Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A09BF/D13DA1D42DFC11EABC1B6B82C4F9AE02/CEFDECF850B011F0B9262D4FC4F9AE02.roa
File: CEFDECF850B011F0B9262D4FC4F9AE02.roa (raw, json)
Hash identifier: WtUGGPBORu2ELV1J85b8AQ+2CLGSrU7TTTxiEKhsYHc=
Subject key identifier: B5:99:CB:ED:CA:8A:F7:27:28:01:6C:E4:1C:E1:93:83:98:2F:10:95
Certificate issuer: /CN=A91A09BF/serialNumber=7870F240BC4516E39A9C25958CF97B194BE76567
Certificate serial: 0BAF
Authority key identifier: 78:70:F2:40:BC:45:16:E3:9A:9C:25:95:8C:F9:7B:19:4B:E7:65:67
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eHDyQLxFFuOanCWVjPl7GUvnZWc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A09BF/D13DA1D42DFC11EABC1B6B82C4F9AE02/CEFDECF850B011F0B9262D4FC4F9AE02.roa
Signing time: Tue 24 Jun 2025 04:07:57 +0000
ROA not before: Tue 24 Jun 2025 04:07:57 +0000
ROA not after: Sat 31 Jan 2026 00:00:00 +0000
asID: 9729
IP address blocks: 202.85.128.0/20 maxlen: 20
202.85.128.0/24 maxlen: 24
202.85.129.0/24 maxlen: 24
202.85.131.0/24 maxlen: 24
202.85.132.0/24 maxlen: 24
202.85.137.0/24 maxlen: 24
202.85.138.0/24 maxlen: 24
202.85.140.0/24 maxlen: 24
202.85.144.0/20 maxlen: 24
202.85.164.0/23 maxlen: 23
202.85.165.0/24 maxlen: 24
202.85.166.0/23 maxlen: 23
202.85.167.0/24 maxlen: 24
202.85.168.0/22 maxlen: 22
202.85.169.0/24 maxlen: 24
202.85.170.0/24 maxlen: 24
202.85.171.0/24 maxlen: 24
202.85.172.0/22 maxlen: 22
202.85.172.0/24 maxlen: 24
202.85.180.0/22 maxlen: 22
202.85.181.0/24 maxlen: 24
202.85.184.0/22 maxlen: 22
202.85.188.0/24 maxlen: 24
202.85.190.0/24 maxlen: 24
202.85.191.0/24 maxlen: 24
203.194.128.0/21 maxlen: 21
203.194.133.0/24 maxlen: 24
203.194.135.0/24 maxlen: 24
203.194.136.0/21 maxlen: 21
203.194.136.0/24 maxlen: 24
203.194.140.0/22 maxlen: 24
203.194.144.0/21 maxlen: 21
203.194.144.0/24 maxlen: 24
203.194.145.0/24 maxlen: 24
203.194.146.0/24 maxlen: 24
203.194.148.0/24 maxlen: 24
203.194.149.0/24 maxlen: 24
203.194.152.0/21 maxlen: 21
203.194.153.0/24 maxlen: 24
203.194.159.0/24 maxlen: 24
203.194.160.0/22 maxlen: 24
203.194.164.0/22 maxlen: 22
203.194.168.0/22 maxlen: 22
203.194.168.0/24 maxlen: 24
203.194.169.0/24 maxlen: 24
203.194.170.0/24 maxlen: 24
203.194.171.0/24 maxlen: 24
203.194.176.0/22 maxlen: 22
203.194.176.0/24 maxlen: 24
203.194.177.0/24 maxlen: 24
203.194.179.0/24 maxlen: 24
203.194.183.0/24 maxlen: 24
203.194.186.0/23 maxlen: 24
203.194.188.0/22 maxlen: 22
203.194.188.0/24 maxlen: 24
203.194.192.0/21 maxlen: 21
203.194.196.0/24 maxlen: 24
203.194.199.0/24 maxlen: 24
203.194.200.0/22 maxlen: 22
203.194.200.0/23 maxlen: 23
203.194.204.0/22 maxlen: 22
203.194.206.0/24 maxlen: 24
203.194.208.0/22 maxlen: 22
203.194.208.0/24 maxlen: 24
203.194.209.0/24 maxlen: 24
203.194.211.0/24 maxlen: 24
203.194.212.0/22 maxlen: 22
203.194.212.0/23 maxlen: 23
203.194.216.0/22 maxlen: 22
203.194.216.0/24 maxlen: 24
203.194.217.0/24 maxlen: 24
203.194.218.0/24 maxlen: 24
203.194.219.0/24 maxlen: 24
203.194.220.0/22 maxlen: 22
