Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9145446/ACA2E75C1FC511E5B450DD62C4F9AE02/E44FF288EE9811EF88F8B953C4F9AE02.roa
File: E44FF288EE9811EF88F8B953C4F9AE02.roa (raw, json)
Hash identifier: mbuOYmU/QuWwiFsuL7pAcJHd+BgX6eNzdbleZiOIhP8=
Subject key identifier: F6:B1:C7:68:DB:1D:3D:73:39:12:45:E5:B4:C6:12:64:0B:10:B7:9E
Certificate issuer: /CN=A9145446/serialNumber=7D65EBE14C3046E73E3986957302A26E081F1AF8
Certificate serial: 27FD
Authority key identifier: 7D:65:EB:E1:4C:30:46:E7:3E:39:86:95:73:02:A2:6E:08:1F:1A:F8
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fWXr4UwwRuc-OYaVcwKibggfGvg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9145446/ACA2E75C1FC511E5B450DD62C4F9AE02/E44FF288EE9811EF88F8B953C4F9AE02.roa
Signing time: Mon 19 May 2025 11:16:21 +0000
ROA not before: Mon 19 May 2025 11:16:21 +0000
ROA not after: Mon 01 Dec 2025 00:00:00 +0000
asID: 23930
IP address blocks: 43.243.126.0/24 maxlen: 24
43.243.127.0/24 maxlen: 24
103.38.214.0/24 maxlen: 24
103.38.215.0/24 maxlen: 24
116.93.0.0/23 maxlen: 23
116.93.1.0/24 maxlen: 24
116.93.4.0/23 maxlen: 23
116.93.4.0/24 maxlen: 24
116.93.5.0/24 maxlen: 24
116.93.7.0/24 maxlen: 24
116.93.8.0/23 maxlen: 23
116.93.8.0/24 maxlen: 24
116.93.9.0/24 maxlen: 24
116.93.10.0/23 maxlen: 23
116.93.10.0/24 maxlen: 24
116.93.11.0/24 maxlen: 24
116.93.12.0/23 maxlen: 23
116.93.12.0/24 maxlen: 24
116.93.13.0/24 maxlen: 24
116.93.15.0/24 maxlen: 24
116.93.16.0/23 maxlen: 23
116.93.17.0/24 maxlen: 24
116.93.18.0/23 maxlen: 23
116.93.18.0/24 maxlen: 24
116.93.20.0/24 maxlen: 24
116.93.21.0/24 maxlen: 24
116.93.22.0/23 maxlen: 23
116.93.23.0/24 maxlen: 24
116.93.24.0/22 maxlen: 22
116.93.24.0/23 maxlen: 23
116.93.24.0/24 maxlen: 24
116.93.25.0/24 maxlen: 24
116.93.26.0/23 maxlen: 23
116.93.26.0/24 maxlen: 24
116.93.27.0/24 maxlen: 24
116.93.28.0/23 maxlen: 23
116.93.28.0/24 maxlen: 24
116.93.29.0/24 maxlen: 24
116.93.30.0/23 maxlen: 23
116.93.30.0/24 maxlen: 24
116.93.31.0/24 maxlen: 24
116.93.32.0/23 maxlen: 23
116.93.32.0/24 maxlen: 24
116.93.33.0/24 maxlen: 24
116.93.34.0/23 maxlen: 23
116.93.34.0/24 maxlen: 24
116.93.36.0/23 maxlen: 23
116.93.36.0/24 maxlen: 24
116.93.37.0/24 maxlen: 24
116.93.38.0/23 maxlen: 23
116.93.38.0/24 maxlen: 24
116.93.39.0/24 maxlen: 24
116.93.40.0/24 maxlen: 24
116.93.41.0/24 maxlen: 24
116.93.42.0/24 maxlen: 24
116.93.43.0/24 maxlen: 24
116.93.44.0/24 maxlen: 24
116.93.45.0/24 maxlen: 24
116.93.46.0/23 maxlen: 23
116.93.47.0/24 maxlen: 24
116.93.48.0/23 maxlen: 23
116.93.49.0/24 maxlen: 24
116.93.50.0/23 maxlen: 23
116.93.51.0/24 maxlen: 24
116.93.52.0/24 maxlen: 24
116.93.54.0/23 maxlen: 23
116.93.54.0/24 maxlen: 24
116.93.61.0/24 maxlen: 24
116.93.62.0/24 maxlen: 24
116.93.63.0/24 maxlen: 24
116.93.64.0/24 maxlen: 24
116.93.65.0/24 maxlen: 24
116.93.66.0/24 maxlen: 24
116.93.67.0/24 maxlen: 24
116.93.71.0/24 maxlen: 24
116.93.74.0/24 maxlen: 24
116.93.75.0/24 maxlen: 24
116.93.78.0/24 maxlen: 24
