Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/5DC6DC14FF1D11EFB665791AC4F9AE02.roa
File: 5DC6DC14FF1D11EFB665791AC4F9AE02.roa (raw, json)
Hash identifier: CWrYvRMYMkbZXSOV+h+gkMIGVP4Udonl7mGXp/MI+CA=
Subject key identifier: 9F:59:AF:88:43:F7:D9:B1:A6:DF:CF:B1:98:A7:6D:D4:B0:F0:D0:BD
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: BA26
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/5DC6DC14FF1D11EFB665791AC4F9AE02.roa
Signing time: Thu 08 May 2025 16:31:14 +0000
ROA not before: Thu 08 May 2025 16:31:14 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 45916
IP address blocks: 14.192.28.0/22 maxlen: 24
27.116.48.0/21 maxlen: 24
27.121.100.0/22 maxlen: 24
43.224.0.0/22 maxlen: 24
43.224.8.0/22 maxlen: 24
43.230.212.0/22 maxlen: 24
43.231.56.0/23 maxlen: 24
43.231.58.0/24 maxlen: 24
43.231.59.0/24 maxlen: 24
43.239.200.0/22 maxlen: 22
43.239.200.0/24 maxlen: 24
43.239.201.0/24 maxlen: 24
43.239.202.0/24 maxlen: 24
43.239.203.0/24 maxlen: 24
43.241.140.0/22 maxlen: 24
43.241.144.0/22 maxlen: 24
43.241.192.0/22 maxlen: 24
43.242.116.0/22 maxlen: 24
43.242.120.0/22 maxlen: 24
43.243.36.0/22 maxlen: 24
43.248.32.0/22 maxlen: 24
43.249.216.0/22 maxlen: 24
43.249.228.0/22 maxlen: 24
43.249.232.0/22 maxlen: 24
43.250.156.0/22 maxlen: 24
43.250.164.0/22 maxlen: 24
43.251.72.0/22 maxlen: 24
43.251.220.0/22 maxlen: 24
43.252.196.0/24 maxlen: 24
43.252.197.0/24 maxlen: 24
43.252.198.0/24 maxlen: 24
43.252.199.0/24 maxlen: 24
103.1.100.0/22 maxlen: 24
103.15.60.0/22 maxlen: 24
103.21.160.0/22 maxlen: 24
103.36.80.0/22 maxlen: 24
103.38.204.0/22 maxlen: 24
103.39.128.0/22 maxlen: 24
103.50.150.0/24 maxlen: 24
103.50.151.0/24 maxlen: 24
103.81.92.0/22 maxlen: 24
103.84.104.0/23 maxlen: 24
103.84.198.0/23 maxlen: 24
103.85.8.0/22 maxlen: 24
103.86.16.0/22 maxlen: 24
103.94.192.0/22 maxlen: 22
103.94.192.0/24 maxlen: 24
103.94.193.0/24 maxlen: 24
103.94.194.0/24 maxlen: 24
103.94.195.0/24 maxlen: 24
103.161.98.0/23 maxlen: 24
103.175.182.0/23 maxlen: 24
103.176.10.0/23 maxlen: 24
103.182.162.0/24 maxlen: 24
103.206.136.0/22 maxlen: 24
103.209.64.0/22 maxlen: 24
103.216.80.0/22 maxlen: 24
103.226.184.0/22 maxlen: 24
103.228.144.0/22 maxlen: 24
103.232.128.0/22 maxlen: 22
103.232.128.0/24 maxlen: 24
103.232.129.0/24 maxlen: 24
103.232.130.0/24 maxlen: 24
103.232.131.0/24 maxlen: 24
103.238.104.0/22 maxlen: 24
103.238.108.0/22 maxlen: 24
103.240.76.0/22 maxlen: 24
103.240.160.0/22 maxlen: 24
103.240.168.0/22 maxlen: 24
