Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/C7DDC774650E11EFAECF9A74C4F9AE02.roa
File: C7DDC774650E11EFAECF9A74C4F9AE02.roa (raw, json)
Hash identifier: QP7H7kjDfVKVG06NKtQ00fFNx1m9ZeKr9ef/mVe8Wqk=
Subject key identifier: 41:9E:EA:F0:FC:62:C9:9C:B1:E9:AA:D5:8D:D5:10:4A:81:98:BB:37
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: BCE2
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/C7DDC774650E11EFAECF9A74C4F9AE02.roa
Signing time: Tue 03 Jun 2025 11:15:54 +0000
ROA not before: Tue 03 Jun 2025 11:15:54 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 133275
IP address blocks: 43.228.220.0/22 maxlen: 24
43.248.236.0/22 maxlen: 24
43.249.52.0/22 maxlen: 24
45.115.4.0/22 maxlen: 24
45.119.136.0/22 maxlen: 24
45.119.140.0/22 maxlen: 24
45.125.60.0/22 maxlen: 24
103.13.104.0/22 maxlen: 24
103.36.124.0/22 maxlen: 24
103.46.192.0/23 maxlen: 24
103.46.194.0/23 maxlen: 24
103.47.168.0/22 maxlen: 24
103.47.236.0/22 maxlen: 24
103.59.192.0/22 maxlen: 24
103.59.196.0/22 maxlen: 24
103.73.92.0/22 maxlen: 24
103.86.40.0/22 maxlen: 24
103.95.120.0/22 maxlen: 24
103.124.12.0/22 maxlen: 24
103.148.119.0/24 maxlen: 24
103.173.201.0/24 maxlen: 24
103.176.162.0/23 maxlen: 24
103.193.196.0/22 maxlen: 24
103.196.52.0/22 maxlen: 24
103.197.116.0/22 maxlen: 24
103.206.248.0/22 maxlen: 24
103.208.200.0/22 maxlen: 24
103.215.248.0/22 maxlen: 24
103.216.88.0/22 maxlen: 24
103.243.4.0/24 maxlen: 24
103.248.116.0/22 maxlen: 24
116.204.188.0/22 maxlen: 24
137.59.240.0/22 maxlen: 24
157.119.124.0/22 maxlen: 24
157.119.216.0/24 maxlen: 24
157.119.217.0/24 maxlen: 24
157.119.218.0/24 maxlen: 24
157.119.219.0/24 maxlen: 24
175.111.132.0/22 maxlen: 24
210.16.80.0/22 maxlen: 24
220.158.160.0/22 maxlen: 24
2404:4340::/32 maxlen: 32
2404:4340::/33 maxlen: 33
2404:4340::/48 maxlen: 48
2404:4340:1::/48 maxlen: 48
2404:4340:2::/48 maxlen: 48
2404:4340:3::/48 maxlen: 48
2404:4340:4::/48 maxlen: 48
2404:4340:5::/48 maxlen: 48
2404:4340:6::/48 maxlen: 48
2404:4340:7::/48 maxlen: 48
2404:4340:8000::/33 maxlen: 33
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 12 Jun 2025 12:12:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 48354 (0xbce2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Validity
Not Before: Jun 3 11:15:54 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=683ed96a-ecb6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:0c:ba:8d:97:12:f8:7f:50:b5:86:8b:7c:13:
