Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9186214/C65D5364331A11E4AF2AB37CC4F9AE02/4848A8C83A0411F086BFFE49C4F9AE02.roa
File: 4848A8C83A0411F086BFFE49C4F9AE02.roa (raw, json)
Hash identifier: LNw5+sLJw93Ljk8pAD7eW1mz96SP+WRWVowhApelsQA=
Subject key identifier: 40:D9:05:CD:46:95:5A:16:FA:96:6E:71:23:1C:DA:7A:D1:E5:66:F0
Certificate issuer: /CN=A9186214/serialNumber=F3DB9F162008BD666CBF8C99607814CFAB24D7E7
Certificate serial: 35FF
Authority key identifier: F3:DB:9F:16:20:08:BD:66:6C:BF:8C:99:60:78:14:CF:AB:24:D7:E7
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/89ufFiAIvWZsv4yZYHgUz6sk1-c.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9186214/C65D5364331A11E4AF2AB37CC4F9AE02/4848A8C83A0411F086BFFE49C4F9AE02.roa
Signing time: Mon 26 May 2025 07:37:32 +0000
ROA not before: Mon 26 May 2025 07:37:32 +0000
ROA not after: Sun 31 Aug 2025 00:00:00 +0000
asID: 4787
IP address blocks: 45.126.80.0/22 maxlen: 22
101.50.16.0/21 maxlen: 21
101.50.16.0/24 maxlen: 24
101.50.24.0/21 maxlen: 21
101.50.24.0/24 maxlen: 24
101.128.64.0/18 maxlen: 24
103.61.248.0/22 maxlen: 22
103.86.148.0/22 maxlen: 22
103.86.148.0/23 maxlen: 23
103.86.149.0/24 maxlen: 24
103.86.150.0/23 maxlen: 23
103.86.150.0/24 maxlen: 24
103.86.152.0/22 maxlen: 22
103.86.152.0/24 maxlen: 24
103.86.156.0/22 maxlen: 22
103.86.156.0/24 maxlen: 24
103.86.160.0/22 maxlen: 22
103.87.76.0/22 maxlen: 22
103.87.76.0/24 maxlen: 24
103.87.80.0/22 maxlen: 22
103.87.80.0/24 maxlen: 24
103.87.84.0/22 maxlen: 22
103.87.84.0/24 maxlen: 24
103.87.152.0/22 maxlen: 22
103.87.152.0/24 maxlen: 24
103.109.152.0/22 maxlen: 22
103.109.152.0/24 maxlen: 24
103.109.156.0/22 maxlen: 22
103.109.156.0/24 maxlen: 24
103.109.160.0/22 maxlen: 22
103.109.160.0/24 maxlen: 24
103.109.164.0/22 maxlen: 22
103.109.164.0/24 maxlen: 24
103.109.168.0/22 maxlen: 22
103.109.168.0/24 maxlen: 24
103.109.188.0/22 maxlen: 22
103.109.188.0/24 maxlen: 24
103.109.192.0/22 maxlen: 22
103.109.192.0/24 maxlen: 24
103.109.196.0/22 maxlen: 22
103.109.196.0/24 maxlen: 24
103.109.200.0/22 maxlen: 22
103.109.200.0/24 maxlen: 24
103.111.184.0/22 maxlen: 22
103.111.184.0/24 maxlen: 24
103.111.188.0/22 maxlen: 22
103.111.188.0/24 maxlen: 24
103.111.200.0/22 maxlen: 22
103.111.200.0/24 maxlen: 24
103.111.204.0/22 maxlen: 22
103.111.204.0/24 maxlen: 24
103.111.208.0/22 maxlen: 22
103.111.208.0/24 maxlen: 24
103.111.212.0/22 maxlen: 22
103.111.212.0/24 maxlen: 24
103.113.48.0/22 maxlen: 22
103.113.48.0/24 maxlen: 24
103.113.52.0/22 maxlen: 22
103.113.52.0/24 maxlen: 24
103.113.72.0/22 maxlen: 22
103.113.72.0/24 maxlen: 24
103.113.76.0/22 maxlen: 22
103.113.76.0/24 maxlen: 24
103.113.116.0/22 maxlen: 22
103.113.116.0/24 maxlen: 24
103.113.120.0/22 maxlen: 22
103.113.120.0/24 maxlen: 24
103.113.128.0/22 maxlen: 22
103.113.128.0/24 maxlen: 24
103.113.132.0/22 maxlen: 22
103.113.132.0/24 maxlen: 24
103.114.80.0/22 maxlen: 22
103.114.80.0/24 maxlen: 24
103.114.84.0/22 maxlen: 22
103.114.84.0/24 maxlen: 24
103.114.108.0/22 maxlen: 22
103.114.108.0/24 maxlen: 24
103.114.112.0/22 maxlen: 22
103.114.112.0/24 maxlen: 24
103.114.116.0/22 maxlen: 22
103.114.116.0/24 maxlen: 24
