Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/F7FC66144AA411F08944EF0EC4F9AE02.roa
File: F7FC66144AA411F08944EF0EC4F9AE02.roa (raw, json)
Hash identifier: 23J98iqv6AB74b61TMXvdRdqeOXUrWZ6tl+NmiiU25A=
Subject key identifier: E8:C8:3C:5D:BB:C7:E2:F1:3A:25:6C:98:0A:57:BB:29:AC:5D:44:DA
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: BE43
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/F7FC66144AA411F08944EF0EC4F9AE02.roa
Signing time: Mon 16 Jun 2025 11:28:05 +0000
ROA not before: Mon 16 Jun 2025 11:28:05 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 132116
IP address blocks: 27.123.240.0/22 maxlen: 24
43.247.40.0/24 maxlen: 24
43.247.41.0/24 maxlen: 24
43.247.42.0/24 maxlen: 24
43.247.43.0/24 maxlen: 24
43.248.152.0/22 maxlen: 24
43.248.240.0/24 maxlen: 24
43.248.241.0/24 maxlen: 24
43.248.242.0/24 maxlen: 24
43.248.243.0/24 maxlen: 24
45.248.0.0/22 maxlen: 24
45.248.172.0/24 maxlen: 24
45.248.173.0/24 maxlen: 24
45.248.174.0/24 maxlen: 24
45.248.175.0/24 maxlen: 24
103.16.28.0/24 maxlen: 24
103.16.29.0/24 maxlen: 24
103.16.30.0/24 maxlen: 24
103.16.31.0/24 maxlen: 24
103.28.252.0/22 maxlen: 24
103.40.200.0/22 maxlen: 24
103.68.20.0/24 maxlen: 24
103.68.22.0/24 maxlen: 24
103.68.23.0/24 maxlen: 24
103.68.87.0/24 maxlen: 24
103.69.24.0/24 maxlen: 24
103.69.25.0/24 maxlen: 24
103.69.26.0/24 maxlen: 24
103.69.27.0/24 maxlen: 24
103.69.244.0/22 maxlen: 24
103.70.80.0/24 maxlen: 24
103.70.81.0/24 maxlen: 24
103.70.82.0/24 maxlen: 24
103.70.83.0/24 maxlen: 24
103.91.73.0/24 maxlen: 24
103.91.74.0/24 maxlen: 24
103.94.83.0/24 maxlen: 24
103.100.4.0/22 maxlen: 24
103.102.147.0/24 maxlen: 24
103.103.55.0/24 maxlen: 24
103.105.96.0/24 maxlen: 24
103.124.120.0/23 maxlen: 24
103.153.12.0/24 maxlen: 24
103.164.141.0/24 maxlen: 24
103.165.88.0/23 maxlen: 24
103.165.102.0/23 maxlen: 24
103.167.154.0/23 maxlen: 24
103.167.182.0/23 maxlen: 24
103.167.224.0/23 maxlen: 24
103.167.238.0/23 maxlen: 24
103.168.60.0/23 maxlen: 24
103.169.242.0/23 maxlen: 24
103.170.36.0/23 maxlen: 24
103.170.38.0/23 maxlen: 24
103.170.84.0/23 maxlen: 24
103.183.86.0/23 maxlen: 24
103.190.8.0/24 maxlen: 24
103.190.9.0/24 maxlen: 24
103.192.64.0/24 maxlen: 24
103.192.66.0/24 maxlen: 24
103.192.67.0/24 maxlen: 24
103.198.172.0/22 maxlen: 24
103.216.140.0/24 maxlen: 24
103.216.142.0/24 maxlen: 24
103.216.143.0/24 maxlen: 24
103.217.132.0/22 maxlen: 24
103.224.144.0/22 maxlen: 24
119.42.56.0/22 maxlen: 24
163.53.84.0/22 maxlen: 24
180.149.225.0/24 maxlen: 24
180.149.226.0/24 maxlen: 24
180.149.227.0/24 maxlen: 24
2001:df1:d240::/48 maxlen: 48
2001:df3:6ec0::/48 maxlen: 48
2405:e100::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 09 Jul 2025 15:29:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 48707 (0xbe43)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Validity
