Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/674B4ED227C811EFAECE0786C4F9AE02.roa
File: 674B4ED227C811EFAECE0786C4F9AE02.roa (raw, json)
Hash identifier: aehbK4i3DX8ZL4HahO3iYu2Q1jB2dGOiHMP50jbgKSg=
Subject key identifier: 8E:5B:1B:27:EB:A3:40:2E:F8:4D:4F:D1:9D:B4:03:7B:15:ED:44:5B
Certificate issuer: /CN=A9137ABC/serialNumber=61BF3ED4C3BFBC0916EF9480AAFF222A437AF02C
Certificate serial: 39DE
Authority key identifier: 61:BF:3E:D4:C3:BF:BC:09:16:EF:94:80:AA:FF:22:2A:43:7A:F0:2C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/674B4ED227C811EFAECE0786C4F9AE02.roa
Signing time: Mon 14 Jul 2025 14:50:48 +0000
ROA not before: Mon 14 Jul 2025 14:50:48 +0000
ROA not after: Wed 30 Sep 2026 00:00:00 +0000
asID: 17552
IP address blocks: 27.145.0.0/16 maxlen: 24
58.8.0.0/16 maxlen: 24
58.9.0.0/16 maxlen: 24
58.10.0.0/16 maxlen: 24
58.11.0.0/16 maxlen: 24
61.90.0.0/17 maxlen: 24
61.91.128.0/21 maxlen: 24
61.91.144.0/21 maxlen: 24
61.91.190.0/24 maxlen: 24
61.91.191.0/24 maxlen: 24
61.91.192.0/24 maxlen: 24
61.91.193.0/24 maxlen: 24
61.91.201.0/24 maxlen: 24
61.91.214.0/24 maxlen: 24
110.168.0.0/17 maxlen: 24
110.168.128.0/17 maxlen: 24
110.169.0.0/16 maxlen: 24
110.171.0.0/17 maxlen: 24
110.171.128.0/17 maxlen: 24
114.109.0.0/16 maxlen: 24
115.87.0.0/17 maxlen: 24
115.87.128.0/17 maxlen: 24
119.46.255.0/24 maxlen: 24
119.76.0.0/16 maxlen: 24
124.120.0.0/16 maxlen: 24
124.121.0.0/16 maxlen: 24
124.122.0.0/16 maxlen: 24
171.96.0.0/16 maxlen: 24
171.97.0.0/16 maxlen: 24
171.98.0.0/16 maxlen: 24
171.99.0.0/16 maxlen: 24
171.100.0.0/16 maxlen: 24
171.101.0.0/16 maxlen: 24
171.102.0.0/16 maxlen: 24
171.103.0.0/16 maxlen: 24
182.17.0.0/16 maxlen: 24
202.133.128.0/20 maxlen: 24
202.133.144.0/20 maxlen: 24
202.133.160.0/19 maxlen: 24
202.176.64.0/18 maxlen: 18
202.176.64.0/19 maxlen: 24
202.176.96.0/19 maxlen: 24
202.176.128.0/18 maxlen: 24
210.213.0.0/18 maxlen: 24
2001:fb0:1004::/48 maxlen: 48
2001:fb0:1005::/48 maxlen: 48
2001:fb1::/32 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.crl
rsync://rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 27 Jul 2025 14:20:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 14814 (0x39de)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9137ABC, serialNumber=61BF3ED4C3BFBC0916EF9480AAFF222A437AF02C
Validity
Not Before: Jul 14 14:50:48 2025 GMT
Not After : Sep 30 00:00:00 2026 GMT