203.194.220.0/24 maxlen: 24
203.194.221.0/24 maxlen: 24
203.194.223.0/24 maxlen: 24
203.194.224.0/22 maxlen: 22
203.194.224.0/24 maxlen: 24
203.194.227.0/24 maxlen: 24
203.194.228.0/22 maxlen: 22
203.194.228.0/24 maxlen: 24
203.194.232.0/22 maxlen: 22
203.194.232.0/24 maxlen: 24
203.194.233.0/24 maxlen: 24
203.194.236.0/22 maxlen: 24
203.194.240.0/22 maxlen: 22
203.194.244.0/22 maxlen: 22
203.194.244.0/24 maxlen: 24
203.194.248.0/21 maxlen: 21
203.194.251.0/24 maxlen: 24
203.194.255.0/24 maxlen: 24
210.184.96.0/22 maxlen: 22
210.184.97.0/24 maxlen: 24
210.184.99.0/24 maxlen: 24
210.184.100.0/22 maxlen: 22
210.184.108.0/22 maxlen: 22
210.184.110.0/24 maxlen: 24
210.184.112.0/21 maxlen: 21
210.184.113.0/24 maxlen: 24
210.184.114.0/24 maxlen: 24
210.184.120.0/24 maxlen: 24
210.184.121.0/24 maxlen: 24
210.184.122.0/24 maxlen: 24
210.184.124.0/24 maxlen: 24
210.184.127.0/24 maxlen: 24
210.184.128.0/17 maxlen: 17
210.184.128.0/21 maxlen: 21
210.184.136.0/22 maxlen: 22
210.184.137.0/24 maxlen: 24
210.184.139.0/24 maxlen: 24
210.184.142.0/24 maxlen: 24
210.184.152.0/22 maxlen: 22
210.184.156.0/23 maxlen: 23
210.184.158.0/23 maxlen: 23
210.184.164.0/22 maxlen: 22
210.184.167.0/24 maxlen: 24
210.184.168.0/22 maxlen: 22
210.184.172.0/23 maxlen: 23
210.184.174.0/23 maxlen: 23
210.184.178.0/23 maxlen: 23
210.184.178.0/24 maxlen: 24
210.184.180.0/22 maxlen: 22
210.184.180.0/24 maxlen: 24
210.184.184.0/22 maxlen: 22
210.184.189.0/24 maxlen: 24
210.184.190.0/23 maxlen: 23
210.184.190.0/24 maxlen: 24
210.184.192.0/24 maxlen: 24
210.184.193.0/24 maxlen: 24
210.184.194.0/24 maxlen: 24
210.184.196.0/22 maxlen: 22
210.184.196.0/24 maxlen: 24
210.184.197.0/24 maxlen: 24
210.184.198.0/23 maxlen: 24
210.184.200.0/22 maxlen: 22
210.184.200.0/24 maxlen: 24
210.184.201.0/24 maxlen: 24
210.184.202.0/24 maxlen: 24
210.184.203.0/24 maxlen: 24
210.184.204.0/22 maxlen: 22
210.184.208.0/24 maxlen: 24
210.184.209.0/24 maxlen: 24
210.184.210.0/24 maxlen: 24
210.184.211.0/24 maxlen: 24
210.184.212.0/24 maxlen: 24
210.184.213.0/24 maxlen: 24
210.184.214.0/24 maxlen: 24
210.184.215.0/24 maxlen: 24
210.184.216.0/24 maxlen: 24
210.184.217.0/24 maxlen: 24
210.184.218.0/24 maxlen: 24
210.184.219.0/24 maxlen: 24
210.184.220.0/24 maxlen: 24
210.184.221.0/24 maxlen: 24
210.184.222.0/24 maxlen: 24
210.184.223.0/24 maxlen: 24
210.184.224.0/24 maxlen: 24
210.184.225.0/24 maxlen: 24
210.184.226.0/24 maxlen: 24
210.184.240.0/24 maxlen: 24
210.184.241.0/24 maxlen: 24
210.184.242.0/23 maxlen: 24
210.184.248.0/21 maxlen: 22
210.184.248.0/23 maxlen: 24
210.184.251.0/24 maxlen: 24
210.184.254.0/24 maxlen: 24
2403:2400::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A09BF/D13DA1D42DFC11EABC1B6B82C4F9AE02/eHDyQLxFFuOanCWVjPl7GUvnZWc.crl
