Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/CB90D944B7C211EB9171C27AC4F9AE02.roa
File: CB90D944B7C211EB9171C27AC4F9AE02.roa (raw, json)
Hash identifier: GhVjg/oz16EnRw5F+7h8hqEwq19yNzwmuj99YZyoC74=
Subject key identifier: 1A:8F:26:99:DD:2E:22:49:98:3D:19:79:EE:DD:EE:01:41:69:EE:DF
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: BF36
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/CB90D944B7C211EB9171C27AC4F9AE02.roa
Signing time: Tue 01 Jul 2025 06:45:37 +0000
ROA not before: Tue 01 Jul 2025 06:45:37 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 134326
IP address blocks: 43.246.136.0/22 maxlen: 24
45.249.120.0/22 maxlen: 24
103.69.8.0/22 maxlen: 24
103.81.32.0/22 maxlen: 24
103.114.248.0/22 maxlen: 24
103.118.164.0/22 maxlen: 24
103.139.224.0/23 maxlen: 24
103.144.232.0/23 maxlen: 24
103.145.110.0/24 maxlen: 24
103.150.70.0/24 maxlen: 24
103.154.202.0/23 maxlen: 24
103.169.244.0/23 maxlen: 24
103.194.240.0/22 maxlen: 24
103.218.112.0/22 maxlen: 24
113.30.176.0/22 maxlen: 24
2401:fa40::/32 maxlen: 32
2401:fa40::/34 maxlen: 34
2401:fa40::/36 maxlen: 36
2401:fa40:1000::/36 maxlen: 36
2401:fa40:2000::/36 maxlen: 36
2401:fa40:3000::/36 maxlen: 36
2401:fa40:4000::/34 maxlen: 34
2401:fa40:4000::/36 maxlen: 36
2401:fa40:5000::/36 maxlen: 36
2401:fa40:6000::/36 maxlen: 36
2401:fa40:7000::/36 maxlen: 36
2401:fa40:8000::/34 maxlen: 34
2401:fa40:8000::/36 maxlen: 36
2401:fa40:9000::/36 maxlen: 36
2401:fa40:a000::/36 maxlen: 36
2401:fa40:b000::/36 maxlen: 36
2401:fa40:c000::/34 maxlen: 34
2401:fa40:c000::/36 maxlen: 36
2401:fa40:d000::/36 maxlen: 36
2401:fa40:e000::/36 maxlen: 36
2401:fa40:f000::/36 maxlen: 36
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 09 Jul 2025 15:29:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 48950 (0xbf36)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Validity
Not Before: Jul 1 06:45:37 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=68638410-1dd8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:b5:ef:06:9f:2f:b5:ff:98:9c:7e:43:93:3e:
f2:73:fb:ce:7a:ae:1f:7d:07:79:7d:9f:3d:5b:55:
75:8a:f4:38:83:c5:c7:5f:8b:f9:1f:fc:dd:cf:07:
32:e4:08:ee:16:11:ba:20:a9:f9:b7:a2:92:56:00:
49:54:95:08:4c:11:a8:5e:0c:11:07:f4:8d:e0:69:
ab:86:66:77:b1:fa:fc:c2:08:fa:9e:fe:a4:ff:88:
95:19:3c:bf:b7:5d:1b:7b:35:e6:f1:04:f7:02:51:
5d:1c:ea:bd:bc:d2:7a:9b:f5:3e:42:d7:d6:24:df:
e7:7e:bb:c3:2f:86:63:2b:25:20:e0:5d:a1:e0:57:
0e:ea:b3:c2:0c:5d:a2:16:4e:31:11:b1:fc:24:15:
73:cd:b8:36:d6:5d:35:e8:2e:0e:a1:59:e4:ae:19:
92:79:cc:7e:a5:98:41:d9:c6:e4:a3:c3:b9:63:c3:
7b:cf:4f:e5:a5:52:ec:2a:1f:08:d8:17:ee:e1:bc:
a5:b4:ca:ff:9e:61:37:f5:82:a8:96:55:f5:67:82:
47:52:fe:07:17:12:da:b7:98:ce:4a:08:7e:19:47:
11:71:3b:1d:a7:e2:36:96:6a:85:2b:78:10:95:c8:
5f:85:fa:43:2c:31:2b:11:0f:1b:c1:d1:11:f5:9c:
ae:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:8F:26:99:DD:2E:22:49:98:3D:19:79:EE:DD:EE:01:41:69:EE:DF
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/CB90D944B7C211EB9171C27AC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
43.246.136.0/22
45.249.120.0/22
103.69.8.0/22
103.81.32.0/22
103.114.248.0/22
103.118.164.0/22
103.139.224.0/23
103.144.232.0/23
