EFAECE0786C4F9AE02.roa
Signing time: Fri 22 Aug 2025 05:16:51 +0000
ROA not before: Fri 22 Aug 2025 05:16:51 +0000
ROA not after: Wed 30 Sep 2026 00:00:00 +0000
asID: 17552
IP address blocks: 27.145.0.0/16 maxlen: 24
58.8.0.0/16 maxlen: 24
58.9.0.0/16 maxlen: 24
58.10.0.0/16 maxlen: 24
58.11.0.0/16 maxlen: 24
58.97.124.0/24 maxlen: 24
58.97.125.0/24 maxlen: 24
61.90.0.0/17 maxlen: 24
61.91.128.0/21 maxlen: 24
61.91.144.0/21 maxlen: 24
61.91.190.0/24 maxlen: 24
61.91.191.0/24 maxlen: 24
61.91.192.0/24 maxlen: 24
61.91.193.0/24 maxlen: 24
61.91.201.0/24 maxlen: 24
61.91.214.0/24 maxlen: 24
110.168.0.0/17 maxlen: 24
110.168.128.0/17 maxlen: 24
110.169.0.0/16 maxlen: 24
110.171.0.0/17 maxlen: 24
110.171.128.0/17 maxlen: 24
114.109.0.0/16 maxlen: 24
115.87.0.0/17 maxlen: 24
115.87.128.0/17 maxlen: 24
119.46.255.0/24 maxlen: 24
119.76.0.0/16 maxlen: 24
124.120.0.0/16 maxlen: 24
124.121.0.0/16 maxlen: 24
124.122.0.0/16 maxlen: 24
171.96.0.0/16 maxlen: 24
171.97.0.0/16 maxlen: 24
171.98.0.0/16 maxlen: 24
171.99.0.0/16 maxlen: 24
171.100.0.0/16 maxlen: 24
171.101.0.0/16 maxlen: 24
171.102.0.0/16 maxlen: 24
171.103.0.0/16 maxlen: 24
182.17.0.0/16 maxlen: 24
202.133.128.0/20 maxlen: 24
202.133.144.0/20 maxlen: 24
202.133.160.0/19 maxlen: 24
202.176.64.0/18 maxlen: 18
202.176.64.0/19 maxlen: 24
202.176.96.0/19 maxlen: 24
202.176.128.0/18 maxlen: 24
210.213.0.0/18 maxlen: 24
2001:fb0:101::/48 maxlen: 48
2001:fb0:102::/48 maxlen: 48
2001:fb0:1004::/48 maxlen: 48
2001:fb0:1005::/48 maxlen: 48
2001:fb1::/32 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.crl
rsync://rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 29 Aug 2025 14:20:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 14910 (0x3a3e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9137ABC, serialNumber=61BF3ED4C3BFBC0916EF9480AAFF222A437AF02C
Validity
Not Before: Aug 22 05:16:51 2025 GMT
Not After : Sep 30 00:00:00 2026 GMT
Subject: CN=68a7fd42-6ad1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:21:5b:5f:0c:70:6b:32:95:e7:22:40:80:39:
3d:82:83:dc:d5:82:bb:d5:20:b5:bc:35:c8:10:ce:
97:bb:ef:16:d5:95:11:60:49:6d:f4:59:cc:94:af:
b1:72:fa:cc:ab:e5:24:b0:14:82:bf:ae:27:e5:14:
53:1c:76:06:ab:0e:42:55:31:a5:6f:a2:0d:56:98:
ef:d6:7c:b4:38:06:42:23:51:1c:82:c0:14:83:cf:
18:40:e6:cd:f2:e3:9f:46:b0:a8:d6:4f:17:61:cc:
d8:c6:d0:ca:55:14:74:26:4b:59:d0:4e:48:80:01:
94:ca:ba:1e:f8:e5:fe:98:67:17:0e:ad:ac:1b:c6:
4f:43:1e:0c:e8:5c:77:f6:32:eb:2d:49:95:3d:c3:
11:b6:8d:21:9b:cd:e4:8e:a1:09:3a:ca:79:43:12:
9e:54:2f:75:78:03:43:6c:06:f4:6a:37:db:44:85:
1d:56:da:43:31:68:6f:cd:6c:aa:88:0a:db:1b:38:
f8:9e:73:b8:92:06:26:b6:79:59:28:87:f8:8a:0b:
21:c6:6c:49:26:8e:7d:db:23:18:e1:7e:cb:cc:e5:
b4:22:7d:a0:32:fe:5f:ca:2f:be:60:f0:c0:c8:37:
59:ce:62:77:fc:6c:0b:10:11:6a:14:d9:91:a2:48:
87:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:0F:2F:8A:BB:54:AD:E1:8E:86:90:09:8F:E9:D3:C7:E6:89:21:84
X509v3 Authority Key Identifier:
keyid:61:BF:3E:D4:C3:BF:BC:09:16:EF:94:80:AA:FF:22:2A:43:7A:F0:2C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/674B4ED227C811EFAECE0786C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
27.145.0.0/16
58.8.0.0/14
58.97.124.0/23
61.90.0.0/17
