Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A912176D/93D17CD006A011EBB4090859C4F9AE02/EBA9F66C895911F0B21B8C5EC4F9AE02.roa
File: EBA9F66C895911F0B21B8C5EC4F9AE02.roa (raw, json)
Hash identifier: 632OLcaH2Ce4tGgKF5z6q15VrLS/joH9Wyhj5vpSVok=
Subject key identifier: BA:40:F0:EA:CE:1E:31:97:A2:41:20:56:5C:41:3E:71:4A:59:23:75
Certificate issuer: /CN=A912176D/serialNumber=96F42E19F69D596A0318921590A17DD53233E595
Certificate serial: 084B
Authority key identifier: 96:F4:2E:19:F6:9D:59:6A:03:18:92:15:90:A1:7D:D5:32:33:E5:95
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lvQuGfadWWoDGJIVkKF91TIz5ZU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912176D/93D17CD006A011EBB4090859C4F9AE02/EBA9F66C895911F0B21B8C5EC4F9AE02.roa
Signing time: Thu 04 Sep 2025 21:31:59 +0000
ROA not before: Thu 04 Sep 2025 21:31:59 +0000
ROA not after: Tue 01 Dec 2026 00:00:00 +0000
asID: 55720
IP address blocks: 14.192.67.0/24 maxlen: 24
14.192.68.0/24 maxlen: 24
14.192.69.0/24 maxlen: 24
43.225.36.0/24 maxlen: 24
43.225.37.0/24 maxlen: 24
43.225.39.0/24 maxlen: 24
43.231.6.0/24 maxlen: 24
43.231.7.0/24 maxlen: 24
45.116.160.0/24 maxlen: 24
45.116.161.0/24 maxlen: 24
45.116.162.0/24 maxlen: 24
45.116.163.0/24 maxlen: 24
45.120.52.0/24 maxlen: 24
45.120.53.0/24 maxlen: 24
45.120.54.0/24 maxlen: 24
45.120.55.0/24 maxlen: 24
61.4.97.0/24 maxlen: 24
61.4.98.0/24 maxlen: 24
61.4.99.0/24 maxlen: 24
61.4.100.0/22 maxlen: 24
61.4.104.0/22 maxlen: 24
61.4.109.0/24 maxlen: 24
61.4.110.0/24 maxlen: 24
103.4.28.0/24 maxlen: 24
103.4.29.0/24 maxlen: 24
103.4.30.0/24 maxlen: 24
103.4.31.0/24 maxlen: 24
103.15.104.0/24 maxlen: 24
103.15.105.0/24 maxlen: 24
103.15.106.0/24 maxlen: 24
103.15.107.0/24 maxlen: 24
103.21.88.0/24 maxlen: 24
103.21.89.0/24 maxlen: 24
103.21.90.0/24 maxlen: 24
103.21.91.0/24 maxlen: 24
103.23.46.0/24 maxlen: 24
103.23.47.0/24 maxlen: 24
103.71.176.0/24 maxlen: 24
103.71.177.0/24 maxlen: 24
103.71.178.0/24 maxlen: 24
103.71.179.0/24 maxlen: 24
103.243.212.0/24 maxlen: 24
103.243.213.0/24 maxlen: 24
103.243.214.0/24 maxlen: 24
103.243.215.0/24 maxlen: 24
103.246.112.0/24 maxlen: 24
103.246.113.0/24 maxlen: 24
103.246.114.0/24 maxlen: 24
103.246.115.0/24 maxlen: 24
118.107.212.0/24 maxlen: 24
118.107.213.0/24 maxlen: 24
118.107.214.0/24 maxlen: 24
118.107.215.0/24 maxlen: 24
118.107.216.0/24 maxlen: 24
118.107.217.0/24 maxlen: 24
118.107.218.0/24 maxlen: 24
118.107.219.0/24 maxlen: 24
118.107.220.0/24 maxlen: 24
118.107.221.0/24 maxlen: 24
118.107.222.0/24 maxlen: 24
118.107.223.0/24 maxlen: 24
150.107.76.0/24 maxlen: 24
150.107.77.0/24 maxlen: 24
150.107.78.0/24 maxlen: 24
150.107.79.0/24 maxlen: 24
202.9.36.0/24 maxlen: 24
202.9.37.0/24 maxlen: 24
202.9.38.0/24 maxlen: 24
202.9.39.0/24 maxlen: 24
202.73.12.0/24 maxlen: 24
202.73.13.0/24 maxlen: 24
202.73.14.0/24 maxlen: 24
202.73.15.0/24 maxlen: 24
202.87.220.0/24 maxlen: 24
202.87.221.0/24 maxlen: 24
202.87.222.0/24 maxlen: 24
202.87.223.0/24 maxlen: 24
223.25.240.0/24 maxlen: 24
223.25.241.0/24 maxlen: 24
223.25.242.0/24 maxlen: 24
223.25.243.0/24 maxlen: 24
223.25.244.0/24 maxlen: 24
223.25.245.0/24 maxlen: 24
223.25.246.0/24 maxlen: 24
223.25.247.0/24 maxlen: 24
2402:9500::/32 maxlen: 32
2402:9500::/48 maxlen: 48
2402:9500:a00::/48 maxlen: 48
2402:9500:b00::/48 maxlen: 48
2402:9500:c00::/48 maxlen: 48
2402:9500:d00::/48 maxlen: 48
2402:9500:1000::/48 maxlen: 48
2402:9500:2000::/48 maxlen: 48
2402:9500:3000::/48 maxlen: 48
2402:9500:4000::/48 maxlen: 48
2402:9500:5000::/48 maxlen: 48
2402:9500:6000::/48 maxlen: 48
