Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A919536C/6DE3CE7C366011EE88E0F530C4F9AE02/6BA10D8EAD9511EFAA7B4C1AC4F9AE02.roa
File: 6BA10D8EAD9511EFAA7B4C1AC4F9AE02.roa (raw, json)
Hash identifier: iDNh0uelVbLHQR/Mzy+AVcFFYfErExwX2su4OEKINjI=
Subject key identifier: 26:EF:FD:AC:4C:79:6D:B1:0F:FB:79:6E:39:BE:C5:78:7A:40:D8:B4
Certificate issuer: /CN=A919536C/serialNumber=71F40218C1AF47C5E993A21A2B29284E4C32C934
Certificate serial: 01A5
Authority key identifier: 71:F4:02:18:C1:AF:47:C5:E9:93:A2:1A:2B:29:28:4E:4C:32:C9:34
Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/cfQCGMGvR8Xpk6IaKykoTkwyyTQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A919536C/6DE3CE7C366011EE88E0F530C4F9AE02/6BA10D8EAD9511EFAA7B4C1AC4F9AE02.roa
Signing time: Mon 23 Jun 2025 03:21:51 +0000
ROA not before: Mon 23 Jun 2025 03:21:51 +0000
ROA not after: Mon 31 Aug 2026 00:00:00 +0000
asID: 132280
IP address blocks: 83.118.0.0/17 maxlen: 18
83.118.0.0/21 maxlen: 23
83.118.8.0/21 maxlen: 23
83.118.16.0/21 maxlen: 23
83.118.24.0/21 maxlen: 23
83.118.26.0/23 maxlen: 24
83.118.32.0/21 maxlen: 23
83.118.32.0/24 maxlen: 24
83.118.35.0/24 maxlen: 24
83.118.36.0/24 maxlen: 24
83.118.40.0/21 maxlen: 23
83.118.45.0/24 maxlen: 24
83.118.48.0/21 maxlen: 23
83.118.52.0/24 maxlen: 24
83.118.55.0/24 maxlen: 24
83.118.56.0/21 maxlen: 23
83.118.56.0/23 maxlen: 24
83.118.61.0/24 maxlen: 24
83.118.64.0/21 maxlen: 23
83.118.65.0/24 maxlen: 24
83.118.72.0/21 maxlen: 23
83.118.75.0/24 maxlen: 24
83.118.80.0/21 maxlen: 23
83.118.88.0/21 maxlen: 23
83.118.92.0/24 maxlen: 24
83.118.96.0/21 maxlen: 23
83.118.98.0/24 maxlen: 24
83.118.104.0/21 maxlen: 23
83.118.105.0/24 maxlen: 24
83.118.109.0/24 maxlen: 24
83.118.111.0/24 maxlen: 24
83.118.112.0/21 maxlen: 23
83.118.112.0/24 maxlen: 24
83.118.114.0/24 maxlen: 24
83.118.118.0/24 maxlen: 24
83.118.120.0/21 maxlen: 23
83.118.120.0/23 maxlen: 24
83.118.124.0/24 maxlen: 24
83.118.126.0/24 maxlen: 24
87.124.0.0/17 maxlen: 23
87.124.1.0/24 maxlen: 24
87.124.2.0/23 maxlen: 24
87.124.4.0/22 maxlen: 24
87.124.8.0/21 maxlen: 24
87.124.16.0/20 maxlen: 24
87.124.32.0/19 maxlen: 24
87.124.64.0/20 maxlen: 24
87.124.80.0/21 maxlen: 24
87.124.88.0/23 maxlen: 24
87.124.90.0/24 maxlen: 24
87.124.94.0/23 maxlen: 24
87.124.96.0/19 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A919536C/6DE3CE7C366011EE88E0F530C4F9AE02/cfQCGMGvR8Xpk6IaKykoTkwyyTQ.crl
