Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9145446/ACA2E75C1FC511E5B450DD62C4F9AE02/E44FF288EE9811EF88F8B953C4F9AE02.roa
File: E44FF288EE9811EF88F8B953C4F9AE02.roa (raw, json)
Hash identifier: uvjqzFfvCaF1lMuz8olgl++M16XP0jWHHM+hJ/1+RAk=
Subject key identifier: 26:89:EA:C2:36:83:4F:38:72:F8:21:4D:3B:8D:26:6A:EE:1E:D6:C8
Certificate issuer: /CN=A9145446/serialNumber=7D65EBE14C3046E73E3986957302A26E081F1AF8
Certificate serial: 27D2
Authority key identifier: 7D:65:EB:E1:4C:30:46:E7:3E:39:86:95:73:02:A2:6E:08:1F:1A:F8
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fWXr4UwwRuc-OYaVcwKibggfGvg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9145446/ACA2E75C1FC511E5B450DD62C4F9AE02/E44FF288EE9811EF88F8B953C4F9AE02.roa
Signing time: Fri 07 Mar 2025 06:06:15 +0000
ROA not before: Fri 07 Mar 2025 06:06:15 +0000
ROA not after: Mon 01 Dec 2025 00:00:00 +0000
asID: 23930
IP address blocks: 43.243.126.0/24 maxlen: 24
43.243.127.0/24 maxlen: 24
103.38.214.0/24 maxlen: 24
103.38.215.0/24 maxlen: 24
116.93.0.0/23 maxlen: 23
116.93.1.0/24 maxlen: 24
116.93.4.0/23 maxlen: 23
116.93.4.0/24 maxlen: 24
116.93.5.0/24 maxlen: 24
116.93.7.0/24 maxlen: 24
116.93.8.0/23 maxlen: 23
116.93.8.0/24 maxlen: 24
116.93.9.0/24 maxlen: 24
116.93.10.0/23 maxlen: 23
116.93.10.0/24 maxlen: 24
116.93.11.0/24 maxlen: 24
116.93.12.0/23 maxlen: 23
116.93.12.0/24 maxlen: 24
116.93.13.0/24 maxlen: 24
116.93.15.0/24 maxlen: 24
116.93.16.0/23 maxlen: 23
116.93.17.0/24 maxlen: 24
116.93.18.0/23 maxlen: 23
116.93.18.0/24 maxlen: 24
116.93.20.0/24 maxlen: 24
116.93.21.0/24 maxlen: 24
116.93.22.0/23 maxlen: 23
116.93.23.0/24 maxlen: 24
116.93.24.0/22 maxlen: 22
116.93.24.0/23 maxlen: 23
116.93.24.0/24 maxlen: 24
116.93.25.0/24 maxlen: 24
116.93.26.0/23 maxlen: 23
116.93.26.0/24 maxlen: 24
116.93.27.0/24 maxlen: 24
116.93.28.0/23 maxlen: 23
116.93.28.0/24 maxlen: 24
116.93.29.0/24 maxlen: 24
116.93.30.0/23 maxlen: 23
116.93.30.0/24 maxlen: 24
116.93.31.0/24 maxlen: 24
116.93.32.0/23 maxlen: 23
116.93.32.0/24 maxlen: 24
116.93.33.0/24 maxlen: 24
116.93.34.0/23 maxlen: 23
116.93.34.0/24 maxlen: 24
116.93.36.0/23 maxlen: 23
116.93.36.0/24 maxlen: 24
116.93.37.0/24 maxlen: 24
116.93.38.0/23 maxlen: 23
116.93.38.0/24 maxlen: 24
116.93.39.0/24 maxlen: 24
116.93.40.0/24 maxlen: 24
116.93.41.0/24 maxlen: 24
116.93.42.0/24 maxlen: 24
116.93.43.0/24 maxlen: 24
116.93.44.0/24 maxlen: 24
116.93.45.0/24 maxlen: 24
116.93.46.0/23 maxlen: 23
116.93.47.0/24 maxlen: 24
116.93.48.0/23 maxlen: 23
116.93.49.0/24 maxlen: 24
116.93.50.0/23 maxlen: 23
116.93.51.0/24 maxlen: 24
116.93.52.0/24 maxlen: 24
116.93.54.0/23 maxlen: 23
116.93.54.0/24 maxlen: 24
116.93.61.0/24 maxlen: 24
116.93.62.0/24 maxlen: 24
116.93.63.0/24 maxlen: 24
116.93.64.0/24 maxlen: 24
116.93.65.0/24 maxlen: 24
116.93.66.0/24 maxlen: 24
116.93.67.0/24 maxlen: 24
116.93.71.0/24 maxlen: 24
116.93.74.0/24 maxlen: 24
