Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9149F3E/9A85BB501D8211E2BC6417D708B02CD2/30941278EF2011EF9264077FC4F9AE02.roa
File: 30941278EF2011EF9264077FC4F9AE02.roa (raw, json)
Hash identifier: dfbgOKL2skBJFvI1csPtQ7F5lFQy+N9pqsOyvY+l0KM=
Subject key identifier: DB:66:11:A9:01:0D:48:F9:73:67:F7:6B:BE:45:96:0B:D2:97:63:E8
Certificate issuer: /CN=A9149F3E/serialNumber=BF0E6F4EE0E17DDE8C4A24BF897D19B87AA5759F
Certificate serial: 34F2
Authority key identifier: BF:0E:6F:4E:E0:E1:7D:DE:8C:4A:24:BF:89:7D:19:B8:7A:A5:75:9F
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vw5vTuDhfd6MSiS_iX0ZuHqldZ8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9149F3E/9A85BB501D8211E2BC6417D708B02CD2/30941278EF2011EF9264077FC4F9AE02.roa
Signing time: Fri 20 Jun 2025 00:15:37 +0000
ROA not before: Fri 20 Jun 2025 00:15:37 +0000
ROA not after: Sun 31 Aug 2025 00:00:00 +0000
asID: 17579
IP address blocks: 134.75.15.0/24 maxlen: 24
134.75.16.0/24 maxlen: 24
134.75.101.0/24 maxlen: 24
134.75.102.0/24 maxlen: 24
134.75.103.0/24 maxlen: 24
134.75.105.0/24 maxlen: 24
134.75.107.0/24 maxlen: 24
134.75.108.0/24 maxlen: 24
134.75.123.0/24 maxlen: 24
134.75.124.0/24 maxlen: 24
134.75.125.0/24 maxlen: 24
134.75.126.0/24 maxlen: 24
134.75.127.0/24 maxlen: 24
134.75.128.0/24 maxlen: 24
134.75.129.0/24 maxlen: 24
134.75.130.0/24 maxlen: 24
134.75.131.0/24 maxlen: 24
134.75.132.0/24 maxlen: 24
134.75.200.0/24 maxlen: 24
134.75.207.0/24 maxlen: 24
134.75.252.0/24 maxlen: 24
134.75.253.0/24 maxlen: 24
134.75.254.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9149F3E/9A85BB501D8211E2BC6417D708B02CD2/vw5vTuDhfd6MSiS_iX0ZuHqldZ8.crl
rsync://rpki.apnic.net/member_repository/A9149F3E/9A85BB501D8211E2BC6417D708B02CD2/vw5vTuDhfd6MSiS_iX0ZuHqldZ8.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vw5vTuDhfd6MSiS_iX0ZuHqldZ8.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 09 Jul 2025 14:22:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13554 (0x34f2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9149F3E, serialNumber=BF0E6F4EE0E17DDE8C4A24BF897D19B87AA5759F
Validity
Not Before: Jun 20 00:15:37 2025 GMT
Not After : Aug 31 00:00:00 2025 GMT
Subject: CN=6854a828-1caf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:b4:17:4a:a5:7e:b4:f1:a1:34:1f:f6:da:14:
d1:cd:09:96:e3:ba:91:15:77:ca:ce:22:56:86:34:
cc:50:35:3c:90:af:72:90:1e:4e:62:73:62:11:aa:
d9:e9:e3:84:85:f7:aa:69:c3:33:66:a9:f8:1d:5b:
6c:40:7d:0f:50:d1:0e:62:11:a7:0b:97:35:61:97:
93:79:c1:41:dd:ea:de:f8:aa:aa:f8:b2:88:6f:90:
cb:83:13:33:42:c1:bf:52:5e:41:54:8b:f2:09:72:
12:53:69:3c:60:69:3a:43:f9:82:f4:82:e8:65:97:
6e:8e:be:3f:73:29:c1:39:61:a7:60:7d:5a:8a:80:
d5:30:b2:cf:8b:f8:a7:01:41:de:47:d8:ea:cf:e3:
d3:4e:87:21:bc:41:a0:47:85:42:bf:cc:85:d6:f7:
f9:90:35:88:21:eb:4c:af:83:6e:02:70:cc:99:30:
b8:b8:68:8f:e9:e9:e5:6b:cb:86:83:0c:23:1e:8e:
61:f6:6b:99:ea:51:c2:ad:98:92:3b:55:57:b9:43:
14:aa:24:b0:0d:26:25:d8:f6:d9:fe:2a:8e:e8:05:
ba:c0:03:ae:e9:d7:26:68:df:e0:47:5b:62:64:58:
c9:66:63:7f:2d:4a:9f:4a:b7:dc:bf:e6:4f:68:cc:
11:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:66:11:A9:01:0D:48:F9:73:67:F7:6B:BE:45:96:0B:D2:97:63:E8
X509v3 Authority Key Identifier:
keyid:BF:0E:6F:4E:E0:E1:7D:DE:8C:4A:24:BF:89:7D:19:B8:7A:A5:75:9F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9149F3E/9A85BB501D8211E2BC6417D708B02CD2/vw5vTuDhfd6MSiS_iX0ZuHqldZ8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vw5vTuDhfd6MSiS_iX0ZuHqldZ8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9149F3E/9A85BB501D8211E2BC6417D708B02CD2/30941278EF2011EF9264077FC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
134.75.15.0-134.75.16.255
134.75.101.0-134.75.103.255
134.75.105.0/24
134.75.107.0-134.75.108.255
134.75.123.0-134.75.132.255
134.75.200.0/24
134.75.207.0/24
134.75.252.0-134.75.254.255
Signature Algorithm: sha256WithRSAEncryption
d8:70:f5:83:de:53:d9:63:16:25:62:58:9f:7c:1b:b8:86:ea:
28:c2:82:4e:d7:05:ec:e3:ba:e4:10:d2:b3:b2:d8:4c:8a:ac:
7c:66:3c:7a:9c:eb:7b:9a:6e:43:99:f2:d3:c6:83:d1:b2:c5:
55:90:8e:71:13:df:80:0e:59:70:00:88:45:73:88:ab:e3:a4:
5e:cf:0b:b2:0d:f5:b8:45:f0:1b:53:08:22:ca:3f:04:33:1d:
96:48:10:dc:2b:b6:ff:e4:57:82:15:7c:6c:ae:6e:1c:d5:44:
99:11:e6:f6:f9:ca:ec:5a:bc:aa:ff:bf:53:9b:f2:47:31:2f:
41:b2:a9:b8:a7:e7:7d:21:04:d9:8d:ac:b1:30:c0:02:b1:bb:
33:a1:f8:2b:56:32:c0:a9:cb:d6:77:d4:d7:e8:f7:67:02:37:
3e:2d:e7:61:01:4f:16:50:25:48:76:f5:5d:c6:99:a4:6a:a6:
8c:ba:b8:97:9c:dc:42:ec:22:31:bb:d9:88:63:20:32:e0:5f:
cb:5e:d7:12:e3:9c:4b:78:0e:b0:3b:ad:5b:1f:85:21:a2:97:
ce:de:1e:9c:1f:65:16:64:fe:08:90:b2:01:75:c9:52:a4:13:
c1:cb:56:1a:8f:1a:3e:fe:b3:67:87:81:3d:e5:79:4b:0f:e0:
d5:58:bd:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 3 16:59:10 2025 by rpki-client