Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/AA97407E322611F0BEFA1424C4F9AE02.roa
File: AA97407E322611F0BEFA1424C4F9AE02.roa (raw, json)
Hash identifier: 9ov4rN6N2RPjJeMKMQ2MwTtIWg3Ewh1VXAaMJS6Wf00=
Subject key identifier: 29:27:D5:59:D9:98:1E:14:11:F5:A4:5B:02:82:6E:5C:7F:80:63:BC
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: BB67
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/AA97407E322611F0BEFA1424C4F9AE02.roa
Signing time: Tue 20 May 2025 12:01:06 +0000
ROA not before: Tue 20 May 2025 12:01:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 150008
IP address blocks: 14.192.0.0/22 maxlen: 24
36.50.124.0/23 maxlen: 24
43.225.24.0/24 maxlen: 24
43.225.25.0/24 maxlen: 24
43.225.26.0/24 maxlen: 24
43.225.27.0/24 maxlen: 24
43.228.92.0/22 maxlen: 24
43.249.224.0/22 maxlen: 24
45.112.28.0/22 maxlen: 24
45.112.48.0/24 maxlen: 24
45.112.49.0/24 maxlen: 24
45.112.50.0/24 maxlen: 24
45.112.51.0/24 maxlen: 24
45.127.56.0/22 maxlen: 24
45.249.76.0/24 maxlen: 24
45.249.77.0/24 maxlen: 24
45.249.78.0/24 maxlen: 24
45.249.79.0/24 maxlen: 24
103.24.124.0/24 maxlen: 24
103.24.125.0/24 maxlen: 24
103.24.126.0/24 maxlen: 24
103.24.127.0/24 maxlen: 24
103.41.96.0/22 maxlen: 24
103.42.200.0/24 maxlen: 24
103.42.201.0/24 maxlen: 24
103.44.0.0/24 maxlen: 24
103.44.1.0/24 maxlen: 24
103.44.2.0/24 maxlen: 24
103.69.28.0/23 maxlen: 24
103.70.129.0/24 maxlen: 24
103.70.130.0/24 maxlen: 24
103.95.173.0/24 maxlen: 24
103.99.108.0/24 maxlen: 24
103.99.109.0/24 maxlen: 24
103.99.110.0/24 maxlen: 24
103.99.111.0/24 maxlen: 24
103.102.18.0/23 maxlen: 24
103.105.101.0/24 maxlen: 24
103.105.103.0/24 maxlen: 24
103.117.36.0/23 maxlen: 24
103.122.61.0/24 maxlen: 24
103.154.206.0/24 maxlen: 24
103.157.12.0/23 maxlen: 24
103.159.250.0/23 maxlen: 24
103.161.243.0/24 maxlen: 24
103.162.128.0/23 maxlen: 24
103.164.200.0/23 maxlen: 24
103.168.82.0/23 maxlen: 24
103.171.190.0/24 maxlen: 24
103.171.191.0/24 maxlen: 24
103.172.202.0/23 maxlen: 24
103.174.80.0/23 maxlen: 24
103.174.160.0/23 maxlen: 24
103.182.117.0/24 maxlen: 24
103.183.202.0/24 maxlen: 24
103.183.203.0/24 maxlen: 24
103.186.254.0/23 maxlen: 24
103.204.35.0/24 maxlen: 24
103.206.104.0/22 maxlen: 24
103.213.202.0/23 maxlen: 24
103.217.236.0/24 maxlen: 24
103.217.237.0/24 maxlen: 24
103.217.238.0/24 maxlen: 24
103.217.239.0/24 maxlen: 24
103.220.234.0/23 maxlen: 24
103.233.73.0/24 maxlen: 24
103.236.193.0/24 maxlen: 24
103.239.36.0/24 maxlen: 24
103.239.37.0/24 maxlen: 24
103.239.38.0/24 maxlen: 24
103.239.39.0/24 maxlen: 24
103.248.208.0/22 maxlen: 24
103.252.144.0/22 maxlen: 24
103.255.144.0/22 maxlen: 24
106.0.36.0/23 maxlen: 24
182.18.177.0/24 maxlen: 24
202.65.129.0/24 maxlen: 24
202.65.130.0/24 maxlen: 24
202.65.133.0/24 maxlen: 24
202.65.134.0/24 maxlen: 24
202.65.138.0/24 maxlen: 24
202.65.142.0/24 maxlen: 24
202.65.144.0/24 maxlen: 24
202.65.147.0/24 maxlen: 24
202.65.148.0/24 maxlen: 24
202.65.154.0/24 maxlen: 24
202.65.155.0/24 maxlen: 24
202.65.158.0/24 maxlen: 24
202.65.159.0/24 maxlen: 24
2001:df7:bd80::/48 maxlen: 48
2001:df7:cb80::/48 maxlen: 48
2400:3b01::/32 maxlen: 32
2400:3b01::/48 maxlen: 48
2400:3b01:b::/48 maxlen: 48