116.93.79.0/24 maxlen: 24
116.93.80.0/23 maxlen: 23
116.93.80.0/24 maxlen: 24
116.93.85.0/24 maxlen: 24
116.93.87.0/24 maxlen: 24
116.93.88.0/24 maxlen: 24
116.93.90.0/24 maxlen: 24
116.93.91.0/24 maxlen: 24
116.93.93.0/24 maxlen: 24
116.93.94.0/24 maxlen: 24
116.93.96.0/24 maxlen: 24
116.93.97.0/24 maxlen: 24
116.93.98.0/24 maxlen: 24
116.93.100.0/24 maxlen: 24
116.93.102.0/24 maxlen: 24
116.93.105.0/24 maxlen: 24
116.93.106.0/24 maxlen: 24
116.93.107.0/24 maxlen: 24
116.93.108.0/24 maxlen: 24
116.93.109.0/24 maxlen: 24
116.93.110.0/24 maxlen: 24
116.93.111.0/24 maxlen: 24
116.93.112.0/24 maxlen: 24
116.93.114.0/24 maxlen: 24
116.93.115.0/24 maxlen: 24
116.93.117.0/24 maxlen: 24
116.93.118.0/24 maxlen: 24
116.93.119.0/24 maxlen: 24
116.93.120.0/24 maxlen: 24
116.93.121.0/24 maxlen: 24
116.93.122.0/24 maxlen: 24
116.93.124.0/24 maxlen: 24
116.93.126.0/24 maxlen: 24
116.93.127.0/24 maxlen: 24
121.127.6.0/24 maxlen: 24
121.127.7.0/24 maxlen: 24
121.127.8.0/24 maxlen: 24
121.127.9.0/24 maxlen: 24
121.127.10.0/24 maxlen: 24
121.127.11.0/24 maxlen: 24
121.127.12.0/23 maxlen: 23
121.127.12.0/24 maxlen: 24
121.127.13.0/24 maxlen: 24
121.127.14.0/23 maxlen: 23
121.127.14.0/24 maxlen: 24
121.127.15.0/24 maxlen: 24
121.127.16.0/24 maxlen: 24
121.127.17.0/24 maxlen: 24
121.127.18.0/24 maxlen: 24
121.127.20.0/23 maxlen: 23
121.127.20.0/24 maxlen: 24
121.127.21.0/24 maxlen: 24
121.127.22.0/23 maxlen: 23
121.127.22.0/24 maxlen: 24
121.127.23.0/24 maxlen: 24
121.127.26.0/23 maxlen: 23
121.127.26.0/24 maxlen: 24
121.127.27.0/24 maxlen: 24
121.127.28.0/23 maxlen: 23
121.127.28.0/24 maxlen: 24
121.127.29.0/24 maxlen: 24
121.127.30.0/23 maxlen: 23
121.127.30.0/24 maxlen: 24
121.127.31.0/24 maxlen: 24
203.99.232.0/21 maxlen: 21
203.99.232.0/23 maxlen: 23
203.99.232.0/24 maxlen: 24
203.99.233.0/24 maxlen: 24
203.99.234.0/24 maxlen: 24
203.99.235.0/24 maxlen: 24
203.99.236.0/24 maxlen: 24
203.99.237.0/24 maxlen: 24
203.99.238.0/23 maxlen: 23
203.99.238.0/24 maxlen: 24
203.99.239.0/24 maxlen: 24
203.208.24.0/23 maxlen: 23
203.208.24.0/24 maxlen: 24
203.208.25.0/24 maxlen: 24
203.208.26.0/24 maxlen: 24
203.208.27.0/24 maxlen: 24
203.208.28.0/24 maxlen: 24
203.208.29.0/24 maxlen: 24
203.208.30.0/24 maxlen: 24
203.208.31.0/24 maxlen: 24
2401:9800::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9145446/ACA2E75C1FC511E5B450DD62C4F9AE02/fWXr4UwwRuc-OYaVcwKibggfGvg.crl
rsync://rpki.apnic.net/member_repository/A9145446/ACA2E75C1FC511E5B450DD62C4F9AE02/fWXr4UwwRuc-OYaVcwKibggfGvg.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fWXr4UwwRuc-OYaVcwKibggfGvg.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 07 Jun 2025 15:43:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 10237 (0x27fd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9145446, serialNumber=7D65EBE14C3046E73E3986957302A26E081F1AF8
Validity
Not Before: May 19 11:16:21 2025 GMT
Not After : Dec 1 00:00:00 2025 GMT
