Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/91BF097EC3D311ED97604930C4F9AE02.roa
File: 91BF097EC3D311ED97604930C4F9AE02.roa (raw, json)
Hash identifier: Ys2/lN+8XNGbV/Bm1Mku3F8MJWj4PrHte6W5S4ptPz0=
Subject key identifier: 29:31:EB:C1:B5:43:09:70:A7:33:F2:31:89:19:B2:21:DB:2A:FE:67
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: BEF6
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/91BF097EC3D311ED97604930C4F9AE02.roa
Signing time: Fri 27 Jun 2025 05:43:08 +0000
ROA not before: Fri 27 Jun 2025 05:43:08 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 150596
IP address blocks: 45.123.9.0/24 maxlen: 24
45.123.11.0/24 maxlen: 24
103.38.200.0/24 maxlen: 24
103.38.201.0/24 maxlen: 24
103.77.42.0/24 maxlen: 24
103.77.43.0/24 maxlen: 24
103.83.145.0/24 maxlen: 24
103.110.16.0/22 maxlen: 22
103.110.16.0/24 maxlen: 24
103.110.17.0/24 maxlen: 24
103.110.18.0/24 maxlen: 24
103.110.19.0/24 maxlen: 24
103.110.180.0/23 maxlen: 24
103.134.114.0/24 maxlen: 24
103.141.91.0/24 maxlen: 24
103.160.28.0/24 maxlen: 24
103.160.29.0/24 maxlen: 24
103.160.132.0/23 maxlen: 24
103.168.177.0/24 maxlen: 24
103.172.59.0/24 maxlen: 24
103.176.176.0/24 maxlen: 24
103.188.127.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 10 Jul 2025 03:15:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 48886 (0xbef6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Validity
Not Before: Jun 27 05:43:08 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=685e2f6b-daa7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:54:78:2d:a6:7f:ce:0f:13:1d:4e:d8:f0:2f:
34:5c:b5:a4:2e:d7:27:55:4c:e5:58:34:b4:f8:00:
94:2a:7d:a6:eb:ac:40:67:a3:58:9c:f5:3a:fd:11:
dd:48:b5:07:a6:f3:ab:52:ac:ff:bc:33:2a:13:21:
74:e8:33:44:9b:56:18:0d:d6:50:1c:e4:67:97:af:
92:9e:68:56:18:fc:45:db:2d:6b:4f:2f:de:18:f8:
41:ae:89:ed:91:ca:70:ab:cb:f8:65:3d:34:7e:d0:
9c:88:e7:0f:d6:be:60:9e:7d:14:10:d9:af:2f:6d:
91:6f:5f:b1:6e:6d:44:35:9c:cb:f7:7e:2d:94:aa:
d6:95:03:14:f1:60:98:3d:63:9f:c3:15:95:99:b0:
78:4e:fa:71:77:de:02:22:8f:85:a4:ae:2a:27:47:
7d:97:52:1e:2c:11:76:bc:d0:79:cd:eb:8e:08:43:
b7:13:c0:d8:da:1b:42:98:e9:d1:73:f7:59:0a:7b:
8b:ac:a4:8e:89:4c:23:b2:bd:56:1f:3b:a6:31:4f:
62:a3:9b:23:49:5e:23:2b:a4:56:b0:c4:41:55:4f:
5d:33:8a:0f:6a:b6:2f:bd:92:68:63:07:6f:c0:82:
62:d2:cd:3b:40:19:7f:ab:68:78:c5:74:fb:ac:1d:
78:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:31:EB:C1:B5:43:09:70:A7:33:F2:31:89:19:B2:21:DB:2A:FE:67
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/91BF097EC3D311ED97604930C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.123.9.0/24
45.123.11.0/24
103.38.200.0/23
103.77.42.0/23
103.83.145.0/24
103.110.16.0/22
103.110.180.0/23
103.134.114.0/24
103.141.91.0/24
103.160.28.0/23
103.160.132.0/23
103.168.177.0/24
103.172.59.0/24
103.176.176.0/24
103.188.127.0/24
Signature Algorithm: sha256WithRSAEncryption
af:8d:fb:f3:72:1a:b1:9e:e7:c6:cf:59:89:01:12:81:00:2d:
ec:e3:5f:b0:ff:19:d7:52:76:26:d0:2c:d0:9c:28:7d:13:fe:
e9:f0:56:c9:ca:9e:dc:58:81:98:be:9a:8c:31:45:45:13:43:
6d:e4:07:56:3d:b8:89:08:4d:5a:9a:e3:18:a5:82:0d:30:17:
33:76:31:cd:3f:d4:30:98:c4:12:f3:14:af:7d:dc:a4:c9:5a:
ec:2a:b4:4e:a5:06:9d:7d:71:8c:8c:07:c6:0b:0d:bb:89:54:
e2:41:8b:9b:0b:d5:25:0f:fd:10:da:1c:d3:2b:df:43:9c:32:
dd:09:0e:84:a8:7f:78:0d:28:e1:a1:80:ad:9c:d9:ce:d3:70:
2e:19:8f:02:40:d1:40:91:9f:49:0a:dc:dd:f0:b1:11:3d:60:
36:70:bd:10:6f:25:a4:da:f7:1a:36:8c:76:3a:19:bf:94:7d:
1c:44:54:19:a8:04:fd:db:f0:1a:d3:b7:91:95:57:0b:35:cd:
36:2c:06:0f:fd:bb:9a:a5:a0:43:33:5a:2d:a1:32:95:d1:25:
12:3e:57:23:43:e1:64:eb:9b:8f:72:66:78:80:b2:10:12:e4:
70:6e:aa:7a:ab:3d:d2:c8:37:5f:b3:f4:7a:07:77:91:90:5a:
d8:aa:23:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 3 10:29:12 2025 by rpki-client