Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/5CC0FB0627C811EF9719D685C4F9AE02.roa
File: 5CC0FB0627C811EF9719D685C4F9AE02.roa (raw, json)
Hash identifier: n9k8X8GMhUjzruX10FtU7z3Ur5JS66sPNGo6XhKbno8=
Subject key identifier: 2D:08:DE:50:EB:E0:45:CF:09:C8:6D:FE:1D:79:9F:EA:71:0B:9B:0D
Certificate issuer: /CN=A9137ABC/serialNumber=61BF3ED4C3BFBC0916EF9480AAFF222A437AF02C
Certificate serial: 3A17
Authority key identifier: 61:BF:3E:D4:C3:BF:BC:09:16:EF:94:80:AA:FF:22:2A:43:7A:F0:2C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/5CC0FB0627C811EF9719D685C4F9AE02.roa
Signing time: Mon 14 Jul 2025 14:51:38 +0000
ROA not before: Mon 14 Jul 2025 14:51:38 +0000
ROA not after: Wed 30 Sep 2026 00:00:00 +0000
asID: 7470
IP address blocks: 27.145.0.0/16 maxlen: 24
58.8.0.0/16 maxlen: 24
58.9.0.0/16 maxlen: 24
58.10.0.0/16 maxlen: 24
58.11.0.0/16 maxlen: 24
58.97.0.0/18 maxlen: 24
58.97.64.0/18 maxlen: 24
61.90.0.0/17 maxlen: 24
61.90.128.0/17 maxlen: 24
61.91.0.0/18 maxlen: 24
61.91.64.0/18 maxlen: 24
61.91.128.0/19 maxlen: 24
61.91.160.0/19 maxlen: 24
61.91.192.0/18 maxlen: 24
103.3.176.0/22 maxlen: 24
110.168.0.0/16 maxlen: 24
110.169.0.0/16 maxlen: 24
110.170.0.0/15 maxlen: 24
114.109.0.0/16 maxlen: 24
115.87.0.0/16 maxlen: 24
119.46.0.0/16 maxlen: 22
119.46.0.0/18 maxlen: 24
119.46.64.0/19 maxlen: 24
119.46.96.0/24 maxlen: 24
119.46.97.0/24 maxlen: 24
119.46.98.0/23 maxlen: 24
119.46.100.0/22 maxlen: 24
119.46.104.0/21 maxlen: 24
119.46.112.0/20 maxlen: 24
119.46.128.0/19 maxlen: 24
119.46.160.0/20 maxlen: 24
119.46.176.0/23 maxlen: 24
119.46.178.0/24 maxlen: 24
119.46.179.0/24 maxlen: 24
119.46.180.0/22 maxlen: 24
119.46.184.0/21 maxlen: 24
119.46.192.0/18 maxlen: 24
119.76.0.0/16 maxlen: 24
124.120.0.0/16 maxlen: 24
124.121.0.0/16 maxlen: 24
124.122.0.0/16 maxlen: 24
171.96.0.0/16 maxlen: 24
171.97.0.0/16 maxlen: 24
171.98.0.0/16 maxlen: 24
171.99.0.0/16 maxlen: 24
171.100.0.0/16 maxlen: 24
171.101.0.0/16 maxlen: 24
171.102.0.0/16 maxlen: 19
171.102.0.0/17 maxlen: 24
171.102.144.0/20 maxlen: 24
171.102.160.0/19 maxlen: 24
171.102.192.0/18 maxlen: 23
171.102.192.0/20 maxlen: 24
171.102.208.0/21 maxlen: 24
171.102.216.0/22 maxlen: 24
171.102.220.0/24 maxlen: 24
171.102.222.0/23 maxlen: 24
171.102.224.0/21 maxlen: 24
171.102.232.0/22 maxlen: 24
171.102.236.0/23 maxlen: 24
171.102.239.0/24 maxlen: 24
171.102.240.0/20 maxlen: 24
171.103.0.0/16 maxlen: 24
182.17.0.0/16 maxlen: 24
202.93.48.0/20 maxlen: 20
202.133.128.0/20 maxlen: 24
202.133.144.0/20 maxlen: 24
202.133.160.0/19 maxlen: 24
202.176.64.0/18 maxlen: 18
202.176.64.0/19 maxlen: 24
202.176.96.0/19 maxlen: 24
202.176.128.0/18 maxlen: 24
203.118.64.0/20 maxlen: 20
