Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/581EBF40055B11F085DFE76EC4F9AE02.roa
File: 581EBF40055B11F085DFE76EC4F9AE02.roa (raw, json)
Hash identifier: QQXONF92H4GMUUlE01Pun3RZOP/F29ABXBmYL9ILtrw=
Subject key identifier: 9F:7B:BA:37:45:2C:99:28:DF:9D:F0:FA:2B:12:9D:40:9B:2E:89:26
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: ABB1
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/581EBF40055B11F085DFE76EC4F9AE02.roa
Signing time: Thu 20 Mar 2025 07:17:13 +0000
ROA not before: Thu 20 Mar 2025 07:17:13 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 132556
IP address blocks: 43.224.156.0/22 maxlen: 22
43.224.156.0/24 maxlen: 24
43.224.157.0/24 maxlen: 24
43.224.158.0/24 maxlen: 24
43.224.159.0/24 maxlen: 24
45.123.0.0/22 maxlen: 24
45.125.116.0/22 maxlen: 24
103.6.156.0/22 maxlen: 22
103.6.156.0/24 maxlen: 24
103.6.157.0/24 maxlen: 24
103.6.158.0/24 maxlen: 24
103.6.159.0/24 maxlen: 24
103.16.12.0/23 maxlen: 24
103.16.14.0/24 maxlen: 24
103.16.44.0/23 maxlen: 24
103.16.46.0/24 maxlen: 24
103.38.240.0/22 maxlen: 24
103.43.200.0/22 maxlen: 24
103.94.100.0/24 maxlen: 24
103.94.101.0/24 maxlen: 24
103.157.118.0/23 maxlen: 24
103.191.26.0/23 maxlen: 24
103.212.95.0/24 maxlen: 24
103.231.216.0/22 maxlen: 24
103.242.236.0/22 maxlen: 24
103.245.188.0/23 maxlen: 23
103.245.188.0/24 maxlen: 24
103.245.189.0/24 maxlen: 24
137.59.76.0/22 maxlen: 24
157.119.208.0/22 maxlen: 24
220.158.140.0/22 maxlen: 24
2001:df0:45d::/48 maxlen: 48
2404:7a40::/32 maxlen: 32
2404:7a40::/36 maxlen: 36
2404:7a40::/46 maxlen: 46
2404:7a40::/48 maxlen: 48
2404:7a40:1::/48 maxlen: 48
2404:7a40:2::/48 maxlen: 48
2404:7a40:3::/48 maxlen: 48
2404:7a40:4::/46 maxlen: 46
2404:7a40:4::/48 maxlen: 48
2404:7a40:5::/48 maxlen: 48
2404:7a40:6::/48 maxlen: 48
2404:7a40:7::/48 maxlen: 48
2404:7a40:8::/46 maxlen: 46
2404:7a40:8::/48 maxlen: 48
2404:7a40:9::/48 maxlen: 48
2404:7a40:a::/48 maxlen: 48
2404:7a40:b::/48 maxlen: 48
2404:7a40:c::/46 maxlen: 46
2404:7a40:c::/48 maxlen: 48
2404:7a40:d::/48 maxlen: 48
2404:7a40:e::/48 maxlen: 48
2404:7a40:f::/48 maxlen: 48
2404:7a40:10::/46 maxlen: 46
2404:7a40:10::/48 maxlen: 48
2404:7a40:11::/48 maxlen: 48
2404:7a40:12::/48 maxlen: 48
2404:7a40:13::/48 maxlen: 48
2404:7a40:14::/46 maxlen: 46
2404:7a40:14::/48 maxlen: 48
2404:7a40:15::/48 maxlen: 48
2404:7a40:18::/46 maxlen: 46
2404:7a40:1c::/46 maxlen: 46
2404:7a40:20::/46 maxlen: 46
2404:7a40:24::/46 maxlen: 46
2404:7a40:1000::/36 maxlen: 36
2404:7a40:1000::/48 maxlen: 48
2404:7a40:1001::/48 maxlen: 48
2404:7a40:1002::/48 maxlen: 48
2404:7a40:1003::/48 maxlen: 48
2404:7a40:1004::/48 maxlen: 48
2404:7a40:1005::/48 maxlen: 48
2404:7a40:2000::/36 maxlen: 36
2404:7a40:2000::/48 maxlen: 48
2404:7a40:2001::/48 maxlen: 48
2404:7a40:2002::/48 maxlen: 48
2404:7a40:2003::/48 maxlen: 48
