Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A915F89C/6907C3E21D8311E29B35A5D808B02CD2/C14F62D4142511F0B4847123C4F9AE02.roa
File: C14F62D4142511F0B4847123C4F9AE02.roa (raw, json)
Hash identifier: OYiTS6GY7fte7fuop/1hqp+n4s5FAN+Ee4hlThpL/Xs=
Subject key identifier: B0:C6:A6:9D:AB:BB:6F:07:5D:68:B0:B3:57:2E:C6:67:1E:81:FC:69
Certificate issuer: /CN=A915F89C/serialNumber=AF8F0CFB47FBFCC7C4933C473CDB36442B5051CE
Certificate serial: 37DF
Authority key identifier: AF:8F:0C:FB:47:FB:FC:C7:C4:93:3C:47:3C:DB:36:44:2B:50:51:CE
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r48M-0f7_MfEkzxHPNs2RCtQUc4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915F89C/6907C3E21D8311E29B35A5D808B02CD2/C14F62D4142511F0B4847123C4F9AE02.roa
Signing time: Wed 14 May 2025 09:47:12 +0000
ROA not before: Wed 14 May 2025 09:47:12 +0000
ROA not after: Fri 31 Oct 2025 00:00:00 +0000
asID: 3758
IP address blocks: 14.100.0.0/17 maxlen: 24
42.60.0.0/16 maxlen: 24
42.61.0.0/16 maxlen: 24
58.185.0.0/16 maxlen: 24
101.78.64.0/18 maxlen: 24
115.42.128.0/17 maxlen: 17
115.42.160.0/24 maxlen: 24
115.42.161.0/24 maxlen: 24
115.42.162.0/24 maxlen: 24
115.42.163.0/24 maxlen: 24
115.42.164.0/22 maxlen: 22
115.42.181.0/24 maxlen: 24
115.42.185.0/24 maxlen: 24
115.42.195.0/24 maxlen: 24
115.42.196.0/24 maxlen: 24
115.42.204.0/24 maxlen: 24
115.42.206.0/24 maxlen: 24
115.42.215.0/24 maxlen: 24
115.42.216.0/24 maxlen: 24
115.42.217.0/24 maxlen: 24
115.42.219.0/24 maxlen: 24
115.42.222.0/24 maxlen: 24
115.42.251.0/24 maxlen: 24
115.42.255.0/24 maxlen: 24
115.66.0.0/16 maxlen: 24
116.12.128.0/17 maxlen: 17
116.12.137.0/24 maxlen: 24
116.12.138.0/24 maxlen: 24
116.12.147.0/24 maxlen: 24
116.12.154.0/24 maxlen: 24
116.12.156.0/24 maxlen: 24
116.12.205.0/24 maxlen: 24
116.12.206.0/24 maxlen: 24
116.12.213.0/24 maxlen: 24
116.12.214.0/24 maxlen: 24
116.12.226.0/24 maxlen: 24
116.12.229.0/24 maxlen: 24
116.12.234.0/24 maxlen: 24
116.12.235.0/24 maxlen: 24
116.12.238.0/24 maxlen: 24
116.12.243.0/24 maxlen: 24
116.12.250.0/24 maxlen: 24
116.14.0.0/15 maxlen: 15
116.14.0.0/16 maxlen: 24
116.15.0.0/16 maxlen: 24
118.200.0.0/16 maxlen: 24
118.201.0.0/17 maxlen: 24
118.201.128.0/18 maxlen: 24
118.201.192.0/18 maxlen: 18
118.201.192.0/19 maxlen: 24
118.201.224.0/19 maxlen: 24
119.73.128.0/17 maxlen: 17
119.73.130.0/24 maxlen: 24
119.73.145.0/24 maxlen: 24
119.73.148.0/24 maxlen: 24
119.73.162.0/24 maxlen: 24
119.73.191.0/24 maxlen: 24
119.73.197.0/24 maxlen: 24
119.73.201.0/24 maxlen: 24
119.73.226.0/24 maxlen: 24
119.73.242.0/24 maxlen: 24
119.73.246.0/24 maxlen: 24
119.73.251.0/24 maxlen: 24
119.73.253.0/24 maxlen: 24
119.74.0.0/16 maxlen: 24
119.75.0.0/18 maxlen: 18
119.75.19.0/24 maxlen: 24
119.75.33.0/24 maxlen: 24
119.75.36.0/24 maxlen: 24
119.75.41.0/24 maxlen: 24
