Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91733A8/14202384A1B411EAAF2E630FC4F9AE02/E3A38380A1C811EA8C425C58C4F9AE02.roa
File: E3A38380A1C811EA8C425C58C4F9AE02.roa (raw, json)
Hash identifier: 5iCZA8jYlZk3gHKxMQWGtU7Eku76azBHbjf03/KNSIU=
Subject key identifier: FA:A6:1B:A8:96:33:BA:C8:7E:B3:D6:0F:EB:53:92:33:56:5D:C9:BC
Certificate issuer: /CN=A91733A8/serialNumber=8DC66A64753643B0E70FB9B2BD4009CBEC705441
Certificate serial: 095A
Authority key identifier: 8D:C6:6A:64:75:36:43:B0:E7:0F:B9:B2:BD:40:09:CB:EC:70:54:41
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jcZqZHU2Q7DnD7myvUAJy-xwVEE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91733A8/14202384A1B411EAAF2E630FC4F9AE02/E3A38380A1C811EA8C425C58C4F9AE02.roa
Signing time: Thu 22 May 2025 20:09:49 +0000
ROA not before: Thu 22 May 2025 20:09:49 +0000
ROA not after: Thu 30 Jul 2026 00:00:00 +0000
asID: 135523
IP address blocks: 125.209.66.0/24 maxlen: 24
125.209.69.0/24 maxlen: 24
125.209.71.0/24 maxlen: 24
125.209.72.0/24 maxlen: 24
125.209.81.0/24 maxlen: 24
125.209.83.0/24 maxlen: 24
125.209.84.0/24 maxlen: 24
125.209.90.0/24 maxlen: 24
125.209.92.0/24 maxlen: 24
125.209.93.0/24 maxlen: 24
125.209.117.0/24 maxlen: 24
125.209.119.0/24 maxlen: 24
202.141.230.0/24 maxlen: 24
202.141.236.0/24 maxlen: 24
202.141.244.0/24 maxlen: 24
202.141.251.0/24 maxlen: 24
202.142.178.0/24 maxlen: 24
202.142.181.0/24 maxlen: 24
202.142.183.0/24 maxlen: 24
202.142.190.0/24 maxlen: 24
202.142.191.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91733A8/14202384A1B411EAAF2E630FC4F9AE02/jcZqZHU2Q7DnD7myvUAJy-xwVEE.crl
rsync://rpki.apnic.net/member_repository/A91733A8/14202384A1B411EAAF2E630FC4F9AE02/jcZqZHU2Q7DnD7myvUAJy-xwVEE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jcZqZHU2Q7DnD7myvUAJy-xwVEE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Jun 2025 20:26:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2394 (0x95a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91733A8, serialNumber=8DC66A64753643B0E70FB9B2BD4009CBEC705441
Validity
Not Before: May 22 20:09:49 2025 GMT
Not After : Jul 30 00:00:00 2026 GMT
Subject: CN=682f848c-e3a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:2f:99:6a:02:bd:35:1f:69:1b:1d:51:75:01:
57:ea:e4:93:9e:a5:ac:e0:2a:0c:d0:30:5f:32:85:
b5:a3:8f:25:0e:2f:4b:7e:d4:d2:1b:c8:33:26:ec:
f9:eb:65:76:20:cb:76:89:31:b8:80:ba:0b:e2:1a:
88:db:51:df:33:07:d8:4b:23:79:87:ca:34:03:7b:
e0:ad:74:8d:a5:55:48:87:32:e5:8e:fb:cd:35:52:
79:f2:02:fb:82:07:43:29:b7:95:48:47:80:db:0d:
4e:49:c7:40:c9:6e:31:86:a0:d7:78:f8:40:6e:dc:
ae:69:20:e9:a4:06:55:3e:ee:5b:56:af:aa:ce:6e:
f6:02:a9:f4:80:45:34:86:56:b9:b2:c9:08:69:3e:
35:92:36:86:ee:88:22:af:db:7c:03:de:1d:09:97:
ed:92:65:f2:80:c6:91:4f:e0:bf:38:d7:df:bd:f6:
95:36:6c:42:88:43:d7:76:cc:84:d9:2e:a5:c6:9a:
5a:b9:4c:90:25:62:1d:45:74:b4:b6:09:3a:15:ef:
8e:30:79:3f:50:52:8a:2a:c2:25:64:40:88:ab:f3:
58:f3:35:13:5a:b5:74:ba:1c:f4:05:c4:de:fb:5f:
ed:c0:f9:ef:6a:39:3e:a3:52:83:3d:75:f2:f6:76:
73:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:A6:1B:A8:96:33:BA:C8:7E:B3:D6:0F:EB:53:92:33:56:5D:C9:BC
X509v3 Authority Key Identifier:
keyid:8D:C6:6A:64:75:36:43:B0:E7:0F:B9:B2:BD:40:09:CB:EC:70:54:41
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91733A8/14202384A1B411EAAF2E630FC4F9AE02/jcZqZHU2Q7DnD7myvUAJy-xwVEE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jcZqZHU2Q7DnD7myvUAJy-xwVEE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91733A8/14202384A1B411EAAF2E630FC4F9AE02/E3A38380A1C811EA8C425C58C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
125.209.66.0/24
125.209.69.0/24
125.209.71.0-125.209.72.255
125.209.81.0/24
125.209.83.0-125.209.84.255
125.209.90.0/24
125.209.92.0/23
125.209.117.0/24
125.209.119.0/24
202.141.230.0/24
202.141.236.0/24
202.141.244.0/24
202.141.251.0/24
202.142.178.0/24
202.142.181.0/24
202.142.183.0/24
202.142.190.0/23
Signature Algorithm: sha256WithRSAEncryption
81:68:f8:e6:d9:9d:03:bf:82:5e:84:59:ca:d4:c8:89:b0:58:
06:39:19:e7:55:6a:8e:e3:cd:81:51:29:aa:a5:dc:af:e5:f8:
d3:2a:41:ec:bb:de:ec:70:b5:de:d3:ec:91:82:dc:86:dd:c7:
33:9d:15:9a:27:3a:05:9a:1a:7a:7d:b7:37:57:32:47:21:5e:
a6:ba:b9:8c:5a:9e:8f:fa:9b:de:8f:52:b1:1d:30:a5:98:fc:
a0:0a:1a:08:54:2f:c0:41:2f:b4:43:32:46:89:6f:c1:c5:c0:
68:d2:1e:16:02:1a:13:0b:42:ff:9d:fe:b5:95:87:2b:1b:b5:
66:3c:e0:78:35:18:b0:57:32:a3:a0:26:26:f6:90:ac:42:df:
aa:c6:17:c7:a1:d7:08:2a:a8:0e:e5:f2:5e:e8:41:af:6e:90:
d5:ab:29:b3:36:9d:ab:32:6d:73:1f:23:b3:cc:42:30:8c:9d:
4b:49:43:55:a3:bd:f8:bf:0f:4f:0d:51:d6:10:72:8e:21:ac:
5a:0e:04:0d:6d:6f:2e:e1:45:57:5b:9e:61:a1:9d:c5:36:42:
89:67:cc:fd:43:af:a4:ff:d4:30:a1:dd:4e:09:fa:16:e5:4b:
11:1b:b9:75:f7:cb:8a:fa:14:d8:c0:23:d3:08:56:d2:80:4f:
df:ec:bc:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 3 23:49:59 2025 by rpki-client