Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91733A8/14202384A1B411EAAF2E630FC4F9AE02/F6810AC0D0DC11EA9B1DF432C4F9AE02.roa
File: F6810AC0D0DC11EA9B1DF432C4F9AE02.roa (raw, json)
Hash identifier: oV5Kg/s7awHZvzZpO+JQXAELEp1giTzDedBNhKwTbhM=
Subject key identifier: 54:2A:5B:6A:03:78:AA:CC:74:9E:09:69:BD:4F:00:BC:08:F0:B6:11
Certificate issuer: /CN=A91733A8/serialNumber=8DC66A64753643B0E70FB9B2BD4009CBEC705441
Certificate serial: 095B
Authority key identifier: 8D:C6:6A:64:75:36:43:B0:E7:0F:B9:B2:BD:40:09:CB:EC:70:54:41
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jcZqZHU2Q7DnD7myvUAJy-xwVEE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91733A8/14202384A1B411EAAF2E630FC4F9AE02/F6810AC0D0DC11EA9B1DF432C4F9AE02.roa
Signing time: Thu 22 May 2025 20:09:50 +0000
ROA not before: Thu 22 May 2025 20:09:50 +0000
ROA not after: Thu 30 Jul 2026 00:00:00 +0000
asID: 9260
IP address blocks: 43.245.204.0/24 maxlen: 24
43.245.205.0/24 maxlen: 24
43.245.206.0/24 maxlen: 24
43.245.207.0/24 maxlen: 24
103.31.80.0/22 maxlen: 22
103.31.80.0/23 maxlen: 24
103.31.82.0/24 maxlen: 24
103.31.83.0/24 maxlen: 24
125.209.64.0/18 maxlen: 18
125.209.64.0/24 maxlen: 24
125.209.65.0/24 maxlen: 24
125.209.66.0/24 maxlen: 24
125.209.67.0/24 maxlen: 24
125.209.68.0/24 maxlen: 24
125.209.69.0/24 maxlen: 24
125.209.70.0/24 maxlen: 24
125.209.71.0/24 maxlen: 24
125.209.72.0/24 maxlen: 24
125.209.73.0/24 maxlen: 24
125.209.74.0/24 maxlen: 24
125.209.75.0/24 maxlen: 24
125.209.76.0/24 maxlen: 24
125.209.77.0/24 maxlen: 24
125.209.78.0/24 maxlen: 24
125.209.79.0/24 maxlen: 24
125.209.80.0/24 maxlen: 24
125.209.81.0/24 maxlen: 24
125.209.82.0/24 maxlen: 24
125.209.83.0/24 maxlen: 24
125.209.84.0/24 maxlen: 24
125.209.85.0/24 maxlen: 24
125.209.86.0/24 maxlen: 24
125.209.87.0/24 maxlen: 24
125.209.88.0/24 maxlen: 24
125.209.89.0/24 maxlen: 24
125.209.90.0/24 maxlen: 24
125.209.91.0/24 maxlen: 24
125.209.92.0/24 maxlen: 24
125.209.93.0/24 maxlen: 24
125.209.94.0/24 maxlen: 24
125.209.95.0/24 maxlen: 24
125.209.96.0/24 maxlen: 24
125.209.97.0/24 maxlen: 24
125.209.98.0/24 maxlen: 24
125.209.99.0/24 maxlen: 24
125.209.100.0/24 maxlen: 24
125.209.101.0/24 maxlen: 24
125.209.102.0/24 maxlen: 24
125.209.103.0/24 maxlen: 24
125.209.104.0/24 maxlen: 24
125.209.105.0/24 maxlen: 24
125.209.106.0/24 maxlen: 24
125.209.107.0/24 maxlen: 24
125.209.108.0/24 maxlen: 24
125.209.109.0/24 maxlen: 24
125.209.110.0/24 maxlen: 24
125.209.111.0/24 maxlen: 24
125.209.112.0/24 maxlen: 24
125.209.113.0/24 maxlen: 24
125.209.114.0/24 maxlen: 24
125.209.115.0/24 maxlen: 24
125.209.116.0/24 maxlen: 24
125.209.117.0/24 maxlen: 24
125.209.118.0/24 maxlen: 24
125.209.119.0/24 maxlen: 24
125.209.120.0/21 maxlen: 21
125.209.120.0/24 maxlen: 24
125.209.121.0/24 maxlen: 24
