Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A914DA2D/72B5F292D27D11ECA73EF154C4F9AE02/83C2F8EE2F1F11F0AC29D057C4F9AE02.roa
File: 83C2F8EE2F1F11F0AC29D057C4F9AE02.roa (raw, json)
Hash identifier: 53/ko4R0Tl6w2M1mgFXgRnuR8hXl1eg+ARaBcHCekgQ=
Subject key identifier: FD:CE:F3:F5:44:B4:B5:2C:93:17:C8:7E:64:E7:6C:8C:B2:1D:BC:E4
Certificate issuer: /CN=A914DA2D/serialNumber=D7CB6D1DDCF934A1F59E4FFE4982F0B4C52C35F5
Certificate serial: 032F
Authority key identifier: D7:CB:6D:1D:DC:F9:34:A1:F5:9E:4F:FE:49:82:F0:B4:C5:2C:35:F5
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/18ttHdz5NKH1nk_-SYLwtMUsNfU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914DA2D/72B5F292D27D11ECA73EF154C4F9AE02/83C2F8EE2F1F11F0AC29D057C4F9AE02.roa
Signing time: Mon 12 May 2025 10:54:45 +0000
ROA not before: Mon 12 May 2025 10:54:45 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 17882
IP address blocks: 64.119.16.0/24 maxlen: 24
64.119.17.0/24 maxlen: 24
64.119.18.0/24 maxlen: 24
64.119.19.0/24 maxlen: 24
64.119.20.0/24 maxlen: 24
64.119.21.0/24 maxlen: 24
64.119.22.0/24 maxlen: 24
64.119.23.0/24 maxlen: 24
64.119.24.0/24 maxlen: 24
64.119.25.0/24 maxlen: 24
64.119.26.0/24 maxlen: 24
64.119.27.0/24 maxlen: 24
64.119.28.0/24 maxlen: 24
64.119.29.0/24 maxlen: 24
64.119.30.0/24 maxlen: 24
64.119.31.0/24 maxlen: 24
66.181.160.0/24 maxlen: 24
66.181.161.0/24 maxlen: 24
66.181.162.0/24 maxlen: 24
66.181.163.0/24 maxlen: 24
66.181.164.0/24 maxlen: 24
66.181.165.0/24 maxlen: 24
66.181.166.0/24 maxlen: 24
66.181.167.0/24 maxlen: 24
66.181.168.0/24 maxlen: 24
66.181.169.0/24 maxlen: 24
66.181.170.0/24 maxlen: 24
66.181.171.0/24 maxlen: 24
66.181.172.0/24 maxlen: 24
66.181.173.0/24 maxlen: 24
66.181.174.0/24 maxlen: 24
66.181.175.0/24 maxlen: 24
66.181.176.0/24 maxlen: 24
66.181.177.0/24 maxlen: 24
66.181.178.0/24 maxlen: 24
66.181.179.0/24 maxlen: 24
66.181.180.0/24 maxlen: 24
66.181.181.0/24 maxlen: 24
66.181.182.0/24 maxlen: 24
66.181.183.0/24 maxlen: 24
66.181.184.0/24 maxlen: 24
66.181.185.0/24 maxlen: 24
66.181.186.0/24 maxlen: 24
66.181.187.0/24 maxlen: 24
66.181.188.0/24 maxlen: 24
66.181.189.0/24 maxlen: 24
66.181.190.0/24 maxlen: 24
66.181.191.0/24 maxlen: 24
192.82.64.0/24 maxlen: 24
192.82.65.0/24 maxlen: 24
192.82.66.0/24 maxlen: 24
192.82.67.0/24 maxlen: 24
192.82.68.0/24 maxlen: 24
192.82.69.0/24 maxlen: 24
192.82.70.0/24 maxlen: 24
192.82.71.0/24 maxlen: 24
192.82.72.0/24 maxlen: 24
192.82.73.0/24 maxlen: 24
192.82.74.0/24 maxlen: 24
192.82.75.0/24 maxlen: 24
192.82.76.0/24 maxlen: 24
192.82.77.0/24 maxlen: 24
192.82.79.0/24 maxlen: 24
192.82.92.0/24 maxlen: 24
192.82.94.0/24 maxlen: 24
192.82.95.0/24 maxlen: 24
192.82.100.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A914DA2D/72B5F292D27D11ECA73EF154C4F9AE02/18ttHdz5NKH1nk_-SYLwtMUsNfU.crl
