Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A913F6DE/87AAE74A1B3A11EAB4CDC659C4F9AE02/8C1F014E911411EF84279055C4F9AE02.roa
File: 8C1F014E911411EF84279055C4F9AE02.roa (raw, json)
Hash identifier: Q+6aUW+UHrnvzDp5Nyyu2JirqscmSVz5OWmEsK97YDY=
Subject key identifier: C2:40:5B:7A:86:F1:3C:CA:C6:CC:C4:AA:E9:57:F5:4E:A4:19:7A:71
Certificate issuer: /CN=A913F6DE/serialNumber=5D428682E89E9FED962BE9C4432B34C45E2E09C9
Certificate serial: 0C05
Authority key identifier: 5D:42:86:82:E8:9E:9F:ED:96:2B:E9:C4:43:2B:34:C4:5E:2E:09:C9
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XUKGguien-2WK-nEQys0xF4uCck.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A913F6DE/87AAE74A1B3A11EAB4CDC659C4F9AE02/8C1F014E911411EF84279055C4F9AE02.roa
Signing time: Mon 12 May 2025 08:09:44 +0000
ROA not before: Mon 12 May 2025 08:09:44 +0000
ROA not after: Tue 30 Sep 2025 00:00:00 +0000
asID: 131464
IP address blocks: 103.69.148.0/22 maxlen: 22
103.69.148.0/23 maxlen: 23
103.69.148.0/24 maxlen: 24
103.69.149.0/24 maxlen: 24
103.69.150.0/23 maxlen: 23
103.69.150.0/24 maxlen: 24
103.69.151.0/24 maxlen: 24
180.149.232.0/22 maxlen: 22
180.149.232.0/23 maxlen: 23
180.149.232.0/24 maxlen: 24
180.149.233.0/24 maxlen: 24
180.149.234.0/23 maxlen: 23
180.149.234.0/24 maxlen: 24
180.149.235.0/24 maxlen: 24
2405:f280::/32 maxlen: 32
2405:f280::/33 maxlen: 33
2405:f280::/34 maxlen: 34
2405:f280::/35 maxlen: 35
2405:f280::/36 maxlen: 36
2405:f280:1::/48 maxlen: 48
2405:f280:3::/48 maxlen: 48
2405:f280:14::/48 maxlen: 48
2405:f280:34::/48 maxlen: 48
2405:f280:5c::/48 maxlen: 48
2405:f280:192::/48 maxlen: 48
2405:f280:1000::/36 maxlen: 36
2405:f280:1000::/48 maxlen: 48
2405:f280:1001::/48 maxlen: 48
2405:f280:1038::/48 maxlen: 48
2405:f280:1039::/48 maxlen: 48
2405:f280:2000::/35 maxlen: 35
2405:f280:2000::/36 maxlen: 36
2405:f280:3000::/36 maxlen: 36
2405:f280:4000::/34 maxlen: 34
2405:f280:4000::/35 maxlen: 35
2405:f280:4000::/36 maxlen: 36
2405:f280:5000::/36 maxlen: 36
2405:f280:6000::/35 maxlen: 35
2405:f280:6000::/36 maxlen: 36
2405:f280:7000::/36 maxlen: 36
2405:f280:8000::/33 maxlen: 33
2405:f280:8000::/34 maxlen: 34
2405:f280:8000::/35 maxlen: 35
2405:f280:8000::/36 maxlen: 36
2405:f280:9000::/36 maxlen: 36
2405:f280:9000::/48 maxlen: 48
2405:f280:9001::/48 maxlen: 48
2405:f280:a000::/35 maxlen: 35
2405:f280:a000::/36 maxlen: 36
2405:f280:b000::/36 maxlen: 36
2405:f280:c000::/34 maxlen: 34
2405:f280:c000::/35 maxlen: 35
2405:f280:c000::/36 maxlen: 36
2405:f280:c000::/48 maxlen: 48
2405:f280:d000::/36 maxlen: 36
2405:f280:e000::/35 maxlen: 35
2405:f280:e000::/36 maxlen: 36
2405:f280:e000::/48 maxlen: 48
2405:f280:e004::/48 maxlen: 48
2405:f280:e005::/48 maxlen: 48
2405:f280:e006::/48 maxlen: 48
2405:f280:e007::/48 maxlen: 48
2405:f280:e008::/48 maxlen: 48
2405:f280:e009::/48 maxlen: 48
2405:f280:e00a::/48 maxlen: 48
2405:f280:e00b::/48 maxlen: 48
2405:f280:e00c::/48 maxlen: 48
2405:f280:e00d::/48 maxlen: 48
2405:f280:e034::/48 maxlen: 48
2405:f280:ef00::/48 maxlen: 48
2405:f280:f000::/36 maxlen: 36
2405:f280:ff00::/40 maxlen: 40
2405:f280:ff00::/48 maxlen: 48
2405:f280:ff01::/48 maxlen: 48
2405:f280:ff02::/48 maxlen: 48
2405:f280:ff03::/48 maxlen: 48
