Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/7A5C40162CC311F0B6994A82C4F9AE02.roa
File: 7A5C40162CC311F0B6994A82C4F9AE02.roa (raw, json)
Hash identifier: h0ybpKm8mtR9RLaQ70P/qy8Ql5K01QvrccupCIEvZ/I=
Subject key identifier: D0:8C:FA:DF:58:D4:91:F5:03:DB:65:A6:39:DC:B9:83:C6:DD:2D:EA
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: BA98
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/7A5C40162CC311F0B6994A82C4F9AE02.roa
Signing time: Fri 09 May 2025 10:50:53 +0000
ROA not before: Fri 09 May 2025 10:50:53 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 55352
IP address blocks: 36.255.180.0/22 maxlen: 22
36.255.180.0/24 maxlen: 24
36.255.181.0/24 maxlen: 24
36.255.182.0/24 maxlen: 24
36.255.183.0/24 maxlen: 24
36.255.184.0/22 maxlen: 22
36.255.184.0/24 maxlen: 24
36.255.185.0/24 maxlen: 24
36.255.186.0/24 maxlen: 24
36.255.187.0/24 maxlen: 24
43.231.132.0/22 maxlen: 24
43.231.212.0/22 maxlen: 24
43.231.236.0/22 maxlen: 24
43.231.252.0/22 maxlen: 24
43.247.136.0/22 maxlen: 24
45.112.8.0/22 maxlen: 24
45.114.80.0/22 maxlen: 24
45.115.56.0/24 maxlen: 24
45.115.57.0/24 maxlen: 24
45.115.58.0/24 maxlen: 24
45.115.59.0/24 maxlen: 24
45.117.108.0/22 maxlen: 24
45.126.144.0/22 maxlen: 24
45.251.12.0/24 maxlen: 24
45.251.13.0/24 maxlen: 24
45.251.14.0/24 maxlen: 24
45.251.15.0/24 maxlen: 24
59.152.56.0/22 maxlen: 22
59.152.56.0/24 maxlen: 24
59.152.57.0/24 maxlen: 24
59.152.58.0/24 maxlen: 24
59.152.59.0/24 maxlen: 24
59.153.0.0/22 maxlen: 24
59.153.120.0/22 maxlen: 24
103.8.164.0/22 maxlen: 24
103.29.156.0/22 maxlen: 24
103.36.26.0/24 maxlen: 24
103.36.27.0/24 maxlen: 24
103.57.172.0/22 maxlen: 22
103.57.172.0/24 maxlen: 24
103.57.173.0/24 maxlen: 24
103.57.174.0/24 maxlen: 24
103.57.175.0/24 maxlen: 24
103.60.208.0/22 maxlen: 24
103.75.60.0/23 maxlen: 24
103.83.216.0/22 maxlen: 22
103.83.216.0/24 maxlen: 24
103.83.217.0/24 maxlen: 24
103.83.218.0/24 maxlen: 24
103.83.219.0/24 maxlen: 24
103.102.92.0/22 maxlen: 24
103.114.0.0/22 maxlen: 24
103.119.188.0/22 maxlen: 24
103.131.184.0/22 maxlen: 22
103.131.184.0/24 maxlen: 24
103.131.185.0/24 maxlen: 24
103.131.186.0/24 maxlen: 24
103.131.187.0/24 maxlen: 24
103.136.174.0/24 maxlen: 24
103.155.212.0/23 maxlen: 24
103.156.212.0/23 maxlen: 24
103.163.194.0/23 maxlen: 24
103.176.240.0/23 maxlen: 24
103.179.212.0/23 maxlen: 24
103.181.86.0/24 maxlen: 24
103.183.54.0/23 maxlen: 24
103.197.224.0/22 maxlen: 24
103.198.164.0/22 maxlen: 24
103.200.100.0/22 maxlen: 22
103.200.100.0/24 maxlen: 24
103.200.101.0/24 maxlen: 24
103.200.102.0/24 maxlen: 24
103.200.103.0/24 maxlen: 24
103.200.104.0/22 maxlen: 24
103.200.212.0/22 maxlen: 22
103.200.212.0/24 maxlen: 24
103.200.213.0/24 maxlen: 24
