Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/0760737E587C11EE8B2A0A2EC4F9AE02.roa
File: 0760737E587C11EE8B2A0A2EC4F9AE02.roa (raw, json)
Hash identifier: WNqzI0apkA2dYaj/Com82ak2Ke3STflW6nRzqkvIH8A=
Subject key identifier: 04:88:76:9A:C7:81:FD:81:99:57:21:54:98:67:C7:04:40:7D:B8:B2
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: B470
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/0760737E587C11EE8B2A0A2EC4F9AE02.roa
Signing time: Thu 08 May 2025 16:09:05 +0000
ROA not before: Thu 08 May 2025 16:09:05 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 137125
IP address blocks: 27.48.0.0/22 maxlen: 22
27.48.4.0/22 maxlen: 22
27.48.8.0/22 maxlen: 22
27.48.12.0/22 maxlen: 22
27.48.16.0/22 maxlen: 22
27.48.20.0/22 maxlen: 22
27.48.24.0/22 maxlen: 22
27.48.28.0/22 maxlen: 22
27.48.32.0/22 maxlen: 22
27.48.36.0/22 maxlen: 22
27.48.40.0/22 maxlen: 22
27.48.44.0/22 maxlen: 22
27.48.48.0/22 maxlen: 22
27.48.52.0/22 maxlen: 22
27.48.56.0/22 maxlen: 22
27.48.60.0/22 maxlen: 22
27.48.64.0/22 maxlen: 22
27.48.68.0/22 maxlen: 22
27.48.72.0/22 maxlen: 22
27.48.76.0/22 maxlen: 22
27.48.80.0/22 maxlen: 22
27.48.84.0/22 maxlen: 22
27.48.88.0/22 maxlen: 22
27.48.92.0/22 maxlen: 22
27.48.96.0/22 maxlen: 22
27.48.100.0/22 maxlen: 22
27.48.104.0/22 maxlen: 22
27.48.108.0/22 maxlen: 22
27.48.112.0/22 maxlen: 22
27.48.116.0/22 maxlen: 22
27.48.120.0/22 maxlen: 22
27.48.124.0/22 maxlen: 22
27.48.128.0/22 maxlen: 22
27.48.132.0/22 maxlen: 22
27.48.136.0/22 maxlen: 22
27.48.140.0/22 maxlen: 22
27.48.144.0/21 maxlen: 22
27.48.152.0/22 maxlen: 22
27.48.156.0/22 maxlen: 22
27.48.160.0/20 maxlen: 20
27.48.160.0/22 maxlen: 22
27.48.164.0/22 maxlen: 22
27.48.168.0/22 maxlen: 22
27.48.172.0/22 maxlen: 22
27.48.176.0/22 maxlen: 22
27.48.180.0/22 maxlen: 22
27.48.184.0/22 maxlen: 22
27.48.188.0/22 maxlen: 22
27.48.192.0/22 maxlen: 22
27.48.196.0/22 maxlen: 22
27.48.200.0/22 maxlen: 22
27.48.204.0/22 maxlen: 22
27.48.208.0/22 maxlen: 22
27.48.212.0/22 maxlen: 22
27.48.216.0/22 maxlen: 22
27.48.220.0/22 maxlen: 22
27.48.224.0/22 maxlen: 22
27.48.228.0/22 maxlen: 22
27.48.232.0/22 maxlen: 22
27.48.236.0/22 maxlen: 22
27.48.240.0/22 maxlen: 22
27.48.244.0/22 maxlen: 22
27.48.248.0/22 maxlen: 22
27.48.252.0/22 maxlen: 22
103.112.24.0/22 maxlen: 24
122.50.128.0/18 maxlen: 24
122.50.192.0/18 maxlen: 24
202.62.224.0/20 maxlen: 24
202.137.208.0/20 maxlen: 24
203.98.96.0/19 maxlen: 24
