Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A912AF0B/B59419D232ED11E99C954C24C4F9AE02/1803FFC65E5F11EBBE37FA4CC4F9AE02.roa
File: 1803FFC65E5F11EBBE37FA4CC4F9AE02.roa (raw, json)
Hash identifier: eUt1E2TLbdx/xbzWyASK22uYzePTztkTbdss+ADEaLg=
Subject key identifier: 35:BF:A7:61:12:E4:14:C9:05:35:44:DD:6A:9B:CA:73:35:48:58:5C
Certificate issuer: /CN=A912AF0B/serialNumber=C4D7509E532CE2F6E4CB4E8E5C3C226BA3154E6F
Certificate serial: 106E
Authority key identifier: C4:D7:50:9E:53:2C:E2:F6:E4:CB:4E:8E:5C:3C:22:6B:A3:15:4E:6F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xNdQnlMs4vbky06OXDwia6MVTm8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912AF0B/B59419D232ED11E99C954C24C4F9AE02/1803FFC65E5F11EBBE37FA4CC4F9AE02.roa
Signing time: Fri 28 Feb 2025 18:27:15 +0000
ROA not before: Fri 28 Feb 2025 18:27:15 +0000
ROA not after: Tue 31 Mar 2026 00:00:00 +0000
asID: 138544
IP address blocks: 103.132.180.0/22 maxlen: 22
103.132.180.0/23 maxlen: 23
103.132.180.0/24 maxlen: 24
103.132.181.0/24 maxlen: 24
103.132.182.0/24 maxlen: 24
103.132.183.0/24 maxlen: 24
2404:3d40::/32 maxlen: 32
2404:3d40::/48 maxlen: 48
2404:3d40:1::/48 maxlen: 48
2404:3d40:2::/48 maxlen: 48
2404:3d40:3::/48 maxlen: 48
2404:3d40:4::/48 maxlen: 48
2404:3d40:5::/48 maxlen: 48
2404:3d40:6::/48 maxlen: 48
2404:3d40:7::/48 maxlen: 48
2404:3d40:8::/48 maxlen: 48
2404:3d40:9::/48 maxlen: 48
2404:3d40:a::/48 maxlen: 48
2404:3d40:b::/48 maxlen: 48
2404:3d40:c::/48 maxlen: 48
2404:3d40:d::/48 maxlen: 48
2404:3d40:e::/48 maxlen: 48
2404:3d40:f::/48 maxlen: 48
2404:3d40:10::/48 maxlen: 48
2404:3d40:11::/48 maxlen: 48
2404:3d40:12::/48 maxlen: 48
2404:3d40:13::/48 maxlen: 48
2404:3d40:14::/48 maxlen: 48
2404:3d40:15::/48 maxlen: 48
2404:3d40:16::/48 maxlen: 48
2404:3d40:17::/48 maxlen: 48
2404:3d40:18::/48 maxlen: 48
2404:3d40:19::/48 maxlen: 48
2404:3d40:1a::/48 maxlen: 48
2404:3d40:1b::/48 maxlen: 48
2404:3d40:1c::/48 maxlen: 48
2404:3d40:1d::/48 maxlen: 48
2404:3d40:1e::/48 maxlen: 48
2404:3d40:1f::/48 maxlen: 48
2404:3d40:20::/48 maxlen: 48
2404:3d40:21::/48 maxlen: 48
2404:3d40:22::/48 maxlen: 48
2404:3d40:23::/48 maxlen: 48
2404:3d40:24::/48 maxlen: 48
2404:3d40:25::/48 maxlen: 48
2404:3d40:26::/48 maxlen: 48
2404:3d40:27::/48 maxlen: 48
2404:3d40:28::/48 maxlen: 48
2404:3d40:29::/48 maxlen: 48
2404:3d40:2a::/48 maxlen: 48
2404:3d40:2b::/48 maxlen: 48
2404:3d40:2c::/48 maxlen: 48
2404:3d40:2d::/48 maxlen: 48
2404:3d40:2e::/48 maxlen: 48
2404:3d40:2f::/48 maxlen: 48
2404:3d40:30::/48 maxlen: 48
2404:3d40:31::/48 maxlen: 48
