Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/1560FBD0782611F087954238C4F9AE02.roa
File: 1560FBD0782611F087954238C4F9AE02.roa (raw, json)
Hash identifier: yBlYRwJhelKzLPmrfcQQpllqcVobp3NyKzCtIrbU0DM=
Subject key identifier: A7:5D:D7:6F:C2:78:ED:46:47:96:73:CD:B1:89:1D:8A:C1:52:FB:24
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: C27E
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/1560FBD0782611F087954238C4F9AE02.roa
Signing time: Wed 13 Aug 2025 09:15:41 +0000
ROA not before: Wed 13 Aug 2025 09:15:41 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 132116
IP address blocks: 27.123.240.0/22 maxlen: 24
43.247.40.0/24 maxlen: 24
43.247.41.0/24 maxlen: 24
43.247.42.0/24 maxlen: 24
43.247.43.0/24 maxlen: 24
43.248.152.0/22 maxlen: 24
43.248.240.0/24 maxlen: 24
43.248.241.0/24 maxlen: 24
43.248.242.0/24 maxlen: 24
43.248.243.0/24 maxlen: 24
45.248.0.0/22 maxlen: 24
45.248.172.0/24 maxlen: 24
45.248.173.0/24 maxlen: 24
45.248.174.0/24 maxlen: 24
45.248.175.0/24 maxlen: 24
103.16.28.0/24 maxlen: 24
103.16.29.0/24 maxlen: 24
103.16.30.0/24 maxlen: 24
103.16.31.0/24 maxlen: 24
103.28.252.0/22 maxlen: 24
103.40.200.0/22 maxlen: 24
103.68.20.0/24 maxlen: 24
103.68.22.0/24 maxlen: 24
103.68.23.0/24 maxlen: 24
103.69.24.0/24 maxlen: 24
103.69.25.0/24 maxlen: 24
103.69.26.0/24 maxlen: 24
103.69.27.0/24 maxlen: 24
103.69.244.0/22 maxlen: 24
103.70.80.0/24 maxlen: 24
103.70.81.0/24 maxlen: 24
103.70.82.0/24 maxlen: 24
103.70.83.0/24 maxlen: 24
103.91.73.0/24 maxlen: 24
103.91.74.0/24 maxlen: 24
103.94.83.0/24 maxlen: 24
103.100.4.0/22 maxlen: 24
103.102.147.0/24 maxlen: 24
103.103.55.0/24 maxlen: 24
103.105.96.0/24 maxlen: 24
103.124.120.0/23 maxlen: 24
103.153.12.0/24 maxlen: 24
103.164.141.0/24 maxlen: 24
103.165.88.0/23 maxlen: 24
103.165.102.0/23 maxlen: 24
103.167.154.0/23 maxlen: 24
103.167.182.0/23 maxlen: 24
103.167.224.0/23 maxlen: 24
103.167.238.0/23 maxlen: 24
103.168.60.0/23 maxlen: 24
103.169.242.0/24 maxlen: 24
103.169.243.0/24 maxlen: 24
103.170.36.0/23 maxlen: 24
103.170.38.0/23 maxlen: 24
103.170.84.0/23 maxlen: 24
103.183.86.0/23 maxlen: 24
103.190.8.0/24 maxlen: 24
103.190.9.0/24 maxlen: 24
103.192.64.0/24 maxlen: 24
103.192.66.0/24 maxlen: 24
103.192.67.0/24 maxlen: 24
103.198.172.0/22 maxlen: 24
103.216.140.0/24 maxlen: 24
103.216.142.0/24 maxlen: 24
103.216.143.0/24 maxlen: 24
103.217.132.0/22 maxlen: 24
103.224.144.0/22 maxlen: 24
119.42.56.0/22 maxlen: 24
163.53.84.0/22 maxlen: 24
180.149.225.0/24 maxlen: 24
180.149.226.0/24 maxlen: 24
180.149.227.0/24 maxlen: 24
2001:df1:d240::/48 maxlen: 48
2001:df3:6ec0::/48 maxlen: 48
2405:e100::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 29 Aug 2025 15:25:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 49790 (0xc27e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Validity
