Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/2AA5E228240011F0B2FB7948C4F9AE02.roa
File: 2AA5E228240011F0B2FB7948C4F9AE02.roa (raw, json)
Hash identifier: lvhqKzwQroFQTpVMIdKCA3emraXEDsXKwdRuW6RuIPw=
Subject key identifier: E8:4C:3D:82:40:60:22:0C:B5:D1:89:F1:A6:83:D2:9A:7F:A4:AD:03
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: B1DE
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/2AA5E228240011F0B2FB7948C4F9AE02.roa
Signing time: Thu 08 May 2025 15:58:54 +0000
ROA not before: Thu 08 May 2025 15:58:54 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 133647
IP address blocks: 43.229.162.0/24 maxlen: 24
43.230.156.0/22 maxlen: 24
45.115.252.0/22 maxlen: 24
45.116.68.0/22 maxlen: 24
103.38.70.0/24 maxlen: 24
103.43.4.0/22 maxlen: 24
103.49.56.0/22 maxlen: 24
103.50.4.0/22 maxlen: 24
103.55.6.0/23 maxlen: 24
103.61.102.0/23 maxlen: 24
103.69.216.0/22 maxlen: 24
103.70.144.0/22 maxlen: 24
103.70.176.0/23 maxlen: 24
103.79.112.0/22 maxlen: 24
103.87.49.0/24 maxlen: 24
103.91.68.0/22 maxlen: 24
103.93.176.0/22 maxlen: 24
103.109.72.0/23 maxlen: 24
103.122.84.0/24 maxlen: 24
103.122.85.0/24 maxlen: 24
103.129.194.0/24 maxlen: 24
103.129.195.0/24 maxlen: 24
103.144.37.0/24 maxlen: 24
103.156.168.0/23 maxlen: 24
103.157.160.0/23 maxlen: 24
103.159.154.0/23 maxlen: 24
103.161.230.0/23 maxlen: 24
103.161.232.0/24 maxlen: 24
103.161.233.0/24 maxlen: 24
103.174.105.0/24 maxlen: 24
103.175.76.0/24 maxlen: 24
103.175.77.0/24 maxlen: 24
103.176.71.0/24 maxlen: 24
103.214.97.0/24 maxlen: 24
103.220.28.0/24 maxlen: 24
103.220.29.0/24 maxlen: 24
103.220.30.0/24 maxlen: 24
103.220.31.0/24 maxlen: 24
103.237.172.0/24 maxlen: 24
103.237.173.0/24 maxlen: 24
103.237.174.0/24 maxlen: 24
103.237.175.0/24 maxlen: 24
175.111.180.0/24 maxlen: 24
175.111.182.0/24 maxlen: 24
175.111.183.0/24 maxlen: 24
2001:df0:dc80::/48 maxlen: 48
2001:df1:b280::/48 maxlen: 48
2001:df1:f440::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 19 May 2025 06:37:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 45534 (0xb1de)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Validity
Not Before: May 8 15:58:54 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=681cd4be-0487
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:a5:f0:45:14:b8:a1:7b:48:3a:34:7e:2c:c3:
fb:2d:bc:51:9a:78:bc:77:ca:41:1e:34:f9:9f:ee:
4f:36:ad:18:d1:82:65:fc:3a:3b:6b:5a:e7:be:fa:
6d:93:41:23:94:62:0b:51:1c:ca:8e:65:8f:2f:d2:
19:23:4b:82:24:56:26:e3:76:2a:2f:f7:d5:82:35:
61:27:d2:29:3e:2d:b2:e1:cf:02:af:5e:b7:07:5a:
28:5d:dc:ae:01:fb:2c:ca:9a:c1:b8:fa:c4:10:71:
fb:89:77:48:be:36:24:05:c5:50:e4:ef:1b:f6:08:
00:40:04:e8:42:1e:7b:bb:5e:a0:d2:05:45:78:33:
8c:b2:f1:a5:28:4d:3b:7f:53:41:0e:40:d5:b9:36:
f4:21:4b:5e:20:4a:a8:35:6a:5b:b2:ee:0d:3d:34:
df:cd:b8:3b:74:46:5e:d5:c8:cc:78:9b:72:b7:f0:
f7:88:5d:28:e4:71:1c:6e:f7:ae:05:ff:28:98:ff:
3c:15:50:97:24:03:74:e3:0d:a5:f8:77:d9:6b:58:
59:19:a1:c0:06:11:7f:db:f6:96:96:a1:3f:ea:1c:
2b:ed:64:b4:65:64:57:68:8d:0e:f6:68:9a:9d:a0:
12:71:19:2c:03:fa:47:dd:d6:5d:c7:6e:79:26:12:
aa:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:4C:3D:82:40:60:22:0C:B5:D1:89:F1:A6:83:D2:9A:7F:A4:AD:03
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/2AA5E228240011F0B2FB7948C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
43.229.162.0/24
43.230.156.0/22
45.115.252.0/22
45.116.68.0/22
103.38.70.0/24
103.43.4.0/22
103.49.56.0/22
103.50.4.0/22
103.55.6.0/23
103.61.102.0/23
103.69.216.0/22
103.70.144.0/22
103.70.176.0/23
103.79.112.0/22
103.87.49.0/24
103.91.68.0/22
103.93.176.0/22
103.109.72.0/23
103.122.84.0/23
103.129.194.0/23
103.144.37.0/24
103.156.168.0/23
103.157.160.0/23
103.159.154.0/23
103.161.230.0-103.161.233.255
103.174.105.0/24
103.175.76.0/23
103.176.71.0/24
103.214.97.0/24
103.220.28.0/22
103.237.172.0/22
175.111.180.0/24
175.111.182.0/23
IPv6:
2001:df0:dc80::/48
2001:df1:b280::/48
2001:df1:f440::/48
Signature Algorithm: sha256WithRSAEncryption
44:20:f3:80:f3:be:e1:40:41:9c:ac:93:79:28:e1:97:09:89:
33:05:d1:12:c0:7f:5f:bd:dc:fb:ee:95:d8:a0:ff:62:03:57:
e9:43:31:23:6e:dc:82:42:0d:08:26:8f:99:44:26:60:60:81:
b5:a9:ee:f9:d4:e9:61:37:b9:7d:40:4b:ae:12:8f:f3:f3:cd:
6f:1d:1f:b1:ba:cf:5b:f9:25:53:2a:97:8a:79:f3:9a:cb:29:
45:e2:39:59:84:f3:28:08:6e:08:e3:24:7c:41:72:26:e6:11:
a4:b4:0a:84:e7:d7:ae:5f:94:b2:09:30:95:88:f0:b2:2b:4a:
64:2f:32:20:ea:a3:c1:78:0c:4e:1b:42:cb:0a:44:42:a0:e4:
be:09:02:f7:64:70:f3:0c:50:f6:2d:6c:99:c2:40:ff:0f:ca:
d6:78:f1:08:be:47:80:b1:ff:31:cb:ed:a8:c5:9f:7d:a0:0d:
0d:18:65:a5:c4:25:fd:38:ce:ec:a1:d3:fe:1a:31:31:3a:b2:
72:15:db:39:aa:5c:89:3c:68:96:76:0a:28:d3:1a:21:ff:8b:
2a:61:4d:d6:95:71:c4:f5:04:ec:04:07:59:2b:a3:6c:ef:96:
32:a0:b8:2f:e3:a5:17:94:57:68:52:80:35:34:a0:d0:3d:73:
ca:6e:19:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 11:35:38 2025 by rpki-client