2400:3b01:c::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 12 Jun 2025 12:12:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 47975 (0xbb67)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Validity
Not Before: May 20 12:01:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=682c6f02-0b4a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:dc:d5:8a:df:d1:5d:b1:ee:a6:a9:6d:ff:b0:
6a:e2:08:c7:aa:f2:10:94:9c:ed:74:fe:ec:49:a3:
64:e9:4f:94:ec:99:43:d9:e4:55:f9:99:7a:3d:95:
49:62:44:70:7c:af:6d:46:7a:fb:e4:f5:ee:56:91:
85:9a:94:f1:b6:67:19:eb:26:0c:14:e0:79:ac:77:
86:b9:76:1e:05:67:48:6f:cb:60:93:c2:3d:b3:22:
67:66:e6:1b:ab:1b:18:6d:63:91:6a:16:c6:27:c4:
4f:e5:31:9f:13:8f:ce:be:5a:73:41:35:90:24:e1:
95:cb:cd:a8:96:31:e5:4c:88:a4:24:5f:a7:d5:6c:
35:6b:78:e1:9c:12:04:e5:cb:bb:c5:0c:4f:2a:91:
4c:94:13:fa:f9:34:03:25:31:41:5d:38:ce:65:e3:
c6:3a:ae:00:71:f0:f3:41:86:79:79:20:80:00:b0:
17:db:b2:9f:fe:c4:8c:9f:26:ab:34:81:33:03:94:
e7:df:c3:3d:06:5f:ab:41:6d:3b:e3:40:3a:62:42:
39:9f:1e:f1:f5:5f:1e:e0:46:50:f2:5a:8d:92:6c:
c4:77:39:7a:b7:04:b7:83:55:a9:44:c1:3d:b7:c3:
5f:d0:31:97:6f:fd:7d:fe:13:5b:ed:b5:b0:76:51:
4b:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:27:D5:59:D9:98:1E:14:11:F5:A4:5B:02:82:6E:5C:7F:80:63:BC
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/AA97407E322611F0BEFA1424C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
14.192.0.0/22
36.50.124.0/23
43.225.24.0/22
43.228.92.0/22
43.249.224.0/22
45.112.28.0/22
45.112.48.0/22
45.127.56.0/22
45.249.76.0/22
103.24.124.0/22
103.41.96.0/22
103.42.200.0/23
103.44.0.0-103.44.2.255
103.69.28.0/23
103.70.129.0-103.70.130.255
103.95.173.0/24
103.99.108.0/22
103.102.18.0/23
103.105.101.0/24
103.105.103.0/24
103.117.36.0/23
103.122.61.0/24
103.154.206.0/24
103.157.12.0/23
103.159.250.0/23
103.161.243.0/24
103.162.128.0/23
103.164.200.0/23
103.168.82.0/23
103.171.190.0/23
103.172.202.0/23
103.174.80.0/23
103.174.160.0/23
103.182.117.0/24
103.183.202.0/23
103.186.254.0/23
103.204.35.0/24
103.206.104.0/22
103.213.202.0/23
103.217.236.0/22
103.220.234.0/23
103.233.73.0/24
103.236.193.0/24
103.239.36.0/22
103.248.208.0/22
103.252.144.0/22
103.255.144.0/22
106.0.36.0/23
182.18.177.0/24
202.65.129.0-202.65.130.255
202.65.133.0-202.65.134.255
202.65.138.0/24
202.65.142.0/24
202.65.144.0/24
202.65.147.0-202.65.148.255
202.65.154.0/23
202.65.158.0/23
IPv6:
2001:df7:bd80::/48
2001:df7:cb80::/48
2400:3b01::/32
Signature Algorithm: sha256WithRSAEncryption
86:f5:4b:32:b4:09:14:60:f3:27:76:51:5e:01:0c:cc:5d:b3:
60:a3:b4:fb:b4:71:e4:7b:57:f9:33:5c:9e:d5:e8:30:ea:9f:
30:9c:87:ae:39:29:14:1b:e3:c4:e7:f4:21:94:14:69:82:82:
04:4b:dc:d3:a4:c2:1b:f4:21:b4:cb:cd:ad:81:0f:3e:5e:a9:
ca:14:b3:07:83:56:cf:20:64:cd:d6:e5:7f:e5:00:25:72:e1:
e4:df:48:f0:51:41:91:66:77:27:03:ed:a5:ab:0d:49:6b:fd:
b1:7c:5c:2f:ee:b9:56:f1:03:f8:1c:83:ae:a7:dc:08:db:58:
7f:60:1b:b6:18:be:ff:6b:be:b5:31:b2:15:9c:99:2a:02:a1:
af:a9:31:70:8f:b9:5f:12:d6:f8:30:32:af:52:fd:18:8b:ad:
67:6a:58:e8:10:bc:7d:c3:8e:90:d8:ab:65:6e:4e:15:a1:df:
e2:30:13:47:01:5b:d1:12:d1:f0:01:97:6b:f1:ef:33:71:6a:
da:a1:51:85:b2:72:b3:81:0b:d6:bc:78:aa:10:f8:22:a4:07:
b1:24:42:eb:6d:9f:34:8a:3b:6f:97:de:70:2a:79:39:bc:77:
86:37:e9:d2:7c:94:d2:2a:bd:23:5d:46:ae:a6:f4:ef:e3:e6:
0b:f2:0a:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 6 06:58:49 2025 by rpki-client