Not Before: Jun 16 11:28:05 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=684fffc4-dbc4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:f0:ec:0c:40:d6:b7:16:55:cc:06:44:64:db:
16:33:bc:61:73:e4:36:af:d0:f9:e2:00:b2:92:c0:
45:0e:6e:04:33:7c:af:89:1a:d3:a1:79:aa:2c:93:
2f:87:5f:38:2a:b4:2c:d0:4a:e0:75:28:13:ad:72:
9f:d6:6c:67:9b:bc:46:01:6a:51:61:57:e0:45:60:
8b:0b:40:c7:b6:9f:db:2a:69:f7:3e:bb:e5:d4:3c:
fd:7b:c8:9b:1d:4f:4a:00:12:49:4a:29:62:60:c1:
ce:11:bf:7b:77:32:34:97:51:75:47:34:fe:aa:96:
4f:70:ec:25:7d:e7:21:7b:38:ac:34:d0:b4:cc:df:
a0:b9:d6:27:ef:68:c4:49:5e:6f:70:d0:fb:05:1a:
46:24:07:d5:3f:2c:c7:15:a0:5d:dc:c1:8d:1f:27:
27:6e:17:8f:f9:23:1c:6d:07:02:d8:24:e5:08:8b:
74:1f:8f:7a:e7:b0:f2:68:30:31:f0:67:74:a2:58:
7b:2c:b7:e3:0a:b4:e8:7c:f3:56:e3:02:c8:5f:33:
40:01:ff:9f:82:5d:a6:f5:84:8b:7f:ac:74:cb:84:
e8:a8:52:bf:59:04:b7:57:57:8a:a1:4c:79:da:b0:
65:b0:06:52:16:f8:52:b0:0f:eb:15:c9:ce:44:a3:
15:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:C8:3C:5D:BB:C7:E2:F1:3A:25:6C:98:0A:57:BB:29:AC:5D:44:DA
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/F7FC66144AA411F08944EF0EC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
27.123.240.0/22
43.247.40.0/22
43.248.152.0/22
43.248.240.0/22
45.248.0.0/22
45.248.172.0/22
103.16.28.0/22
103.28.252.0/22
103.40.200.0/22
103.68.20.0/24
103.68.22.0/23
103.68.87.0/24
103.69.24.0/22
103.69.244.0/22
103.70.80.0/22
103.91.73.0-103.91.74.255
103.94.83.0/24
103.100.4.0/22
103.102.147.0/24
103.103.55.0/24
103.105.96.0/24
103.124.120.0/23
103.153.12.0/24
103.164.141.0/24
103.165.88.0/23
103.165.102.0/23
103.167.154.0/23
103.167.182.0/23
103.167.224.0/23
103.167.238.0/23
103.168.60.0/23
103.169.242.0/23
103.170.36.0/22
103.170.84.0/23
103.183.86.0/23
103.190.8.0/23
103.192.64.0/24
103.192.66.0/23
103.198.172.0/22
103.216.140.0/24
103.216.142.0/23
103.217.132.0/22
103.224.144.0/22
119.42.56.0/22
163.53.84.0/22
180.149.225.0-180.149.227.255
IPv6:
2001:df1:d240::/48
2001:df3:6ec0::/48
2405:e100::/48
Signature Algorithm: sha256WithRSAEncryption
5d:bf:f2:3b:0d:fe:d9:17:10:c5:19:8c:4e:85:df:86:d7:c5:
ea:34:3a:27:e6:00:fd:90:e1:15:a8:ea:4f:c6:e5:4f:59:35:
b4:92:34:74:b3:97:b2:dd:9f:68:62:f3:11:3b:6f:ff:4c:81:
86:0e:f3:f5:3f:64:c9:43:fb:c6:a8:6b:8a:78:98:92:9c:22:
dd:8c:6d:fe:7f:73:19:82:6b:05:c3:01:bc:98:1d:51:0e:9e:
e5:8e:1c:d7:46:9e:7c:8e:5e:dc:0e:52:51:0f:9b:67:4c:5c:
0d:94:40:76:06:1b:15:40:9e:02:f2:c4:df:bb:ed:29:cb:89:
9e:3a:6e:cb:fd:b2:cb:ef:27:0b:f3:23:ad:4b:73:0d:8c:e8:
a1:40:7c:dc:bf:45:42:c4:83:89:f4:74:1a:23:1c:4a:5d:81:
99:b5:72:5a:3b:e0:a1:35:ce:fa:bf:90:46:16:eb:39:b1:5e:
e5:a8:f0:3c:c6:11:91:99:02:5f:23:30:f1:b7:89:af:11:4d:
b7:dc:6c:c1:db:23:98:ff:50:04:d2:e3:f7:35:c3:dd:d3:82:
22:18:58:d3:0d:14:dd:30:30:03:60:a9:11:04:c9:d9:6e:7e:
d5:fa:c3:96:a9:e9:91:2d:ca:0d:0d:b8:66:79:48:78:df:ae:
2d:9a:ac:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 3 04:32:17 2025 by rpki-client