Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9199197/84B2EC98F27D11EA9456EE60C4F9AE02/14C388C2114311F0B3944E67C4F9AE02.roa
File: 14C388C2114311F0B3944E67C4F9AE02.roa (raw, json)
Hash identifier: 7nhlkenTW8+xvmT1j5rdicJEKIXjxqwvtJaZOI4Twq8=
Subject key identifier: 72:83:9B:BE:89:95:E7:D6:1F:C8:2F:34:62:95:3D:20:07:6D:B7:5D
Certificate issuer: /CN=A9199197/serialNumber=6835DDFB8438D24BB6C5979316E54891066090A7
Certificate serial: 0880
Authority key identifier: 68:35:DD:FB:84:38:D2:4B:B6:C5:97:93:16:E5:48:91:06:60:90:A7
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aDXd-4Q40ku2xZeTFuVIkQZgkKc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9199197/84B2EC98F27D11EA9456EE60C4F9AE02/14C388C2114311F0B3944E67C4F9AE02.roa
Signing time: Fri 04 Apr 2025 10:53:55 +0000
ROA not before: Fri 04 Apr 2025 10:53:55 +0000
ROA not after: Wed 30 Jul 2025 00:00:00 +0000
asID: 24560
IP address blocks: 27.56.128.0/20 maxlen: 24
27.56.144.0/20 maxlen: 24
27.56.160.0/19 maxlen: 24
27.57.0.0/16 maxlen: 24
27.58.0.0/16 maxlen: 24
27.62.116.0/24 maxlen: 24
27.62.117.0/24 maxlen: 24
27.63.176.0/20 maxlen: 24
106.200.0.0/18 maxlen: 24
106.200.192.0/18 maxlen: 24
106.201.0.0/16 maxlen: 24
106.202.128.0/17 maxlen: 24
106.203.192.0/18 maxlen: 24
106.205.0.0/18 maxlen: 24
106.205.64.0/18 maxlen: 24
106.212.0.0/17 maxlen: 24
106.212.128.0/17 maxlen: 24
106.213.0.0/17 maxlen: 24
106.214.0.0/16 maxlen: 24
106.215.0.0/17 maxlen: 24
106.215.128.0/19 maxlen: 24
106.215.160.0/20 maxlen: 24
106.215.176.0/21 maxlen: 24
106.215.184.0/21 maxlen: 24
106.215.192.0/21 maxlen: 24
106.215.200.0/24 maxlen: 24
106.219.64.0/19 maxlen: 24
106.219.96.0/20 maxlen: 24
106.219.120.0/22 maxlen: 24
106.219.124.0/22 maxlen: 24
106.219.128.0/21 maxlen: 24
106.219.136.0/22 maxlen: 24
106.219.144.0/20 maxlen: 24
106.219.160.0/20 maxlen: 24
106.219.176.0/21 maxlen: 24
106.222.192.0/18 maxlen: 24
110.224.128.0/17 maxlen: 24
110.225.0.0/16 maxlen: 24
110.226.0.0/16 maxlen: 24
110.227.0.0/16 maxlen: 24
117.96.0.0/16 maxlen: 24
117.97.128.0/18 maxlen: 24
117.98.192.0/20 maxlen: 24
117.98.208.0/21 maxlen: 21
117.98.216.0/21 maxlen: 24
117.99.96.0/20 maxlen: 24
117.99.160.0/19 maxlen: 24
223.177.0.0/16 maxlen: 24
223.178.0.0/17 maxlen: 24
223.178.192.0/18 maxlen: 24
223.179.128.0/19 maxlen: 24
223.181.0.0/17 maxlen: 24
223.181.128.0/18 maxlen: 24
223.182.64.0/18 maxlen: 24
223.182.164.0/22 maxlen: 24
223.182.172.0/22 maxlen: 24
223.182.180.0/22 maxlen: 24
223.182.248.0/21 maxlen: 24
223.184.0.0/17 maxlen: 24
223.185.12.0/22 maxlen: 24
223.185.16.0/20 maxlen: 24
223.185.32.0/19 maxlen: 24
223.185.128.0/21 maxlen: 24
223.185.136.0/21 maxlen: 24
223.185.144.0/20 maxlen: 24
223.185.160.0/20 maxlen: 24
223.185.176.0/20 maxlen: 24
223.190.0.0/17 maxlen: 24
223.190.192.0/18 maxlen: 24
223.224.172.0/23 maxlen: 24
223.226.0.0/16 maxlen: 24
223.229.128.0/17 maxlen: 24
223.230.0.0/16 maxlen: 24
223.233.64.0/18 maxlen: 24
223.235.0.0/16 maxlen: 24
223.236.0.0/16 maxlen: 24
223.239.0.0/16 maxlen: 24
2401:4900:1c00::/41 maxlen: 48
