Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9182F75/3C8CF63EFCBD11E688D3125EC4F9AE02/6892F5F2663C11F08C247C68C4F9AE02.roa
File: 6892F5F2663C11F08C247C68C4F9AE02.roa (raw, json)
Hash identifier: Q0+hX7TsyFyWEUhoyFXxRcuYnmI5ezzOdvEkCo3BkCI=
Subject key identifier: 01:41:AF:24:65:2F:C4:0B:21:7B:79:94:C2:0C:0C:37:D2:35:91:E4
Certificate issuer: /CN=A9182F75/serialNumber=420D8C2EC3D2479C5423ABFF74782B8A8A4B7DEA
Certificate serial: 1C13
Authority key identifier: 42:0D:8C:2E:C3:D2:47:9C:54:23:AB:FF:74:78:2B:8A:8A:4B:7D:EA
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Qg2MLsPSR5xUI6v_dHgriopLfeo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9182F75/3C8CF63EFCBD11E688D3125EC4F9AE02/6892F5F2663C11F08C247C68C4F9AE02.roa
Signing time: Mon 21 Jul 2025 14:10:09 +0000
ROA not before: Mon 21 Jul 2025 14:10:09 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 132220
IP address blocks: 45.125.152.0/22 maxlen: 22
45.125.152.0/24 maxlen: 24
45.125.153.0/24 maxlen: 24
45.125.154.0/24 maxlen: 24
45.125.155.0/24 maxlen: 24
45.250.232.0/22 maxlen: 22
45.250.232.0/24 maxlen: 24
45.250.233.0/24 maxlen: 24
45.250.234.0/24 maxlen: 24
45.250.235.0/24 maxlen: 24
103.7.148.0/22 maxlen: 22
103.7.148.0/24 maxlen: 24
103.7.149.0/24 maxlen: 24
103.7.150.0/24 maxlen: 24
103.7.151.0/24 maxlen: 24
103.216.52.0/22 maxlen: 22
103.216.52.0/24 maxlen: 24
103.216.53.0/24 maxlen: 24
103.216.54.0/24 maxlen: 24
103.216.55.0/24 maxlen: 24
157.119.176.0/22 maxlen: 22
157.119.177.0/24 maxlen: 24
157.119.179.0/24 maxlen: 24
183.87.160.0/19 maxlen: 19
183.87.160.0/20 maxlen: 20
183.87.160.0/24 maxlen: 24
183.87.161.0/24 maxlen: 24
183.87.162.0/24 maxlen: 24
183.87.163.0/24 maxlen: 24
183.87.164.0/24 maxlen: 24
183.87.165.0/24 maxlen: 24
183.87.166.0/24 maxlen: 24
183.87.167.0/24 maxlen: 24
183.87.168.0/24 maxlen: 24
183.87.169.0/24 maxlen: 24
183.87.170.0/24 maxlen: 24
183.87.171.0/24 maxlen: 24
183.87.172.0/24 maxlen: 24
183.87.173.0/24 maxlen: 24
183.87.174.0/24 maxlen: 24
183.87.175.0/24 maxlen: 24
183.87.176.0/24 maxlen: 24
183.87.177.0/24 maxlen: 24
183.87.178.0/24 maxlen: 24
183.87.179.0/24 maxlen: 24
183.87.180.0/24 maxlen: 24
183.87.181.0/24 maxlen: 24
183.87.182.0/24 maxlen: 24
183.87.183.0/24 maxlen: 24
183.87.184.0/24 maxlen: 24
183.87.185.0/24 maxlen: 24
183.87.186.0/24 maxlen: 24
183.87.187.0/24 maxlen: 24
183.87.188.0/24 maxlen: 24
183.87.189.0/24 maxlen: 24
183.87.190.0/24 maxlen: 24
183.87.191.0/24 maxlen: 24
183.87.193.0/24 maxlen: 24
183.87.194.0/23 maxlen: 24
183.87.200.0/21 maxlen: 21
183.87.200.0/24 maxlen: 24
183.87.201.0/24 maxlen: 24
183.87.202.0/24 maxlen: 24
183.87.203.0/24 maxlen: 24
183.87.204.0/24 maxlen: 24
183.87.205.0/24 maxlen: 24
183.87.206.0/24 maxlen: 24
183.87.207.0/24 maxlen: 24
183.87.208.0/24 maxlen: 24
2403:7100::/32 maxlen: 32
2403:7100::/48 maxlen: 48
2403:7100:1::/48 maxlen: 48
2403:7100:2::/48 maxlen: 48
2403:7100:3::/48 maxlen: 48
2403:7100:4::/48 maxlen: 48
2403:7100:5::/48 maxlen: 48
2403:7100:6::/48 maxlen: 48
2403:7100:7::/48 maxlen: 48
2403:7100:8::/48 maxlen: 48
2403:7100:9::/48 maxlen: 48
2403:7100:a::/48 maxlen: 48
2403:7100:b::/48 maxlen: 48