116.93.75.0/24 maxlen: 24
116.93.78.0/24 maxlen: 24
116.93.79.0/24 maxlen: 24
116.93.80.0/23 maxlen: 23
116.93.80.0/24 maxlen: 24
116.93.85.0/24 maxlen: 24
116.93.87.0/24 maxlen: 24
116.93.88.0/24 maxlen: 24
116.93.90.0/24 maxlen: 24
116.93.91.0/24 maxlen: 24
116.93.93.0/24 maxlen: 24
116.93.94.0/24 maxlen: 24
116.93.96.0/24 maxlen: 24
116.93.97.0/24 maxlen: 24
116.93.100.0/24 maxlen: 24
116.93.102.0/24 maxlen: 24
116.93.105.0/24 maxlen: 24
116.93.106.0/24 maxlen: 24
116.93.107.0/24 maxlen: 24
116.93.108.0/24 maxlen: 24
116.93.109.0/24 maxlen: 24
116.93.110.0/24 maxlen: 24
116.93.111.0/24 maxlen: 24
116.93.112.0/24 maxlen: 24
116.93.114.0/24 maxlen: 24
116.93.115.0/24 maxlen: 24
116.93.117.0/24 maxlen: 24
116.93.118.0/24 maxlen: 24
116.93.119.0/24 maxlen: 24
116.93.120.0/24 maxlen: 24
116.93.121.0/24 maxlen: 24
116.93.122.0/24 maxlen: 24
116.93.124.0/24 maxlen: 24
116.93.126.0/24 maxlen: 24
116.93.127.0/24 maxlen: 24
121.127.6.0/24 maxlen: 24
121.127.7.0/24 maxlen: 24
121.127.8.0/24 maxlen: 24
121.127.9.0/24 maxlen: 24
121.127.10.0/24 maxlen: 24
121.127.11.0/24 maxlen: 24
121.127.12.0/23 maxlen: 23
121.127.12.0/24 maxlen: 24
121.127.13.0/24 maxlen: 24
121.127.14.0/23 maxlen: 23
121.127.14.0/24 maxlen: 24
121.127.15.0/24 maxlen: 24
121.127.16.0/24 maxlen: 24
121.127.17.0/24 maxlen: 24
121.127.18.0/24 maxlen: 24
121.127.20.0/23 maxlen: 23
121.127.20.0/24 maxlen: 24
121.127.21.0/24 maxlen: 24
121.127.22.0/23 maxlen: 23
121.127.22.0/24 maxlen: 24
121.127.23.0/24 maxlen: 24
121.127.26.0/23 maxlen: 23
121.127.26.0/24 maxlen: 24
121.127.27.0/24 maxlen: 24
121.127.28.0/23 maxlen: 23
121.127.28.0/24 maxlen: 24
121.127.29.0/24 maxlen: 24
121.127.30.0/23 maxlen: 23
121.127.30.0/24 maxlen: 24
121.127.31.0/24 maxlen: 24
203.99.232.0/21 maxlen: 21
203.99.232.0/23 maxlen: 23
203.99.232.0/24 maxlen: 24
203.99.233.0/24 maxlen: 24
203.99.234.0/24 maxlen: 24
203.99.235.0/24 maxlen: 24
203.99.236.0/24 maxlen: 24
203.99.237.0/24 maxlen: 24
203.99.238.0/23 maxlen: 23
203.99.238.0/24 maxlen: 24
203.99.239.0/24 maxlen: 24
203.208.24.0/23 maxlen: 23
203.208.24.0/24 maxlen: 24
203.208.25.0/24 maxlen: 24
203.208.26.0/24 maxlen: 24
203.208.27.0/24 maxlen: 24
203.208.28.0/24 maxlen: 24
203.208.29.0/24 maxlen: 24
203.208.30.0/24 maxlen: 24
203.208.31.0/24 maxlen: 24
2401:9800::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9145446/ACA2E75C1FC511E5B450DD62C4F9AE02/fWXr4UwwRuc-OYaVcwKibggfGvg.crl
rsync://rpki.apnic.net/member_repository/A9145446/ACA2E75C1FC511E5B450DD62C4F9AE02/fWXr4UwwRuc-OYaVcwKibggfGvg.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fWXr4UwwRuc-OYaVcwKibggfGvg.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 11 Apr 2025 15:48:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 10194 (0x27d2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9145446
Validity
Not Before: Mar 7 06:06:15 2025 GMT
Not After : Dec 1 00:00:00 2025 GMT
