Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/A92274B64B4411F09D51D12DC4F9AE02.roa
File: A92274B64B4411F09D51D12DC4F9AE02.roa (raw, json)
Hash identifier: 78ay7jkBTbw/QWlDbk8SXAiV+WIuDxh/ajbqJ6mJowc=
Subject key identifier: CA:64:AE:FA:67:A0:5E:3E:13:BC:35:76:E4:C4:40:A9:9F:F5:23:F5
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: BE51
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/A92274B64B4411F09D51D12DC4F9AE02.roa
Signing time: Tue 17 Jun 2025 06:31:12 +0000
ROA not before: Tue 17 Jun 2025 06:31:12 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 132556
IP address blocks: 43.224.156.0/22 maxlen: 22
43.224.156.0/24 maxlen: 24
43.224.157.0/24 maxlen: 24
43.224.158.0/24 maxlen: 24
43.224.159.0/24 maxlen: 24
45.123.0.0/22 maxlen: 24
45.125.116.0/22 maxlen: 24
103.6.156.0/22 maxlen: 22
103.6.156.0/24 maxlen: 24
103.6.157.0/24 maxlen: 24
103.6.158.0/24 maxlen: 24
103.6.159.0/24 maxlen: 24
103.16.12.0/23 maxlen: 24
103.16.14.0/24 maxlen: 24
103.38.240.0/22 maxlen: 24
103.94.100.0/24 maxlen: 24
103.94.101.0/24 maxlen: 24
103.157.118.0/23 maxlen: 24
103.212.95.0/24 maxlen: 24
103.231.216.0/22 maxlen: 24
103.242.236.0/22 maxlen: 24
103.245.188.0/23 maxlen: 23
103.245.188.0/24 maxlen: 24
103.245.189.0/24 maxlen: 24
137.59.76.0/22 maxlen: 24
157.119.208.0/22 maxlen: 24
220.158.140.0/22 maxlen: 24
2001:df0:45d::/48 maxlen: 48
2404:7a40::/32 maxlen: 32
2404:7a40::/36 maxlen: 36
2404:7a40::/46 maxlen: 46
2404:7a40::/48 maxlen: 48
2404:7a40:1::/48 maxlen: 48
2404:7a40:2::/48 maxlen: 48
2404:7a40:3::/48 maxlen: 48
2404:7a40:4::/46 maxlen: 46
2404:7a40:4::/48 maxlen: 48
2404:7a40:5::/48 maxlen: 48
2404:7a40:6::/48 maxlen: 48
2404:7a40:7::/48 maxlen: 48
2404:7a40:8::/46 maxlen: 46
2404:7a40:8::/48 maxlen: 48
2404:7a40:9::/48 maxlen: 48
2404:7a40:a::/48 maxlen: 48
2404:7a40:b::/48 maxlen: 48
2404:7a40:c::/46 maxlen: 46
2404:7a40:c::/48 maxlen: 48
2404:7a40:d::/48 maxlen: 48
2404:7a40:e::/48 maxlen: 48
2404:7a40:f::/48 maxlen: 48
2404:7a40:10::/46 maxlen: 46
2404:7a40:10::/48 maxlen: 48
2404:7a40:11::/48 maxlen: 48
2404:7a40:12::/48 maxlen: 48
2404:7a40:13::/48 maxlen: 48
2404:7a40:14::/46 maxlen: 46
2404:7a40:14::/48 maxlen: 48
2404:7a40:15::/48 maxlen: 48
2404:7a40:18::/46 maxlen: 46
2404:7a40:1c::/46 maxlen: 46
2404:7a40:20::/46 maxlen: 46
2404:7a40:24::/46 maxlen: 46
2404:7a40:1000::/36 maxlen: 36
2404:7a40:1000::/48 maxlen: 48
2404:7a40:1001::/48 maxlen: 48
2404:7a40:1002::/48 maxlen: 48
2404:7a40:1003::/48 maxlen: 48
2404:7a40:1004::/48 maxlen: 48
2404:7a40:1005::/48 maxlen: 48
