Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A915D03A/1B647710924611E79AAEBE10C4F9AE02/12D80792792E11F0B9B60F74C4F9AE02.roa
File: 12D80792792E11F0B9B60F74C4F9AE02.roa (raw, json)
Hash identifier: JU1ZLnQX51v+5AW8aATgyNYwEMRuGDz2e2Gl9piZupo=
Subject key identifier: A2:2F:9A:71:D2:CD:BA:FC:E8:CE:AD:D1:6E:77:8E:7C:88:0B:63:E6
Certificate issuer: /CN=A915D03A/serialNumber=615ED84C44E657F7095E0212AFEA052C542A0D91
Certificate serial: 19D8
Authority key identifier: 61:5E:D8:4C:44:E6:57:F7:09:5E:02:12:AF:EA:05:2C:54:2A:0D:91
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YV7YTETmV_cJXgISr-oFLFQqDZE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915D03A/1B647710924611E79AAEBE10C4F9AE02/12D80792792E11F0B9B60F74C4F9AE02.roa
Signing time: Thu 14 Aug 2025 16:45:24 +0000
ROA not before: Thu 14 Aug 2025 16:45:24 +0000
ROA not after: Mon 02 Mar 2026 00:00:00 +0000
asID: 20940
IP address blocks: 43.254.120.0/22 maxlen: 22
59.151.128.0/18 maxlen: 18
60.254.128.0/18 maxlen: 18
60.254.143.0/24 maxlen: 24
60.254.148.0/24 maxlen: 24
60.254.173.0/24 maxlen: 24
103.238.148.0/22 maxlen: 22
118.214.0.0/16 maxlen: 16
118.214.1.0/24 maxlen: 24
118.214.167.0/24 maxlen: 24
118.214.171.0/24 maxlen: 24
118.214.178.0/24 maxlen: 24
118.214.181.0/24 maxlen: 24
118.214.185.0/24 maxlen: 24
118.214.186.0/24 maxlen: 24
118.214.187.0/24 maxlen: 24
118.214.188.0/23 maxlen: 23
118.214.190.0/24 maxlen: 24
118.215.0.0/17 maxlen: 17
118.215.128.0/18 maxlen: 18
122.252.32.0/19 maxlen: 19
122.252.128.0/20 maxlen: 20
125.56.128.0/17 maxlen: 17
125.56.184.0/24 maxlen: 24
125.56.185.0/24 maxlen: 24
125.56.186.0/24 maxlen: 24
125.56.201.0/24 maxlen: 24
125.56.205.0/24 maxlen: 24
125.56.218.0/24 maxlen: 24
125.56.219.0/24 maxlen: 24
125.56.222.0/24 maxlen: 24
125.252.192.0/18 maxlen: 18
125.252.224.0/24 maxlen: 24
2405:9600::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A915D03A/1B647710924611E79AAEBE10C4F9AE02/YV7YTETmV_cJXgISr-oFLFQqDZE.crl
rsync://rpki.apnic.net/member_repository/A915D03A/1B647710924611E79AAEBE10C4F9AE02/YV7YTETmV_cJXgISr-oFLFQqDZE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YV7YTETmV_cJXgISr-oFLFQqDZE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 29 Aug 2025 16:33:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6616 (0x19d8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915D03A, serialNumber=615ED84C44E657F7095E0212AFEA052C542A0D91
Validity
Not Before: Aug 14 16:45:24 2025 GMT
Not After : Mar 2 00:00:00 2026 GMT
