Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/C8BF9494270811F0A1072D7FC4F9AE02.roa
File: C8BF9494270811F0A1072D7FC4F9AE02.roa (raw, json)
Hash identifier: HrIdGzgSwkvymACxv94NwvTy6AQSih4Wwbcg4MfctsU=
Subject key identifier: 98:C6:29:F0:B0:C0:D4:5E:5C:50:A9:2A:9F:FD:E8:27:13:F1:6F:F5
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: BB49
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/C8BF9494270811F0A1072D7FC4F9AE02.roa
Signing time: Mon 19 May 2025 06:55:30 +0000
ROA not before: Mon 19 May 2025 06:55:30 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 18002
IP address blocks: 14.102.1.0/24 maxlen: 24
14.102.2.0/23 maxlen: 24
14.102.2.0/24 maxlen: 24
14.102.3.0/24 maxlen: 24
14.102.22.0/23 maxlen: 24
14.102.22.0/24 maxlen: 24
14.102.23.0/24 maxlen: 24
14.102.24.0/22 maxlen: 24
14.102.24.0/24 maxlen: 24
14.102.25.0/24 maxlen: 24
14.102.26.0/24 maxlen: 24
14.102.27.0/24 maxlen: 24
14.102.32.0/22 maxlen: 24
14.102.32.0/24 maxlen: 24
14.102.33.0/24 maxlen: 24
14.102.34.0/24 maxlen: 24
14.102.35.0/24 maxlen: 24
14.102.36.0/23 maxlen: 24
14.102.36.0/24 maxlen: 24
14.102.37.0/24 maxlen: 24
14.102.38.0/24 maxlen: 24
14.102.40.0/22 maxlen: 24
14.102.40.0/24 maxlen: 24
14.102.41.0/24 maxlen: 24
14.102.42.0/24 maxlen: 24
14.102.43.0/24 maxlen: 24
14.102.44.0/24 maxlen: 24
14.102.45.0/24 maxlen: 24
14.102.48.0/24 maxlen: 24
14.102.50.0/24 maxlen: 24
14.102.56.0/23 maxlen: 24
14.102.56.0/24 maxlen: 24
14.102.57.0/24 maxlen: 24
14.102.59.0/24 maxlen: 24
14.102.64.0/22 maxlen: 24
14.102.64.0/24 maxlen: 24
14.102.65.0/24 maxlen: 24
14.102.66.0/24 maxlen: 24
14.102.67.0/24 maxlen: 24
14.102.68.0/22 maxlen: 24
14.102.68.0/24 maxlen: 24
14.102.69.0/24 maxlen: 24
14.102.70.0/24 maxlen: 24
14.102.71.0/24 maxlen: 24
14.102.72.0/22 maxlen: 24
14.102.72.0/24 maxlen: 24
14.102.73.0/24 maxlen: 24
14.102.74.0/24 maxlen: 24
14.102.75.0/24 maxlen: 24
14.102.76.0/23 maxlen: 24
14.102.78.0/24 maxlen: 24
14.102.80.0/23 maxlen: 24
14.102.80.0/24 maxlen: 24
14.102.81.0/24 maxlen: 24
14.102.82.0/24 maxlen: 24
14.102.88.0/24 maxlen: 24
14.102.91.0/24 maxlen: 24
14.102.92.0/23 maxlen: 24
14.102.95.0/24 maxlen: 24
14.102.96.0/23 maxlen: 24
14.102.96.0/24 maxlen: 24
14.102.97.0/24 maxlen: 24
14.102.100.0/23 maxlen: 24
14.102.103.0/24 maxlen: 24
14.102.104.0/22 maxlen: 24
14.102.104.0/24 maxlen: 24
14.102.105.0/24 maxlen: 24
14.102.106.0/23 maxlen: 24
14.102.108.0/22 maxlen: 24
14.102.108.0/24 maxlen: 24
14.102.109.0/24 maxlen: 24
14.102.110.0/24 maxlen: 24
14.102.111.0/24 maxlen: 24
14.102.112.0/22 maxlen: 24
14.102.112.0/24 maxlen: 24
14.102.113.0/24 maxlen: 24
14.102.114.0/24 maxlen: 24
14.102.115.0/24 maxlen: 24
14.102.116.0/22 maxlen: 24
14.102.116.0/24 maxlen: 24
14.102.117.0/24 maxlen: 24
14.102.118.0/24 maxlen: 24
