Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A918404E/BC030C76F1DA11EAAFC6C70AC4F9AE02/8C2F4DBA8D3111EFA61E9282C4F9AE02.roa
File: 8C2F4DBA8D3111EFA61E9282C4F9AE02.roa (raw, json)
Hash identifier: wNb7wt9LoL43jcA+mUQT30ztE8Bu/gprmUrfQ7394SE=
Subject key identifier: 84:DD:DC:A9:A3:B5:8D:90:61:56:C4:DB:72:99:5B:1E:C8:A2:75:27
Certificate issuer: /CN=A918404E/serialNumber=9C7C776F6BF6003283F0CAB43E2DC61494997162
Certificate serial: 0947
Authority key identifier: 9C:7C:77:6F:6B:F6:00:32:83:F0:CA:B4:3E:2D:C6:14:94:99:71:62
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nHx3b2v2ADKD8Mq0Pi3GFJSZcWI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918404E/BC030C76F1DA11EAAFC6C70AC4F9AE02/8C2F4DBA8D3111EFA61E9282C4F9AE02.roa
Signing time: Fri 22 Aug 2025 21:31:26 +0000
ROA not before: Fri 22 Aug 2025 21:31:26 +0000
ROA not after: Sat 31 Oct 2026 00:00:00 +0000
asID: 132115
IP address blocks: 45.117.200.0/24 maxlen: 24
45.117.201.0/24 maxlen: 24
45.117.202.0/24 maxlen: 24
45.117.203.0/24 maxlen: 24
45.117.204.0/24 maxlen: 24
45.117.205.0/24 maxlen: 24
45.117.206.0/24 maxlen: 24
45.117.207.0/24 maxlen: 24
45.126.160.0/24 maxlen: 24
45.126.161.0/24 maxlen: 24
45.126.162.0/24 maxlen: 24
45.126.163.0/24 maxlen: 24
103.24.188.0/24 maxlen: 24
103.24.189.0/24 maxlen: 24
103.24.190.0/24 maxlen: 24
103.24.191.0/24 maxlen: 24
103.57.236.0/24 maxlen: 24
103.57.237.0/24 maxlen: 24
103.57.238.0/24 maxlen: 24
103.57.239.0/24 maxlen: 24
103.57.240.0/24 maxlen: 24
103.57.241.0/24 maxlen: 24
103.57.242.0/24 maxlen: 24
103.57.243.0/24 maxlen: 24
103.57.244.0/24 maxlen: 24
103.57.245.0/24 maxlen: 24
103.57.246.0/24 maxlen: 24
103.57.247.0/24 maxlen: 24
103.70.208.0/24 maxlen: 24
103.70.209.0/24 maxlen: 24
103.70.210.0/24 maxlen: 24
103.70.211.0/24 maxlen: 24
103.75.192.0/24 maxlen: 24
103.75.193.0/24 maxlen: 24
103.75.194.0/24 maxlen: 24
103.75.195.0/24 maxlen: 24
103.225.176.0/24 maxlen: 24
103.225.177.0/24 maxlen: 24
103.225.178.0/24 maxlen: 24
103.225.179.0/24 maxlen: 24
103.244.4.0/24 maxlen: 24
103.244.5.0/24 maxlen: 24
103.244.6.0/24 maxlen: 24
103.244.7.0/24 maxlen: 24
150.107.10.0/24 maxlen: 24
150.107.11.0/24 maxlen: 24
150.129.124.0/24 maxlen: 24
150.129.125.0/24 maxlen: 24
150.129.126.0/24 maxlen: 24
150.129.127.0/24 maxlen: 24
202.142.64.0/24 maxlen: 24
202.142.65.0/24 maxlen: 24
202.142.66.0/24 maxlen: 24
202.142.67.0/24 maxlen: 24
202.142.68.0/24 maxlen: 24
202.142.69.0/24 maxlen: 24
202.142.70.0/24 maxlen: 24
202.142.71.0/24 maxlen: 24
202.142.72.0/24 maxlen: 24
