Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/EA9E43FA07B711F0BE6C0912C4F9AE02.roa
File: EA9E43FA07B711F0BE6C0912C4F9AE02.roa (raw, json)
Hash identifier: zf+J1eVxTR7oIgDn4xG1UVPbUvqU+Hsl4QuJNLhpKOI=
Subject key identifier: 28:C1:56:D2:E1:C6:C0:91:AA:9B:42:1C:74:E1:A7:70:F0:C6:FD:A4
Certificate issuer: /CN=A91A560A/serialNumber=167C3B221775FEC05039468150CE814756AC6F0A
Certificate serial: 4B1C
Authority key identifier: 16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/EA9E43FA07B711F0BE6C0912C4F9AE02.roa
Signing time: Thu 15 May 2025 09:18:59 +0000
ROA not before: Thu 15 May 2025 09:18:59 +0000
ROA not after: Fri 31 Oct 2025 00:00:00 +0000
asID: 151858
IP address blocks: 36.50.54.0/23 maxlen: 23
36.50.176.0/23 maxlen: 23
103.14.48.0/23 maxlen: 23
103.20.96.0/23 maxlen: 23
103.75.180.0/22 maxlen: 23
103.77.208.0/23 maxlen: 23
103.106.104.0/23 maxlen: 23
103.118.28.0/23 maxlen: 23
103.167.88.0/23 maxlen: 23
103.169.34.0/23 maxlen: 23
103.171.90.0/23 maxlen: 23
103.173.226.0/23 maxlen: 23
103.186.64.0/23 maxlen: 23
103.186.100.0/23 maxlen: 23
103.188.166.0/23 maxlen: 23
103.195.236.0/22 maxlen: 22
103.240.6.0/23 maxlen: 23
103.245.236.0/23 maxlen: 23
202.158.248.0/23 maxlen: 23
2001:df3:53c0::/48 maxlen: 48
2001:df4:e40::/48 maxlen: 48
2001:df4:2e40::/48 maxlen: 48
2001:df4:5740::/48 maxlen: 48
2001:df4:7d40::/48 maxlen: 48
2001:df4:7dc0::/48 maxlen: 48
2001:df4:ba40::/48 maxlen: 48
2400:6ea0::/48 maxlen: 48
2400:82a0::/32 maxlen: 48
2400:e6e0::/48 maxlen: 48
2400:eea0::/48 maxlen: 48
2401:1e60::/48 maxlen: 48
2401:2b20::/48 maxlen: 48
2401:35e0::/48 maxlen: 48
2401:4120::/48 maxlen: 48
2401:44e0::/48 maxlen: 48
2401:4660::/48 maxlen: 48
2401:5ce0::/48 maxlen: 48
2401:8260::/48 maxlen: 48
2407:66c0::/48 maxlen: 48
2407:9940::/48 maxlen: 48
2407:f140::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl
rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Jun 2025 14:35:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 19228 (0x4b1c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A560A, serialNumber=167C3B221775FEC05039468150CE814756AC6F0A
Validity
Not Before: May 15 09:18:59 2025 GMT
Not After : Oct 31 00:00:00 2025 GMT
Subject: CN=6825b183-8038
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:a4:e1:74:eb:4c:19:d8:89:19:c4:5c:ab:15:
12:21:cb:88:7f:cc:b1:ed:be:aa:f9:32:53:c3:4e:
3b:af:a4:43:48:4f:11:6b:06:8e:af:81:23:48:b9:
9a:8f:09:74:6f:ac:c9:53:00:b6:80:3a:98:e5:39:
a4:46:d8:7d:16:da:8b:37:da:d3:ff:a8:8c:e7:df:
3a:64:41:30:a1:6b:b3:83:27:2c:71:d1:04:f1:1f:
41:2a:84:e9:76:c7:56:13:e3:62:ae:7c:0b:c1:42:
db:b7:58:71:22:85:bb:f8:5e:21:84:78:d1:b5:9e:
f2:9a:9b:bd:21:c5:19:76:4b:2f:af:e5:dd:08:b7:
e4:d8:25:01:a4:f6:f2:98:5d:c6:75:22:a6:41:90:
10:a4:35:30:c6:9e:60:d5:2e:92:e1:28:24:d1:91:
2a:84:0d:7e:a3:1a:2d:7b:68:48:a8:a4:c1:1e:06:
88:56:cb:0e:7e:ee:fe:4e:50:66:e1:56:93:31:99:
17:94:55:1e:d2:4f:2b:f7:a3:2e:14:3e:20:d4:41:
bb:e7:00:d7:d7:87:38:d7:ff:30:01:bc:2b:81:d6:
7b:97:1f:f5:b9:a6:4a:f1:c0:6a:b9:c7:44:0d:bb:
c7:a5:62:3d:1c:a9:e4:c0:23:e6:8e:b8:53:90:2e:
82:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:C1:56:D2:E1:C6:C0:91:AA:9B:42:1C:74:E1:A7:70:F0:C6:FD:A4
X509v3 Authority Key Identifier:
keyid:16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/EA9E43FA07B711F0BE6C0912C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
36.50.54.0/23
36.50.176.0/23
103.14.48.0/23
103.20.96.0/23
103.75.180.0/22
103.77.208.0/23
103.106.104.0/23
103.118.28.0/23
103.167.88.0/23
103.169.34.0/23
103.171.90.0/23
103.173.226.0/23
103.186.64.0/23
103.186.100.0/23
103.188.166.0/23
103.195.236.0/22
103.240.6.0/23
103.245.236.0/23
202.158.248.0/23
IPv6:
2001:df3:53c0::/48
2001:df4:e40::/48
2001:df4:2e40::/48
2001:df4:5740::/48
2001:df4:7d40::/48
2001:df4:7dc0::/48
2001:df4:ba40::/48
2400:6ea0::/48
2400:82a0::/32
2400:e6e0::/48
2400:eea0::/48
2401:1e60::/48
2401:2b20::/48
2401:35e0::/48
2401:4120::/48
2401:44e0::/48
2401:4660::/48
2401:5ce0::/48
2401:8260::/48
2407:66c0::/48
2407:9940::/48
2407:f140::/48
Signature Algorithm: sha256WithRSAEncryption
52:aa:18:e5:66:4f:8f:ec:53:c4:29:67:98:c9:81:50:10:07:
34:04:37:7f:b2:6e:01:f7:07:b7:ba:20:0c:26:67:80:38:48:
b2:e0:7c:3b:00:cd:18:72:74:c4:28:73:c5:9f:4d:08:25:9c:
7b:b1:c9:61:9d:2e:3d:10:c9:c9:60:91:68:f4:43:28:69:7f:
fa:bb:75:46:9a:7a:ee:1f:82:fb:3a:ca:f1:a3:5a:79:d6:7a:
fb:a4:63:55:4f:c5:92:d3:10:40:ce:1f:a1:55:2d:1e:fd:d6:
6b:e8:21:5c:c3:c5:d0:bf:e3:f1:f4:9e:ec:07:c2:1a:f1:93:
5c:31:a4:40:50:c1:0e:7c:b8:ed:10:c3:56:67:cf:da:8f:d5:
17:56:37:8b:b7:f8:6e:e4:c7:92:51:5c:68:6b:87:cb:19:2c:
b1:fc:eb:72:aa:af:89:57:41:0b:74:3f:bc:c5:bf:8a:de:88:
cc:24:4a:6d:83:81:4b:b7:be:fb:7a:60:5a:41:b8:1f:e9:44:
37:87:ec:7b:63:29:8b:9d:db:da:45:3d:16:fe:9d:e4:23:ad:
45:5e:4b:80:32:14:56:a9:31:1b:aa:29:35:2a:f4:4a:6f:98:
68:bd:1c:1a:d6:b4:af:07:c3:d8:a8:1c:e1:17:f5:39:cd:ca:
5a:9b:dc:28
-----BEGIN CERTIFICATE-----
MIIGsTCCBZmgAwIBAgICSxwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QTU2MEExMTAvBgNVBAUTKDE2N0MzQjIyMTc3NUZFQzA1MDM5NDY4MTUwQ0U4MTQ3
NTZBQzZGMEEwHhcNMjUwNTE1MDkxODU5WhcNMjUxMDMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02ODI1YjE4My04MDM4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAy6ThdOtMGdiJGcRcqxUSIcuIf8yx7b6q+TJTw047r6RDSE8RawaOr4EjSLma
jwl0b6zJUwC2gDqY5TmkRth9FtqLN9rT/6iM5986ZEEwoWuzgycscdEE8R9BKoTp
dsdWE+NirnwLwULbt1hxIoW7+F4hhHjRtZ7ympu9IcUZdksvr+XdCLfk2CUBpPby
mF3GdSKmQZAQpDUwxp5g1S6S4Sgk0ZEqhA1+oxote2hIqKTBHgaIVssOfu7+TlBm
4VaTMZkXlFUe0k8r96MuFD4g1EG75wDX14c41/8wAbwrgdZ7lx/1uaZK8cBqucdE
DbvHpWI9HKnkwCPmjrhTkC6CZwIDAQABo4ID1TCCA9EwHQYDVR0OBBYEFCjBVtLh
xsCRqptCHHThp3Dwxv2kMB8GA1UdIwQYMBaAFBZ8OyIXdf7AUDlGgVDOgUdWrG8K
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNTYwQS9BQUVCMTkxQTFE
OEExMUUyQTM4N0QwRTQwOEIwMkNEMi9Gbnc3SWhkMV9zQlFPVWFCVU02QlIxYXNi
d28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0ZudzdJaGQxX3NCUU9VYUJVTTZCUjFhc2J3by5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
QTU2MEEvQUFFQjE5MUExRDhBMTFFMkEzODdEMEU0MDhCMDJDRDIvRUE5RTQzRkEw
N0I3MTFGMEJFNkMwOTEyQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwggFdBggrBgEFBQcBBwEB
/wSCAUwwggFIMHgEAgABMHIDBAEkMjYDBAEkMrADBAFnDjADBAFnFGADBAJnS7QD
BAFnTdADBAFnamgDBAFndhwDBAFnp1gDBAFnqSIDBAFnq1oDBAFnreIDBAFnukAD
BAFnumQDBAFnvKYDBAJnw+wDBAFn8AYDBAFn9ewDBAHKnvgwgcsEAgACMIHEAwcA
IAEN81PAAwcAIAEN9A5AAwcAIAEN9C5AAwcAIAEN9FdAAwcAIAEN9H1AAwcAIAEN
9H3AAwcAIAEN9LpAAwcAJABuoAAAAwUAJACCoAMHACQA5uAAAAMHACQA7qAAAAMH
ACQBHmAAAAMHACQBKyAAAAMHACQBNeAAAAMHACQBQSAAAAMHACQBROAAAAMHACQB
RmAAAAMHACQBXOAAAAMHACQBgmAAAAMHACQHZsAAAAMHACQHmUAAAAMHACQH8UAA
ADANBgkqhkiG9w0BAQsFAAOCAQEAUqoY5WZPj+xTxClnmMmBUBAHNAQ3f7JuAfcH
t7ogDCZngDhIsuB8OwDNGHJ0xChzxZ9NCCWce7HJYZ0uPRDJyWCRaPRDKGl/+rt1
Rpp67h+C+zrK8aNaedZ6+6RjVU/FktMQQM4foVUtHv3Wa+ghXMPF0L/j8fSe7AfC
GvGTXDGkQFDBDny47RDDVmfP2o/VF1Y3i7f4buTHklFcaGuHyxkssfzrcqqviVdB
C3Q/vMW/it6IzCRKbYOBS7e++3pgWkG4H+lEN4fse2Mpi53b2kU9Fv6d5COtRV5L
gDIUVqkxG6opNSr0Sm+YaL0cGta0rwfD2Kgc4Rf1Oc3KWpvcKA==
-----END CERTIFICATE-----
Generated at Tue Jun 3 23:55:35 2025 by rpki-client