Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/6681804857EC11F09B5BA053C4F9AE02.roa
File: 6681804857EC11F09B5BA053C4F9AE02.roa (raw, json)
Hash identifier: bZkyGIiTT5EiMn4qFP5u12WuKqSnjHw2rn9AjnLCfGQ=
Subject key identifier: B2:70:F0:91:95:E6:1E:65:60:45:98:95:84:03:50:B3:E3:4D:7F:1B
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: C31C
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/6681804857EC11F09B5BA053C4F9AE02.roa
Signing time: Fri 22 Aug 2025 07:55:11 +0000
ROA not before: Fri 22 Aug 2025 07:55:11 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 17665
IP address blocks: 36.255.88.0/22 maxlen: 24
43.230.40.0/22 maxlen: 24
45.117.72.0/22 maxlen: 24
45.118.104.0/22 maxlen: 24
59.152.120.0/22 maxlen: 24
103.27.48.0/22 maxlen: 24
103.38.68.0/23 maxlen: 24
103.38.128.0/22 maxlen: 24
103.57.140.0/22 maxlen: 24
103.58.152.0/22 maxlen: 24
103.59.204.0/22 maxlen: 24
103.88.57.0/24 maxlen: 24
103.88.58.0/24 maxlen: 24
103.88.59.0/24 maxlen: 24
103.92.112.0/24 maxlen: 24
103.92.113.0/24 maxlen: 24
103.92.114.0/24 maxlen: 24
103.92.115.0/24 maxlen: 24
103.99.196.0/23 maxlen: 24
103.99.198.0/23 maxlen: 24
103.135.64.0/24 maxlen: 24
103.135.65.0/24 maxlen: 24
103.136.172.0/22 maxlen: 24
103.142.114.0/23 maxlen: 24
103.144.188.0/23 maxlen: 24
103.147.1.0/24 maxlen: 24
103.158.170.0/23 maxlen: 24
103.159.98.0/24 maxlen: 24
103.159.212.0/23 maxlen: 24
103.161.40.0/23 maxlen: 24
103.164.46.0/23 maxlen: 24
103.165.28.0/23 maxlen: 24
103.168.177.0/24 maxlen: 24
103.168.232.0/23 maxlen: 24
103.171.9.0/24 maxlen: 24
103.171.208.0/24 maxlen: 24
103.175.30.0/24 maxlen: 24
103.175.31.0/24 maxlen: 24
103.176.176.0/24 maxlen: 24
103.176.194.0/23 maxlen: 24
103.177.174.0/23 maxlen: 24
103.178.74.0/24 maxlen: 24
103.178.168.0/23 maxlen: 24
103.179.122.0/24 maxlen: 24
103.182.130.0/23 maxlen: 24
103.184.40.0/24 maxlen: 24
103.184.41.0/24 maxlen: 24
103.186.121.0/24 maxlen: 24
103.186.176.0/24 maxlen: 24
103.199.192.0/22 maxlen: 24
103.203.36.0/22 maxlen: 24
103.206.8.0/24 maxlen: 24
103.206.9.0/24 maxlen: 24
103.206.10.0/24 maxlen: 24
103.206.11.0/24 maxlen: 24
103.209.68.0/22 maxlen: 22
103.209.68.0/24 maxlen: 24
103.209.69.0/24 maxlen: 24
103.209.70.0/24 maxlen: 24
103.209.71.0/24 maxlen: 24
103.215.164.0/22 maxlen: 24
103.244.224.0/24 maxlen: 24
103.245.103.0/24 maxlen: 24
111.223.24.0/22 maxlen: 24
157.119.44.0/22 maxlen: 24
162.12.246.0/23 maxlen: 24
202.148.60.0/22 maxlen: 24
203.189.248.0/22 maxlen: 24