rsync://rpki.apnic.net/member_repository/A914DA2D/72B5F292D27D11ECA73EF154C4F9AE02/18ttHdz5NKH1nk_-SYLwtMUsNfU.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/18ttHdz5NKH1nk_-SYLwtMUsNfU.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 23 May 2025 16:35:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 815 (0x32f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914DA2D, serialNumber=D7CB6D1DDCF934A1F59E4FFE4982F0B4C52C35F5
Validity
Not Before: May 12 10:54:45 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6821d375-7379
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:70:11:c4:a7:22:4f:78:1d:01:72:a7:a4:1f:
0f:9c:fe:4e:59:4c:9a:25:01:60:9b:00:7c:2e:07:
1c:df:b1:eb:09:47:77:b4:60:45:3e:e9:86:0c:1e:
b5:f1:06:44:72:da:2e:c2:70:dc:dc:9b:28:c1:fb:
98:b5:f6:a5:55:c2:e0:c4:1b:88:5e:94:78:4e:72:
d8:50:00:c7:fb:8c:d0:f7:e5:8f:69:66:94:4e:64:
ab:8c:28:76:d7:ac:0c:a4:3f:4d:01:85:70:c2:27:
12:6b:cd:bf:0a:87:6d:e2:bb:d7:fb:b0:55:0f:d1:
cb:b4:d8:a6:1f:e7:46:dd:e3:f9:49:3b:29:44:7f:
65:b1:56:a2:7d:76:86:7a:10:ca:5b:4a:a1:ff:79:
ae:6c:b8:47:69:76:14:b0:d2:71:66:87:97:9f:6e:
db:58:a1:74:ee:cc:12:a5:21:9a:af:60:50:56:c9:
ff:8e:15:03:f9:2a:a5:17:18:1f:04:65:d6:27:61:
06:0b:c6:f9:54:a5:d8:7f:05:0b:aa:55:53:14:66:
cc:03:9c:a6:16:f7:fb:af:c0:c3:97:21:dc:88:c1:
50:17:11:9f:24:4f:db:47:a7:d9:6a:46:42:41:ff:
99:5e:ca:99:1d:23:46:71:2d:4e:a0:43:a5:e1:11:
b5:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:CE:F3:F5:44:B4:B5:2C:93:17:C8:7E:64:E7:6C:8C:B2:1D:BC:E4
X509v3 Authority Key Identifier:
keyid:D7:CB:6D:1D:DC:F9:34:A1:F5:9E:4F:FE:49:82:F0:B4:C5:2C:35:F5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914DA2D/72B5F292D27D11ECA73EF154C4F9AE02/18ttHdz5NKH1nk_-SYLwtMUsNfU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/18ttHdz5NKH1nk_-SYLwtMUsNfU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914DA2D/72B5F292D27D11ECA73EF154C4F9AE02/83C2F8EE2F1F11F0AC29D057C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
64.119.16.0/20
66.181.160.0/19
192.82.64.0-192.82.77.255
192.82.79.0/24
192.82.92.0/24
192.82.94.0/23
192.82.100.0/24
Signature Algorithm: sha256WithRSAEncryption
07:b1:61:7a:0a:66:78:4b:67:62:05:7f:11:31:aa:b9:5a:88:
20:cf:56:93:cc:64:1a:f3:f8:a1:0d:ea:9b:80:38:f3:b7:81:
52:b5:0e:59:97:30:a1:00:e5:73:b6:68:56:11:c4:2f:ec:26:
ce:32:27:b5:ca:b7:d0:f4:56:03:48:65:1b:2f:95:a0:b3:1e:
a5:4f:61:b9:5b:d2:f3:ac:44:02:3e:77:f3:ad:c4:15:9d:e1:
0b:47:15:a8:ff:96:c7:8f:ae:ea:bd:ae:07:6e:20:7d:c1:45:
bd:d0:33:c2:86:1e:28:01:2a:bb:fc:07:a0:70:dd:45:a3:3e:
e4:ac:7b:c3:54:ee:83:12:be:fe:08:b2:6a:8d:a8:12:2c:e5:
71:01:c2:5c:1a:05:49:e6:2e:d4:71:c1:13:63:0c:3f:33:07:
83:7a:ec:6d:bf:e0:c7:6b:15:4b:f0:b7:d3:e9:f9:69:85:bb:
ea:94:71:4e:d5:8a:71:b0:79:b1:a4:5b:9e:17:18:e1:0a:38:
a7:fd:08:65:73:57:79:45:9f:11:ad:4d:37:68:5c:95:52:b0:
c3:9e:c3:de:18:4a:ad:16:60:3b:04:c8:a1:a4:f1:48:c1:8c:
c4:c0:92:45:04:a8:c2:36:03:4f:77:4a:ab:e0:fd:4c:d2:29:
45:92:4c:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 17 02:28:03 2025 by rpki-client