Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C1323/084D88D495B711EABB824F1BC4F9AE02/4E9D3CC61F5511EBAA049D14C4F9AE02.roa
File: 4E9D3CC61F5511EBAA049D14C4F9AE02.roa (raw, json)
Hash identifier: fYTrs1wjsafulOyjkgiosula+uP3MuhhU/iPqCDzV20=
Subject key identifier: E9:9D:4A:64:B7:1A:B0:6C:BD:D0:0E:D1:87:74:F5:04:40:E6:4E:38
Certificate issuer: /CN=A91C1323/serialNumber=412A6511CFEDCFECB5590C96C8C361E2FED44857
Certificate serial: 5FE6
Authority key identifier: 41:2A:65:11:CF:ED:CF:EC:B5:59:0C:96:C8:C3:61:E2:FE:D4:48:57
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QSplEc_tz-y1WQyWyMNh4v7USFc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C1323/084D88D495B711EABB824F1BC4F9AE02/4E9D3CC61F5511EBAA049D14C4F9AE02.roa
Signing time: Sun 23 Mar 2025 07:30:50 +0000
ROA not before: Sun 23 Mar 2025 07:30:50 +0000
ROA not after: Wed 30 Jul 2025 00:00:00 +0000
asID: 9304
IP address blocks: 103.10.12.0/22 maxlen: 22
113.252.0.0/14 maxlen: 14
113.252.0.0/16 maxlen: 16
113.252.0.0/18 maxlen: 18
113.252.64.0/18 maxlen: 18
113.252.128.0/18 maxlen: 18
113.252.192.0/18 maxlen: 18
113.253.0.0/16 maxlen: 16
113.253.0.0/18 maxlen: 18
113.253.64.0/18 maxlen: 18
113.253.128.0/18 maxlen: 18
113.253.187.0/24 maxlen: 24
113.253.192.0/18 maxlen: 18
113.254.0.0/16 maxlen: 16
113.254.0.0/18 maxlen: 18
113.254.64.0/18 maxlen: 18
113.254.128.0/18 maxlen: 18
113.254.192.0/18 maxlen: 18
113.255.0.0/16 maxlen: 16
113.255.0.0/18 maxlen: 18
113.255.64.0/18 maxlen: 18
113.255.128.0/18 maxlen: 18
113.255.192.0/18 maxlen: 18
118.143.34.0/24 maxlen: 24
118.143.54.0/24 maxlen: 24
118.143.198.0/23 maxlen: 23
118.143.200.0/23 maxlen: 23
118.143.201.0/24 maxlen: 24
118.143.203.0/24 maxlen: 24
118.143.206.0/24 maxlen: 24
118.143.210.0/24 maxlen: 24
118.143.211.0/24 maxlen: 24
118.143.214.0/24 maxlen: 24
118.143.224.0/20 maxlen: 20
118.143.228.0/24 maxlen: 24
118.143.230.0/24 maxlen: 24
118.143.232.0/24 maxlen: 24
118.143.233.0/24 maxlen: 24
118.143.234.0/24 maxlen: 24
118.143.235.0/24 maxlen: 24
118.143.245.0/24 maxlen: 24
118.143.251.0/24 maxlen: 24
203.184.128.0/17 maxlen: 17
203.184.128.0/19 maxlen: 19
203.184.128.0/20 maxlen: 20
203.184.131.0/24 maxlen: 24
203.184.132.0/24 maxlen: 24
203.184.136.0/24 maxlen: 24
203.184.160.0/19 maxlen: 19
203.184.178.0/24 maxlen: 24
203.184.192.0/19 maxlen: 19
203.184.192.0/22 maxlen: 22
203.184.192.0/23 maxlen: 23
203.184.192.0/24 maxlen: 24
203.184.193.0/24 maxlen: 24
203.184.194.0/23 maxlen: 23
203.184.194.0/24 maxlen: 24
203.184.195.0/24 maxlen: 24
203.184.196.0/24 maxlen: 24
203.184.216.0/24 maxlen: 24
203.184.224.0/19 maxlen: 19
203.184.225.0/24 maxlen: 24