103.200.214.0/24 maxlen: 24
103.200.215.0/24 maxlen: 24
103.204.160.0/22 maxlen: 24
103.205.172.0/22 maxlen: 22
103.205.172.0/24 maxlen: 24
103.205.173.0/24 maxlen: 24
103.205.174.0/24 maxlen: 24
103.205.175.0/24 maxlen: 24
103.220.40.0/22 maxlen: 24
103.221.248.0/22 maxlen: 24
103.226.140.0/22 maxlen: 24
103.226.144.0/22 maxlen: 24
103.226.188.0/22 maxlen: 24
103.226.204.0/22 maxlen: 24
103.226.236.0/22 maxlen: 24
103.226.240.0/22 maxlen: 24
103.234.212.0/22 maxlen: 22
103.234.212.0/24 maxlen: 24
103.234.213.0/24 maxlen: 24
103.234.214.0/24 maxlen: 24
103.234.215.0/24 maxlen: 24
103.234.240.0/22 maxlen: 22
103.234.240.0/24 maxlen: 24
103.234.241.0/24 maxlen: 24
103.234.242.0/24 maxlen: 24
103.234.243.0/24 maxlen: 24
111.125.217.0/24 maxlen: 24
111.125.218.0/23 maxlen: 24
111.125.224.0/24 maxlen: 24
111.125.226.0/24 maxlen: 24
111.125.228.0/24 maxlen: 24
111.125.233.0/24 maxlen: 24
111.125.236.0/24 maxlen: 24
111.125.241.0/24 maxlen: 24
111.125.242.0/24 maxlen: 24
111.125.249.0/24 maxlen: 24
111.125.252.0/22 maxlen: 24
124.66.172.0/22 maxlen: 24
175.100.176.0/20 maxlen: 24
202.168.144.0/22 maxlen: 24
2406:9e00:20::/48 maxlen: 48
2406:9e00:21::/48 maxlen: 48
2406:9e00:22::/48 maxlen: 48
2406:9e00:23::/48 maxlen: 48
2406:9e00:24::/48 maxlen: 48
2406:9e00:25::/48 maxlen: 48
2406:9e00:26::/48 maxlen: 48
2406:9e00:27::/48 maxlen: 48
2406:9e00:28::/48 maxlen: 48
2406:9e00:29::/48 maxlen: 48
2406:9e00:2a::/48 maxlen: 48
2406:9e00:2b::/48 maxlen: 48
2406:9e00:2c::/48 maxlen: 48
2406:9e00:2d::/48 maxlen: 48
2406:9e00:2e::/48 maxlen: 48
2406:9e00:2f::/48 maxlen: 48
2406:9e00:30::/48 maxlen: 48
2406:9e00:31::/48 maxlen: 48
2406:9e00:32::/48 maxlen: 48
2406:9e00:33::/48 maxlen: 48
2406:9e00:34::/48 maxlen: 48
2406:9e00:35::/48 maxlen: 48
2406:9e00:36::/48 maxlen: 48
2406:9e00:37::/48 maxlen: 48
2406:9e00:38::/48 maxlen: 48
2406:9e00:39::/48 maxlen: 48
2406:9e00:3a::/48 maxlen: 48
2406:9e00:3b::/48 maxlen: 48
2406:9e00:3c::/48 maxlen: 48
2406:9e00:3d::/48 maxlen: 48
2406:9e00:3e::/48 maxlen: 48
2406:9e00:3f::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 13 Jun 2025 15:42:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 47768 (0xba98)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Validity
Not Before: May 9 10:50:53 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=681dde0d-fc89
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:97:16:6e:c1:6c:ce:23:29:20:02:52:43:03:
57:4e:ff:89:5f:15:0a:7f:51:00:a9:81:b8:7f:dc:
d2:ba:a0:52:d6:aa:d5:1d:4d:6a:17:ad:ed:24:fb:
e4:b0:bb:1f:4d:78:54:e7:6f:d4:96:d9:67:42:b6:
f1:e2:cc:1c:18:83:bc:3d:85:4d:16:ea:ad:a6:80:
d0:ff:cb:7f:fc:22:b5:74:9c:a3:5b:3f:40:4f:84:
d1:0f:80:a5:e1:5b:8a:72:68:1a:6b:b7:8d:e0:9a:
5c:fe:88:d2:31:55:a2:67:46:1b:f6:25:ce:60:d9:
2e:51:b4:39:3d:1e:3c:17:bb:f8:82:d7:c5:2c:6f:
92:c6:64:17:8f:e6:06:ed:10:a5:be:ef:cd:6b:08:
5f:2a:ff:63:82:7d:91:af:b3:ac:0f:56:9f:3d:0b:
39:2a:d1:4a:32:f0:b3:20:ab:af:61:0a:c8:7b:8a:
c7:8f:4e:a2:27:8a:61:be:b4:39:bc:10:19:e2:a3:
33:db:c6:43:0e:c8:ce:20:ab:07:bc:0b:17:0b:20:
3d:77:3b:41:38:1b:c9:e4:a6:0a:75:f0:6b:c9:20:
8b:85:82:b4:52:ba:d2:3c:b4:41:f5:32:2f:0c:79:
52:16:83:51:e6:ce:85:a1:1a:25:03:d3:ab:0e:91:
32:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:8C:FA:DF:58:D4:91:F5:03:DB:65:A6:39:DC:B9:83:C6:DD:2D:EA
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/7A5C40162CC311F0B6994A82C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
36.255.180.0-36.255.187.255
43.231.132.0/22
43.231.212.0/22
43.231.236.0/22
43.231.252.0/22
43.247.136.0/22
45.112.8.0/22
45.114.80.0/22
45.115.56.0/22
45.117.108.0/22
45.126.144.0/22
45.251.12.0/22
59.152.56.0/22
59.153.0.0/22
59.153.120.0/22
103.8.164.0/22
103.29.156.0/22
103.36.26.0/23
103.57.172.0/22
103.60.208.0/22
103.75.60.0/23
103.83.216.0/22
103.102.92.0/22
103.114.0.0/22
103.119.188.0/22
103.131.184.0/22
103.136.174.0/24
103.155.212.0/23
103.156.212.0/23
103.163.194.0/23
103.176.240.0/23
103.179.212.0/23
103.181.86.0/24
103.183.54.0/23
103.197.224.0/22
103.198.164.0/22
103.200.100.0-103.200.107.255
103.200.212.0/22
103.204.160.0/22
103.205.172.0/22
103.220.40.0/22
103.221.248.0/22
103.226.140.0-103.226.147.255
103.226.188.0/22
103.226.204.0/22
103.226.236.0-103.226.243.255
103.234.212.0/22
103.234.240.0/22
111.125.217.0-111.125.219.255
111.125.224.0/24
111.125.226.0/24
111.125.228.0/24
111.125.233.0/24
111.125.236.0/24
111.125.241.0-111.125.242.255
111.125.249.0/24
111.125.252.0/22
124.66.172.0/22
175.100.176.0/20
202.168.144.0/22
IPv6:
2406:9e00:20::/43
Signature Algorithm: sha256WithRSAEncryption
65:5c:b4:42:05:d6:8b:fa:ca:1d:33:78:7b:30:89:cf:bf:8e:
49:87:22:bc:c8:50:2a:c0:57:00:8d:3a:23:81:fb:63:6d:a0:
3a:f5:56:34:ec:dd:3d:47:2f:05:8f:5e:b6:8b:b2:a5:b9:ce:
7c:96:29:49:42:29:90:ef:59:11:9b:ca:20:40:89:13:b5:bc:
15:ee:b6:ef:44:fe:85:34:34:87:f4:0f:6a:78:42:29:b2:8e:
cc:2e:8f:6a:94:6d:14:d1:cb:41:bf:73:3d:72:f2:0a:01:ae:
35:de:c6:da:2f:ec:01:42:45:3e:e5:8d:ef:1b:15:09:44:dc:
3e:0f:12:b0:8b:d9:38:d8:07:3f:0a:d0:6a:25:8a:e3:d3:56:
44:ec:cb:a7:f1:73:ce:e1:95:39:81:52:3c:77:76:d7:a6:cb:
68:07:38:50:9c:4a:3d:32:1f:c9:96:a2:82:27:e8:8c:4d:ea:
d1:cd:23:d6:07:31:25:7e:a0:fe:25:19:38:4e:bf:eb:65:77:
35:0e:6c:9b:67:1f:76:9a:5a:07:0d:81:93:e7:9f:d4:7d:57:
cf:de:81:5b:dc:96:43:d4:34:94:2d:bd:03:f5:de:53:d8:ca:
6a:04:a6:43:48:48:a6:b9:9b:5f:a7:1d:d9:7a:a0:44:4c:93:
b2:ce:11:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 13:06:28 2025 by rpki-client