Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/0A0E2FDC406811F0A86A4F3EC4F9AE02.roa
File: 0A0E2FDC406811F0A86A4F3EC4F9AE02.roa (raw, json)
Hash identifier: ZCC6M8BBlFVCLkvOSvVznzUbQvk1NKJDpY8t1pH2ZIo=
Subject key identifier: DB:E7:11:94:ED:1B:E0:62:CA:48:71:21:B8:62:83:61:C8:BE:35:8C
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: BD9F
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/0A0E2FDC406811F0A86A4F3EC4F9AE02.roa
Signing time: Mon 09 Jun 2025 05:47:20 +0000
ROA not before: Mon 09 Jun 2025 05:47:20 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 133676
IP address blocks: 36.50.82.0/24 maxlen: 24
43.225.74.0/24 maxlen: 24
43.230.196.0/22 maxlen: 24
43.239.132.0/22 maxlen: 24
43.240.4.0/24 maxlen: 24
43.240.5.0/24 maxlen: 24
43.240.6.0/24 maxlen: 24
43.240.7.0/24 maxlen: 24
43.250.252.0/22 maxlen: 24
45.64.8.0/24 maxlen: 24
45.64.9.0/24 maxlen: 24
45.64.10.0/24 maxlen: 24
45.64.11.0/24 maxlen: 24
45.248.24.0/24 maxlen: 24
45.248.25.0/24 maxlen: 24
45.248.26.0/23 maxlen: 24
103.42.88.0/22 maxlen: 24
103.47.12.0/23 maxlen: 24
103.47.14.0/24 maxlen: 24
103.47.15.0/24 maxlen: 24
103.47.72.0/23 maxlen: 24
103.47.74.0/23 maxlen: 24
103.47.172.0/23 maxlen: 24
103.47.174.0/23 maxlen: 24
103.49.232.0/23 maxlen: 24
103.54.24.0/23 maxlen: 24
103.54.26.0/24 maxlen: 24
103.62.147.0/24 maxlen: 24
103.80.34.0/23 maxlen: 24
103.82.72.0/22 maxlen: 24
103.85.118.0/23 maxlen: 24
103.87.204.0/22 maxlen: 24
103.93.172.0/22 maxlen: 24
103.93.212.0/23 maxlen: 24
103.98.53.0/24 maxlen: 24
103.101.116.0/24 maxlen: 24
103.101.117.0/24 maxlen: 24
103.101.118.0/23 maxlen: 24
103.103.163.0/24 maxlen: 24
103.109.180.0/23 maxlen: 24
103.109.182.0/23 maxlen: 24
103.114.188.0/23 maxlen: 24
103.118.180.0/22 maxlen: 24
103.148.66.0/23 maxlen: 24
103.153.208.0/24 maxlen: 24
103.173.218.0/24 maxlen: 24
103.177.202.0/23 maxlen: 24
103.178.58.0/24 maxlen: 24
103.178.59.0/24 maxlen: 24
103.181.90.0/23 maxlen: 24
103.182.44.0/23 maxlen: 24
103.182.160.0/23 maxlen: 24
103.184.184.0/23 maxlen: 24
103.186.44.0/23 maxlen: 24
103.189.146.0/24 maxlen: 24
103.189.147.0/24 maxlen: 24
103.191.182.0/23 maxlen: 24
103.191.234.0/23 maxlen: 24
103.195.26.0/23 maxlen: 24
103.204.168.0/22 maxlen: 24
103.211.56.0/23 maxlen: 24
103.211.58.0/24 maxlen: 24
103.211.190.0/23 maxlen: 24
103.212.136.0/23 maxlen: 24
103.212.138.0/23 maxlen: 24
103.213.6.0/23 maxlen: 24
103.225.204.0/24 maxlen: 24
103.225.205.0/24 maxlen: 24
103.225.206.0/23 maxlen: 24
103.226.200.0/22 maxlen: 24
103.227.95.0/24 maxlen: 24
103.248.120.0/24 maxlen: 24
103.248.121.0/24 maxlen: 24
103.248.122.0/24 maxlen: 24
103.248.123.0/24 maxlen: 24
139.5.16.0/23 maxlen: 24
139.5.18.0/23 maxlen: 24
2405:5540::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 16 Jun 2025 04:22:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 48543 (0xbd9f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Validity
