Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/C457D6E65B2911F0A874E459C4F9AE02.roa
File: C457D6E65B2911F0A874E459C4F9AE02.roa (raw, json)
Hash identifier: 9j9IzBnLe81Nhl03WLaU1QpW804tbgG05L5MnLntuyc=
Subject key identifier: 95:44:DB:A9:16:0A:AE:9C:F2:13:BC:45:93:B8:B0:73:F5:B0:B0:F4
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: BFB6
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/C457D6E65B2911F0A874E459C4F9AE02.roa
Signing time: Mon 07 Jul 2025 11:59:00 +0000
ROA not before: Mon 07 Jul 2025 11:59:00 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 133661
IP address blocks: 45.248.156.0/22 maxlen: 24
45.248.160.0/22 maxlen: 24
101.0.32.0/22 maxlen: 24
101.0.37.0/24 maxlen: 24
101.0.38.0/24 maxlen: 24
101.0.41.0/24 maxlen: 24
101.0.42.0/24 maxlen: 24
101.0.45.0/24 maxlen: 24
101.0.49.0/24 maxlen: 24
101.0.50.0/24 maxlen: 24
101.0.53.0/24 maxlen: 24
101.0.54.0/23 maxlen: 24
101.0.57.0/24 maxlen: 24
103.40.196.0/22 maxlen: 24
103.41.20.0/22 maxlen: 24
103.41.24.0/22 maxlen: 24
103.41.36.0/22 maxlen: 24
103.66.204.0/22 maxlen: 24
103.66.208.0/22 maxlen: 24
103.72.168.0/22 maxlen: 24
103.72.220.0/22 maxlen: 24
103.73.148.0/24 maxlen: 24
103.73.149.0/24 maxlen: 24
103.73.150.0/24 maxlen: 24
103.110.248.0/24 maxlen: 24
103.110.249.0/24 maxlen: 24
103.110.250.0/24 maxlen: 24
103.110.251.0/24 maxlen: 24
103.114.64.0/24 maxlen: 24
103.114.65.0/24 maxlen: 24
103.114.66.0/24 maxlen: 24
103.114.67.0/24 maxlen: 24
103.165.76.0/24 maxlen: 24
103.166.215.0/24 maxlen: 24
103.167.154.0/23 maxlen: 24
103.167.182.0/23 maxlen: 24
103.167.212.0/23 maxlen: 24
103.168.0.0/23 maxlen: 24
103.168.33.0/24 maxlen: 24
103.169.242.0/23 maxlen: 24
103.170.36.0/23 maxlen: 24
103.174.92.0/23 maxlen: 24
103.178.64.0/23 maxlen: 24
103.178.203.0/24 maxlen: 24
103.179.10.0/23 maxlen: 24
103.179.100.0/23 maxlen: 24
103.179.102.0/23 maxlen: 24
103.179.120.0/24 maxlen: 24
103.179.224.0/24 maxlen: 24
103.179.226.0/24 maxlen: 24
103.180.168.0/24 maxlen: 24
103.180.174.0/24 maxlen: 24
103.180.212.0/23 maxlen: 24
103.180.214.0/23 maxlen: 24
103.180.238.0/23 maxlen: 24
103.181.56.0/23 maxlen: 24
103.181.110.0/23 maxlen: 24
103.181.151.0/24 maxlen: 24
103.181.152.0/23 maxlen: 24
103.181.154.0/23 maxlen: 24
103.181.174.0/23 maxlen: 24
103.183.30.0/23 maxlen: 24
103.183.32.0/23 maxlen: 24
103.183.34.0/23 maxlen: 24
103.187.84.0/23 maxlen: 24
103.187.96.0/23 maxlen: 24
103.187.102.0/23 maxlen: 24
103.187.130.0/23 maxlen: 24
103.187.158.0/23 maxlen: 24
103.187.170.0/23 maxlen: 24
103.217.116.0/22 maxlen: 24