203.192.192.0/20 maxlen: 24
203.192.208.0/22 maxlen: 24
203.192.212.0/24 maxlen: 24
203.192.213.0/24 maxlen: 24
203.192.214.0/24 maxlen: 24
203.192.215.0/24 maxlen: 24
203.192.216.0/24 maxlen: 24
203.192.217.0/24 maxlen: 24
203.192.218.0/24 maxlen: 24
203.192.219.0/24 maxlen: 24
203.192.220.0/22 maxlen: 24
203.192.224.0/23 maxlen: 24
203.192.226.0/24 maxlen: 24
203.192.227.0/24 maxlen: 24
203.192.228.0/22 maxlen: 24
203.192.232.0/22 maxlen: 24
203.192.236.0/24 maxlen: 24
203.192.237.0/24 maxlen: 24
203.192.238.0/23 maxlen: 24
203.192.240.0/20 maxlen: 20
203.192.240.0/24 maxlen: 24
203.192.241.0/24 maxlen: 24
203.192.242.0/24 maxlen: 24
203.192.243.0/24 maxlen: 24
203.192.244.0/24 maxlen: 24
203.192.245.0/24 maxlen: 24
203.192.246.0/24 maxlen: 24
203.192.247.0/24 maxlen: 24
203.192.248.0/24 maxlen: 24
203.192.249.0/24 maxlen: 24
203.192.250.0/24 maxlen: 24
203.192.251.0/24 maxlen: 24
203.192.252.0/24 maxlen: 24
203.192.253.0/24 maxlen: 24
203.192.254.0/24 maxlen: 24
203.192.255.0/24 maxlen: 24
203.194.96.0/24 maxlen: 24
203.194.97.0/24 maxlen: 24
203.194.98.0/24 maxlen: 24
203.194.99.0/24 maxlen: 24
203.194.100.0/24 maxlen: 24
203.194.101.0/24 maxlen: 24
203.194.102.0/24 maxlen: 24
203.194.103.0/24 maxlen: 24
203.194.104.0/24 maxlen: 24
203.194.105.0/24 maxlen: 24
203.194.106.0/24 maxlen: 24
203.194.107.0/24 maxlen: 24
203.194.108.0/24 maxlen: 24
203.194.109.0/24 maxlen: 24
203.194.110.0/24 maxlen: 24
203.194.111.0/24 maxlen: 24
2001:df1:9980::/48 maxlen: 48
2001:df1:9980:1::/64 maxlen: 64
2001:df1:9980:2::/64 maxlen: 64
2001:df1:9980:3::/64 maxlen: 64
2001:df1:9980:4::/64 maxlen: 64
2001:df1:9980:5::/64 maxlen: 64
2001:df2:4c0::/48 maxlen: 48
2404:ba00::/32 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 29 Aug 2025 15:25:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 49948 (0xc31c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Validity
Not Before: Aug 22 07:55:11 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=68a8225e-bdb5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:6b:4b:05:ef:61:4e:cc:51:0b:15:b4:a9:83:
1a:9b:d1:d4:f9:a7:14:96:66:c4:04:ac:bf:61:46:
3c:90:9d:e5:bc:97:be:0e:26:5c:11:f7:7f:12:11:
78:f9:c1:5d:d8:c2:32:a6:dc:13:c0:3f:a4:00:38:
f3:3c:cc:b2:47:be:38:5a:39:cf:8e:1e:7a:53:86:
ee:f7:32:1a:e0:9d:f7:a2:03:31:08:1d:49:ec:c7:
60:fb:d2:4d:e2:25:ca:08:9a:77:ea:d7:b9:8b:85:
b2:9a:52:c5:9c:ca:95:98:ae:c7:7a:7a:68:de:22:
51:9b:5d:d7:48:cb:46:65:9f:16:4d:34:c4:89:07:
90:c3:73:a5:6a:df:8a:1c:58:84:f1:c2:c7:85:f2:
51:08:39:63:89:37:2e:a4:c8:d3:eb:0c:ab:1b:be:
35:c2:c4:34:b3:a8:b9:7e:91:56:56:a4:c1:0f:fe:
7d:3d:1a:2c:3a:87:23:92:81:99:04:85:85:e4:c0:
bb:a8:ba:96:17:8c:f6:65:9a:b8:c4:0a:b7:1b:aa:
f8:b8:4f:dc:26:a7:57:5f:24:1e:b8:6d:4e:74:c9:
f3:3f:82:db:6a:cb:70:19:cd:9f:29:51:f1:15:00:
f9:4a:7d:4e:6a:b5:e6:67:9a:39:17:4c:dd:df:04:
ea:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:70:F0:91:95:E6:1E:65:60:45:98:95:84:03:50:B3:E3:4D:7F:1B
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/6681804857EC11F09B5BA053C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
36.255.88.0/22
43.230.40.0/22
45.117.72.0/22
45.118.104.0/22
59.152.120.0/22
103.27.48.0/22
103.38.68.0/23
103.38.128.0/22
103.57.140.0/22
103.58.152.0/22
103.59.204.0/22
103.88.57.0-103.88.59.255
103.92.112.0/22
103.99.196.0/22
103.135.64.0/23
103.136.172.0/22
103.142.114.0/23
103.144.188.0/23
103.147.1.0/24
103.158.170.0/23
103.159.98.0/24
103.159.212.0/23
103.161.40.0/23
103.164.46.0/23
103.165.28.0/23
103.168.177.0/24
103.168.232.0/23
103.171.9.0/24
103.171.208.0/24
103.175.30.0/23
103.176.176.0/24
103.176.194.0/23
103.177.174.0/23
103.178.74.0/24
103.178.168.0/23
103.179.122.0/24
103.182.130.0/23
103.184.40.0/23
103.186.121.0/24
103.186.176.0/24
103.199.192.0/22
103.203.36.0/22
103.206.8.0/22
103.209.68.0/22
103.215.164.0/22
103.244.224.0/24
103.245.103.0/24
111.223.24.0/22
157.119.44.0/22
162.12.246.0/23
202.148.60.0/22
203.189.248.0/22
203.192.192.0/18
203.194.96.0/20
IPv6:
2001:df1:9980::/48
2001:df2:4c0::/48
2404:ba00::/32
Signature Algorithm: sha256WithRSAEncryption
87:06:bf:af:e6:54:34:34:f1:2c:b2:ed:cd:3f:9f:9a:1b:c2:
dc:d9:92:25:f8:51:d0:54:ce:67:f2:12:88:16:90:67:a7:64:
78:6c:1a:bb:07:c5:5b:a5:e6:d3:01:a9:c6:ed:c9:ac:b7:1e:
45:4f:a7:6c:52:0c:33:e4:f5:bd:b4:dc:d8:dc:11:48:3b:d6:
cf:5e:d2:37:c8:57:6c:40:ef:da:59:c5:b5:ec:f4:31:81:ae:
2a:19:b6:f7:2e:0c:02:4b:0f:13:fe:e0:68:fd:d6:4f:39:ab:
e5:c6:7d:cb:23:0a:8c:c6:78:8b:17:57:8c:e6:0d:bf:38:8c:
48:e7:5f:6a:a4:23:92:56:f9:5e:9d:31:55:56:a5:06:3f:56:
21:12:87:75:22:ea:d2:f1:a1:24:38:33:9a:3b:6e:e7:25:cf:
52:74:93:32:3a:87:54:66:49:fa:e6:9c:46:71:60:d9:9e:31:
9c:ba:70:e2:de:c5:ca:dd:04:77:a9:6d:44:50:dd:d1:4b:47:
02:9a:64:ef:fe:d9:d4:16:0a:35:24:bb:48:f6:86:ab:e8:09:
40:c7:24:1f:12:60:9a:08:97:33:86:df:cb:e6:f4:ac:2a:18:
5b:d6:6f:d0:8d:6d:4c:81:2c:61:e2:43:19:45:aa:b6:29:a6:
9c:f7:33:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 02:27:53 2025 by rpki-client