Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9132B1E/8936CC04883211EA84861B70C4F9AE02/C09E796C50EB11EB86E24A3DC4F9AE02.roa
File: C09E796C50EB11EB86E24A3DC4F9AE02.roa (raw, json)
Hash identifier: UQMFUiM1jX1o70DBy2Eb/ReLKfgNQRjP4wwuSyVg/Io=
Subject key identifier: 59:30:33:E1:9B:81:B6:EE:F2:D7:7A:66:24:8A:ED:E5:4A:53:90:F4
Certificate issuer: /CN=A9132B1E/serialNumber=ABD43548659CBB276EF8D35B8212F838E8CEB75F
Certificate serial: 0A84
Authority key identifier: AB:D4:35:48:65:9C:BB:27:6E:F8:D3:5B:82:12:F8:38:E8:CE:B7:5F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q9Q1SGWcuydu-NNbghL4OOjOt18.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9132B1E/8936CC04883211EA84861B70C4F9AE02/C09E796C50EB11EB86E24A3DC4F9AE02.roa
Signing time: Fri 02 May 2025 20:30:44 +0000
ROA not before: Fri 02 May 2025 20:30:44 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 2706
IP address blocks: 116.92.0.0/24 maxlen: 24
116.92.2.0/24 maxlen: 24
116.92.10.0/24 maxlen: 24
116.92.14.0/24 maxlen: 24
116.92.128.0/23 maxlen: 24
116.92.130.0/24 maxlen: 24
116.92.133.0/24 maxlen: 24
116.92.184.0/21 maxlen: 24
116.92.192.0/19 maxlen: 24
116.92.224.0/20 maxlen: 24
116.92.240.0/21 maxlen: 24
202.14.67.0/24 maxlen: 24
202.14.68.0/24 maxlen: 24
202.64.0.0/20 maxlen: 24
202.64.16.0/21 maxlen: 24
202.64.24.0/24 maxlen: 24
202.64.26.0/23 maxlen: 24
202.64.28.0/22 maxlen: 24
202.64.32.0/20 maxlen: 24
202.64.48.0/21 maxlen: 24
202.64.57.0/24 maxlen: 24
202.64.58.0/23 maxlen: 24
202.64.60.0/23 maxlen: 24
202.64.62.0/24 maxlen: 24
202.64.66.0/23 maxlen: 24
202.64.68.0/22 maxlen: 24
202.64.72.0/21 maxlen: 24
202.64.80.0/22 maxlen: 24
202.64.84.0/23 maxlen: 24
202.64.86.0/24 maxlen: 24
202.64.88.0/21 maxlen: 24
202.64.96.0/22 maxlen: 24
202.64.101.0/24 maxlen: 24
202.64.104.0/22 maxlen: 24
202.64.108.0/24 maxlen: 24
202.64.112.0/21 maxlen: 24
202.64.120.0/24 maxlen: 24
202.64.122.0/24 maxlen: 24
202.64.124.0/22 maxlen: 24
202.64.129.0/24 maxlen: 24
202.64.130.0/24 maxlen: 24
202.64.132.0/22 maxlen: 24
202.64.136.0/24 maxlen: 24
202.64.138.0/24 maxlen: 24
202.64.140.0/22 maxlen: 24
202.64.144.0/21 maxlen: 24
202.64.152.0/22 maxlen: 24
202.64.157.0/24 maxlen: 24
202.64.158.0/23 maxlen: 24
202.64.160.0/21 maxlen: 24
202.64.168.0/22 maxlen: 24
202.64.172.0/23 maxlen: 24
202.64.175.0/24 maxlen: 24
202.64.176.0/23 maxlen: 24
202.64.178.0/24 maxlen: 24
202.64.180.0/22 maxlen: 24
202.64.184.0/21 maxlen: 24
202.64.193.0/24 maxlen: 24
202.64.194.0/23 maxlen: 24
202.64.196.0/22 maxlen: 24
202.64.200.0/21 maxlen: 24
202.64.208.0/23 maxlen: 24
202.64.211.0/24 maxlen: 24