2401:4900:1c80::/41 maxlen: 48
2401:4900:1f20::/44 maxlen: 48
2401:4900:1f30::/44 maxlen: 48
2401:4900:8800::/37 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9199197/84B2EC98F27D11EA9456EE60C4F9AE02/aDXd-4Q40ku2xZeTFuVIkQZgkKc.crl
rsync://rpki.apnic.net/member_repository/A9199197/84B2EC98F27D11EA9456EE60C4F9AE02/aDXd-4Q40ku2xZeTFuVIkQZgkKc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aDXd-4Q40ku2xZeTFuVIkQZgkKc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 11 Apr 2025 21:11:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2176 (0x880)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9199197
Validity
Not Before: Apr 4 10:53:55 2025 GMT
Not After : Jul 30 00:00:00 2025 GMT
Subject: CN=67efba43-ad8b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:fa:97:53:ec:e2:f4:e5:56:a0:c2:ea:fd:5a:
a3:fc:c6:87:89:ca:03:5a:b4:e0:b8:38:47:5c:b5:
0d:c3:34:db:d3:c9:05:0c:08:3e:dd:19:ba:1b:ae:
ce:80:bf:5f:bd:ae:3e:c6:63:86:05:1f:89:9c:a4:
3c:71:c9:43:a4:d9:51:84:59:27:89:6c:9f:d5:4c:
ff:c3:28:60:23:c5:44:ee:77:fe:5c:ae:50:87:6e:
6d:83:42:f3:3c:a1:fe:f2:f0:13:fe:79:cf:44:91:
6c:26:57:18:5c:da:c5:ec:da:43:a9:4d:b2:3f:f7:
87:53:d6:bf:16:45:4b:8e:40:b1:07:f2:90:f9:eb:
77:f9:8b:c9:e4:c4:f1:30:7e:52:da:8c:bd:50:57:
6c:fa:b0:da:e0:6e:44:05:7a:11:85:80:22:76:79:
90:a8:3b:27:0c:42:e0:a1:37:42:aa:db:fc:6a:85:
a7:75:f0:5b:53:be:7c:76:a9:d7:2d:6c:99:0f:ad:
8e:d9:60:37:be:5b:81:c5:39:e8:b3:12:54:ae:6e:
de:9b:ac:9c:87:58:ed:b3:40:e8:cb:a0:12:71:09:
a4:ba:5d:8b:a4:fc:45:ed:6c:ef:14:8e:b8:ec:71:
0c:25:1b:f2:51:be:0a:60:bc:cd:45:a9:37:91:33:
4b:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:83:9B:BE:89:95:E7:D6:1F:C8:2F:34:62:95:3D:20:07:6D:B7:5D
X509v3 Authority Key Identifier:
keyid:68:35:DD:FB:84:38:D2:4B:B6:C5:97:93:16:E5:48:91:06:60:90:A7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9199197/84B2EC98F27D11EA9456EE60C4F9AE02/aDXd-4Q40ku2xZeTFuVIkQZgkKc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aDXd-4Q40ku2xZeTFuVIkQZgkKc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9199197/84B2EC98F27D11EA9456EE60C4F9AE02/14C388C2114311F0B3944E67C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
27.56.128.0/18
27.57.0.0-27.58.255.255
27.62.116.0/23
27.63.176.0/20
106.200.0.0/18
106.200.192.0-106.201.255.255
106.202.128.0/17
106.203.192.0/18
106.205.0.0/17
106.212.0.0-106.213.127.255
106.214.0.0-106.215.200.255
106.219.64.0-106.219.111.255
106.219.120.0-106.219.139.255
106.219.144.0-106.219.183.255
106.222.192.0/18
110.224.128.0-110.227.255.255
117.96.0.0/16
117.97.128.0/18
117.98.192.0/19
117.99.96.0/20
117.99.160.0/19
223.177.0.0-223.178.127.255
223.178.192.0/18
223.179.128.0/19
223.181.0.0-223.181.191.255
223.182.64.0/18
223.182.164.0/22
223.182.172.0/22
223.182.180.0/22
223.182.248.0/21
223.184.0.0/17
223.185.12.0-223.185.63.255
223.185.128.0/18
223.190.0.0/17
223.190.192.0/18
223.224.172.0/23
223.226.0.0/16
223.229.128.0-223.230.255.255
223.233.64.0/18
223.235.0.0-223.236.255.255
223.239.0.0/16
IPv6:
2401:4900:1c00::/40
2401:4900:1f20::/43
2401:4900:8800::/37
