Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A919EDE5/4A2B6CCE1D9E11E29CA3098E08B02CD2/450B9058E3B511EF8A23824BC4F9AE02.roa
File: 450B9058E3B511EF8A23824BC4F9AE02.roa (raw, json)
Hash identifier: 0Ggc/FBhguDwAukHUa9qSFMeIGdnMgZmUONFdpNoWCc=
Subject key identifier: 8D:1D:FE:D2:D7:38:D8:96:9D:5A:3F:81:63:E0:2F:7F:B6:07:E7:C6
Certificate issuer: /CN=A919EDE5/serialNumber=23E983EB8BB7F86BA59235241A10160C8052C64E
Certificate serial: 34F8
Authority key identifier: 23:E9:83:EB:8B:B7:F8:6B:A5:92:35:24:1A:10:16:0C:80:52:C6:4E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/I-mD64u3-GulkjUkGhAWDIBSxk4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A919EDE5/4A2B6CCE1D9E11E29CA3098E08B02CD2/450B9058E3B511EF8A23824BC4F9AE02.roa
Signing time: Mon 08 Sep 2025 07:02:13 +0000
ROA not before: Mon 08 Sep 2025 07:02:12 +0000
ROA not after: Tue 30 Dec 2025 00:00:00 +0000
asID: 132618
IP address blocks: 49.237.4.0/22 maxlen: 22
49.237.4.0/24 maxlen: 24
49.237.5.0/24 maxlen: 24
49.237.6.0/24 maxlen: 24
49.237.7.0/24 maxlen: 24
49.237.8.0/22 maxlen: 22
49.237.8.0/24 maxlen: 24
49.237.9.0/24 maxlen: 24
49.237.10.0/24 maxlen: 24
49.237.11.0/24 maxlen: 24
49.237.32.0/22 maxlen: 22
49.237.32.0/24 maxlen: 24
49.237.33.0/24 maxlen: 24
49.237.34.0/24 maxlen: 24
49.237.35.0/24 maxlen: 24
49.237.36.0/22 maxlen: 22
49.237.36.0/24 maxlen: 24
49.237.37.0/24 maxlen: 24
49.237.38.0/24 maxlen: 24
49.237.39.0/24 maxlen: 24
49.237.64.0/21 maxlen: 21
49.237.64.0/24 maxlen: 24
49.237.65.0/24 maxlen: 24
49.237.66.0/24 maxlen: 24
49.237.67.0/24 maxlen: 24
49.237.68.0/24 maxlen: 24
49.237.69.0/24 maxlen: 24
49.237.70.0/24 maxlen: 24
49.237.71.0/24 maxlen: 24
49.237.72.0/21 maxlen: 21
49.237.72.0/24 maxlen: 24
49.237.73.0/24 maxlen: 24
49.237.74.0/24 maxlen: 24
49.237.75.0/24 maxlen: 24
49.237.76.0/24 maxlen: 24
49.237.77.0/24 maxlen: 24
49.237.78.0/24 maxlen: 24
49.237.79.0/24 maxlen: 24
49.237.80.0/21 maxlen: 21
49.237.80.0/24 maxlen: 24
49.237.81.0/24 maxlen: 24
49.237.82.0/24 maxlen: 24
49.237.83.0/24 maxlen: 24
49.237.84.0/24 maxlen: 24
49.237.85.0/24 maxlen: 24
49.237.86.0/24 maxlen: 24
49.237.87.0/24 maxlen: 24
49.237.88.0/21 maxlen: 21
49.237.88.0/24 maxlen: 24
49.237.89.0/24 maxlen: 24
49.237.90.0/24 maxlen: 24
49.237.91.0/24 maxlen: 24
49.237.92.0/24 maxlen: 24
49.237.93.0/24 maxlen: 24
49.237.94.0/24 maxlen: 24
49.237.95.0/24 maxlen: 24
49.237.96.0/21 maxlen: 21
49.237.112.0/21 maxlen: 21
49.237.164.0/22 maxlen: 22
49.237.164.0/24 maxlen: 24
