Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/353786EC51A511F094839431C4F9AE02.roa
File: 353786EC51A511F094839431C4F9AE02.roa (raw, json)
Hash identifier: rx3YBV3T7tIi1wxlZE80Em+h2WMevmnfRgS3sXb4Rc0=
Subject key identifier: 76:B1:78:43:5C:C7:5D:53:A4:C8:44:43:A7:FB:1C:D9:03:75:C5:C5
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: BEC7
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/353786EC51A511F094839431C4F9AE02.roa
Signing time: Wed 25 Jun 2025 09:17:25 +0000
ROA not before: Wed 25 Jun 2025 09:17:25 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 133001
IP address blocks: 43.225.160.0/22 maxlen: 24
43.251.216.0/22 maxlen: 24
45.117.220.0/22 maxlen: 24
45.119.44.0/22 maxlen: 22
45.119.44.0/24 maxlen: 24
45.119.45.0/24 maxlen: 24
45.119.46.0/24 maxlen: 24
45.119.47.0/24 maxlen: 24
103.38.36.0/22 maxlen: 24
103.42.166.0/23 maxlen: 24
103.51.132.0/24 maxlen: 24
103.51.133.0/24 maxlen: 24
103.51.134.0/24 maxlen: 24
103.51.135.0/24 maxlen: 24
103.54.76.0/24 maxlen: 24
103.54.77.0/24 maxlen: 24
103.56.227.0/24 maxlen: 24
103.110.102.0/24 maxlen: 24
103.114.0.0/22 maxlen: 23
103.114.2.0/23 maxlen: 24
103.116.147.0/24 maxlen: 24
103.116.238.0/24 maxlen: 24
103.116.239.0/24 maxlen: 24
103.140.26.0/24 maxlen: 24
103.140.27.0/24 maxlen: 24
103.165.68.0/24 maxlen: 24
103.165.69.0/24 maxlen: 24
103.176.211.0/24 maxlen: 24
103.196.76.0/22 maxlen: 24
103.201.148.0/22 maxlen: 24
111.125.225.0/24 maxlen: 24
183.87.251.0/24 maxlen: 24
183.87.252.0/22 maxlen: 24
202.94.160.0/22 maxlen: 24
2401:b240::/32 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 10 Jul 2025 03:15:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 48839 (0xbec7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Validity
Not Before: Jun 25 09:17:25 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=685bbea5-83da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:ea:81:02:db:cf:fe:ee:ea:ab:c7:68:47:4a:
fe:3e:00:d1:e6:cb:a4:f9:e1:ca:b9:1a:94:4c:83:
92:42:96:ec:4a:67:ee:1c:be:fe:2b:0a:e8:04:e0:
ba:a3:bf:aa:9b:56:8c:b2:85:be:9f:11:b4:ba:79:
75:d4:17:70:05:0c:c4:e4:f5:ce:3a:72:66:28:47:
b0:f9:f5:bc:f8:0d:ba:12:4b:fd:8d:fa:f7:bc:4d:
0b:92:21:9b:9e:6e:55:a9:90:32:b1:82:21:1b:23:
1a:d8:b0:70:b2:55:a6:28:24:07:9b:80:5b:3f:77:
11:6d:59:5f:23:ac:d1:89:85:9d:9e:4f:85:2d:47:
69:91:42:7a:5a:44:f8:e6:da:68:da:47:19:03:c7:
57:95:bd:b7:54:9e:af:81:b7:83:44:de:42:51:e0:
cc:cd:cf:1d:2d:a8:8f:5f:01:ba:49:6e:3f:c2:da:
74:07:6d:56:1a:ab:48:f5:dd:aa:46:c4:38:70:01:
a2:a1:b6:58:4f:ac:07:27:c7:c4:7a:6e:e9:a3:07:
a9:5d:d0:d1:f7:11:72:04:21:2d:74:d4:7f:2e:b2:
54:8a:13:99:17:b4:0a:ef:9a:b1:07:8f:f4:ca:f4:
88:c6:3b:3a:25:93:46:80:5b:2e:b1:bf:95:f9:c2:
49:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:B1:78:43:5C:C7:5D:53:A4:C8:44:43:A7:FB:1C:D9:03:75:C5:C5
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/353786EC51A511F094839431C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
43.225.160.0/22
43.251.216.0/22
45.117.220.0/22
45.119.44.0/22
103.38.36.0/22
103.42.166.0/23
103.51.132.0/22
103.54.76.0/23
103.56.227.0/24
103.110.102.0/24
103.114.0.0/22
103.116.147.0/24
103.116.238.0/23
103.140.26.0/23
103.165.68.0/23
103.176.211.0/24
103.196.76.0/22
103.201.148.0/22
111.125.225.0/24
183.87.251.0-183.87.255.255
202.94.160.0/22
IPv6:
2401:b240::/32
Signature Algorithm: sha256WithRSAEncryption
3f:e7:5b:c6:f4:ca:c3:88:43:92:39:ac:f5:22:b3:7a:04:a9:
19:f8:a3:21:7e:7d:8a:40:5f:26:47:de:7a:dc:bf:a5:70:e3:
35:1f:20:1e:31:a0:e5:81:72:1e:31:0b:36:56:8e:f9:0f:75:
61:19:b6:90:b4:a4:35:20:6f:42:37:c8:a2:fd:a2:be:f4:15:
71:03:95:7c:c9:74:c8:75:45:83:50:29:c9:61:19:c4:01:36:
d8:50:06:ad:20:58:44:0b:be:f9:45:59:ee:15:15:ea:1f:e8:
ab:8f:05:ab:c0:e0:da:c1:90:25:e1:ef:ff:13:77:71:00:e9:
46:d7:f8:6d:b6:78:7e:ce:5d:79:88:16:6a:07:ca:b9:00:e9:
3b:95:bc:f6:16:6a:d5:8a:23:ad:33:b2:a9:23:f5:1b:6e:f0:
33:7e:b0:34:6a:a0:3c:d2:05:be:fe:24:77:ad:80:66:4a:cf:
f6:e8:c0:e3:8e:e5:47:d4:46:fc:2c:b7:13:12:d9:aa:93:1f:
5e:32:c3:d5:27:b0:64:53:5b:79:c8:aa:f7:26:32:3d:83:f6:
dd:f6:66:57:f6:20:8b:e8:c0:c1:70:09:9d:0a:eb:8d:ff:f1:
39:45:79:13:17:4a:ff:af:eb:c4:e7:a0:21:9a:32:ad:8b:c3:
7d:06:67:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 3 07:08:21 2025 by rpki-client