125.209.122.0/24 maxlen: 24
125.209.123.0/24 maxlen: 24
125.209.124.0/24 maxlen: 24
125.209.125.0/24 maxlen: 24
125.209.126.0/24 maxlen: 24
125.209.127.0/24 maxlen: 24
202.141.224.0/19 maxlen: 19
202.141.224.0/20 maxlen: 20
202.141.224.0/21 maxlen: 21
202.141.224.0/22 maxlen: 24
202.141.228.0/24 maxlen: 24
202.141.229.0/24 maxlen: 24
202.141.231.0/24 maxlen: 24
202.141.232.0/24 maxlen: 24
202.141.233.0/24 maxlen: 24
202.141.234.0/24 maxlen: 24
202.141.235.0/24 maxlen: 24
202.141.237.0/24 maxlen: 24
202.141.238.0/24 maxlen: 24
202.141.239.0/24 maxlen: 24
202.141.240.0/24 maxlen: 24
202.141.241.0/24 maxlen: 24
202.141.242.0/24 maxlen: 24
202.141.243.0/24 maxlen: 24
202.141.245.0/24 maxlen: 24
202.141.246.0/24 maxlen: 24
202.141.247.0/24 maxlen: 24
202.141.248.0/24 maxlen: 24
202.141.249.0/24 maxlen: 24
202.141.250.0/24 maxlen: 24
202.141.251.0/24 maxlen: 24
202.141.252.0/24 maxlen: 24
202.141.253.0/24 maxlen: 24
202.141.254.0/24 maxlen: 24
202.141.255.0/24 maxlen: 24
202.142.160.0/19 maxlen: 19
202.142.160.0/21 maxlen: 21
202.142.160.0/24 maxlen: 24
202.142.161.0/24 maxlen: 24
202.142.162.0/24 maxlen: 24
202.142.163.0/24 maxlen: 24
202.142.164.0/24 maxlen: 24
202.142.165.0/24 maxlen: 24
202.142.166.0/24 maxlen: 24
202.142.167.0/24 maxlen: 24
202.142.168.0/24 maxlen: 24
202.142.169.0/24 maxlen: 24
202.142.170.0/24 maxlen: 24
202.142.171.0/24 maxlen: 24
202.142.172.0/24 maxlen: 24
202.142.173.0/24 maxlen: 24
202.142.174.0/24 maxlen: 24
202.142.175.0/24 maxlen: 24
202.142.176.0/24 maxlen: 24
202.142.177.0/24 maxlen: 24
202.142.178.0/24 maxlen: 24
202.142.179.0/24 maxlen: 24
202.142.180.0/24 maxlen: 24
202.142.181.0/24 maxlen: 24
202.142.182.0/24 maxlen: 24
202.142.183.0/24 maxlen: 24
202.142.184.0/24 maxlen: 24
202.142.185.0/24 maxlen: 24
202.142.186.0/24 maxlen: 24
202.142.187.0/24 maxlen: 24
202.142.188.0/24 maxlen: 24
202.142.189.0/24 maxlen: 24
202.142.190.0/24 maxlen: 24
202.142.191.0/24 maxlen: 24
2401:8e00::/32 maxlen: 32
2401:8e00:800::/48 maxlen: 48
2401:8e00:2000::/38 maxlen: 38
2401:8e00:2400::/38 maxlen: 38
2401:8e00:2800::/48 maxlen: 48
2401:8e00:3400::/38 maxlen: 38
2401:8e00:4000::/36 maxlen: 36
2401:8e00:4000::/38 maxlen: 38
2401:8e00:4004::/48 maxlen: 48
2401:8e00:400f::/48 maxlen: 48
2401:8e00:5000::/36 maxlen: 36
2401:8e00:6000::/36 maxlen: 36
2401:8e00:7000::/36 maxlen: 36
2401:8e00:8000::/48 maxlen: 48
2401:8e00:8004::/48 maxlen: 48
2401:8e00:9000::/40 maxlen: 40
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91733A8/14202384A1B411EAAF2E630FC4F9AE02/jcZqZHU2Q7DnD7myvUAJy-xwVEE.crl