2404:7a40:2004::/48 maxlen: 48
2404:7a40:2005::/48 maxlen: 48
2404:7a40:2006::/48 maxlen: 48
2404:7a40:2007::/48 maxlen: 48
2404:7a40:3000::/36 maxlen: 36
2404:7a40:4000::/36 maxlen: 36
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 11 Apr 2025 15:26:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 43953 (0xabb1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2
Validity
Not Before: Mar 20 07:17:13 2025 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=67dbc0f8-cc37
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:4a:60:12:61:12:93:3b:c3:13:1d:2f:1e:13:
68:a6:47:b6:54:9f:d5:22:7d:66:4f:64:64:d9:e1:
02:46:ab:49:32:df:eb:aa:41:92:ab:a6:44:50:89:
b9:d7:70:b7:ce:d4:60:d0:e2:12:d8:7a:19:56:e7:
35:c1:99:78:e7:8d:b0:2e:86:79:e4:47:5c:43:2b:
f6:93:8f:eb:80:90:a7:9b:c2:40:99:62:2b:c8:2c:
ef:69:d4:80:d4:05:0d:c8:cf:fa:ae:89:3a:44:4e:
df:9e:ae:e3:0b:ee:5a:c1:0b:1b:a3:3b:78:3e:07:
75:39:55:e3:0a:d5:cf:a5:b1:7f:53:8a:ed:1b:f7:
cd:91:a8:36:d2:03:a4:ef:cb:22:79:99:b4:61:8a:
8c:54:46:64:02:73:b9:3e:a6:28:3e:79:00:66:ab:
18:17:93:de:8b:4f:bf:0d:77:8d:8f:81:79:ba:ea:
6e:89:93:ad:ca:c6:6f:aa:8e:c4:4b:39:cf:6f:65:
5d:e5:6e:25:a0:25:f8:07:a4:c6:25:3b:c3:c7:cc:
df:1b:d8:b3:3f:4e:73:e3:34:01:60:65:fe:b1:19:
de:9d:27:1b:c5:b8:88:69:c4:94:2c:00:47:2e:61:
83:38:c3:41:5b:23:dc:78:e8:37:c3:e1:07:f8:e0:
eb:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:7B:BA:37:45:2C:99:28:DF:9D:F0:FA:2B:12:9D:40:9B:2E:89:26
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/581EBF40055B11F085DFE76EC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
43.224.156.0/22
45.123.0.0/22
45.125.116.0/22
103.6.156.0/22
103.16.12.0-103.16.14.255
103.16.44.0-103.16.46.255
103.38.240.0/22
103.43.200.0/22
103.94.100.0/23
103.157.118.0/23
103.191.26.0/23
103.212.95.0/24
103.231.216.0/22
103.242.236.0/22
103.245.188.0/23
137.59.76.0/22
157.119.208.0/22
220.158.140.0/22
IPv6:
2001:df0:45d::/48
2404:7a40::/32
Signature Algorithm: sha256WithRSAEncryption
2b:c3:9a:e4:44:ea:83:7f:cc:6b:f1:c0:4f:76:69:f1:49:cb:
67:84:04:b0:a1:22:d3:9c:55:35:48:d1:71:1b:39:a8:d5:81:
64:33:06:8e:05:7f:f0:19:c1:b0:f4:f6:2f:f0:22:e1:48:e1:
1a:31:66:9d:0f:73:18:63:12:24:ac:e7:1d:04:57:15:fd:9c:
02:f2:db:72:12:24:00:2b:fe:cb:ac:75:b2:05:ee:f8:9b:c8:
f4:5d:e3:d2:ad:07:bc:96:d0:63:69:3a:3d:b2:74:c7:32:5e:
f6:2e:fd:82:46:0b:40:d6:5d:c4:e2:14:53:7e:6c:42:d2:32:
e3:37:ad:3a:c7:49:49:4e:e0:29:ec:30:73:81:86:b5:e9:a8:
92:5d:a9:2e:b1:02:69:6e:fe:0e:5a:64:62:7a:11:db:5c:6f:
41:c3:7f:d3:3b:10:30:62:90:f7:ca:be:27:c3:11:46:8d:56:
05:1f:60:2d:48:1c:da:49:74:5d:c8:80:99:17:a2:a7:d3:35:
ac:f6:de:81:51:b8:6e:57:68:3c:35:0e:9d:44:b3:9c:ff:f6:
d5:28:bb:8b:22:89:ec:71:b4:d5:bd:9a:40:03:bb:ae:a5:7f:
aa:1e:8b:87:8d:44:99:f4:e3:ea:c0:59:26:e4:27:1a:50:81:
7e:dd:a7:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 20:31:00 2025 by rpki-client