2404:c00::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 19 May 2025 18:54:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 46192 (0xb470)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Validity
Not Before: May 8 16:09:05 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=681cd721-40f6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:7c:da:01:8e:f4:34:74:58:43:be:19:8e:13:
0d:fb:29:05:e5:9a:60:88:41:8e:14:42:e0:41:d4:
d3:e3:5d:ff:25:de:66:79:60:25:a9:c8:1c:51:b4:
3c:18:e7:5b:59:70:13:e0:ac:8d:c5:3c:55:9f:75:
70:08:90:d2:1f:d1:49:2e:2c:2a:a0:55:31:a1:b3:
0b:2f:53:aa:2a:2e:c4:be:30:54:ba:9e:88:35:0f:
77:fd:07:ea:22:8a:81:eb:83:7a:42:24:a8:5a:14:
fc:e0:2c:a4:04:9e:e1:a3:79:f0:00:a8:4e:eb:95:
00:86:8e:34:bd:8a:3a:63:9d:05:ed:5c:1b:de:2c:
c6:bf:a0:ab:f7:c7:c9:db:51:26:e7:98:d4:55:50:
12:36:d8:7e:e4:2f:0c:40:25:49:0d:80:87:2c:e5:
f2:0d:61:31:64:a8:9b:29:70:e7:56:2a:0f:c9:50:
68:13:a4:17:ef:3a:7a:c7:0d:30:21:0f:0a:4b:ce:
c4:a6:1f:3a:73:41:2d:22:cc:ca:90:fc:bb:a8:9a:
4d:53:2b:74:a9:62:3b:6c:20:d8:45:12:82:51:cd:
c6:08:8b:23:9c:7d:19:22:bb:72:be:82:d8:1a:1e:
e8:e1:41:08:47:ef:07:0d:7b:ed:01:24:9e:60:b0:
d2:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:88:76:9A:C7:81:FD:81:99:57:21:54:98:67:C7:04:40:7D:B8:B2
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/0760737E587C11EE8B2A0A2EC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
27.48.0.0/16
103.112.24.0/22
122.50.128.0/17
202.62.224.0/20
202.137.208.0/20
203.98.96.0/19
IPv6:
2404:c00::/32
Signature Algorithm: sha256WithRSAEncryption
42:6f:49:33:ee:1b:0b:95:9c:b8:f7:e3:40:8b:8a:30:15:4d:
cd:82:18:83:01:c2:a3:37:3c:d1:8f:3d:a3:6e:35:34:1d:d3:
f9:12:88:0a:24:f2:19:15:1d:2a:a3:96:5f:e8:f8:24:b0:42:
49:09:08:46:2e:7d:2f:98:a6:51:05:15:e2:b1:97:4b:30:99:
b8:93:36:21:42:ed:c5:2c:b6:50:92:93:0b:6d:dd:76:cd:ef:
c5:16:03:ec:f4:a8:f2:bf:b4:19:28:26:0b:d6:16:b1:91:8d:
b3:83:84:28:55:47:42:8b:b4:a0:f4:3f:ef:e6:54:5b:26:cb:
73:f5:33:7a:be:74:c4:b3:ca:0e:b8:78:d9:f2:57:28:6c:dd:
e7:56:fc:2f:14:ad:e9:5e:5e:38:2e:95:e1:c3:a6:7a:68:09:
c8:00:a0:04:8b:09:3f:09:b1:7b:8e:0c:47:6d:ed:87:4b:f0:
bc:cc:ce:19:f0:2d:41:28:48:e9:33:d5:73:3e:7a:7e:13:df:
9d:9e:8d:eb:6e:72:d9:e2:52:66:85:ec:f2:42:c1:65:f0:3e:
91:94:c7:13:10:cc:d1:8f:8b:3b:31:7c:44:2d:fd:21:a5:1f:
f6:ce:9f:66:57:91:f2:30:88:1d:30:de:75:4d:c7:29:87:7c:
f5:28:14:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 01:31:43 2025 by rpki-client