Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A914EAE4/6753B8AE257511E7AC0D172AC4F9AE02/E32743EEBCE711EFA920D83FC4F9AE02.roa
File: E32743EEBCE711EFA920D83FC4F9AE02.roa (raw, json)
Hash identifier: jxMNmYBP03rkD6bZXrJ8piBVHVas6oKDOsJZDXVoUnk=
Subject key identifier: 29:48:7B:17:7C:9B:4F:E7:E8:1E:3B:BD:3B:B3:19:8A:53:D9:C6:C9
Certificate issuer: /CN=A914EAE4/serialNumber=AD56B67187A98BA314084405797BD9656E8AC8BA
Certificate serial: 1F48
Authority key identifier: AD:56:B6:71:87:A9:8B:A3:14:08:44:05:79:7B:D9:65:6E:8A:C8:BA
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rVa2cYepi6MUCEQFeXvZZW6KyLo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914EAE4/6753B8AE257511E7AC0D172AC4F9AE02/E32743EEBCE711EFA920D83FC4F9AE02.roa
Signing time: Mon 18 Aug 2025 03:43:12 +0000
ROA not before: Mon 18 Aug 2025 03:43:12 +0000
ROA not after: Mon 01 Dec 2025 00:00:00 +0000
asID: 23764
IP address blocks: 121.59.0.0/24 maxlen: 24
121.59.2.0/24 maxlen: 24
121.59.4.0/24 maxlen: 24
121.59.8.0/24 maxlen: 24
121.59.9.0/24 maxlen: 24
121.59.29.0/24 maxlen: 24
121.59.30.0/24 maxlen: 24
121.59.31.0/24 maxlen: 24
121.59.32.0/22 maxlen: 24
121.59.37.0/24 maxlen: 24
121.59.38.0/24 maxlen: 24
121.59.100.0/24 maxlen: 24
121.59.101.0/24 maxlen: 24
121.59.102.0/24 maxlen: 24
121.59.103.0/24 maxlen: 24
121.59.104.0/24 maxlen: 24
121.59.106.0/24 maxlen: 24
121.59.107.0/24 maxlen: 24
121.59.109.0/24 maxlen: 24
121.59.110.0/24 maxlen: 24
121.59.120.0/24 maxlen: 24
121.59.121.0/24 maxlen: 24
121.59.122.0/24 maxlen: 24
121.59.123.0/24 maxlen: 24
121.59.124.0/23 maxlen: 24
121.59.128.0/24 maxlen: 24
121.59.140.0/24 maxlen: 24
121.59.141.0/24 maxlen: 24
121.59.142.0/24 maxlen: 24
121.59.143.0/24 maxlen: 24
121.59.144.0/24 maxlen: 24
121.59.146.0/24 maxlen: 24
121.59.147.0/24 maxlen: 24
121.59.151.0/24 maxlen: 24
121.59.152.0/24 maxlen: 24
121.59.153.0/24 maxlen: 24
121.59.154.0/24 maxlen: 24
203.12.200.0/24 maxlen: 24
203.12.201.0/24 maxlen: 24
203.12.202.0/24 maxlen: 24
203.12.203.0/24 maxlen: 24
203.14.184.0/22 maxlen: 22
203.14.188.0/24 maxlen: 24
203.14.189.0/24 maxlen: 24
203.14.190.0/24 maxlen: 24
203.14.191.0/24 maxlen: 24
203.15.113.0/24 maxlen: 24
203.15.114.0/24 maxlen: 24
203.15.115.0/24 maxlen: 24
203.15.116.0/24 maxlen: 24
203.15.117.0/24 maxlen: 24
203.15.118.0/24 maxlen: 24
203.19.32.0/22 maxlen: 22
203.19.32.0/24 maxlen: 24
203.19.37.0/24 maxlen: 24
203.19.38.0/24 maxlen: 24
203.20.136.0/24 maxlen: 24
203.20.137.0/24 maxlen: 24