203.184.226.0/24 maxlen: 24
203.184.230.0/24 maxlen: 24
203.184.231.0/24 maxlen: 24
203.184.232.0/24 maxlen: 24
203.184.233.0/24 maxlen: 24
203.184.236.0/22 maxlen: 22
203.184.245.0/24 maxlen: 24
203.184.246.0/24 maxlen: 24
203.184.247.0/24 maxlen: 24
210.0.128.0/17 maxlen: 17
210.0.128.0/18 maxlen: 18
210.0.128.0/19 maxlen: 19
210.0.128.0/21 maxlen: 21
210.0.130.0/24 maxlen: 24
210.0.131.0/24 maxlen: 24
210.0.136.0/22 maxlen: 22
210.0.136.0/24 maxlen: 24
210.0.140.0/22 maxlen: 22
210.0.144.0/20 maxlen: 20
210.0.144.0/23 maxlen: 23
210.0.146.0/24 maxlen: 24
210.0.147.0/24 maxlen: 24
210.0.148.0/24 maxlen: 24
210.0.149.0/24 maxlen: 24
210.0.150.0/24 maxlen: 24
210.0.151.0/24 maxlen: 24
210.0.152.0/22 maxlen: 22
210.0.153.0/24 maxlen: 24
210.0.154.0/24 maxlen: 24
210.0.156.0/22 maxlen: 22
210.0.158.0/24 maxlen: 24
210.0.160.0/20 maxlen: 20
210.0.172.0/22 maxlen: 22
210.0.176.0/22 maxlen: 22
210.0.180.0/24 maxlen: 24
210.0.181.0/24 maxlen: 24
210.0.182.0/23 maxlen: 23
210.0.184.0/23 maxlen: 23
210.0.186.0/24 maxlen: 24
210.0.187.0/24 maxlen: 24
210.0.188.0/22 maxlen: 22
210.0.192.0/18 maxlen: 18
210.0.192.0/22 maxlen: 22
210.0.196.0/22 maxlen: 22
210.0.200.0/22 maxlen: 22
210.0.201.0/24 maxlen: 24
210.0.203.0/24 maxlen: 24
210.0.204.0/23 maxlen: 23
210.0.205.0/24 maxlen: 24
210.0.206.0/24 maxlen: 24
210.0.207.0/24 maxlen: 24
210.0.208.0/24 maxlen: 24
210.0.209.0/24 maxlen: 24
210.0.210.0/23 maxlen: 23
210.0.212.0/22 maxlen: 22
210.0.214.0/24 maxlen: 24
210.0.216.0/24 maxlen: 24
210.0.217.0/24 maxlen: 24
210.0.218.0/23 maxlen: 23
210.0.220.0/22 maxlen: 22
210.0.227.0/24 maxlen: 24
210.0.236.0/24 maxlen: 24
210.0.237.0/24 maxlen: 24
210.0.239.0/24 maxlen: 24
210.0.240.0/24 maxlen: 24
210.0.244.0/24 maxlen: 24
210.0.245.0/24 maxlen: 24
218.188.104.0/22 maxlen: 22
218.188.104.0/24 maxlen: 24
218.188.105.0/24 maxlen: 24
218.188.106.0/24 maxlen: 24
218.188.108.0/24 maxlen: 24
218.188.109.0/24 maxlen: 24
218.189.5.0/24 maxlen: 24
218.189.6.0/24 maxlen: 24
218.189.7.0/24 maxlen: 24
218.189.8.0/22 maxlen: 22
218.189.8.0/24 maxlen: 24
218.189.9.0/24 maxlen: 24
218.189.12.0/22 maxlen: 22
218.189.12.0/24 maxlen: 24
218.189.13.0/24 maxlen: 24
218.189.14.0/24 maxlen: 24
218.189.15.0/24 maxlen: 24
218.189.16.0/20 maxlen: 20
218.189.16.0/21 maxlen: 21
218.189.16.0/24 maxlen: 24
218.189.17.0/24 maxlen: 24
218.189.18.0/24 maxlen: 24
218.189.19.0/24 maxlen: 24
218.189.20.0/24 maxlen: 24
218.189.23.0/24 maxlen: 24
218.189.24.0/24 maxlen: 24
218.189.25.0/24 maxlen: 24
218.189.26.0/24 maxlen: 24
218.189.28.0/24 maxlen: 24
218.189.29.0/24 maxlen: 24
218.189.30.0/24 maxlen: 24
