Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91EAE3D/97B6E0CE75DE11E8B704A246C4F9AE02/BEBA6BD452E811F0B4119D49C4F9AE02.roa
File: BEBA6BD452E811F0B4119D49C4F9AE02.roa (raw, json)
Hash identifier: bj31AKsxiqWH5iLxyH6akLeGG2k/+OBUaMQXAkduhVU=
Subject key identifier: 3F:9B:DE:43:D7:6C:CB:F6:87:49:98:EA:50:B9:FA:91:B7:98:CE:CF
Certificate issuer: /CN=A91EAE3D/serialNumber=C7269B124C420C55E29FB51D3C1B0D9D476CBD00
Certificate serial: 18FB
Authority key identifier: C7:26:9B:12:4C:42:0C:55:E2:9F:B5:1D:3C:1B:0D:9D:47:6C:BD:00
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xyabEkxCDFXin7UdPBsNnUdsvQA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91EAE3D/97B6E0CE75DE11E8B704A246C4F9AE02/BEBA6BD452E811F0B4119D49C4F9AE02.roa
Signing time: Sat 12 Jul 2025 02:09:16 +0000
ROA not before: Sat 12 Jul 2025 02:09:16 +0000
ROA not after: Fri 01 May 2026 00:00:00 +0000
asID: 4826
IP address blocks: 14.137.106.0/24 maxlen: 24
27.106.200.0/22 maxlen: 22
43.241.188.0/22 maxlen: 22
43.252.252.0/22 maxlen: 22
49.255.0.0/16 maxlen: 16
49.255.233.0/24 maxlen: 24
49.255.255.0/24 maxlen: 24
103.37.120.0/24 maxlen: 24
103.233.148.0/22 maxlen: 22
103.255.16.0/22 maxlen: 22
110.5.116.0/22 maxlen: 22
112.213.192.0/19 maxlen: 19
112.213.224.0/19 maxlen: 19
114.31.192.0/20 maxlen: 20
116.212.192.0/18 maxlen: 18
116.212.204.0/24 maxlen: 24
116.212.230.0/23 maxlen: 24
116.212.253.0/24 maxlen: 24
119.161.64.0/20 maxlen: 20
119.161.80.0/20 maxlen: 20
121.54.128.0/19 maxlen: 19
121.54.128.0/20 maxlen: 20
121.54.136.0/24 maxlen: 24
121.54.145.0/24 maxlen: 24
121.79.0.0/17 maxlen: 17
123.103.192.0/19 maxlen: 19
124.254.64.0/18 maxlen: 18
124.254.64.0/24 maxlen: 24
124.254.95.0/24 maxlen: 24
124.254.96.0/24 maxlen: 24
175.45.64.0/18 maxlen: 18
175.45.73.0/24 maxlen: 24
175.45.78.0/24 maxlen: 24
175.45.82.0/24 maxlen: 24
175.45.83.0/24 maxlen: 24
175.45.85.0/24 maxlen: 24
175.45.92.0/24 maxlen: 24
175.45.94.0/23 maxlen: 23
175.45.99.0/24 maxlen: 24
175.45.100.0/24 maxlen: 24
175.45.101.0/24 maxlen: 24
175.45.105.0/24 maxlen: 24
175.45.111.0/24 maxlen: 24
175.45.125.0/24 maxlen: 24
180.148.64.0/19 maxlen: 19
180.148.76.0/24 maxlen: 24
180.148.77.0/24 maxlen: 24
180.148.83.0/24 maxlen: 24
180.148.84.0/24 maxlen: 24
180.148.95.0/24 maxlen: 24
202.62.138.0/24 maxlen: 24
202.62.139.0/24 maxlen: 24
202.62.141.0/24 maxlen: 24
202.62.142.0/24 maxlen: 24
202.62.147.0/24 maxlen: 24
202.62.152.0/24 maxlen: 24
202.62.153.0/24 maxlen: 24
