Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91EAE3D/97B6E0CE75DE11E8B704A246C4F9AE02/BEBA6BD452E811F0B4119D49C4F9AE02.roa
File: BEBA6BD452E811F0B4119D49C4F9AE02.roa (raw, json)
Hash identifier: JfI+XR4NGTRk5w/gvGrGQDQEHQFPLZTwcO5wcxvslsU=
Subject key identifier: FC:33:8F:36:6B:C0:77:C9:A0:A6:3F:BB:35:9A:F7:3A:28:2F:3F:B8
Certificate issuer: /CN=A91EAE3D/serialNumber=C7269B124C420C55E29FB51D3C1B0D9D476CBD00
Certificate serial: 18EB
Authority key identifier: C7:26:9B:12:4C:42:0C:55:E2:9F:B5:1D:3C:1B:0D:9D:47:6C:BD:00
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xyabEkxCDFXin7UdPBsNnUdsvQA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91EAE3D/97B6E0CE75DE11E8B704A246C4F9AE02/BEBA6BD452E811F0B4119D49C4F9AE02.roa
Signing time: Thu 26 Jun 2025 23:53:23 +0000
ROA not before: Thu 26 Jun 2025 23:53:23 +0000
ROA not after: Fri 01 May 2026 00:00:00 +0000
asID: 4826
IP address blocks: 14.137.106.0/24 maxlen: 24
27.106.200.0/22 maxlen: 22
43.241.188.0/22 maxlen: 22
43.252.252.0/22 maxlen: 22
49.255.0.0/16 maxlen: 16
49.255.233.0/24 maxlen: 24
49.255.255.0/24 maxlen: 24
103.37.120.0/24 maxlen: 24
103.233.148.0/22 maxlen: 22
103.255.16.0/22 maxlen: 22
110.5.116.0/22 maxlen: 22
112.213.192.0/19 maxlen: 19
112.213.224.0/19 maxlen: 19
114.31.192.0/20 maxlen: 20
116.212.192.0/18 maxlen: 18
116.212.204.0/24 maxlen: 24
116.212.230.0/23 maxlen: 24
116.212.253.0/24 maxlen: 24
119.161.64.0/20 maxlen: 20
119.161.80.0/20 maxlen: 20
121.54.128.0/19 maxlen: 19
121.54.128.0/20 maxlen: 20
121.54.136.0/24 maxlen: 24
121.54.145.0/24 maxlen: 24
121.79.0.0/17 maxlen: 17
123.103.192.0/19 maxlen: 19
124.254.64.0/18 maxlen: 18
124.254.64.0/24 maxlen: 24
124.254.95.0/24 maxlen: 24
124.254.96.0/24 maxlen: 24
175.45.64.0/18 maxlen: 18
175.45.78.0/24 maxlen: 24
175.45.82.0/24 maxlen: 24
175.45.83.0/24 maxlen: 24
175.45.85.0/24 maxlen: 24
175.45.92.0/24 maxlen: 24
175.45.94.0/23 maxlen: 23
175.45.99.0/24 maxlen: 24
175.45.100.0/24 maxlen: 24
175.45.101.0/24 maxlen: 24
175.45.105.0/24 maxlen: 24
175.45.111.0/24 maxlen: 24
175.45.125.0/24 maxlen: 24
180.148.64.0/19 maxlen: 19
180.148.76.0/24 maxlen: 24
180.148.77.0/24 maxlen: 24
180.148.83.0/24 maxlen: 24
180.148.84.0/24 maxlen: 24
180.148.95.0/24 maxlen: 24
202.62.138.0/24 maxlen: 24
202.62.139.0/24 maxlen: 24
202.62.141.0/24 maxlen: 24
202.62.142.0/24 maxlen: 24