218.189.31.0/24 maxlen: 24
218.189.120.0/24 maxlen: 24
218.189.127.0/24 maxlen: 24
218.191.0.0/17 maxlen: 17
218.191.0.0/19 maxlen: 19
218.191.32.0/19 maxlen: 19
218.191.64.0/19 maxlen: 19
218.191.96.0/19 maxlen: 19
218.191.128.0/17 maxlen: 17
218.191.128.0/19 maxlen: 19
218.191.160.0/19 maxlen: 19
218.191.192.0/19 maxlen: 19
218.191.224.0/19 maxlen: 19
221.124.0.0/14 maxlen: 14
221.124.0.0/19 maxlen: 19
221.124.32.0/19 maxlen: 19
221.124.64.0/19 maxlen: 19
221.124.96.0/19 maxlen: 19
221.124.128.0/17 maxlen: 17
221.124.128.0/19 maxlen: 19
221.124.160.0/19 maxlen: 19
221.124.192.0/19 maxlen: 19
221.124.224.0/19 maxlen: 19
221.125.0.0/16 maxlen: 16
221.125.0.0/18 maxlen: 18
221.125.64.0/18 maxlen: 18
221.125.128.0/18 maxlen: 18
221.125.192.0/18 maxlen: 18
221.126.0.0/15 maxlen: 16
221.126.0.0/20 maxlen: 20
221.126.16.0/20 maxlen: 20
221.126.32.0/19 maxlen: 19
221.126.64.0/19 maxlen: 19
221.126.96.0/19 maxlen: 19
221.126.128.0/19 maxlen: 19
221.126.160.0/19 maxlen: 19
221.126.184.0/22 maxlen: 22
221.126.188.0/22 maxlen: 22
221.126.192.0/19 maxlen: 19
221.126.224.0/19 maxlen: 19
221.127.0.0/18 maxlen: 18
221.127.34.0/24 maxlen: 24
221.127.64.0/18 maxlen: 18
221.127.64.0/20 maxlen: 20
221.127.128.0/18 maxlen: 18
221.127.192.0/18 maxlen: 18
223.16.0.0/14 maxlen: 14
223.16.0.0/16 maxlen: 16
223.16.0.0/18 maxlen: 18
223.16.48.0/20 maxlen: 20
223.16.64.0/18 maxlen: 18
223.16.128.0/18 maxlen: 18
223.16.192.0/18 maxlen: 18
223.17.0.0/16 maxlen: 16
223.17.0.0/18 maxlen: 18
223.17.64.0/18 maxlen: 18
223.17.84.0/22 maxlen: 22
223.17.128.0/18 maxlen: 18
223.17.192.0/18 maxlen: 18
223.17.236.0/24 maxlen: 24
223.18.0.0/16 maxlen: 16
223.18.0.0/18 maxlen: 18
223.18.64.0/18 maxlen: 18
223.18.128.0/18 maxlen: 18
223.18.192.0/18 maxlen: 18
223.19.0.0/16 maxlen: 16
223.19.0.0/18 maxlen: 18
223.19.64.0/18 maxlen: 18
223.19.128.0/18 maxlen: 18
223.19.149.0/24 maxlen: 24
223.19.192.0/18 maxlen: 18
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C1323/084D88D495B711EABB824F1BC4F9AE02/QSplEc_tz-y1WQyWyMNh4v7USFc.crl
rsync://rpki.apnic.net/member_repository/A91C1323/084D88D495B711EABB824F1BC4F9AE02/QSplEc_tz-y1WQyWyMNh4v7USFc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QSplEc_tz-y1WQyWyMNh4v7USFc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 15 Apr 2025 20:06:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 24550 (0x5fe6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C1323
Validity
Not Before: Mar 23 07:30:50 2025 GMT
Not After : Jul 30 00:00:00 2025 GMT
Subject: CN=67dfb8aa-1601
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:cf:93:79:5f:ba:c5:17:ca:c8:e0:dc:07:cc:
4a:f5:4a:1a:04:48:a9:00:ce:8e:a3:4c:40:a9:f6:
28:db:fc:39:01:70:f7:2b:b9:68:4b:53:8a:b2:71:
e7:c9:5e:85:7e:17:a0:e2:37:03:db:95:ef:5f:89:
eb:87:d6:80:b3:42:aa:e1:df:8f:48:fd:fe:28:0b:
d9:ef:fd:15:8d:95:6b:4a:db:8b:05:6a:6b:ca:b4:
b4:f3:16:90:77:fc:2b:e0:b4:23:10:0c:bf:f3:70:
e9:61:97:c5:42:4e:d6:97:bc:8b:fb:9d:32:91:82:
c3:94:e2:40:90:af:6d:f5:23:9d:2f:24:ee:5a:2d:
92:4f:1c:77:98:47:4b:8e:74:bb:c9:29:57:45:d6:
96:b8:51:b8:e3:f2:ac:72:77:26:98:c8:fd:95:0e:
90:48:71:a5:6b:2f:c3:e7:26:41:64:c2:99:56:f8:
44:3f:e6:e2:bb:09:a2:95:fc:58:d3:ad:6b:4b:d1:
c8:98:8f:17:e1:e0:45:c8:c9:aa:91:23:bc:d2:7e:
21:96:a0:be:c1:a7:8f:32:58:da:b0:56:a1:26:b9:
f5:ac:04:91:02:5c:ee:77:49:f0:2c:45:0f:d2:2d:
34:5d:17:83:2a:99:d3:18:9e:92:a9:27:8d:50:0a:
ff:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:9D:4A:64:B7:1A:B0:6C:BD:D0:0E:D1:87:74:F5:04:40:E6:4E:38
X509v3 Authority Key Identifier:
keyid:41:2A:65:11:CF:ED:CF:EC:B5:59:0C:96:C8:C3:61:E2:FE:D4:48:57
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C1323/084D88D495B711EABB824F1BC4F9AE02/QSplEc_tz-y1WQyWyMNh4v7USFc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QSplEc_tz-y1WQyWyMNh4v7USFc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C1323/084D88D495B711EABB824F1BC4F9AE02/4E9D3CC61F5511EBAA049D14C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.10.12.0/22
113.252.0.0/14
118.143.34.0/24
118.143.54.0/24
118.143.198.0-118.143.201.255
118.143.203.0/24
118.143.206.0/24
118.143.210.0/23
118.143.214.0/24
118.143.224.0/20
118.143.245.0/24
118.143.251.0/24
203.184.128.0/17
210.0.128.0/17
218.188.104.0-218.188.109.255
218.189.5.0-218.189.31.255
218.189.120.0/24
218.189.127.0/24
218.191.0.0/16
221.124.0.0/14
223.16.0.0/14
Signature Algorithm: sha256WithRSAEncryption
a5:e3:bb:9b:63:1f:96:51:81:da:d6:6e:e5:8f:81:06:8a:e7:
4e:27:70:57:c1:a4:4f:70:7a:c1:9b:3c:62:5e:44:4a:04:8a:
4c:b4:34:ac:cc:af:cf:08:7b:ec:73:ac:11:23:05:f9:fb:05:
79:c7:42:33:9c:9c:6a:f8:4f:2d:94:5c:6e:58:fd:4b:2e:b4:
c0:31:22:68:3e:b0:34:94:98:5c:1a:f5:82:61:c3:cd:f4:fd:
8d:cf:9f:95:5f:c8:33:40:ab:0b:62:18:58:90:9a:bd:a2:3a:
36:5a:a2:54:0f:cb:6d:af:4f:5e:2d:26:0d:e7:4c:50:48:16:
62:8d:95:57:64:10:45:fd:5c:83:32:1d:49:c0:98:17:55:e8:
46:93:19:f0:0b:02:85:b7:45:ad:4a:da:f8:8a:1e:0f:28:20:
52:7c:42:85:46:d6:00:db:d9:31:89:fa:11:93:3c:2c:74:23:
ed:30:bb:62:4e:f5:8c:00:ba:01:b4:99:01:f4:c2:75:43:cf:
d0:cc:93:c4:51:08:b5:a8:88:6d:22:91:f0:15:33:a6:a3:94:
7b:8f:24:f1:c9:78:d7:3e:f6:a4:c5:cc:a1:32:b2:4a:60:b3:
d4:1b:bf:20:bb:15:b2:63:0d:a2:e9:40:a7:b0:86:3c:f9:d0:
1e:cc:ee:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 08:45:05 2025 by rpki-client