Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/16E587E0325411F08D762633C4F9AE02.roa
File: 16E587E0325411F08D762633C4F9AE02.roa (raw, json)
Hash identifier: ER0ySWBNcldnmYbKZSdGtn4pWSSoKDMP5sooUus+m5c=
Subject key identifier: 0A:78:A1:50:4E:53:B9:0B:01:3A:A1:7E:18:F5:66:0C:58:62:4E:80
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: BB37
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/16E587E0325411F08D762633C4F9AE02.roa
Signing time: Fri 16 May 2025 12:48:39 +0000
ROA not before: Fri 16 May 2025 12:48:39 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 58678
IP address blocks: 43.241.28.0/22 maxlen: 24
43.241.128.0/22 maxlen: 24
43.241.132.0/22 maxlen: 24
43.242.208.0/24 maxlen: 24
43.242.209.0/24 maxlen: 24
43.242.210.0/24 maxlen: 24
43.242.211.0/24 maxlen: 24
43.242.228.0/22 maxlen: 24
45.64.84.0/22 maxlen: 24
45.114.192.0/22 maxlen: 24
45.117.0.0/22 maxlen: 24
45.127.120.0/22 maxlen: 24
45.250.248.0/24 maxlen: 24
45.250.249.0/24 maxlen: 24
45.250.250.0/24 maxlen: 24
45.251.236.0/24 maxlen: 24
45.251.237.0/24 maxlen: 24
45.251.238.0/24 maxlen: 24
45.251.239.0/24 maxlen: 24
103.14.232.0/22 maxlen: 24
103.17.12.0/23 maxlen: 24
103.26.52.0/22 maxlen: 22
103.26.52.0/24 maxlen: 24
103.26.53.0/24 maxlen: 24
103.26.54.0/24 maxlen: 24
103.26.55.0/24 maxlen: 24
103.26.56.0/22 maxlen: 24
103.39.251.0/24 maxlen: 24
103.42.160.0/22 maxlen: 24
103.48.56.0/23 maxlen: 24
103.48.58.0/24 maxlen: 24
103.48.59.0/24 maxlen: 24
103.48.100.0/22 maxlen: 24
103.57.96.0/23 maxlen: 24
103.59.212.0/22 maxlen: 24
103.69.238.0/24 maxlen: 24
103.74.236.0/22 maxlen: 24
103.77.152.0/22 maxlen: 23
103.77.152.0/23 maxlen: 24
103.77.154.0/24 maxlen: 24
103.89.40.0/22 maxlen: 24
103.111.132.0/22 maxlen: 24
103.112.32.0/24 maxlen: 24
103.112.33.0/24 maxlen: 24
103.112.34.0/24 maxlen: 24
103.112.35.0/24 maxlen: 24
103.117.184.0/24 maxlen: 24
103.117.187.0/24 maxlen: 24
103.137.152.0/22 maxlen: 24
103.148.207.0/24 maxlen: 24
103.153.151.0/24 maxlen: 24
103.166.112.0/23 maxlen: 24
103.173.208.0/23 maxlen: 24
103.174.30.0/24 maxlen: 24
103.174.38.0/24 maxlen: 24
103.181.209.0/24 maxlen: 24
103.185.11.0/24 maxlen: 24
103.204.119.0/24 maxlen: 24
103.209.18.0/24 maxlen: 24
103.209.19.0/24 maxlen: 24
103.215.114.0/23 maxlen: 24
103.216.144.0/22 maxlen: 24
103.218.100.0/22 maxlen: 24
103.219.164.0/24 maxlen: 24
103.219.165.0/24 maxlen: 24
103.219.166.0/24 maxlen: 24
103.219.167.0/24 maxlen: 24
103.220.80.0/22 maxlen: 24
103.220.212.0/22 maxlen: 24
103.226.0.0/22 maxlen: 24
103.226.4.0/22 maxlen: 24
103.226.28.0/22 maxlen: 24
124.108.16.0/22 maxlen: 24
163.223.244.0/23 maxlen: 24
203.134.248.0/23 maxlen: 24
2001:df6:f180::/48 maxlen: 48
2404:bd00::/48 maxlen: 48
2404:bd00:1::/48 maxlen: 48
2404:bd00:2::/48 maxlen: 48
2404:bd00:3::/48 maxlen: 48
2404:bd00:4::/48 maxlen: 48
2404:bd00:5::/48 maxlen: 48
2404:bd00:6::/48 maxlen: 48
2404:bd00:7::/48 maxlen: 48
2404:bd00:8::/48 maxlen: 48
2404:bd00:a::/48 maxlen: 48
2404:bd00:b::/48 maxlen: 48
2404:bd00:c::/48 maxlen: 48
2404:bd00:d::/48 maxlen: 48
2404:bd00:e::/48 maxlen: 48
