Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/25ECFE32BDE011EF85554E6FC4F9AE02.roa
File: 25ECFE32BDE011EF85554E6FC4F9AE02.roa (raw, json)
Hash identifier: e1d9+uRQ5IQIvegipXeeeAQFi5LTwJCf0h56gtaXuCM=
Subject key identifier: 71:75:4E:39:EC:5D:1F:67:6B:FC:00:23:3E:10:E3:DA:02:47:28:BF
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: B138
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/25ECFE32BDE011EF85554E6FC4F9AE02.roa
Signing time: Thu 08 May 2025 15:56:18 +0000
ROA not before: Thu 08 May 2025 15:56:18 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 132453
IP address blocks: 103.21.184.0/22 maxlen: 24
103.227.68.0/22 maxlen: 22
103.227.68.0/24 maxlen: 24
103.227.69.0/24 maxlen: 24
103.227.70.0/24 maxlen: 24
103.227.71.0/24 maxlen: 24
103.240.192.0/22 maxlen: 22
103.240.192.0/24 maxlen: 24
103.240.193.0/24 maxlen: 24
103.240.194.0/24 maxlen: 24
103.240.195.0/24 maxlen: 24
103.240.232.0/22 maxlen: 22
103.240.232.0/24 maxlen: 24
103.240.233.0/24 maxlen: 24
103.240.234.0/24 maxlen: 24
103.240.235.0/24 maxlen: 24
103.240.236.0/22 maxlen: 22
103.240.236.0/24 maxlen: 24
103.240.237.0/24 maxlen: 24
103.240.238.0/24 maxlen: 24
103.240.239.0/24 maxlen: 24
103.245.12.0/22 maxlen: 22
103.245.12.0/24 maxlen: 24
103.245.13.0/24 maxlen: 24
103.245.14.0/24 maxlen: 24
103.245.15.0/24 maxlen: 24
103.248.84.0/22 maxlen: 22
103.248.84.0/24 maxlen: 24
103.248.85.0/24 maxlen: 24
103.248.86.0/24 maxlen: 24
103.248.87.0/24 maxlen: 24
103.252.216.0/22 maxlen: 22
103.252.216.0/24 maxlen: 24
103.252.217.0/24 maxlen: 24
103.252.218.0/24 maxlen: 24
103.252.219.0/24 maxlen: 24
103.253.172.0/22 maxlen: 22
103.253.172.0/24 maxlen: 24
103.253.173.0/24 maxlen: 24
103.253.174.0/24 maxlen: 24
103.253.175.0/24 maxlen: 24
111.125.196.0/22 maxlen: 24
150.129.180.0/22 maxlen: 22
150.129.180.0/24 maxlen: 24
150.129.181.0/24 maxlen: 24
150.129.182.0/24 maxlen: 24
150.129.183.0/24 maxlen: 24
150.129.236.0/22 maxlen: 22
150.129.236.0/24 maxlen: 24
150.129.237.0/24 maxlen: 24
150.129.238.0/24 maxlen: 24
150.129.239.0/24 maxlen: 24
150.129.248.0/22 maxlen: 22
150.129.248.0/24 maxlen: 24
150.129.249.0/24 maxlen: 24
150.129.250.0/24 maxlen: 24
150.129.251.0/24 maxlen: 24
150.242.60.0/22 maxlen: 22
150.242.60.0/24 maxlen: 24
150.242.61.0/24 maxlen: 24
150.242.62.0/24 maxlen: 24
150.242.63.0/24 maxlen: 24
150.242.64.0/22 maxlen: 22
150.242.64.0/24 maxlen: 24
150.242.65.0/24 maxlen: 24
150.242.66.0/24 maxlen: 24
150.242.67.0/24 maxlen: 24
150.242.72.0/22 maxlen: 22
150.242.72.0/24 maxlen: 24
150.242.73.0/24 maxlen: 24