202.142.73.0/24 maxlen: 24
202.142.74.0/24 maxlen: 24
202.142.75.0/24 maxlen: 24
202.142.76.0/24 maxlen: 24
202.142.77.0/24 maxlen: 24
202.142.78.0/24 maxlen: 24
202.142.79.0/24 maxlen: 24
202.142.81.0/24 maxlen: 24
202.142.83.0/24 maxlen: 24
202.142.85.0/24 maxlen: 24
202.142.86.0/24 maxlen: 24
202.142.87.0/24 maxlen: 24
202.142.89.0/24 maxlen: 24
202.142.90.0/24 maxlen: 24
202.142.91.0/24 maxlen: 24
202.142.92.0/24 maxlen: 24
202.142.93.0/24 maxlen: 24
202.142.95.0/24 maxlen: 24
202.142.96.0/24 maxlen: 24
202.142.97.0/24 maxlen: 24
202.142.98.0/24 maxlen: 24
202.142.99.0/24 maxlen: 24
202.142.100.0/24 maxlen: 24
202.142.101.0/24 maxlen: 24
202.142.102.0/24 maxlen: 24
202.142.103.0/24 maxlen: 24
202.142.104.0/24 maxlen: 24
202.142.105.0/24 maxlen: 24
202.142.106.0/24 maxlen: 24
202.142.107.0/24 maxlen: 24
202.142.110.0/24 maxlen: 24
202.142.112.0/24 maxlen: 24
202.142.113.0/24 maxlen: 24
202.142.114.0/24 maxlen: 24
202.142.115.0/24 maxlen: 24
202.142.118.0/24 maxlen: 24
202.142.119.0/24 maxlen: 24
202.142.120.0/24 maxlen: 24
202.142.123.0/24 maxlen: 24
202.142.124.0/24 maxlen: 24
202.142.125.0/24 maxlen: 24
202.142.126.0/24 maxlen: 24
202.142.127.0/24 maxlen: 24
2406:3c80::/48 maxlen: 48
2406:3c80:1::/48 maxlen: 48
2406:3c80:2::/48 maxlen: 48
2406:3c80:3::/48 maxlen: 48
2406:3c80:4::/48 maxlen: 48
2406:3c80:5::/48 maxlen: 48
2406:3c80:6::/48 maxlen: 48
2406:3c80:7::/48 maxlen: 48
2406:3c80:8::/48 maxlen: 48
2406:3c80:400::/48 maxlen: 48
2406:3c80:401::/48 maxlen: 48
2406:3c80:402::/48 maxlen: 48
2406:3c80:403::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918404E/BC030C76F1DA11EAAFC6C70AC4F9AE02/nHx3b2v2ADKD8Mq0Pi3GFJSZcWI.crl
rsync://rpki.apnic.net/member_repository/A918404E/BC030C76F1DA11EAAFC6C70AC4F9AE02/nHx3b2v2ADKD8Mq0Pi3GFJSZcWI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nHx3b2v2ADKD8Mq0Pi3GFJSZcWI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 29 Aug 2025 21:31:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2375 (0x947)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918404E, serialNumber=9C7C776F6BF6003283F0CAB43E2DC61494997162
Validity
Not Before: Aug 22 21:31:26 2025 GMT
Not After : Oct 31 00:00:00 2026 GMT
Subject: CN=68a8e1ae-e172
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:05:aa:70:80:ec:8d:b1:16:5d:8c:18:6a:f2:
6c:5c:d4:1b:bb:b8:db:ef:c6:46:1c:a6:49:d4:fa:
bb:25:f3:19:b8:72:6f:86:c3:fe:92:d2:d6:be:af:
ef:0d:83:28:15:dd:dd:bc:06:09:44:2c:f0:bb:13:
a5:89:11:95:d0:fe:be:10:f4:a9:2a:9d:8c:45:a4:
7a:5d:24:7d:25:38:3d:34:22:e8:c1:61:62:3a:13:
22:89:e5:eb:be:59:b1:2f:9c:20:90:d3:9b:d1:07:
42:35:9d:2c:e4:40:08:8a:41:a5:ed:1e:c0:bc:9c:
4e:d7:4d:df:8a:13:97:44:8a:cc:5f:b3:0b:d1:54:
5d:1a:da:66:11:9c:6b:59:df:ea:6e:2a:7f:ce:b7:
ea:61:70:84:21:c1:be:ca:74:0f:9b:6f:cb:0e:d5:
fc:6a:7a:4c:fb:93:61:0a:04:62:e4:59:40:89:38:
c2:28:8b:a8:af:1d:71:fe:6d:57:6d:66:d6:4a:f1:
8a:19:1d:92:50:4a:d4:bc:28:38:4f:35:a2:71:f6:
78:13:2e:d0:87:24:b2:a7:df:c1:50:be:d5:30:13:
98:53:4c:5a:a1:90:0c:f3:95:a3:43:e9:eb:40:46:
3b:fb:ef:d2:e4:6e:cd:1d:c0:29:c4:23:52:ef:ca:
5c:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:DD:DC:A9:A3:B5:8D:90:61:56:C4:DB:72:99:5B:1E:C8:A2:75:27
X509v3 Authority Key Identifier:
keyid:9C:7C:77:6F:6B:F6:00:32:83:F0:CA:B4:3E:2D:C6:14:94:99:71:62
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918404E/BC030C76F1DA11EAAFC6C70AC4F9AE02/nHx3b2v2ADKD8Mq0Pi3GFJSZcWI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nHx3b2v2ADKD8Mq0Pi3GFJSZcWI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918404E/BC030C76F1DA11EAAFC6C70AC4F9AE02/8C2F4DBA8D3111EFA61E9282C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.117.200.0/21
45.126.160.0/22
103.24.188.0/22
103.57.236.0-103.57.247.255
103.70.208.0/22
103.75.192.0/22
103.225.176.0/22
103.244.4.0/22
150.107.10.0/23
150.129.124.0/22
202.142.64.0/20
202.142.81.0/24
202.142.83.0/24
202.142.85.0-202.142.87.255
202.142.89.0-202.142.93.255
202.142.95.0-202.142.107.255
202.142.110.0/24
202.142.112.0/22
202.142.118.0-202.142.120.255
202.142.123.0-202.142.127.255
IPv6:
2406:3c80::-2406:3c80:8:ffff:ffff:ffff:ffff:ffff
2406:3c80:400::/46
Signature Algorithm: sha256WithRSAEncryption
91:49:44:80:d7:2a:da:29:43:43:4f:2f:8f:73:98:9f:ac:64:
73:4d:10:e7:52:d0:e0:39:d9:e4:8b:0c:31:60:81:c7:82:6e:
42:0b:e7:41:fb:47:35:cf:20:4e:c5:57:c5:ec:fc:a1:0e:29:
2d:28:b1:bd:19:b1:a6:96:a2:5b:d3:b8:40:90:96:ce:6c:c9:
d8:76:8e:80:85:c4:9e:b2:43:9a:0a:d9:93:c2:2d:a5:66:78:
28:91:e9:8e:6a:24:3a:4a:ed:cb:22:68:d0:a1:b6:b6:d4:6a:
ec:80:97:ce:26:bc:d2:a6:a4:fb:3c:61:6e:1f:9b:a2:6f:fb:
19:16:6f:40:13:d1:57:5d:e2:a0:96:68:e0:98:4b:c4:2e:16:
b0:ce:46:fe:ae:eb:76:32:f0:fb:ee:39:db:1f:54:57:e8:e2:
24:1e:cb:96:bc:9e:2b:ab:e7:5a:6a:6f:34:13:59:aa:ea:5e:
27:6a:b5:aa:51:5a:53:19:a8:ef:94:fc:f5:a8:a7:75:26:01:
68:45:dd:e4:c4:04:53:25:7b:3d:8a:81:ee:60:d8:c1:6b:89:
13:6b:1f:bf:e4:4e:5d:12:d7:e9:ce:5e:4d:08:a2:0d:4c:b8:
eb:46:1d:c8:c3:4d:6e:b8:5f:99:73:1f:68:45:aa:9f:b7:81:
40:ce:b2:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 23:49:01 2025 by rpki-client