Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9149F3E/9A85BB501D8211E2BC6417D708B02CD2/30941278EF2011EF9264077FC4F9AE02.roa
File: 30941278EF2011EF9264077FC4F9AE02.roa (raw, json)
Hash identifier: dH1BFoeKKcX/dB6MDpyS3SQGnjUCambU+BCLw/wlqFw=
Subject key identifier: BE:E8:28:2E:E5:D2:0A:44:5C:1C:9E:5B:DC:D9:97:D0:46:6E:54:56
Certificate issuer: /CN=A9149F3E/serialNumber=BF0E6F4EE0E17DDE8C4A24BF897D19B87AA5759F
Certificate serial: 3502
Authority key identifier: BF:0E:6F:4E:E0:E1:7D:DE:8C:4A:24:BF:89:7D:19:B8:7A:A5:75:9F
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vw5vTuDhfd6MSiS_iX0ZuHqldZ8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9149F3E/9A85BB501D8211E2BC6417D708B02CD2/30941278EF2011EF9264077FC4F9AE02.roa
Signing time: Fri 04 Jul 2025 14:50:20 +0000
ROA not before: Fri 04 Jul 2025 14:50:20 +0000
ROA not after: Mon 31 Aug 2026 00:00:00 +0000
asID: 17579
IP address blocks: 134.75.15.0/24 maxlen: 24
134.75.16.0/24 maxlen: 24
134.75.101.0/24 maxlen: 24
134.75.102.0/24 maxlen: 24
134.75.103.0/24 maxlen: 24
134.75.105.0/24 maxlen: 24
134.75.107.0/24 maxlen: 24
134.75.108.0/24 maxlen: 24
134.75.123.0/24 maxlen: 24
134.75.124.0/24 maxlen: 24
134.75.125.0/24 maxlen: 24
134.75.126.0/24 maxlen: 24
134.75.127.0/24 maxlen: 24
134.75.128.0/24 maxlen: 24
134.75.129.0/24 maxlen: 24
134.75.130.0/24 maxlen: 24
134.75.131.0/24 maxlen: 24
134.75.132.0/24 maxlen: 24
134.75.200.0/24 maxlen: 24
134.75.207.0/24 maxlen: 24
134.75.252.0/24 maxlen: 24
134.75.253.0/24 maxlen: 24
134.75.254.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9149F3E/9A85BB501D8211E2BC6417D708B02CD2/vw5vTuDhfd6MSiS_iX0ZuHqldZ8.crl
rsync://rpki.apnic.net/member_repository/A9149F3E/9A85BB501D8211E2BC6417D708B02CD2/vw5vTuDhfd6MSiS_iX0ZuHqldZ8.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vw5vTuDhfd6MSiS_iX0ZuHqldZ8.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 27 Jul 2025 14:22:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13570 (0x3502)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9149F3E, serialNumber=BF0E6F4EE0E17DDE8C4A24BF897D19B87AA5759F
Validity
Not Before: Jul 4 14:50:20 2025 GMT
Not After : Aug 31 00:00:00 2026 GMT
Subject: CN=6867ea2b-7225
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:52:b4:10:63:64:39:f4:68:8c:12:98:25:a9:
7d:aa:90:5a:5b:49:e0:23:78:19:e7:3e:06:35:a3:
c7:20:94:f1:0c:8e:a7:0a:c8:70:ca:46:82:41:56:
63:0e:7a:4a:2f:94:8e:ba:7e:05:ff:1d:4c:8b:8a:
29:9b:38:61:8b:0e:95:46:47:b4:20:b4:6b:29:31:
0f:43:a1:48:38:95:cd:0d:57:30:7b:46:a3:0e:3b:
66:80:3d:25:0a:ea:7e:a5:95:67:96:92:5a:07:83:
3f:cb:4b:df:33:05:71:28:70:4b:02:56:38:4a:c3:
11:b8:36:95:78:d9:01:48:92:76:9d:ff:22:21:07:
40:8b:a6:d2:fa:b3:f5:56:ea:7a:1d:16:d1:25:b4:
2c:d5:32:15:25:c6:15:54:04:34:2a:d7:08:b7:39:
8b:d5:57:99:1a:51:ea:bc:ca:a7:94:18:6c:89:a1:
55:28:81:be:57:bc:40:13:b2:55:8f:7c:f8:38:78:
7d:dd:04:f1:b1:4f:8c:89:90:6b:e7:0a:a4:91:c1:
73:54:9e:54:10:30:4d:3e:1a:31:2c:b7:07:cf:07:
85:e6:15:56:c0:13:a0:12:0b:c7:52:2a:8b:ef:06:
2d:7b:73:65:71:d2:5d:ee:1f:6c:ab:b3:69:2d:e4:
09:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:E8:28:2E:E5:D2:0A:44:5C:1C:9E:5B:DC:D9:97:D0:46:6E:54:56
X509v3 Authority Key Identifier:
keyid:BF:0E:6F:4E:E0:E1:7D:DE:8C:4A:24:BF:89:7D:19:B8:7A:A5:75:9F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9149F3E/9A85BB501D8211E2BC6417D708B02CD2/vw5vTuDhfd6MSiS_iX0ZuHqldZ8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vw5vTuDhfd6MSiS_iX0ZuHqldZ8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9149F3E/9A85BB501D8211E2BC6417D708B02CD2/30941278EF2011EF9264077FC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
134.75.15.0-134.75.16.255
134.75.101.0-134.75.103.255
134.75.105.0/24
134.75.107.0-134.75.108.255
134.75.123.0-134.75.132.255
134.75.200.0/24
134.75.207.0/24
134.75.252.0-134.75.254.255
Signature Algorithm: sha256WithRSAEncryption
b4:ff:79:8d:f8:cd:a7:78:fa:75:35:54:d8:f3:d2:91:13:ac:
99:cd:ba:5a:52:81:47:1a:ae:5d:41:40:57:16:a0:a6:9a:50:
96:1a:a7:67:a6:db:77:fe:86:cd:b0:68:bd:e0:d0:71:79:1c:
18:04:9a:30:f1:eb:b0:6e:93:bc:79:97:6f:ef:35:77:19:99:
e2:ac:f3:4b:9c:48:ff:36:37:91:4c:a9:c2:a2:ba:a4:9e:83:
8d:8a:c2:0f:72:41:e7:1a:78:93:6f:f9:81:5a:a3:dc:9e:57:
b8:29:f2:ce:78:e9:e2:a5:04:10:4a:69:5e:73:e3:43:b6:8e:
ab:4d:66:75:4b:e9:77:04:2b:99:df:79:3b:fc:39:88:1d:77:
06:47:85:e3:99:cc:c6:a7:2f:26:55:f7:db:56:17:93:a1:30:
61:9a:77:a9:5b:c2:7c:b5:87:e7:07:8b:15:dd:fb:ab:45:5a:
65:f4:c0:30:ee:97:c4:91:84:77:d9:62:b0:84:58:36:32:21:
03:dd:22:9e:63:e4:65:c6:07:69:e1:51:1c:21:6c:c3:c0:47:
9b:28:3d:eb:97:40:82:12:6d:21:c2:87:d4:52:ac:e7:26:32:
c1:64:0a:15:71:f1:94:89:59:f5:8f:16:76:d5:39:5c:f6:db:
00:d8:15:b8
-----BEGIN CERTIFICATE-----
MIIFwzCCBKugAwIBAgICNQIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NDlGM0UxMTAvBgNVBAUTKEJGMEU2RjRFRTBFMTdEREU4QzRBMjRCRjg5N0QxOUI4
N0FBNTc1OUYwHhcNMjUwNzA0MTQ1MDIwWhcNMjYwODMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02ODY3ZWEyYi03MjI1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAzlK0EGNkOfRojBKYJal9qpBaW0ngI3gZ5z4GNaPHIJTxDI6nCshwykaCQVZj
DnpKL5SOun4F/x1Mi4opmzhhiw6VRke0ILRrKTEPQ6FIOJXNDVcwe0ajDjtmgD0l
Cup+pZVnlpJaB4M/y0vfMwVxKHBLAlY4SsMRuDaVeNkBSJJ2nf8iIQdAi6bS+rP1
Vup6HRbRJbQs1TIVJcYVVAQ0KtcItzmL1VeZGlHqvMqnlBhsiaFVKIG+V7xAE7JV
j3z4OHh93QTxsU+MiZBr5wqkkcFzVJ5UEDBNPhoxLLcHzweF5hVWwBOgEgvHUiqL
7wYte3NlcdJd7h9sq7NpLeQJMwIDAQABo4IC5zCCAuMwHQYDVR0OBBYEFL7oKC7l
0gpEXByeW9zZl9BGblRWMB8GA1UdIwQYMBaAFL8Ob07g4X3ejEokv4l9Gbh6pXWf
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0OUYzRS85QTg1QkI1MDFE
ODIxMUUyQkM2NDE3RDcwOEIwMkNEMi92dzV2VHVEaGZkNk1TaVNfaVgwWnVIcWxk
WjguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL3Z3NXZUdURoZmQ2TVNpU19pWDBadUhxbGRaOC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
NDlGM0UvOUE4NUJCNTAxRDgyMTFFMkJDNjQxN0Q3MDhCMDJDRDIvMzA5NDEyNzhF
RjIwMTFFRjkyNjQwNzdGQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwcQYIKwYBBQUHAQcBAf8E
YjBgMF4EAgABMFgwDAMEAIZLDwMEAIZLEDAMAwQAhktlAwQDhktgAwQAhktpMAwD
BACGS2sDBACGS2wwDAMEAIZLewMEAIZLhAMEAIZLyAMEAIZLzzAMAwQChkv8AwQA
hkv+MA0GCSqGSIb3DQEBCwUAA4IBAQC0/3mN+M2nePp1NVTY89KRE6yZzbpaUoFH
Gq5dQUBXFqCmmlCWGqdnptt3/obNsGi94NBxeRwYBJow8euwbpO8eZdv7zV3GZni
rPNLnEj/NjeRTKnCorqknoONisIPckHnGniTb/mBWqPcnle4KfLOeOnipQQQSmle
c+NDto6rTWZ1S+l3BCuZ33k7/DmIHXcGR4XjmczGpy8mVffbVheToTBhmnepW8J8
tYfnB4sV3furRVpl9MAw7pfEkYR32WKwhFg2MiED3SKeY+Rlxgdp4VEcIWzDwEeb
KD3rl0CCEm0hwofUUqznJjLBZAoVcfGUiVn1jxZ21Tlc9tsA2BW4
-----END CERTIFICATE-----
Generated at Mon Jul 21 12:46:14 2025 by rpki-client