Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A914781A/D52142701D9B11E2B821FD8908B02CD2/D99C6B9853BE11EF819E6347C4F9AE02.roa
File: D99C6B9853BE11EF819E6347C4F9AE02.roa (raw, json)
Hash identifier: L0W7cRGzuMkg347Pz9hozTnaB7Tyl+NuXuVxktrd6xk=
Subject key identifier: 45:C3:E2:30:47:0D:74:EB:55:60:18:5E:F5:6C:81:B6:35:F5:4A:12
Certificate issuer: /CN=A914781A/serialNumber=4D723955243AE88D552439AF8E4E0A09C8F6590D
Certificate serial: 3505
Authority key identifier: 4D:72:39:55:24:3A:E8:8D:55:24:39:AF:8E:4E:0A:09:C8:F6:59:0D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TXI5VSQ66I1VJDmvjk4KCcj2WQ0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914781A/D52142701D9B11E2B821FD8908B02CD2/D99C6B9853BE11EF819E6347C4F9AE02.roa
Signing time: Tue 20 May 2025 02:42:43 +0000
ROA not before: Tue 20 May 2025 02:42:43 +0000
ROA not after: Fri 01 May 2026 00:00:00 +0000
asID: 7616
IP address blocks: 203.130.128.0/19 maxlen: 20
203.130.146.0/24 maxlen: 24
203.147.16.0/20 maxlen: 21
203.147.31.0/24 maxlen: 24
203.147.32.0/20 maxlen: 21
203.147.42.0/24 maxlen: 24
203.147.48.0/20 maxlen: 20
203.147.54.0/24 maxlen: 24
203.156.16.0/24 maxlen: 24
203.156.18.0/24 maxlen: 24
203.156.48.0/20 maxlen: 20
203.156.64.0/20 maxlen: 20
203.156.80.0/20 maxlen: 20
203.156.95.0/24 maxlen: 24
203.156.128.0/18 maxlen: 20
203.156.146.0/24 maxlen: 24
203.156.147.0/24 maxlen: 24
203.156.148.0/24 maxlen: 24
203.156.149.0/24 maxlen: 24
203.156.150.0/24 maxlen: 24
203.156.152.0/21 maxlen: 21
203.156.152.0/24 maxlen: 24
2403:bf00::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A914781A/D52142701D9B11E2B821FD8908B02CD2/TXI5VSQ66I1VJDmvjk4KCcj2WQ0.crl
rsync://rpki.apnic.net/member_repository/A914781A/D52142701D9B11E2B821FD8908B02CD2/TXI5VSQ66I1VJDmvjk4KCcj2WQ0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TXI5VSQ66I1VJDmvjk4KCcj2WQ0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Jun 2025 14:59:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13573 (0x3505)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914781A, serialNumber=4D723955243AE88D552439AF8E4E0A09C8F6590D
Validity
Not Before: May 20 02:42:43 2025 GMT
Not After : May 1 00:00:00 2026 GMT
Subject: CN=682bec22-8a7d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:06:2d:ce:01:a3:0a:fb:e4:8b:49:3b:1d:14:
1b:b5:f5:da:83:7c:71:00:96:5d:12:6a:6d:5d:0e:
bf:f1:aa:4a:a6:92:57:94:16:47:a6:8f:8d:c7:db:
f9:5b:c7:50:f0:8e:34:13:72:4c:38:56:0f:38:41:
ff:84:6e:9e:e6:59:61:e2:30:6f:d9:fc:c5:a5:04:
5d:16:83:2b:cf:c7:5d:dd:7a:6e:30:0d:b3:7d:fb:
5f:f5:d1:12:a7:38:47:a1:14:11:29:2f:ec:34:44:
36:22:9a:93:8b:d3:bc:62:53:e5:48:f2:b7:b4:79:
61:4e:39:49:1d:20:15:30:53:44:e3:4a:7b:44:6c:
7e:ef:ec:56:be:72:4b:c3:7c:cd:6d:fd:c6:37:77:
7a:2f:bd:c5:c8:1c:1b:06:94:d1:53:e8:67:ed:1a:
17:92:32:7b:05:4a:b7:38:a0:6c:79:20:a2:32:4b:
5b:ca:c6:bf:d7:09:39:28:cb:d8:eb:66:73:0d:0e:
71:1d:3f:94:45:d1:6c:8e:52:a9:d3:08:51:21:0a:
df:7a:c9:2c:62:de:5e:86:6a:7a:33:28:d9:bf:d9:
ab:14:e1:c6:0f:94:aa:89:31:cf:37:e6:e2:54:c8:
ec:ae:08:5e:97:a2:52:dd:0f:a0:68:0a:e7:ee:75:
78:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:C3:E2:30:47:0D:74:EB:55:60:18:5E:F5:6C:81:B6:35:F5:4A:12
X509v3 Authority Key Identifier:
keyid:4D:72:39:55:24:3A:E8:8D:55:24:39:AF:8E:4E:0A:09:C8:F6:59:0D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914781A/D52142701D9B11E2B821FD8908B02CD2/TXI5VSQ66I1VJDmvjk4KCcj2WQ0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TXI5VSQ66I1VJDmvjk4KCcj2WQ0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914781A/D52142701D9B11E2B821FD8908B02CD2/D99C6B9853BE11EF819E6347C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
203.130.128.0/19
203.147.16.0-203.147.63.255
203.156.16.0/24
203.156.18.0/24
203.156.48.0-203.156.95.255
203.156.128.0/18
IPv6:
2403:bf00::/32
Signature Algorithm: sha256WithRSAEncryption
59:e4:22:ba:6f:a2:58:03:7e:f4:27:a0:5d:47:dc:55:4d:f1:
f0:ee:2a:be:cd:6d:ee:6b:15:05:cb:59:3b:43:eb:26:c3:39:
20:68:55:26:c3:e7:7d:e4:ab:a8:1a:20:f1:50:20:77:14:78:
68:4e:7e:69:b3:cf:bb:d1:b9:09:2c:80:92:89:d1:5a:e8:3f:
19:8b:ba:6d:a2:11:a3:84:15:4c:63:5d:7f:cf:4d:3d:a3:57:
8e:86:df:a6:fc:e4:9c:39:02:00:96:22:3f:75:28:aa:45:08:
d9:e7:30:df:5f:f6:25:c4:f5:d0:90:b4:b0:dd:51:8a:7c:21:
5a:5b:46:9b:3b:7c:60:a3:e4:8a:b6:87:d0:ec:4e:de:22:83:
e5:0d:89:f9:df:ff:2d:b2:d2:e3:43:89:fc:bd:07:ea:4b:3e:
d0:0a:89:04:dd:18:5a:99:63:1f:ea:b9:30:fb:c3:5f:d3:f5:
c5:35:2b:28:55:51:e1:4f:bb:65:54:e3:d7:76:3f:4c:39:94:
26:ca:d9:53:46:0e:42:af:40:9b:2a:70:61:90:28:36:f1:fa:
df:5d:af:0f:aa:f1:67:1d:23:63:24:99:07:f6:0a:0b:eb:dc:
32:e8:85:a4:84:fe:17:4c:93:a0:db:e2:8b:21:d1:e5:f5:a1:
72:c3:ee:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 3 23:57:57 2025 by rpki-client