Subject: CN=689e12a4-251e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:37:d8:e9:70:ac:a2:98:d6:53:df:25:95:e9:
1f:e1:50:5f:68:0e:18:c5:51:42:cf:85:e1:71:ac:
0a:8f:6d:2f:ec:e8:2d:9f:64:1f:b1:12:a3:90:92:
7f:dc:a1:7a:cb:a1:88:d4:05:f4:2c:00:55:db:ee:
85:66:a0:3e:a8:76:cf:0f:21:98:78:bc:c0:4d:0e:
56:9f:e2:65:41:22:41:bc:5d:22:c4:aa:56:7b:04:
7a:53:c2:a6:1a:8a:fe:b5:9f:88:17:b4:0b:ff:2e:
b1:c9:a0:d8:ef:d5:1c:35:52:bb:ac:a0:17:fa:63:
93:a1:2b:99:3d:72:57:d6:71:a1:f4:ed:2f:e9:f5:
cc:89:6e:22:a3:9c:2a:41:5a:e7:02:90:f7:df:ee:
f7:42:0a:b8:da:51:cf:b6:4d:b2:6b:58:2d:f3:6d:
f2:9a:b1:f5:aa:52:1f:d0:e4:f2:e8:82:44:68:68:
a6:d8:e0:93:65:54:5d:72:01:a9:70:30:64:fe:e1:
b8:5e:3f:10:3b:8a:53:1b:ac:04:49:10:58:f5:19:
6d:d2:a2:a7:fe:56:d4:ab:13:c7:33:47:02:46:c0:
cd:51:85:43:61:5e:0f:d8:3a:29:4f:ba:09:2c:53:
5d:c8:02:d4:da:59:ed:ab:e6:15:f6:90:94:61:4b:
2b:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:2F:9A:71:D2:CD:BA:FC:E8:CE:AD:D1:6E:77:8E:7C:88:0B:63:E6
X509v3 Authority Key Identifier:
keyid:61:5E:D8:4C:44:E6:57:F7:09:5E:02:12:AF:EA:05:2C:54:2A:0D:91
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915D03A/1B647710924611E79AAEBE10C4F9AE02/YV7YTETmV_cJXgISr-oFLFQqDZE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YV7YTETmV_cJXgISr-oFLFQqDZE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915D03A/1B647710924611E79AAEBE10C4F9AE02/12D80792792E11F0B9B60F74C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
43.254.120.0/22
59.151.128.0/18
60.254.128.0/18
103.238.148.0/22
118.214.0.0-118.215.191.255
122.252.32.0/19
122.252.128.0/20
125.56.128.0/17
125.252.192.0/18
IPv6:
2405:9600::/32
Signature Algorithm: sha256WithRSAEncryption
5d:50:c9:c8:1f:b4:31:cf:76:70:d3:2d:5b:31:60:0e:ea:bb:
56:c2:c0:fa:d1:67:c1:db:09:ef:ed:25:8b:b2:fa:dc:40:da:
e9:7c:ae:de:6a:14:ba:cc:cc:b2:dd:6f:bd:58:08:f5:46:ee:
e2:8e:52:6f:fd:22:ae:9d:e1:75:e5:2a:a4:74:66:e0:ed:05:
42:0b:42:69:24:df:43:90:3a:aa:b6:a8:c2:5b:9b:16:c8:f6:
59:ca:63:41:1d:4e:4f:70:de:a4:fe:15:6b:0f:3b:de:33:2e:
42:c4:3a:85:54:90:db:74:da:ce:c0:1a:4e:46:6f:46:34:33:
c4:f4:01:ee:f0:87:8a:92:2e:3c:b5:8c:ef:18:97:1a:6b:b9:
35:58:38:ce:21:31:d4:d0:be:6e:61:d2:d2:50:2c:e9:6f:57:
a5:d6:45:86:10:17:33:f9:e2:74:4b:b6:1e:fe:3d:d9:4c:1e:
45:2f:f6:2f:41:62:2d:cc:37:ee:51:39:d0:51:dd:70:45:30:
16:ba:70:98:e7:ff:24:12:09:74:8d:61:a1:7b:65:18:08:00:
4d:71:f3:dd:37:cd:06:74:59:1c:63:a4:99:7b:b9:41:55:2c:
72:60:41:e6:43:0b:45:7c:e9:9b:07:b5:fd:3a:6f:13:5f:20:
5c:2e:69:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 00:51:40 2025 by rpki-client