14.102.119.0/24 maxlen: 24
14.102.120.0/22 maxlen: 24
14.102.120.0/24 maxlen: 24
14.102.121.0/24 maxlen: 24
14.102.122.0/24 maxlen: 24
14.102.123.0/24 maxlen: 24
14.102.125.0/24 maxlen: 24
14.102.126.0/23 maxlen: 24
14.102.126.0/24 maxlen: 24
14.102.127.0/24 maxlen: 24
43.251.212.0/22 maxlen: 24
61.14.228.0/23 maxlen: 24
61.14.231.0/24 maxlen: 24
103.5.200.0/22 maxlen: 24
103.59.189.0/24 maxlen: 24
103.87.101.0/24 maxlen: 24
103.87.102.0/23 maxlen: 24
103.158.131.0/24 maxlen: 24
103.160.24.0/24 maxlen: 24
103.173.200.0/24 maxlen: 24
103.175.72.0/24 maxlen: 24
103.175.73.0/24 maxlen: 24
110.172.130.0/23 maxlen: 24
110.172.132.0/24 maxlen: 24
110.172.134.0/23 maxlen: 24
110.172.136.0/24 maxlen: 24
110.172.138.0/23 maxlen: 24
110.172.140.0/24 maxlen: 24
110.172.145.0/24 maxlen: 24
110.172.147.0/24 maxlen: 24
110.172.150.0/24 maxlen: 24
110.172.151.0/24 maxlen: 24
110.172.152.0/22 maxlen: 24
110.172.156.0/22 maxlen: 24
110.172.160.0/23 maxlen: 24
110.172.162.0/24 maxlen: 24
110.172.164.0/24 maxlen: 24
110.172.166.0/23 maxlen: 24
110.172.168.0/24 maxlen: 24
110.172.170.0/23 maxlen: 24
110.172.174.0/23 maxlen: 24
110.172.177.0/24 maxlen: 24
110.172.178.0/23 maxlen: 24
110.172.184.0/22 maxlen: 24
111.235.64.0/22 maxlen: 24
114.69.228.0/22 maxlen: 24
114.69.240.0/24 maxlen: 24
114.69.242.0/23 maxlen: 24
114.69.248.0/23 maxlen: 24
114.69.252.0/22 maxlen: 24
118.91.176.0/23 maxlen: 24
118.91.178.0/24 maxlen: 24
118.91.189.0/24 maxlen: 24
118.91.191.0/24 maxlen: 24
202.89.64.0/24 maxlen: 24
202.89.65.0/24 maxlen: 24
202.89.66.0/24 maxlen: 24
202.89.67.0/24 maxlen: 24
202.89.68.0/24 maxlen: 24
202.89.69.0/24 maxlen: 24
202.89.70.0/24 maxlen: 24
202.89.71.0/24 maxlen: 24
202.89.72.0/24 maxlen: 24
202.89.74.0/24 maxlen: 24
202.89.76.0/24 maxlen: 24
202.89.77.0/24 maxlen: 24
202.89.78.0/24 maxlen: 24
2402:5b00::/44 maxlen: 44
2402:5b00:20::/44 maxlen: 44
2402:5b00:40::/44 maxlen: 44
2402:5b00:b0::/44 maxlen: 44
2402:5b00:d0::/44 maxlen: 44
2402:5b00:e0::/44 maxlen: 44
2402:5b00:f0::/44 maxlen: 44
2402:5b00:110::/44 maxlen: 44
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 12 Jun 2025 12:12:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 47945 (0xbb49)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Validity
Not Before: May 19 06:55:30 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=682ad5e1-f654
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:22:8e:d3:8a:3b:2f:b6:23:a5:cb:13:70:56:
2b:cf:d0:50:29:0e:c4:a4:4f:bd:81:43:ef:28:3d:
fd:99:6c:0a:82:a3:f5:a5:ac:4d:bf:74:ab:ab:cc:
4a:25:db:cd:da:9d:12:ca:8e:67:81:db:24:ed:5d:
c8:99:f0:07:f0:ce:08:70:d4:27:5f:37:89:ae:09:
01:02:a5:d0:0b:58:ca:66:e8:86:5d:de:ad:b4:c8:
9b:b2:24:00:5e:a0:59:65:d9:93:11:9b:48:6f:1b:
77:1c:41:3e:70:a9:70:bd:6b:8b:0d:d0:3d:8c:10:
cc:0d:fb:63:b4:dd:e9:b4:20:f4:14:56:0b:04:2f:
09:8a:f6:32:da:4e:dd:93:42:34:6c:25:d9:3b:19:
f6:73:9b:42:e3:f6:8d:5d:25:d4:a3:c8:8c:07:d0:
f2:c5:f3:fa:11:22:4b:d1:e7:13:d4:b8:3c:60:60:
a3:13:4d:4e:a5:fb:e4:b3:c4:05:84:d2:a8:bb:14:
df:5d:7f:6e:4a:14:a9:db:0e:a5:85:9f:c8:b3:86:
df:a9:fd:41:48:1d:2a:18:3f:98:c6:7e:c9:c0:e2:
ef:92:bc:f5:1b:a2:da:87:7a:17:80:0b:5e:e0:98:
df:7e:43:03:ce:2f:ac:82:9c:8c:af:02:29:66:68:
00:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:C6:29:F0:B0:C0:D4:5E:5C:50:A9:2A:9F:FD:E8:27:13:F1:6F:F5
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/C8BF9494270811F0A1072D7FC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
14.102.1.0-14.102.3.255
14.102.22.0-14.102.27.255
14.102.32.0-14.102.38.255
14.102.40.0-14.102.45.255
14.102.48.0/24
14.102.50.0/24
14.102.56.0/23
14.102.59.0/24
14.102.64.0-14.102.78.255
14.102.80.0-14.102.82.255
14.102.88.0/24
14.102.91.0-14.102.93.255
14.102.95.0-14.102.97.255
14.102.100.0/23
14.102.103.0-14.102.123.255
14.102.125.0-14.102.127.255
43.251.212.0/22
61.14.228.0/23
61.14.231.0/24
103.5.200.0/22
103.59.189.0/24
103.87.101.0-103.87.103.255
103.158.131.0/24
103.160.24.0/24
103.173.200.0/24
103.175.72.0/23
110.172.130.0-110.172.132.255
110.172.134.0-110.172.136.255
110.172.138.0-110.172.140.255
110.172.145.0/24
110.172.147.0/24
110.172.150.0-110.172.162.255
110.172.164.0/24
110.172.166.0-110.172.168.255
110.172.170.0/23
110.172.174.0/23
110.172.177.0-110.172.179.255
110.172.184.0/22
111.235.64.0/22
114.69.228.0/22
114.69.240.0/24
114.69.242.0/23
114.69.248.0/23
114.69.252.0/22
118.91.176.0-118.91.178.255
118.91.189.0/24
118.91.191.0/24
202.89.64.0-202.89.72.255
202.89.74.0/24
202.89.76.0-202.89.78.255
IPv6:
2402:5b00::/44
2402:5b00:20::/44
2402:5b00:40::/44
2402:5b00:b0::/44
2402:5b00:d0::-2402:5b00:ff:ffff:ffff:ffff:ffff:ffff
2402:5b00:110::/44
Signature Algorithm: sha256WithRSAEncryption
1e:7c:d2:43:de:ee:f8:ec:4d:3b:54:8c:d5:e6:86:a8:da:f6:
e7:30:ca:46:74:78:5f:e4:d7:97:b2:af:91:54:a8:a7:4f:55:
fd:05:a9:ed:ab:36:b6:8e:5d:b7:2c:a3:6f:f2:58:cb:74:6b:
79:c8:bb:e6:3a:68:73:53:cb:30:f8:7b:95:15:d1:96:97:d8:
44:6e:c3:15:72:e3:6a:31:a7:3e:66:75:16:8a:aa:8a:bc:f8:
03:12:ed:25:0d:e0:ff:cc:7d:3a:b8:1b:f8:64:63:6e:a1:78:
df:12:65:31:46:76:c2:02:36:d2:e8:d2:8a:4f:c9:1e:e8:76:
16:de:65:ac:86:3f:f4:89:56:2e:d2:9d:5b:e5:36:07:19:11:
c3:d0:a7:31:c0:24:0f:72:b7:59:a0:40:78:f6:f2:73:86:d7:
87:dd:00:ea:5a:8d:8b:72:21:90:02:0f:1e:d8:7b:ca:ce:66:
c2:92:df:4a:84:b1:4d:b7:c6:21:41:d2:44:47:3f:32:f0:b1:
f5:3c:ae:7c:2c:a2:3b:d7:81:61:83:b2:e2:11:f3:66:f0:7e:
37:4d:ef:69:7a:92:35:9e:85:e3:16:50:0c:7d:db:73:80:4d:
b3:24:57:62:40:94:a8:46:8c:e6:0c:d5:40:d5:32:29:fd:e7:
0d:32:c1:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 6 07:04:46 2025 by rpki-client