Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A915E475/DA83AA7ACA1111EAA479C734C4F9AE02/55124B02F3C511EFAD4ACE37C4F9AE02.roa
File: 55124B02F3C511EFAD4ACE37C4F9AE02.roa (raw, json)
Hash identifier: JTREF4UdMsX+RMffZfVugGKw1vI8LnTYssz0o9ln2js=
Subject key identifier: 4B:85:5C:DA:61:1E:89:28:7B:D0:1F:D1:1B:60:1E:08:1F:D5:D4:EB
Certificate issuer: /CN=A915E475/serialNumber=745FF4F063AB5D171E05251B31E294A4BC7973B1
Certificate serial: 0A26
Authority key identifier: 74:5F:F4:F0:63:AB:5D:17:1E:05:25:1B:31:E2:94:A4:BC:79:73:B1
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dF_08GOrXRceBSUbMeKUpLx5c7E.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915E475/DA83AA7ACA1111EAA479C734C4F9AE02/55124B02F3C511EFAD4ACE37C4F9AE02.roa
Signing time: Thu 15 May 2025 04:12:22 +0000
ROA not before: Thu 15 May 2025 04:12:22 +0000
ROA not after: Tue 30 Dec 2025 00:00:00 +0000
asID: 38195
IP address blocks: 27.122.112.0/20 maxlen: 22
27.122.112.0/22 maxlen: 24
27.122.116.0/23 maxlen: 24
27.122.120.0/21 maxlen: 24
36.255.112.0/22 maxlen: 22
43.245.152.0/24 maxlen: 24
43.245.153.0/24 maxlen: 24
43.245.154.0/23 maxlen: 24
45.113.92.0/22 maxlen: 22
45.113.94.0/23 maxlen: 23
45.118.64.0/22 maxlen: 22
103.1.52.0/22 maxlen: 22
103.7.48.0/22 maxlen: 24
103.21.0.0/22 maxlen: 22
103.25.180.0/22 maxlen: 22
103.28.160.0/24 maxlen: 24
103.29.86.0/23 maxlen: 23
103.42.226.0/23 maxlen: 23
103.192.192.0/22 maxlen: 22
103.200.13.0/24 maxlen: 24
103.200.14.0/24 maxlen: 24
103.200.15.0/24 maxlen: 24
103.224.49.0/24 maxlen: 24
103.224.52.0/23 maxlen: 23
103.237.16.0/22 maxlen: 22
103.248.16.0/22 maxlen: 22
111.118.192.0/21 maxlen: 24
114.129.184.0/21 maxlen: 21
115.70.64.0/21 maxlen: 21
115.186.192.0/18 maxlen: 18
116.255.0.0/18 maxlen: 24
119.15.72.0/21 maxlen: 21
119.15.73.0/24 maxlen: 24
119.40.104.0/21 maxlen: 21
122.199.0.0/18 maxlen: 18
123.176.112.0/21 maxlen: 21
123.176.119.0/24 maxlen: 24
125.63.0.0/19 maxlen: 19
125.63.8.0/24 maxlen: 24
125.63.24.0/24 maxlen: 24
125.63.25.0/24 maxlen: 24
125.63.26.0/24 maxlen: 24
125.63.27.0/24 maxlen: 24
125.63.28.0/24 maxlen: 24
125.63.29.0/24 maxlen: 24
125.63.30.0/24 maxlen: 24
125.253.0.0/18 maxlen: 18
125.253.0.0/24 maxlen: 24
125.253.1.0/24 maxlen: 24
125.253.2.0/24 maxlen: 24
125.253.3.0/24 maxlen: 24
125.253.4.0/24 maxlen: 24
125.253.10.0/24 maxlen: 24
125.253.11.0/24 maxlen: 24
125.253.15.0/24 maxlen: 24
125.253.19.0/24 maxlen: 27
125.253.22.0/23 maxlen: 24
125.253.28.0/23 maxlen: 24
125.253.39.0/24 maxlen: 24
125.253.43.0/24 maxlen: 24
125.253.54.0/24 maxlen: 24
125.253.56.0/24 maxlen: 24
125.253.57.0/24 maxlen: 24
125.253.96.0/20 maxlen: 24
163.47.68.0/22 maxlen: 22
163.53.144.0/22 maxlen: 24
202.63.64.0/20 maxlen: 20
202.65.64.0/19 maxlen: 19
202.70.129.0/24 maxlen: 24
202.80.144.0/21 maxlen: 21