119.75.48.0/24 maxlen: 24
119.75.53.0/24 maxlen: 24
119.75.57.0/24 maxlen: 24
119.234.128.0/18 maxlen: 19
119.234.192.0/19 maxlen: 19
121.6.0.0/16 maxlen: 24
121.7.0.0/16 maxlen: 24
124.66.128.0/19 maxlen: 19
124.66.133.0/24 maxlen: 24
124.66.150.0/24 maxlen: 24
124.66.156.0/24 maxlen: 24
124.66.157.0/24 maxlen: 24
124.66.158.0/24 maxlen: 24
124.66.159.0/24 maxlen: 24
180.255.0.0/18 maxlen: 24
180.255.64.0/18 maxlen: 24
203.124.0.0/22 maxlen: 22
203.125.0.0/16 maxlen: 24
203.126.0.0/16 maxlen: 24
203.127.0.0/16 maxlen: 24
203.169.64.0/18 maxlen: 18
219.74.0.0/16 maxlen: 24
219.75.0.0/17 maxlen: 24
220.255.0.0/22 maxlen: 22
220.255.0.0/24 maxlen: 24
220.255.1.0/24 maxlen: 24
220.255.2.0/24 maxlen: 24
220.255.3.0/24 maxlen: 24
220.255.4.0/22 maxlen: 22
220.255.4.0/24 maxlen: 24
220.255.5.0/24 maxlen: 24
220.255.6.0/24 maxlen: 24
220.255.7.0/24 maxlen: 24
220.255.8.0/21 maxlen: 21
220.255.11.0/24 maxlen: 24
220.255.12.0/24 maxlen: 24
220.255.13.0/24 maxlen: 24
220.255.14.0/24 maxlen: 24
220.255.15.0/24 maxlen: 24
220.255.16.0/20 maxlen: 20
220.255.32.0/19 maxlen: 19
220.255.64.0/18 maxlen: 18
220.255.128.0/17 maxlen: 24
2001:c20::/32 maxlen: 32
2001:c20::/38 maxlen: 38
2001:c20:10::/48 maxlen: 48
2001:c20:18::/48 maxlen: 48
2001:c20:400::/38 maxlen: 38
2001:c20:401::/48 maxlen: 48
2001:c20:403::/48 maxlen: 48
2001:c20:801::/48 maxlen: 48
2001:c20:2006::/48 maxlen: 48
2001:c20:2007::/48 maxlen: 48
2001:c20:2010::/48 maxlen: 48
2001:c20:3001::/48 maxlen: 48
2001:c20:3c00::/38 maxlen: 38
2001:c20:4800::/38 maxlen: 38
2001:c20:4805::/48 maxlen: 48
2001:c20:48ba::/48 maxlen: 48
2001:c20:48da::/48 maxlen: 48
2001:c20:48fe::/48 maxlen: 48
2001:c20:4c00::/38 maxlen: 38
2001:c20:5000::/38 maxlen: 38
2001:c20:5008::/48 maxlen: 48
2001:c20:6c00::/38 maxlen: 38
2001:c20:7009::/48 maxlen: 48
2001:c20:7800::/38 maxlen: 38
2001:c20:7804::/48 maxlen: 48
2001:c20:7806::/48 maxlen: 48
2001:c20:7807::/48 maxlen: 48
2001:c20:8400::/38 maxlen: 38
2001:c20:8405::/48 maxlen: 48
2001:c20:8406::/48 maxlen: 48
2001:c20:8407::/48 maxlen: 48
2001:c20:8408::/48 maxlen: 48
2001:c20:8409::/48 maxlen: 48
2001:c20:a005::/48 maxlen: 48
2001:c20:b005::/48 maxlen: 48
2001:c20:c814::/48 maxlen: 48
2001:c20:d004::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A915F89C/6907C3E21D8311E29B35A5D808B02CD2/r48M-0f7_MfEkzxHPNs2RCtQUc4.crl
rsync://rpki.apnic.net/member_repository/A915F89C/6907C3E21D8311E29B35A5D808B02CD2/r48M-0f7_MfEkzxHPNs2RCtQUc4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r48M-0f7_MfEkzxHPNs2RCtQUc4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 21 May 2025 09:50:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 14303 (0x37df)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915F89C, serialNumber=AF8F0CFB47FBFCC7C4933C473CDB36442B5051CE