Not Before: Aug 13 09:15:41 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=689c57bd-5ebc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:ba:10:28:43:39:cc:ab:7f:0a:66:75:ba:34:
07:3b:11:57:ee:3a:a3:9f:48:b3:eb:3e:b5:76:ab:
39:6f:b5:af:f3:d7:f6:69:71:00:ff:35:0d:ff:c8:
5c:e5:2f:89:af:45:53:70:a9:46:9c:a9:ad:b6:3c:
17:3a:f8:00:e1:61:c9:12:05:7d:19:eb:10:cb:08:
98:0b:31:96:2a:ae:39:0a:3e:54:a5:cb:4b:10:dd:
c4:fe:60:80:9b:24:e7:42:f4:ee:d5:c2:47:0d:ff:
fe:4b:50:ba:fd:1c:2a:a8:0c:d8:50:b7:c2:19:d6:
c8:48:d3:37:d2:66:14:93:9e:37:f4:99:0e:25:8c:
ae:92:84:5f:50:c7:69:63:8a:e7:40:06:e2:27:4e:
44:dd:e9:52:66:6e:4b:c9:97:13:f2:9f:4c:36:99:
c5:10:18:93:f0:a0:66:1f:a6:b9:56:bb:13:a8:e1:
6f:a7:e5:d2:38:cc:cd:07:37:ad:52:9d:85:2c:4e:
ba:37:4c:18:dc:ba:8c:5f:10:bc:ca:99:ee:06:53:
ea:44:28:80:b1:f4:eb:34:c7:36:67:fc:7b:b1:dd:
9f:69:72:ef:8b:d3:7f:8b:27:f2:6a:b2:c6:fd:1a:
f6:cc:15:d9:d6:1d:51:5b:f1:26:bf:ce:e7:24:db:
e3:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:5D:D7:6F:C2:78:ED:46:47:96:73:CD:B1:89:1D:8A:C1:52:FB:24
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/1560FBD0782611F087954238C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
27.123.240.0/22
43.247.40.0/22
43.248.152.0/22
43.248.240.0/22
45.248.0.0/22
45.248.172.0/22
103.16.28.0/22
103.28.252.0/22
103.40.200.0/22
103.68.20.0/24
103.68.22.0/23
103.69.24.0/22
103.69.244.0/22
103.70.80.0/22
103.91.73.0-103.91.74.255
103.94.83.0/24
103.100.4.0/22
103.102.147.0/24
103.103.55.0/24
103.105.96.0/24
103.124.120.0/23
103.153.12.0/24
103.164.141.0/24
103.165.88.0/23
103.165.102.0/23
103.167.154.0/23
103.167.182.0/23
103.167.224.0/23
103.167.238.0/23
103.168.60.0/23
103.169.242.0/23
103.170.36.0/22
103.170.84.0/23
103.183.86.0/23
103.190.8.0/23
103.192.64.0/24
103.192.66.0/23
103.198.172.0/22
103.216.140.0/24
103.216.142.0/23
103.217.132.0/22
103.224.144.0/22
119.42.56.0/22
163.53.84.0/22
180.149.225.0-180.149.227.255
IPv6:
2001:df1:d240::/48
2001:df3:6ec0::/48
2405:e100::/48
Signature Algorithm: sha256WithRSAEncryption
a2:fe:a1:a0:b1:b9:59:25:d1:e3:79:6f:90:be:85:1a:ef:68:
68:6a:83:3d:bc:2a:53:4e:8f:5d:fd:de:dd:a4:61:98:5b:ba:
e5:15:08:0f:8a:a5:7c:7d:5e:79:59:9c:97:d2:5b:9a:91:78:
54:80:b6:b8:42:ae:45:9b:58:c1:c9:b6:8c:04:68:e3:cf:5a:
b2:db:8f:fe:48:14:19:b4:e9:56:7c:b8:20:58:4e:52:94:1b:
92:7d:e6:65:cf:4f:df:06:ab:1b:8c:a7:a7:65:2b:08:46:d9:
56:8d:86:ec:22:08:b6:ce:c4:5c:57:dd:d7:cd:8e:c4:95:e7:
df:da:14:8c:98:d3:54:6a:1c:2e:98:2b:38:72:b4:8f:cd:ac:
c1:25:54:f1:22:e3:75:75:69:30:6c:37:6a:b1:e3:04:68:2f:
69:e7:6e:4c:da:42:e0:d0:41:6f:13:48:84:6d:6a:3b:e1:9e:
c8:a6:a8:c5:63:60:88:54:3d:dc:56:4c:83:42:18:e0:a8:5f:
4e:80:99:fd:ca:46:f7:b9:f4:f1:7b:28:fc:60:db:56:81:92:
48:c2:a2:c6:ff:65:94:19:f0:21:a6:c5:eb:5f:f0:ae:a7:82:
01:c5:5e:d4:16:e9:3a:91:cd:b7:45:76:99:51:63:20:de:db:
e7:74:35:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 02:34:24 2025 by rpki-client