103.145.110.0/24
103.150.70.0/24
103.154.202.0/23
103.169.244.0/23
103.194.240.0/22
103.218.112.0/22
113.30.176.0/22
IPv6:
2401:fa40::/32
Signature Algorithm: sha256WithRSAEncryption
96:65:6a:e5:32:98:a1:1f:93:c0:a2:7e:be:7e:8a:a9:95:d2:
d6:61:ac:5f:f9:09:1c:ce:a9:0d:b7:9c:26:59:ad:7d:d2:9b:
dd:8d:d0:ee:6a:61:7b:6c:53:a6:08:fd:85:fa:87:39:99:44:
19:18:14:85:ca:b4:7d:cc:86:4d:ab:bd:4d:ce:1f:d7:14:1a:
bc:97:ee:8d:8d:ab:4c:a7:1c:33:b5:a7:a6:b7:5e:63:40:69:
5a:9b:91:b7:bd:ab:9f:c9:65:09:4c:9f:b6:dd:e8:5f:0e:74:
d6:ff:0d:ea:3d:36:57:b8:88:26:96:7f:2e:9d:26:fd:f2:73:
9f:ab:87:25:36:89:ee:8e:a6:dc:d6:e8:57:bc:cc:74:f1:b1:
23:f1:0d:fc:75:19:a9:c6:7d:ea:92:07:67:e3:96:64:e1:03:
10:17:11:30:54:15:ce:4f:b3:a4:9f:07:9f:b2:82:fe:8c:85:
cf:8e:33:fe:f3:47:c8:c4:f8:50:e7:10:e9:62:17:20:d4:b9:
77:91:38:9a:22:f5:0e:86:84:91:01:7f:90:03:82:6b:3f:fb:
9c:51:ca:bb:62:64:56:f9:35:da:85:bf:58:3b:41:a9:25:9a:
08:14:17:f3:1f:60:8a:a0:17:7c:60:8c:75:6c:d6:5c:77:43:
e3:f8:d8:4c
-----BEGIN CERTIFICATE-----
MIIF1jCCBL6gAwIBAgIDAL82MA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5
MThFREIyMTEwLwYDVQQFEygyOTZFREI2NEYzQUY2RTlEOTgwOTMyRTgxNkY5NTk4
M0UzQUJDODIzMB4XDTI1MDcwMTA2NDUzN1oXDTI2MDcwMTAwMDAwMFowGDEWMBQG
A1UEAxMNNjg2Mzg0MTAtMWRkODCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAMa17wafL7X/mJx+Q5M+8nP7znquH30HeX2fPVtVdYr0OIPFx1+L+R/83c8H
MuQI7hYRuiCp+beiklYASVSVCEwRqF4MEQf0jeBpq4Zmd7H6/MII+p7+pP+IlRk8
v7ddG3s15vEE9wJRXRzqvbzSepv1PkLX1iTf5367wy+GYyslIOBdoeBXDuqzwgxd
ohZOMRGx/CQVc824NtZdNeguDqFZ5K4ZknnMfqWYQdnG5KPDuWPDe89P5aVS7Cof
CNgX7uG8pbTK/55hN/WCqJZV9WeCR1L+BxcS2reYzkoIfhlHEXE7HafiNpZqhSt4
EJXIX4X6QywxKxEPG8HREfWcrgkCAwEAAaOCAvkwggL1MB0GA1UdDgQWBBQajyaZ
3S4iSZg9GXnu3e4BQWnu3zAfBgNVHSMEGDAWgBQpbttk869unZgJMugW+VmD46vI
IzAOBgNVHQ8BAf8EBAMCB4AwgYMGA1UdHwR8MHoweKB2oHSGcnJzeW5jOi8vcnBr
aS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkxOEVEQjIvMkE0M0UzMEM3
MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvS1c3YlpQT3ZicDJZQ1RMb0Z2bFpnLU9y
eUNNLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr
aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3
MkZEMUZGMi9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5Q00uY2VyMEoGA1UdIAEB
/wRAMD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBu
aWMubmV0L1JQS0kvQ1BTLnBkZjCBywYIKwYBBQUHAQsEgb4wgbswgYMGCCsGAQUF
BzALhndyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MThFREIyLzJBNDNFMzBDNzBFOTExRTJCMzZENEI2QjI5NzlCQjIwL0NCOTBEOTQ0
QjdDMjExRUI5MTcxQzI3QUM0RjlBRTAyLnJvYTAzBggrBgEFBQcwDYYnaHR0cHM6
Ly9ycmRwLmFwbmljLm5ldC9ub3RpZmljYXRpb24ueG1sMIGCBggrBgEFBQcBBwEB
/wRzMHEwYAQCAAEwWgMEAiv2iAMEAi35eAMEAmdFCAMEAmdRIAMEAmdy+AMEAmd2
pAMEAWeL4AMEAWeQ6AMEAGeRbgMEAGeWRgMEAWeaygMEAWep9AMEAmfC8AMEAmfa
cAMEAnEesDANBAIAAjAHAwUAJAH6QDANBgkqhkiG9w0BAQsFAAOCAQEAlmVq5TKY
oR+TwKJ+vn6KqZXS1mGsX/kJHM6pDbecJlmtfdKb3Y3Q7mphe2xTpgj9hfqHOZlE
GRgUhcq0fcyGTau9Tc4f1xQavJfujY2rTKccM7WnprdeY0BpWpuRt72rn8llCUyf
tt3oXw501v8N6j02V7iIJpZ/Lp0m/fJzn6uHJTaJ7o6m3NboV7zMdPGxI/EN/HUZ
qcZ96pIHZ+OWZOEDEBcRMFQVzk+zpJ8Hn7KC/oyFz44z/vNHyMT4UOcQ6WIXINS5
d5E4miL1DoaEkQF/kAOCaz/7nFHKu2JkVvk12oW/WDtBqSWaCBQX8x9giqAXfGCM
dWzWXHdD4/jYTA==
-----END CERTIFICATE-----
Generated at Thu Jul 3 03:52:45 2025 by rpki-client