Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9148D01/E92519FA990B11EBA355CB53C4F9AE02/4DEF33661FBE11EF97E7974FC4F9AE02.roa
File: 4DEF33661FBE11EF97E7974FC4F9AE02.roa (raw, json)
Hash identifier: zJAtvCRlDaaE+ucbjGEI0GIseEvrZ7g2zUQWmhOK0V0=
Subject key identifier: 5D:94:5F:A3:F2:B4:67:4C:45:B5:3F:38:0F:D6:8D:36:22:D6:64:16
Certificate issuer: /CN=A9148D01/serialNumber=7E36AB1C044321B74CF678263E0524FD34179BBD
Certificate serial: 0681
Authority key identifier: 7E:36:AB:1C:04:43:21:B7:4C:F6:78:26:3E:05:24:FD:34:17:9B:BD
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fjarHARDIbdM9ngmPgUk_TQXm70.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9148D01/E92519FA990B11EBA355CB53C4F9AE02/4DEF33661FBE11EF97E7974FC4F9AE02.roa
Signing time: Fri 10 Jan 2025 06:02:08 +0000
ROA not before: Fri 10 Jan 2025 06:02:08 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 17762
IP address blocks: 49.248.0.0/17 maxlen: 21
49.248.0.0/18 maxlen: 24
49.248.64.0/19 maxlen: 24
49.248.96.0/22 maxlen: 22
49.248.96.0/23 maxlen: 24
49.248.104.0/21 maxlen: 24
49.248.112.0/20 maxlen: 23
49.248.112.0/21 maxlen: 24
49.248.120.0/22 maxlen: 24
49.248.124.0/23 maxlen: 24
49.248.126.0/24 maxlen: 24
49.248.128.0/18 maxlen: 18
49.248.128.0/21 maxlen: 23
49.248.129.0/24 maxlen: 24
49.248.135.0/24 maxlen: 24
49.248.136.0/21 maxlen: 23
49.248.136.0/24 maxlen: 24
49.248.138.0/23 maxlen: 24
49.248.140.0/22 maxlen: 24
49.248.144.0/22 maxlen: 24
49.248.148.0/23 maxlen: 24
49.248.151.0/24 maxlen: 24
49.248.152.0/21 maxlen: 24
49.248.160.0/19 maxlen: 24
49.248.192.0/19 maxlen: 24
49.248.246.0/23 maxlen: 24
49.248.248.0/21 maxlen: 24
103.3.40.0/24 maxlen: 24
103.3.41.0/24 maxlen: 24
103.3.43.0/24 maxlen: 24
103.8.148.0/22 maxlen: 24
114.143.0.0/16 maxlen: 24
123.252.128.0/18 maxlen: 21
123.252.128.0/22 maxlen: 22
123.252.128.0/23 maxlen: 24
123.252.131.0/24 maxlen: 24
123.252.133.0/24 maxlen: 24
123.252.134.0/23 maxlen: 24
123.252.136.0/21 maxlen: 22
123.252.136.0/23 maxlen: 24
123.252.138.0/24 maxlen: 24
123.252.140.0/22 maxlen: 24
123.252.144.0/20 maxlen: 24
123.252.160.0/19 maxlen: 24
123.252.192.0/18 maxlen: 24
202.149.192.0/19 maxlen: 19
202.149.192.0/22 maxlen: 22
202.149.192.0/24 maxlen: 24
202.149.193.0/24 maxlen: 24
202.149.196.0/24 maxlen: 24
202.149.198.0/24 maxlen: 24
202.149.199.0/24 maxlen: 24
202.149.201.0/24 maxlen: 24
202.149.202.0/24 maxlen: 24
202.149.203.0/24 maxlen: 24
202.149.204.0/22 maxlen: 22
202.149.204.0/23 maxlen: 23
202.149.207.0/24 maxlen: 24
202.149.210.0/24 maxlen: 24
202.149.212.0/22 maxlen: 22
202.149.214.0/24 maxlen: 24
202.149.217.0/24 maxlen: 24
202.149.218.0/24 maxlen: 24
202.149.219.0/24 maxlen: 24