202.64.212.0/22 maxlen: 24
202.64.216.0/21 maxlen: 24
202.64.224.0/21 maxlen: 24
202.64.232.0/23 maxlen: 24
202.64.235.0/24 maxlen: 24
202.64.236.0/22 maxlen: 24
202.64.241.0/24 maxlen: 24
202.64.242.0/23 maxlen: 24
202.64.244.0/22 maxlen: 24
202.64.248.0/21 maxlen: 24
210.17.128.0/19 maxlen: 24
210.17.160.0/24 maxlen: 24
210.17.162.0/23 maxlen: 24
210.17.164.0/22 maxlen: 24
210.17.168.0/21 maxlen: 24
210.17.176.0/20 maxlen: 24
210.17.192.0/20 maxlen: 24
210.17.208.0/21 maxlen: 24
210.17.216.0/22 maxlen: 24
210.17.220.0/23 maxlen: 24
210.17.223.0/24 maxlen: 24
210.17.224.0/19 maxlen: 24
220.232.128.0/22 maxlen: 24
220.232.136.0/21 maxlen: 24
220.232.144.0/21 maxlen: 24
220.232.152.0/22 maxlen: 24
220.232.160.0/23 maxlen: 24
220.232.166.0/23 maxlen: 24
220.232.168.0/21 maxlen: 24
220.232.176.0/22 maxlen: 24
220.232.184.0/21 maxlen: 24
220.232.192.0/21 maxlen: 24
220.232.200.0/22 maxlen: 24
220.232.207.0/24 maxlen: 24
220.232.208.0/23 maxlen: 24
220.232.210.0/24 maxlen: 24
220.232.212.0/22 maxlen: 24
220.232.216.0/21 maxlen: 24
220.232.224.0/20 maxlen: 24
220.232.240.0/23 maxlen: 24
220.232.244.0/22 maxlen: 24
220.232.248.0/22 maxlen: 24
220.232.252.0/23 maxlen: 24
220.232.255.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9132B1E/8936CC04883211EA84861B70C4F9AE02/q9Q1SGWcuydu-NNbghL4OOjOt18.crl
rsync://rpki.apnic.net/member_repository/A9132B1E/8936CC04883211EA84861B70C4F9AE02/q9Q1SGWcuydu-NNbghL4OOjOt18.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q9Q1SGWcuydu-NNbghL4OOjOt18.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 07 Jun 2025 20:08:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2692 (0xa84)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9132B1E, serialNumber=ABD43548659CBB276EF8D35B8212F838E8CEB75F
Validity
Not Before: May 2 20:30:44 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=68152b74-5486
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:6f:5b:bc:57:b0:05:cc:12:a0:cb:9c:e3:48:
92:35:71:f3:45:ed:dd:79:c8:d5:45:a0:39:b4:46:
cf:81:19:44:f4:d3:e0:a2:cc:79:88:81:92:e3:8a:
aa:d9:76:33:83:90:c6:3e:d3:53:a6:00:b4:47:ba:
1d:0a:c4:49:88:8e:5c:42:36:16:4f:46:eb:7b:a7:
e1:81:37:51:69:c4:2a:58:16:20:cc:d3:eb:e1:a8:
09:8a:6f:b9:ed:c0:94:2b:0b:c8:b4:47:fc:24:7f:
6d:0d:99:e7:66:c1:18:71:a5:14:eb:87:d1:1e:98:
90:bd:57:88:e3:75:63:3e:71:57:1c:96:79:2e:df:
7b:58:be:63:bf:ea:a8:b0:0c:3a:7c:b7:0b:30:c2:
64:20:aa:c9:d9:40:4c:7f:61:6d:72:4d:77:1b:02:
f2:9e:de:cc:09:97:af:ef:7b:62:33:05:77:b5:96:
9b:bd:a5:05:fc:7b:f6:cc:d3:64:13:81:6e:8d:76:
4b:e2:ac:25:7f:ae:76:3e:3f:c2:8b:2b:de:c0:d7:
c0:fc:b0:e3:10:39:db:6e:db:11:c4:d4:e5:3f:34:
8d:df:3a:ca:6b:64:47:a1:be:5a:3d:34:de:2e:02:
e2:0c:1e:75:c3:62:30:ab:06:3b:ff:77:c4:a1:55:
53:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:30:33:E1:9B:81:B6:EE:F2:D7:7A:66:24:8A:ED:E5:4A:53:90:F4
X509v3 Authority Key Identifier:
keyid:AB:D4:35:48:65:9C:BB:27:6E:F8:D3:5B:82:12:F8:38:E8:CE:B7:5F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9132B1E/8936CC04883211EA84861B70C4F9AE02/q9Q1SGWcuydu-NNbghL4OOjOt18.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q9Q1SGWcuydu-NNbghL4OOjOt18.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9132B1E/8936CC04883211EA84861B70C4F9AE02/C09E796C50EB11EB86E24A3DC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
116.92.0.0/24
116.92.2.0/24
116.92.10.0/24
116.92.14.0/24
116.92.128.0-116.92.130.255
116.92.133.0/24
116.92.184.0-116.92.247.255
202.14.67.0-202.14.68.255
202.64.0.0-202.64.24.255
202.64.26.0-202.64.55.255
202.64.57.0-202.64.62.255
202.64.66.0-202.64.86.255
202.64.88.0-202.64.99.255
202.64.101.0/24
202.64.104.0-202.64.108.255
202.64.112.0-202.64.120.255
202.64.122.0/24
202.64.124.0/22
202.64.129.0-202.64.130.255
202.64.132.0-202.64.136.255
202.64.138.0/24
202.64.140.0-202.64.155.255
202.64.157.0-202.64.173.255
202.64.175.0-202.64.178.255
202.64.180.0-202.64.191.255
202.64.193.0-202.64.209.255
202.64.211.0-202.64.233.255
202.64.235.0-202.64.239.255
202.64.241.0-202.64.255.255
210.17.128.0-210.17.160.255
210.17.162.0-210.17.221.255
210.17.223.0-210.17.255.255
220.232.128.0/22
220.232.136.0-220.232.155.255
220.232.160.0/23
220.232.166.0-220.232.179.255
220.232.184.0-220.232.203.255
220.232.207.0-220.232.210.255
220.232.212.0-220.232.241.255
220.232.244.0-220.232.253.255
220.232.255.0/24
Signature Algorithm: sha256WithRSAEncryption
8e:e9:60:06:8a:d8:0c:c5:58:f7:a0:ac:86:79:3b:2a:b9:28:
de:6c:3e:af:cb:ab:7a:a6:47:0b:7e:57:90:a4:12:10:fa:cc:
01:81:59:1e:1f:a7:e9:d4:bf:8f:d0:d1:b4:39:46:9c:ea:bd:
37:97:5d:c1:91:77:90:3d:07:a9:7b:b0:c2:92:90:87:02:74:
80:5c:b3:8e:7f:6f:58:59:16:8f:02:f2:a9:c1:85:65:21:c4:
d5:29:5c:3f:53:ef:5f:38:92:b0:c0:dc:92:dc:d5:af:0d:43:
da:af:3f:bf:30:ba:08:ad:3d:24:bb:a2:a0:13:a4:a4:58:53:
83:9a:40:2b:ce:0f:d1:53:ed:5c:b8:07:48:c8:3a:d7:9d:2b:
f6:7d:a1:3e:32:f3:ff:4a:4b:13:ca:06:0e:3b:ec:a0:97:b7:
c2:da:24:4d:11:99:9f:f5:b9:8a:56:8f:62:dc:ef:93:bf:10:
61:a4:f0:e0:99:a4:e9:e9:80:72:a6:00:af:84:b3:0c:db:05:
d7:5e:cf:a0:14:5f:a1:b2:7e:10:9a:85:0c:f1:bf:7c:f8:2c:
be:74:16:12:9e:eb:9b:59:a7:68:ee:4b:fe:50:48:de:a9:22:
16:a3:71:25:e1:4e:4d:a6:64:04:2f:82:e9:a5:bb:bb:45:5e:
3c:7a:b2:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 2 07:09:19 2025 by rpki-client