Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/83239BB20A1E11F0BAD8A91EC4F9AE02.roa
File: 83239BB20A1E11F0BAD8A91EC4F9AE02.roa (raw, json)
Hash identifier: NS6deBx3e5CjRnBVC52Q87YTBO9Cz9nriGR8bbJwfWs=
Subject key identifier: 27:12:EA:07:01:B3:60:DE:9D:0E:66:58:B4:66:E0:1A:0B:B6:60:F6
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: BE9F
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/83239BB20A1E11F0BAD8A91EC4F9AE02.roa
Signing time: Thu 19 Jun 2025 09:17:17 +0000
ROA not before: Thu 19 Jun 2025 09:17:17 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 151106
IP address blocks: 43.243.76.0/24 maxlen: 24
103.157.50.0/23 maxlen: 24
103.161.26.0/23 maxlen: 24
103.177.226.0/23 maxlen: 24
103.179.96.0/23 maxlen: 24
103.179.118.0/23 maxlen: 24
103.181.84.0/23 maxlen: 24
103.183.216.0/23 maxlen: 24
103.187.92.0/23 maxlen: 24
103.189.82.0/23 maxlen: 24
103.214.230.0/23 maxlen: 24
103.215.96.0/23 maxlen: 24
103.243.232.0/24 maxlen: 24
2001:df2:bec0::/47 maxlen: 47
2001:df2:bec0::/48 maxlen: 48
2001:df2:bec1::/48 maxlen: 48
2001:df5:4980::/48 maxlen: 48
2001:df5:a7c0::/48 maxlen: 48
2001:df5:af40::/48 maxlen: 48
2001:df5:b340::/48 maxlen: 48
2402:7a0::/32 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 09 Jul 2025 15:29:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 48799 (0xbe9f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Validity
Not Before: Jun 19 09:17:17 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6853d59d-bfca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:f3:a6:45:c9:98:75:b0:71:24:f4:22:1d:c1:
5a:17:d2:4d:7f:1b:86:6d:b9:d5:44:da:6d:e0:24:
23:8d:f1:80:ab:85:d9:ea:11:fa:79:03:45:df:3d:
84:71:bd:5f:ba:53:78:16:08:0e:86:92:24:cf:75:
f0:b9:fc:eb:37:e3:65:3b:60:9b:0e:46:d9:e9:b1:
60:56:6b:6f:f0:36:a3:8c:dd:60:20:4b:84:0b:86:
25:73:e4:f3:d7:44:ed:34:60:47:e5:1b:f3:67:19:
73:a8:c2:61:96:d3:88:dd:09:55:dd:94:52:4b:cc:
ef:69:2c:ba:78:66:74:29:15:8a:fc:79:85:ca:b3:
0a:f2:a6:48:d2:4e:d7:16:81:be:72:85:01:4c:0d:
59:1a:90:a0:41:74:9e:2c:48:38:d3:01:73:1a:e3:
68:30:77:60:5e:2b:31:4f:61:96:be:ff:a1:fc:21:
c6:cc:cd:f2:2c:3d:73:6d:db:47:dc:69:67:65:6b:
b7:3e:7c:4a:f2:37:5b:76:6b:07:75:7f:19:8c:6b:
ab:f7:dc:0b:08:7b:d1:55:89:fa:9d:40:cf:5f:2a:
91:d7:a7:d1:35:c9:3e:0d:6e:7f:81:cd:34:83:46:
9f:cb:91:c1:68:07:43:dc:6d:fe:2d:4d:74:df:29:
89:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:12:EA:07:01:B3:60:DE:9D:0E:66:58:B4:66:E0:1A:0B:B6:60:F6
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/83239BB20A1E11F0BAD8A91EC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
43.243.76.0/24
103.157.50.0/23
103.161.26.0/23
103.177.226.0/23
103.179.96.0/23
103.179.118.0/23
103.181.84.0/23
103.183.216.0/23
103.187.92.0/23
103.189.82.0/23
103.214.230.0/23
103.215.96.0/23
103.243.232.0/24
IPv6:
2001:df2:bec0::/47
2001:df5:4980::/48
2001:df5:a7c0::/48
2001:df5:af40::/48
2001:df5:b340::/48
2402:7a0::/32
Signature Algorithm: sha256WithRSAEncryption
b0:4c:8d:38:e7:58:1a:74:48:ba:7d:6e:1a:1c:0a:8d:05:a1:
a3:7a:a9:53:d1:76:ef:1f:28:36:8d:4e:a3:c5:20:fa:ea:00:
9f:a0:3b:8a:f4:da:78:18:28:88:ef:bc:ac:da:90:7c:df:8b:
b1:2e:b9:61:a0:55:07:e8:c4:0c:4e:9a:5a:ba:2a:8c:82:da:
40:88:eb:6e:e8:f5:b6:49:bc:7b:60:4b:f8:76:56:d1:54:98:
e5:14:eb:94:a0:68:ce:d5:3b:37:66:a1:4f:a5:27:5e:c7:40:
ee:44:35:b5:c6:1e:77:f1:bd:df:53:2e:d0:3a:49:83:5d:d3:
19:60:ab:fc:18:6c:bb:1c:a5:2a:fa:28:ef:a8:74:e9:8f:b2:
7e:26:84:e9:e4:79:3c:fa:74:e7:5c:cc:0f:57:5e:5f:f9:4e:
16:23:91:89:86:d2:9a:be:17:2c:fb:7e:7c:de:08:f0:f0:d3:
97:ea:0b:95:51:05:af:ad:d6:12:48:58:ab:1e:78:60:e4:82:
d1:c8:35:40:10:c8:75:94:d9:69:a8:94:c1:d2:14:b3:18:0b:
56:80:38:02:12:d1:6a:8a:11:34:45:9d:d9:9f:f8:dd:2f:23:
62:3a:ae:37:ea:24:ea:60:e3:d5:1e:83:da:8c:d3:14:c6:cd:
0a:76:1d:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 3 02:04:19 2025 by rpki-client