Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A915E475/DA83AA7ACA1111EAA479C734C4F9AE02/55124B02F3C511EFAD4ACE37C4F9AE02.roa
File: 55124B02F3C511EFAD4ACE37C4F9AE02.roa (raw, json)
Hash identifier: Fk3lDfrttuAZqg6Wfn2O1TB2kJ0lsCcdFlnPaQQgPgQ=
Subject key identifier: 0F:E1:D8:02:80:01:5C:B5:62:E9:A1:4C:AE:42:A1:2B:81:9E:31:CE
Certificate issuer: /CN=A915E475/serialNumber=745FF4F063AB5D171E05251B31E294A4BC7973B1
Certificate serial: 09F6
Authority key identifier: 74:5F:F4:F0:63:AB:5D:17:1E:05:25:1B:31:E2:94:A4:BC:79:73:B1
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dF_08GOrXRceBSUbMeKUpLx5c7E.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915E475/DA83AA7ACA1111EAA479C734C4F9AE02/55124B02F3C511EFAD4ACE37C4F9AE02.roa
Signing time: Tue 25 Feb 2025 22:10:33 +0000
ROA not before: Tue 25 Feb 2025 22:10:33 +0000
ROA not after: Tue 30 Dec 2025 00:00:00 +0000
asID: 38195
IP address blocks: 27.122.112.0/20 maxlen: 22
27.122.112.0/22 maxlen: 24
27.122.116.0/23 maxlen: 24
27.122.120.0/21 maxlen: 24
36.255.112.0/22 maxlen: 22
43.245.152.0/24 maxlen: 24
43.245.153.0/24 maxlen: 24
43.245.154.0/23 maxlen: 24
45.113.92.0/22 maxlen: 22
45.113.94.0/23 maxlen: 23
45.118.64.0/22 maxlen: 22
103.1.52.0/22 maxlen: 22
103.7.48.0/22 maxlen: 24
103.21.0.0/22 maxlen: 22
103.25.180.0/22 maxlen: 22
103.28.160.0/24 maxlen: 24
103.29.86.0/23 maxlen: 23
103.42.226.0/23 maxlen: 23
103.192.192.0/22 maxlen: 22
103.200.13.0/24 maxlen: 24
103.200.14.0/24 maxlen: 24
103.200.15.0/24 maxlen: 24
103.224.49.0/24 maxlen: 24
103.224.52.0/23 maxlen: 23
103.237.16.0/22 maxlen: 22
103.248.16.0/22 maxlen: 22
111.118.192.0/21 maxlen: 24
114.129.184.0/21 maxlen: 21
115.70.64.0/21 maxlen: 21
116.255.0.0/18 maxlen: 24
119.15.72.0/21 maxlen: 21
119.15.73.0/24 maxlen: 24
119.40.104.0/21 maxlen: 21
122.199.0.0/18 maxlen: 18
123.176.112.0/21 maxlen: 21
123.176.119.0/24 maxlen: 24
125.63.0.0/19 maxlen: 19
125.63.8.0/24 maxlen: 24
125.63.24.0/24 maxlen: 24
125.63.25.0/24 maxlen: 24
125.63.26.0/24 maxlen: 24
125.63.27.0/24 maxlen: 24
125.63.28.0/24 maxlen: 24
125.63.29.0/24 maxlen: 24
125.63.30.0/24 maxlen: 24
125.253.0.0/18 maxlen: 18
125.253.0.0/24 maxlen: 24
125.253.1.0/24 maxlen: 24
125.253.2.0/24 maxlen: 24
125.253.3.0/24 maxlen: 24
125.253.4.0/24 maxlen: 24
125.253.10.0/24 maxlen: 24
125.253.11.0/24 maxlen: 24
125.253.15.0/24 maxlen: 24
125.253.19.0/24 maxlen: 27
125.253.22.0/23 maxlen: 24
125.253.28.0/23 maxlen: 24
125.253.39.0/24 maxlen: 24
125.253.43.0/24 maxlen: 24
125.253.54.0/24 maxlen: 24
125.253.56.0/24 maxlen: 24
125.253.57.0/24 maxlen: 24
125.253.96.0/20 maxlen: 24
163.47.68.0/22 maxlen: 22
163.53.144.0/22 maxlen: 24
202.63.64.0/20 maxlen: 20
202.65.64.0/19 maxlen: 19
202.70.129.0/24 maxlen: 24
202.80.144.0/21 maxlen: 21