103.240.204.0/22 maxlen: 24
103.240.208.0/22 maxlen: 24
103.241.44.0/22 maxlen: 24
103.241.224.0/22 maxlen: 24
103.245.196.0/22 maxlen: 24
103.246.84.0/24 maxlen: 24
103.246.85.0/24 maxlen: 24
103.246.86.0/24 maxlen: 24
103.246.87.0/24 maxlen: 24
103.249.232.0/22 maxlen: 24
103.250.136.0/22 maxlen: 24
103.250.144.0/22 maxlen: 24
103.250.148.0/22 maxlen: 24
103.250.152.0/22 maxlen: 24
103.250.156.0/22 maxlen: 24
103.250.160.0/22 maxlen: 24
103.250.164.0/22 maxlen: 24
103.250.188.0/22 maxlen: 24
103.251.16.0/22 maxlen: 24
103.251.56.0/22 maxlen: 24
103.251.212.0/22 maxlen: 24
103.251.216.0/22 maxlen: 24
103.251.224.0/22 maxlen: 24
113.20.16.0/22 maxlen: 24
150.107.188.0/22 maxlen: 24
150.107.232.0/22 maxlen: 24
150.107.240.0/22 maxlen: 24
150.107.252.0/22 maxlen: 24
150.129.52.0/23 maxlen: 24
150.129.54.0/23 maxlen: 24
150.129.104.0/22 maxlen: 24
150.129.112.0/22 maxlen: 24
150.129.148.0/22 maxlen: 24
150.129.164.0/22 maxlen: 24
150.129.168.0/22 maxlen: 24
150.129.200.0/22 maxlen: 24
150.129.204.0/22 maxlen: 24
157.119.204.0/22 maxlen: 24
163.53.176.0/22 maxlen: 24
163.53.208.0/22 maxlen: 24
182.237.8.0/22 maxlen: 24
182.237.12.0/22 maxlen: 24
183.182.88.0/24 maxlen: 24
183.182.89.0/24 maxlen: 24
183.182.90.0/24 maxlen: 24
183.182.91.0/24 maxlen: 24
2402:a00::/32 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 19 May 2025 18:54:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 47654 (0xba26)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Validity
Not Before: May 8 16:31:14 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=681cdc51-9f82
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:d1:f4:07:1b:be:1a:20:ff:14:49:d6:c0:96:
80:da:d6:4a:ee:92:62:56:ad:67:87:5a:31:2f:f6:
b0:a4:35:fe:44:1f:10:fc:ef:d6:32:1f:bf:0b:9b:
62:88:78:01:f6:33:66:00:54:28:20:63:41:dc:e6:
94:77:6b:7f:9c:c4:1a:10:05:d7:15:ae:96:65:2c:
c0:72:74:b2:c5:98:23:65:a7:ae:2e:80:b7:61:40:
3b:22:01:94:ce:ed:7a:fc:db:1d:c0:9e:98:95:f0:
7f:a8:3b:2b:cf:c1:17:3b:cd:41:80:ed:ae:1c:aa:
78:d1:44:d4:74:c2:6e:85:45:68:13:23:7a:02:f9:
a1:4f:68:7a:8b:aa:b9:d5:5d:bc:17:b2:e0:01:8d:
e7:91:af:eb:86:a2:5c:8f:02:e5:32:61:ac:af:03:
5b:bf:be:cd:cf:22:e2:94:3f:fc:e3:8e:47:5f:9a:
f8:0c:56:37:12:65:f0:7b:9e:75:63:d8:5c:d4:1e:
5d:38:02:27:b8:70:fc:d2:30:85:df:89:fc:f9:2c:
aa:29:e7:4c:b2:8a:92:74:26:29:5a:c3:3e:fd:93:
94:c7:64:e3:28:82:c4:c4:c4:b0:7d:55:12:f7:19:
e9:bc:64:c3:e8:20:b2:04:c9:ae:72:e1:37:27:f5:
97:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:59:AF:88:43:F7:D9:B1:A6:DF:CF:B1:98:A7:6D:D4:B0:F0:D0:BD
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/5DC6DC14FF1D11EFB665791AC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
14.192.28.0/22
27.116.48.0/21
27.121.100.0/22
43.224.0.0/22
43.224.8.0/22
43.230.212.0/22
43.231.56.0/22
43.239.200.0/22
43.241.140.0-43.241.147.255
43.241.192.0/22
43.242.116.0-43.242.123.255
43.243.36.0/22
43.248.32.0/22
43.249.216.0/22
43.249.228.0-43.249.235.255
43.250.156.0/22
43.250.164.0/22
43.251.72.0/22
43.251.220.0/22
43.252.196.0/22
103.1.100.0/22
103.15.60.0/22
103.21.160.0/22
103.36.80.0/22
103.38.204.0/22
103.39.128.0/22
103.50.150.0/23
103.81.92.0/22
103.84.104.0/23
103.84.198.0/23
103.85.8.0/22
103.86.16.0/22
103.94.192.0/22
103.161.98.0/23
103.175.182.0/23
103.176.10.0/23
103.182.162.0/24
103.206.136.0/22
103.209.64.0/22
103.216.80.0/22
103.226.184.0/22
103.228.144.0/22
103.232.128.0/22
103.238.104.0/21
103.240.76.0/22
103.240.160.0/22
103.240.168.0/22
103.240.204.0-103.240.211.255
103.241.44.0/22
103.241.224.0/22
103.245.196.0/22
103.246.84.0/22
103.249.232.0/22
103.250.136.0/22
103.250.144.0-103.250.167.255
103.250.188.0/22
103.251.16.0/22
103.251.56.0/22
103.251.212.0-103.251.219.255
103.251.224.0/22
113.20.16.0/22
150.107.188.0/22
150.107.232.0/22
150.107.240.0/22
150.107.252.0/22
150.129.52.0/22
150.129.104.0/22
150.129.112.0/22
150.129.148.0/22
150.129.164.0-150.129.171.255
150.129.200.0/21
157.119.204.0/22
163.53.176.0/22
163.53.208.0/22
182.237.8.0/21
183.182.88.0/22
IPv6:
2402:a00::/32
Signature Algorithm: sha256WithRSAEncryption
81:be:4d:2d:63:f4:b5:a2:1e:45:32:79:2f:ac:38:dd:f1:1c:
29:a2:8b:c7:fe:82:24:0a:99:54:f0:14:54:25:34:e8:a6:71:
6b:75:b3:33:68:3d:9d:88:d7:b6:cc:5f:1e:76:1c:b8:c3:95:
2f:02:e6:27:9a:12:21:42:13:e0:a1:e8:b4:0a:83:d8:0c:6a:
a3:34:24:8f:8e:75:74:0d:01:c9:63:de:3b:69:33:7e:fd:bf:
9c:94:90:d7:34:a7:30:0f:6f:f5:44:aa:8c:2b:bd:74:8a:23:
0d:32:b8:46:be:14:1f:05:49:2f:6c:72:c7:86:d7:50:a7:88:
bb:c4:3d:0d:46:5d:69:62:a9:da:8e:a0:e9:93:30:09:27:37:
75:70:81:16:dc:4f:d2:b9:40:23:c2:87:b9:42:60:86:df:ea:
6e:58:ff:a1:7d:a6:75:cd:a8:cd:be:a2:85:4d:ca:bf:e2:66:
1e:26:05:ab:f0:9d:13:88:22:bf:47:1f:07:fc:77:d7:27:a0:
d5:0d:8d:29:c0:6b:47:d4:32:cc:e1:c0:8e:10:4a:fe:f7:f2:
13:be:cc:14:06:85:0d:09:05:a4:c1:4b:3e:ec:5b:7f:27:c2:
96:f3:5a:7a:70:d9:7b:e4:a8:25:be:9d:83:ac:0d:1c:9c:16:
02:32:0a:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 02:26:14 2025 by rpki-client