2404:3d40:32::/48 maxlen: 48
2404:3d40:33::/48 maxlen: 48
2404:3d40:34::/48 maxlen: 48
2404:3d40:35::/48 maxlen: 48
2404:3d40:36::/48 maxlen: 48
2404:3d40:37::/48 maxlen: 48
2404:3d40:38::/48 maxlen: 48
2404:3d40:39::/48 maxlen: 48
2404:3d40:3a::/48 maxlen: 48
2404:3d40:3b::/48 maxlen: 48
2404:3d40:3c::/48 maxlen: 48
2404:3d40:3d::/48 maxlen: 48
2404:3d40:3e::/48 maxlen: 48
2404:3d40:3f::/48 maxlen: 48
2404:3d40:40::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A912AF0B/B59419D232ED11E99C954C24C4F9AE02/xNdQnlMs4vbky06OXDwia6MVTm8.crl
rsync://rpki.apnic.net/member_repository/A912AF0B/B59419D232ED11E99C954C24C4F9AE02/xNdQnlMs4vbky06OXDwia6MVTm8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xNdQnlMs4vbky06OXDwia6MVTm8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 11 Apr 2025 17:27:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4206 (0x106e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912AF0B
Validity
Not Before: Feb 28 18:27:15 2025 GMT
Not After : Mar 31 00:00:00 2026 GMT
Subject: CN=67c20003-8092
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:53:04:90:0d:3e:94:76:77:3a:79:6f:41:2c:
77:fc:d3:00:39:08:c4:5a:15:93:9b:59:d9:c3:75:
ea:32:63:e0:db:13:44:66:27:eb:6d:68:56:47:b0:
4e:ff:9c:c2:1e:e1:b4:c5:27:b1:fe:b2:27:f7:3b:
4b:88:58:8d:23:48:21:de:2a:59:e7:66:29:7e:a8:
fc:19:fc:98:0e:cf:38:fa:01:fc:df:b2:38:e8:67:
12:23:ca:3c:34:3c:e1:91:d4:07:f6:1e:db:2a:b3:
db:e1:ba:1c:58:ef:58:56:ad:b7:9a:fd:6c:84:a3:
ab:a0:a8:4e:c2:c9:6c:62:52:c2:43:c5:39:9e:4d:
05:3e:40:b6:2c:7b:9e:50:38:45:1f:15:bc:56:ca:
12:01:c3:a2:72:da:ee:c1:46:08:51:1c:f6:7a:a6:
31:a0:d0:53:f3:a7:1c:4c:d4:f4:a0:ad:a9:0a:82:
2f:e2:49:45:8e:98:69:5c:e4:03:c0:29:26:06:9e:
81:4b:4f:03:46:58:e9:12:cd:be:6d:fb:56:97:6b:
00:70:52:08:28:10:48:30:73:b4:74:63:b6:99:64:
bf:51:57:f9:ad:f0:09:fc:e5:f7:f3:8f:ac:29:6b:
2e:82:9a:df:51:11:a3:5d:34:97:53:da:ef:33:1d:
b9:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:BF:A7:61:12:E4:14:C9:05:35:44:DD:6A:9B:CA:73:35:48:58:5C
X509v3 Authority Key Identifier:
keyid:C4:D7:50:9E:53:2C:E2:F6:E4:CB:4E:8E:5C:3C:22:6B:A3:15:4E:6F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912AF0B/B59419D232ED11E99C954C24C4F9AE02/xNdQnlMs4vbky06OXDwia6MVTm8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xNdQnlMs4vbky06OXDwia6MVTm8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912AF0B/B59419D232ED11E99C954C24C4F9AE02/1803FFC65E5F11EBBE37FA4CC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.132.180.0/22
IPv6:
2404:3d40::/32
Signature Algorithm: sha256WithRSAEncryption
