Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/B132FEB2DEE511EF9D6C9747C4F9AE02.roa
File: B132FEB2DEE511EF9D6C9747C4F9AE02.roa (raw, json)
Hash identifier: C6hV1z9XVQU9xenH0Wj9MgDa3luYjjA6EU0iJTxiXOg=
Subject key identifier: 3B:8F:23:BA:E7:92:3B:A0:9C:F8:E3:2E:12:2A:5D:77:F6:0E:D8:CA
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: A779
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/B132FEB2DEE511EF9D6C9747C4F9AE02.roa
Signing time: Mon 24 Feb 2025 07:14:34 +0000
ROA not before: Mon 24 Feb 2025 07:14:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 133001
IP address blocks: 43.225.160.0/22 maxlen: 24
43.251.216.0/22 maxlen: 24
45.117.220.0/22 maxlen: 24
45.119.44.0/22 maxlen: 22
45.119.44.0/24 maxlen: 24
45.119.45.0/24 maxlen: 24
45.119.46.0/24 maxlen: 24
45.119.47.0/24 maxlen: 24
103.38.36.0/22 maxlen: 24
103.42.166.0/23 maxlen: 24
103.51.132.0/24 maxlen: 24
103.51.133.0/24 maxlen: 24
103.51.134.0/24 maxlen: 24
103.51.135.0/24 maxlen: 24
103.54.76.0/24 maxlen: 24
103.54.77.0/24 maxlen: 24
103.56.227.0/24 maxlen: 24
103.110.102.0/24 maxlen: 24
103.114.0.0/22 maxlen: 23
103.114.2.0/23 maxlen: 24
103.116.147.0/24 maxlen: 24
103.116.238.0/24 maxlen: 24
103.116.239.0/24 maxlen: 24
103.140.26.0/24 maxlen: 24
103.140.27.0/24 maxlen: 24
103.165.68.0/24 maxlen: 24
103.165.69.0/24 maxlen: 24
103.176.74.0/23 maxlen: 24
103.176.210.0/24 maxlen: 24
103.176.211.0/24 maxlen: 24
103.196.76.0/22 maxlen: 24
103.200.74.0/23 maxlen: 23
103.201.148.0/22 maxlen: 24
103.239.168.0/24 maxlen: 24
103.239.169.0/24 maxlen: 24
103.239.170.0/24 maxlen: 24
103.239.171.0/24 maxlen: 24
111.125.225.0/24 maxlen: 24
183.87.251.0/24 maxlen: 24
183.87.252.0/22 maxlen: 24
202.94.160.0/22 maxlen: 24
2401:b240::/32 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 11 Apr 2025 15:26:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 42873 (0xa779)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2
Validity
Not Before: Feb 24 07:14:34 2025 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=67bc1c5a-bc9c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:22:f2:ad:0b:3b:7a:15:5e:fc:40:cc:90:42:
28:c2:ad:89:53:95:bc:d4:9d:fc:48:d5:d1:00:83:
c1:85:03:27:50:e3:b6:3d:b8:d6:d6:2d:b4:4e:3c:
d8:07:cd:4f:f6:8d:ba:60:ca:21:a4:86:ac:f9:03:
85:4c:a0:f0:bf:89:a9:0a:34:6f:63:b8:8b:5b:96:
d0:6f:80:b1:81:3f:f4:3d:af:c9:33:0a:5d:65:4a:
59:f7:84:9e:0e:79:5c:2d:1a:db:a0:2b:0b:d4:20:
99:bb:6c:a7:35:18:f6:1d:70:50:b5:cf:a7:e1:7f:
d3:18:2b:4d:77:e7:2f:e8:b7:f2:00:9b:dd:58:c0:
e3:2a:be:b2:f2:d9:45:f9:c2:47:8b:f3:39:17:0a:
80:71:b8:ff:a1:35:e7:a7:49:6f:8c:d7:e2:8b:68:
bf:1f:76:43:bc:c4:e0:4b:ac:01:16:c6:11:24:3f:
d0:fd:33:65:37:e2:86:73:24:b0:dd:97:29:3a:8c:
db:68:a9:b1:2e:3b:28:d8:f3:bc:6a:96:d3:73:9f:
9e:30:eb:8a:9b:0c:e5:82:ad:ae:9d:f9:7e:33:f1:
51:8b:fc:9d:53:b1:d9:75:3a:96:ca:ad:f2:b1:67:
d9:68:62:85:6e:5a:b9:f6:34:d3:dd:83:d8:5d:cb:
9e:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:8F:23:BA:E7:92:3B:A0:9C:F8:E3:2E:12:2A:5D:77:F6:0E:D8:CA
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/B132FEB2DEE511EF9D6C9747C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
43.225.160.0/22
43.251.216.0/22
45.117.220.0/22
45.119.44.0/22
103.38.36.0/22
103.42.166.0/23
103.51.132.0/22
103.54.76.0/23
103.56.227.0/24
103.110.102.0/24
103.114.0.0/22
103.116.147.0/24
103.116.238.0/23
103.140.26.0/23
103.165.68.0/23
103.176.74.0/23
103.176.210.0/23
103.196.76.0/22
103.200.74.0/23
103.201.148.0/22
103.239.168.0/22
111.125.225.0/24
183.87.251.0-183.87.255.255
202.94.160.0/22
IPv6:
2401:b240::/32
Signature Algorithm: sha256WithRSAEncryption
2f:e9:3b:50:e7:6c:09:20:d5:b4:87:7f:01:6e:02:13:b6:af:
9d:86:6e:15:93:bf:bb:03:11:76:99:44:3d:9e:b1:ce:0d:da:
8c:32:76:a5:35:c9:00:46:b1:79:7b:74:f6:1d:21:bf:6e:5e:
ba:80:08:e8:26:42:12:ff:92:19:1d:97:af:81:60:21:a2:9b:
b9:ef:bb:32:2c:a8:00:86:0d:69:1b:04:5d:16:6c:79:96:82:
fc:09:c1:ff:40:60:a0:8d:c3:ca:c9:00:0e:f8:56:01:f6:cf:
9a:7a:f7:43:5a:48:d4:82:07:18:4d:5a:3e:ab:37:c5:a0:ee:
4c:2b:85:d1:c1:ab:47:72:67:28:44:90:e9:4e:ca:ad:07:eb:
b1:e3:3f:12:2f:4a:58:a6:13:0c:16:e6:df:0e:43:e9:eb:ea:
f3:5b:a0:b1:cf:93:53:6a:9d:ca:81:a0:d5:38:4d:81:aa:20:
74:45:9e:96:b9:aa:2c:83:d3:46:a0:5c:68:a9:78:f5:4b:d1:
bd:d4:f5:7e:d5:cb:d6:87:9a:a8:67:7e:27:7f:c9:8a:7f:2b:
05:9c:09:9d:12:38:36:50:09:67:42:9c:19:b9:d5:bc:c6:9c:
2f:ca:6a:c9:64:5e:d1:c6:9b:24:0f:f2:3a:14:30:0b:50:e1:
8c:2f:c4:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 20:17:22 2025 by rpki-client