Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/6E44FA5E138011F0BD043B1DC4F9AE02.roa
File: 6E44FA5E138011F0BD043B1DC4F9AE02.roa (raw, json)
Hash identifier: OMeyOl/k+b3FJuX1jVdPNeR4saro49qdmFG5D/xpIOg=
Subject key identifier: 43:66:1D:4F:A2:1C:FB:3D:2F:30:14:2A:29:31:4F:0F:3A:EE:FB:0D
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: B65B
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/6E44FA5E138011F0BD043B1DC4F9AE02.roa
Signing time: Thu 08 May 2025 16:16:34 +0000
ROA not before: Thu 08 May 2025 16:16:34 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 141514
IP address blocks: 103.160.126.0/23 maxlen: 24
103.170.214.0/23 maxlen: 24
103.173.240.0/23 maxlen: 24
103.175.134.0/23 maxlen: 24
103.175.190.0/23 maxlen: 24
103.177.82.0/23 maxlen: 24
103.177.112.0/23 maxlen: 24
103.177.204.0/23 maxlen: 24
103.178.122.0/23 maxlen: 24
103.178.126.0/23 maxlen: 24
103.181.112.0/23 maxlen: 24
103.183.228.0/23 maxlen: 24
103.184.104.0/23 maxlen: 24
103.185.234.0/23 maxlen: 24
103.186.54.0/23 maxlen: 24
103.187.228.0/23 maxlen: 24
2400:7f60::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 19 May 2025 18:54:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 46683 (0xb65b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Validity
Not Before: May 8 16:16:34 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=681cd8e1-bad4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:94:3a:06:ad:61:f2:28:cd:5b:f9:6d:c7:f0:
1d:aa:e3:5e:a2:5d:e5:f7:33:f1:b5:c7:73:03:f9:
7b:24:02:a9:5f:db:23:bf:e2:13:55:1e:d1:7e:af:
89:6c:40:b9:52:be:8e:a4:60:00:81:db:3b:b9:5d:
b6:39:16:29:9d:3e:c5:1f:1e:f7:8e:15:d0:e0:3b:
1f:e4:4a:49:81:8b:8e:40:68:7b:a0:90:a7:88:22:
68:cb:02:18:0a:2c:2e:65:c0:20:ef:62:03:f9:f2:
fd:2e:02:30:09:81:20:99:f1:f8:d2:22:32:91:54:
0c:81:ab:19:a0:4e:75:94:81:e9:68:48:6e:e1:e6:
54:fe:8e:63:c9:e2:9f:d2:18:4d:dd:04:cd:3f:3d:
7f:22:d9:b7:a9:73:c6:6e:d6:dc:02:c4:a6:e4:de:
21:ae:34:5c:8a:dd:42:5c:6b:cc:ea:ff:5e:0d:87:
fd:83:f0:fc:fe:5e:47:6c:99:3a:15:72:52:92:a3:
0f:93:1a:c8:68:d4:a4:55:d7:9d:b8:81:1b:a4:b6:
94:ef:65:19:26:20:9e:17:8d:a6:64:8f:cd:53:79:
c7:a7:ea:ae:10:f7:0d:6e:25:3a:4d:34:92:75:b3:
89:bd:c0:b4:aa:36:9c:68:10:da:2b:e6:8e:d0:a0:
c6:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:66:1D:4F:A2:1C:FB:3D:2F:30:14:2A:29:31:4F:0F:3A:EE:FB:0D
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/6E44FA5E138011F0BD043B1DC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.160.126.0/23
103.170.214.0/23
103.173.240.0/23
103.175.134.0/23
103.175.190.0/23
103.177.82.0/23
103.177.112.0/23
103.177.204.0/23
103.178.122.0/23
103.178.126.0/23
103.181.112.0/23
103.183.228.0/23
103.184.104.0/23
103.185.234.0/23
103.186.54.0/23
103.187.228.0/23
IPv6:
2400:7f60::/32
Signature Algorithm: sha256WithRSAEncryption
8d:7e:c4:51:4b:36:ad:f1:03:82:c2:e7:12:d9:76:25:50:32:
47:ad:26:11:66:56:27:ed:43:34:86:ea:23:91:f0:21:ff:ea:
23:4b:e7:43:f6:d4:cb:74:10:f6:02:cd:4f:b7:0a:06:ac:ca:
a0:79:e7:72:27:32:c6:d4:fd:f8:0e:e6:de:16:27:47:fe:fd:
a9:fd:65:6f:cc:06:0b:68:4d:73:ac:f6:59:58:e4:82:88:1a:
b8:03:19:40:dc:ba:1b:b5:76:f5:4a:58:92:47:d6:39:cb:44:
c7:c2:84:4f:23:77:5a:cd:8a:95:42:dc:01:3e:ff:8a:19:fa:
0f:c3:ab:6e:aa:d8:f3:55:ba:2f:82:a0:9f:a1:14:10:2a:38:
6c:75:e8:38:c9:fc:25:f0:e4:8f:0a:92:3c:cb:69:b5:04:73:
2b:16:34:fd:85:d1:0e:b7:8a:8e:80:c3:44:d7:33:b8:62:b7:
37:e0:69:03:a2:59:f3:e9:cd:de:85:26:ea:25:6b:a3:9d:e9:
6d:ac:99:d8:23:00:aa:7a:67:cd:b3:8f:5c:ba:8b:3a:5f:17:
85:de:03:37:12:3d:48:5f:eb:45:9f:6a:39:31:17:47:c3:78:
54:21:2b:72:cf:da:61:a9:7a:c5:fc:6c:d4:a3:f8:e8:df:85:
f5:a7:4a:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 00:40:05 2025 by rpki-client