202.149.220.0/22 maxlen: 22
202.149.222.0/23 maxlen: 23
202.149.222.0/24 maxlen: 24
202.149.223.0/24 maxlen: 24
202.189.224.0/19 maxlen: 24
2402:d400::/32 maxlen: 32
2402:d400::/44 maxlen: 48
2402:d400:40::/48 maxlen: 48
2402:d400:41::/48 maxlen: 48
2402:d400:3e2::/48 maxlen: 48
2402:d400:3e3::/48 maxlen: 48
2402:d400:3e4::/48 maxlen: 48
2402:d400:3e5::/48 maxlen: 48
2402:d400:fa00::/44 maxlen: 48
2402:d400:fa10::/44 maxlen: 48
2402:d400:fa20::/44 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9148D01/E92519FA990B11EBA355CB53C4F9AE02/fjarHARDIbdM9ngmPgUk_TQXm70.crl
rsync://rpki.apnic.net/member_repository/A9148D01/E92519FA990B11EBA355CB53C4F9AE02/fjarHARDIbdM9ngmPgUk_TQXm70.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fjarHARDIbdM9ngmPgUk_TQXm70.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 17 Apr 2025 22:45:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1665 (0x681)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9148D01
Validity
Not Before: Jan 10 06:02:08 2025 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6780b7df-4e45
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:a3:7c:40:ff:aa:54:38:60:23:e3:c3:be:b0:
c8:9b:d4:af:e3:bf:73:a8:d1:75:01:e2:40:ff:8c:
cc:47:bb:8c:b0:f1:16:da:5c:44:32:21:e6:46:08:
8b:d7:76:70:f6:95:5e:74:89:8e:36:af:4d:66:81:
39:bf:14:e6:f1:0a:fe:87:bf:77:a2:1a:a4:ee:7d:
38:f7:66:cf:ac:18:d4:66:2c:08:b4:4d:bb:ee:6c:
23:32:af:66:8b:06:61:31:66:b6:02:88:b6:9b:e2:
67:64:d3:ce:ae:a2:4a:b7:17:3c:5c:78:fb:29:a5:
1e:7f:0f:a1:1b:1d:24:fa:fd:52:cd:a1:50:51:16:
42:d9:20:8d:6e:d8:f7:6e:d9:01:ed:a5:49:6b:1e:
0b:35:a1:57:6f:b7:98:bf:11:28:60:e4:ea:c9:65:
47:27:4c:60:b8:da:b2:91:47:76:57:1c:9f:1a:cb:
0a:32:1d:eb:a7:bd:47:ae:8b:b9:bb:25:25:a8:4b:
da:ef:24:8d:c1:f8:c9:d8:b3:5a:08:d0:e9:b8:dd:
e1:0f:8a:cf:06:02:2a:93:69:4e:a6:76:67:6a:51:
b9:f5:f2:d3:a4:7b:d5:f0:1a:65:83:de:c5:79:51:
74:85:99:78:59:34:dc:4e:e1:a9:51:02:b7:df:08:
4e:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:94:5F:A3:F2:B4:67:4C:45:B5:3F:38:0F:D6:8D:36:22:D6:64:16
X509v3 Authority Key Identifier:
keyid:7E:36:AB:1C:04:43:21:B7:4C:F6:78:26:3E:05:24:FD:34:17:9B:BD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9148D01/E92519FA990B11EBA355CB53C4F9AE02/fjarHARDIbdM9ngmPgUk_TQXm70.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fjarHARDIbdM9ngmPgUk_TQXm70.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9148D01/E92519FA990B11EBA355CB53C4F9AE02/4DEF33661FBE11EF97E7974FC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
49.248.0.0-49.248.223.255
49.248.246.0-49.248.255.255
103.3.40.0/23
103.3.43.0/24
103.8.148.0/22
114.143.0.0/16
123.252.128.0/17
202.149.192.0/19
202.189.224.0/19
IPv6:
2402:d400::/32
Signature Algorithm: sha256WithRSAEncryption
d3:c6:8b:6b:d7:be:34:fe:04:55:d2:3d:97:76:74:0a:7c:ef:
b9:54:4a:b6:0c:e4:c2:cb:a7:26:b5:c6:9b:51:57:db:f6:f3:
0b:c0:bc:bb:19:30:0d:a9:60:27:0d:69:93:91:7b:36:67:c9:
eb:c9:db:c5:19:3e:cf:b5:6d:d8:73:13:ff:5e:fc:c3:fa:dc:
33:92:9a:a3:f3:91:eb:54:a6:ae:30:12:10:a4:8c:ec:95:19:
b3:93:fc:39:d6:ce:c9:8f:6d:ed:c4:ff:a0:32:fa:02:de:77:
c4:86:d2:85:4c:8b:04:49:85:5f:84:fe:f2:88:b1:c2:b1:e3:
a6:20:d1:04:a6:ad:aa:83:7f:14:7a:27:bc:95:27:f4:b0:a6:
bc:0f:6b:46:ab:95:29:6e:f5:4d:91:27:7d:07:2b:9e:aa:0c:
92:c4:ea:02:36:21:d3:01:a0:0d:83:83:42:00:20:be:08:f4:
e1:45:33:8b:4e:45:d6:0a:19:9b:61:86:61:9a:2c:54:b8:ea:
b5:bd:60:d8:44:09:c7:93:61:d7:1f:f0:6e:8b:a0:5d:b3:3d:
e4:92:bc:46:d3:e0:44:9a:9f:a3:f7:9d:e4:9d:20:a2:55:d9:
67:a1:86:20:08:27:49:24:29:d2:52:94:64:69:95:4c:40:6d:
b0:e0:39:88
-----BEGIN CERTIFICATE-----
MIIFvTCCBKWgAwIBAgICBoEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NDhEMDExMTAvBgNVBAUTKDdFMzZBQjFDMDQ0MzIxQjc0Q0Y2NzgyNjNFMDUyNEZE
MzQxNzlCQkQwHhcNMjUwMTEwMDYwMjA4WhcNMjUwNzAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02NzgwYjdkZi00ZTQ1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA6qN8QP+qVDhgI+PDvrDIm9Sv479zqNF1AeJA/4zMR7uMsPEW2lxEMiHmRgiL
13Zw9pVedImONq9NZoE5vxTm8Qr+h793ohqk7n0492bPrBjUZiwItE277mwjMq9m
iwZhMWa2Aoi2m+JnZNPOrqJKtxc8XHj7KaUefw+hGx0k+v1SzaFQURZC2SCNbtj3
btkB7aVJax4LNaFXb7eYvxEoYOTqyWVHJ0xguNqykUd2VxyfGssKMh3rp71Hrou5
uyUlqEva7ySNwfjJ2LNaCNDpuN3hD4rPBgIqk2lOpnZnalG59fLTpHvV8Bplg97F
eVF0hZl4WTTcTuGpUQK33whO6wIDAQABo4IC4TCCAt0wHQYDVR0OBBYEFF2UX6Py
tGdMRbU/OA/WjTYi1mQWMB8GA1UdIwQYMBaAFH42qxwEQyG3TPZ4Jj4FJP00F5u9
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0OEQwMS9FOTI1MTlGQTk5
MEIxMUVCQTM1NUNCNTNDNEY5QUUwMi9mamFySEFSREliZE05bmdtUGdVa19UUVht
NzAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2ZqYXJIQVJESWJkTTluZ21QZ1VrX1RRWG03MC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
NDhEMDEvRTkyNTE5RkE5OTBCMTFFQkEzNTVDQjUzQzRGOUFFMDIvNERFRjMzNjYx
RkJFMTFFRjk3RTc5NzRGQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwawYIKwYBBQUHAQcBAf8E
XDBaMEkEAgABMEMwCwMDAzH4AwQFMfjAMAsDBAEx+PYDAwAx+AMEAWcDKAMEAGcD
KwMEAmcIlAMDAHKPAwQHe/yAAwQFypXAAwQFyr3gMA0EAgACMAcDBQAkAtQAMA0G
CSqGSIb3DQEBCwUAA4IBAQDTxotr1740/gRV0j2XdnQKfO+5VEq2DOTCy6cmtcab
UVfb9vMLwLy7GTANqWAnDWmTkXs2Z8nrydvFGT7PtW3YcxP/XvzD+twzkpqj85Hr
VKauMBIQpIzslRmzk/w51s7Jj23txP+gMvoC3nfEhtKFTIsESYVfhP7yiLHCseOm
INEEpq2qg38Ueie8lSf0sKa8D2tGq5UpbvVNkSd9ByueqgySxOoCNiHTAaANg4NC
ACC+CPThRTOLTkXWChmbYYZhmixUuOq1vWDYRAnHk2HXH/Bui6Bdsz3kkrxG0+BE
mp+j953knSCiVdlnoYYgCCdJJCnSUpRkaZVMQG2w4DmI
-----END CERTIFICATE-----
Generated at Sat Apr 12 09:39:39 2025 by rpki-client