61.91.128.0/21
61.91.144.0/21
61.91.190.0-61.91.193.255
61.91.201.0/24
61.91.214.0/24
110.168.0.0/15
110.171.0.0/16
114.109.0.0/16
115.87.0.0/16
119.46.255.0/24
119.76.0.0/16
124.120.0.0-124.122.255.255
171.96.0.0/13
182.17.0.0/16
202.133.128.0/18
202.176.64.0-202.176.191.255
210.213.0.0/18
IPv6:
2001:fb0:101::-2001:fb0:102:ffff:ffff:ffff:ffff:ffff
2001:fb0:1004::/47
2001:fb1::/32
Signature Algorithm: sha256WithRSAEncryption
6c:63:0e:a8:5e:5c:d8:47:8c:0d:f9:19:7a:3d:dd:2b:7e:33:
12:e1:4c:12:26:61:55:18:d3:f6:73:00:ef:63:4a:29:75:02:
75:36:b4:f6:b2:df:02:f1:0c:70:25:b3:e1:e3:1e:2e:b6:93:
9b:e9:4f:a7:77:b9:cb:0c:ba:50:62:7c:9b:d0:4f:bd:2d:a4:
41:e3:b9:ec:0c:ea:56:bf:f2:ed:3e:03:bb:74:99:2d:1f:cb:
7a:80:9b:2f:e7:59:fd:5d:fb:8b:cc:73:a9:06:ff:00:ca:c9:
d3:d9:42:37:70:64:a9:90:8f:ee:1c:e7:72:ab:33:2c:64:08:
60:da:54:eb:5d:d8:76:d2:61:ba:bd:20:f9:cd:ec:e6:87:e3:
aa:fc:cd:2b:2f:04:58:ab:d8:e7:0d:4f:d5:70:6c:2d:84:7f:
2d:1b:cb:87:b9:f7:a9:c5:49:97:fa:d7:5a:71:8d:43:ee:bb:
f5:f9:fe:19:61:8b:a3:12:06:fe:3c:69:05:c5:91:60:07:ea:
c7:fb:ea:36:22:13:87:de:25:87:38:70:4f:a3:f0:57:fe:6f:
68:13:05:04:48:3a:9f:03:0f:48:6a:a9:4a:ab:cb:84:b6:18:
ad:4b:21:ca:25:4e:94:6d:21:61:67:5d:ff:6f:d4:61:01:5b:
03:5c:1e:67
-----BEGIN CERTIFICATE-----
MIIGJzCCBQ+gAwIBAgICOj4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MzdBQkMxMTAvBgNVBAUTKDYxQkYzRUQ0QzNCRkJDMDkxNkVGOTQ4MEFBRkYyMjJB
NDM3QUYwMkMwHhcNMjUwODIyMDUxNjUxWhcNMjYwOTMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02OGE3ZmQ0Mi02YWQxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA1iFbXwxwazKV5yJAgDk9goPc1YK71SC1vDXIEM6Xu+8W1ZURYElt9FnMlK+x
cvrMq+UksBSCv64n5RRTHHYGqw5CVTGlb6INVpjv1ny0OAZCI1EcgsAUg88YQObN
8uOfRrCo1k8XYczYxtDKVRR0JktZ0E5IgAGUyroe+OX+mGcXDq2sG8ZPQx4M6Fx3
9jLrLUmVPcMRto0hm83kjqEJOsp5QxKeVC91eANDbAb0ajfbRIUdVtpDMWhvzWyq
iArbGzj4nnO4kgYmtnlZKIf4igshxmxJJo592yMY4X7LzOW0In2gMv5fyi++YPDA
yDdZzmJ3/GwLEBFqFNmRokiHVwIDAQABo4IDSzCCA0cwHQYDVR0OBBYEFJ8PL4q7
VK3hjoaQCY/p08fmiSGEMB8GA1UdIwQYMBaAFGG/PtTDv7wJFu+UgKr/IipDevAs
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzN0FCQy83MTNEOUZCMDFE
NzgxMUUyODI4NjhEQzQwOEIwMkNEMi9ZYjgtMU1PX3ZBa1c3NVNBcXY4aUtrTjY4
Q3cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1liOC0xTU9fdkFrVzc1U0FxdjhpS2tONjhDdy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
MzdBQkMvNzEzRDlGQjAxRDc4MTFFMjgyODY4REM0MDhCMDJDRDIvNjc0QjRFRDIy
N0M4MTFFRkFFQ0UwNzg2QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwgdQGCCsGAQUFBwEHAQH/
BIHEMIHBMIGSBAIAATCBiwMDABuRAwMCOggDBAE6YXwDBAc9WgADBAM9W4ADBAM9
W5AwDAMEAT1bvgMEAT1bwAMEAD1byQMEAD1b1gMDAW6oAwMAbqsDAwBybQMDAHNX
AwQAdy7/AwMAd0wwCgMDA3x4AwMAfHoDAwOrYAMDALYRAwQGyoWAMAwDBAbKsEAD
BAbKsIADBAbS1QAwKgQCAAIwJDASAwcAIAEPsAEBAwcAIAEPsAECAwcBIAEPsBAE
AwUAIAEPsTANBgkqhkiG9w0BAQsFAAOCAQEAbGMOqF5c2EeMDfkZej3dK34zEuFM
EiZhVRjT9nMA72NKKXUCdTa09rLfAvEMcCWz4eMeLraTm+lPp3e5ywy6UGJ8m9BP
vS2kQeO57AzqVr/y7T4Du3SZLR/LeoCbL+dZ/V37i8xzqQb/AMrJ09lCN3BkqZCP
7hzncqszLGQIYNpU613YdtJhur0g+c3s5ofjqvzNKy8EWKvY5w1P1XBsLYR/LRvL
h7n3qcVJl/rXWnGNQ+679fn+GWGLoxIG/jxpBcWRYAfqx/vqNiITh94lhzhwT6Pw
V/5vaBMFBEg6nwMPSGqpSqvLhLYYrUshyiVOlG0hYWdd/2/UYQFbA1weZw==
-----END CERTIFICATE-----
Generated at Sat Aug 23 20:12:31 2025 by rpki-client