202.80.151.0/24 maxlen: 24
202.86.112.0/24 maxlen: 24
202.86.119.0/24 maxlen: 24
202.90.206.0/23 maxlen: 23
202.130.192.0/23 maxlen: 23
202.130.194.0/24 maxlen: 24
202.130.196.0/22 maxlen: 22
202.130.197.0/24 maxlen: 24
202.130.200.0/23 maxlen: 23
202.130.202.0/24 maxlen: 24
202.130.204.0/24 maxlen: 24
202.130.207.0/24 maxlen: 24
202.130.208.0/22 maxlen: 22
202.130.212.0/23 maxlen: 23
202.130.215.0/24 maxlen: 24
202.130.216.0/24 maxlen: 24
202.130.218.0/23 maxlen: 23
202.130.220.0/22 maxlen: 22
202.137.160.0/20 maxlen: 24
202.144.160.0/20 maxlen: 20
202.144.160.0/24 maxlen: 24
202.144.161.0/24 maxlen: 24
202.144.162.0/24 maxlen: 24
202.144.165.0/24 maxlen: 24
202.144.170.0/24 maxlen: 24
202.144.171.0/24 maxlen: 24
202.144.172.0/22 maxlen: 22
202.169.96.0/19 maxlen: 19
202.171.160.0/19 maxlen: 19
202.171.160.0/24 maxlen: 24
202.171.166.0/24 maxlen: 24
202.171.174.0/24 maxlen: 24
202.171.175.0/24 maxlen: 24
202.171.182.0/23 maxlen: 24
202.177.40.0/24 maxlen: 24
202.177.41.0/24 maxlen: 24
202.177.42.0/24 maxlen: 24
202.177.43.0/24 maxlen: 24
203.10.77.0/24 maxlen: 24
203.14.230.0/24 maxlen: 24
203.24.182.0/24 maxlen: 24
203.25.102.0/24 maxlen: 24
203.27.116.0/24 maxlen: 24
203.32.82.0/24 maxlen: 24
203.33.254.0/24 maxlen: 24
203.123.96.0/19 maxlen: 19
203.132.64.0/19 maxlen: 19
203.132.64.0/24 maxlen: 24
203.132.65.0/24 maxlen: 24
203.132.66.0/24 maxlen: 24
203.132.67.0/24 maxlen: 24
203.132.68.0/24 maxlen: 24
203.132.69.0/24 maxlen: 24
203.132.70.0/24 maxlen: 24
203.132.71.0/24 maxlen: 24
203.132.72.0/24 maxlen: 24
203.132.73.0/24 maxlen: 24
203.132.74.0/23 maxlen: 23
203.132.88.0/21 maxlen: 24
203.153.16.0/22 maxlen: 22
203.153.16.0/24 maxlen: 24
203.153.18.0/24 maxlen: 24
203.189.4.0/24 maxlen: 24
210.5.32.0/21 maxlen: 21
220.233.4.0/22 maxlen: 22
220.233.8.0/22 maxlen: 22
220.233.36.0/22 maxlen: 22
220.233.44.0/22 maxlen: 22
223.27.64.0/22 maxlen: 22
2401:d000::/28 maxlen: 28
2404:c600::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A915E475/DA83AA7ACA1111EAA479C734C4F9AE02/dF_08GOrXRceBSUbMeKUpLx5c7E.crl
rsync://rpki.apnic.net/member_repository/A915E475/DA83AA7ACA1111EAA479C734C4F9AE02/dF_08GOrXRceBSUbMeKUpLx5c7E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dF_08GOrXRceBSUbMeKUpLx5c7E.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Jun 2025 20:53:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2598 (0xa26)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915E475, serialNumber=745FF4F063AB5D171E05251B31E294A4BC7973B1
Validity
Not Before: May 15 04:12:22 2025 GMT
Not After : Dec 30 00:00:00 2025 GMT
Subject: CN=682569a5-39f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:dc:6e:52:b4:6c:71:66:2d:4e:f1:a5:f1:66:
a7:03:7f:32:f8:03:16:43:58:da:17:4d:92:41:05:
a5:8b:46:8c:92:78:eb:ab:09:af:dd:74:46:84:42:
70:89:34:43:4e:26:a6:0c:79:e1:c8:73:49:42:85:
d5:a5:1c:a0:f4:ee:26:26:9a:de:a9:d8:39:05:05:
e0:6c:b2:5d:59:a9:2f:ef:1c:4c:3b:1c:fd:83:9f:
34:5a:a9:9c:fe:8c:ed:a5:8e:28:5e:85:97:28:f5:
b4:3d:10:d6:f1:e7:30:5b:f3:44:e2:37:cd:d9:7d:
f0:57:28:dd:00:ab:66:d8:bb:8f:ec:5d:2b:ab:24:
61:99:c5:7e:36:16:03:96:35:45:c4:b8:17:8f:b9:
49:d2:de:c2:9d:3c:90:a9:63:7c:d3:78:4b:ee:cb:
3c:b8:33:e4:eb:5a:c1:5e:3f:47:6e:74:43:ef:69:
87:4b:c7:71:8d:7d:7d:3c:4c:0e:56:ec:64:43:3f:
c1:0e:94:53:e4:c9:1d:a8:37:f8:7d:90:51:89:8f:
38:0c:f1:fc:b4:a9:0e:de:62:7c:d2:4d:d2:fe:31:
2f:a1:d1:45:98:50:d2:28:7b:5c:a0:5c:e0:0f:10:
27:d5:97:61:2c:46:fe:78:f6:37:2f:bb:ed:cb:f4:
d6:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:85:5C:DA:61:1E:89:28:7B:D0:1F:D1:1B:60:1E:08:1F:D5:D4:EB
X509v3 Authority Key Identifier:
keyid:74:5F:F4:F0:63:AB:5D:17:1E:05:25:1B:31:E2:94:A4:BC:79:73:B1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915E475/DA83AA7ACA1111EAA479C734C4F9AE02/dF_08GOrXRceBSUbMeKUpLx5c7E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dF_08GOrXRceBSUbMeKUpLx5c7E.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915E475/DA83AA7ACA1111EAA479C734C4F9AE02/55124B02F3C511EFAD4ACE37C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
27.122.112.0/20
36.255.112.0/22
43.245.152.0/22
45.113.92.0/22
45.118.64.0/22
103.1.52.0/22
103.7.48.0/22
103.21.0.0/22
103.25.180.0/22
103.28.160.0/24
103.29.86.0/23
103.42.226.0/23
103.192.192.0/22
103.200.13.0-103.200.15.255
103.224.49.0/24
103.224.52.0/23
103.237.16.0/22
103.248.16.0/22
111.118.192.0/21
114.129.184.0/21
115.70.64.0/21
115.186.192.0/18
116.255.0.0/18
119.15.72.0/21
119.40.104.0/21
122.199.0.0/18
123.176.112.0/21
125.63.0.0/19
125.253.0.0/18
125.253.96.0/20
163.47.68.0/22
163.53.144.0/22
202.63.64.0/20
202.65.64.0/19
202.70.129.0/24
202.80.144.0/21
202.86.112.0/24
202.86.119.0/24
202.90.206.0/23
202.130.192.0-202.130.194.255
202.130.196.0-202.130.202.255
202.130.204.0/24
202.130.207.0-202.130.213.255
202.130.215.0-202.130.216.255
202.130.218.0-202.130.223.255
202.137.160.0/20
202.144.160.0/20
202.169.96.0/19
202.171.160.0/19
202.177.40.0/22
203.10.77.0/24
203.14.230.0/24
203.24.182.0/24
203.25.102.0/24
203.27.116.0/24
203.32.82.0/24
203.33.254.0/24
203.123.96.0/19
203.132.64.0/19
203.153.16.0/22
203.189.4.0/24
210.5.32.0/21
220.233.4.0-220.233.11.255
220.233.36.0/22
220.233.44.0/22
223.27.64.0/22
IPv6:
2401:d000::/28
2404:c600::/32
Signature Algorithm: sha256WithRSAEncryption
75:26:e0:a6:6e:96:68:d1:1d:4c:5e:1c:f7:84:47:de:d3:06:
5e:58:44:84:9c:b5:ce:91:40:fe:1f:f2:cf:e5:9a:26:65:0d:
4d:34:c7:18:69:88:ce:11:be:9c:e8:b0:2f:85:dc:a5:b4:37:
49:57:7d:c4:42:c2:69:70:38:c7:82:44:87:5b:a5:75:b3:b3:
9b:cf:48:63:89:46:6b:a9:18:8f:31:0b:0a:d5:37:b0:f9:e3:
64:60:c0:75:1e:80:2d:75:6c:78:03:31:cb:3b:66:6c:1e:c0:
9f:32:1f:ed:da:2b:79:ec:da:4f:28:35:24:99:0b:dc:c3:39:
82:61:2c:33:b2:39:9b:c8:a0:c2:7a:be:60:4c:36:d1:05:b6:
cf:79:50:98:07:5b:b5:90:90:7d:51:7e:a4:08:dc:8a:99:73:
76:67:4e:3f:0f:a6:62:5a:26:eb:eb:4c:5e:9e:c6:59:db:7f:
f6:ca:6d:df:16:06:14:67:3d:0c:be:3b:4c:77:a0:dc:f2:b7:
0a:56:2d:fc:bd:b3:d4:b6:46:75:5e:12:8e:24:ec:8c:eb:c7:
b0:b3:eb:1e:49:0f:e3:ce:05:09:f9:15:f0:5c:a9:a8:1e:f5:
b0:38:f2:b3:16:12:e1:1d:9e:31:7d:d1:f3:4b:7a:9d:1d:dc:
3e:ef:e8:e0
-----BEGIN CERTIFICATE-----
MIIHTzCCBjegAwIBAgICCiYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NUU0NzUxMTAvBgNVBAUTKDc0NUZGNEYwNjNBQjVEMTcxRTA1MjUxQjMxRTI5NEE0
QkM3OTczQjEwHhcNMjUwNTE1MDQxMjIyWhcNMjUxMjMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02ODI1NjlhNS0zOWY5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAudxuUrRscWYtTvGl8WanA38y+AMWQ1jaF02SQQWli0aMknjrqwmv3XRGhEJw
iTRDTiamDHnhyHNJQoXVpRyg9O4mJpreqdg5BQXgbLJdWakv7xxMOxz9g580Wqmc
/oztpY4oXoWXKPW0PRDW8ecwW/NE4jfN2X3wVyjdAKtm2LuP7F0rqyRhmcV+NhYD
ljVFxLgXj7lJ0t7CnTyQqWN803hL7ss8uDPk61rBXj9HbnRD72mHS8dxjX19PEwO
VuxkQz/BDpRT5MkdqDf4fZBRiY84DPH8tKkO3mJ80k3S/jEvodFFmFDSKHtcoFzg
DxAn1ZdhLEb+ePY3L7vty/TW7wIDAQABo4IEczCCBG8wHQYDVR0OBBYEFEuFXNph
Hokoe9Af0RtgHggf1dTrMB8GA1UdIwQYMBaAFHRf9PBjq10XHgUlGzHilKS8eXOx
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1RTQ3NS9EQTgzQUE3QUNB
MTExMUVBQTQ3OUM3MzRDNEY5QUUwMi9kRl8wOEdPclhSY2VCU1ViTWVLVXBMeDVj
N0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2RGXzA4R09yWFJjZUJTVWJNZUtVcEx4NWM3RS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
NUU0NzUvREE4M0FBN0FDQTExMTFFQUE0NzlDNzM0QzRGOUFFMDIvNTUxMjRCMDJG
M0M1MTFFRkFENEFDRTM3QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwggH7BggrBgEFBQcBBwEB
/wSCAeowggHmMIIBzAQCAAEwggHEAwQEG3pwAwQCJP9wAwQCK/WYAwQCLXFcAwQC
LXZAAwQCZwE0AwQCZwcwAwQCZxUAAwQCZxm0AwQAZxygAwQBZx1WAwQBZyriAwQC
Z8DAMAwDBABnyA0DBARnyAADBABn4DEDBAFn4DQDBAJn7RADBAJn+BADBANvdsAD
BANygbgDBANzRkADBAZzusADBAZ0/wADBAN3D0gDBAN3KGgDBAZ6xwADBAN7sHAD
BAV9PwADBAZ9/QADBAR9/WADBAKjL0QDBAKjNZADBATKP0ADBAXKQUADBADKRoED
BAPKUJADBADKVnADBADKVncDBAHKWs4wDAMEBsqCwAMEAMqCwjAMAwQCyoLEAwQA
yoLKAwQAyoLMMAwDBADKgs8DBAHKgtQwDAMEAMqC1wMEAMqC2DAMAwQByoLaAwQF
yoLAAwQEyomgAwQEypCgAwQFyqlgAwQFyqugAwQCyrEoAwQAywpNAwQAyw7mAwQA
yxi2AwQAyxlmAwQAyxt0AwQAyyBSAwQAyyH+AwQFy3tgAwQFy4RAAwQCy5kQAwQA
y70EAwQD0gUgMAwDBALc6QQDBALc6QgDBALc6SQDBALc6SwDBALfG0AwFAQCAAIw
DgMFBCQB0AADBQAkBMYAMA0GCSqGSIb3DQEBCwUAA4IBAQB1JuCmbpZo0R1MXhz3
hEfe0wZeWESEnLXOkUD+H/LP5ZomZQ1NNMcYaYjOEb6c6LAvhdyltDdJV33EQsJp
cDjHgkSHW6V1s7Obz0hjiUZrqRiPMQsK1Tew+eNkYMB1HoAtdWx4AzHLO2ZsHsCf
Mh/t2it57NpPKDUkmQvcwzmCYSwzsjmbyKDCer5gTDbRBbbPeVCYB1u1kJB9UX6k
CNyKmXN2Z04/D6ZiWibr60xensZZ23/2ym3fFgYUZz0MvjtMd6Dc8rcKVi38vbPU
tkZ1XhKOJOyM68ews+seSQ/jzgUJ+RXwXKmoHvWwOPKzFhLhHZ4xfdHzS3qdHdw+
7+jg
-----END CERTIFICATE-----
Generated at Tue Jun 3 23:51:03 2025 by rpki-client