Signature Algorithm: sha256WithRSAEncryption
9b:c1:0a:af:ef:39:0f:b1:fd:86:10:c1:f3:dd:8d:5f:1b:13:
6a:0c:c1:5a:07:5f:1e:49:f9:84:c1:fd:d5:c0:bc:bf:16:15:
c6:ab:09:e9:9d:23:67:3a:75:c1:ec:47:f5:71:ef:a3:6e:93:
c4:09:35:31:17:78:ad:60:80:31:aa:6e:9d:b3:25:84:3f:11:
ba:e3:2f:ec:a3:91:fa:b0:99:80:ab:8d:5a:0a:e1:b6:66:da:
01:15:f1:6a:b6:5d:52:4f:3e:91:de:36:86:79:c8:7b:a8:be:
72:d5:2a:d4:a6:dc:2e:73:ca:4b:e6:b4:a5:18:21:7d:47:3b:
f3:5f:1f:d0:c0:b2:91:b0:15:4b:65:27:a7:96:a5:67:84:b9:
f1:fd:52:e6:70:61:ed:48:ff:b9:a7:ac:d5:ea:c8:b6:4f:eb:
a9:ca:07:ce:95:bf:59:5e:12:79:36:03:b8:72:73:a0:f9:af:
bf:8d:81:0d:28:4c:0e:75:c0:08:ff:ee:fa:74:fc:6f:bc:70:
62:6c:bf:8e:50:5b:1a:c1:6a:97:66:62:1b:27:b5:67:ea:29:
f8:be:b6:53:51:1e:cd:69:ce:2f:9e:e7:93:75:03:c6:98:b1:
18:61:d8:34:64:08:dc:0b:1c:39:a0:57:a9:56:37:2e:7e:55:
14:97:28:17
-----BEGIN CERTIFICATE-----
MIIG5jCCBc6gAwIBAgICCIAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OTkxOTcxMTAvBgNVBAUTKDY4MzVEREZCODQzOEQyNEJCNkM1OTc5MzE2RTU0ODkx
MDY2MDkwQTcwHhcNMjUwNDA0MTA1MzU1WhcNMjUwNzMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02N2VmYmE0My1hZDhiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAy/qXU+zi9OVWoMLq/Vqj/MaHicoDWrTguDhHXLUNwzTb08kFDAg+3Rm6G67O
gL9fva4+xmOGBR+JnKQ8cclDpNlRhFkniWyf1Uz/wyhgI8VE7nf+XK5Qh25tg0Lz
PKH+8vAT/nnPRJFsJlcYXNrF7NpDqU2yP/eHU9a/FkVLjkCxB/KQ+et3+YvJ5MTx
MH5S2oy9UFds+rDa4G5EBXoRhYAidnmQqDsnDELgoTdCqtv8aoWndfBbU758dqnX
LWyZD62O2WA3vluBxTnosxJUrm7em6ych1jts0Doy6AScQmkul2LpPxF7WzvFI64
7HEMJRvyUb4KYLzNRak3kTNLPwIDAQABo4IECjCCBAYwHQYDVR0OBBYEFHKDm76J
lefWH8gvNGKVPSAHbbddMB8GA1UdIwQYMBaAFGg13fuEONJLtsWXkxblSJEGYJCn
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5OTE5Ny84NEIyRUM5OEYy
N0QxMUVBOTQ1NkVFNjBDNEY5QUUwMi9hRFhkLTRRNDBrdTJ4WmVURnVWSWtRWmdr
S2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2FEWGQtNFE0MGt1MnhaZVRGdVZJa1FaZ2tLYy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
OTkxOTcvODRCMkVDOThGMjdEMTFFQTk0NTZFRTYwQzRGOUFFMDIvMTRDMzg4QzIx
MTQzMTFGMEIzOTQ0RTY3QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwggGSBggrBgEFBQcBBwEB
/wSCAYEwggF9MIIBWAQCAAEwggFQAwQGGziAMAoDAwAbOQMDABs6AwQBGz50AwQE
Gz+wAwQGasgAMAsDBAZqyMADAwFqyAMEB2rKgAMEBmrLwAMEB2rNADALAwMCatQD
BAdq1QAwCwMDAWrWAwQAatfIMAwDBAZq20ADBARq22AwDAMEA2rbeAMEAmrbiDAM
AwQEatuQAwQDatuwAwQGat7AMAsDBAdu4IADAwJu4AMDAHVgAwQGdWGAAwQFdWLA
AwQEdWNgAwQFdWOgMAsDAwDfsQMEB9+yAAMEBt+ywAMEBd+zgDALAwMA37UDBAbf
tYADBAbftkADBALftqQDBALftqwDBALftrQDBAPftvgDBAffuAAwDAMEAt+5DAME
Bt+5AAMEBt+5gAMEB9++AAMEBt++wAMEAd/grAMDAN/iMAsDBAff5YADAwDf5gME
Bt/pQDAKAwMA3+sDAwDf7AMDAN/vMB8EAgACMBkDBgAkAUkAHAMHBSQBSQAfIAMG
AyQBSQCIMA0GCSqGSIb3DQEBCwUAA4IBAQCbwQqv7zkPsf2GEMHz3Y1fGxNqDMFa
B18eSfmEwf3VwLy/FhXGqwnpnSNnOnXB7Ef1ce+jbpPECTUxF3itYIAxqm6dsyWE
PxG64y/so5H6sJmAq41aCuG2ZtoBFfFqtl1STz6R3jaGech7qL5y1SrUptwuc8pL
5rSlGCF9RzvzXx/QwLKRsBVLZSenlqVnhLnx/VLmcGHtSP+5p6zV6si2T+upygfO
lb9ZXhJ5NgO4cnOg+a+/jYENKEwOdcAI/+76dPxvvHBibL+OUFsawWqXZmIbJ7Vn
6in4vrZTUR7Nac4vnueTdQPGmLEYYdg0ZAjcCxw5oFepVjcuflUUlygX
-----END CERTIFICATE-----
Generated at Sat Apr 5 02:13:17 2025 by rpki-client