Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/6917B8141F4211F088D8BD2BC4F9AE02.roa
File: 6917B8141F4211F088D8BD2BC4F9AE02.roa (raw, json)
Hash identifier: 8dwULiSBIicG0InW+MW/zyLI/ANgvM/8IDEkjxJwyWg=
Subject key identifier: 11:AB:CF:81:5D:5E:54:B9:13:AF:86:0C:3D:9C:BC:63:5D:02:C1:3D
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: BA5E
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/6917B8141F4211F088D8BD2BC4F9AE02.roa
Signing time: Thu 08 May 2025 16:32:06 +0000
ROA not before: Thu 08 May 2025 16:32:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 59162
IP address blocks: 43.225.68.0/22 maxlen: 24
43.225.212.0/22 maxlen: 24
45.114.152.0/24 maxlen: 24
45.114.153.0/24 maxlen: 24
45.114.154.0/24 maxlen: 24
45.114.155.0/24 maxlen: 24
45.115.168.0/22 maxlen: 24
45.117.112.0/24 maxlen: 24
45.117.113.0/24 maxlen: 24
45.117.114.0/24 maxlen: 24
45.117.115.0/24 maxlen: 24
45.119.236.0/24 maxlen: 24
45.119.237.0/24 maxlen: 24
45.119.238.0/24 maxlen: 24
45.119.239.0/24 maxlen: 24
45.123.8.0/22 maxlen: 22
45.123.8.0/24 maxlen: 24
45.123.9.0/24 maxlen: 24
45.123.10.0/24 maxlen: 24
45.123.11.0/24 maxlen: 24
45.248.12.0/22 maxlen: 24
45.251.40.0/22 maxlen: 24
103.17.48.0/22 maxlen: 24
103.38.202.0/24 maxlen: 24
103.38.203.0/24 maxlen: 24
103.40.64.0/24 maxlen: 24
103.40.65.0/24 maxlen: 24
103.40.66.0/24 maxlen: 24
103.40.67.0/24 maxlen: 24
103.57.176.0/24 maxlen: 24
103.57.177.0/24 maxlen: 24
103.57.178.0/24 maxlen: 24
103.57.179.0/24 maxlen: 24
103.106.152.0/24 maxlen: 24
103.106.153.0/24 maxlen: 24
103.106.154.0/24 maxlen: 24
103.106.155.0/24 maxlen: 24
103.117.152.0/22 maxlen: 24
103.134.112.0/24 maxlen: 24
103.134.113.0/24 maxlen: 24
103.193.200.0/22 maxlen: 24
103.211.59.0/24 maxlen: 24
103.219.216.0/22 maxlen: 24
103.239.140.0/24 maxlen: 24
103.239.141.0/24 maxlen: 24
103.239.142.0/24 maxlen: 24
103.239.143.0/24 maxlen: 24
103.253.208.0/22 maxlen: 24
103.254.206.0/24 maxlen: 24
103.254.207.0/24 maxlen: 24
103.255.72.0/22 maxlen: 24
114.134.20.0/24 maxlen: 24
114.134.21.0/24 maxlen: 24
114.134.22.0/24 maxlen: 24
114.134.23.0/24 maxlen: 24
2001:df2:59c0::/48 maxlen: 48
2001:df7::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 12 Jun 2025 12:12:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 47710 (0xba5e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Validity
Not Before: May 8 16:32:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=681cdc85-0a6d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:ee:63:e5:7f:2c:a1:8a:a4:a4:4f:cf:e8:df:
71:12:53:8c:71:67:b7:26:ba:cd:27:59:63:b2:fd:
20:2b:9c:5e:5c:07:0d:dc:68:13:03:f6:10:cb:22:
68:f8:16:ad:bf:78:9c:9c:b0:e8:bf:1c:4c:6f:b4:
a9:7c:4a:fe:0a:35:e3:53:17:ad:dd:09:2a:23:f7:
ff:da:f6:96:a0:8c:b8:a4:32:10:7e:c5:b8:1e:5e:
01:da:48:1f:f8:ff:2b:eb:50:df:29:0f:8b:65:f6:
0b:84:e9:30:79:77:6a:e8:30:47:02:c4:90:56:dc:
27:02:57:31:f4:ba:18:d8:90:2c:b7:72:4e:51:39:
2d:70:63:4f:72:15:35:9c:b5:42:b4:40:05:10:c1:
3c:d7:b8:02:89:28:35:f7:15:dd:b6:d2:92:f9:a4:
89:d4:0a:28:c8:4b:9b:f3:07:ad:97:1e:12:f9:38:
b0:83:c1:a1:95:b6:93:26:5d:13:0d:db:1a:a4:c8:
29:a2:03:6a:6c:80:96:6f:08:0b:e1:18:99:08:b2:
5a:cf:1b:fa:80:f8:07:d7:91:64:52:a6:c1:45:3b:
de:04:64:24:f4:9e:ca:c5:ce:7f:af:c9:75:da:64:
ca:41:53:78:13:80:d0:2f:17:06:82:c3:22:eb:18:
51:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:AB:CF:81:5D:5E:54:B9:13:AF:86:0C:3D:9C:BC:63:5D:02:C1:3D
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/6917B8141F4211F088D8BD2BC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
43.225.68.0/22
43.225.212.0/22
45.114.152.0/22
45.115.168.0/22
45.117.112.0/22
45.119.236.0/22
45.123.8.0/22
45.248.12.0/22
45.251.40.0/22
103.17.48.0/22
103.38.202.0/23
103.40.64.0/22
103.57.176.0/22
103.106.152.0/22
103.117.152.0/22
103.134.112.0/23
103.193.200.0/22
103.211.59.0/24
103.219.216.0/22
103.239.140.0/22
103.253.208.0/22
103.254.206.0/23
103.255.72.0/22
114.134.20.0/22
IPv6:
2001:df2:59c0::/48
2001:df7::/48
Signature Algorithm: sha256WithRSAEncryption
54:07:28:a2:65:b0:ce:cc:f7:9d:b1:eb:34:5c:f1:be:fe:4a:
e8:75:f1:8d:28:64:d0:c5:e6:ed:d1:88:82:44:96:54:c0:a6:
11:45:f5:cb:1b:a5:02:69:64:e0:fa:f3:11:d2:ff:af:b6:9e:
e0:4d:d1:89:3f:f1:cc:09:fc:15:fb:38:65:5a:ee:02:a6:66:
53:3d:19:a6:ee:b3:86:0a:bd:c5:28:a3:4d:15:64:6f:6b:bc:
1b:45:c8:af:cf:d6:d8:f5:19:23:ad:85:84:c0:ec:f3:be:19:
d0:37:2e:ea:68:b6:74:b6:a8:11:49:e2:5a:75:16:4d:35:c1:
7d:06:76:0b:93:2b:4d:d2:c7:aa:a1:1f:7a:f4:f5:99:db:fb:
78:2c:a5:1d:38:b5:8d:70:e2:f2:05:f1:b1:27:3b:73:92:86:
d8:91:c5:ce:c2:9b:73:5e:21:da:ed:34:91:49:77:8f:76:b7:
84:77:12:a5:c9:a0:b1:02:10:d5:c7:7a:c6:b4:14:f8:a7:07:
31:5c:e6:a5:aa:21:d5:1c:3e:aa:f8:5a:d0:7e:a9:2a:40:9d:
6d:74:92:f3:31:8e:93:ae:38:bd:b0:10:16:08:7b:81:3a:42:
25:4d:ab:76:21:ac:92:83:36:11:b1:d8:20:a8:33:a8:fc:45:
28:16:c3:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 6 06:49:30 2025 by rpki-client