2402:9500:7000::/48 maxlen: 48
2402:9500:8000::/48 maxlen: 48
2402:9500:9000::/48 maxlen: 48
2402:9500:e000::/48 maxlen: 48
2402:9500:f000::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A912176D/93D17CD006A011EBB4090859C4F9AE02/lvQuGfadWWoDGJIVkKF91TIz5ZU.crl
rsync://rpki.apnic.net/member_repository/A912176D/93D17CD006A011EBB4090859C4F9AE02/lvQuGfadWWoDGJIVkKF91TIz5ZU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lvQuGfadWWoDGJIVkKF91TIz5ZU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 15 Sep 2025 21:10:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2123 (0x84b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912176D, serialNumber=96F42E19F69D596A0318921590A17DD53233E595
Validity
Not Before: Sep 4 21:31:59 2025 GMT
Not After : Dec 1 00:00:00 2026 GMT
Subject: CN=68ba054e-23ce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:13:92:2d:e6:92:78:47:29:bc:67:f1:77:d9:
36:22:68:02:34:bc:31:e9:dc:05:71:ac:06:93:c7:
6b:f3:65:5f:1a:2c:61:20:7f:94:72:d4:c8:0d:84:
1d:92:2b:16:b2:cc:ee:d5:9d:83:8f:b1:7c:8f:9e:
83:d7:04:a9:b9:5c:a4:3e:5e:84:2a:c2:2a:5f:72:
48:71:9e:87:80:54:68:0d:47:14:36:2c:72:56:1e:
cb:7b:c2:a7:1b:b6:71:30:10:92:2d:66:79:05:d0:
57:1d:c9:db:d7:da:61:11:2c:87:4f:e9:3f:42:4b:
38:6e:6c:c6:1f:50:79:86:13:7e:67:8f:46:54:e3:
a1:4e:0b:d8:d0:44:52:17:12:7d:61:ec:b9:a5:a0:
02:25:5e:c2:68:c4:82:38:a4:a8:07:eb:37:2b:bf:
67:01:d1:b1:02:6c:93:b4:98:38:7b:41:38:88:84:
15:d8:f6:89:43:05:98:a5:c4:f2:85:97:93:09:a6:
5c:46:03:43:63:0e:b1:61:7a:96:72:ff:47:4a:13:
da:20:e9:ee:91:b6:42:53:d9:42:89:25:12:b2:23:
d7:04:50:6a:45:2a:60:e0:4b:fa:cf:cb:cd:7b:45:
2d:91:ef:7c:03:92:2b:bc:f0:b3:15:05:89:bb:2e:
c8:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:40:F0:EA:CE:1E:31:97:A2:41:20:56:5C:41:3E:71:4A:59:23:75
X509v3 Authority Key Identifier:
keyid:96:F4:2E:19:F6:9D:59:6A:03:18:92:15:90:A1:7D:D5:32:33:E5:95
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912176D/93D17CD006A011EBB4090859C4F9AE02/lvQuGfadWWoDGJIVkKF91TIz5ZU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lvQuGfadWWoDGJIVkKF91TIz5ZU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912176D/93D17CD006A011EBB4090859C4F9AE02/EBA9F66C895911F0B21B8C5EC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
14.192.67.0-14.192.69.255
43.225.36.0/23
43.225.39.0/24
43.231.6.0/23
45.116.160.0/22
45.120.52.0/22
61.4.97.0-61.4.107.255
61.4.109.0-61.4.110.255
103.4.28.0/22
103.15.104.0/22
103.21.88.0/22
103.23.46.0/23
103.71.176.0/22
103.243.212.0/22
103.246.112.0/22
118.107.212.0-118.107.223.255
150.107.76.0/22
202.9.36.0/22
202.73.12.0/22
202.87.220.0/22
223.25.240.0/21
IPv6:
2402:9500::/32
Signature Algorithm: sha256WithRSAEncryption
ba:b4:cb:36:11:ac:03:f6:c2:a3:4e:55:38:f3:32:0d:e1:0b:
f1:41:64:0e:ec:8b:56:1c:93:d9:6b:d3:7c:08:27:d8:1c:fa:
7e:22:01:bd:4a:96:a8:ac:da:81:84:77:0a:8e:bc:b2:b2:9d:
0c:46:bd:f2:3e:74:ae:c8:20:b9:de:b1:a2:47:a7:37:7e:52:
40:57:24:81:18:16:12:8f:26:73:17:d2:cd:be:28:91:86:a8:
43:9f:48:33:56:8e:69:d9:cd:bf:2e:16:da:7c:7a:9f:4f:ce:
fa:17:cd:b8:58:a6:1c:bf:3c:d7:29:64:c8:83:e7:8b:77:da:
63:79:64:af:f2:1f:f6:9b:63:9e:e4:2d:7f:dc:8b:ae:c2:d7:
13:3a:17:c3:c3:8b:84:01:2b:a7:9a:e2:36:c9:24:d9:d4:fb:
11:43:83:42:bf:11:b1:49:08:f6:2d:c3:35:a4:fe:34:ee:33:
69:8c:3d:ce:81:47:eb:35:db:a9:e3:fe:71:7c:a0:a9:64:8a:
bd:77:9e:2a:b0:e3:52:f4:c5:85:43:22:ec:65:e6:19:51:b3:
52:83:6c:5d:6c:c0:16:0a:f8:57:97:0f:ec:38:b2:41:15:41:
83:c9:27:dd:a2:12:fa:11:c1:13:ef:3b:8c:c3:b9:6f:3e:31:
f8:d0:94:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 9 00:40:25 2025 by rpki-client