2404:7a40:2000::/36 maxlen: 36
2404:7a40:2000::/48 maxlen: 48
2404:7a40:2001::/48 maxlen: 48
2404:7a40:2002::/48 maxlen: 48
2404:7a40:2003::/48 maxlen: 48
2404:7a40:2004::/48 maxlen: 48
2404:7a40:2005::/48 maxlen: 48
2404:7a40:2006::/48 maxlen: 48
2404:7a40:2007::/48 maxlen: 48
2404:7a40:3000::/36 maxlen: 36
2404:7a40:4000::/36 maxlen: 36
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 10 Jul 2025 03:15:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 48721 (0xbe51)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Validity
Not Before: Jun 17 06:31:12 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=68510baf-da0b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:76:75:58:f0:96:0b:80:0a:c8:f6:77:13:3e:
a1:17:91:3e:d6:d7:d0:0f:59:01:6a:eb:11:28:13:
c9:6c:d9:3c:98:f0:b7:53:4f:fa:f0:d2:92:3f:c3:
58:06:3d:ad:4e:bc:bf:d1:1a:de:13:dd:dd:ad:d9:
bf:81:19:40:df:65:57:de:da:ae:ab:3f:35:63:b3:
78:ec:99:65:71:65:27:fc:1b:f0:7c:57:fc:bc:12:
91:43:e9:70:24:0b:d0:b7:e8:34:5f:70:05:89:8d:
b5:68:57:ad:b9:a1:73:ab:9d:26:ce:a3:fb:8a:27:
e9:4d:4e:35:c8:ed:76:d5:ff:20:9a:41:af:b4:12:
d7:69:ec:16:62:8f:4f:42:2e:a1:d3:f6:8d:a2:d5:
62:7d:5f:a7:20:16:33:52:80:0d:e6:15:55:76:c2:
4c:c5:18:39:d0:2a:4e:fd:ec:68:65:66:57:98:f3:
39:fd:9a:fa:79:44:01:9f:42:d6:02:0b:50:d7:cd:
0f:c2:00:ed:43:f6:36:e5:53:d1:0e:88:8a:07:88:
ad:22:fd:e6:92:a8:60:23:29:a8:44:da:8c:75:1e:
a3:fd:06:7c:69:da:e4:bd:a6:8c:57:5a:4e:a4:d2:
20:31:fb:c2:90:53:74:9b:d1:38:79:c0:81:98:72:
dd:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:64:AE:FA:67:A0:5E:3E:13:BC:35:76:E4:C4:40:A9:9F:F5:23:F5
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/A92274B64B4411F09D51D12DC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
43.224.156.0/22
45.123.0.0/22
45.125.116.0/22
103.6.156.0/22
103.16.12.0-103.16.14.255
103.38.240.0/22
103.94.100.0/23
103.157.118.0/23
103.212.95.0/24
103.231.216.0/22
103.242.236.0/22
103.245.188.0/23
137.59.76.0/22
157.119.208.0/22
220.158.140.0/22
IPv6:
2001:df0:45d::/48
2404:7a40::/32
Signature Algorithm: sha256WithRSAEncryption
12:a1:c6:7a:e4:ef:e9:d8:a7:70:93:72:70:9d:8f:ea:f6:3b:
95:46:22:44:c0:ac:11:3c:4e:9e:b4:01:7c:0f:3c:b6:3a:01:
85:38:c6:b0:3f:29:d3:1d:4c:32:a9:90:8b:1c:14:39:87:a1:
31:88:86:97:62:c9:8c:16:98:05:dd:67:35:e9:d1:9c:0d:9a:
33:49:44:74:cb:80:ae:eb:7a:01:a6:da:4f:f7:a9:30:cf:9f:
4a:3d:bb:6b:9d:f0:da:64:03:88:b0:9f:8e:bc:56:85:44:0f:
da:28:6a:a7:99:87:d3:54:7e:53:f0:70:8a:42:6d:cb:ff:f1:
08:1f:07:89:76:bc:52:57:65:3e:13:07:37:df:b9:2e:2c:e3:
1f:86:a9:3b:a1:62:7e:30:65:5d:17:8e:7e:e9:1c:c9:ac:7b:
2a:bc:07:7a:16:26:88:81:52:44:60:a1:e7:e2:c6:cd:6a:d4:
c8:83:54:a8:55:28:e1:57:6b:dd:97:74:2a:2c:f1:09:7f:10:
06:0c:60:22:98:68:59:0e:3e:3e:33:c7:b3:db:19:ba:8e:5d:
df:6e:aa:a1:f3:34:5b:51:6e:81:9c:a9:f0:81:a1:ac:a8:a1:
e4:77:cd:d3:b4:c5:de:14:88:12:ca:92:30:6a:f0:47:28:92:
0b:00:5a:66
-----BEGIN CERTIFICATE-----
MIIF6TCCBNGgAwIBAgIDAL5RMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5
MThFREIyMTEwLwYDVQQFEygyOTZFREI2NEYzQUY2RTlEOTgwOTMyRTgxNkY5NTk4
M0UzQUJDODIzMB4XDTI1MDYxNzA2MzExMloXDTI2MDcwMTAwMDAwMFowGDEWMBQG
A1UEAxMNNjg1MTBiYWYtZGEwYjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAK52dVjwlguACsj2dxM+oReRPtbX0A9ZAWrrESgTyWzZPJjwt1NP+vDSkj/D
WAY9rU68v9Ea3hPd3a3Zv4EZQN9lV97arqs/NWOzeOyZZXFlJ/wb8HxX/LwSkUPp
cCQL0LfoNF9wBYmNtWhXrbmhc6udJs6j+4on6U1ONcjtdtX/IJpBr7QS12nsFmKP
T0IuodP2jaLVYn1fpyAWM1KADeYVVXbCTMUYOdAqTv3saGVmV5jzOf2a+nlEAZ9C
1gILUNfND8IA7UP2NuVT0Q6IigeIrSL95pKoYCMpqETajHUeo/0GfGna5L2mjFda
TqTSIDH7wpBTdJvROHnAgZhy3VECAwEAAaOCAwwwggMIMB0GA1UdDgQWBBTKZK76
Z6BePhO8NXbkxECpn/Uj9TAfBgNVHSMEGDAWgBQpbttk869unZgJMugW+VmD46vI
IzAOBgNVHQ8BAf8EBAMCB4AwgYMGA1UdHwR8MHoweKB2oHSGcnJzeW5jOi8vcnBr
aS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkxOEVEQjIvMkE0M0UzMEM3
MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvS1c3YlpQT3ZicDJZQ1RMb0Z2bFpnLU9y
eUNNLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr
aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3
MkZEMUZGMi9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5Q00uY2VyMEoGA1UdIAEB
/wRAMD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBu
aWMubmV0L1JQS0kvQ1BTLnBkZjCBywYIKwYBBQUHAQsEgb4wgbswgYMGCCsGAQUF
BzALhndyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MThFREIyLzJBNDNFMzBDNzBFOTExRTJCMzZENEI2QjI5NzlCQjIwL0E5MjI3NEI2
NEI0NDExRjA5RDUxRDEyREM0RjlBRTAyLnJvYTAzBggrBgEFBQcwDYYnaHR0cHM6
Ly9ycmRwLmFwbmljLm5ldC9ub3RpZmljYXRpb24ueG1sMIGVBggrBgEFBQcBBwEB
/wSBhTCBgjBoBAIAATBiAwQCK+CcAwQCLXsAAwQCLX10AwQCZwacMAwDBAJnEAwD
BABnEA4DBAJnJvADBAFnXmQDBAFnnXYDBABn1F8DBAJn59gDBAJn8uwDBAFn9bwD
BAKJO0wDBAKdd9ADBALcnowwFgQCAAIwEAMHACABDfAEXQMFACQEekAwDQYJKoZI
hvcNAQELBQADggEBABKhxnrk7+nYp3CTcnCdj+r2O5VGIkTArBE8Tp60AXwPPLY6
AYU4xrA/KdMdTDKpkIscFDmHoTGIhpdiyYwWmAXdZzXp0ZwNmjNJRHTLgK7regGm
2k/3qTDPn0o9u2ud8NpkA4iwn468VoVED9ooaqeZh9NUflPwcIpCbcv/8QgfB4l2
vFJXZT4TBzffuS4s4x+GqTuhYn4wZV0Xjn7pHMmseyq8B3oWJoiBUkRgoefixs1q
1MiDVKhVKOFXa92XdCos8Ql/EAYMYCKYaFkOPj4zx7PbGbqOXd9uqqHzNFtRboGc
qfCBoayooeR3zdO0xd4UiBLKkjBq8EcokgsAWmY=
-----END CERTIFICATE-----
Generated at Thu Jul 3 10:26:55 2025 by rpki-client