2405:f280:ff04::/48 maxlen: 48
2405:f280:ff05::/48 maxlen: 48
2405:f280:ff06::/48 maxlen: 48
2405:f280:ff07::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A913F6DE/87AAE74A1B3A11EAB4CDC659C4F9AE02/XUKGguien-2WK-nEQys0xF4uCck.crl
rsync://rpki.apnic.net/member_repository/A913F6DE/87AAE74A1B3A11EAB4CDC659C4F9AE02/XUKGguien-2WK-nEQys0xF4uCck.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XUKGguien-2WK-nEQys0xF4uCck.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 23 May 2025 19:04:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3077 (0xc05)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A913F6DE, serialNumber=5D428682E89E9FED962BE9C4432B34C45E2E09C9
Validity
Not Before: May 12 08:09:44 2025 GMT
Not After : Sep 30 00:00:00 2025 GMT
Subject: CN=6821acc8-acdc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:07:47:f7:1d:cb:93:3a:ae:54:49:d1:c7:54:
f1:6b:18:ab:b1:0c:5b:6c:af:a8:a6:51:8c:3d:c7:
2f:fc:c4:b1:41:39:41:5b:6b:78:1d:30:42:ea:fd:
42:3e:4b:73:6e:3f:c2:50:ae:4c:80:b8:a1:9a:b1:
db:36:08:61:0c:b1:fc:ae:81:19:65:80:38:50:34:
30:f2:ac:db:e1:c8:57:32:cf:94:ce:8d:19:5c:c8:
78:cd:d1:4a:fa:19:1e:c5:a6:42:b7:fd:eb:e5:40:
0d:46:46:d8:b7:10:69:6a:07:81:e7:67:35:6c:d0:
44:9d:2b:af:86:72:c6:69:0b:c6:76:c4:92:da:9c:
cc:fb:fe:c1:3b:dc:64:60:ca:1b:8c:21:09:23:0b:
1b:14:8d:d4:ad:b2:0d:3e:48:9c:4f:13:ff:e3:d1:
a0:7c:7d:d8:32:02:53:1d:44:d3:fd:f9:b8:f6:26:
4c:fe:bc:4b:6b:e2:3c:9f:7d:64:83:70:8b:dc:b2:
b6:60:18:6c:67:af:a3:70:d5:aa:42:95:1f:da:8e:
e3:3c:53:e1:ca:a6:4a:2e:c8:2d:fc:9c:49:cb:3c:
bb:7e:bf:0b:e4:90:3f:d5:8e:31:24:c8:9f:29:43:
59:5b:4b:f4:c2:c2:5d:ec:26:f0:f1:ca:cd:81:58:
4f:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:40:5B:7A:86:F1:3C:CA:C6:CC:C4:AA:E9:57:F5:4E:A4:19:7A:71
X509v3 Authority Key Identifier:
keyid:5D:42:86:82:E8:9E:9F:ED:96:2B:E9:C4:43:2B:34:C4:5E:2E:09:C9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A913F6DE/87AAE74A1B3A11EAB4CDC659C4F9AE02/XUKGguien-2WK-nEQys0xF4uCck.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XUKGguien-2WK-nEQys0xF4uCck.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913F6DE/87AAE74A1B3A11EAB4CDC659C4F9AE02/8C1F014E911411EF84279055C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.69.148.0/22
180.149.232.0/22
IPv6:
2405:f280::/32
Signature Algorithm: sha256WithRSAEncryption
85:36:24:65:8c:60:fa:1e:bb:a0:3e:e6:9a:69:ed:39:02:7d:
01:11:e6:8a:91:f9:d5:3f:91:77:c0:30:b9:d3:ee:af:bb:3a:
12:c3:fd:b5:76:8f:68:b7:4f:c3:fb:61:53:fe:d2:67:cf:03:
4b:f1:65:b8:9c:e3:d0:c5:0e:3e:44:a1:e8:50:29:6e:4e:26:
c0:c3:3e:c2:cb:1f:45:46:0e:8c:4f:7e:14:6a:b0:e0:21:c9:
fa:86:e3:57:35:ad:4c:10:f0:16:f2:89:1e:8f:0e:34:d6:93:
72:12:ba:49:4b:ba:2f:f6:5d:8e:56:79:89:7d:f4:c5:55:8c:
ee:6d:a8:9e:17:52:b7:b7:d0:88:4e:5f:c5:04:77:be:83:0e:
10:ab:8b:6b:1a:c6:08:58:f4:97:75:87:4e:b5:a6:9a:96:0a:
df:7b:68:90:9c:b9:a4:0a:fc:99:0a:37:80:dc:af:d6:39:f8:
c0:d9:0f:23:a4:a0:78:43:d2:c7:b0:61:e8:04:50:8e:78:51:
09:e8:ce:78:b8:35:33:cb:c3:8e:7e:44:10:36:da:2d:b3:2a:
d5:ca:5c:5a:cf:54:19:6b:fd:d2:ec:7d:a1:62:f0:e3:20:10:
e6:8e:65:35:99:9b:ae:b5:ab:10:fc:ad:2a:7d:eb:61:d4:a3:
22:63:f1:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 18 01:14:30 2025 by rpki-client