Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A914C3FB/701782160BA111F08EFED219C4F9AE02/850942E4325311F081E87832C4F9AE02.roa
File: 850942E4325311F081E87832C4F9AE02.roa (raw, json)
Hash identifier: YKfa7XcZECRGtp0hZwgH99jMIjA/4Bdgt+cMhZRSKcQ=
Subject key identifier: 1D:D8:9D:63:2C:49:48:E6:FD:6B:50:29:7C:7D:B6:11:27:EE:A1:45
Certificate issuer: /CN=A914C3FB/serialNumber=4F5F75A6C2988F58B603012A8DB445A1F37D5D72
Certificate serial: 33
Authority key identifier: 4F:5F:75:A6:C2:98:8F:58:B6:03:01:2A:8D:B4:45:A1:F3:7D:5D:72
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T191psKYj1i2AwEqjbRFofN9XXI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914C3FB/701782160BA111F08EFED219C4F9AE02/850942E4325311F081E87832C4F9AE02.roa
Signing time: Fri 16 May 2025 12:51:24 +0000
ROA not before: Fri 16 May 2025 12:51:24 +0000
ROA not after: Mon 02 Mar 2026 00:00:00 +0000
asID: 7540
IP address blocks: 117.18.106.0/23 maxlen: 23
117.18.106.0/24 maxlen: 24
117.18.107.0/24 maxlen: 24
117.18.108.0/23 maxlen: 23
117.18.108.0/24 maxlen: 24
117.18.109.0/24 maxlen: 24
117.18.112.0/22 maxlen: 22
117.18.112.0/24 maxlen: 24
117.18.113.0/24 maxlen: 24
117.18.114.0/24 maxlen: 24
117.18.115.0/24 maxlen: 24
117.18.119.0/24 maxlen: 24
117.18.120.0/23 maxlen: 23
117.18.120.0/24 maxlen: 24
117.18.121.0/24 maxlen: 24
117.18.122.0/24 maxlen: 24
202.181.154.0/24 maxlen: 24
202.181.155.0/24 maxlen: 24
202.181.160.0/24 maxlen: 24
202.181.161.0/24 maxlen: 24
202.181.162.0/24 maxlen: 24
202.181.163.0/24 maxlen: 24
202.181.170.0/24 maxlen: 24
202.181.171.0/24 maxlen: 24
202.181.172.0/24 maxlen: 24
202.181.173.0/24 maxlen: 24
202.181.178.0/24 maxlen: 24
202.181.179.0/24 maxlen: 24
202.181.180.0/22 maxlen: 22
202.181.180.0/24 maxlen: 24
202.181.181.0/24 maxlen: 24
202.181.182.0/24 maxlen: 24
202.181.183.0/24 maxlen: 24
202.181.184.0/22 maxlen: 22
202.181.184.0/24 maxlen: 24
202.181.185.0/24 maxlen: 24
202.181.186.0/24 maxlen: 24
202.181.187.0/24 maxlen: 24
202.181.216.0/24 maxlen: 24
202.181.217.0/24 maxlen: 24
202.181.218.0/24 maxlen: 24
202.181.220.0/24 maxlen: 24
202.181.221.0/24 maxlen: 24
202.181.222.0/24 maxlen: 24
202.181.223.0/24 maxlen: 24
202.181.224.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A914C3FB/701782160BA111F08EFED219C4F9AE02/T191psKYj1i2AwEqjbRFofN9XXI.crl
rsync://rpki.apnic.net/member_repository/A914C3FB/701782160BA111F08EFED219C4F9AE02/T191psKYj1i2AwEqjbRFofN9XXI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T191psKYj1i2AwEqjbRFofN9XXI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Jun 2025 07:34:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 51 (0x33)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914C3FB, serialNumber=4F5F75A6C2988F58B603012A8DB445A1F37D5D72