103.217.120.0/22 maxlen: 24
103.223.8.0/22 maxlen: 24
103.223.12.0/22 maxlen: 24
114.134.24.0/22 maxlen: 24
163.47.212.0/22 maxlen: 24
175.176.184.0/22 maxlen: 24
180.188.224.0/24 maxlen: 24
180.188.232.0/24 maxlen: 24
180.188.236.0/23 maxlen: 24
180.188.241.0/24 maxlen: 24
180.188.242.0/23 maxlen: 24
180.188.246.0/23 maxlen: 24
180.188.248.0/24 maxlen: 24
180.188.249.0/24 maxlen: 24
180.188.250.0/24 maxlen: 24
180.188.251.0/24 maxlen: 24
180.188.252.0/22 maxlen: 24
202.14.120.0/22 maxlen: 24
203.76.178.0/24 maxlen: 24
203.76.180.0/24 maxlen: 24
203.76.181.0/24 maxlen: 24
203.76.188.0/24 maxlen: 24
203.76.190.0/24 maxlen: 24
203.76.191.0/24 maxlen: 24
203.115.68.0/24 maxlen: 24
203.115.73.0/24 maxlen: 24
203.115.84.0/23 maxlen: 24
203.115.91.0/24 maxlen: 24
210.89.39.0/24 maxlen: 24
210.89.58.0/23 maxlen: 24
210.89.61.0/24 maxlen: 24
210.89.62.0/23 maxlen: 24
223.130.28.0/22 maxlen: 24
2001:df0:e400::/48 maxlen: 48
2001:df2:e200::/48 maxlen: 48
2001:df2:e600::/48 maxlen: 48
2400:7b20::/32 maxlen: 32
2401:a880::/32 maxlen: 48
2404:7c80::/32 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 27 Jul 2025 15:24:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 49078 (0xbfb6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Validity
Not Before: Jul 7 11:59:00 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=686bb683-feee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f4:02:c4:58:18:0b:46:34:86:89:f0:8d:20:2a:
b6:8f:e4:d2:fe:c7:40:2a:5e:34:59:bf:4b:bf:17:
6a:24:15:0b:53:0f:83:0f:43:d3:92:21:ef:af:14:
aa:cc:81:da:41:ba:f0:f8:85:d9:18:d1:c4:09:9c:
6d:4c:8a:59:e7:70:72:f9:c2:30:f6:72:33:b3:d6:
a7:fc:44:94:ce:5f:6c:b9:bc:8e:62:fa:e7:97:23:
7e:60:08:04:b4:a5:c2:23:10:a7:c8:ae:a2:92:71:
ba:da:f0:4f:e0:3e:94:cb:bf:0d:dc:83:5b:cf:1f:
36:25:be:db:34:53:c1:03:fa:31:f7:34:f3:e9:40:
87:5e:e0:3f:91:57:f0:51:cc:11:83:f6:83:1e:37:
ea:31:a7:48:2f:b8:a1:d9:94:60:9e:bd:be:d0:2c:
fd:54:53:7c:84:7f:cd:e5:c1:04:69:41:36:15:d8:
34:77:0a:ee:67:51:14:85:45:7c:7b:a7:7f:ab:39:
c1:0f:31:2f:92:74:79:d1:a0:57:90:53:4b:28:83:
b1:12:e4:54:33:e2:f5:49:fd:06:e0:76:68:d5:1c:
fa:bc:01:f5:29:0d:b2:02:41:3e:98:3c:f3:b2:b7:
9c:59:e6:ed:5d:b6:a3:cf:7c:d8:5d:12:80:3e:ab:
24:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:44:DB:A9:16:0A:AE:9C:F2:13:BC:45:93:B8:B0:73:F5:B0:B0:F4
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/C457D6E65B2911F0A874E459C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.248.156.0-45.248.163.255
101.0.32.0/22
101.0.37.0-101.0.38.255
101.0.41.0-101.0.42.255