rsync://rpki.apnic.net/member_repository/A919536C/6DE3CE7C366011EE88E0F530C4F9AE02/cfQCGMGvR8Xpk6IaKykoTkwyyTQ.mft
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/cfQCGMGvR8Xpk6IaKykoTkwyyTQ.cer
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 10 Jul 2025 03:15:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 421 (0x1a5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A919536C, serialNumber=71F40218C1AF47C5E993A21A2B29284E4C32C934
Validity
Not Before: Jun 23 03:21:51 2025 GMT
Not After : Aug 31 00:00:00 2026 GMT
Subject: CN=6858c84e-a384
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:6a:27:7d:6d:4c:37:81:01:f5:54:0b:6f:21:
62:61:4a:28:68:1c:7d:e9:88:a7:db:77:00:f9:c4:
af:ea:ac:70:66:89:dd:0d:c8:22:3e:0e:58:e6:df:
33:6c:33:23:6a:f3:36:41:3a:06:39:8d:d1:ee:7a:
f7:b0:c2:6d:5f:4f:f5:b1:96:e8:df:3a:a3:ab:f6:
65:4e:79:22:8e:6c:23:04:f4:92:54:2d:bf:93:cd:
69:db:66:9d:66:a9:21:36:14:b8:6d:a6:0f:79:80:
e1:12:20:17:5b:bc:21:fc:75:98:4a:2e:32:cf:f7:
e8:a2:e2:0c:ee:b3:36:11:92:e4:d1:b4:5c:28:8e:
2c:67:97:de:d5:c8:a1:4c:fe:76:bb:42:57:96:04:
4f:1d:52:f1:99:bf:6c:bb:ae:e8:c1:d8:f8:7a:a1:
a7:37:b8:df:d6:48:04:4a:cd:8e:fe:75:e1:9d:52:
38:e7:38:e8:eb:79:89:55:74:ad:d1:77:40:7e:4f:
6c:ec:51:0f:d5:83:a6:31:e9:fe:a6:04:63:70:c5:
b0:99:01:7e:56:52:18:87:5e:9a:5a:ef:a8:19:32:
63:e0:00:d9:42:9b:a8:71:f8:84:0b:ad:43:63:49:
0c:79:1c:e2:d7:1e:19:5a:db:cd:7c:fa:5e:e3:3e:
a2:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:EF:FD:AC:4C:79:6D:B1:0F:FB:79:6E:39:BE:C5:78:7A:40:D8:B4
X509v3 Authority Key Identifier:
keyid:71:F4:02:18:C1:AF:47:C5:E9:93:A2:1A:2B:29:28:4E:4C:32:C9:34
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A919536C/6DE3CE7C366011EE88E0F530C4F9AE02/cfQCGMGvR8Xpk6IaKykoTkwyyTQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/cfQCGMGvR8Xpk6IaKykoTkwyyTQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919536C/6DE3CE7C366011EE88E0F530C4F9AE02/6BA10D8EAD9511EFAA7B4C1AC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
83.118.0.0/17
87.124.0.0/17
Signature Algorithm: sha256WithRSAEncryption
aa:bb:5b:60:07:44:ad:76:5a:94:fb:9c:90:f8:b4:9e:cd:ae:
6e:14:8b:ef:20:27:f7:40:64:cd:55:cf:af:1a:b5:3e:fe:8c:
51:d2:7d:0c:a0:43:f5:42:d5:5f:7b:73:5e:86:3f:fc:c7:68:
a2:ef:bb:d0:d7:79:5e:86:8d:3f:13:a2:a9:aa:3f:21:b0:f6:
ae:13:dd:1e:90:3d:5b:0f:20:f7:0e:af:09:2f:51:5f:1c:57:
6c:10:b7:88:3e:1f:61:82:ad:95:37:33:60:a2:cf:91:43:0f:
08:32:36:77:97:89:cb:89:05:db:5b:3d:fd:4e:15:be:e7:43:
1f:4b:c4:c1:7b:76:df:bc:55:2a:0a:21:b8:01:15:c6:90:4e:
5a:eb:af:a1:5f:45:3f:1a:d5:c6:2c:ef:3d:72:3b:1a:dd:89:
33:d8:94:3c:a9:62:a8:f2:ca:a9:f8:43:4c:6f:06:58:ab:6c:
20:5c:d6:70:84:16:e1:e5:b5:a7:12:4b:57:aa:fe:69:e4:aa:
b0:1c:7b:d3:24:0c:a9:33:09:9b:31:28:a4:89:b9:83:7f:1f:
45:a9:0e:60:b3:28:6e:17:1b:89:ba:51:03:bc:a5:66:4c:8e:
59:f3:42:ec:ed:c2:89:ce:65:dc:b2:6a:71:9b:68:83:bf:28:
15:ad:73:33
-----BEGIN CERTIFICATE-----
MIIFdzCCBF+gAwIBAgICAaUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OTUzNkMxMTAvBgNVBAUTKDcxRjQwMjE4QzFBRjQ3QzVFOTkzQTIxQTJCMjkyODRF
NEMzMkM5MzQwHhcNMjUwNjIzMDMyMTUxWhcNMjYwODMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02ODU4Yzg0ZS1hMzg0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAvWonfW1MN4EB9VQLbyFiYUooaBx96Yin23cA+cSv6qxwZondDcgiPg5Y5t8z
bDMjavM2QToGOY3R7nr3sMJtX0/1sZbo3zqjq/ZlTnkijmwjBPSSVC2/k81p22ad
ZqkhNhS4baYPeYDhEiAXW7wh/HWYSi4yz/foouIM7rM2EZLk0bRcKI4sZ5fe1cih
TP52u0JXlgRPHVLxmb9su67owdj4eqGnN7jf1kgESs2O/nXhnVI45zjo63mJVXSt
0XdAfk9s7FEP1YOmMen+pgRjcMWwmQF+VlIYh16aWu+oGTJj4ADZQpuocfiEC61D
Y0kMeRzi1x4ZWtvNfPpe4z6ijwIDAQABo4ICmzCCApcwHQYDVR0OBBYEFCbv/axM
eW2xD/t5bjm+xXh6QNi0MB8GA1UdIwQYMBaAFHH0AhjBr0fF6ZOiGispKE5MMsk0
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NTM2Qy82REUzQ0U3QzM2
NjAxMUVFODhFMEY1MzBDNEY5QUUwMi9jZlFDR01HdlI4WHBrNklhS3lrb1Rrd3l5
VFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzMjJBNUY0MUQ2NjExRTJBM0YyN0Y3Qzcy
RkQxRkYyL2NmUUNHTUd2UjhYcGs2SWFLeWtvVGt3eXlUUS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
OTUzNkMvNkRFM0NFN0MzNjYwMTFFRTg4RTBGNTMwQzRGOUFFMDIvNkJBMTBEOEVB
RDk1MTFFRkFBN0I0QzFBQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwJQYIKwYBBQUHAQcBAf8E
FjAUMBIEAgABMAwDBAdTdgADBAdXfAAwDQYJKoZIhvcNAQELBQADggEBAKq7W2AH
RK12WpT7nJD4tJ7Nrm4Ui+8gJ/dAZM1Vz68atT7+jFHSfQygQ/VC1V97c16GP/zH
aKLvu9DXeV6GjT8ToqmqPyGw9q4T3R6QPVsPIPcOrwkvUV8cV2wQt4g+H2GCrZU3
M2Ciz5FDDwgyNneXicuJBdtbPf1OFb7nQx9LxMF7dt+8VSoKIbgBFcaQTlrrr6Ff
RT8a1cYs7z1yOxrdiTPYlDypYqjyyqn4Q0xvBlirbCBc1nCEFuHltacSS1eq/mnk
qrAce9MkDKkzCZsxKKSJuYN/H0WpDmCzKG4XG4m6UQO8pWZMjlnzQuztwonOZdyy
anGbaIO/KBWtczM=
-----END CERTIFICATE-----
Generated at Fri Jul 4 01:40:04 2025 by rpki-client