Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/F364E1E284C111F08BF5367EC4F9AE02.roa
File: F364E1E284C111F08BF5367EC4F9AE02.roa (raw, json)
Hash identifier: eib7fe5UI++6xwUaLGUQt8rhzo9qHw2N6Psb2RiPcZg=
Subject key identifier: 6C:E0:60:B6:43:07:BE:00:33:95:18:E4:70:91:93:74:F9:F7:76:44
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: C408
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/F364E1E284C111F08BF5367EC4F9AE02.roa
Signing time: Wed 03 Sep 2025 07:55:22 +0000
ROA not before: Wed 03 Sep 2025 07:55:22 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 149240
IP address blocks: 36.50.118.0/23 maxlen: 24
103.3.234.0/23 maxlen: 24
103.61.242.0/23 maxlen: 24
103.88.56.0/24 maxlen: 24
103.88.57.0/24 maxlen: 24
103.139.191.0/24 maxlen: 24
103.148.119.0/24 maxlen: 24
103.152.158.0/24 maxlen: 24
103.157.112.0/23 maxlen: 24
103.159.99.0/24 maxlen: 24
103.162.196.0/23 maxlen: 24
103.163.149.0/24 maxlen: 24
103.163.166.0/23 maxlen: 24
103.167.172.0/24 maxlen: 24
103.170.0.0/23 maxlen: 24
103.170.190.0/24 maxlen: 24
103.171.172.0/24 maxlen: 24
103.174.108.0/23 maxlen: 24
103.178.176.0/23 maxlen: 24
103.184.40.0/24 maxlen: 24
103.184.236.0/23 maxlen: 24
103.191.203.0/24 maxlen: 24
2001:df0:3bc0::/48 maxlen: 48
2001:df0:8640::/48 maxlen: 48
2001:df0:9340::/48 maxlen: 48
2001:df1:9c40::/48 maxlen: 48
2001:df2:c3c0::/48 maxlen: 48
2001:df3:4940::/48 maxlen: 48
2001:df3:b6c0::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 13 Sep 2025 15:24:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 50184 (0xc408)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Validity
Not Before: Sep 3 07:55:22 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=68b7f46a-ab06
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:ff:71:59:29:eb:96:cb:19:ab:aa:d6:df:62:
f6:02:24:cb:a0:f3:9f:9c:b5:56:39:d1:aa:23:c9:
4b:06:45:78:2d:7c:30:2b:d8:1f:4b:95:42:19:35:
68:2c:09:f9:ef:72:fa:30:b0:bd:63:57:67:c0:d1:
e8:5e:2d:0d:5e:85:74:e3:da:1c:b3:0b:81:e0:1b:
37:f9:db:6b:a0:90:0b:27:e5:8a:dc:e6:21:70:21:
4e:8b:12:1a:f9:3a:98:a2:82:60:bd:6b:32:40:8d:
65:69:c8:1b:03:26:77:75:13:8b:38:56:ea:2a:7f:
b6:73:08:0b:1f:9f:88:67:e7:9b:f6:01:c0:d5:00:
de:6a:14:6f:eb:34:c4:54:49:bc:2e:f0:47:82:e5:
0c:22:d1:f0:15:53:fe:f0:be:c5:72:c6:31:4a:e6:
d9:6b:73:4b:85:49:7d:97:1e:80:71:a5:0f:bc:dc:
c0:b0:a8:5e:16:8e:33:e7:a0:46:69:56:c0:8b:84:
87:76:f3:65:e9:ba:4a:af:07:69:c5:63:eb:fc:e1:
2d:24:1f:69:00:a9:37:c0:22:91:1f:c1:33:24:ea:
67:ba:13:82:01:31:1b:2f:92:ee:da:71:0e:dd:3c:
7f:d3:18:b9:c6:91:49:75:55:f3:3d:90:34:0e:0f:
10:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:E0:60:B6:43:07:BE:00:33:95:18:E4:70:91:93:74:F9:F7:76:44
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/F364E1E284C111F08BF5367EC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
36.50.118.0/23
103.3.234.0/23
103.61.242.0/23
103.88.56.0/23
103.139.191.0/24
103.148.119.0/24
103.152.158.0/24
103.157.112.0/23
103.159.99.0/24
103.162.196.0/23
103.163.149.0/24
103.163.166.0/23
103.167.172.0/24
103.170.0.0/23
103.170.190.0/24
103.171.172.0/24
103.174.108.0/23
103.178.176.0/23
103.184.40.0/24
103.184.236.0/23
103.191.203.0/24
IPv6:
2001:df0:3bc0::/48
2001:df0:8640::/48
2001:df0:9340::/48
2001:df1:9c40::/48
2001:df2:c3c0::/48
2001:df3:4940::/48
2001:df3:b6c0::/48
Signature Algorithm: sha256WithRSAEncryption
68:49:14:96:10:3b:43:60:31:67:f3:08:f7:32:0d:51:f6:6e:
d3:61:8f:8d:0b:34:4f:84:46:9b:9d:bb:5e:b1:b4:58:96:3b:
5a:e4:d9:f8:3a:e1:de:0a:4a:c3:63:b8:c1:b7:59:92:34:06:
2c:44:3f:dc:2c:8a:e1:d5:c8:08:63:ce:f2:e5:82:f6:bf:0a:
6a:ad:e9:3c:5f:06:1f:45:07:2b:5c:78:84:95:94:cc:9a:3e:
95:36:32:56:3a:9b:16:8f:99:42:63:23:5e:43:a6:a5:be:0d:
14:03:90:00:1d:16:98:3c:ae:16:5d:20:88:3d:e4:bd:1c:55:
f8:63:ce:0c:42:f1:5d:1e:cb:b0:99:65:84:18:02:40:c2:f8:
67:a5:f5:c5:08:2d:95:d2:af:6e:4f:1f:0b:c1:b1:6e:42:37:
5e:50:aa:27:17:d9:a3:16:40:fe:86:0f:b5:59:59:72:df:a1:
47:9b:00:e7:14:15:e7:9c:5f:33:a0:e2:03:41:6a:74:99:55:
b5:0e:d8:98:4d:21:6d:f2:77:43:f4:f7:b6:2f:83:78:a2:09:
ba:08:88:a3:9e:1c:9d:04:e6:1a:d7:27:f9:a8:45:ee:2a:32:
6c:a8:28:e6:65:60:e3:a0:2f:f2:0a:e9:60:a1:25:a4:d9:61:
62:69:4f:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 16:29:57 2025 by rpki-client