Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91298DA/34F3612E268111EA903D7058C4F9AE02/C5639A105E3B11F09FAC9B6DC4F9AE02.roa
File: C5639A105E3B11F09FAC9B6DC4F9AE02.roa (raw, json)
Hash identifier: +jkx8ForKRaNqf1DBVMg/S9cIOq8CLcZaNyeQAklIwQ=
Subject key identifier: 01:54:99:53:FB:A4:73:B8:9C:19:B0:65:8C:75:FF:DC:A0:B5:B2:C0
Certificate issuer: /CN=A91298DA/serialNumber=FCAA086226DF02AF8394FAB22D1FB96E0B7D65DD
Certificate serial: 0C09
Authority key identifier: FC:AA:08:62:26:DF:02:AF:83:94:FA:B2:2D:1F:B9:6E:0B:7D:65:DD
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_KoIYibfAq-DlPqyLR-5bgt9Zd0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91298DA/34F3612E268111EA903D7058C4F9AE02/C5639A105E3B11F09FAC9B6DC4F9AE02.roa
Signing time: Fri 11 Jul 2025 09:47:00 +0000
ROA not before: Fri 11 Jul 2025 09:47:00 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 58895
IP address blocks: 36.255.100.0/22 maxlen: 22
36.255.100.0/24 maxlen: 24
36.255.101.0/24 maxlen: 24
36.255.102.0/24 maxlen: 24
36.255.103.0/24 maxlen: 24
43.229.164.0/22 maxlen: 22
43.229.164.0/24 maxlen: 24
43.229.165.0/24 maxlen: 24
43.229.166.0/24 maxlen: 24
43.229.167.0/24 maxlen: 24
43.230.92.0/22 maxlen: 22
43.230.92.0/24 maxlen: 24
43.230.93.0/24 maxlen: 24
43.230.94.0/24 maxlen: 24
43.230.95.0/24 maxlen: 24
43.231.60.0/22 maxlen: 22
43.231.60.0/24 maxlen: 24
43.231.61.0/24 maxlen: 24
43.231.62.0/24 maxlen: 24
43.231.63.0/24 maxlen: 24
43.248.12.0/22 maxlen: 22
43.248.12.0/24 maxlen: 24
43.248.13.0/24 maxlen: 24
43.248.14.0/24 maxlen: 24
43.248.15.0/24 maxlen: 24
45.113.124.0/22 maxlen: 22
45.113.124.0/24 maxlen: 24
45.113.125.0/24 maxlen: 24
45.113.126.0/24 maxlen: 24
45.113.127.0/24 maxlen: 24
45.117.105.0/24 maxlen: 24
45.117.106.0/24 maxlen: 24
45.117.107.0/24 maxlen: 24
103.24.96.0/22 maxlen: 24
103.35.214.0/24 maxlen: 24
103.35.215.0/24 maxlen: 24
103.39.80.0/22 maxlen: 22
103.39.80.0/24 maxlen: 24
103.39.81.0/24 maxlen: 24
103.39.82.0/24 maxlen: 24
103.39.83.0/24 maxlen: 24
103.49.136.0/24 maxlen: 24
103.49.137.0/24 maxlen: 24
103.49.138.0/24 maxlen: 24
103.49.139.0/24 maxlen: 24
103.50.156.0/22 maxlen: 22
103.50.156.0/24 maxlen: 24
103.50.157.0/24 maxlen: 24
103.50.158.0/24 maxlen: 24
103.50.159.0/24 maxlen: 24
103.53.44.0/22 maxlen: 22
103.53.44.0/24 maxlen: 24
103.53.45.0/24 maxlen: 24
103.53.46.0/24 maxlen: 24
103.53.47.0/24 maxlen: 24
103.57.168.0/22 maxlen: 22
103.57.168.0/24 maxlen: 24
103.57.169.0/24 maxlen: 24
103.57.170.0/24 maxlen: 24
103.57.171.0/24 maxlen: 24
103.70.84.0/24 maxlen: 24
103.70.85.0/24 maxlen: 24
103.200.196.0/24 maxlen: 24
103.200.197.0/24 maxlen: 24
103.200.198.0/24 maxlen: 24
103.200.199.0/24 maxlen: 24
103.209.84.0/22 maxlen: 22
103.209.84.0/24 maxlen: 24
103.209.85.0/24 maxlen: 24
103.209.86.0/24 maxlen: 24
103.209.87.0/24 maxlen: 24
117.53.40.0/22 maxlen: 22
117.53.40.0/24 maxlen: 24
117.53.41.0/24 maxlen: 24
117.53.42.0/24 maxlen: 24
117.53.43.0/24 maxlen: 24
150.129.4.0/22 maxlen: 22
150.129.4.0/24 maxlen: 24
150.129.5.0/24 maxlen: 24
150.129.6.0/24 maxlen: 24
150.129.7.0/24 maxlen: 24
2400:1680::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91298DA/34F3612E268111EA903D7058C4F9AE02/_KoIYibfAq-DlPqyLR-5bgt9Zd0.crl