bd:f4:0b:5a:ac:20:74:51:2a:71:ba:91:f7:38:6b:
52:bc:c5:53:bf:65:2e:cb:0a:43:3c:23:d6:7a:68:
b8:12:04:9d:cb:15:af:c9:99:85:68:a1:71:02:6f:
d7:e3:df:cf:4c:0d:df:aa:56:b8:4c:03:65:17:f9:
3f:8f:7e:17:53:65:81:b3:03:19:28:c5:f9:43:49:
0d:4a:fd:cc:01:25:e8:4c:a9:52:ce:b5:d6:59:1a:
d2:6a:5c:ed:aa:56:de:06:0a:f8:b7:ea:3a:e2:9c:
bd:31:69:ea:71:3c:16:12:11:c4:2e:85:d3:8a:91:
5c:4a:af:0f:36:a7:4b:ca:9e:b8:e6:1c:98:00:9c:
ae:f8:52:ff:07:10:98:7a:59:2f:a1:bd:ce:03:b0:
9a:b8:65:fc:ca:80:43:12:a2:fd:fb:53:e9:ef:ed:
84:f3:1a:3d:85:14:3c:ad:88:c1:f5:b2:c7:61:8b:
26:7b:de:d4:b4:12:a5:7e:12:7c:18:6e:b8:cb:63:
7b:7b:c6:e0:2f:c3:9b:c2:4c:a1:6e:ef:33:58:e3:
bf:5d:6d:a8:28:02:94:90:60:b5:bd:72:5d:3c:b0:
87:17:97:ad:9e:bb:8c:8c:46:95:72:cf:33:ad:bc:
65:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:9E:EA:F0:FC:62:C9:9C:B1:E9:AA:D5:8D:D5:10:4A:81:98:BB:37
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/C7DDC774650E11EFAECF9A74C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
43.228.220.0/22
43.248.236.0/22
43.249.52.0/22
45.115.4.0/22
45.119.136.0/21
45.125.60.0/22
103.13.104.0/22
103.36.124.0/22
103.46.192.0/22
103.47.168.0/22
103.47.236.0/22
103.59.192.0/21
103.73.92.0/22
103.86.40.0/22
103.95.120.0/22
103.124.12.0/22
103.148.119.0/24
103.173.201.0/24
103.176.162.0/23
103.193.196.0/22
103.196.52.0/22
103.197.116.0/22
103.206.248.0/22
103.208.200.0/22
103.215.248.0/22
103.216.88.0/22
103.243.4.0/24
103.248.116.0/22
116.204.188.0/22
137.59.240.0/22
157.119.124.0/22
157.119.216.0/22
175.111.132.0/22
210.16.80.0/22
220.158.160.0/22
IPv6:
2404:4340::/32
Signature Algorithm: sha256WithRSAEncryption
b0:0c:1e:fe:8a:92:d0:85:3d:48:ff:51:9b:40:e0:a8:5f:9b:
eb:60:13:6c:4f:2d:0a:15:17:4a:e0:dc:fd:37:cc:d6:cf:12:
88:f1:27:47:1c:8c:1b:4b:48:82:32:c1:63:d1:99:33:48:38:
74:b7:a6:fd:29:8a:94:36:c3:3a:4b:c6:70:af:2d:3d:8e:94:
a9:a5:86:18:e1:22:0a:45:af:52:e8:53:0f:a3:8c:bf:03:b7:
94:2b:3d:81:97:62:b1:1b:fd:9d:02:0f:e2:a8:e1:6b:35:2d:
d8:7f:26:d1:40:fb:09:87:0e:04:32:25:f9:00:97:72:63:3a:
c2:2c:c1:46:67:c4:36:66:22:77:46:a2:f9:72:69:82:93:56:
8a:59:dd:55:b2:19:2f:4e:26:1b:d8:c4:fc:e3:a6:85:06:ab:
c1:76:ae:6f:d0:32:f5:30:37:71:44:98:17:6d:6d:0c:db:d4:
26:76:b4:ce:4b:24:60:d8:82:9e:d3:6a:ff:e9:c7:7d:95:10:
e5:d6:99:9d:de:7c:7a:00:a6:9e:9b:95:7a:8d:f6:e4:0d:45:
47:14:a2:fb:2b:40:f2:ce:e6:ac:34:b9:f4:f1:4d:a4:a9:0a:
cc:b7:59:f2:35:07:3c:74:ed:4d:a4:93:79:d1:cb:0b:fc:78:
d8:06:d5:96
-----BEGIN CERTIFICATE-----
MIIGUjCCBTqgAwIBAgIDALziMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5
MThFREIyMTEwLwYDVQQFEygyOTZFREI2NEYzQUY2RTlEOTgwOTMyRTgxNkY5NTk4
M0UzQUJDODIzMB4XDTI1MDYwMzExMTU1NFoXDTI2MDcwMTAwMDAwMFowGDEWMBQG
A1UEAxMNNjgzZWQ5NmEtZWNiNjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBALsMuo2XEvh/ULWGi3wTvfQLWqwgdFEqcbqR9zhrUrzFU79lLssKQzwj1npo
uBIEncsVr8mZhWihcQJv1+Pfz0wN36pWuEwDZRf5P49+F1NlgbMDGSjF+UNJDUr9
zAEl6EypUs611lka0mpc7apW3gYK+LfqOuKcvTFp6nE8FhIRxC6F04qRXEqvDzan
S8qeuOYcmACcrvhS/wcQmHpZL6G9zgOwmrhl/MqAQxKi/ftT6e/thPMaPYUUPK2I
wfWyx2GLJnve1LQSpX4SfBhuuMtje3vG4C/Dm8JMoW7vM1jjv11tqCgClJBgtb1y
XTywhxeXrZ67jIxGlXLPM628ZS8CAwEAAaOCA3UwggNxMB0GA1UdDgQWBBRBnurw
/GLJnLHpqtWN1RBKgZi7NzAfBgNVHSMEGDAWgBQpbttk869unZgJMugW+VmD46vI
IzAOBgNVHQ8BAf8EBAMCB4AwgYMGA1UdHwR8MHoweKB2oHSGcnJzeW5jOi8vcnBr
aS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkxOEVEQjIvMkE0M0UzMEM3
MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvS1c3YlpQT3ZicDJZQ1RMb0Z2bFpnLU9y
eUNNLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr
aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3
MkZEMUZGMi9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5Q00uY2VyMEoGA1UdIAEB
/wRAMD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBu
aWMubmV0L1JQS0kvQ1BTLnBkZjCBywYIKwYBBQUHAQsEgb4wgbswgYMGCCsGAQUF
BzALhndyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MThFREIyLzJBNDNFMzBDNzBFOTExRTJCMzZENEI2QjI5NzlCQjIwL0M3RERDNzc0
NjUwRTExRUZBRUNGOUE3NEM0RjlBRTAyLnJvYTAzBggrBgEFBQcwDYYnaHR0cHM6
Ly9ycmRwLmFwbmljLm5ldC9ub3RpZmljYXRpb24ueG1sMIH+BggrBgEFBQcBBwEB
/wSB7jCB6zCB2QQCAAEwgdIDBAIr5NwDBAIr+OwDBAIr+TQDBAItcwQDBAMtd4gD
BAItfTwDBAJnDWgDBAJnJHwDBAJnLsADBAJnL6gDBAJnL+wDBANnO8ADBAJnSVwD
BAJnVigDBAJnX3gDBAJnfAwDBABnlHcDBABnrckDBAFnsKIDBAJnwcQDBAJnxDQD
BAJnxXQDBAJnzvgDBAJn0MgDBAJn1/gDBAJn2FgDBABn8wQDBAJn+HQDBAJ0zLwD
BAKJO/ADBAKdd3wDBAKdd9gDBAKvb4QDBALSEFADBALcnqAwDQQCAAIwBwMFACQE
Q0AwDQYJKoZIhvcNAQELBQADggEBALAMHv6KktCFPUj/UZtA4Khfm+tgE2xPLQoV
F0rg3P03zNbPEojxJ0ccjBtLSIIywWPRmTNIOHS3pv0pipQ2wzpLxnCvLT2OlKml
hhjhIgpFr1LoUw+jjL8Dt5QrPYGXYrEb/Z0CD+Ko4Ws1Ldh/JtFA+wmHDgQyJfkA
l3JjOsIswUZnxDZmIndGovlyaYKTVopZ3VWyGS9OJhvYxPzjpoUGq8F2rm/QMvUw
N3FEmBdtbQzb1CZ2tM5LJGDYgp7Tav/px32VEOXWmZ3efHoApp6blXqN9uQNRUcU
ovsrQPLO5qw0ufTxTaSpCsy3WfI1Bzx07U2kk3nRywv8eNgG1ZY=
-----END CERTIFICATE-----
Generated at Fri Jun 6 06:42:57 2025 by rpki-client