Subject: CN=68751948-bdc2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:00:d0:86:46:6b:23:b4:8d:9d:63:95:07:99:
b8:79:ad:7f:96:72:66:42:10:70:15:d9:43:be:f4:
9a:eb:77:8d:ca:a7:d1:cf:5e:47:a5:45:fe:1a:23:
4c:e8:ea:32:07:f1:b2:a1:36:20:2d:04:ed:73:2e:
44:2a:10:62:65:04:d8:6d:24:0b:25:50:1b:b6:ab:
90:8a:bb:7e:a4:16:92:53:f4:54:ac:80:13:47:a1:
31:50:84:1e:76:94:71:5f:4c:0e:56:90:f9:ce:ef:
65:00:af:c5:07:50:33:65:35:5e:81:6f:90:d1:a9:
d2:07:68:84:d1:1d:73:38:f1:3f:28:33:47:67:ca:
dc:53:dc:0d:61:ca:27:cf:2d:d8:4e:cf:f6:e0:c5:
be:80:56:49:64:05:7b:bd:72:d0:4c:ce:02:c3:d7:
7e:c3:2a:2f:54:e8:1c:5b:77:e9:13:6b:08:85:85:
a2:f4:ac:f0:aa:2b:39:2b:19:fc:99:6f:fe:dc:42:
53:07:34:e8:3c:67:e4:9f:29:f8:92:d6:fc:7b:10:
3a:71:9c:be:17:17:a4:57:ed:be:e8:36:85:ad:24:
dd:41:4e:e2:3b:2b:39:04:65:ce:f9:e8:36:6c:7c:
01:1b:f7:61:5d:d1:26:85:ea:4d:2b:d7:a1:1b:68:
9a:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:5B:1B:27:EB:A3:40:2E:F8:4D:4F:D1:9D:B4:03:7B:15:ED:44:5B
X509v3 Authority Key Identifier:
keyid:61:BF:3E:D4:C3:BF:BC:09:16:EF:94:80:AA:FF:22:2A:43:7A:F0:2C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/674B4ED227C811EFAECE0786C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
27.145.0.0/16
58.8.0.0/14
61.90.0.0/17
61.91.128.0/21
61.91.144.0/21
61.91.190.0-61.91.193.255
61.91.201.0/24
61.91.214.0/24
110.168.0.0/15
110.171.0.0/16
114.109.0.0/16
115.87.0.0/16
119.46.255.0/24
119.76.0.0/16
124.120.0.0-124.122.255.255
171.96.0.0/13
182.17.0.0/16
202.133.128.0/18
202.176.64.0-202.176.191.255
210.213.0.0/18
IPv6:
2001:fb0:1004::/47
2001:fb1::/32
Signature Algorithm: sha256WithRSAEncryption
5c:c8:2f:f2:37:35:08:3c:6d:ea:7c:a6:cd:c4:30:bd:1c:0e:
6b:05:e4:5e:28:58:a4:88:d6:50:6a:7c:ec:39:15:05:ab:11:
c2:16:53:5d:a9:eb:c4:11:05:06:72:7d:36:f0:51:d9:14:fe:
81:6b:6b:8c:1a:04:ed:ed:d2:80:b8:ef:a2:b6:ae:50:4c:8f:
fd:03:e2:66:6c:03:ab:49:a6:0b:c7:51:67:37:21:8a:7c:d3:
b3:9f:5c:99:1e:0a:59:5f:0a:d1:e6:ef:4c:fa:0b:bb:0b:e7:
22:41:39:00:99:42:ea:f5:e8:00:e0:fe:65:43:3b:c0:71:4a:
0b:b7:ff:86:69:61:98:95:8c:c4:32:96:a5:8c:ee:00:01:38:
d4:51:71:b4:05:c3:f2:2b:bb:f6:b8:7b:89:1a:d3:5e:7e:79:
b9:18:b6:c8:40:cc:da:19:f6:ed:9c:2d:97:44:a2:ce:f6:e8:
8c:05:13:9f:57:13:b5:5d:4a:3b:4e:16:3a:cc:f8:ca:b0:1d:
c9:19:77:21:ec:07:45:29:7c:a1:a4:d6:ad:c6:2c:1d:5c:c4:
81:1d:d1:ed:96:0e:22:be:2f:c4:14:f8:b6:60:3d:33:c6:d7:
53:e2:3c:a1:d3:15:2c:fa:aa:78:6b:0d:d3:5d:11:df:31:5c:
13:3c:43:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 21 12:25:24 2025 by rpki-client