Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/A29F7050711711F0AD01080BC4F9AE02.roa
File: A29F7050711711F0AD01080BC4F9AE02.roa (raw, json)
Hash identifier: lRQQ0/GsE6azc0kIONrdgIzQTrJxVj+jyH6m5vZOFtA=
Subject key identifier: B1:85:79:D2:A3:B7:36:E2:75:82:A6:24:29:1E:0C:3E:27:0C:29:7A
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: C435
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/A29F7050711711F0AD01080BC4F9AE02.roa
Signing time: Thu 04 Sep 2025 12:10:16 +0000
ROA not before: Thu 04 Sep 2025 12:10:16 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 132925
IP address blocks: 36.50.4.0/23 maxlen: 24
43.249.188.0/24 maxlen: 24
43.249.189.0/24 maxlen: 24
103.114.63.0/24 maxlen: 24
103.135.120.0/24 maxlen: 24
103.135.121.0/24 maxlen: 24
103.161.12.0/23 maxlen: 24
103.169.80.0/23 maxlen: 24
103.171.56.0/23 maxlen: 24
103.172.6.0/23 maxlen: 24
103.172.12.0/23 maxlen: 24
103.172.198.0/23 maxlen: 24
103.172.224.0/23 maxlen: 24
103.172.228.0/24 maxlen: 24
103.172.229.0/24 maxlen: 24
103.173.18.0/23 maxlen: 24
103.173.48.0/23 maxlen: 24
103.173.68.0/23 maxlen: 24
103.211.170.0/23 maxlen: 24
103.233.26.0/24 maxlen: 24
103.233.27.0/24 maxlen: 24
103.236.108.0/24 maxlen: 24
103.236.109.0/24 maxlen: 24
103.236.110.0/24 maxlen: 24
103.236.111.0/24 maxlen: 24
150.129.1.0/24 maxlen: 24
210.16.101.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 13 Sep 2025 15:24:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 50229 (0xc435)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Validity
Not Before: Sep 4 12:10:16 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=68b981a7-2def
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:a4:a0:a0:0c:10:55:fb:e1:14:75:c5:93:08:
d1:0f:ee:6d:c0:42:7b:42:97:35:43:81:a0:3d:ac:
3f:79:55:d4:95:01:77:2c:e7:23:fe:b3:54:0c:49:
a7:8b:af:72:67:ea:93:60:be:b0:11:a0:93:7b:98:
5f:a3:ac:c3:dc:fa:1b:a8:d8:53:80:b9:28:39:00:
e1:96:8b:1b:58:c4:df:b5:04:25:04:3c:37:cf:bc:
41:65:95:93:57:bc:14:11:16:4f:df:14:1b:6b:0f:
e4:f3:2f:ae:42:03:53:f9:bb:a6:f3:4c:34:59:cb:
35:23:63:cd:ff:ac:c5:e1:3a:0a:a6:77:88:ca:27:
8b:2b:5b:b4:db:f8:db:1b:92:c0:16:47:61:95:a4:
f6:b6:8f:d7:70:36:6a:b0:98:91:49:0d:0c:33:66:
52:aa:a0:8c:f2:44:03:60:d1:29:7a:ae:a1:81:1f:
6e:31:3b:e8:b7:17:a1:23:fd:8a:b4:be:8a:93:a9:
4d:8c:11:08:f9:7b:e4:ef:6d:c4:6d:81:d9:1b:3d:
ff:e8:06:b8:dc:94:4e:86:2d:1d:46:6b:db:37:1d:
a3:7a:9c:4b:c5:3e:86:3b:66:60:b9:ef:e7:ea:6c:
35:66:ce:c6:6a:d6:cf:8b:69:5e:41:b4:7f:18:6a:
95:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:85:79:D2:A3:B7:36:E2:75:82:A6:24:29:1E:0C:3E:27:0C:29:7A
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/A29F7050711711F0AD01080BC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
36.50.4.0/23
43.249.188.0/23
103.114.63.0/24
103.135.120.0/23
103.161.12.0/23
103.169.80.0/23
103.171.56.0/23
103.172.6.0/23
103.172.12.0/23
103.172.198.0/23
103.172.224.0/23
103.172.228.0/23
103.173.18.0/23
103.173.48.0/23
103.173.68.0/23
103.211.170.0/23
103.233.26.0/23
103.236.108.0/22
150.129.1.0/24
210.16.101.0/24
Signature Algorithm: sha256WithRSAEncryption
59:e4:be:b9:bd:66:bf:f3:3f:41:a2:5c:5b:c2:2a:dd:fa:d7:
d0:43:d6:71:4f:65:19:8b:99:4f:b0:b1:d1:85:5e:00:1b:0f:
c6:3c:f4:ba:26:3f:ff:a9:3e:64:c3:94:0b:92:05:c1:27:36:
e3:88:03:bc:67:ee:36:62:ac:04:d5:c0:95:4d:b2:42:42:51:
af:00:a3:26:1e:5f:cf:c1:4a:5f:01:1a:c4:27:d9:23:b8:c7:
9e:5d:b9:ce:fe:15:34:30:72:81:0c:4a:ec:a0:cc:88:06:64:
8a:66:dd:1d:24:82:b7:42:cd:97:45:eb:5c:e4:38:8b:3e:e7:
85:99:0e:12:3e:9c:8e:b5:23:a1:c1:ca:4a:9a:ae:7d:e1:dc:
d7:97:c9:aa:72:1f:89:10:22:b9:f1:f1:51:3b:96:ed:a7:59:
c2:3d:4a:54:fa:75:a0:6b:b9:e7:54:30:06:c8:2b:c2:51:09:
a4:4d:78:8c:80:d3:b3:56:74:0a:1d:29:ab:65:4e:11:fa:a8:
7f:e6:9c:a3:20:24:df:a1:a0:52:9e:51:0a:0d:fe:f3:25:06:
48:99:bd:3e:58:d0:58:65:99:9b:05:c7:0a:c0:fe:02:9e:ff:
19:ee:69:07:9e:6b:a4:7e:52:fb:78:98:cd:9d:6a:42:12:7b:
42:ba:81:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 16:36:29 2025 by rpki-client