103.114.120.0/22 maxlen: 22
103.114.120.0/24 maxlen: 24
103.114.136.0/22 maxlen: 22
103.114.136.0/24 maxlen: 24
103.114.140.0/22 maxlen: 22
103.118.96.0/22 maxlen: 22
103.118.96.0/24 maxlen: 24
103.118.100.0/22 maxlen: 22
103.118.100.0/24 maxlen: 24
103.118.104.0/22 maxlen: 22
103.118.104.0/24 maxlen: 24
103.118.108.0/22 maxlen: 22
103.118.108.0/24 maxlen: 24
103.118.128.0/22 maxlen: 22
103.118.128.0/24 maxlen: 24
103.118.132.0/22 maxlen: 22
103.118.132.0/24 maxlen: 24
103.118.136.0/22 maxlen: 22
103.118.136.0/24 maxlen: 24
103.118.140.0/22 maxlen: 22
103.118.140.0/24 maxlen: 24
103.118.224.0/22 maxlen: 22
103.118.224.0/24 maxlen: 24
103.118.228.0/22 maxlen: 22
103.118.228.0/24 maxlen: 24
103.118.232.0/22 maxlen: 22
103.118.232.0/24 maxlen: 24
103.118.236.0/22 maxlen: 22
103.118.236.0/24 maxlen: 24
103.119.4.0/22 maxlen: 22
103.119.4.0/24 maxlen: 24
103.119.8.0/22 maxlen: 22
103.119.8.0/24 maxlen: 24
103.119.36.0/22 maxlen: 22
103.119.36.0/24 maxlen: 24
103.119.40.0/22 maxlen: 22
103.119.40.0/24 maxlen: 24
103.121.96.0/22 maxlen: 22
103.121.96.0/24 maxlen: 24
103.121.100.0/22 maxlen: 22
103.121.100.0/24 maxlen: 24
103.121.108.0/22 maxlen: 22
103.121.108.0/24 maxlen: 24
103.121.132.0/22 maxlen: 22
103.121.132.0/24 maxlen: 24
103.121.136.0/22 maxlen: 22
103.121.136.0/24 maxlen: 24
103.121.144.0/22 maxlen: 22
103.121.144.0/24 maxlen: 24
103.121.168.0/22 maxlen: 22
103.121.168.0/24 maxlen: 24
103.121.180.0/22 maxlen: 22
103.121.180.0/24 maxlen: 24
103.121.244.0/22 maxlen: 22
103.121.244.0/24 maxlen: 24
103.129.4.0/22 maxlen: 22
103.129.4.0/24 maxlen: 24
103.129.20.0/22 maxlen: 22
103.129.20.0/24 maxlen: 24
103.129.24.0/22 maxlen: 22
103.129.24.0/24 maxlen: 24
103.129.40.0/22 maxlen: 22
103.129.40.0/24 maxlen: 24
103.129.48.0/22 maxlen: 22
103.129.48.0/24 maxlen: 24
103.129.56.0/22 maxlen: 22
103.129.56.0/24 maxlen: 24
103.129.68.0/22 maxlen: 22
103.129.68.0/24 maxlen: 24
116.206.232.0/22 maxlen: 22
116.206.232.0/24 maxlen: 24
116.206.236.0/22 maxlen: 22
116.206.236.0/24 maxlen: 24
116.206.240.0/22 maxlen: 22
116.206.240.0/24 maxlen: 24
125.208.128.0/18 maxlen: 18
175.158.32.0/19 maxlen: 19
175.158.32.0/21 maxlen: 21
175.158.32.0/22 maxlen: 22
175.158.32.0/24 maxlen: 24
202.158.0.0/17 maxlen: 17
210.210.128.0/18 maxlen: 24
2001:d10::/48 maxlen: 48
2403:3440::/32 maxlen: 32
2403:3440::/48 maxlen: 48
2403:34c0::/32 maxlen: 32
2403:34c0::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9186214/C65D5364331A11E4AF2AB37CC4F9AE02/89ufFiAIvWZsv4yZYHgUz6sk1-c.crl
rsync://rpki.apnic.net/member_repository/A9186214/C65D5364331A11E4AF2AB37CC4F9AE02/89ufFiAIvWZsv4yZYHgUz6sk1-c.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/89ufFiAIvWZsv4yZYHgUz6sk1-c.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Jun 2025 15:44:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13823 (0x35ff)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9186214, serialNumber=F3DB9F162008BD666CBF8C99607814CFAB24D7E7
Validity
Not Before: May 26 07:37:32 2025 GMT
Not After : Aug 31 00:00:00 2025 GMT
Subject: CN=68341a3b-0f15
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:45:88:2a:89:4e:89:27:ac:96:a4:51:da:2b:
43:85:e2:df:aa:83:2b:40:9a:37:fb:7c:d3:7a:71:
ef:42:a9:67:d8:9f:6f:55:73:1d:7b:ed:76:bf:be:
26:07:1a:03:85:80:b8:33:af:f5:22:48:d5:05:ed:
82:f2:6d:0e:c5:e1:d6:6d:b7:03:ee:00:b5:29:f3:
a7:7b:57:86:72:75:34:8c:68:4f:32:54:11:7c:87:
df:ba:73:42:a9:0f:66:9f:77:1a:8b:c9:20:34:89:
93:54:13:dc:a5:e4:ed:3a:06:57:f5:a1:de:62:2f:
05:eb:98:45:d2:81:2d:ea:9f:b4:ad:16:fd:e5:c8:
2b:40:75:da:c0:f7:3c:af:43:04:f0:74:36:54:ad:
09:95:83:b7:a8:ca:ef:a2:b0:1c:19:a8:9a:4c:04:
64:55:94:29:64:ce:93:1e:ce:54:d2:7e:05:36:14:
2c:d1:d3:61:33:75:32:25:60:43:90:4a:83:b3:2b:
8a:4b:bc:a2:31:5e:ac:b7:62:7a:ff:00:52:76:3d:
6b:6b:d1:68:a9:29:97:d8:d4:62:3c:1f:4e:b6:a7:
a8:47:5d:58:7d:d7:10:d8:8b:72:50:08:e8:92:ae:
74:02:ea:e7:ec:67:6a:05:c1:2b:42:2a:02:87:e6:
04:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:D9:05:CD:46:95:5A:16:FA:96:6E:71:23:1C:DA:7A:D1:E5:66:F0
X509v3 Authority Key Identifier:
keyid:F3:DB:9F:16:20:08:BD:66:6C:BF:8C:99:60:78:14:CF:AB:24:D7:E7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9186214/C65D5364331A11E4AF2AB37CC4F9AE02/89ufFiAIvWZsv4yZYHgUz6sk1-c.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/89ufFiAIvWZsv4yZYHgUz6sk1-c.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9186214/C65D5364331A11E4AF2AB37CC4F9AE02/4848A8C83A0411F086BFFE49C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.126.80.0/22
101.50.16.0/20
101.128.64.0/18
103.61.248.0/22
103.86.148.0-103.86.163.255
103.87.76.0-103.87.87.255
103.87.152.0/22
103.109.152.0-103.109.171.255
103.109.188.0-103.109.203.255
103.111.184.0/21
103.111.200.0-103.111.215.255
103.113.48.0/21
103.113.72.0/21
103.113.116.0-103.113.123.255
103.113.128.0/21
103.114.80.0/21
103.114.108.0-103.114.123.255
103.114.136.0/21
103.118.96.0/20
103.118.128.0/20
103.118.224.0/20
103.119.4.0-103.119.11.255
103.119.36.0-103.119.43.255
103.121.96.0/21
103.121.108.0/22
103.121.132.0-103.121.139.255
103.121.144.0/22
103.121.168.0/22
103.121.180.0/22
103.121.244.0/22
103.129.4.0/22
103.129.20.0-103.129.27.255
103.129.40.0/22
103.129.48.0/22
103.129.56.0/22
103.129.68.0/22
116.206.232.0-116.206.243.255
125.208.128.0/18
175.158.32.0/19
202.158.0.0/17
210.210.128.0/18
IPv6:
2001:d10::/48
2403:3440::/32
2403:34c0::/32
Signature Algorithm: sha256WithRSAEncryption
2f:22:ff:77:6d:68:ef:53:05:8a:ba:61:26:5b:52:b2:84:48:
c2:d7:0a:31:28:67:82:52:95:9f:07:63:3b:df:24:d7:36:3d:
bd:12:66:18:2e:c6:ea:d4:dc:1b:86:f8:3f:63:ef:3a:9a:8b:
2f:02:96:70:33:7a:0c:3a:7e:78:4c:93:a6:b3:1e:53:91:36:
05:4e:03:ae:15:bb:cc:ec:47:5c:18:41:75:0d:48:dd:99:93:
d9:65:6f:06:ae:50:e4:0e:0a:f2:c6:e5:03:bb:34:f8:09:36:
98:82:6e:ac:08:88:14:6b:81:f2:e1:1c:f8:c4:81:6b:73:d4:
5e:4e:91:eb:e8:f9:df:d4:2f:c0:80:d5:75:ab:4b:58:9c:e2:
ab:c1:67:51:3f:8a:f8:47:a6:26:f6:57:64:82:ef:f7:9a:2b:
c4:5c:03:28:d3:a2:36:76:c6:89:d3:88:b1:93:6d:5a:7b:c5:
08:c4:8a:e1:36:c5:ac:24:45:38:32:dc:82:82:2a:6e:30:b3:
09:89:dc:a7:f8:e5:0d:b7:20:71:cb:29:a7:6e:89:7e:5e:78:
fc:eb:40:8d:01:8a:69:61:99:e4:10:58:6a:db:a9:40:37:65:
e4:09:fe:40:ef:4e:fa:ee:9d:42:73:0a:6e:2c:4d:ec:03:3c:
93:5e:19:70
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Tue Jun 3 23:20:51 2025 by rpki-client