203.20.138.0/24 maxlen: 24
203.20.139.0/24 maxlen: 24
203.20.140.0/24 maxlen: 24
203.20.141.0/24 maxlen: 24
203.20.142.0/24 maxlen: 24
203.22.178.0/24 maxlen: 24
203.22.179.0/24 maxlen: 24
203.22.180.0/24 maxlen: 24
203.22.181.0/24 maxlen: 24
203.22.182.0/24 maxlen: 24
203.25.50.0/24 maxlen: 24
203.25.51.0/24 maxlen: 24
203.25.53.0/24 maxlen: 24
203.25.54.0/24 maxlen: 24
203.25.55.0/24 maxlen: 24
203.33.8.0/22 maxlen: 22
203.33.8.0/24 maxlen: 24
203.33.9.0/24 maxlen: 24
203.33.10.0/24 maxlen: 24
203.34.192.0/24 maxlen: 24
203.34.193.0/24 maxlen: 24
203.34.194.0/24 maxlen: 24
203.34.195.0/24 maxlen: 24
203.34.196.0/24 maxlen: 24
203.34.197.0/24 maxlen: 24
203.34.198.0/24 maxlen: 24
203.34.199.0/24 maxlen: 24
203.56.48.0/23 maxlen: 23
203.56.53.0/24 maxlen: 24
203.56.54.0/24 maxlen: 24
203.56.55.0/24 maxlen: 24
203.80.136.0/23 maxlen: 24
203.80.138.0/23 maxlen: 24
203.80.141.0/24 maxlen: 24
203.81.0.0/24 maxlen: 24
203.81.3.0/24 maxlen: 24
203.81.4.0/24 maxlen: 24
203.81.6.0/23 maxlen: 24
203.82.17.0/24 maxlen: 24
203.82.18.0/24 maxlen: 24
203.82.19.0/24 maxlen: 24
203.82.23.0/24 maxlen: 24
203.86.101.0/24 maxlen: 24
203.86.102.0/24 maxlen: 24
203.86.103.0/24 maxlen: 24
203.86.104.0/24 maxlen: 24
203.86.105.0/24 maxlen: 24
203.86.106.0/24 maxlen: 24
203.86.107.0/24 maxlen: 24
203.86.108.0/24 maxlen: 24
203.86.109.0/24 maxlen: 24
203.86.110.0/24 maxlen: 24
203.86.111.0/24 maxlen: 24
203.86.113.0/24 maxlen: 24
203.86.114.0/24 maxlen: 24
203.86.115.0/24 maxlen: 24
203.86.116.0/24 maxlen: 24
203.86.117.0/24 maxlen: 24
203.86.118.0/24 maxlen: 24
203.86.119.0/24 maxlen: 24
203.86.120.0/24 maxlen: 24
203.86.121.0/24 maxlen: 24
203.86.122.0/24 maxlen: 24
203.86.123.0/24 maxlen: 24
203.86.124.0/24 maxlen: 24
203.86.125.0/24 maxlen: 24
203.86.126.0/24 maxlen: 24
203.86.127.0/24 maxlen: 24
203.89.10.0/24 maxlen: 24
203.99.8.0/24 maxlen: 24
203.99.9.0/24 maxlen: 24
203.99.10.0/24 maxlen: 24
203.99.11.0/24 maxlen: 24
203.99.12.0/24 maxlen: 24
203.99.13.0/24 maxlen: 24
203.99.14.0/24 maxlen: 24
203.99.15.0/24 maxlen: 24
203.100.52.0/24 maxlen: 24
203.119.120.0/24 maxlen: 24
203.119.124.0/24 maxlen: 24
203.128.224.0/24 maxlen: 24
203.128.229.0/24 maxlen: 24
203.128.230.0/24 maxlen: 24
203.129.9.0/24 maxlen: 24
203.144.97.0/24 maxlen: 24
203.144.98.0/24 maxlen: 24
203.144.99.0/24 maxlen: 24
203.144.100.0/24 maxlen: 24
203.144.101.0/24 maxlen: 24
203.144.102.0/24 maxlen: 24
203.144.103.0/24 maxlen: 24
203.144.104.0/24 maxlen: 24
203.144.105.0/24 maxlen: 24
