Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A919536C/75B98BF0366011EE88E0F530C4F9AE02/AEC0C8428C5811EFA0E8E859C4F9AE02.roa
File: AEC0C8428C5811EFA0E8E859C4F9AE02.roa (raw, json)
Hash identifier: E0/fmo1zRhNUo9QRAW44/yJchxGo4nB0rPZ+W1mU3F0=
Subject key identifier: 6A:FF:27:4E:22:1D:CB:E8:64:F9:40:B8:CE:56:89:86:29:F1:D3:9E
Certificate issuer: /CN=A919536C/serialNumber=A090E520BF9D51F2FDCEED413AF27AC758F6AE1D
Certificate serial: 01A7
Authority key identifier: A0:90:E5:20:BF:9D:51:F2:FD:CE:ED:41:3A:F2:7A:C7:58:F6:AE:1D
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/oJDlIL-dUfL9zu1BOvJ6x1j2rh0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A919536C/75B98BF0366011EE88E0F530C4F9AE02/AEC0C8428C5811EFA0E8E859C4F9AE02.roa
Signing time: Mon 23 Jun 2025 03:22:10 +0000
ROA not before: Mon 23 Jun 2025 03:22:10 +0000
ROA not after: Mon 31 Aug 2026 00:00:00 +0000
asID: 132280
IP address blocks: 96.30.72.0/21 maxlen: 21
96.30.74.0/23 maxlen: 24
96.30.76.0/23 maxlen: 24
96.30.80.0/22 maxlen: 22
96.30.83.0/24 maxlen: 24
96.30.88.0/23 maxlen: 24
96.30.90.0/23 maxlen: 24
96.30.92.0/22 maxlen: 22
96.30.93.0/24 maxlen: 24
96.30.94.0/23 maxlen: 23
96.30.96.0/22 maxlen: 23
96.30.97.0/24 maxlen: 24
96.30.104.0/23 maxlen: 24
96.30.106.0/24 maxlen: 24
96.30.110.0/24 maxlen: 24
96.30.113.0/24 maxlen: 24
96.30.114.0/23 maxlen: 24
96.30.116.0/22 maxlen: 23
96.30.116.0/24 maxlen: 24
96.30.120.0/23 maxlen: 23
96.30.120.0/24 maxlen: 24
96.30.123.0/24 maxlen: 24
96.30.124.0/24 maxlen: 24
96.30.125.0/24 maxlen: 24
96.30.126.0/23 maxlen: 24
146.88.32.0/20 maxlen: 21
146.88.32.0/22 maxlen: 22
146.88.32.0/24 maxlen: 24
146.88.33.0/24 maxlen: 24
146.88.40.0/24 maxlen: 24
146.88.48.0/22 maxlen: 23
146.88.56.0/23 maxlen: 24
146.88.58.0/24 maxlen: 24
146.88.59.0/24 maxlen: 24
146.88.60.0/24 maxlen: 24
146.88.61.0/24 maxlen: 24
146.88.62.0/24 maxlen: 24
146.88.63.0/24 maxlen: 24
161.82.128.0/17 maxlen: 19
161.82.128.0/21 maxlen: 22
161.82.135.0/24 maxlen: 24
161.82.136.0/21 maxlen: 22
161.82.138.0/24 maxlen: 24
161.82.142.0/24 maxlen: 24
161.82.144.0/21 maxlen: 22
161.82.146.0/24 maxlen: 24
161.82.152.0/21 maxlen: 22
161.82.156.0/24 maxlen: 24
161.82.157.0/24 maxlen: 24
161.82.160.0/21 maxlen: 22
161.82.164.0/24 maxlen: 24
161.82.168.0/21 maxlen: 22
161.82.173.0/24 maxlen: 24
161.82.176.0/21 maxlen: 22
161.82.180.0/24 maxlen: 24
161.82.182.0/24 maxlen: 24
161.82.184.0/21 maxlen: 22
161.82.189.0/24 maxlen: 24
161.82.192.0/21 maxlen: 22
161.82.197.0/24 maxlen: 24
161.82.200.0/21 maxlen: 22
161.82.203.0/24 maxlen: 24
161.82.204.0/24 maxlen: 24
161.82.208.0/21 maxlen: 22
161.82.208.0/24 maxlen: 24
161.82.210.0/24 maxlen: 24
161.82.211.0/24 maxlen: 24
161.82.212.0/24 maxlen: 24
161.82.213.0/24 maxlen: 24
161.82.214.0/24 maxlen: 24
161.82.216.0/21 maxlen: 22
161.82.216.0/24 maxlen: 24
161.82.220.0/24 maxlen: 24
161.82.221.0/24 maxlen: 24
161.82.222.0/24 maxlen: 24
161.82.223.0/24 maxlen: 24
161.82.224.0/19 maxlen: 22
161.82.226.0/24 maxlen: 24
161.82.233.0/24 maxlen: 24
161.82.237.0/24 maxlen: 24
161.82.246.0/24 maxlen: 24
161.82.248.0/24 maxlen: 24
161.82.249.0/24 maxlen: 24
161.82.250.0/24 maxlen: 24