2403:7100:10::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9182F75/3C8CF63EFCBD11E688D3125EC4F9AE02/Qg2MLsPSR5xUI6v_dHgriopLfeo.crl
rsync://rpki.apnic.net/member_repository/A9182F75/3C8CF63EFCBD11E688D3125EC4F9AE02/Qg2MLsPSR5xUI6v_dHgriopLfeo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Qg2MLsPSR5xUI6v_dHgriopLfeo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 28 Jul 2025 14:10:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7187 (0x1c13)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9182F75, serialNumber=420D8C2EC3D2479C5423ABFF74782B8A8A4B7DEA
Validity
Not Before: Jul 21 14:10:09 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=687e4a40-35e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:c3:57:95:05:7b:c0:35:14:9c:b3:78:a0:99:
e0:ab:34:66:04:eb:0f:89:cd:36:94:20:aa:da:d7:
57:94:0b:85:4c:91:81:a9:72:22:44:cf:a2:f4:18:
f3:1a:8e:0b:78:35:37:80:f9:77:53:a2:7c:06:b9:
03:00:7d:b1:82:80:cd:6f:09:53:68:fb:d1:ca:f4:
d8:ef:15:83:1f:4b:29:76:d3:9b:38:e2:7d:b4:59:
24:68:7e:75:65:ce:2d:f3:c5:85:10:e2:88:f7:3e:
01:9a:aa:9c:f2:84:a1:8a:a2:4b:11:07:48:e9:66:
25:45:e0:7c:d5:0e:a7:95:c5:20:60:31:df:25:82:
38:07:4d:6e:a9:10:29:23:6c:eb:41:92:8a:e4:93:
db:fc:03:1e:75:1c:2c:89:33:d4:d6:cc:18:3a:c2:
da:be:d1:48:61:b7:54:17:31:70:60:59:d1:0f:33:
bc:ef:1e:52:40:b2:51:be:81:c7:06:46:26:33:46:
d0:05:72:65:c7:31:49:1a:35:8c:25:36:52:34:c0:
56:3c:77:0c:0c:c1:e2:66:6e:29:33:c4:12:b0:4f:
6a:f0:d8:fe:f0:40:de:30:13:a9:80:c7:40:96:59:
da:22:a3:7f:27:22:e1:ea:fb:11:13:3a:08:ca:1a:
7c:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:41:AF:24:65:2F:C4:0B:21:7B:79:94:C2:0C:0C:37:D2:35:91:E4
X509v3 Authority Key Identifier:
keyid:42:0D:8C:2E:C3:D2:47:9C:54:23:AB:FF:74:78:2B:8A:8A:4B:7D:EA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9182F75/3C8CF63EFCBD11E688D3125EC4F9AE02/Qg2MLsPSR5xUI6v_dHgriopLfeo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Qg2MLsPSR5xUI6v_dHgriopLfeo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9182F75/3C8CF63EFCBD11E688D3125EC4F9AE02/6892F5F2663C11F08C247C68C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.125.152.0/22
45.250.232.0/22
103.7.148.0/22
103.216.52.0/22
157.119.176.0/22
183.87.160.0/19
183.87.193.0-183.87.195.255
183.87.200.0-183.87.208.255
IPv6:
2403:7100::/32
Signature Algorithm: sha256WithRSAEncryption
76:3e:e7:12:35:b1:b4:62:b4:ef:64:08:b9:e5:84:7b:ae:a3:
6d:34:5b:c9:a8:6e:a5:93:54:03:42:0b:4e:5a:1a:09:04:08:
67:ab:4c:de:7f:bf:35:c6:b0:c8:bc:73:65:f6:c4:76:fc:b2:
25:ed:a7:5a:94:6e:33:84:87:a8:e3:39:9f:f7:6f:d4:ce:4b:
e6:81:b3:24:4e:3e:85:54:89:c0:b5:b2:16:33:20:68:8e:43:
34:9f:90:9b:51:bf:8e:1d:6e:0d:d6:1f:08:e3:65:88:d0:11:
fe:37:6a:90:f2:a8:87:0e:51:20:14:86:3c:4c:14:b3:f4:48:
56:8f:91:19:cb:73:63:cf:42:c7:da:0a:89:08:96:c1:38:21:
56:3c:0b:b6:4f:66:b2:9f:d5:9b:f1:74:0a:4a:4c:c6:2e:d0:
de:64:9c:fb:85:7c:ed:9d:98:a7:98:41:69:56:f5:4c:0a:24:
e3:f4:e2:21:4a:e3:5c:15:5d:04:47:fc:51:08:27:96:7f:5a:
23:04:df:ef:44:d6:0e:02:53:c8:4f:15:c5:a0:d7:42:ef:bd:
c2:ba:d1:88:2e:7b:d0:45:d0:d7:9a:5c:7f:4b:3a:d8:fe:66:
8c:c0:3f:d5:3b:60:63:d4:c7:05:85:75:5e:2f:c0:d4:c0:a7:
26:2d:45:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 21 21:44:04 2025 by rpki-client