203.144.106.0/24 maxlen: 24
203.195.115.0/24 maxlen: 24
203.196.8.0/24 maxlen: 24
203.196.9.0/24 maxlen: 24
203.196.10.0/24 maxlen: 24
203.196.11.0/24 maxlen: 24
203.196.12.0/24 maxlen: 24
203.196.13.0/24 maxlen: 24
203.196.14.0/24 maxlen: 24
203.196.15.0/24 maxlen: 24
210.48.136.0/24 maxlen: 24
210.48.143.0/24 maxlen: 24
218.30.32.0/24 maxlen: 24
218.30.35.0/24 maxlen: 24
218.30.41.0/24 maxlen: 24
218.30.43.0/24 maxlen: 24
218.30.44.0/24 maxlen: 24
218.30.62.0/23 maxlen: 23
218.30.63.0/24 maxlen: 24
218.185.241.0/24 maxlen: 24
218.185.243.0/24 maxlen: 24
218.185.245.0/24 maxlen: 24
220.247.136.0/24 maxlen: 24
220.247.137.0/24 maxlen: 24
220.247.138.0/24 maxlen: 24
220.247.139.0/24 maxlen: 24
220.247.140.0/24 maxlen: 24
220.247.141.0/24 maxlen: 24
220.247.142.0/24 maxlen: 24
220.247.143.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A914EAE4/6753B8AE257511E7AC0D172AC4F9AE02/rVa2cYepi6MUCEQFeXvZZW6KyLo.crl
rsync://rpki.apnic.net/member_repository/A914EAE4/6753B8AE257511E7AC0D172AC4F9AE02/rVa2cYepi6MUCEQFeXvZZW6KyLo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rVa2cYepi6MUCEQFeXvZZW6KyLo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 29 Aug 2025 16:23:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8008 (0x1f48)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914EAE4, serialNumber=AD56B67187A98BA314084405797BD9656E8AC8BA
Validity
Not Before: Aug 18 03:43:12 2025 GMT
Not After : Dec 1 00:00:00 2025 GMT
Subject: CN=68a2a150-1f09
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:08:8a:3b:d5:2a:e2:96:35:ef:4c:be:01:1a:
fb:75:35:21:b1:5e:b8:3d:59:bd:0f:8d:15:93:25:
7c:c9:c7:56:38:c2:3a:77:b8:e2:49:42:01:e7:9f:
9f:4f:f2:71:2e:50:3f:8c:2d:72:40:83:89:75:b8:
4b:8c:e5:13:95:2b:21:8e:75:c8:79:96:be:0a:f0:
8f:f2:b2:1e:13:7d:b3:d6:8d:f1:5d:82:8d:ec:8a:
3f:18:b3:d6:61:dc:42:84:85:82:b9:11:25:50:3a:
90:96:68:60:18:ad:26:b4:89:74:f7:d4:f0:a5:57:
a7:4c:7d:e3:8b:53:a8:56:8c:4c:cb:50:6a:7a:a9:
0d:f3:4c:ec:67:20:7c:41:7e:27:77:50:5a:b6:03:
de:21:01:02:3f:0a:cb:d1:ac:a6:00:96:63:e5:74:
9f:be:a7:54:5a:d3:aa:3c:7e:a5:7a:4c:cd:f7:ff:
9b:25:b9:d0:3d:d1:9e:83:54:7f:b2:d4:f0:90:23:
fe:6c:d7:7a:40:86:2d:a7:16:cf:f2:ed:c6:06:e4:
d1:62:77:3e:9e:0b:d6:68:c3:19:23:f9:24:1e:e4:
39:f4:b9:3f:d1:f0:55:28:42:34:40:2d:8e:09:bb:
2a:2b:5c:09:bf:10:c8:02:d1:74:d3:b5:a7:d8:87:
87:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:48:7B:17:7C:9B:4F:E7:E8:1E:3B:BD:3B:B3:19:8A:53:D9:C6:C9
X509v3 Authority Key Identifier:
keyid:AD:56:B6:71:87:A9:8B:A3:14:08:44:05:79:7B:D9:65:6E:8A:C8:BA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914EAE4/6753B8AE257511E7AC0D172AC4F9AE02/rVa2cYepi6MUCEQFeXvZZW6KyLo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rVa2cYepi6MUCEQFeXvZZW6KyLo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914EAE4/6753B8AE257511E7AC0D172AC4F9AE02/E32743EEBCE711EFA920D83FC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
121.59.0.0/24
121.59.2.0/24
121.59.4.0/24
121.59.8.0/23
121.59.29.0-121.59.35.255
121.59.37.0-121.59.38.255
121.59.100.0-121.59.104.255
121.59.106.0/23
121.59.109.0-121.59.110.255
121.59.120.0-121.59.125.255
121.59.128.0/24
121.59.140.0-121.59.144.255
121.59.146.0/23
121.59.151.0-121.59.154.255
203.12.200.0/22
203.14.184.0/21
203.15.113.0-203.15.118.255
203.19.32.0/22
203.19.37.0-203.19.38.255
203.20.136.0-203.20.142.255
203.22.178.0-203.22.182.255
203.25.50.0/23
203.25.53.0-203.25.55.255
203.33.8.0/22
203.34.192.0/21
203.56.48.0/23
203.56.53.0-203.56.55.255
203.80.136.0/22
203.80.141.0/24
203.81.0.0/24
203.81.3.0-203.81.4.255
203.81.6.0/23
203.82.17.0-203.82.19.255
203.82.23.0/24
203.86.101.0-203.86.111.255
203.86.113.0-203.86.127.255
203.89.10.0/24
203.99.8.0/21
203.100.52.0/24
203.119.120.0/24
203.119.124.0/24
203.128.224.0/24
203.128.229.0-203.128.230.255
203.129.9.0/24
203.144.97.0-203.144.106.255
203.195.115.0/24
203.196.8.0/21
210.48.136.0/24
210.48.143.0/24
218.30.32.0/24
218.30.35.0/24
218.30.41.0/24
218.30.43.0-218.30.44.255
218.30.62.0/23
218.185.241.0/24
218.185.243.0/24
218.185.245.0/24
220.247.136.0/21
Signature Algorithm: sha256WithRSAEncryption
b7:e0:12:db:0b:74:f0:c5:c1:a4:a9:a2:98:2c:d6:05:b9:2d:
c2:9e:3b:fb:74:d4:e9:9b:cf:65:00:d6:27:fa:b8:35:60:b1:
79:a2:9e:2c:a5:fc:4b:92:47:dd:bc:5d:6a:71:88:dd:e3:c9:
c1:a5:61:51:9d:67:e7:f5:9a:a2:8b:ab:83:71:40:3e:c2:bb:
44:f5:bf:52:b3:a4:4f:4f:30:b2:8e:d2:64:1f:ae:b6:c4:bf:
28:84:eb:46:c3:e4:98:8c:5c:4b:fd:cd:8b:16:88:da:d2:17:
88:43:ea:73:3f:15:fe:21:ad:db:2d:2b:b7:d4:dd:1b:76:96:
61:7b:8f:3c:f0:62:96:21:64:6c:de:a4:52:8c:cd:f1:f9:5c:
bc:bb:b8:88:da:74:83:a3:30:c2:bc:d1:6d:e6:9d:6b:62:bc:
79:35:78:a8:03:9c:79:09:8a:f0:b6:4f:0f:2c:63:d7:42:28:
55:2b:be:d3:d7:75:80:c3:37:1a:6f:5b:df:51:5b:75:e0:d4:
cc:ec:2e:09:91:ad:3c:84:94:39:43:cc:61:f5:f1:33:67:32:
09:71:cb:8d:7f:44:04:cd:88:e0:2e:36:23:b2:ce:7f:2d:b3:
f1:17:e7:65:99:4b:5e:48:cc:d5:e6:f0:cd:b4:00:c3:d1:4f:
4a:0f:c6:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 19:39:42 2025 by rpki-client