Not Before: Jun 9 05:47:20 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=68467567-99ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:55:c6:20:f6:56:26:12:9e:54:ef:31:f2:8a:
9e:65:85:af:6a:e4:b2:c6:38:27:fd:d6:ab:50:e3:
4d:69:af:7a:ce:f5:9a:62:a7:d0:4c:89:f8:6e:b9:
30:72:15:84:12:a2:ee:96:f9:9c:2f:04:80:80:29:
fe:e1:20:49:2c:24:ca:b3:b0:26:ec:f3:ad:10:e7:
6c:6b:36:57:6b:2e:f9:ad:43:87:1a:be:25:74:91:
71:38:24:c1:d1:2b:7a:12:84:38:95:19:2d:9b:6d:
f4:19:3c:94:4c:2f:af:66:a2:dd:0b:54:b6:c5:b2:
c3:36:53:fd:f5:06:99:2f:fe:c3:ad:9c:17:cf:50:
87:fe:ac:c8:84:96:c8:17:bb:3d:f1:60:43:f1:ef:
07:56:e8:36:01:c9:9b:55:18:e1:f9:fa:f5:36:a4:
1d:13:67:7b:3c:df:50:bf:39:85:ae:56:36:b4:c1:
62:bb:ee:8e:41:14:da:8d:ce:4c:3a:29:7b:70:0b:
96:98:e4:e4:3e:d0:b0:14:99:e3:2c:57:6d:f8:b8:
76:78:aa:9a:cd:02:cc:a3:fd:f2:5b:2e:04:0a:fd:
84:2f:da:57:fe:22:6c:5b:78:cb:d5:e6:11:93:1d:
00:dd:f6:11:88:af:be:15:d8:eb:81:bc:95:f4:58:
6a:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:E7:11:94:ED:1B:E0:62:CA:48:71:21:B8:62:83:61:C8:BE:35:8C
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/0A0E2FDC406811F0A86A4F3EC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
36.50.82.0/24
43.225.74.0/24
43.230.196.0/22
43.239.132.0/22
43.240.4.0/22
43.250.252.0/22
45.64.8.0/22
45.248.24.0/22
103.42.88.0/22
103.47.12.0/22
103.47.72.0/22
103.47.172.0/22
103.49.232.0/23
103.54.24.0-103.54.26.255
103.62.147.0/24
103.80.34.0/23
103.82.72.0/22
103.85.118.0/23
103.87.204.0/22
103.93.172.0/22
103.93.212.0/23
103.98.53.0/24
103.101.116.0/22
103.103.163.0/24
103.109.180.0/22
103.114.188.0/23
103.118.180.0/22
103.148.66.0/23
103.153.208.0/24
103.173.218.0/24
103.177.202.0/23
103.178.58.0/23
103.181.90.0/23
103.182.44.0/23
103.182.160.0/23
103.184.184.0/23
103.186.44.0/23
103.189.146.0/23
103.191.182.0/23
103.191.234.0/23
103.195.26.0/23
103.204.168.0/22
103.211.56.0-103.211.58.255
103.211.190.0/23
103.212.136.0/22
103.213.6.0/23
103.225.204.0/22
103.226.200.0/22
103.227.95.0/24
103.248.120.0/22
139.5.16.0/22
IPv6:
2405:5540::/32
Signature Algorithm: sha256WithRSAEncryption
75:b7:c6:82:b1:28:53:dd:9d:f3:5c:58:65:5c:e9:69:07:51:
35:a2:dc:a2:e0:40:ee:f6:d4:9f:33:49:0a:8a:9a:18:b4:d5:
6b:ca:ef:46:e7:90:61:69:ae:dc:6e:d5:b2:b7:10:b5:55:f3:
ad:93:55:d2:ab:97:ec:55:85:45:78:c7:77:f0:07:e9:bc:f9:
71:d9:00:cf:ce:25:e7:b8:13:c5:d9:e0:e5:52:c5:7e:00:12:
b2:5b:63:00:81:8d:e8:03:9b:da:25:b1:4f:a2:03:d5:d1:d1:
4a:63:5c:3d:09:2a:96:d1:df:36:83:62:ff:ff:fb:a9:52:48:
64:68:0c:fe:1a:8f:61:36:68:0a:b7:5e:7b:a1:d2:36:87:9e:
d1:31:b7:a8:e3:e0:45:b4:21:ab:24:88:f4:3c:3f:23:a1:94:
9f:a7:7a:de:01:a9:ed:ea:05:ab:41:48:b7:52:82:08:e4:7c:
c4:c8:6a:0f:5b:04:9b:5f:90:01:a5:7f:95:23:8c:2b:e1:b9:
b2:5a:df:1a:b4:f6:ca:43:6e:bc:fd:af:5c:4c:15:8f:23:3e:
01:0b:69:f5:27:56:e0:1b:70:2c:d8:cc:ab:98:02:f2:e9:cc:
ff:c5:0e:5f:0c:8c:3a:3c:b0:41:34:9c:02:af:9a:fb:dc:ab:
f9:b5:b8:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 09:52:18 2025 by rpki-client