Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A911B5D7/25872BBE03B411E7B811AA14C4F9AE02/C177A6728D2011EF97C11D3CC4F9AE02.roa
File: C177A6728D2011EF97C11D3CC4F9AE02.roa (raw, json)
Hash identifier: DzfAqd947/aw0GqhghbdVi3PbAms0DDMSaZSwYpp3rk=
Subject key identifier: AF:48:28:6A:05:9B:A4:A0:CF:97:53:F5:55:21:00:95:23:4A:99:8C
Certificate issuer: /CN=A911B5D7/serialNumber=41FE1D4135AB2D67623E76083398468AD4FAA1DC
Certificate serial: 1BF1
Authority key identifier: 41:FE:1D:41:35:AB:2D:67:62:3E:76:08:33:98:46:8A:D4:FA:A1:DC
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Qf4dQTWrLWdiPnYIM5hGitT6odw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911B5D7/25872BBE03B411E7B811AA14C4F9AE02/C177A6728D2011EF97C11D3CC4F9AE02.roa
Signing time: Tue 20 May 2025 16:36:17 +0000
ROA not before: Tue 20 May 2025 16:36:17 +0000
ROA not after: Thu 30 Jul 2026 00:00:00 +0000
asID: 38713
IP address blocks: 103.25.136.0/22 maxlen: 22
103.25.136.0/24 maxlen: 24
103.25.137.0/24 maxlen: 24
103.25.138.0/24 maxlen: 24
103.25.139.0/24 maxlen: 24
103.205.176.0/24 maxlen: 24
103.205.177.0/24 maxlen: 24
103.205.178.0/24 maxlen: 24
103.205.179.0/24 maxlen: 24
116.206.140.0/24 maxlen: 24
116.206.141.0/24 maxlen: 24
116.206.142.0/24 maxlen: 24
116.206.143.0/24 maxlen: 24
202.143.112.0/24 maxlen: 24
202.143.113.0/24 maxlen: 24
202.143.114.0/24 maxlen: 24
202.143.115.0/24 maxlen: 24
202.143.116.0/24 maxlen: 24
202.143.117.0/24 maxlen: 24
202.143.118.0/24 maxlen: 24
202.143.119.0/24 maxlen: 24
202.143.120.0/24 maxlen: 24
202.143.121.0/24 maxlen: 24
202.143.122.0/24 maxlen: 24
202.143.123.0/24 maxlen: 24
202.143.124.0/24 maxlen: 24
202.143.125.0/24 maxlen: 24
202.143.126.0/24 maxlen: 24
202.143.127.0/24 maxlen: 24
2406:1300::/32 maxlen: 32
2406:1300:9000::/40 maxlen: 40
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A911B5D7/25872BBE03B411E7B811AA14C4F9AE02/Qf4dQTWrLWdiPnYIM5hGitT6odw.crl
rsync://rpki.apnic.net/member_repository/A911B5D7/25872BBE03B411E7B811AA14C4F9AE02/Qf4dQTWrLWdiPnYIM5hGitT6odw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Qf4dQTWrLWdiPnYIM5hGitT6odw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Jun 2025 16:26:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7153 (0x1bf1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911B5D7, serialNumber=41FE1D4135AB2D67623E76083398468AD4FAA1DC
Validity
Not Before: May 20 16:36:17 2025 GMT
Not After : Jul 30 00:00:00 2026 GMT
Subject: CN=682caf81-22d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:04:62:e3:18:97:36:d3:a5:44:77:b9:ad:15:
b8:70:b0:cc:84:18:9a:ca:8e:f8:94:a3:4b:fe:7e:
61:91:72:ba:1a:92:72:0c:60:46:d6:98:be:2d:fb:
2e:fb:1d:98:ec:c3:3d:b5:e9:d5:11:19:a2:ee:ca:
10:50:c6:64:8d:ae:ae:a5:16:51:91:c4:bf:6e:a8:
4e:83:8d:64:7a:11:0a:77:e4:3a:51:c6:8b:37:05:
75:98:72:0c:3d:01:89:ba:98:f9:cd:b2:52:57:01:
34:81:b1:6a:68:a2:c9:69:6a:62:86:11:4a:3a:0a:
b9:10:2e:45:b7:f9:13:82:6a:60:1c:e7:25:70:a1:
3f:ca:14:cb:bc:4c:bd:55:b4:90:de:00:26:f8:86:
3a:ed:60:33:b6:e1:46:4d:56:33:de:72:38:e0:85:
50:a5:dd:a3:e6:53:12:9d:3b:8d:cf:65:42:d4:3a:
c0:10:e7:bd:9f:02:e6:0d:9e:3a:f5:d7:2f:18:1c:
81:3a:05:f6:55:68:03:84:ff:d0:8b:21:07:45:83:
b3:d1:08:29:bb:58:2d:cf:0d:59:14:38:7c:0b:10:
0a:fd:ab:4d:8c:67:35:d6:70:53:54:fb:7a:41:66:
7a:31:80:29:b5:e9:67:9e:60:a8:24:4f:96:e6:cf:
00:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:48:28:6A:05:9B:A4:A0:CF:97:53:F5:55:21:00:95:23:4A:99:8C
X509v3 Authority Key Identifier:
keyid:41:FE:1D:41:35:AB:2D:67:62:3E:76:08:33:98:46:8A:D4:FA:A1:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911B5D7/25872BBE03B411E7B811AA14C4F9AE02/Qf4dQTWrLWdiPnYIM5hGitT6odw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Qf4dQTWrLWdiPnYIM5hGitT6odw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911B5D7/25872BBE03B411E7B811AA14C4F9AE02/C177A6728D2011EF97C11D3CC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.25.136.0/22
103.205.176.0/22
116.206.140.0/22
202.143.112.0/20
IPv6:
2406:1300::/32
Signature Algorithm: sha256WithRSAEncryption
43:f2:a3:90:00:f7:15:17:cd:c5:72:0e:a9:c8:39:5a:fa:e9:
ef:16:fc:09:b7:6f:46:f5:0d:56:69:5d:54:c6:da:a5:ee:7a:
b9:34:73:8d:51:c1:76:3a:23:02:d6:35:aa:0d:31:a4:8c:92:
e2:1c:25:af:a9:b4:6f:44:52:7d:d2:d4:b2:a0:04:ae:14:07:
42:20:a6:82:39:d0:cc:5a:1e:f1:d4:f5:10:64:e3:2e:d9:39:
81:91:84:35:a3:44:2a:eb:b8:01:b3:ad:5c:26:35:a5:d0:bc:
9c:6b:89:47:f3:f9:14:cb:7d:ac:72:01:5b:0d:49:45:89:4f:
13:91:6e:b6:a4:54:78:30:26:c6:77:8f:d8:d7:ca:89:a7:b1:
55:7b:8b:e5:0d:79:d0:4f:e6:0f:2c:6c:59:4e:54:c7:f4:b0:
6a:f6:52:03:7f:3a:5c:0c:08:5f:20:55:b8:4d:31:3e:bd:1a:
e1:b2:7a:05:66:62:fb:d9:25:2f:f3:64:c0:f2:4e:1f:4e:46:
c7:cf:b3:ae:ee:cf:8e:19:86:d6:fc:4f:70:f9:5e:0f:a1:4d:
1b:54:4e:82:ae:08:1e:60:cd:04:fe:3b:00:0c:43:fa:8b:a9:
56:d7:4a:ef:9f:8c:5e:73:25:e3:91:2f:7c:34:10:09:cd:41:
a5:8c:e4:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 3 23:46:37 2025 by rpki-client