
Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A4B9D/95AD03881D9E11E2880E868E08B02CD2/43BD42D8C6FA11EEB1BFF11FC4F9AE02.roa
File: 43BD42D8C6FA11EEB1BFF11FC4F9AE02.roa (raw, json)
Hash identifier: yeqnIffOTE6ry3Qke5xut/6qiBfeHl8u7z0TvjrpqnI=
Subject key identifier: 0B:97:C8:86:34:A5:0D:3B:95:53:86:23:6C:38:61:35:80:4C:5B:D4
Certificate issuer: /CN=A91A4B9D/serialNumber=EF68BDBC072CAB455B6DA3160EDF8FB6C488DD15
Certificate serial: 34BC
Authority key identifier: EF:68:BD:BC:07:2C:AB:45:5B:6D:A3:16:0E:DF:8F:B6:C4:88:DD:15
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/72i9vAcsq0VbbaMWDt-PtsSI3RU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A4B9D/95AD03881D9E11E2880E868E08B02CD2/43BD42D8C6FA11EEB1BFF11FC4F9AE02.roa
Signing time: Sat 28 Jun 2025 15:40:52 +0000
ROA not before: Sat 28 Jun 2025 15:40:52 +0000
ROA not after: Mon 31 Aug 2026 00:00:00 +0000
asID: 133159
IP address blocks: 45.124.52.0/22 maxlen: 22
103.1.184.0/22 maxlen: 22
103.16.128.0/22 maxlen: 22
103.17.56.0/24 maxlen: 24
103.17.57.0/24 maxlen: 24
103.100.36.0/22 maxlen: 23
110.232.112.0/22 maxlen: 22
112.213.32.0/21 maxlen: 21
119.42.52.0/23 maxlen: 23
119.42.54.0/23 maxlen: 23
150.107.72.0/22 maxlen: 22
150.107.75.0/24 maxlen: 24
175.45.180.0/22 maxlen: 23
175.45.182.0/23 maxlen: 24
203.18.30.0/24 maxlen: 24
203.29.240.0/22 maxlen: 22
203.57.50.0/23 maxlen: 23
203.57.114.0/23 maxlen: 23
2404:9400::/48 maxlen: 48
2404:9400:1::/48 maxlen: 48
2404:9400:2::/48 maxlen: 48
2404:9400:3::/48 maxlen: 48
2404:9400:4::/48 maxlen: 48
2404:9400:5::/48 maxlen: 48
2404:9400:e::/48 maxlen: 48
2404:9400:f::/48 maxlen: 48
2404:9400:1000::/36 maxlen: 36
2404:9400:2000::/36 maxlen: 36
2404:9400:3000::/36 maxlen: 36
2404:9400:4000::/36 maxlen: 36
2404:9400:5000::/36 maxlen: 36
2404:9400:e000::/36 maxlen: 36
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A4B9D/95AD03881D9E11E2880E868E08B02CD2/72i9vAcsq0VbbaMWDt-PtsSI3RU.crl
rsync://rpki.apnic.net/member_repository/A91A4B9D/95AD03881D9E11E2880E868E08B02CD2/72i9vAcsq0VbbaMWDt-PtsSI3RU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/72i9vAcsq0VbbaMWDt-PtsSI3RU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 09 Jul 2025 15:05:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13500 (0x34bc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A4B9D, serialNumber=EF68BDBC072CAB455B6DA3160EDF8FB6C488DD15
Validity
Not Before: Jun 28 15:40:52 2025 GMT
Not After : Aug 31 00:00:00 2026 GMT
Subject: CN=68600d04-2396
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:aa:ed:bd:18:38:02:e5:bf:94:6d:03:00:ce:
62:f2:de:68:1b:86:5f:2f:ff:70:14:11:f5:b5:91:
a4:0d:bc:d0:42:a5:20:29:a3:9c:1c:59:04:b4:fe:
43:e2:f4:1e:16:10:2a:7d:3e:a7:a7:dc:e1:6e:26:
b2:b1:f0:69:6e:b2:bc:30:07:63:7e:b9:60:bb:a1:
1f:b2:0d:4a:a1:f3:de:c1:cf:fb:62:b3:31:72:49:
df:2f:37:44:bf:92:39:4e:3f:97:b9:19:01:d9:a1:
b4:62:46:64:1f:ae:f9:4c:9f:c7:f8:c3:e3:4a:c5:
23:66:9c:b0:a0:28:2d:c2:3d:66:54:fe:e9:46:5a:
7f:1f:0b:59:d4:7a:33:0e:e1:51:62:d7:44:c7:6e:
00:b2:4c:8a:a2:fb:02:ee:1b:39:44:37:09:30:b5:
2e:22:8c:e9:71:36:be:00:89:04:4c:26:5b:3c:11:
32:77:42:29:c3:b7:e9:be:b3:19:0f:63:81:35:5b:
1e:37:af:e7:68:fb:b8:96:85:2d:1c:38:b5:06:68:
83:e8:63:4f:50:04:5e:6e:0a:e9:41:8a:7e:39:6c:
a9:fb:16:0c:4b:64:7b:96:f2:b2:0e:5d:cc:c8:4c:
8d:69:be:49:28:1b:a9:59:a2:f8:d1:08:be:ba:2f:
89:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:97:C8:86:34:A5:0D:3B:95:53:86:23:6C:38:61:35:80:4C:5B:D4
X509v3 Authority Key Identifier:
keyid:EF:68:BD:BC:07:2C:AB:45:5B:6D:A3:16:0E:DF:8F:B6:C4:88:DD:15
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A4B9D/95AD03881D9E11E2880E868E08B02CD2/72i9vAcsq0VbbaMWDt-PtsSI3RU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/72i9vAcsq0VbbaMWDt-PtsSI3RU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A4B9D/95AD03881D9E11E2880E868E08B02CD2/43BD42D8C6FA11EEB1BFF11FC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.124.52.0/22
103.1.184.0/22
103.16.128.0/22
103.17.56.0/23
103.100.36.0/22
110.232.112.0/22
112.213.32.0/21
119.42.52.0/22
150.107.72.0/22
175.45.180.0/22
203.18.30.0/24
203.29.240.0/22
203.57.50.0/23
203.57.114.0/23
IPv6:
2404:9400::-2404:9400:5:ffff:ffff:ffff:ffff:ffff
2404:9400:e::/47
2404:9400:1000::-2404:9400:5fff:ffff:ffff:ffff:ffff:ffff
2404:9400:e000::/36
Signature Algorithm: sha256WithRSAEncryption
56:3c:97:2e:a1:fe:49:16:8f:d0:0d:0c:8b:ac:b6:d1:cc:54:
e8:9c:24:25:64:fc:a2:44:d5:53:7d:fe:78:9e:89:93:af:4d:
92:51:21:87:3b:8d:29:b7:e9:5e:61:d9:ea:19:2b:1e:35:dc:
79:24:27:2b:95:a1:1d:bf:81:33:e2:9d:66:5a:8e:af:a4:1b:
e8:15:a9:85:2a:25:05:34:b1:ab:2c:22:0f:26:5e:78:48:1c:
65:2c:a0:7d:8a:b5:47:10:b6:c4:90:53:e5:0e:56:40:fb:ff:
8a:5a:ef:68:dd:07:dd:3f:91:c2:00:af:cd:9c:57:c3:c1:41:
46:d2:2a:9a:27:9e:17:f2:26:fc:99:cf:f5:d5:35:0e:78:26:
aa:88:84:71:e3:18:7c:16:a7:fb:8d:6b:f7:76:60:81:d8:51:
c0:57:99:12:0e:a5:4c:a5:21:57:67:52:21:dc:49:66:4c:61:
f1:2a:34:ed:ef:b2:6e:af:83:69:56:e7:d5:88:fe:89:50:5d:
fa:3e:88:2e:fa:76:d3:cc:3b:45:e4:a8:8b:46:9a:5c:62:81:
1b:01:2e:8d:50:de:e6:cb:62:e8:f2:2f:da:f2:0e:cb:b5:d3:
07:9f:e0:f1:74:40:92:58:e5:4c:86:1f:e4:c6:d4:0b:07:33:
80:d3:3d:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 3 02:47:00 2025 by rpki-client