202.80.151.0/24 maxlen: 24
202.86.112.0/24 maxlen: 24
202.86.119.0/24 maxlen: 24
202.90.206.0/23 maxlen: 23
202.130.192.0/23 maxlen: 23
202.130.194.0/24 maxlen: 24
202.130.196.0/22 maxlen: 22
202.130.197.0/24 maxlen: 24
202.130.200.0/23 maxlen: 23
202.130.202.0/24 maxlen: 24
202.130.204.0/24 maxlen: 24
202.130.207.0/24 maxlen: 24
202.130.208.0/22 maxlen: 22
202.130.212.0/23 maxlen: 23
202.130.215.0/24 maxlen: 24
202.130.216.0/24 maxlen: 24
202.130.218.0/23 maxlen: 23
202.130.220.0/22 maxlen: 22
202.137.160.0/20 maxlen: 24
202.144.160.0/20 maxlen: 20
202.144.160.0/24 maxlen: 24
202.144.161.0/24 maxlen: 24
202.144.162.0/24 maxlen: 24
202.144.165.0/24 maxlen: 24
202.144.170.0/24 maxlen: 24
202.144.171.0/24 maxlen: 24
202.144.172.0/22 maxlen: 22
202.169.96.0/19 maxlen: 19
202.171.160.0/19 maxlen: 19
202.171.160.0/24 maxlen: 24
202.171.166.0/24 maxlen: 24
202.171.174.0/24 maxlen: 24
202.171.175.0/24 maxlen: 24
202.171.182.0/23 maxlen: 24
202.177.40.0/24 maxlen: 24
202.177.41.0/24 maxlen: 24
202.177.42.0/24 maxlen: 24
202.177.43.0/24 maxlen: 24
203.10.77.0/24 maxlen: 24
203.14.230.0/24 maxlen: 24
203.24.182.0/24 maxlen: 24
203.25.102.0/24 maxlen: 24
203.27.116.0/24 maxlen: 24
203.32.82.0/24 maxlen: 24
203.33.254.0/24 maxlen: 24
203.123.96.0/19 maxlen: 19
203.132.64.0/19 maxlen: 19
203.132.64.0/24 maxlen: 24
203.132.65.0/24 maxlen: 24
203.132.66.0/24 maxlen: 24
203.132.67.0/24 maxlen: 24
203.132.68.0/24 maxlen: 24
203.132.69.0/24 maxlen: 24
203.132.70.0/24 maxlen: 24
203.132.71.0/24 maxlen: 24
203.132.72.0/24 maxlen: 24
203.132.73.0/24 maxlen: 24
203.132.74.0/23 maxlen: 23
203.132.88.0/21 maxlen: 24
203.153.16.0/22 maxlen: 22
203.153.16.0/24 maxlen: 24
203.153.18.0/24 maxlen: 24
203.189.4.0/24 maxlen: 24
210.5.32.0/21 maxlen: 21
220.233.4.0/22 maxlen: 22
220.233.8.0/22 maxlen: 22
220.233.36.0/22 maxlen: 22
220.233.44.0/22 maxlen: 22
223.27.64.0/22 maxlen: 22
2401:d000::/28 maxlen: 28
2404:c600::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A915E475/DA83AA7ACA1111EAA479C734C4F9AE02/dF_08GOrXRceBSUbMeKUpLx5c7E.crl
rsync://rpki.apnic.net/member_repository/A915E475/DA83AA7ACA1111EAA479C734C4F9AE02/dF_08GOrXRceBSUbMeKUpLx5c7E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dF_08GOrXRceBSUbMeKUpLx5c7E.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 11 Apr 2025 20:56:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2550 (0x9f6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915E475
Validity
Not Before: Feb 25 22:10:33 2025 GMT
Not After : Dec 30 00:00:00 2025 GMT
Subject: CN=67be3fd9-fcda
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:3e:f0:a4:bb:9a:69:30:e3:35:e1:a2:54:b5:
33:7e:04:05:a2:5c:17:d8:80:e8:dc:10:9f:ac:fd:
c8:76:85:25:95:35:64:b0:0b:77:da:44:ad:37:b8:
3a:dd:cb:b8:ba:76:8c:d6:bd:86:04:0d:23:9d:bd:
b8:99:95:bf:d9:27:01:f5:1b:f2:09:d5:eb:5e:a8:
96:8f:1d:e6:64:5e:0c:8f:2b:02:55:86:b9:b9:e4:
a3:98:b4:4c:e0:21:43:cd:4e:41:61:85:45:f2:78:
1e:dd:fb:15:01:b1:32:bf:54:7e:82:65:54:77:02:
06:d6:5d:44:fc:e0:87:4b:c0:32:ba:87:2e:9e:53:
b7:9d:b4:10:9a:d1:b1:c8:1f:03:79:c4:5d:40:9b:
f3:0e:52:25:a9:7d:c1:da:87:83:01:ed:2f:6f:86:
0e:0a:05:af:8a:01:8c:89:bc:8d:65:6e:d8:da:e5:
06:eb:26:ac:a6:86:c4:3f:55:95:d3:86:f5:9b:6c:
27:a2:0e:1c:70:78:e7:b9:53:14:06:47:3e:2e:b0:
82:7a:33:a4:40:80:2d:70:18:e3:f3:13:96:df:95:
51:1a:3d:20:a6:1c:13:e0:fe:5c:84:a4:f0:ef:cd:
79:4a:a3:eb:ca:c7:ad:38:3f:48:9f:bb:bf:0b:4b:
25:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:E1:D8:02:80:01:5C:B5:62:E9:A1:4C:AE:42:A1:2B:81:9E:31:CE
X509v3 Authority Key Identifier:
keyid:74:5F:F4:F0:63:AB:5D:17:1E:05:25:1B:31:E2:94:A4:BC:79:73:B1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915E475/DA83AA7ACA1111EAA479C734C4F9AE02/dF_08GOrXRceBSUbMeKUpLx5c7E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dF_08GOrXRceBSUbMeKUpLx5c7E.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915E475/DA83AA7ACA1111EAA479C734C4F9AE02/55124B02F3C511EFAD4ACE37C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
27.122.112.0/20
36.255.112.0/22
43.245.152.0/22
45.113.92.0/22
45.118.64.0/22
103.1.52.0/22
103.7.48.0/22
103.21.0.0/22
103.25.180.0/22
103.28.160.0/24
103.29.86.0/23
103.42.226.0/23
103.192.192.0/22
103.200.13.0-103.200.15.255
103.224.49.0/24
103.224.52.0/23
103.237.16.0/22
103.248.16.0/22
111.118.192.0/21
114.129.184.0/21
115.70.64.0/21
116.255.0.0/18
119.15.72.0/21
119.40.104.0/21
122.199.0.0/18
123.176.112.0/21
125.63.0.0/19
125.253.0.0/18
125.253.96.0/20
163.47.68.0/22
163.53.144.0/22
202.63.64.0/20
202.65.64.0/19
202.70.129.0/24
202.80.144.0/21
202.86.112.0/24
202.86.119.0/24
202.90.206.0/23
202.130.192.0-202.130.194.255
202.130.196.0-202.130.202.255
202.130.204.0/24
202.130.207.0-202.130.213.255
202.130.215.0-202.130.216.255
202.130.218.0-202.130.223.255
202.137.160.0/20
202.144.160.0/20
202.169.96.0/19
202.171.160.0/19
202.177.40.0/22
203.10.77.0/24
203.14.230.0/24
203.24.182.0/24
203.25.102.0/24
203.27.116.0/24
203.32.82.0/24
203.33.254.0/24
203.123.96.0/19
203.132.64.0/19
203.153.16.0/22
203.189.4.0/24
210.5.32.0/21
220.233.4.0-220.233.11.255
220.233.36.0/22
220.233.44.0/22
223.27.64.0/22
IPv6:
2401:d000::/28
2404:c600::/32
Signature Algorithm: sha256WithRSAEncryption
d5:49:43:c6:db:80:6b:56:b5:cc:0c:e4:fc:ef:00:b6:cc:e8:
f0:2c:ab:3c:dd:ad:28:f8:85:2d:d6:46:c1:5d:cb:c6:6e:82:
00:20:c3:d3:e2:6e:f5:ef:5b:9a:f4:37:b0:73:d0:c3:e7:b7:
72:d8:9b:d7:50:b4:1b:e0:04:f7:a0:c0:cf:f0:f4:4b:46:94:
b4:59:57:15:f1:48:74:31:f0:eb:06:13:ae:4b:77:ba:22:9c:
27:8d:1b:9e:41:a0:b5:e9:87:c7:42:65:dc:a9:2f:e8:0a:19:
24:1d:b9:c6:a5:a7:b7:d6:3e:fb:1e:d9:a7:e5:d4:b2:b0:c5:
11:6e:c2:ef:fc:05:d0:bc:27:1a:24:75:30:9c:5d:95:12:07:
75:0d:dd:33:b4:ca:0b:9a:9f:78:b7:14:7c:f1:a7:01:b2:77:
8d:6b:8f:20:7e:0a:18:d7:aa:e0:ea:b7:ad:bf:6d:84:a4:cd:
90:70:58:9f:03:25:84:4a:2b:fb:c6:9f:c8:e6:f3:d3:6b:2d:
89:22:d3:07:dd:c6:d5:4c:ea:fe:a6:e8:e2:8e:77:88:91:52:
49:da:ae:d5:10:ad:bc:02:06:9f:82:1d:2c:3a:80:64:de:6d:
25:c2:75:24:5e:b2:c9:bf:28:8c:73:b6:c4:c3:c3:0e:11:49:
26:22:9d:c9
-----BEGIN CERTIFICATE-----
MIIHSTCCBjGgAwIBAgICCfYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NUU0NzUxMTAvBgNVBAUTKDc0NUZGNEYwNjNBQjVEMTcxRTA1MjUxQjMxRTI5NEE0
QkM3OTczQjEwHhcNMjUwMjI1MjIxMDMzWhcNMjUxMjMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02N2JlM2ZkOS1mY2RhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAzz7wpLuaaTDjNeGiVLUzfgQFolwX2IDo3BCfrP3IdoUllTVksAt32kStN7g6
3cu4unaM1r2GBA0jnb24mZW/2ScB9RvyCdXrXqiWjx3mZF4MjysCVYa5ueSjmLRM
4CFDzU5BYYVF8nge3fsVAbEyv1R+gmVUdwIG1l1E/OCHS8AyuocunlO3nbQQmtGx
yB8DecRdQJvzDlIlqX3B2oeDAe0vb4YOCgWvigGMibyNZW7Y2uUG6yaspobEP1WV
04b1m2wnog4ccHjnuVMUBkc+LrCCejOkQIAtcBjj8xOW35VRGj0gphwT4P5chKTw
7815SqPrysetOD9In7u/C0slhwIDAQABo4IEbTCCBGkwHQYDVR0OBBYEFA/h2AKA
AVy1YumhTK5CoSuBnjHOMB8GA1UdIwQYMBaAFHRf9PBjq10XHgUlGzHilKS8eXOx
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1RTQ3NS9EQTgzQUE3QUNB
MTExMUVBQTQ3OUM3MzRDNEY5QUUwMi9kRl8wOEdPclhSY2VCU1ViTWVLVXBMeDVj
N0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2RGXzA4R09yWFJjZUJTVWJNZUtVcEx4NWM3RS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
NUU0NzUvREE4M0FBN0FDQTExMTFFQUE0NzlDNzM0QzRGOUFFMDIvNTUxMjRCMDJG
M0M1MTFFRkFENEFDRTM3QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwggH1BggrBgEFBQcBBwEB
/wSCAeQwggHgMIIBxgQCAAEwggG+AwQEG3pwAwQCJP9wAwQCK/WYAwQCLXFcAwQC
LXZAAwQCZwE0AwQCZwcwAwQCZxUAAwQCZxm0AwQAZxygAwQBZx1WAwQBZyriAwQC
Z8DAMAwDBABnyA0DBARnyAADBABn4DEDBAFn4DQDBAJn7RADBAJn+BADBANvdsAD
BANygbgDBANzRkADBAZ0/wADBAN3D0gDBAN3KGgDBAZ6xwADBAN7sHADBAV9PwAD
BAZ9/QADBAR9/WADBAKjL0QDBAKjNZADBATKP0ADBAXKQUADBADKRoEDBAPKUJAD
BADKVnADBADKVncDBAHKWs4wDAMEBsqCwAMEAMqCwjAMAwQCyoLEAwQAyoLKAwQA
yoLMMAwDBADKgs8DBAHKgtQwDAMEAMqC1wMEAMqC2DAMAwQByoLaAwQFyoLAAwQE
yomgAwQEypCgAwQFyqlgAwQFyqugAwQCyrEoAwQAywpNAwQAyw7mAwQAyxi2AwQA
yxlmAwQAyxt0AwQAyyBSAwQAyyH+AwQFy3tgAwQFy4RAAwQCy5kQAwQAy70EAwQD
0gUgMAwDBALc6QQDBALc6QgDBALc6SQDBALc6SwDBALfG0AwFAQCAAIwDgMFBCQB
0AADBQAkBMYAMA0GCSqGSIb3DQEBCwUAA4IBAQDVSUPG24BrVrXMDOT87wC2zOjw
LKs83a0o+IUt1kbBXcvGboIAIMPT4m7171ua9Dewc9DD57dy2JvXULQb4AT3oMDP
8PRLRpS0WVcV8Uh0MfDrBhOuS3e6IpwnjRueQaC16YfHQmXcqS/oChkkHbnGpae3
1j77Htmn5dSysMURbsLv/AXQvCcaJHUwnF2VEgd1Dd0ztMoLmp94txR88acBsneN
a48gfgoY16rg6retv22EpM2QcFifAyWESiv7xp/I5vPTay2JItMH3cbVTOr+puji
jneIkVJJ2q7VEK28Agafgh0sOoBk3m0lwnUkXrLJvyiMc7bEw8MOEUkmIp3J
-----END CERTIFICATE-----
Generated at Sat Apr 5 16:23:27 2025 by rpki-client