Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/925F2824F4FE11EF9D805215C4F9AE02.roa
File: 925F2824F4FE11EF9D805215C4F9AE02.roa (raw, json)
Hash identifier: bkykLK7Daz2Cf+Ik9reAibKvvIsrnNTBQFSkHFhZAzI=
Subject key identifier: DE:75:A9:C7:01:C2:47:DE:B0:B9:D3:4B:08:F1:B2:1C:56:25:1A:B6
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: B21E
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/925F2824F4FE11EF9D805215C4F9AE02.roa
Signing time: Thu 08 May 2025 15:59:53 +0000
ROA not before: Thu 08 May 2025 15:59:53 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 133982
IP address blocks: 45.118.156.0/24 maxlen: 24
45.118.157.0/24 maxlen: 24
45.118.158.0/24 maxlen: 24
45.118.159.0/24 maxlen: 24
103.46.200.0/24 maxlen: 24
103.46.201.0/24 maxlen: 24
103.46.202.0/24 maxlen: 24
103.46.203.0/24 maxlen: 24
103.48.196.0/22 maxlen: 24
103.56.228.0/24 maxlen: 24
103.56.229.0/24 maxlen: 24
103.56.230.0/24 maxlen: 24
103.56.231.0/24 maxlen: 24
103.57.84.0/22 maxlen: 24
103.85.143.0/24 maxlen: 24
103.87.56.0/24 maxlen: 24
103.87.57.0/24 maxlen: 24
103.87.58.0/24 maxlen: 24
103.87.59.0/24 maxlen: 24
103.92.40.0/22 maxlen: 24
103.95.80.0/24 maxlen: 24
103.95.81.0/24 maxlen: 24
103.95.82.0/24 maxlen: 24
103.95.83.0/24 maxlen: 24
103.108.4.0/24 maxlen: 24
103.108.5.0/24 maxlen: 24
103.108.6.0/24 maxlen: 24
103.108.7.0/24 maxlen: 24
103.110.48.0/24 maxlen: 24
103.110.49.0/24 maxlen: 24
103.120.50.0/24 maxlen: 24
103.120.51.0/24 maxlen: 24
103.139.56.0/24 maxlen: 24
103.157.227.0/24 maxlen: 24
103.160.26.0/23 maxlen: 24
103.161.56.0/23 maxlen: 24
103.164.188.0/24 maxlen: 24
103.170.80.0/23 maxlen: 24
103.172.72.0/23 maxlen: 24
103.177.120.0/23 maxlen: 24
103.211.12.0/24 maxlen: 24
103.211.13.0/24 maxlen: 24
103.211.14.0/24 maxlen: 24
103.211.15.0/24 maxlen: 24
103.211.16.0/24 maxlen: 24
103.211.17.0/24 maxlen: 24
103.211.18.0/24 maxlen: 24
103.211.19.0/24 maxlen: 24
103.211.52.0/24 maxlen: 24
103.211.53.0/24 maxlen: 24
103.211.54.0/24 maxlen: 24
103.211.55.0/24 maxlen: 24
103.212.144.0/24 maxlen: 24
103.212.145.0/24 maxlen: 24
103.212.146.0/24 maxlen: 24
103.212.147.0/24 maxlen: 24
103.212.156.0/24 maxlen: 24
103.212.157.0/24 maxlen: 24
103.212.158.0/24 maxlen: 24
103.212.159.0/24 maxlen: 24
103.214.60.0/24 maxlen: 24
103.214.61.0/24 maxlen: 24
103.214.62.0/24 maxlen: 24
103.214.63.0/24 maxlen: 24
110.235.216.0/22 maxlen: 24
110.235.224.0/24 maxlen: 24
110.235.225.0/24 maxlen: 24
110.235.226.0/24 maxlen: 24
110.235.227.0/24 maxlen: 24
110.235.228.0/24 maxlen: 24
110.235.229.0/24 maxlen: 24
110.235.230.0/24 maxlen: 24
110.235.231.0/24 maxlen: 24
110.235.232.0/24 maxlen: 24
110.235.233.0/24 maxlen: 24
110.235.234.0/24 maxlen: 24
110.235.235.0/24 maxlen: 24
110.235.236.0/24 maxlen: 24
110.235.237.0/24 maxlen: 24
110.235.238.0/24 maxlen: 24
110.235.239.0/24 maxlen: 24
139.5.240.0/24 maxlen: 24
139.5.241.0/24 maxlen: 24
139.5.242.0/24 maxlen: 24
139.5.243.0/24 maxlen: 24
139.5.248.0/24 maxlen: 24
139.5.249.0/24 maxlen: 24
139.5.250.0/24 maxlen: 24
139.5.251.0/24 maxlen: 24
139.5.252.0/22 maxlen: 24
144.48.72.0/22 maxlen: 24
146.196.32.0/22 maxlen: 24
146.196.36.0/24 maxlen: 24
146.196.37.0/24 maxlen: 24
146.196.38.0/24 maxlen: 24
146.196.39.0/24 maxlen: 24
160.202.36.0/22 maxlen: 24
192.140.152.0/22 maxlen: 24
202.173.124.0/22 maxlen: 24
2401:9640::/32 maxlen: 32
2401:9640:800::/37 maxlen: 37
2401:9640:1000::/37 maxlen: 37
2401:9640:1800::/37 maxlen: 37
2401:9640:2000::/37 maxlen: 37
2401:9640:2800::/37 maxlen: 37
2401:9640:3000::/37 maxlen: 37
2401:9640:3800::/37 maxlen: 37
2401:9640:4000::/37 maxlen: 37
2401:9640:4800::/37 maxlen: 37