Validity
Not Before: May 16 12:51:24 2025 GMT
Not After : Mar 2 00:00:00 2026 GMT
Subject: CN=682734cc-3d9b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:59:bc:b5:50:af:de:93:dd:f3:7c:d1:0d:74:
cf:50:28:ef:d6:be:0e:59:b6:8b:9c:55:ea:ca:39:
b7:72:63:f7:e6:d2:49:ca:91:b4:fa:95:08:28:9c:
f5:d2:f7:31:14:68:a6:c8:06:7f:c3:30:14:a5:6b:
f2:92:b1:03:b5:40:0a:0c:30:f1:31:30:fc:b3:8b:
0d:25:23:99:e4:54:09:8a:28:8e:5e:60:88:2a:bb:
a2:ac:d4:89:bd:fe:2f:6a:7f:66:fc:93:e6:ff:07:
fb:00:6a:2d:3f:b8:ac:ea:f3:e0:d5:70:b5:48:e6:
4f:e9:74:4a:c2:8f:71:1d:05:48:5d:69:63:74:a4:
80:4a:3e:39:35:f2:d8:4c:d5:e3:6f:72:ee:1a:b4:
74:ba:52:6a:a7:a9:f6:4b:e8:1a:06:f6:5f:73:a2:
56:95:4d:41:3c:c7:e3:04:94:75:82:0c:a2:9b:24:
bb:5a:be:5d:02:10:4e:1c:cc:be:00:4e:18:0b:37:
6f:fc:43:5a:1e:a4:48:ce:2b:1d:07:3d:b3:eb:9f:
f7:e3:83:5f:ab:4d:fd:1b:f0:1b:99:72:98:57:04:
e9:70:75:5c:19:b5:bd:f0:51:3b:26:fb:61:f4:e4:
eb:b7:00:47:9d:1b:8d:b9:90:46:16:bc:c2:ef:91:
47:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:D8:9D:63:2C:49:48:E6:FD:6B:50:29:7C:7D:B6:11:27:EE:A1:45
X509v3 Authority Key Identifier:
keyid:4F:5F:75:A6:C2:98:8F:58:B6:03:01:2A:8D:B4:45:A1:F3:7D:5D:72
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914C3FB/701782160BA111F08EFED219C4F9AE02/T191psKYj1i2AwEqjbRFofN9XXI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T191psKYj1i2AwEqjbRFofN9XXI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914C3FB/701782160BA111F08EFED219C4F9AE02/850942E4325311F081E87832C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
117.18.106.0-117.18.109.255
117.18.112.0/22
117.18.119.0-117.18.122.255
202.181.154.0/23
202.181.160.0/22
202.181.170.0-202.181.173.255
202.181.178.0-202.181.187.255
202.181.216.0-202.181.218.255
202.181.220.0-202.181.224.255
Signature Algorithm: sha256WithRSAEncryption
b2:c8:e5:56:0c:2b:ba:c2:29:75:d4:b4:d2:f3:ab:3e:c2:96:
02:6f:0e:a4:f4:77:f4:84:86:34:52:24:68:0c:d0:4d:d5:08:
5a:1b:0d:c3:e9:f6:03:60:fb:89:49:c7:9d:02:09:9f:01:c3:
e6:fb:d3:6d:a6:0f:91:0d:24:08:61:8e:ac:ae:27:51:ca:ba:
7c:e1:e6:88:b0:0f:f8:fb:d4:c6:80:21:62:c1:a2:1f:16:0f:
ce:2c:b6:30:ae:8b:c0:ff:c0:f6:32:2e:17:93:37:73:e0:98:
b7:7c:d2:20:cd:34:66:69:11:e2:de:82:26:f0:8d:ba:7a:a7:
e3:27:b4:58:5a:7e:86:74:7c:a2:db:88:29:19:36:14:6b:b6:
ba:ac:16:a7:5c:7e:20:fd:3a:4e:7d:96:2b:76:71:1a:db:6d:
6f:34:23:ec:86:f3:82:cd:60:35:cb:0f:79:73:97:b0:9c:71:
bf:72:8b:90:c4:78:06:43:fa:c5:29:f3:82:eb:5b:8a:48:9e:
45:45:79:9f:67:28:b7:66:cd:4d:80:7d:41:71:6b:30:b8:fc:
01:0a:4c:0e:a3:fb:fe:87:2b:79:32:2a:f1:02:e1:3f:76:1e:
8e:01:82:af:98:0e:83:77:fe:9d:ba:0d:de:6f:16:c8:a4:74:
a8:e4:7c:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 2 07:11:15 2025 by rpki-client