2404:bd00:f::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 12 Jun 2025 12:12:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 47927 (0xbb37)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Validity
Not Before: May 16 12:48:39 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=68273427-b160
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:5d:8b:2b:73:96:0b:86:da:ea:1f:be:a7:d7:
42:51:88:5e:74:52:20:b5:74:b0:af:21:a7:8b:42:
94:4c:e5:c0:c7:fd:8f:63:29:e9:50:c4:33:a7:36:
e0:71:3f:13:15:4e:1c:e6:f1:46:63:65:a8:d1:05:
db:c6:c0:44:3d:39:f0:9e:76:1a:96:88:d8:d7:62:
90:97:ef:cf:65:10:37:7d:b9:87:58:23:72:dc:be:
14:0f:75:0d:75:d7:58:ed:b0:f1:6a:f4:24:be:07:
98:8a:25:8c:cc:89:25:0c:87:85:da:ee:52:58:0c:
d3:22:4c:30:e3:a4:36:82:2f:2f:8e:ce:a9:4c:f5:
f0:5b:e2:95:b8:4b:67:15:3c:21:cd:22:38:2b:e3:
66:d9:a3:e9:00:2a:db:62:01:30:31:da:23:68:69:
5a:48:f5:52:c7:24:53:75:12:b9:a5:d8:d7:e6:27:
f4:c1:5b:05:0e:43:cf:4b:87:d6:72:48:26:6b:9c:
72:9a:40:0c:0a:39:79:59:1a:f9:db:47:fa:4c:08:
2d:e8:d2:7d:f5:12:67:96:00:92:3c:dc:b9:c3:86:
d8:de:16:7d:8b:71:b6:99:1c:72:f1:b4:66:39:46:
51:51:3d:61:42:50:2e:72:70:51:ce:9a:50:ba:a4:
31:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:78:A1:50:4E:53:B9:0B:01:3A:A1:7E:18:F5:66:0C:58:62:4E:80
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/16E587E0325411F08D762633C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
43.241.28.0/22
43.241.128.0/21
43.242.208.0/22
43.242.228.0/22
45.64.84.0/22
45.114.192.0/22
45.117.0.0/22
45.127.120.0/22
45.250.248.0-45.250.250.255
45.251.236.0/22
103.14.232.0/22
103.17.12.0/23
103.26.52.0-103.26.59.255
103.39.251.0/24
103.42.160.0/22
103.48.56.0/22
103.48.100.0/22
103.57.96.0/23
103.59.212.0/22
103.69.238.0/24
103.74.236.0/22
103.77.152.0/22
103.89.40.0/22
103.111.132.0/22
103.112.32.0/22
103.117.184.0/24
103.117.187.0/24
103.137.152.0/22
103.148.207.0/24
103.153.151.0/24
103.166.112.0/23
103.173.208.0/23
103.174.30.0/24
103.174.38.0/24
103.181.209.0/24
103.185.11.0/24
103.204.119.0/24
103.209.18.0/23
103.215.114.0/23
103.216.144.0/22
103.218.100.0/22
103.219.164.0/22
103.220.80.0/22
103.220.212.0/22
103.226.0.0/21
103.226.28.0/22
124.108.16.0/22
163.223.244.0/23
203.134.248.0/23
IPv6:
2001:df6:f180::/48
2404:bd00::-2404:bd00:8:ffff:ffff:ffff:ffff:ffff
2404:bd00:a::-2404:bd00:f:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
a5:75:b3:cd:98:0a:51:f2:f8:b5:57:73:58:09:3b:aa:60:09:
ec:1d:67:e8:e7:a7:b0:0b:d7:4e:dc:76:c0:a2:1c:d3:14:96:
51:48:5a:db:84:63:c2:9e:31:e8:89:9d:54:06:b2:1f:b8:07:
f0:fc:74:b9:0d:a9:d7:bc:04:1e:49:2a:3d:0f:75:80:d3:a5:
fb:34:2d:c9:41:ba:33:cb:58:79:22:ef:d6:3c:e2:c5:7d:b8:
96:52:5e:bb:d5:da:03:7e:94:8d:71:8f:6b:d7:d4:07:c5:3f:
ad:62:0f:21:06:cf:62:97:bc:b1:5d:c0:ee:1a:c3:f0:5b:d3:
76:eb:43:0e:c8:2b:a0:33:2e:88:1f:08:b9:3c:8b:ff:45:c2:
8d:9b:cf:1e:c0:3b:b0:9b:d2:0f:69:9e:c1:a5:86:40:64:98:
a1:80:1e:82:26:0f:ab:87:21:5c:1b:92:25:5f:88:41:64:80:
94:f1:57:d0:7b:b9:d6:eb:a3:84:c8:05:03:fb:07:c4:11:65:
16:da:80:36:74:35:54:25:49:3a:23:66:a5:f3:c9:62:07:16:
d7:a3:36:f2:3f:53:fd:3c:c7:d0:50:3d:8c:87:1f:f4:c3:c1:
6a:10:2e:9f:40:63:e9:d6:c6:11:a0:a5:98:05:6b:6e:3d:e4:
23:d1:23:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 5 19:16:44 2025 by rpki-client