rsync://rpki.apnic.net/member_repository/A91A09BF/D13DA1D42DFC11EABC1B6B82C4F9AE02/eHDyQLxFFuOanCWVjPl7GUvnZWc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eHDyQLxFFuOanCWVjPl7GUvnZWc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 10 Jul 2025 03:15:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2991 (0xbaf)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A09BF, serialNumber=7870F240BC4516E39A9C25958CF97B194BE76567
Validity
Not Before: Jun 24 04:07:57 2025 GMT
Not After : Jan 31 00:00:00 2026 GMT
Subject: CN=685a249c-f912
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:dc:8b:b6:bf:04:57:8f:2e:fc:c3:8d:de:0e:
96:ea:64:95:8a:2b:93:5f:b6:37:8a:76:f2:66:d3:
ca:32:bb:ba:aa:b9:e2:9c:3e:7f:25:b1:38:80:9c:
d2:f1:90:d3:44:e4:65:9c:45:ac:85:05:83:d6:e9:
54:96:5c:dd:51:b1:d9:27:b1:69:c0:8f:21:e5:c7:
44:0b:d2:c3:0f:80:0f:ab:a1:04:22:35:0e:37:9d:
d6:ee:b2:93:dd:6e:63:af:91:0d:10:e9:7c:9d:0e:
55:bd:67:03:30:f9:ac:84:2f:b3:7a:c1:0c:a5:d4:
dd:d3:ab:cd:d1:60:cd:53:0a:a2:e4:05:88:45:b8:
28:d5:77:34:a7:d2:48:77:53:33:3c:29:82:af:d2:
37:e3:9e:39:f1:29:23:f4:6c:fe:66:b0:80:4d:b2:
35:05:7b:6b:89:84:51:56:c6:ea:b0:22:4f:8f:10:
33:14:12:90:32:40:e8:09:ab:a9:0a:ce:0a:6c:f2:
4c:5e:cf:63:f7:0f:87:88:24:12:6c:3c:e1:63:49:
aa:43:8e:cc:7f:a7:ab:59:26:4f:92:4c:48:95:c6:
4b:a5:c9:c2:a0:3c:72:c6:19:3b:9f:55:cc:59:dc:
67:2b:b8:61:84:b0:f3:2f:39:fc:94:72:7b:ac:a4:
c9:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:99:CB:ED:CA:8A:F7:27:28:01:6C:E4:1C:E1:93:83:98:2F:10:95
X509v3 Authority Key Identifier:
keyid:78:70:F2:40:BC:45:16:E3:9A:9C:25:95:8C:F9:7B:19:4B:E7:65:67
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A09BF/D13DA1D42DFC11EABC1B6B82C4F9AE02/eHDyQLxFFuOanCWVjPl7GUvnZWc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eHDyQLxFFuOanCWVjPl7GUvnZWc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A09BF/D13DA1D42DFC11EABC1B6B82C4F9AE02/CEFDECF850B011F0B9262D4FC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
202.85.128.0/19
202.85.164.0-202.85.175.255
202.85.180.0-202.85.188.255
202.85.190.0/23
203.194.128.0-203.194.171.255
203.194.176.0/22
203.194.183.0/24
203.194.186.0-203.194.255.255
210.184.96.0/21
210.184.108.0-210.184.122.255
210.184.124.0/24
210.184.127.0-210.184.255.255
IPv6:
2403:2400::/32
Signature Algorithm: sha256WithRSAEncryption
01:89:82:1a:ac:fb:85:41:16:69:47:94:c6:24:e8:8d:76:4c:
88:23:95:81:1d:ba:11:b1:95:2e:a2:23:cd:1b:53:1e:71:e3:
ff:d4:fe:98:72:50:9b:3a:d3:14:3e:da:f1:14:f5:a5:22:cb:
43:a3:f4:58:46:cb:42:41:84:8c:30:2a:07:95:79:d2:3b:43:
99:bd:84:8f:0d:86:32:57:f7:b6:74:3a:51:af:5d:bb:2a:d3:
db:16:24:bc:61:db:45:22:09:cd:67:08:fc:40:f5:b6:93:21:
b0:b2:94:68:cc:bc:8a:26:c4:18:89:ea:1c:d3:1a:2e:91:d3:
67:a1:fd:82:e6:b2:2c:b8:c3:84:6b:5a:1a:ec:bf:8b:40:1c:
ef:94:bc:a3:40:b3:28:66:f7:3d:cd:fd:11:d4:d9:8f:d7:e9:
e8:8e:d2:3a:bd:02:03:14:50:ba:70:da:8c:aa:15:f7:7f:c6:
d1:b2:7d:ca:f8:e8:02:9b:47:fe:f4:29:2c:4e:8c:f9:79:1d:
b2:95:48:c3:b1:a0:b6:bc:c8:90:ec:24:86:8d:2b:08:d2:a6:
46:16:f8:68:cd:b4:87:3f:7a:63:5b:ea:7c:fe:27:0b:37:fc:
77:74:b1:b9:19:da:97:59:25:e6:40:98:01:f5:23:20:43:07:
42:ef:22:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 5 01:19:35 2025 by rpki-client