Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B5486/856A249CA98211EA932DEC54C4F9AE02/570B25FA305111F0BED81784C4F9AE02.roa
File: 570B25FA305111F0BED81784C4F9AE02.roa (raw, json)
Hash identifier: HRghPtYyJF7KhObZGzOSLoHVq6GqZy5jEHbcGyo6zuw=
Subject key identifier: 90:93:F4:F9:62:05:66:60:4E:94:4B:68:70:3D:86:2F:87:58:C3:A8
Certificate issuer: /CN=A91B5486/serialNumber=2E304A3D92499D9D7D338A3EA02F7C5348425B17
Certificate serial: 0951
Authority key identifier: 2E:30:4A:3D:92:49:9D:9D:7D:33:8A:3E:A0:2F:7C:53:48:42:5B:17
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LjBKPZJJnZ19M4o-oC98U0hCWxc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B5486/856A249CA98211EA932DEC54C4F9AE02/570B25FA305111F0BED81784C4F9AE02.roa
Signing time: Tue 13 May 2025 23:23:56 +0000
ROA not before: Tue 13 May 2025 23:23:56 +0000
ROA not after: Thu 28 May 2026 00:00:00 +0000
asID: 41095
IP address blocks: 45.248.200.0/24 maxlen: 24
45.248.201.0/24 maxlen: 24
45.248.202.0/23 maxlen: 24
103.6.128.0/22 maxlen: 23
103.6.130.0/23 maxlen: 24
103.23.168.0/22 maxlen: 22
103.23.168.0/24 maxlen: 24
103.23.169.0/24 maxlen: 24
103.23.170.0/24 maxlen: 24
103.23.171.0/24 maxlen: 24
103.217.160.0/22 maxlen: 22
103.217.160.0/24 maxlen: 24
103.217.161.0/24 maxlen: 24
103.217.162.0/24 maxlen: 24
103.217.163.0/24 maxlen: 24
103.242.72.0/22 maxlen: 24
220.158.132.0/23 maxlen: 23
220.158.132.0/24 maxlen: 24
220.158.133.0/24 maxlen: 24
2401:47c0::/32 maxlen: 32
2401:47c0:1000::/36 maxlen: 36
2401:47c0:1000::/40 maxlen: 40
2401:47c0:1100::/40 maxlen: 40
2401:47c0:1200::/40 maxlen: 40
2401:47c0:1300::/40 maxlen: 40
2401:47c0:1400::/40 maxlen: 40
2401:47c0:1500::/40 maxlen: 40
2401:47c0:1600::/40 maxlen: 40
2401:47c0:1700::/40 maxlen: 40
2401:47c0:1800::/40 maxlen: 40
2401:47c0:1a00::/40 maxlen: 40
2401:47c0:1b00::/40 maxlen: 40
2401:47c0:1c00::/40 maxlen: 40
2401:47c0:1d00::/40 maxlen: 40
2401:47c0:1e00::/40 maxlen: 40
2401:47c0:f000::/36 maxlen: 40
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B5486/856A249CA98211EA932DEC54C4F9AE02/LjBKPZJJnZ19M4o-oC98U0hCWxc.crl
rsync://rpki.apnic.net/member_repository/A91B5486/856A249CA98211EA932DEC54C4F9AE02/LjBKPZJJnZ19M4o-oC98U0hCWxc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LjBKPZJJnZ19M4o-oC98U0hCWxc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 21 May 2025 20:28:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2385 (0x951)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B5486, serialNumber=2E304A3D92499D9D7D338A3EA02F7C5348425B17
Validity
Not Before: May 13 23:23:56 2025 GMT
Not After : May 28 00:00:00 2026 GMT
Subject: CN=6823d48c-4e5d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:12:ac:ff:e9:0b:19:32:08:fb:67:47:3f:a7:
92:2b:b7:28:e1:5d:26:ab:44:18:5d:8d:82:11:db:
09:ee:09:e3:59:a1:80:07:aa:54:a9:0b:1a:ae:50:
31:c1:75:13:50:7c:50:f7:7b:9d:85:d1:1c:ea:62:
67:43:bf:7b:b7:eb:c6:f2:ca:76:76:55:2f:de:ce:
01:ae:23:d6:29:68:96:6c:11:45:41:61:a5:1b:1e:
ec:53:f8:d1:ae:bd:c1:5c:8e:8f:df:42:eb:29:99:
29:15:55:f6:3f:b3:eb:9a:59:22:08:9f:53:99:f2:
7c:41:a0:f6:cb:21:86:19:77:46:1e:0d:d0:ac:58:
9f:39:7a:28:96:7e:a5:8e:c0:a5:c4:1f:af:fa:8c:
54:88:75:e9:93:3a:8a:aa:03:26:32:50:1b:2b:c6:
17:24:f5:c1:fc:26:f6:6b:f1:2f:47:39:3c:f9:9a:
e4:8a:d8:28:38:8b:3d:8d:a3:52:41:de:c7:35:c3:
26:83:3e:a4:f2:e6:b7:d7:ca:17:7b:3c:dc:37:cd:
f7:52:0d:c4:ec:6b:c0:3f:00:39:7d:30:08:fe:4b:
c2:1b:18:ca:fd:3d:45:ee:a0:f2:7c:ef:22:9a:dd:
60:01:25:76:e9:98:d1:1b:00:bd:43:bc:55:bd:df:
87:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:93:F4:F9:62:05:66:60:4E:94:4B:68:70:3D:86:2F:87:58:C3:A8
X509v3 Authority Key Identifier:
keyid:2E:30:4A:3D:92:49:9D:9D:7D:33:8A:3E:A0:2F:7C:53:48:42:5B:17
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B5486/856A249CA98211EA932DEC54C4F9AE02/LjBKPZJJnZ19M4o-oC98U0hCWxc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LjBKPZJJnZ19M4o-oC98U0hCWxc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B5486/856A249CA98211EA932DEC54C4F9AE02/570B25FA305111F0BED81784C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.248.200.0/22
103.6.128.0/22
103.23.168.0/22
103.217.160.0/22
103.242.72.0/22
220.158.132.0/23
IPv6:
2401:47c0::/32
Signature Algorithm: sha256WithRSAEncryption
10:b8:b1:47:5f:03:ec:23:95:70:a5:3e:3a:20:c9:73:26:5e:
39:bb:b7:cb:ec:9a:d7:bb:36:11:0e:42:af:c3:a5:7c:43:d3:
36:c6:c7:42:a6:36:7a:2d:73:bc:48:0e:e0:be:09:21:aa:52:
1a:c0:41:0d:5b:6e:12:b2:56:89:2b:51:1b:1b:b5:65:f5:12:
b4:33:f5:69:23:7f:9a:10:32:db:28:aa:e4:75:6e:73:43:20:
cb:94:29:50:1e:6e:dd:a1:be:8b:c8:24:41:29:0d:b0:28:8f:
80:66:87:6f:72:0a:20:5c:76:96:44:1b:d4:c1:52:b4:5f:1c:
50:db:01:c9:e0:92:2a:92:9d:10:33:d4:02:9f:7d:a2:5e:75:
d5:be:7a:18:93:72:11:81:e4:13:1f:3b:a0:66:0e:99:f0:b9:
8d:a8:13:d0:d5:a3:f7:63:65:7d:91:59:ef:a1:3f:21:87:8b:
08:3f:be:c1:83:c2:52:36:ae:15:07:82:4f:f9:f6:95:80:a8:
e3:74:ca:3a:c8:a6:e4:ca:55:31:f1:c6:8d:eb:24:85:a6:9c:
b0:6b:02:d4:b0:12:5a:6d:8e:16:d6:49:1b:96:a5:98:24:a9:
0a:11:83:da:8c:fe:c7:ff:32:6c:5f:dd:18:8c:20:14:16:85:
c3:c0:bc:00
-----BEGIN CERTIFICATE-----
MIIFnjCCBIagAwIBAgICCVEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QjU0ODYxMTAvBgNVBAUTKDJFMzA0QTNEOTI0OTlEOUQ3RDMzOEEzRUEwMkY3QzUz
NDg0MjVCMTcwHhcNMjUwNTEzMjMyMzU2WhcNMjYwNTI4MDAwMDAwWjAYMRYwFAYD
VQQDEw02ODIzZDQ4Yy00ZTVkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA1xKs/+kLGTII+2dHP6eSK7co4V0mq0QYXY2CEdsJ7gnjWaGAB6pUqQsarlAx
wXUTUHxQ93udhdEc6mJnQ797t+vG8sp2dlUv3s4BriPWKWiWbBFFQWGlGx7sU/jR
rr3BXI6P30LrKZkpFVX2P7PrmlkiCJ9TmfJ8QaD2yyGGGXdGHg3QrFifOXooln6l
jsClxB+v+oxUiHXpkzqKqgMmMlAbK8YXJPXB/Cb2a/EvRzk8+ZrkitgoOIs9jaNS
Qd7HNcMmgz6k8ua318oXezzcN833Ug3E7GvAPwA5fTAI/kvCGxjK/T1F7qDyfO8i
mt1gASV26ZjRGwC9Q7xVvd+HXwIDAQABo4ICwjCCAr4wHQYDVR0OBBYEFJCT9Pli
BWZgTpRLaHA9hi+HWMOoMB8GA1UdIwQYMBaAFC4wSj2SSZ2dfTOKPqAvfFNIQlsX
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNTQ4Ni84NTZBMjQ5Q0E5
ODIxMUVBOTMyREVDNTRDNEY5QUUwMi9MakJLUFpKSm5aMTlNNG8tb0M5OFUwaENX
eGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0xqQktQWkpKbloxOU00by1vQzk4VTBoQ1d4Yy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
QjU0ODYvODU2QTI0OUNBOTgyMTFFQTkzMkRFQzU0QzRGOUFFMDIvNTcwQjI1RkEz
MDUxMTFGMEJFRDgxNzg0QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwTAYIKwYBBQUHAQcBAf8E
PTA7MCoEAgABMCQDBAIt+MgDBAJnBoADBAJnF6gDBAJn2aADBAJn8kgDBAHcnoQw
DQQCAAIwBwMFACQBR8AwDQYJKoZIhvcNAQELBQADggEBABC4sUdfA+wjlXClPjog
yXMmXjm7t8vsmte7NhEOQq/DpXxD0zbGx0KmNnotc7xIDuC+CSGqUhrAQQ1bbhKy
VokrURsbtWX1ErQz9Wkjf5oQMtsoquR1bnNDIMuUKVAebt2hvovIJEEpDbAoj4Bm
h29yCiBcdpZEG9TBUrRfHFDbAcngkiqSnRAz1AKffaJeddW+ehiTchGB5BMfO6Bm
DpnwuY2oE9DVo/djZX2RWe+hPyGHiwg/vsGDwlI2rhUHgk/59pWAqON0yjrIpuTK
VTHxxo3rJIWmnLBrAtSwElptjhbWSRuWpZgkqQoRg9qM/sf/Mmxf3RiMIBQWhcPA
vAA=
-----END CERTIFICATE-----
Generated at Fri May 16 06:16:27 2025 by rpki-client