Subject: CN=67ca8cd6-2eec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:6e:e4:55:8c:1b:f5:d8:9c:56:3e:ff:cf:ae:
a0:31:b3:55:e9:c1:48:69:21:11:00:05:ae:92:74:
02:fe:12:c6:17:5d:ce:bc:ae:8e:94:68:3f:c8:a6:
56:71:2b:66:a5:3d:07:80:23:f3:5c:6f:0a:cf:53:
0c:55:80:03:8e:7a:0d:2d:a9:78:fe:e8:a2:56:f3:
86:5d:f3:8d:7d:4e:20:07:2c:13:12:65:2c:e1:1a:
ad:18:c0:9f:0a:4d:10:5f:02:73:9f:67:46:7c:23:
fc:36:d6:39:27:18:1f:5f:5f:81:6a:28:9f:85:1c:
4f:5a:13:73:2e:fb:1c:e0:d2:48:f2:30:0d:d8:89:
bd:ef:51:d2:33:66:ef:1a:d3:91:38:fd:cc:d1:f9:
6c:44:80:de:69:ec:73:95:12:6c:d7:b2:5c:62:de:
91:79:86:af:aa:e6:7f:aa:0c:4a:9a:6d:0a:06:e6:
2a:fb:c0:ca:9d:58:08:cb:fc:c4:f1:b6:ee:06:01:
96:87:ac:d7:7b:5d:f9:20:18:1a:dd:32:1f:dd:0a:
fc:02:6e:65:35:04:99:70:6d:18:9d:cf:db:93:63:
db:5c:05:4d:16:19:97:92:12:be:b7:1b:72:cc:97:
c3:0a:19:42:fd:37:58:9e:e7:6d:15:af:23:2f:17:
23:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:89:EA:C2:36:83:4F:38:72:F8:21:4D:3B:8D:26:6A:EE:1E:D6:C8
X509v3 Authority Key Identifier:
keyid:7D:65:EB:E1:4C:30:46:E7:3E:39:86:95:73:02:A2:6E:08:1F:1A:F8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9145446/ACA2E75C1FC511E5B450DD62C4F9AE02/fWXr4UwwRuc-OYaVcwKibggfGvg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fWXr4UwwRuc-OYaVcwKibggfGvg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9145446/ACA2E75C1FC511E5B450DD62C4F9AE02/E44FF288EE9811EF88F8B953C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
43.243.126.0/23
103.38.214.0/23
116.93.0.0/23
116.93.4.0/23
116.93.7.0-116.93.13.255
116.93.15.0-116.93.52.255
116.93.54.0/23
116.93.61.0-116.93.67.255
116.93.71.0/24
116.93.74.0/23
116.93.78.0-116.93.81.255
116.93.85.0/24
116.93.87.0-116.93.88.255
116.93.90.0/23
116.93.93.0-116.93.94.255
116.93.96.0/23
116.93.100.0/24
116.93.102.0/24
116.93.105.0-116.93.112.255
116.93.114.0/23
116.93.117.0-116.93.122.255
116.93.124.0/24
116.93.126.0/23
121.127.6.0-121.127.18.255
121.127.20.0/22
121.127.26.0-121.127.31.255
203.99.232.0/21
203.208.24.0/21
IPv6:
2401:9800::/32
Signature Algorithm: sha256WithRSAEncryption
86:f0:e3:42:5e:a3:a2:49:00:bc:be:58:37:29:3c:62:9f:2a:
6f:3f:45:04:62:e3:31:bc:da:8a:d8:dc:bf:58:47:ad:fa:28:
df:a9:3c:e4:64:88:bd:01:26:ac:fc:0a:f8:c0:2c:0b:7c:5d:
2c:e4:ac:73:a8:06:d2:54:89:40:9f:b6:f4:cd:73:16:5a:71:
1d:7c:db:a2:98:ee:61:c2:84:0c:be:98:8d:0e:c8:74:a8:41:
d3:00:11:2e:da:1e:23:b3:ad:b9:47:66:b8:7f:8d:7a:01:ec:
94:44:c6:5e:c8:1d:e6:80:a4:e2:a2:28:86:6d:37:3b:e9:49:
88:32:60:89:4b:8e:e1:f3:94:52:11:ed:3d:67:30:1c:ed:f7:
7e:bb:b4:78:f9:98:29:93:a9:f6:c3:b1:75:e1:40:50:06:68:
60:8a:07:7b:20:48:04:d5:a5:af:1b:43:7a:82:f6:d8:f8:2a:
f3:d7:f2:82:c3:f3:2d:e5:2c:1e:3e:95:23:68:ff:b8:55:64:
eb:43:49:71:72:89:f3:0b:5b:79:d2:2c:15:1f:46:fe:b3:ef:
6a:34:a6:06:86:5f:4c:62:2f:ae:55:0a:92:04:8b:14:67:37:
a1:4b:10:3f:39:bc:79:e5:01:0b:ac:78:f1:b0:1b:f4:7c:30:
63:f7:0a:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 06:12:17 2025 by rpki-client