202.62.147.0/24 maxlen: 24
202.62.152.0/24 maxlen: 24
202.62.153.0/24 maxlen: 24
202.62.154.0/24 maxlen: 24
202.62.155.0/24 maxlen: 24
202.80.176.0/20 maxlen: 20
202.89.160.0/19 maxlen: 19
202.137.96.0/20 maxlen: 20
202.137.192.0/21 maxlen: 21
202.174.224.0/19 maxlen: 19
202.189.64.0/20 maxlen: 20
202.189.72.0/24 maxlen: 24
202.189.73.0/24 maxlen: 24
203.12.251.0/24 maxlen: 24
203.18.212.0/23 maxlen: 23
203.28.186.0/24 maxlen: 24
203.29.177.0/24 maxlen: 24
203.55.11.0/24 maxlen: 24
203.55.250.0/24 maxlen: 24
203.89.64.0/19 maxlen: 19
203.89.80.0/24 maxlen: 24
203.89.92.0/24 maxlen: 24
203.92.28.0/22 maxlen: 22
203.129.128.0/19 maxlen: 19
203.153.224.0/19 maxlen: 19
203.153.226.0/24 maxlen: 24
203.161.64.0/18 maxlen: 18
203.188.128.0/19 maxlen: 19
210.50.198.0/24 maxlen: 24
211.26.193.0/24 maxlen: 24
218.100.80.0/22 maxlen: 22
223.27.96.0/21 maxlen: 21
2402:7800::/32 maxlen: 32
2402:7800:ff00::/40 maxlen: 40
2402:7800:ff00::/48 maxlen: 48
2402:7800:ff01::/48 maxlen: 48
2402:7800:ff20::/48 maxlen: 48
2402:7800:ff40::/44 maxlen: 44
2402:7800:ffe0::/48 maxlen: 48
2403:d600::/32 maxlen: 32
2403:fc00:300::/40 maxlen: 40
2404:b000::/32 maxlen: 32
2404:bc00::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91EAE3D/97B6E0CE75DE11E8B704A246C4F9AE02/xyabEkxCDFXin7UdPBsNnUdsvQA.crl
rsync://rpki.apnic.net/member_repository/A91EAE3D/97B6E0CE75DE11E8B704A246C4F9AE02/xyabEkxCDFXin7UdPBsNnUdsvQA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xyabEkxCDFXin7UdPBsNnUdsvQA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 10 Jul 2025 03:15:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6379 (0x18eb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91EAE3D, serialNumber=C7269B124C420C55E29FB51D3C1B0D9D476CBD00
Validity
Not Before: Jun 26 23:53:23 2025 GMT
Not After : May 1 00:00:00 2026 GMT
Subject: CN=685ddd73-06d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:3b:1b:5a:77:67:29:84:43:7d:52:db:76:d7:
0d:93:74:ad:9c:f1:db:a0:d5:34:ae:9f:d1:2e:65:
82:09:8b:96:cd:27:cb:a8:14:4d:6f:12:f3:64:de:
aa:91:5c:48:b6:a8:1e:29:2a:9c:77:39:37:10:49:
fc:e3:55:fe:5d:3d:2a:d6:a3:06:a2:f3:88:07:5e:
48:71:c4:b7:08:88:e7:47:4e:6b:f2:98:79:18:55:
68:93:58:8d:1c:66:e5:09:9c:98:24:30:74:8c:50:
3d:04:4c:89:98:3b:ca:95:6e:a0:9c:57:3c:33:9e:
1b:f2:a0:da:af:da:b7:a5:d7:68:e8:f4:31:4d:e6:
df:86:9a:9c:4f:77:18:46:f6:96:89:28:94:f1:93:
8a:54:22:1d:01:df:b9:a4:df:a9:cf:b2:c5:e6:24:
20:9c:6d:6b:b3:4a:50:07:5c:a6:c9:43:6b:2e:32:
78:47:a1:71:43:55:16:f4:31:f4:9a:84:de:01:b9:
77:b4:c0:15:84:93:2a:1f:76:67:d2:95:e9:9a:fd:
44:1f:cf:f3:71:88:00:7f:50:00:ca:c5:b3:c8:01:
a8:d2:f0:d2:3b:86:77:46:41:d2:31:be:bb:4d:be:
13:d4:cd:ad:5a:74:6e:ab:06:e4:a3:6f:12:cc:c6:
ca:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:33:8F:36:6B:C0:77:C9:A0:A6:3F:BB:35:9A:F7:3A:28:2F:3F:B8
X509v3 Authority Key Identifier:
keyid:C7:26:9B:12:4C:42:0C:55:E2:9F:B5:1D:3C:1B:0D:9D:47:6C:BD:00
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91EAE3D/97B6E0CE75DE11E8B704A246C4F9AE02/xyabEkxCDFXin7UdPBsNnUdsvQA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xyabEkxCDFXin7UdPBsNnUdsvQA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EAE3D/97B6E0CE75DE11E8B704A246C4F9AE02/BEBA6BD452E811F0B4119D49C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
14.137.106.0/24
27.106.200.0/22
43.241.188.0/22
43.252.252.0/22
49.255.0.0/16
103.37.120.0/24
103.233.148.0/22
103.255.16.0/22
110.5.116.0/22
112.213.192.0/18
114.31.192.0/20
116.212.192.0/18
119.161.64.0/19
121.54.128.0/19
121.79.0.0/17
123.103.192.0/19
124.254.64.0/18
175.45.64.0/18
180.148.64.0/19
202.62.138.0/23
202.62.141.0-202.62.142.255
202.62.147.0/24
202.62.152.0/22
202.80.176.0/20
202.89.160.0/19
202.137.96.0/20
202.137.192.0/21
202.174.224.0/19
202.189.64.0/20
203.12.251.0/24
203.18.212.0/23
203.28.186.0/24
203.29.177.0/24
203.55.11.0/24
203.55.250.0/24
203.89.64.0/19
203.92.28.0/22
203.129.128.0/19
203.153.224.0/19
203.161.64.0/18
203.188.128.0/19
210.50.198.0/24
211.26.193.0/24
218.100.80.0/22
223.27.96.0/21
IPv6:
2402:7800::/32
2403:d600::/32
2403:fc00:300::/40
2404:b000::/32
2404:bc00::/32
Signature Algorithm: sha256WithRSAEncryption
83:2e:2c:a6:9c:37:74:28:99:79:aa:b6:26:8f:63:2e:ce:a1:
b6:0f:46:fa:37:e2:62:36:e5:fb:c3:9e:4e:6b:6f:0e:b7:54:
73:81:60:2f:b5:12:b4:d3:e2:a6:ab:ff:a2:c6:8d:a0:94:7b:
a3:ea:da:d8:fc:11:68:28:d1:5d:1e:66:ca:c5:ca:d0:8f:01:
e5:e7:3c:32:f8:80:f6:f5:b1:7c:f5:60:3e:ec:18:5b:e4:70:
ab:3b:30:04:51:46:b7:1b:11:2d:67:30:61:eb:29:33:55:75:
01:6f:2e:84:31:73:f2:42:70:30:93:ea:ee:c1:47:a4:4e:83:
99:21:f1:f6:8f:f9:7b:31:85:10:11:ab:a2:d0:45:1e:8e:74:
09:08:30:34:f6:32:d8:21:94:27:8e:88:20:72:1a:8f:95:7b:
ce:50:6a:c0:b0:f7:70:c0:91:03:0b:03:72:48:eb:af:79:2a:
e1:7d:fb:46:a0:48:25:93:b9:22:85:1f:bf:e4:4a:3f:4c:5f:
59:a8:9e:9f:25:cc:31:e9:60:d1:ab:83:1c:6f:f9:68:ba:cc:
4c:41:8a:b2:cc:d9:98:98:22:a1:c8:03:00:ca:5f:5b:e6:b3:
27:9a:40:db:9b:56:89:38:5d:94:8f:b4:e0:f2:99:79:10:b3:
03:6d:fe:53
-----BEGIN CERTIFICATE-----
MIIGtjCCBZ6gAwIBAgICGOswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RUFFM0QxMTAvBgNVBAUTKEM3MjY5QjEyNEM0MjBDNTVFMjlGQjUxRDNDMUIwRDlE
NDc2Q0JEMDAwHhcNMjUwNjI2MjM1MzIzWhcNMjYwNTAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02ODVkZGQ3My0wNmQ3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAqjsbWndnKYRDfVLbdtcNk3StnPHboNU0rp/RLmWCCYuWzSfLqBRNbxLzZN6q
kVxItqgeKSqcdzk3EEn841X+XT0q1qMGovOIB15IccS3CIjnR05r8ph5GFVok1iN
HGblCZyYJDB0jFA9BEyJmDvKlW6gnFc8M54b8qDar9q3pddo6PQxTebfhpqcT3cY
RvaWiSiU8ZOKVCIdAd+5pN+pz7LF5iQgnG1rs0pQB1ymyUNrLjJ4R6FxQ1UW9DH0
moTeAbl3tMAVhJMqH3Zn0pXpmv1EH8/zcYgAf1AAysWzyAGo0vDSO4Z3RkHSMb67
Tb4T1M2tWnRuqwbko28SzMbKCQIDAQABo4ID2jCCA9YwHQYDVR0OBBYEFPwzjzZr
wHfJoKY/uzWa9zooLz+4MB8GA1UdIwQYMBaAFMcmmxJMQgxV4p+1HTwbDZ1HbL0A
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFQUUzRC85N0I2RTBDRTc1
REUxMUU4QjcwNEEyNDZDNEY5QUUwMi94eWFiRWt4Q0RGWGluN1VkUEJzTm5VZHN2
UUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3h5YWJFa3hDREZYaW43VWRQQnNOblVkc3ZRQS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
RUFFM0QvOTdCNkUwQ0U3NURFMTFFOEI3MDRBMjQ2QzRGOUFFMDIvQkVCQTZCRDQ1
MkU4MTFGMEI0MTE5RDQ5QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwggFiBggrBgEFBQcBBwEB
/wSCAVEwggFNMIIBHQQCAAEwggEVAwQADolqAwQCG2rIAwQCK/G8AwQCK/z8AwMA
Mf8DBABnJXgDBAJn6ZQDBAJn/xADBAJuBXQDBAZw1cADBARyH8ADBAZ01MADBAV3
oUADBAV5NoADBAd5TwADBAV7Z8ADBAZ8/kADBAavLUADBAW0lEADBAHKPoowDAME
AMo+jQMEAMo+jgMEAMo+kwMEAso+mAMEBMpQsAMEBcpZoAMEBMqJYAMEA8qJwAME
Bcqu4AMEBMq9QAMEAMsM+wMEAcsS1AMEAMscugMEAMsdsQMEAMs3CwMEAMs3+gME
BctZQAMEAstcHAMEBcuBgAMEBcuZ4AMEBsuhQAMEBcu8gAMEANIyxgMEANMawQME
AtpkUAMEA98bYDAqBAIAAjAkAwUAJAJ4AAMFACQD1gADBgAkA/wAAwMFACQEsAAD
BQAkBLwAMA0GCSqGSIb3DQEBCwUAA4IBAQCDLiymnDd0KJl5qrYmj2MuzqG2D0b6
N+JiNuX7w55Oa28Ot1RzgWAvtRK00+Kmq/+ixo2glHuj6trY/BFoKNFdHmbKxcrQ
jwHl5zwy+ID29bF89WA+7Bhb5HCrOzAEUUa3GxEtZzBh6ykzVXUBby6EMXPyQnAw
k+ruwUekToOZIfH2j/l7MYUQEaui0EUejnQJCDA09jLYIZQnjoggchqPlXvOUGrA
sPdwwJEDCwNySOuveSrhfftGoEglk7kihR+/5Eo/TF9ZqJ6fJcwx6WDRq4Mcb/lo
usxMQYqyzNmYmCKhyAMAyl9b5rMnmkDbm1aJOF2Uj7Tg8pl5ELMDbf5T
-----END CERTIFICATE-----
Generated at Thu Jul 3 12:19:26 2025 by rpki-client