203.118.80.0/20 maxlen: 20
203.118.96.0/20 maxlen: 20
203.118.99.0/24 maxlen: 24
203.118.112.0/20 maxlen: 20
203.144.128.0/20 maxlen: 24
203.144.144.0/20 maxlen: 24
203.144.160.0/20 maxlen: 24
203.144.176.0/20 maxlen: 24
203.144.192.0/20 maxlen: 24
203.144.208.0/20 maxlen: 24
203.144.224.0/20 maxlen: 24
203.144.244.0/24 maxlen: 24
203.144.246.0/24 maxlen: 24
203.144.254.0/24 maxlen: 24
203.144.255.0/24 maxlen: 24
203.153.128.0/20 maxlen: 20
210.86.128.0/18 maxlen: 18
210.86.128.0/21 maxlen: 21
210.86.140.0/22 maxlen: 22
210.86.140.0/24 maxlen: 24
210.86.141.0/24 maxlen: 24
210.86.145.0/24 maxlen: 24
210.86.160.0/24 maxlen: 24
210.86.161.0/24 maxlen: 24
210.86.162.0/24 maxlen: 24
210.86.163.0/24 maxlen: 24
210.86.164.0/24 maxlen: 24
210.86.165.0/24 maxlen: 24
210.86.166.0/24 maxlen: 24
210.86.167.0/24 maxlen: 24
210.86.168.0/24 maxlen: 24
210.86.169.0/24 maxlen: 24
210.86.170.0/24 maxlen: 24
210.86.171.0/24 maxlen: 24
210.86.172.0/24 maxlen: 24
210.86.173.0/24 maxlen: 24
210.86.174.0/24 maxlen: 24
210.86.175.0/24 maxlen: 24
210.86.190.0/24 maxlen: 24
210.86.191.0/24 maxlen: 24
210.86.192.0/19 maxlen: 19
210.86.213.0/24 maxlen: 24
210.86.214.0/24 maxlen: 24
210.213.0.0/18 maxlen: 24
2001:fb0::/32 maxlen: 32
2001:fb0:1004::/48 maxlen: 48
2001:fb0:1005::/48 maxlen: 48
2001:fb0:1061:12::/64 maxlen: 64
2001:fb0:1064::/48 maxlen: 48
2001:fb0:1065::/48 maxlen: 48
2001:fb0:109f::/48 maxlen: 48
2001:fb0:109f:4::/64 maxlen: 64
2001:fb0:109f:5::/64 maxlen: 64
2001:fb0:109f:1a::/64 maxlen: 64
2001:fb0:109f:1b::/64 maxlen: 64
2001:fb0:109f:8000::/64 maxlen: 64
2001:fb0:109f:8001::/64 maxlen: 64
2001:fb0:109f:8016::/64 maxlen: 64
2001:fb0:109f:8017::/64 maxlen: 64
2001:fb0:109f:8019::/64 maxlen: 64
2001:fb0:109f:801a::/64 maxlen: 64
2001:fb0:109f:801b::/64 maxlen: 64
2001:fb0:109f:801e::/64 maxlen: 64
2001:fb0:109f:801f::/64 maxlen: 64
2001:fb1::/32 maxlen: 48
2405:4000:800:1::15e/127 maxlen: 127
2405:4000:800:1::160/127 maxlen: 127
2405:4000:800:1::162/127 maxlen: 127
2405:4000:800:1::164/127 maxlen: 127
2405:4000:800:6::/64 maxlen: 64
2405:4000:800:7::/64 maxlen: 64
2405:4000:801::/64 maxlen: 64
2405:4000:801:1::/64 maxlen: 64
2405:4000:801:2::/64 maxlen: 64
2405:4000:801:3::/64 maxlen: 64
2405:4000:801:4::/64 maxlen: 64
2405:4000:801:5::/64 maxlen: 64
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.crl
rsync://rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 31 Jul 2025 14:20:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 14871 (0x3a17)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9137ABC, serialNumber=61BF3ED4C3BFBC0916EF9480AAFF222A437AF02C
Validity
Not Before: Jul 14 14:51:38 2025 GMT
Not After : Sep 30 00:00:00 2026 GMT