49.237.165.0/24 maxlen: 24
49.237.166.0/24 maxlen: 24
49.237.167.0/24 maxlen: 24
49.237.168.0/22 maxlen: 22
49.237.168.0/24 maxlen: 24
49.237.169.0/24 maxlen: 24
49.237.170.0/24 maxlen: 24
49.237.171.0/24 maxlen: 24
49.237.176.0/22 maxlen: 22
49.237.176.0/24 maxlen: 24
49.237.177.0/24 maxlen: 24
49.237.178.0/24 maxlen: 24
49.237.179.0/24 maxlen: 24
49.237.180.0/22 maxlen: 22
49.237.180.0/24 maxlen: 24
49.237.181.0/24 maxlen: 24
49.237.182.0/24 maxlen: 24
49.237.183.0/24 maxlen: 24
49.237.204.0/23 maxlen: 23
223.24.172.0/22 maxlen: 22
223.24.172.0/23 maxlen: 23
223.24.172.0/24 maxlen: 24
223.24.173.0/24 maxlen: 24
223.24.174.0/24 maxlen: 24
223.24.175.0/24 maxlen: 24
223.24.192.0/21 maxlen: 21
223.24.192.0/24 maxlen: 24
223.24.193.0/24 maxlen: 24
223.24.194.0/24 maxlen: 24
223.24.195.0/24 maxlen: 24
223.24.196.0/24 maxlen: 24
223.24.197.0/24 maxlen: 24
223.24.198.0/24 maxlen: 24
223.24.199.0/24 maxlen: 24
223.24.200.0/21 maxlen: 21
223.24.200.0/24 maxlen: 24
223.24.201.0/24 maxlen: 24
223.24.202.0/24 maxlen: 24
223.24.203.0/24 maxlen: 24
223.24.204.0/24 maxlen: 24
223.24.205.0/24 maxlen: 24
223.24.206.0/24 maxlen: 24
223.24.207.0/24 maxlen: 24
223.24.208.0/21 maxlen: 21
223.24.208.0/24 maxlen: 24
223.24.209.0/24 maxlen: 24
223.24.210.0/24 maxlen: 24
223.24.211.0/24 maxlen: 24
223.24.212.0/24 maxlen: 24
223.24.213.0/24 maxlen: 24
223.24.214.0/24 maxlen: 24
223.24.215.0/24 maxlen: 24
223.24.216.0/21 maxlen: 21
223.24.216.0/24 maxlen: 24
223.24.217.0/24 maxlen: 24
223.24.218.0/24 maxlen: 24
223.24.219.0/24 maxlen: 24
223.24.220.0/24 maxlen: 24
223.24.221.0/24 maxlen: 24
223.24.222.0/24 maxlen: 24
223.24.223.0/24 maxlen: 24
223.24.224.0/21 maxlen: 21
223.24.240.0/21 maxlen: 21
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A919EDE5/4A2B6CCE1D9E11E29CA3098E08B02CD2/I-mD64u3-GulkjUkGhAWDIBSxk4.crl
rsync://rpki.apnic.net/member_repository/A919EDE5/4A2B6CCE1D9E11E29CA3098E08B02CD2/I-mD64u3-GulkjUkGhAWDIBSxk4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/I-mD64u3-GulkjUkGhAWDIBSxk4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 15 Sep 2025 14:59:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13560 (0x34f8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A919EDE5, serialNumber=23E983EB8BB7F86BA59235241A10160C8052C64E
Validity
Not Before: Sep 8 07:02:12 2025 GMT
Not After : Dec 30 00:00:00 2025 GMT
Subject: CN=68be7f74-efb9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:3c:f9:85:dd:86:91:8b:1e:dd:88:e7:58:59:
52:40:64:a3:72:69:71:79:08:7e:14:8e:8d:b2:0f:
db:fd:0b:ad:df:b6:e7:73:fa:14:21:80:91:b1:7d:
ca:7a:b0:62:3d:30:1d:7a:38:8b:cd:90:d6:77:cf:
4d:27:e9:77:af:41:03:51:28:32:f8:51:b9:1d:1f:
00:d6:f1:49:de:ff:15:15:b4:44:6d:f4:f6:d9:13:
38:76:0a:10:1b:8d:dc:e7:1d:74:f4:ec:d2:fc:f0:
d1:89:45:78:2e:78:b2:ec:9a:4f:e5:dd:41:d4:90:
37:f3:d5:75:95:eb:29:c5:14:dc:be:24:dc:36:b9:
98:8c:7f:3e:53:bb:81:e0:18:59:31:8e:09:6d:77:
a5:9d:54:2c:81:f5:24:50:6f:de:2b:1c:da:00:26:
88:65:8b:df:a8:c6:dd:f3:6d:52:ae:b7:8c:66:25:
e5:29:2a:18:b2:12:3a:53:cb:30:84:bc:66:68:6b:
0f:89:ca:7b:49:b1:c2:6a:5d:fa:b1:31:3f:a4:46:
97:c0:4f:40:01:ba:89:a8:f6:4c:87:41:4a:ca:fe:
18:c7:a3:97:27:a3:0d:0e:18:ca:92:3e:58:de:e4:
d3:6a:ca:0a:04:70:70:cb:1b:ef:30:94:2b:a2:0a:
a7:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:1D:FE:D2:D7:38:D8:96:9D:5A:3F:81:63:E0:2F:7F:B6:07:E7:C6
X509v3 Authority Key Identifier:
keyid:23:E9:83:EB:8B:B7:F8:6B:A5:92:35:24:1A:10:16:0C:80:52:C6:4E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A919EDE5/4A2B6CCE1D9E11E29CA3098E08B02CD2/I-mD64u3-GulkjUkGhAWDIBSxk4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/I-mD64u3-GulkjUkGhAWDIBSxk4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919EDE5/4A2B6CCE1D9E11E29CA3098E08B02CD2/450B9058E3B511EF8A23824BC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
49.237.4.0-49.237.11.255
49.237.32.0/21
49.237.64.0-49.237.103.255
49.237.112.0/21
49.237.164.0-49.237.171.255
49.237.176.0/21
49.237.204.0/23
223.24.172.0/22
223.24.192.0-223.24.231.255
223.24.240.0/21
Signature Algorithm: sha256WithRSAEncryption
1b:e3:a4:4e:24:a8:02:d0:13:72:8d:20:01:d3:2d:51:98:d7:
8d:0f:7e:25:f7:54:c3:2f:35:02:c0:74:9e:bd:5d:90:19:e0:
1b:93:12:72:3f:1e:27:70:19:a2:f0:df:1f:dc:1d:de:36:1c:
7d:5e:d3:29:da:f9:06:3f:5b:e9:98:9f:51:5d:e7:8a:33:62:
98:98:6e:44:cf:90:a4:02:82:b4:31:77:7f:79:37:a8:06:c3:
d8:f4:ff:12:b2:62:5d:3a:97:e3:43:10:dd:19:82:3e:d4:91:
35:60:7f:1a:32:7e:7f:0f:e7:20:e0:db:32:d6:0f:4e:33:dd:
cf:88:b8:40:6d:0a:81:22:41:dc:3a:12:5a:b8:91:9b:83:2e:
92:ef:94:45:b3:ff:d1:26:b1:08:a1:ec:8e:1f:54:f3:11:9f:
88:a6:80:c0:93:52:89:a3:18:95:0f:ab:30:37:a0:db:00:42:
be:30:ff:8c:84:3b:05:e0:04:76:3d:fa:34:d2:47:bc:a6:3d:
e1:09:43:ad:78:fd:d6:26:a8:10:90:0f:e3:44:45:70:ca:44:
93:2f:09:28:97:0b:06:04:cd:8c:af:70:92:a3:03:5f:e6:5f:
ef:86:4f:8e:31:45:d4:2c:db:d3:3e:8f:e7:83:6a:28:f0:90:
a9:18:14:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 9 08:18:23 2025 by rpki-client