161.82.255.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A919536C/75B98BF0366011EE88E0F530C4F9AE02/oJDlIL-dUfL9zu1BOvJ6x1j2rh0.crl
rsync://rpki.apnic.net/member_repository/A919536C/75B98BF0366011EE88E0F530C4F9AE02/oJDlIL-dUfL9zu1BOvJ6x1j2rh0.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/oJDlIL-dUfL9zu1BOvJ6x1j2rh0.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 10 Jul 2025 03:15:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 423 (0x1a7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A919536C, serialNumber=A090E520BF9D51F2FDCEED413AF27AC758F6AE1D
Validity
Not Before: Jun 23 03:22:10 2025 GMT
Not After : Aug 31 00:00:00 2026 GMT
Subject: CN=6858c862-c622
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:e9:14:4d:1d:4f:93:97:ea:d0:2e:05:8f:c6:
4f:fe:20:22:38:b6:26:38:b8:2f:99:01:61:94:aa:
63:39:3a:bf:5c:19:8d:c1:92:a8:7f:3a:39:b8:f6:
a6:7d:6e:f5:d6:ff:c6:97:ae:ec:25:06:fd:a1:85:
0f:1e:43:95:b1:24:b6:b4:6d:85:11:20:b8:a9:ac:
03:32:9a:a6:8e:37:a1:e4:63:51:04:5b:1f:a7:49:
98:41:0d:2a:6d:85:79:d8:37:4c:37:0a:04:b6:d0:
4c:4a:f2:82:63:47:f4:c5:44:96:9a:2b:db:90:3a:
cb:e2:d1:80:fa:51:99:fb:ce:e4:4a:fa:a6:5c:af:
3c:9c:7c:c5:9b:93:ec:11:86:62:8d:6f:a9:04:f7:
19:3b:3d:ca:26:ca:be:f3:dd:b9:d1:a3:98:8a:5c:
ad:53:d4:27:32:65:3e:9b:6e:df:b8:fb:30:7c:67:
90:7d:b6:38:39:c0:1f:3b:aa:86:c7:f9:ea:14:c1:
2f:5e:2b:19:b6:e5:65:e3:1b:12:05:fd:8c:8d:40:
5f:03:ec:33:95:87:f8:6c:44:28:a7:ef:8c:49:5e:
d1:9c:be:f0:50:b9:bc:9a:93:0a:39:ff:a6:af:5c:
d6:db:b0:23:4c:de:54:4f:a8:da:50:60:d1:ef:23:
be:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:FF:27:4E:22:1D:CB:E8:64:F9:40:B8:CE:56:89:86:29:F1:D3:9E
X509v3 Authority Key Identifier:
keyid:A0:90:E5:20:BF:9D:51:F2:FD:CE:ED:41:3A:F2:7A:C7:58:F6:AE:1D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A919536C/75B98BF0366011EE88E0F530C4F9AE02/oJDlIL-dUfL9zu1BOvJ6x1j2rh0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/oJDlIL-dUfL9zu1BOvJ6x1j2rh0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919536C/75B98BF0366011EE88E0F530C4F9AE02/AEC0C8428C5811EFA0E8E859C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
96.30.72.0-96.30.83.255
96.30.88.0-96.30.99.255
96.30.104.0-96.30.106.255
96.30.110.0/24
96.30.113.0-96.30.121.255
96.30.123.0-96.30.127.255
146.88.32.0-146.88.51.255
146.88.56.0/21
161.82.128.0/17
Signature Algorithm: sha256WithRSAEncryption
99:0f:cb:47:6d:ef:e4:a7:c7:01:64:2e:f9:4c:4d:eb:b6:e0:
a9:b5:e6:9f:ef:d6:5f:9b:0b:ee:a1:76:bf:be:ae:35:ce:08:
aa:c3:b9:53:89:30:1f:75:f3:60:3a:ab:10:3a:a2:a8:7f:5b:
6f:ed:96:b2:46:c9:04:63:1c:20:14:0d:31:8c:a7:e2:2f:bd:
57:d6:a1:95:dc:77:ea:64:49:0d:89:24:39:e7:cb:6b:29:b8:
6b:fb:ea:29:d3:30:43:88:6b:02:8c:37:e7:d1:60:c4:fc:6f:
82:08:f6:d0:63:1d:45:98:0f:25:9d:8b:ba:67:a8:fa:3f:6f:
04:41:79:39:21:7e:e3:60:63:9c:0c:5f:e7:89:54:6e:e9:72:
22:e1:fc:43:e9:cb:2b:95:74:40:e4:45:84:2b:09:4a:29:41:
0e:15:38:bb:23:bd:96:38:a6:78:09:e3:58:28:11:82:32:91:
95:fe:9e:33:4e:f8:b7:03:b2:e9:a5:a8:af:e6:b7:f1:b9:84:
3e:42:68:5e:28:93:48:d1:ef:4a:ad:57:2b:41:b1:c1:94:58:
d8:d4:91:02:bd:38:91:fb:0d:c0:cb:17:67:0c:f6:87:5f:75:
3e:b8:03:15:2a:b3:74:da:f8:7c:37:bc:35:b7:db:5d:93:5d:
b0:6a:72:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 4 01:28:08 2025 by rpki-client