Subject: CN=68751979-f9f6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:4c:e3:63:e4:47:ee:69:f1:e2:fa:ee:8e:bc:
07:2a:f2:86:57:b4:1c:e0:4c:5a:bf:f7:c2:1f:0b:
8f:ce:56:f3:ca:40:7c:a4:a2:3c:a6:4b:16:c6:9e:
30:5d:f8:e9:d8:4a:34:11:e0:57:76:45:7c:3d:13:
23:c4:8b:3e:d8:85:06:03:68:9b:8c:01:7b:a7:e7:
4c:82:ea:28:99:16:79:91:b1:42:f1:ec:98:63:cf:
0d:61:40:7f:4d:5b:5e:56:28:8a:e3:5f:38:ef:f4:
73:c0:d2:59:53:0a:52:dc:7d:5e:37:60:db:69:d7:
a4:c3:75:b0:cb:8c:cd:47:84:9f:24:7c:66:01:bf:
b6:6f:4e:32:d2:0e:33:d2:ae:0b:b2:41:83:ce:98:
da:af:dc:53:c5:6a:f1:72:f3:c2:69:07:ee:35:ed:
57:9d:53:39:b3:76:77:27:c4:f6:b3:2b:5c:c3:8e:
4d:59:e2:81:ad:2e:21:0a:af:b6:5e:e5:3f:43:6f:
c2:36:23:47:b9:3e:48:2d:c0:e8:ce:27:98:cd:26:
78:a4:68:1a:e4:af:40:59:2a:9e:7c:2c:16:e4:04:
7f:9b:53:c8:f6:4c:46:d7:35:fd:b8:21:e5:b1:b5:
82:c4:9f:df:4d:da:ec:52:aa:10:1e:34:65:f3:6c:
15:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:08:DE:50:EB:E0:45:CF:09:C8:6D:FE:1D:79:9F:EA:71:0B:9B:0D
X509v3 Authority Key Identifier:
keyid:61:BF:3E:D4:C3:BF:BC:09:16:EF:94:80:AA:FF:22:2A:43:7A:F0:2C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/5CC0FB0627C811EF9719D685C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
27.145.0.0/16
58.8.0.0/14
58.97.0.0/17
61.90.0.0/15
103.3.176.0/22
110.168.0.0/14
114.109.0.0/16
115.87.0.0/16
119.46.0.0/16
119.76.0.0/16
124.120.0.0-124.122.255.255
171.96.0.0/13
182.17.0.0/16
202.93.48.0/20
202.133.128.0/18
202.176.64.0-202.176.191.255
203.118.64.0/18
203.144.128.0-203.144.239.255
203.144.244.0/24
203.144.246.0/24
203.144.254.0/23
203.153.128.0/20
210.86.128.0-210.86.223.255
210.213.0.0/18
IPv6:
2001:fb0::/31
2405:4000:800:1:0:0:0:15e-2405:4000:800:1:0:0:0:165
2405:4000:800:6::/63
2405:4000:801::-2405:4000:801:5:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
a8:01:ef:97:2a:df:9d:3a:d6:0b:90:ae:c8:40:f6:bb:7f:f9:
f2:74:5e:89:a2:7e:f4:0d:bf:9e:1f:f1:3b:8d:71:69:93:d6:
eb:89:67:e6:30:4d:86:d6:bd:47:65:8a:90:27:34:54:74:7d:
98:f7:bb:fb:2b:5c:1e:43:91:3c:18:09:d3:8b:51:72:75:24:
d7:c7:b1:e1:a6:28:64:a3:82:ad:d9:ea:6c:33:9f:9f:5e:71:
10:b2:1b:dd:9a:89:16:d2:41:10:fa:ed:a8:8e:4c:f8:b2:5b:
02:12:e8:b1:3b:e0:26:82:8a:a3:f2:17:4b:fd:2e:7e:9c:eb:
98:03:bd:a0:ee:cd:3d:31:e9:11:67:8b:b2:11:96:82:55:2f:
14:06:be:9e:b7:10:33:c5:b0:88:ca:65:80:d6:be:1d:57:bc:
1a:89:c6:9b:6a:d2:2e:f7:7a:b9:c5:e0:ff:7e:ee:dc:22:73:
57:eb:41:c5:b0:87:46:ee:25:9c:68:e5:29:61:b3:b3:cf:b3:
92:f2:22:7a:44:a9:b0:d4:6f:7b:17:a3:5d:aa:3f:59:87:20:
7b:9c:de:bf:92:df:f7:26:8f:aa:47:8b:2f:59:db:87:4a:e4:
a2:af:ea:e2:3a:29:3d:72:a6:db:cf:47:8f:c1:3f:7b:bf:9c:
09:a5:37:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 25 11:13:59 2025 by rpki-client