Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A911FDBA/077851A41D9D11E2987CEE8B08B02CD2/CD692AAEF65311EAA7E5A684C4F9AE02.roa
File: CD692AAEF65311EAA7E5A684C4F9AE02.roa (raw, json)
Hash identifier: ZD0GATgarU5SJf51be/V12br/cDS5vLdtBMxX0BhbhU=
Subject key identifier: 58:80:6F:A5:F5:97:0D:74:30:73:04:76:79:81:F7:5B:C3:CF:AD:4B
Certificate issuer: /CN=A911FDBA/serialNumber=FEF9143B1616CDA1159B59ECD5E3993E982654FE
Certificate serial: 34E3
Authority key identifier: FE:F9:14:3B:16:16:CD:A1:15:9B:59:EC:D5:E3:99:3E:98:26:54:FE
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_vkUOxYWzaEVm1ns1eOZPpgmVP4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911FDBA/077851A41D9D11E2987CEE8B08B02CD2/CD692AAEF65311EAA7E5A684C4F9AE02.roa
Signing time: Fri 18 Apr 2025 15:31:13 +0000
ROA not before: Fri 18 Apr 2025 15:31:13 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 45671
IP address blocks: 27.50.64.0/19 maxlen: 24
27.111.80.0/24 maxlen: 24
27.111.85.0/24 maxlen: 24
27.111.87.0/24 maxlen: 24
27.111.90.0/23 maxlen: 24
43.242.68.0/22 maxlen: 24
43.250.204.0/22 maxlen: 24
45.65.12.0/24 maxlen: 24
103.2.196.0/22 maxlen: 24
103.11.52.0/22 maxlen: 24
103.12.8.0/23 maxlen: 24
103.12.10.0/24 maxlen: 24
103.13.100.0/22 maxlen: 24
103.13.186.0/23 maxlen: 24
103.24.14.0/24 maxlen: 24
103.227.28.0/23 maxlen: 24
103.227.30.0/23 maxlen: 24
103.235.52.0/22 maxlen: 24
103.248.189.0/24 maxlen: 24
103.248.190.0/24 maxlen: 24
103.248.191.0/24 maxlen: 24
103.255.249.0/24 maxlen: 24
114.141.192.0/24 maxlen: 24
114.141.193.0/24 maxlen: 24
114.141.194.0/24 maxlen: 24
114.141.195.0/24 maxlen: 24
114.141.196.0/22 maxlen: 24
114.141.200.0/22 maxlen: 24
117.20.0.0/20 maxlen: 24
117.120.8.0/21 maxlen: 24
118.127.0.0/18 maxlen: 24
163.53.232.0/22 maxlen: 24
180.92.192.0/21 maxlen: 24
202.60.64.0/20 maxlen: 24
202.60.80.0/20 maxlen: 24
202.125.32.0/20 maxlen: 20
202.130.32.0/22 maxlen: 24
202.131.88.0/24 maxlen: 24
202.131.89.0/24 maxlen: 24
202.131.90.0/24 maxlen: 24
202.131.91.0/24 maxlen: 24
202.131.92.0/24 maxlen: 24
202.131.93.0/24 maxlen: 24
202.131.94.0/24 maxlen: 24
203.26.196.0/22 maxlen: 24
203.28.51.0/24 maxlen: 24
221.121.128.0/19 maxlen: 24
223.252.0.0/18 maxlen: 24
223.252.96.0/20 maxlen: 24
2400:8100::/32 maxlen: 32
2400:8100:6afc::/48 maxlen: 48
2400:d400:1::/48 maxlen: 48
2400:d400:2::/48 maxlen: 48
2400:d400:6::/48 maxlen: 48
2400:d400:18::/48 maxlen: 48
2400:d400:b97::/48 maxlen: 48
2400:d400:d51::/48 maxlen: 48
2400:d400:1008::/48 maxlen: 48
2400:d400:1337::/48 maxlen: 48
2400:d400:5648::/48 maxlen: 48
2400:d400:9897::/48 maxlen: 48
2400:d400:9898::/48 maxlen: 48
2400:d400:b00b::/48 maxlen: 48
2400:d400:ffff::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A911FDBA/077851A41D9D11E2987CEE8B08B02CD2/_vkUOxYWzaEVm1ns1eOZPpgmVP4.crl