2401:9640:5000::/37 maxlen: 37
2401:9640:5800::/37 maxlen: 37
2401:9640:6000::/37 maxlen: 37
2401:9640:6800::/37 maxlen: 37
2401:9640:7000::/37 maxlen: 37
2401:9640:7800::/37 maxlen: 37
2401:9640:8000::/37 maxlen: 37
2401:9640:8800::/37 maxlen: 37
2401:9640:9000::/37 maxlen: 37
2401:9640:9800::/37 maxlen: 37
2401:9640:a000::/37 maxlen: 37
2401:9640:a800::/37 maxlen: 37
2401:9640:b000::/37 maxlen: 37
2401:9640:b800::/37 maxlen: 37
2401:9640:c000::/37 maxlen: 37
2401:9640:c800::/37 maxlen: 37
2401:9640:d000::/37 maxlen: 37
2401:9640:d800::/37 maxlen: 37
2401:9640:e000::/37 maxlen: 37
2401:9640:e800::/37 maxlen: 37
2401:9640:f000::/37 maxlen: 37
2401:9640:f800::/37 maxlen: 37
2407:aec0::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 21 May 2025 07:03:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 45598 (0xb21e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Validity
Not Before: May 8 15:59:53 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=681cd4f9-8700
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:36:8a:c2:2c:34:76:3f:03:91:a3:75:1c:cc:
42:50:a9:3a:10:31:4e:c6:8a:55:86:07:8a:25:0a:
39:49:05:a4:83:89:43:8a:da:84:ac:21:cc:61:db:
0e:61:41:0b:5e:53:e7:14:16:81:f6:10:7e:d2:6f:
5c:f9:0c:e5:6c:bf:55:a4:af:39:ab:2b:08:a0:eb:
f0:f6:ea:d6:d1:4e:ce:ae:6c:4b:7c:7a:fc:c1:e1:
3b:04:b2:4c:12:ec:8f:80:82:49:dc:32:69:48:60:
b9:c7:86:5f:ae:58:6a:b8:e7:6b:a9:2c:c3:6c:bc:
a3:38:90:38:ba:54:9d:ae:2b:36:74:1d:d4:1b:fa:
2e:e3:85:21:d2:ce:8c:bf:29:ff:52:aa:17:4a:3f:
24:0c:dd:5d:6d:84:10:c7:4c:46:47:2b:84:8e:8a:
1a:a6:9e:e8:ab:90:04:9f:a2:9d:d1:f3:9e:10:e0:
a3:3d:6c:c2:4a:de:91:a2:2d:dc:c6:c4:b4:19:6b:
14:fb:31:49:14:06:c5:1d:7f:c8:82:f3:03:d9:a2:
ff:d2:d5:e0:7c:c1:3a:8d:ad:c6:92:ac:a7:48:65:
83:88:3c:52:44:b8:81:5c:e2:78:5c:9a:8f:62:cf:
1b:6b:96:26:f1:15:90:36:d2:49:1f:8e:0a:73:07:
fc:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:75:A9:C7:01:C2:47:DE:B0:B9:D3:4B:08:F1:B2:1C:56:25:1A:B6
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/925F2824F4FE11EF9D805215C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.118.156.0/22
103.46.200.0/22
103.48.196.0/22
103.56.228.0/22
103.57.84.0/22
103.85.143.0/24
103.87.56.0/22
103.92.40.0/22
103.95.80.0/22
103.108.4.0/22
103.110.48.0/23
103.120.50.0/23
103.139.56.0/24
103.157.227.0/24
103.160.26.0/23
103.161.56.0/23
103.164.188.0/24
103.170.80.0/23
103.172.72.0/23
103.177.120.0/23
103.211.12.0-103.211.19.255
103.211.52.0/22
103.212.144.0/22
103.212.156.0/22
103.214.60.0/22
110.235.216.0/22
110.235.224.0/20
139.5.240.0/22
139.5.248.0/21
144.48.72.0/22
146.196.32.0/21
160.202.36.0/22
192.140.152.0/22
202.173.124.0/22
IPv6:
2401:9640::/32
2407:aec0::/32
Signature Algorithm: sha256WithRSAEncryption
85:66:b7:b4:45:2f:96:16:60:03:57:fa:96:bd:51:55:b6:f6:
a3:7d:7c:11:bc:ca:45:08:35:b2:a7:2f:9a:94:5e:51:a0:a8:
70:14:57:a3:07:62:c5:73:01:04:e9:33:fc:aa:02:59:0e:38:
ac:f4:da:9d:b8:eb:1f:43:12:14:62:bc:c8:47:69:e8:06:47:
df:ea:67:1e:a6:74:c4:82:ad:7d:6d:30:d7:3a:09:7a:38:96:
3c:85:56:02:62:94:48:bf:5d:50:a8:4e:89:22:39:f8:1c:0d:
d0:c1:df:26:19:e7:4e:52:23:7d:36:60:6f:aa:6e:86:60:98:
6d:d0:7b:3d:2a:03:94:f3:3f:f1:ed:75:35:7e:42:cd:8f:56:
9f:9e:91:b3:e5:fe:ac:88:a0:ca:aa:ed:ae:03:41:89:90:7b:
25:2e:a9:1b:70:3a:cb:98:02:45:38:5a:df:c1:0e:59:29:87:
64:04:98:f7:06:55:ad:49:95:65:17:9d:80:f1:96:74:f6:ce:
ca:dd:de:2a:52:ef:de:38:5a:95:19:84:07:d0:80:5b:b8:25:
95:54:18:11:05:09:7b:00:ae:97:8d:fc:be:b2:7c:ac:2e:0b:
44:d9:dc:28:a1:ae:37:1e:bf:25:3d:42:53:16:c2:af:25:bc:
97:a4:80:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 14 11:22:11 2025 by rpki-client