101.0.45.0/24
101.0.49.0-101.0.50.255
101.0.53.0-101.0.55.255
101.0.57.0/24
103.40.196.0/22
103.41.20.0-103.41.27.255
103.41.36.0/22
103.66.204.0-103.66.211.255
103.72.168.0/22
103.72.220.0/22
103.73.148.0-103.73.150.255
103.110.248.0/22
103.114.64.0/22
103.165.76.0/24
103.166.215.0/24
103.167.154.0/23
103.167.182.0/23
103.167.212.0/23
103.168.0.0/23
103.168.33.0/24
103.169.242.0/23
103.170.36.0/23
103.174.92.0/23
103.178.64.0/23
103.178.203.0/24
103.179.10.0/23
103.179.100.0/22
103.179.120.0/24
103.179.224.0/24
103.179.226.0/24
103.180.168.0/24
103.180.174.0/24
103.180.212.0/22
103.180.238.0/23
103.181.56.0/23
103.181.110.0/23
103.181.151.0-103.181.155.255
103.181.174.0/23
103.183.30.0-103.183.35.255
103.187.84.0/23
103.187.96.0/23
103.187.102.0/23
103.187.130.0/23
103.187.158.0/23
103.187.170.0/23
103.217.116.0-103.217.123.255
103.223.8.0/21
114.134.24.0/22
163.47.212.0/22
175.176.184.0/22
180.188.224.0/24
180.188.232.0/24
180.188.236.0/23
180.188.241.0-180.188.243.255
180.188.246.0-180.188.255.255
202.14.120.0/22
203.76.178.0/24
203.76.180.0/23
203.76.188.0/24
203.76.190.0/23
203.115.68.0/24
203.115.73.0/24
203.115.84.0/23
203.115.91.0/24
210.89.39.0/24
210.89.58.0/23
210.89.61.0-210.89.63.255
223.130.28.0/22
IPv6:
2001:df0:e400::/48
2001:df2:e200::/48
2001:df2:e600::/48
2400:7b20::/32
2401:a880::/32
2404:7c80::/32
Signature Algorithm: sha256WithRSAEncryption
30:e1:82:cb:b4:e8:ea:cd:19:47:89:0d:f1:17:2b:9c:64:17:
d6:7f:ed:73:cc:6f:5d:54:59:88:3b:34:c6:95:3b:e4:c4:43:
ee:69:10:67:e2:e0:e6:02:e7:4c:d1:23:ea:9d:15:06:a9:ad:
01:66:58:3a:72:3d:7c:b4:cf:25:3c:55:fb:26:ad:5b:38:a7:
13:d0:91:f9:b1:f9:80:1f:55:d2:cf:53:93:8b:67:ef:fc:7b:
da:b6:5b:15:c6:cd:56:0d:33:a9:20:70:c8:44:be:bc:02:4e:
59:10:97:e0:9f:f0:b8:ff:ea:19:86:76:0d:ea:90:5c:26:3d:
18:57:65:47:ec:76:82:ae:6c:b3:32:ab:16:93:7d:da:4d:c7:
be:8a:b3:ca:1c:36:19:63:02:79:21:25:49:95:46:54:5d:89:
72:d2:0b:8f:59:cd:b2:05:20:9c:ef:74:e1:23:4e:2f:80:f5:
cf:fd:04:8e:58:b7:d5:ee:86:26:0f:10:6a:dc:17:7f:c3:f6:
9a:2b:a3:74:29:69:2c:16:39:ba:f7:50:d6:a8:dd:09:00:e7:
e1:a0:34:d8:9d:e3:cd:85:49:1f:be:a5:bd:15:f5:2b:93:e2:
2a:3c:82:31:38:7f:48:92:b0:0d:17:ed:5a:2b:96:63:c1:dd:
7b:01:4b:62
-----BEGIN CERTIFICATE-----
MIIHzTCCBrWgAwIBAgIDAL+2MA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5
MThFREIyMTEwLwYDVQQFEygyOTZFREI2NEYzQUY2RTlEOTgwOTMyRTgxNkY5NTk4
M0UzQUJDODIzMB4XDTI1MDcwNzExNTkwMFoXDTI2MDcwMTAwMDAwMFowGDEWMBQG
A1UEAxMNNjg2YmI2ODMtZmVlZTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAPQCxFgYC0Y0honwjSAqto/k0v7HQCpeNFm/S78XaiQVC1MPgw9D05Ih768U