rsync://rpki.apnic.net/member_repository/A91733A8/14202384A1B411EAAF2E630FC4F9AE02/jcZqZHU2Q7DnD7myvUAJy-xwVEE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jcZqZHU2Q7DnD7myvUAJy-xwVEE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Jun 2025 20:26:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2395 (0x95b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91733A8, serialNumber=8DC66A64753643B0E70FB9B2BD4009CBEC705441
Validity
Not Before: May 22 20:09:50 2025 GMT
Not After : Jul 30 00:00:00 2026 GMT
Subject: CN=682f848e-009f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:93:ad:ad:5f:05:c6:2a:3d:0a:95:8f:ff:00:
f5:9d:b2:b2:3c:a5:06:a2:52:97:0b:d6:c9:ce:e7:
b0:9d:50:fb:0f:95:43:a1:58:51:0d:c8:c5:60:37:
53:30:65:03:31:59:ef:c6:83:9c:6b:3b:50:7d:07:
3a:7b:6c:c7:2f:7c:04:c4:39:af:54:f9:8f:be:1f:
1f:02:b6:c0:c3:55:e0:a5:d9:34:97:8c:9c:5a:37:
60:de:8a:36:ac:99:e0:35:79:ad:a5:a9:c1:dd:69:
15:e9:d5:ec:14:d3:75:c5:40:8c:19:6f:13:67:1c:
1b:b5:4e:9a:08:17:20:bd:cb:df:bc:a7:82:ec:98:
c2:a8:69:6a:40:ee:9d:41:a7:4a:fa:c0:ea:d0:0f:
a1:5e:5d:3c:d5:1c:b8:bc:c8:d5:b0:b2:e2:d3:74:
d6:13:05:82:2a:67:d6:fe:97:d2:66:b1:02:ce:7b:
ee:c4:3f:be:28:ce:1e:54:e7:1c:3f:3e:17:f9:69:
b4:02:34:6c:4c:a4:53:19:45:15:41:5c:07:e3:77:
0f:09:f6:e8:c6:55:2c:65:c3:8a:25:81:3e:a7:6f:
ed:56:87:10:93:2e:de:29:57:56:24:da:96:d9:5b:
08:ac:b7:39:07:52:4f:b5:1b:e4:8c:ba:2b:ef:cc:
95:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:2A:5B:6A:03:78:AA:CC:74:9E:09:69:BD:4F:00:BC:08:F0:B6:11
X509v3 Authority Key Identifier:
keyid:8D:C6:6A:64:75:36:43:B0:E7:0F:B9:B2:BD:40:09:CB:EC:70:54:41
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91733A8/14202384A1B411EAAF2E630FC4F9AE02/jcZqZHU2Q7DnD7myvUAJy-xwVEE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jcZqZHU2Q7DnD7myvUAJy-xwVEE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91733A8/14202384A1B411EAAF2E630FC4F9AE02/F6810AC0D0DC11EA9B1DF432C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
43.245.204.0/22
103.31.80.0/22
125.209.64.0/18
202.141.224.0/19
202.142.160.0/19
IPv6:
2401:8e00::/32
Signature Algorithm: sha256WithRSAEncryption
27:6b:d9:29:39:dc:af:02:d7:0b:53:e5:1b:88:12:8b:a5:94:
87:75:ce:d4:81:50:42:43:60:3d:58:0c:0a:e9:0c:36:3f:4c:
67:a8:0b:cd:e5:e2:30:f1:43:da:d2:b1:15:b8:44:d5:3f:ce:
4d:41:12:82:ff:21:02:80:69:cc:32:35:9b:42:17:19:92:9b:
d3:a8:14:79:32:2a:23:c3:5d:a4:c5:16:c3:36:a8:9a:c4:ea:
2a:19:f0:cf:bb:85:40:0d:64:2d:24:05:b4:ce:6b:c6:35:42:
13:3e:ec:40:6e:80:8e:63:b7:cb:46:10:e2:5b:31:af:91:1a:
d3:0c:76:a9:b6:9a:14:ca:ff:30:d1:e7:aa:2c:7a:27:cc:75:
fe:c4:67:49:c3:58:e3:bf:48:d4:c1:d7:43:2f:3b:c9:b3:04:
a4:e8:c6:4b:c7:93:be:de:45:60:ec:97:c1:1d:22:3a:56:83:
bd:19:17:a2:6a:03:f6:22:c4:aa:bd:88:e1:4f:d1:82:53:7c:
75:e0:02:6d:2b:ea:0a:08:76:29:b4:0c:ce:49:53:d6:74:fb:
34:17:3c:6d:c7:b9:e5:f3:a6:c1:8b:f6:21:e2:2c:33:80:30:
b9:7e:ff:89:29:f6:b0:26:cf:07:2c:ce:77:11:cf:c6:d4:a5:
04:90:79:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 4 00:10:56 2025 by rpki-client