150.242.74.0/24 maxlen: 24
150.242.75.0/24 maxlen: 24
150.242.84.0/22 maxlen: 22
150.242.84.0/24 maxlen: 24
150.242.85.0/24 maxlen: 24
150.242.86.0/24 maxlen: 24
150.242.87.0/24 maxlen: 24
150.242.172.0/22 maxlen: 22
150.242.172.0/24 maxlen: 24
150.242.173.0/24 maxlen: 24
150.242.174.0/24 maxlen: 24
150.242.175.0/24 maxlen: 24
2400:80c0::/32 maxlen: 36
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 20 May 2025 08:51:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 45368 (0xb138)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Validity
Not Before: May 8 15:56:18 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=681cd422-8f2a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:ba:d4:9c:c4:47:d8:06:19:86:a0:bf:73:4a:
28:e0:a3:2c:fd:07:67:f4:0f:18:2f:09:eb:10:3d:
8c:21:e5:c7:88:02:02:c6:ce:08:44:9b:b6:52:8c:
0a:fa:72:c8:f1:70:28:1e:bc:3f:6b:1c:05:b0:d9:
47:9d:1c:e9:48:19:57:58:e6:95:53:d3:1d:7d:af:
a6:9b:b6:6e:27:9b:68:83:89:44:23:c4:87:ad:61:
4f:47:eb:cf:f0:f8:37:6c:bd:d0:5f:b1:ef:37:54:
c5:5c:4a:d7:c2:a0:eb:4b:c3:2a:4e:0a:2f:b5:50:
8d:2b:9c:8a:d9:f7:d2:13:35:57:b5:7c:89:c6:da:
a6:4b:44:18:5d:3e:80:2b:71:27:72:e6:e8:c5:e7:
d5:d3:d8:c6:f8:78:f1:77:80:ee:9c:d7:df:22:e6:
59:05:6e:e5:4b:f8:c3:81:57:d5:58:8a:ff:09:71:
39:dc:af:81:b0:4c:74:e6:d1:86:24:be:94:3e:1d:
e6:9f:68:21:6f:6b:c1:cb:a7:b4:09:8b:d7:3e:2c:
02:38:69:07:a5:34:c9:a2:d9:0b:80:07:f3:93:23:
bd:9f:11:df:66:9f:32:94:90:1a:4c:6f:07:b9:16:
88:e1:8b:b7:b0:9c:7f:4e:8a:c5:2c:bd:b0:f1:27:
73:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:75:4E:39:EC:5D:1F:67:6B:FC:00:23:3E:10:E3:DA:02:47:28:BF
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/25ECFE32BDE011EF85554E6FC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.21.184.0/22
103.227.68.0/22
103.240.192.0/22
103.240.232.0/21
103.245.12.0/22
103.248.84.0/22
103.252.216.0/22
103.253.172.0/22
111.125.196.0/22
150.129.180.0/22
150.129.236.0/22
150.129.248.0/22
150.242.60.0-150.242.67.255
150.242.72.0/22
150.242.84.0/22
150.242.172.0/22
IPv6:
2400:80c0::/32
Signature Algorithm: sha256WithRSAEncryption
ae:66:36:0e:a7:29:42:06:9f:b8:9b:9b:92:a9:cc:2e:50:95:
f8:49:e5:3e:1f:e1:6b:24:82:9c:40:d8:a6:2b:97:b8:23:a6:
59:16:7a:fa:25:3b:d0:c1:06:d8:62:53:4b:14:f3:d1:b8:a5:
1a:b2:f1:1b:b9:0a:7f:18:fb:5c:de:50:8b:93:7b:0d:76:2e:
ff:f3:e4:57:69:35:a6:6b:39:66:42:c5:79:62:98:35:24:b4:
45:df:4b:a9:83:40:b4:8b:20:92:2f:f0:d6:bc:4c:0f:46:fd:
e0:9d:8a:a2:a1:a4:b6:0b:ec:4c:f6:a8:3b:c8:8f:f7:f4:9e:
68:86:68:c3:7b:03:35:9c:5b:d8:dc:db:e6:ed:c2:dc:2a:9a:
d2:5e:27:ce:1e:3d:c1:68:a3:7a:05:93:6e:3c:c8:03:1b:74:
a2:eb:2b:c8:17:10:c9:c6:50:b4:df:99:f1:32:39:a2:ac:22:
8e:2a:b7:ff:27:cf:0d:d3:a8:73:76:95:dd:63:56:2f:44:ec:
e3:5a:66:38:8c:f6:32:e9:c3:e0:f3:fb:6a:90:80:60:80:74:
39:9f:fb:c4:dc:66:c4:87:ed:b5:32:76:f1:4a:82:80:39:08:
44:ca:81:2f:c7:e3:d0:ff:90:8e:be:5a:f5:00:a8:06:d4:4b:
37:e8:81:6b
-----BEGIN CERTIFICATE-----
MIIF5TCCBM2gAwIBAgIDALE4MA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5
MThFREIyMTEwLwYDVQQFEygyOTZFREI2NEYzQUY2RTlEOTgwOTMyRTgxNkY5NTk4
M0UzQUJDODIzMB4XDTI1MDUwODE1NTYxOFoXDTI2MDcwMTAwMDAwMFowGDEWMBQG
A1UEAxMNNjgxY2Q0MjItOGYyYTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBALm61JzER9gGGYagv3NKKOCjLP0HZ/QPGC8J6xA9jCHlx4gCAsbOCESbtlKM
CvpyyPFwKB68P2scBbDZR50c6UgZV1jmlVPTHX2vppu2biebaIOJRCPEh61hT0fr
z/D4N2y90F+x7zdUxVxK18Kg60vDKk4KL7VQjSucitn30hM1V7V8icbapktEGF0+
gCtxJ3Lm6MXn1dPYxvh48XeA7pzX3yLmWQVu5Uv4w4FX1ViK/wlxOdyvgbBMdObR
hiS+lD4d5p9oIW9rwcuntAmL1z4sAjhpB6U0yaLZC4AH85MjvZ8R32afMpSQGkxv
B7kWiOGLt7Ccf06KxSy9sPEnc8UCAwEAAaOCAwgwggMEMB0GA1UdDgQWBBRxdU45
7F0fZ2v8ACM+EOPaAkcovzAfBgNVHSMEGDAWgBQpbttk869unZgJMugW+VmD46vI
IzAOBgNVHQ8BAf8EBAMCB4AwgYMGA1UdHwR8MHoweKB2oHSGcnJzeW5jOi8vcnBr
aS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkxOEVEQjIvMkE0M0UzMEM3
MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvS1c3YlpQT3ZicDJZQ1RMb0Z2bFpnLU9y
eUNNLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr
aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3
MkZEMUZGMi9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5Q00uY2VyMEoGA1UdIAEB
/wRAMD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBu
aWMubmV0L1JQS0kvQ1BTLnBkZjCBywYIKwYBBQUHAQsEgb4wgbswgYMGCCsGAQUF
BzALhndyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MThFREIyLzJBNDNFMzBDNzBFOTExRTJCMzZENEI2QjI5NzlCQjIwLzI1RUNGRTMy
QkRFMDExRUY4NTU1NEU2RkM0RjlBRTAyLnJvYTAzBggrBgEFBQcwDYYnaHR0cHM6
Ly9ycmRwLmFwbmljLm5ldC9ub3RpZmljYXRpb24ueG1sMIGRBggrBgEFBQcBBwEB
/wSBgTB/MG4EAgABMGgDBAJnFbgDBAJn40QDBAJn8MADBANn8OgDBAJn9QwDBAJn
+FQDBAJn/NgDBAJn/awDBAJvfcQDBAKWgbQDBAKWgewDBAKWgfgwDAMEApbyPAME
ApbyQAMEApbySAMEApbyVAMEApbyrDANBAIAAjAHAwUAJACAwDANBgkqhkiG9w0B
AQsFAAOCAQEArmY2DqcpQgafuJubkqnMLlCV+EnlPh/haySCnEDYpiuXuCOmWRZ6
+iU70MEG2GJTSxTz0bilGrLxG7kKfxj7XN5Qi5N7DXYu//PkV2k1pms5ZkLFeWKY
NSS0Rd9LqYNAtIsgki/w1rxMD0b94J2KoqGktgvsTPaoO8iP9/SeaIZow3sDNZxb
2Nzb5u3C3Cqa0l4nzh49wWijegWTbjzIAxt0ousryBcQycZQtN+Z8TI5oqwijiq3
/yfPDdOoc3aV3WNWL0Ts41pmOIz2MunD4PP7apCAYIB0OZ/7xNxmxIfttTJ28UqC
gDkIRMqBL8fj0P+Qjr5a9QCoBtRLN+iBaw==
-----END CERTIFICATE-----
Generated at Tue May 13 12:40:42 2025 by rpki-client