83:db:36:ee:18:a7:ec:90:56:2f:b1:1d:72:43:ad:8c:f1:0a:
86:eb:53:88:9a:4b:e2:30:d0:ca:82:37:13:b6:c0:b6:02:34:
9b:5b:5a:da:ca:24:7e:78:99:4a:d8:18:cb:91:cb:bc:c5:b2:
5e:8a:fb:48:60:3d:2e:74:e9:be:8d:2f:47:05:ab:7b:16:15:
6f:90:99:5b:b3:cd:35:94:f4:08:42:90:f9:76:2b:0a:3b:42:
18:84:18:b2:de:a8:30:4e:85:8d:d0:64:68:5f:8f:77:16:86:
96:1b:59:77:18:74:50:27:93:5b:92:4d:fa:5e:2a:24:59:e5:
37:1b:cf:d1:5e:e7:95:30:2e:04:cb:60:a5:ca:1a:ac:db:c1:
1d:e8:c3:87:4b:7f:85:8d:11:c1:58:7c:94:45:55:0b:c0:f1:
2e:b2:37:d4:cd:dd:d1:94:3b:3d:a0:91:3c:3a:07:d3:9d:17:
cc:2e:7d:bd:69:f9:aa:4a:4e:8b:a6:96:bc:6a:78:5b:ab:d7:
e1:d0:b8:32:c2:d2:53:3b:1a:63:54:8a:ac:cf:e3:d5:af:ae:
9a:2e:6c:3d:ff:14:06:d7:4b:92:7b:8d:26:45:6c:76:63:ac:
7d:a9:59:75:2b:9b:4e:fc:73:8d:86:73:ea:f7:c8:cc:d3:24:
9f:5c:f3:f2
-----BEGIN CERTIFICATE-----
MIIFgDCCBGigAwIBAgICEG4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MkFGMEIxMTAvBgNVBAUTKEM0RDc1MDlFNTMyQ0UyRjZFNENCNEU4RTVDM0MyMjZC
QTMxNTRFNkYwHhcNMjUwMjI4MTgyNzE1WhcNMjYwMzMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02N2MyMDAwMy04MDkyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA6FMEkA0+lHZ3OnlvQSx3/NMAOQjEWhWTm1nZw3XqMmPg2xNEZifrbWhWR7BO
/5zCHuG0xSex/rIn9ztLiFiNI0gh3ipZ52Ypfqj8GfyYDs84+gH837I46GcSI8o8
NDzhkdQH9h7bKrPb4bocWO9YVq23mv1shKOroKhOwslsYlLCQ8U5nk0FPkC2LHue
UDhFHxW8VsoSAcOictruwUYIURz2eqYxoNBT86ccTNT0oK2pCoIv4klFjphpXOQD
wCkmBp6BS08DRljpEs2+bftWl2sAcFIIKBBIMHO0dGO2mWS/UVf5rfAJ/OX384+s
KWsugprfURGjXTSXU9rvMx25nQIDAQABo4ICpDCCAqAwHQYDVR0OBBYEFDW/p2ES
5BTJBTVE3WqbynM1SFhcMB8GA1UdIwQYMBaAFMTXUJ5TLOL25MtOjlw8ImujFU5v
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyQUYwQi9CNTk0MTlEMjMy
RUQxMUU5OUM5NTRDMjRDNEY5QUUwMi94TmRRbmxNczR2Ymt5MDZPWER3aWE2TVZU
bTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3hOZFFubE1zNHZia3kwNk9YRHdpYTZNVlRtOC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
MkFGMEIvQjU5NDE5RDIzMkVEMTFFOTlDOTU0QzI0QzRGOUFFMDIvMTgwM0ZGQzY1
RTVGMTFFQkJFMzdGQTRDQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwLgYIKwYBBQUHAQcBAf8E
HzAdMAwEAgABMAYDBAJnhLQwDQQCAAIwBwMFACQEPUAwDQYJKoZIhvcNAQELBQAD
ggEBAIPbNu4Yp+yQVi+xHXJDrYzxCobrU4iaS+Iw0MqCNxO2wLYCNJtbWtrKJH54
mUrYGMuRy7zFsl6K+0hgPS506b6NL0cFq3sWFW+QmVuzzTWU9AhCkPl2Kwo7QhiE
GLLeqDBOhY3QZGhfj3cWhpYbWXcYdFAnk1uSTfpeKiRZ5Tcbz9Fe55UwLgTLYKXK
GqzbwR3ow4dLf4WNEcFYfJRFVQvA8S6yN9TN3dGUOz2gkTw6B9OdF8wufb1p+apK
ToumlrxqeFur1+HQuDLC0lM7GmNUiqzP49WvrpoubD3/FAbXS5J7jSZFbHZjrH2p
WXUrm078c42Gc+r3yMzTJJ9c8/I=
-----END CERTIFICATE-----
Generated at Sun Apr 6 01:26:56 2025 by rpki-client