202.62.154.0/24 maxlen: 24
202.62.155.0/24 maxlen: 24
202.80.176.0/20 maxlen: 20
202.89.160.0/19 maxlen: 19
202.137.96.0/20 maxlen: 20
202.137.192.0/21 maxlen: 21
202.174.224.0/19 maxlen: 19
202.189.64.0/20 maxlen: 20
202.189.72.0/24 maxlen: 24
202.189.73.0/24 maxlen: 24
203.12.251.0/24 maxlen: 24
203.18.212.0/23 maxlen: 23
203.28.186.0/24 maxlen: 24
203.29.177.0/24 maxlen: 24
203.55.11.0/24 maxlen: 24
203.55.250.0/24 maxlen: 24
203.89.64.0/19 maxlen: 19
203.89.80.0/24 maxlen: 24
203.89.92.0/24 maxlen: 24
203.92.28.0/22 maxlen: 22
203.129.128.0/19 maxlen: 19
203.153.224.0/19 maxlen: 19
203.153.226.0/24 maxlen: 24
203.161.64.0/18 maxlen: 18
203.188.128.0/19 maxlen: 19
210.50.198.0/24 maxlen: 24
211.26.193.0/24 maxlen: 24
218.100.80.0/22 maxlen: 22
223.27.96.0/21 maxlen: 21
2402:7800::/32 maxlen: 32
2402:7800:ff00::/40 maxlen: 40
2402:7800:ff00::/48 maxlen: 48
2402:7800:ff01::/48 maxlen: 48
2402:7800:ff20::/48 maxlen: 48
2402:7800:ff40::/44 maxlen: 44
2402:7800:ffe0::/48 maxlen: 48
2403:d600::/32 maxlen: 32
2403:fc00:300::/40 maxlen: 40
2404:b000::/32 maxlen: 32
2404:bc00::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91EAE3D/97B6E0CE75DE11E8B704A246C4F9AE02/xyabEkxCDFXin7UdPBsNnUdsvQA.crl
rsync://rpki.apnic.net/member_repository/A91EAE3D/97B6E0CE75DE11E8B704A246C4F9AE02/xyabEkxCDFXin7UdPBsNnUdsvQA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xyabEkxCDFXin7UdPBsNnUdsvQA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 27 Jul 2025 14:50:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6395 (0x18fb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91EAE3D, serialNumber=C7269B124C420C55E29FB51D3C1B0D9D476CBD00
Validity
Not Before: Jul 12 02:09:16 2025 GMT
Not After : May 1 00:00:00 2026 GMT
Subject: CN=6871c3cc-9317
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:19:c1:49:ea:df:19:67:a6:e8:9f:1e:41:1d:
c8:1e:12:6c:4e:44:b7:ff:ca:fe:d0:97:2a:11:f4:
e3:b1:01:59:d6:c7:7b:f9:b6:f9:b3:37:97:1e:1a:
10:8e:32:39:4f:45:df:69:11:35:40:a5:42:09:ef:
ec:33:97:e0:aa:19:b2:63:da:84:9d:13:41:67:c9:
ff:ba:9c:ee:3a:5e:8a:71:dc:d7:2e:84:d9:83:80:
88:f5:43:02:ca:b3:85:13:8e:54:3e:75:ea:6b:de:
5c:b8:6f:98:08:66:cc:37:e3:b7:5b:b4:bf:82:f0:
32:48:eb:11:4d:3f:b2:c3:14:62:06:f0:fa:2d:a9:
82:29:9e:30:0a:03:de:2f:9f:0a:b1:80:4d:da:64:
27:64:43:78:22:6e:67:00:fa:64:46:c1:2f:3f:a1:
4b:26:e3:f8:2f:de:87:cf:09:a3:f7:4f:85:bf:dc:
d4:1a:07:bb:38:b6:68:26:f0:68:bb:7c:8b:e7:58:
83:44:46:c2:5c:aa:1d:87:90:25:d3:f5:ea:86:37:
87:0e:17:60:1c:f8:b3:23:07:f7:57:39:23:39:96:
a3:62:0a:ae:2b:43:7a:57:f0:c9:e4:56:56:47:7a:
af:ee:d6:98:84:3f:8b:0c:0c:ee:5f:4a:2d:c7:ec:
8b:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:9B:DE:43:D7:6C:CB:F6:87:49:98:EA:50:B9:FA:91:B7:98:CE:CF
X509v3 Authority Key Identifier:
keyid:C7:26:9B:12:4C:42:0C:55:E2:9F:B5:1D:3C:1B:0D:9D:47:6C:BD:00
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91EAE3D/97B6E0CE75DE11E8B704A246C4F9AE02/xyabEkxCDFXin7UdPBsNnUdsvQA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xyabEkxCDFXin7UdPBsNnUdsvQA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EAE3D/97B6E0CE75DE11E8B704A246C4F9AE02/BEBA6BD452E811F0B4119D49C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
14.137.106.0/24
27.106.200.0/22
43.241.188.0/22
43.252.252.0/22
49.255.0.0/16
103.37.120.0/24
103.233.148.0/22
103.255.16.0/22
110.5.116.0/22
112.213.192.0/18
114.31.192.0/20
116.212.192.0/18
119.161.64.0/19
121.54.128.0/19
121.79.0.0/17
123.103.192.0/19
124.254.64.0/18
175.45.64.0/18
180.148.64.0/19
202.62.138.0/23
202.62.141.0-202.62.142.255
202.62.147.0/24
202.62.152.0/22
202.80.176.0/20
202.89.160.0/19
202.137.96.0/20
202.137.192.0/21
202.174.224.0/19
202.189.64.0/20
203.12.251.0/24
203.18.212.0/23
203.28.186.0/24
203.29.177.0/24
203.55.11.0/24
203.55.250.0/24
203.89.64.0/19
203.92.28.0/22
203.129.128.0/19
203.153.224.0/19
203.161.64.0/18
203.188.128.0/19
210.50.198.0/24
211.26.193.0/24
218.100.80.0/22
223.27.96.0/21
IPv6:
2402:7800::/32
2403:d600::/32
2403:fc00:300::/40
2404:b000::/32
2404:bc00::/32
Signature Algorithm: sha256WithRSAEncryption
0f:ab:3a:4a:0e:fe:1f:a3:96:b2:e3:66:24:06:1b:b7:35:b0:
06:6a:36:20:99:68:ba:07:7c:5f:83:26:c6:2d:ed:20:6c:d7:
1f:c5:15:8f:7e:39:67:b4:52:4d:a0:6c:3b:0f:4c:80:a3:c8:
c4:59:97:32:f1:64:6f:6c:b0:69:a2:ab:60:34:cf:c9:3c:0b:
f9:4a:55:dc:62:1c:b1:a0:2b:c6:21:09:81:a5:16:61:e3:15:
89:32:81:5b:b9:c1:bc:84:80:70:45:2a:ea:52:7b:55:4c:8e:
08:34:c6:69:5f:46:64:b9:1b:14:d8:cd:34:fe:51:c3:45:fc:
f3:80:33:2c:cc:b6:58:45:22:28:d0:d1:05:fd:9a:d2:f8:33:
11:f6:b4:3e:49:63:55:95:03:6b:6a:f7:05:11:8c:32:a0:fc:
14:e6:0e:d8:23:b3:2c:0c:1e:16:70:2c:9d:4b:1d:f3:1f:5c:
1f:ac:63:f0:8f:fa:73:c3:67:a9:31:33:57:ff:bd:61:1e:cd:
92:e8:9a:20:ef:ff:da:32:b8:48:f3:d3:d7:ad:7c:42:93:d5:
e4:6b:3d:15:7f:ec:42:b3:b5:ec:28:b5:16:c9:6a:1f:fe:47:
df:9b:14:87:74:34:45:60:a6:b0:b9:b7:27:a7:77:86:df:ee:
97:9d:cb:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 19:05:51 2025 by rpki-client