rsync://rpki.apnic.net/member_repository/A911FDBA/077851A41D9D11E2987CEE8B08B02CD2/_vkUOxYWzaEVm1ns1eOZPpgmVP4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_vkUOxYWzaEVm1ns1eOZPpgmVP4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 03 May 2025 14:58:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13539 (0x34e3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911FDBA, serialNumber=FEF9143B1616CDA1159B59ECD5E3993E982654FE
Validity
Not Before: Apr 18 15:31:13 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=68027041-ddee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:24:9b:7e:bc:ff:e2:c8:c2:e7:c4:e4:ca:3f:
1c:f8:02:65:98:e6:dd:ae:dc:62:3c:da:2c:12:3c:
9e:80:3e:a5:e2:49:e4:94:43:10:58:47:12:ed:3f:
e0:89:09:9e:59:6d:2c:6f:d7:cf:68:1c:ee:4e:5e:
db:3e:f0:7c:41:73:56:c1:d4:16:5c:2a:d3:d6:43:
c0:89:1c:75:bc:14:55:7f:e9:6f:51:f6:d1:01:0c:
84:5d:a6:0c:9c:b0:b7:1b:59:70:13:a4:42:a0:3c:
a4:c1:a3:5d:98:26:43:48:f8:ac:93:a2:56:ee:79:
59:ce:ec:9c:bf:97:66:16:fc:3e:77:5d:47:4c:f2:
43:84:f0:b5:3f:17:57:7e:36:c3:91:c3:7e:12:d4:
94:c6:55:a2:ef:6b:56:d2:07:c7:14:b4:bf:64:8b:
9b:54:18:d1:cc:43:33:49:ec:da:15:c7:1b:66:3e:
f8:2c:75:c9:34:11:a7:32:1a:8c:c7:98:eb:6f:6a:
78:9f:8f:92:22:9c:35:11:9a:29:e5:a1:ae:43:fa:
38:86:43:d3:c2:76:94:5d:dc:41:81:47:aa:78:c4:
ec:d9:6b:6a:c1:6b:3b:20:6d:d8:19:8c:87:9a:7b:
0c:92:19:29:46:63:f9:15:f4:00:2d:0a:60:48:dc:
4e:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:80:6F:A5:F5:97:0D:74:30:73:04:76:79:81:F7:5B:C3:CF:AD:4B
X509v3 Authority Key Identifier:
keyid:FE:F9:14:3B:16:16:CD:A1:15:9B:59:EC:D5:E3:99:3E:98:26:54:FE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911FDBA/077851A41D9D11E2987CEE8B08B02CD2/_vkUOxYWzaEVm1ns1eOZPpgmVP4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_vkUOxYWzaEVm1ns1eOZPpgmVP4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911FDBA/077851A41D9D11E2987CEE8B08B02CD2/CD692AAEF65311EAA7E5A684C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
27.50.64.0/19
27.111.80.0/24
27.111.85.0/24
27.111.87.0/24
27.111.90.0/23
43.242.68.0/22
43.250.204.0/22
45.65.12.0/24
103.2.196.0/22
103.11.52.0/22
103.12.8.0-103.12.10.255
103.13.100.0/22
103.13.186.0/23
103.24.14.0/24
103.227.28.0/22
103.235.52.0/22
103.248.189.0-103.248.191.255
103.255.249.0/24
114.141.192.0-114.141.203.255
117.20.0.0/20
117.120.8.0/21
118.127.0.0/18
163.53.232.0/22
180.92.192.0/21
202.60.64.0/19
202.125.32.0/20
202.130.32.0/22
202.131.88.0-202.131.94.255
203.26.196.0/22
203.28.51.0/24
221.121.128.0/19
223.252.0.0/18
223.252.96.0/20
IPv6:
2400:8100::/32
2400:d400:1::-2400:d400:2:ffff:ffff:ffff:ffff:ffff
2400:d400:6::/48
2400:d400:18::/48
2400:d400:b97::/48
2400:d400:d51::/48
2400:d400:1008::/48
2400:d400:1337::/48
2400:d400:5648::/48
2400:d400:9897::-2400:d400:9898:ffff:ffff:ffff:ffff:ffff
2400:d400:b00b::/48
2400:d400:ffff::/48
Signature Algorithm: sha256WithRSAEncryption
21:78:d8:ee:7f:e2:e1:b6:17:d6:03:16:3d:33:0d:4a:af:4e:
28:3a:91:9c:d6:6c:6a:b6:e7:47:3c:6d:34:15:ba:dc:db:19:
45:5e:0a:57:1b:28:c7:bd:a6:ed:ee:09:6a:04:4f:41:02:92:
1d:68:f2:8e:02:bd:0f:5e:a9:63:6f:28:71:6f:32:6f:09:56:
46:57:db:8a:a4:ae:32:96:74:fe:69:22:32:15:c8:e1:7e:46:
43:c6:80:4f:bc:6c:42:dd:f6:a1:d4:34:bf:89:27:92:bf:b9:
6b:76:c1:7c:c2:a4:95:3e:70:76:80:ba:9e:5b:e6:3f:19:59:
32:6c:83:8d:60:77:20:eb:58:d5:c5:0f:10:15:da:f8:bc:8a:
9c:d0:10:a5:38:a1:11:c4:e9:6d:da:01:f0:da:0c:a5:ee:b6:
89:5e:75:33:41:d6:a4:9b:36:50:2f:ba:5a:0f:78:49:91:6e:
5d:cc:e2:f8:2c:d6:65:2f:4e:71:57:6b:68:d5:7f:96:df:39:
24:e7:e1:73:44:5c:5c:c8:95:c0:46:9a:47:ee:4d:2d:47:25:
b0:be:56:69:1b:78:b2:fe:c9:dc:2a:b6:b1:48:24:2e:24:6a:
9d:65:cb:db:06:f3:d8:23:bd:a9:34:98:2a:56:ad:99:94:c6:
c4:57:9d:61
-----BEGIN CERTIFICATE-----
MIIG4zCCBcugAwIBAgICNOMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MUZEQkExMTAvBgNVBAUTKEZFRjkxNDNCMTYxNkNEQTExNTlCNTlFQ0Q1RTM5OTNF
OTgyNjU0RkUwHhcNMjUwNDE4MTUzMTEzWhcNMjYwNzAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02ODAyNzA0MS1kZGVlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA1ySbfrz/4sjC58Tkyj8c+AJlmObdrtxiPNosEjyegD6l4knklEMQWEcS7T/g
iQmeWW0sb9fPaBzuTl7bPvB8QXNWwdQWXCrT1kPAiRx1vBRVf+lvUfbRAQyEXaYM
nLC3G1lwE6RCoDykwaNdmCZDSPisk6JW7nlZzuycv5dmFvw+d11HTPJDhPC1PxdX
fjbDkcN+EtSUxlWi72tW0gfHFLS/ZIubVBjRzEMzSezaFccbZj74LHXJNBGnMhqM
x5jrb2p4n4+SIpw1EZop5aGuQ/o4hkPTwnaUXdxBgUeqeMTs2WtqwWs7IG3YGYyH
mnsMkhkpRmP5FfQALQpgSNxOqwIDAQABo4IEBzCCBAMwHQYDVR0OBBYEFFiAb6X1
lw10MHMEdnmB91vDz61LMB8GA1UdIwQYMBaAFP75FDsWFs2hFZtZ7NXjmT6YJlT+
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExRkRCQS8wNzc4NTFBNDFE
OUQxMUUyOTg3Q0VFOEIwOEIwMkNEMi9fdmtVT3hZV3phRVZtMW5zMWVPWlBwZ21W
UDQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL192a1VPeFlXemFFVm0xbnMxZU9aUHBnbVZQNC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
MUZEQkEvMDc3ODUxQTQxRDlEMTFFMjk4N0NFRThCMDhCMDJDRDIvQ0Q2OTJBQUVG
NjUzMTFFQUE3RTVBNjg0QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwggGPBggrBgEFBQcBBwEB
/wSCAX4wggF6MIHtBAIAATCB5gMEBRsyQAMEABtvUAMEABtvVQMEABtvVwMEARtv
WgMEAivyRAMEAiv6zAMEAC1BDAMEAmcCxAMEAmcLNDAMAwQDZwwIAwQAZwwKAwQC
Zw1kAwQBZw26AwQAZxgOAwQCZ+McAwQCZ+s0MAwDBABn+L0DBAZn+IADBABn//kw
DAMEBnKNwAMEAnKNyAMEBHUUAAMEA3V4CAMEBnZ/AAMEAqM16AMEA7RcwAMEBco8
QAMEBMp9IAMEAsqCIDAMAwQDyoNYAwQAyoNeAwQCyxrEAwQAyxwzAwQF3XmAAwQG
3/wAAwQE3/xgMIGHBAIAAjCBgAMFACQAgQAwEgMHACQA1AAAAQMHACQA1AAAAgMH
ACQA1AAABgMHACQA1AAAGAMHACQA1AALlwMHACQA1AANUQMHACQA1AAQCAMHACQA
1AATNwMHACQA1ABWSDASAwcAJADUAJiXAwcAJADUAJiYAwcAJADUALALAwcAJADU
AP//MA0GCSqGSIb3DQEBCwUAA4IBAQAheNjuf+LhthfWAxY9Mw1Kr04oOpGc1mxq
tudHPG00Fbrc2xlFXgpXGyjHvabt7glqBE9BApIdaPKOAr0PXqljbyhxbzJvCVZG
V9uKpK4ylnT+aSIyFcjhfkZDxoBPvGxC3fah1DS/iSeSv7lrdsF8wqSVPnB2gLqe
W+Y/GVkybIONYHcg61jVxQ8QFdr4vIqc0BClOKERxOlt2gHw2gyl7raJXnUzQdak
mzZQL7paD3hJkW5dzOL4LNZlL05xV2to1X+W3zkk5+FzRFxcyJXARppH7k0tRyWw
vlZpG3iy/sncKraxSCQuJGqdZcvbBvPYI72pNJgqVq2ZlMbEV51h
-----END CERTIFICATE-----
Generated at Sat Apr 26 20:21:18 2025 by rpki-client