Subject: CN=682b1305-a57b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:53:67:44:52:a5:97:62:60:8c:3f:b3:ec:d1:
e6:d7:28:31:03:f3:5b:e8:f8:9b:fa:6b:45:d1:d9:
27:3c:44:30:3b:a4:8a:5b:f6:4d:60:5e:ee:93:77:
7d:1b:54:67:a5:40:d1:db:ea:ee:52:7a:ce:8c:bd:
1a:37:fe:bc:41:27:a6:64:19:63:ac:0e:68:d4:f1:
85:0a:e8:56:42:8a:77:94:e1:66:28:db:2e:b0:b0:
0f:77:34:19:8e:38:ac:75:c1:91:f6:d0:b4:16:27:
7d:f4:50:5b:4e:28:97:89:90:64:9c:93:98:1e:0f:
2f:ed:3c:db:f0:7b:1e:83:c4:79:66:12:c2:c5:b9:
49:e2:e3:bf:be:9a:df:fc:dc:5f:c3:67:3a:aa:62:
db:97:3e:50:64:26:e3:be:ee:42:4c:0e:fb:9f:27:
2d:98:ba:37:bf:4f:a7:7e:49:ef:03:3a:2a:8b:c1:
ca:14:ed:1f:af:5b:2f:64:d8:2a:94:51:7d:80:ec:
dc:b7:08:7d:69:e2:81:6f:7e:42:09:ae:85:19:a0:
c0:ee:2b:a5:a7:a6:cc:7c:72:ae:0e:b0:15:9f:e8:
cd:1d:1f:a3:2c:d0:ec:fd:95:dd:31:19:8c:8f:42:
a7:da:9a:ff:99:04:46:b4:bb:83:4e:85:8d:1d:1f:
bd:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:B1:C7:68:DB:1D:3D:73:39:12:45:E5:B4:C6:12:64:0B:10:B7:9E
X509v3 Authority Key Identifier:
keyid:7D:65:EB:E1:4C:30:46:E7:3E:39:86:95:73:02:A2:6E:08:1F:1A:F8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9145446/ACA2E75C1FC511E5B450DD62C4F9AE02/fWXr4UwwRuc-OYaVcwKibggfGvg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fWXr4UwwRuc-OYaVcwKibggfGvg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9145446/ACA2E75C1FC511E5B450DD62C4F9AE02/E44FF288EE9811EF88F8B953C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
43.243.126.0/23
103.38.214.0/23
116.93.0.0/23
116.93.4.0/23
116.93.7.0-116.93.13.255
116.93.15.0-116.93.52.255
116.93.54.0/23
116.93.61.0-116.93.67.255
116.93.71.0/24
116.93.74.0/23
116.93.78.0-116.93.81.255
116.93.85.0/24
116.93.87.0-116.93.88.255
116.93.90.0/23
116.93.93.0-116.93.94.255
116.93.96.0-116.93.98.255
116.93.100.0/24
116.93.102.0/24
116.93.105.0-116.93.112.255
116.93.114.0/23
116.93.117.0-116.93.122.255
116.93.124.0/24
116.93.126.0/23
121.127.6.0-121.127.18.255
121.127.20.0/22
121.127.26.0-121.127.31.255
203.99.232.0/21
203.208.24.0/21
IPv6:
2401:9800::/32
Signature Algorithm: sha256WithRSAEncryption
3a:1f:20:b3:32:94:7d:40:b2:1c:cb:e8:28:1d:b2:85:35:ce:
d9:6d:74:4e:c5:f6:1c:cd:e3:24:20:4e:38:69:51:15:aa:9a:
1b:5f:87:cf:ee:82:db:68:55:6d:ef:be:9d:05:91:5d:31:d9:
b1:a1:d1:43:31:19:4c:b5:f7:c5:d7:14:b5:f9:20:49:e8:ff:
f1:df:b6:9a:3a:ff:18:8f:df:f5:82:48:0b:f3:14:e8:ca:4d:
aa:e8:d4:4c:8c:34:e1:69:33:e7:b3:33:6f:77:db:07:8c:24:
53:8b:db:c8:dd:d4:b4:ab:ad:40:02:cf:57:ea:75:31:08:70:
e3:ca:4a:16:f6:2a:55:ad:bf:f0:66:2b:6d:18:d2:98:1c:4f:
71:f5:5b:82:dc:8a:3c:df:97:d3:1e:b9:71:e8:70:d1:8d:80:
d0:9d:26:9c:10:cd:6c:9b:ec:ac:20:e0:fa:1c:7e:53:b7:3a:
c1:77:4f:77:61:46:c5:c7:85:98:c8:84:b2:d2:1a:bd:74:14:
97:f9:01:e5:d1:b5:93:a9:da:7c:00:68:0e:fd:c9:d2:79:58:
45:4e:9a:28:9b:42:fa:e0:c4:0c:15:3f:28:a1:d2:c3:e2:2d:
34:bf:29:30:8a:5c:01:63:a2:27:cd:25:c3:5a:37:a3:b3:4a:
a7:aa:89:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 2 07:15:24 2025 by rpki-client