Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/346F90C45F7A11EFB8032057C4F9AE02.roa
File: 346F90C45F7A11EFB8032057C4F9AE02.roa (raw, json)
Hash identifier: pnmc1Mm2FPMDepyQAiCcoqsdG9Vo8W0NWzvAiEJenK4=
Subject key identifier: FF:64:28:E2:DC:8C:B7:51:17:0F:7A:E0:3B:12:F4:1E:D1:B3:01:10
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: C65F
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/346F90C45F7A11EFB8032057C4F9AE02.roa
Signing time: Tue 21 Oct 2025 10:31:46 +0000
ROA not before: Tue 21 Oct 2025 10:31:46 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 17625
IP address blocks: 36.255.8.0/22 maxlen: 24
43.252.192.0/22 maxlen: 24
45.64.196.0/22 maxlen: 24
45.64.204.0/22 maxlen: 24
45.114.56.0/22 maxlen: 24
45.114.64.0/22 maxlen: 24
45.114.212.0/22 maxlen: 24
45.114.216.0/22 maxlen: 24
45.115.8.0/22 maxlen: 24
45.116.56.0/24 maxlen: 24
45.116.57.0/24 maxlen: 24
45.116.58.0/24 maxlen: 24
45.116.59.0/24 maxlen: 24
103.19.196.0/22 maxlen: 24
103.54.12.0/22 maxlen: 24
103.54.20.0/22 maxlen: 24
103.54.188.0/22 maxlen: 24
103.54.196.0/22 maxlen: 24
103.54.244.0/22 maxlen: 24
103.56.88.0/22 maxlen: 24
103.91.132.0/22 maxlen: 24
103.206.56.0/22 maxlen: 24
103.208.224.0/22 maxlen: 24
103.254.32.0/22 maxlen: 24
103.254.244.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 28 Oct 2025 12:48:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 50783 (0xc65f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Validity
Not Before: Oct 21 10:31:46 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=68f76112-c291
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:83:9e:4d:79:0d:e5:7e:00:1d:f4:8d:29:fb:
70:4d:f9:f9:25:b5:49:2d:a8:e6:e0:ee:9e:4e:d2:
ee:47:60:6c:8b:00:28:59:8e:e6:f5:38:64:e5:a7:
4f:3b:5f:b2:9a:44:17:95:28:4e:2e:1e:8f:f5:30:
c9:dc:cd:81:2b:9e:91:3a:11:e7:c6:86:ec:dc:b3:
30:99:14:cf:a4:95:76:78:c2:82:20:4b:9e:f8:bd:
cc:a9:c4:1f:7b:6b:f5:79:12:75:78:ac:77:5c:79:
a8:74:e3:de:f7:6b:14:0d:97:aa:59:1a:ba:70:85:
e4:0a:de:1c:c0:c7:25:11:b3:dc:c2:4a:5d:eb:8c:
be:8e:14:f0:a7:87:28:6d:1f:55:cf:a8:f4:8e:68:
03:e0:92:73:a7:73:f6:e2:d1:c5:2d:02:6a:bc:85:
36:6f:e2:29:e4:4a:b4:96:eb:10:92:78:cc:b6:47:
2b:f4:60:af:b3:d0:8c:0e:ab:0a:60:e2:d8:b1:55:
b4:18:e2:3c:64:57:90:73:7d:a8:f6:3a:28:c9:15:
cc:2b:a8:b7:a3:91:3a:6b:2a:3f:a7:ff:33:6c:67:
ce:bc:63:83:f2:35:51:1b:3c:72:b1:9d:d6:30:89:
9f:2c:20:c8:68:1c:6c:32:92:e1:81:ef:74:d7:d1:
7b:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:64:28:E2:DC:8C:B7:51:17:0F:7A:E0:3B:12:F4:1E:D1:B3:01:10
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/346F90C45F7A11EFB8032057C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
36.255.8.0/22
43.252.192.0/22
45.64.196.0/22
45.64.204.0/22
45.114.56.0/22
45.114.64.0/22
45.114.212.0-45.114.219.255
45.115.8.0/22
45.116.56.0/22
103.19.196.0/22
103.54.12.0/22
103.54.20.0/22
103.54.188.0/22
103.54.196.0/22
103.54.244.0/22
103.56.88.0/22
103.91.132.0/22
103.206.56.0/22
103.208.224.0/22
103.254.32.0/22
103.254.244.0/22
Signature Algorithm: sha256WithRSAEncryption
b3:29:9c:6d:73:b1:44:b4:bd:94:a5:a0:81:de:a9:bb:0c:7d:
6e:78:78:87:dc:2f:eb:4d:7f:91:2d:24:77:7b:52:97:7d:77:
f0:2c:3e:66:23:db:40:3d:18:eb:f3:76:b7:02:18:c8:f8:42:
79:d6:ff:07:eb:ed:94:ef:07:dd:58:0f:f4:d0:2e:8e:01:95:
14:dd:16:23:78:a7:88:99:52:50:48:77:ac:6c:91:92:07:ef:
8c:3f:2b:ac:9b:00:f0:74:74:b0:66:f0:1c:f8:26:c0:55:7d:
aa:87:48:50:d4:b1:77:55:b3:90:fc:e8:9c:07:72:0a:86:e8:
73:3f:52:b5:11:3c:6b:d8:7b:48:fa:e0:3a:3f:d7:ed:b6:fb:
07:a5:58:f5:da:2e:92:2d:44:f0:33:c4:90:b3:03:35:ec:c4:
fc:6a:14:b9:dc:d8:fa:ba:c0:fb:99:59:f9:17:66:9e:a5:b9:
c9:4d:48:8d:6a:af:c8:e9:bf:b8:56:08:62:92:39:fd:ac:b3:
20:d0:be:7b:6e:69:92:13:79:7e:9d:c5:48:6d:d5:3b:17:39:
c1:b1:61:86:92:2e:b5:6f:11:d7:7e:b6:b3:e6:ef:ea:ae:4c:
2a:11:71:eb:36:16:25:ce:a3:ea:30:c3:98:4b:c7:8e:41:46:
d0:f3:2a:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 22:10:37 2025 by rpki-client