Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A4B9D/95AD03881D9E11E2880E868E08B02CD2/43BD42D8C6FA11EEB1BFF11FC4F9AE02.roa
File: 43BD42D8C6FA11EEB1BFF11FC4F9AE02.roa (raw, json)
Hash identifier: rz7KWjBZEYdZagJgiTo6rpG1kH3c3NzFacklKm2JF8k=
Subject key identifier: 1C:6B:46:15:03:81:B2:F7:6D:00:07:77:C8:FA:5D:CA:EC:63:E8:A9
Certificate issuer: /CN=A91A4B9D/serialNumber=EF68BDBC072CAB455B6DA3160EDF8FB6C488DD15
Certificate serial: 34C4
Authority key identifier: EF:68:BD:BC:07:2C:AB:45:5B:6D:A3:16:0E:DF:8F:B6:C4:88:DD:15
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/72i9vAcsq0VbbaMWDt-PtsSI3RU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A4B9D/95AD03881D9E11E2880E868E08B02CD2/43BD42D8C6FA11EEB1BFF11FC4F9AE02.roa
Signing time: Fri 11 Jul 2025 02:35:09 +0000
ROA not before: Fri 11 Jul 2025 02:35:09 +0000
ROA not after: Mon 31 Aug 2026 00:00:00 +0000
asID: 133159
IP address blocks: 43.224.180.0/22 maxlen: 22
45.124.52.0/22 maxlen: 22
103.1.184.0/22 maxlen: 22
103.16.128.0/22 maxlen: 22
103.17.56.0/24 maxlen: 24
103.17.57.0/24 maxlen: 24
103.100.36.0/22 maxlen: 23
103.249.236.0/22 maxlen: 22
110.232.112.0/22 maxlen: 22
112.213.32.0/21 maxlen: 21
119.42.52.0/23 maxlen: 23
119.42.54.0/23 maxlen: 23
150.107.72.0/22 maxlen: 22
150.107.75.0/24 maxlen: 24
175.45.180.0/22 maxlen: 23
175.45.182.0/23 maxlen: 24
203.18.30.0/24 maxlen: 24
203.29.240.0/22 maxlen: 22
203.57.50.0/23 maxlen: 23
203.57.114.0/23 maxlen: 23
2404:9400::/48 maxlen: 48
2404:9400:1::/48 maxlen: 48
2404:9400:2::/48 maxlen: 48
2404:9400:3::/48 maxlen: 48
2404:9400:4::/48 maxlen: 48
2404:9400:5::/48 maxlen: 48
2404:9400:e::/48 maxlen: 48
2404:9400:f::/48 maxlen: 48
2404:9400:1000::/36 maxlen: 36
2404:9400:2000::/36 maxlen: 36
2404:9400:3000::/36 maxlen: 36
2404:9400:4000::/36 maxlen: 36
2404:9400:5000::/36 maxlen: 36
2404:9400:e000::/36 maxlen: 36
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A4B9D/95AD03881D9E11E2880E868E08B02CD2/72i9vAcsq0VbbaMWDt-PtsSI3RU.crl
rsync://rpki.apnic.net/member_repository/A91A4B9D/95AD03881D9E11E2880E868E08B02CD2/72i9vAcsq0VbbaMWDt-PtsSI3RU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/72i9vAcsq0VbbaMWDt-PtsSI3RU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 25 Jul 2025 15:03:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13508 (0x34c4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A4B9D, serialNumber=EF68BDBC072CAB455B6DA3160EDF8FB6C488DD15
Validity
Not Before: Jul 11 02:35:09 2025 GMT
Not After : Aug 31 00:00:00 2026 GMT
Subject: CN=6870785c-b45b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:a2:03:8a:a5:d5:7a:35:b9:94:97:69:62:5c:
90:2b:61:75:22:ad:43:1f:88:34:db:15:9a:a1:ed:
c7:03:40:c9:4f:af:de:62:6f:a6:c0:e7:a8:a5:4b:
d6:06:2d:b2:f0:cb:a2:a7:c2:d6:5c:4a:1d:f4:b6:
c2:80:79:7e:30:87:a8:49:d3:ea:2f:29:5b:fe:2a:
79:46:fb:3b:d0:4a:c2:05:b6:45:df:25:b2:c9:1d:
94:04:c3:fa:c9:25:1d:0d:1e:fe:29:4a:46:ac:e6:
5a:1c:12:1b:3c:6c:f6:e5:ae:fe:15:4d:d5:e0:7f:
58:47:16:50:a2:e7:c5:9f:d3:1b:4a:56:90:1d:ba:
50:b7:5c:6f:9f:7d:81:e2:fe:d0:2d:7d:68:d1:77:
89:22:8d:ae:03:14:6d:13:42:88:99:d8:ec:56:dd:
ea:10:71:56:d3:04:05:9b:22:64:db:cc:33:aa:5f:
1c:9f:2a:83:82:92:75:49:83:60:b2:0a:95:22:a7:
db:d2:80:67:c2:e8:8e:66:1d:9e:2b:90:1f:61:e8:
da:88:94:54:3b:c0:3b:34:85:57:6e:8b:25:b3:4a:
26:bf:d6:95:d8:24:d6:e6:61:83:2c:8a:64:17:c4:
6c:c9:c4:d1:43:5b:eb:84:3c:d3:5d:54:da:21:de:
20:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:6B:46:15:03:81:B2:F7:6D:00:07:77:C8:FA:5D:CA:EC:63:E8:A9
X509v3 Authority Key Identifier:
keyid:EF:68:BD:BC:07:2C:AB:45:5B:6D:A3:16:0E:DF:8F:B6:C4:88:DD:15
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A4B9D/95AD03881D9E11E2880E868E08B02CD2/72i9vAcsq0VbbaMWDt-PtsSI3RU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/72i9vAcsq0VbbaMWDt-PtsSI3RU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A4B9D/95AD03881D9E11E2880E868E08B02CD2/43BD42D8C6FA11EEB1BFF11FC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
43.224.180.0/22
45.124.52.0/22
103.1.184.0/22
103.16.128.0/22
103.17.56.0/23
103.100.36.0/22
103.249.236.0/22
110.232.112.0/22
112.213.32.0/21
119.42.52.0/22
150.107.72.0/22
175.45.180.0/22
203.18.30.0/24
203.29.240.0/22
203.57.50.0/23
203.57.114.0/23
IPv6:
2404:9400::-2404:9400:5:ffff:ffff:ffff:ffff:ffff
2404:9400:e::/47
2404:9400:1000::-2404:9400:5fff:ffff:ffff:ffff:ffff:ffff
2404:9400:e000::/36
Signature Algorithm: sha256WithRSAEncryption
ca:b0:b1:c3:12:fd:1b:da:c2:52:b3:ab:11:04:e8:eb:2b:1b:
ae:f3:af:2f:d9:c6:08:df:68:7c:ad:f1:c7:24:4a:78:b9:db:
de:70:01:69:a8:d6:7e:06:fc:eb:c0:46:75:d2:07:9c:a5:5f:
7d:71:20:73:38:5f:ef:ea:98:32:86:27:b1:11:7d:e9:8d:bd:
26:1d:ec:81:dd:10:f0:91:e7:57:90:ce:47:f7:08:0c:7a:92:
67:be:cb:6f:48:18:aa:08:1f:0b:c8:9d:6b:0f:16:55:4b:98:
3d:00:b3:f1:cc:59:8a:70:5e:b8:d0:21:46:c6:cd:18:89:f9:
66:00:89:31:0f:3b:c0:bd:7e:a9:4a:42:65:06:b2:00:73:e7:
7b:a0:1f:57:71:0c:10:47:29:04:0f:2f:af:96:8c:e4:b6:90:
9f:c2:b9:61:0f:79:ea:6d:70:ad:e2:18:53:22:36:04:01:a3:
87:93:df:13:93:50:83:e1:4c:88:82:85:0a:8b:22:60:4c:a6:
ae:ba:b4:cb:e9:db:0f:fe:46:00:5e:53:72:91:49:ef:e0:cc:
75:90:f8:ff:17:b7:03:71:52:7e:14:25:66:c9:90:f8:c0:5f:
d7:c4:db:bb:e6:22:c8:e5:7c:96:51:0d:83:15:cc:b8:e8:7a:
d7:e7:23:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 07:54:30 2025 by rpki-client