Validity
Not Before: May 14 09:47:12 2025 GMT
Not After : Oct 31 00:00:00 2025 GMT
Subject: CN=682466a0-6daa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:a8:cb:04:a1:72:58:3e:ca:db:15:f1:0b:d7:
9c:90:48:c3:8d:d6:e5:0e:6d:98:d3:2b:76:8b:7e:
98:4b:1d:1e:bd:e1:a4:c2:57:e2:86:1b:47:9c:00:
07:28:0b:7a:1a:be:a4:76:a1:c6:e7:f1:f1:c2:93:
27:5e:d7:a4:de:2b:da:e1:06:0c:a1:e7:f9:f8:fb:
ab:68:7b:2c:7c:a6:83:e9:5c:e7:e3:7f:96:83:9d:
55:e1:69:c8:d6:79:e2:c4:a3:dc:17:71:4c:80:d0:
c0:e3:1d:4f:9d:33:3f:9a:88:00:0a:01:d9:04:ea:
26:95:dd:fe:31:c2:1d:81:d4:43:3a:5f:f3:0c:bf:
08:01:f4:61:f6:d4:5a:56:8a:7b:8c:56:c5:57:3a:
ca:ba:43:23:8c:a9:0a:06:d1:68:7a:63:8a:58:75:
b3:5c:7d:4a:59:f2:83:63:50:69:d8:9e:f7:94:5a:
90:a0:ee:a8:26:ff:fc:1d:ca:be:75:2f:e1:78:db:
ed:ad:af:d7:cb:75:3d:23:f8:0c:f9:2d:c2:ad:5e:
e7:6e:dd:39:a2:5b:ec:ed:98:9b:b8:58:1e:3c:0f:
c1:83:8d:0a:8e:1d:9f:c4:1f:ed:69:b9:09:64:a8:
f0:e8:f6:58:17:86:29:97:8c:56:bd:ac:8a:b6:a0:
58:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:C6:A6:9D:AB:BB:6F:07:5D:68:B0:B3:57:2E:C6:67:1E:81:FC:69
X509v3 Authority Key Identifier:
keyid:AF:8F:0C:FB:47:FB:FC:C7:C4:93:3C:47:3C:DB:36:44:2B:50:51:CE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915F89C/6907C3E21D8311E29B35A5D808B02CD2/r48M-0f7_MfEkzxHPNs2RCtQUc4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r48M-0f7_MfEkzxHPNs2RCtQUc4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915F89C/6907C3E21D8311E29B35A5D808B02CD2/C14F62D4142511F0B4847123C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
14.100.0.0/17
42.60.0.0/15
58.185.0.0/16
101.78.64.0/18
115.42.128.0/17
115.66.0.0/16
116.12.128.0/17
116.14.0.0/15
118.200.0.0/15
119.73.128.0-119.75.63.255
119.234.128.0-119.234.223.255
121.6.0.0/15
124.66.128.0/19
180.255.0.0/17
203.124.0.0/22
203.125.0.0-203.127.255.255
203.169.64.0/18
219.74.0.0-219.75.127.255
220.255.0.0/16
IPv6:
2001:c20::/32
Signature Algorithm: sha256WithRSAEncryption
51:0e:c9:84:62:91:b8:c8:9f:7c:20:d1:0f:4f:f0:55:2a:6e:
ee:35:b0:ec:80:35:10:ca:88:03:01:f3:4e:a9:c6:4a:3d:e3:
d8:76:ad:06:42:a6:da:b7:3b:d5:2c:0b:54:12:67:0b:5b:7e:
9e:50:41:ff:d2:76:c1:d0:8f:90:0c:39:6e:6f:03:01:b9:78:
ad:a4:e8:df:29:1d:3a:c9:66:11:5d:4f:1b:dc:03:1b:60:66:
51:90:19:86:87:67:f8:a7:83:6c:12:fc:56:b6:a7:e5:b2:92:
2b:0f:d5:14:96:4d:79:70:c5:05:ca:5f:81:84:f9:08:72:ff:
a4:5f:a4:aa:96:b4:ad:d6:38:e2:95:de:9e:7e:8a:b5:b3:50:
54:e9:0c:af:a2:82:ef:a8:39:34:f5:f9:9d:dd:74:4a:3c:f5:
4d:62:c4:25:56:f2:94:de:4e:dc:c1:2c:c7:78:7c:71:2f:96:
33:3e:59:df:1e:06:d1:87:d5:6f:c7:85:27:85:e6:a6:b4:d7:
fd:f0:d9:39:e1:30:71:f5:5b:50:f5:c3:71:f3:29:8f:af:29:
a1:58:c7:c7:e7:6e:ae:f6:1b:e4:e4:57:90:25:c1:43:7d:1d:
d4:6b:94:79:3e:4d:bf:49:df:e8:c5:12:65:30:0d:c0:fb:cf:
75:23:ce:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 14 15:17:35 2025 by rpki-client