Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/CB90D944B7C211EB9171C27AC4F9AE02.roa
File: CB90D944B7C211EB9171C27AC4F9AE02.roa (raw, json)
Hash identifier: PKQ4iZUV2MIqTtZSdd3KXptTx0TtvZM78aix1LrY7aQ=
Subject key identifier: 4C:7C:74:34:51:7E:67:E5:6D:94:57:0C:B3:A5:D8:AF:F7:31:40:2E
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: B282
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/CB90D944B7C211EB9171C27AC4F9AE02.roa
Signing time: Thu 08 May 2025 16:01:27 +0000
ROA not before: Thu 08 May 2025 16:01:27 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 134326
IP address blocks: 43.246.136.0/22 maxlen: 24
45.249.120.0/22 maxlen: 24
103.81.32.0/22 maxlen: 24
103.114.248.0/22 maxlen: 24
103.118.164.0/22 maxlen: 24
103.139.224.0/23 maxlen: 24
103.144.232.0/23 maxlen: 24
103.145.110.0/24 maxlen: 24
103.150.70.0/24 maxlen: 24
103.154.202.0/23 maxlen: 24
103.169.244.0/23 maxlen: 24
103.194.240.0/22 maxlen: 24
103.218.112.0/22 maxlen: 24
113.30.176.0/22 maxlen: 24
2401:fa40::/32 maxlen: 32
2401:fa40::/34 maxlen: 34
2401:fa40::/36 maxlen: 36
2401:fa40:1000::/36 maxlen: 36
2401:fa40:2000::/36 maxlen: 36
2401:fa40:3000::/36 maxlen: 36
2401:fa40:4000::/34 maxlen: 34
2401:fa40:4000::/36 maxlen: 36
2401:fa40:5000::/36 maxlen: 36
2401:fa40:6000::/36 maxlen: 36
2401:fa40:7000::/36 maxlen: 36
2401:fa40:8000::/34 maxlen: 34
2401:fa40:8000::/36 maxlen: 36
2401:fa40:9000::/36 maxlen: 36
2401:fa40:a000::/36 maxlen: 36
2401:fa40:b000::/36 maxlen: 36
2401:fa40:c000::/34 maxlen: 34
2401:fa40:c000::/36 maxlen: 36
2401:fa40:d000::/36 maxlen: 36
2401:fa40:e000::/36 maxlen: 36
2401:fa40:f000::/36 maxlen: 36
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 19 May 2025 18:54:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 45698 (0xb282)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Validity
Not Before: May 8 16:01:27 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=681cd557-d5d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f5:92:b1:ab:41:71:d4:bb:c1:e5:87:26:73:3c:
ed:3f:49:ee:3b:8f:cb:bc:df:ab:7c:c2:85:8b:82:
2b:cb:35:50:2d:1d:45:79:53:d5:a3:41:4e:72:56:
9b:ca:19:30:5f:d8:ec:bc:9d:3c:99:b4:dc:fa:6e:
e8:1b:b6:ba:f2:28:f7:a0:22:08:7a:ca:0d:38:db:
93:be:55:84:0f:9f:33:4e:61:1a:c5:47:ea:54:11:
0a:c0:3a:96:04:18:e1:81:b2:5e:22:fb:79:4c:22:
ab:8c:31:ba:e8:d4:1b:c9:dd:c9:b7:a2:87:93:78:
41:33:1e:f2:cf:a6:65:51:28:c5:3a:d2:20:de:c1:
b5:b7:20:81:8e:81:25:e3:f5:f4:40:a2:5f:cc:fb:
14:aa:5e:92:9d:7b:0d:4f:c6:cd:49:f0:60:4e:87:
bf:59:7c:a6:ed:ce:4f:5b:fd:91:cb:2d:2d:8d:a7:
3d:20:31:72:a7:7b:57:6d:7a:84:b0:b7:aa:f2:04:
e6:7b:27:ff:d2:59:9b:a2:6f:b3:43:c7:b1:44:a4:
51:45:18:71:1b:3b:80:3e:57:97:69:21:96:4a:07:
a7:4b:b7:8a:3c:7c:a9:db:ba:98:d3:84:e0:09:ab:
40:8e:47:73:81:9c:02:4e:d6:70:75:7f:ff:e3:74:
31:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:7C:74:34:51:7E:67:E5:6D:94:57:0C:B3:A5:D8:AF:F7:31:40:2E
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/CB90D944B7C211EB9171C27AC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
43.246.136.0/22
45.249.120.0/22
103.81.32.0/22
103.114.248.0/22
103.118.164.0/22
103.139.224.0/23
103.144.232.0/23
103.145.110.0/24
103.150.70.0/24
103.154.202.0/23
103.169.244.0/23
103.194.240.0/22
103.218.112.0/22
113.30.176.0/22
IPv6:
2401:fa40::/32
Signature Algorithm: sha256WithRSAEncryption
44:ed:9d:e2:70:06:8a:b3:d4:95:31:15:dc:fb:1a:cf:b3:b9:
0b:6e:c9:2c:ea:bd:c4:4e:f2:80:24:6f:e8:39:71:17:f5:52:
71:e7:a2:19:27:28:79:f9:63:87:2e:8a:bd:72:75:8a:fa:e2:
71:83:5f:d5:ff:a4:71:5b:f4:6c:2f:86:ea:95:8d:bb:64:1a:
5f:c6:af:8e:a7:8b:1f:ca:40:12:93:b7:c9:a8:b0:5a:d9:fa:
29:76:f5:e8:ee:57:2f:e2:5d:ca:8f:c6:20:ca:67:07:1c:bd:
20:0b:4b:7d:a0:62:f6:02:f0:5e:4e:bc:28:93:38:41:01:73:
be:08:fc:8f:4a:3d:1b:5c:78:c8:0d:7a:07:b5:99:f0:50:e1:
53:cb:2f:b0:ca:c7:7a:39:80:f2:87:e6:07:dd:0a:bc:82:c1:
f0:57:54:ea:a8:4e:b6:e7:11:50:f8:ec:b1:80:4f:0c:18:f8:
79:c5:e5:ef:7d:60:34:64:a2:2c:2d:e2:a2:b7:91:f0:d3:8b:
c1:7e:6b:fb:44:7c:df:df:3a:61:35:01:a0:e7:c9:3d:a4:54:
a0:4b:68:40:11:70:ea:4c:53:f3:19:b9:4b:d6:9c:a4:30:3d:
ed:7f:be:e3:7c:1d:46:ef:cb:c3:55:b4:2a:00:09:af:6a:ca:
4d:5e:5f:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 01:21:14 2025 by rpki-client