Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/D8D56D1C36D611F093F2A736C4F9AE02.roa
File: D8D56D1C36D611F093F2A736C4F9AE02.roa (raw, json)
Hash identifier: eCxCOrC/rZg2bt+OUdzyB8CFs6SlbP8tsGyyIXDBR9I=
Subject key identifier: C8:13:04:87:7E:BA:59:78:42:4B:F4:E3:E2:52:E4:82:81:05:99:6D
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: BBAA
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/D8D56D1C36D611F093F2A736C4F9AE02.roa
Signing time: Thu 22 May 2025 06:34:44 +0000
ROA not before: Thu 22 May 2025 06:34:44 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 132296
IP address blocks: 43.248.68.0/24 maxlen: 24
43.248.69.0/24 maxlen: 24
43.248.70.0/24 maxlen: 24
43.248.71.0/24 maxlen: 24
45.119.12.0/24 maxlen: 24
45.119.13.0/24 maxlen: 24
45.119.14.0/24 maxlen: 24
45.119.15.0/24 maxlen: 24
103.57.252.0/24 maxlen: 24
103.57.253.0/24 maxlen: 24
103.57.254.0/24 maxlen: 24
103.57.255.0/24 maxlen: 24
103.116.169.0/24 maxlen: 24
103.147.174.0/23 maxlen: 24
103.148.138.0/23 maxlen: 24
103.157.206.0/23 maxlen: 24
103.157.230.0/23 maxlen: 24
103.171.126.0/23 maxlen: 24
103.174.26.0/23 maxlen: 24
103.177.58.0/23 maxlen: 24
103.177.128.0/24 maxlen: 24
103.177.129.0/24 maxlen: 24
103.204.166.0/24 maxlen: 24
103.255.36.0/24 maxlen: 24
103.255.37.0/24 maxlen: 24
103.255.38.0/24 maxlen: 24
103.255.39.0/24 maxlen: 24
2402:5c80::/32 maxlen: 32
2407:6fc0::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 12 Jun 2025 12:12:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 48042 (0xbbaa)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Validity
Not Before: May 22 06:34:44 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=682ec583-bce3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:97:97:7d:34:40:94:32:6f:d9:81:45:9e:0a:
8f:31:f5:13:37:c8:ee:67:b8:ba:a3:db:03:d6:e4:
62:5f:00:f7:65:33:59:d4:10:69:56:df:94:9e:c5:
1c:7e:06:13:76:a6:5a:3c:03:7b:c7:31:f1:65:a0:
7e:24:e6:25:62:8a:b2:24:76:6f:b7:73:07:3c:cd:
a8:43:8f:51:c2:e0:3d:e3:c1:95:1b:99:ad:ca:e0:
98:ab:57:7f:8d:1b:16:1f:8e:e2:ab:79:22:9b:3f:
1f:8c:24:bc:56:87:ce:4c:eb:99:f6:68:d7:7c:40:
71:6b:b1:90:ba:c3:bf:a1:83:9e:e4:2e:48:bb:b5:
f8:f3:d6:3f:3d:25:db:e5:c8:39:7d:0e:68:3d:3f:
ad:97:d1:e1:91:b6:17:27:6d:0b:70:15:ac:e9:a1:
d1:26:67:2e:e7:d4:50:f7:92:fb:ec:5e:6a:af:ab:
25:58:9d:3a:4c:e6:88:35:8a:7d:03:a0:07:16:db:
9f:7a:1f:36:7a:ea:e7:55:22:e0:19:6f:5c:19:fa:
ab:af:ec:ed:ff:97:f2:93:5a:1b:0a:f0:be:e2:85:
28:07:f0:a4:8d:ff:b6:4c:bb:97:20:2f:12:5c:6c:
77:4c:56:bf:83:8d:93:88:99:33:f3:e4:89:5c:7a:
42:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:13:04:87:7E:BA:59:78:42:4B:F4:E3:E2:52:E4:82:81:05:99:6D
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/D8D56D1C36D611F093F2A736C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
43.248.68.0/22
45.119.12.0/22
103.57.252.0/22
103.116.169.0/24
103.147.174.0/23
103.148.138.0/23
103.157.206.0/23
103.157.230.0/23
103.171.126.0/23
103.174.26.0/23
103.177.58.0/23
103.177.128.0/23
103.204.166.0/24
103.255.36.0/22
IPv6:
2402:5c80::/32
2407:6fc0::/32
Signature Algorithm: sha256WithRSAEncryption
33:be:17:aa:f9:bc:f0:af:67:43:b7:f4:6f:12:c1:f7:c0:a0:
fe:9d:94:e3:20:a9:21:95:b2:be:45:30:d5:2a:dc:fc:a8:57:
a8:42:88:95:1a:22:fa:02:bb:34:71:8e:7e:59:1b:62:e1:d9:
6b:9a:0f:7f:d3:92:4a:3c:95:4e:88:72:20:fc:37:95:2a:db:
d1:07:26:6b:2d:d6:be:8e:b2:60:5d:c4:77:ae:bf:10:4f:f1:
5d:cc:b9:1c:51:80:d4:7f:d3:80:0b:e9:cd:b6:71:d8:1f:f4:
9a:fd:96:fb:67:16:d4:a5:85:7f:14:7d:65:3a:58:67:ad:4b:
cf:4a:cc:02:50:81:a4:e9:11:3c:19:57:5b:7b:14:d0:ef:a2:
4d:db:6c:c7:6c:4d:63:64:53:f1:37:fb:07:70:07:b4:ac:61:
30:19:27:d2:e4:97:6b:a5:1a:20:20:81:40:90:b8:a3:8a:a2:
10:d4:75:0e:75:3f:8f:08:e0:55:0d:71:8c:e7:27:1a:08:c6:
3a:fd:a7:dc:74:48:b5:94:26:74:38:07:ac:98:42:23:fa:24:
84:bd:cb:fa:83:aa:69:8e:93:28:15:72:a7:97:a8:5a:53:aa:
24:c8:0b:47:66:5c:c2:f0:74:4c:2c:3e:2b:47:d9:73:84:7d:
9d:05:5f:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 5 19:19:38 2025 by rpki-client