rsync://rpki.apnic.net/member_repository/A91298DA/34F3612E268111EA903D7058C4F9AE02/_KoIYibfAq-DlPqyLR-5bgt9Zd0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_KoIYibfAq-DlPqyLR-5bgt9Zd0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 29 Jul 2025 19:11:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3081 (0xc09)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91298DA, serialNumber=FCAA086226DF02AF8394FAB22D1FB96E0B7D65DD
Validity
Not Before: Jul 11 09:47:00 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6870dd94-5793
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:28:01:26:d5:49:f0:48:97:c6:af:52:22:d1:
6e:84:39:84:c9:05:28:ea:b6:79:a0:2c:91:30:49:
d8:09:47:55:e8:a7:4f:f7:c3:83:31:2d:5c:1b:9f:
f4:f7:4c:a8:88:34:f5:d7:bf:18:3f:d3:0a:c4:3b:
3a:1f:d3:75:2b:10:1e:ed:42:9b:48:28:ee:5d:ec:
be:e4:26:3b:f9:1f:55:05:e7:1b:9f:46:31:37:34:
c5:4e:3e:1c:36:c7:20:15:e6:9b:c2:ed:d2:ff:6f:
a3:fd:79:fa:e8:d1:0c:5b:dc:08:af:48:d7:71:a5:
29:ec:6f:72:36:80:d6:86:bd:a7:f0:38:16:9e:bc:
b4:50:7e:75:0f:7f:1c:27:43:16:e8:6f:bc:5a:09:
c9:81:b8:db:ca:73:10:e4:fa:af:e6:b3:b4:4b:1a:
84:a0:1b:8b:d8:ac:bf:29:01:12:f6:e3:22:5e:93:
06:1e:f0:48:db:28:b7:d3:c7:48:3b:b7:d0:ff:84:
d8:e9:f2:35:30:5f:ad:ed:9a:73:ce:66:23:37:47:
c8:68:7a:f8:37:7c:4d:26:7b:a0:20:60:e7:7e:ed:
99:60:23:3f:34:d8:b2:3a:71:83:f0:05:c5:02:90:
02:c3:2a:e6:6a:ee:1d:f3:bd:3e:1b:cd:f8:46:d5:
96:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:54:99:53:FB:A4:73:B8:9C:19:B0:65:8C:75:FF:DC:A0:B5:B2:C0
X509v3 Authority Key Identifier:
keyid:FC:AA:08:62:26:DF:02:AF:83:94:FA:B2:2D:1F:B9:6E:0B:7D:65:DD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91298DA/34F3612E268111EA903D7058C4F9AE02/_KoIYibfAq-DlPqyLR-5bgt9Zd0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_KoIYibfAq-DlPqyLR-5bgt9Zd0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91298DA/34F3612E268111EA903D7058C4F9AE02/C5639A105E3B11F09FAC9B6DC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
36.255.100.0/22
43.229.164.0/22
43.230.92.0/22
43.231.60.0/22
43.248.12.0/22
45.113.124.0/22
45.117.105.0-45.117.107.255
103.24.96.0/22
103.35.214.0/23
103.39.80.0/22
103.49.136.0/22
103.50.156.0/22
103.53.44.0/22
103.57.168.0/22
103.70.84.0/23
103.200.196.0/22
103.209.84.0/22
117.53.40.0/22
150.129.4.0/22
IPv6:
2400:1680::/32
Signature Algorithm: sha256WithRSAEncryption
51:ea:0e:2b:81:25:d5:8a:b9:55:b5:b6:58:86:dc:cd:a0:8e:
20:bd:01:10:04:97:ce:56:73:69:f4:45:5d:a2:ad:e5:05:10:
bf:5f:6d:f2:e9:e8:9c:5b:e9:2a:7d:4c:86:36:8e:8e:3d:90:
77:34:f1:3d:ff:b1:ff:02:c2:a4:dc:d6:0c:d7:70:9c:67:e4:
b7:2d:49:ca:2f:eb:b8:ab:6d:f1:b1:f6:41:68:a4:b4:26:99:
69:6b:1a:1c:e1:8f:9b:26:ad:89:9c:6e:cf:61:bf:24:bc:86:
7a:5e:f3:19:55:cc:8f:0f:cc:fa:68:ba:31:3d:35:ff:45:ef:
ea:63:5c:ca:31:c4:6a:55:d9:46:02:2c:03:c9:e7:b0:a8:76:
b6:66:03:38:5a:e2:2f:ff:3d:34:ac:28:1c:df:cf:eb:21:a0:
01:d6:24:b8:4c:b0:a3:49:6a:b5:ea:6d:81:6b:33:81:4b:23:
08:62:00:68:e9:10:d0:d2:6d:9b:7c:36:ee:06:e9:a0:47:73:
90:f7:05:f0:cb:cb:3f:74:84:99:d9:06:51:a2:f1:75:78:01:
5b:a7:4c:cf:94:9b:ad:2e:f1:04:14:5f:4c:75:22:62:4e:d2:
39:cd:c1:16:b9:89:4e:d7:33:eb:2a:55:ed:9d:6b:9a:93:56:
4d:fe:ab:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 24 05:04:57 2025 by rpki-client