qsyB2kG68PiF2RjRxAmcbUyKWedwcvnCMPZyM7PWp/xElM5fbLm8jmL655cjfmAI
BLSlwiMQp8iuopJxutrwT+A+lMu/DdyDW88fNiW+2zRTwQP6Mfc08+lAh17gP5FX
8FHMEYP2gx436jGnSC+4odmUYJ69vtAs/VRTfIR/zeXBBGlBNhXYNHcK7mdRFIVF
fHunf6s5wQ8xL5J0edGgV5BTSyiDsRLkVDPi9Un9BuB2aNUc+rwB9SkNsgJBPpg8
87K3nFnm7V22o8982F0SgD6rJKMCAwEAAaOCBPAwggTsMB0GA1UdDgQWBBSVRNup
FgqunPITvEWTuLBz9bCw9DAfBgNVHSMEGDAWgBQpbttk869unZgJMugW+VmD46vI
IzAOBgNVHQ8BAf8EBAMCB4AwgYMGA1UdHwR8MHoweKB2oHSGcnJzeW5jOi8vcnBr
aS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkxOEVEQjIvMkE0M0UzMEM3
MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvS1c3YlpQT3ZicDJZQ1RMb0Z2bFpnLU9y
eUNNLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr
aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3
MkZEMUZGMi9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5Q00uY2VyMEoGA1UdIAEB
/wRAMD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBu
aWMubmV0L1JQS0kvQ1BTLnBkZjCBywYIKwYBBQUHAQsEgb4wgbswgYMGCCsGAQUF
BzALhndyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MThFREIyLzJBNDNFMzBDNzBFOTExRTJCMzZENEI2QjI5NzlCQjIwL0M0NTdENkU2
NUIyOTExRjBBODc0RTQ1OUM0RjlBRTAyLnJvYTAzBggrBgEFBQcwDYYnaHR0cHM6
Ly9ycmRwLmFwbmljLm5ldC9ub3RpZmljYXRpb24ueG1sMIICeAYIKwYBBQUHAQcB
Af8EggJnMIICYzCCAicEAgABMIICHzAMAwQCLficAwQCLfigAwQCZQAgMAwDBABl
ACUDBABlACYwDAMEAGUAKQMEAGUAKgMEAGUALTAMAwQAZQAxAwQAZQAyMAwDBABl
ADUDBANlADADBABlADkDBAJnKMQwDAMEAmcpFAMEAmcpGAMEAmcpJDAMAwQCZ0LM
AwQCZ0LQAwQCZ0ioAwQCZ0jcMAwDBAJnSZQDBABnSZYDBAJnbvgDBAJnckADBABn
pUwDBABnptcDBAFnp5oDBAFnp7YDBAFnp9QDBAFnqAADBABnqCEDBAFnqfIDBAFn
qiQDBAFnrlwDBAFnskADBABnsssDBAFnswoDBAJns2QDBABns3gDBABns+ADBABn
s+IDBABntKgDBABntK4DBAJntNQDBAFntO4DBAFntTgDBAFntW4wDAMEAGe1lwME
Ame1mAMEAWe1rjAMAwQBZ7ceAwQCZ7cgAwQBZ7tUAwQBZ7tgAwQBZ7tmAwQBZ7uC
AwQBZ7ueAwQBZ7uqMAwDBAJn2XQDBAJn2XgDBANn3wgDBAJyhhgDBAKjL9QDBAKv
sLgDBAC0vOADBAC0vOgDBAG0vOwwDAMEALS88QMEArS88DALAwQBtLz2AwMAtLwD
BALKDngDBADLTLIDBAHLTLQDBADLTLwDBAHLTL4DBADLc0QDBADLc0kDBAHLc1QD
BADLc1sDBADSWScDBAHSWTowDAMEANJZPQMEBtJZAAMEAt+CHDA2BAIAAjAwAwcA
IAEN8OQAAwcAIAEN8uIAAwcAIAEN8uYAAwUAJAB7IAMFACQBqIADBQAkBHyAMA0G
CSqGSIb3DQEBCwUAA4IBAQAw4YLLtOjqzRlHiQ3xFyucZBfWf+1zzG9dVFmIOzTG
lTvkxEPuaRBn4uDmAudM0SPqnRUGqa0BZlg6cj18tM8lPFX7Jq1bOKcT0JH5sfmA
H1XSz1OTi2fv/HvatlsVxs1WDTOpIHDIRL68Ak5ZEJfgn/C4/+oZhnYN6pBcJj0Y
V2VH7HaCrmyzMqsWk33aTce+irPKHDYZYwJ5ISVJlUZUXYly0guPWc2yBSCc73Th
I04vgPXP/QSOWLfV7oYmDxBq3Bd/w/aaK6N0KWksFjm691DWqN0JAOfhoDTYnePN
hUkfvqW9FfUrk+IqPIIxOH9IkrANF+1aK5Zjwd17AUti
-----END CERTIFICATE-----
Generated at Mon Jul 21 03:05:37 2025 by rpki-client