Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A913D1EA/9C932B48173A11EBA3B97E7FC4F9AE02/9D00ABAC089C11F09075A534C4F9AE02.roa
File: 9D00ABAC089C11F09075A534C4F9AE02.roa (raw, json)
Hash identifier: HmTougKy3rF1ntb28J+0HCxyJCj3J7caTv76b+CnSpw=
Subject key identifier: E4:0D:BD:BE:83:13:E8:F9:AC:71:95:43:F5:54:D0:D0:5E:3F:46:45
Certificate issuer: /CN=A913D1EA/serialNumber=E692C5B60B3EF1C2044439FC390AD56DC3CBCD63
Certificate serial: 07FD
Authority key identifier: E6:92:C5:B6:0B:3E:F1:C2:04:44:39:FC:39:0A:D5:6D:C3:CB:CD:63
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5pLFtgs-8cIERDn8OQrVbcPLzWM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A913D1EA/9C932B48173A11EBA3B97E7FC4F9AE02/9D00ABAC089C11F09075A534C4F9AE02.roa
Signing time: Tue 01 Apr 2025 11:34:29 +0000
ROA not before: Tue 01 Apr 2025 11:34:29 +0000
ROA not after: Tue 30 Dec 2025 00:00:00 +0000
asID: 135607
IP address blocks: 61.245.4.0/24 maxlen: 24
61.245.5.0/24 maxlen: 24
61.245.6.0/24 maxlen: 24
61.245.7.0/24 maxlen: 24
61.245.8.0/24 maxlen: 24
61.245.9.0/24 maxlen: 24
61.245.12.0/24 maxlen: 24
61.245.13.0/24 maxlen: 24
61.245.14.0/24 maxlen: 24
61.245.15.0/24 maxlen: 24
61.245.16.0/24 maxlen: 24
61.245.17.0/24 maxlen: 24
61.245.18.0/24 maxlen: 24
61.245.19.0/24 maxlen: 24
61.245.20.0/24 maxlen: 24
61.245.21.0/24 maxlen: 24
61.245.22.0/24 maxlen: 24
61.245.23.0/24 maxlen: 24
61.245.24.0/24 maxlen: 24
61.245.25.0/24 maxlen: 24
61.245.26.0/24 maxlen: 24
61.245.27.0/24 maxlen: 24
61.245.28.0/24 maxlen: 24
61.245.29.0/24 maxlen: 24
61.245.30.0/24 maxlen: 24
61.245.120.0/24 maxlen: 24
61.245.121.0/24 maxlen: 24
61.245.122.0/24 maxlen: 24
61.245.123.0/24 maxlen: 24
103.76.160.0/23 maxlen: 23
103.76.160.0/24 maxlen: 24
103.76.161.0/24 maxlen: 24
103.100.100.0/23 maxlen: 23
103.100.100.0/24 maxlen: 24
103.100.101.0/24 maxlen: 24
126.209.0.0/24 maxlen: 24
126.209.1.0/24 maxlen: 24
126.209.2.0/24 maxlen: 24
126.209.3.0/24 maxlen: 24
126.209.4.0/24 maxlen: 24
126.209.5.0/24 maxlen: 24
126.209.6.0/24 maxlen: 24
126.209.7.0/24 maxlen: 24
126.209.8.0/24 maxlen: 24
126.209.9.0/24 maxlen: 24
126.209.10.0/24 maxlen: 24
126.209.11.0/24 maxlen: 24
126.209.12.0/24 maxlen: 24
126.209.13.0/24 maxlen: 24
126.209.14.0/24 maxlen: 24
126.209.15.0/24 maxlen: 24
126.209.16.0/24 maxlen: 24
126.209.17.0/24 maxlen: 24
126.209.18.0/24 maxlen: 24
126.209.19.0/24 maxlen: 24
126.209.20.0/24 maxlen: 24
126.209.21.0/24 maxlen: 24
126.209.22.0/24 maxlen: 24
126.209.23.0/24 maxlen: 24
126.209.24.0/24 maxlen: 24
126.209.25.0/24 maxlen: 24
126.209.26.0/24 maxlen: 24
126.209.27.0/24 maxlen: 24
126.209.28.0/24 maxlen: 24
126.209.29.0/24 maxlen: 24
126.209.30.0/24 maxlen: 24
126.209.31.0/24 maxlen: 24
126.209.32.0/24 maxlen: 24
126.209.33.0/24 maxlen: 24
126.209.34.0/24 maxlen: 24
126.209.35.0/24 maxlen: 24
126.209.36.0/24 maxlen: 24
126.209.37.0/24 maxlen: 24
126.209.38.0/24 maxlen: 24
126.209.39.0/24 maxlen: 24
126.209.40.0/24 maxlen: 24
126.209.41.0/24 maxlen: 24
126.209.44.0/24 maxlen: 24
126.209.45.0/24 maxlen: 24
126.209.46.0/24 maxlen: 24
126.209.47.0/24 maxlen: 24
126.209.48.0/24 maxlen: 24
126.209.49.0/24 maxlen: 24
126.209.50.0/24 maxlen: 24
126.209.52.0/24 maxlen: 24
126.209.53.0/24 maxlen: 24
126.209.54.0/24 maxlen: 24
126.209.55.0/24 maxlen: 24
126.209.56.0/24 maxlen: 24
126.209.57.0/24 maxlen: 24
126.209.61.0/24 maxlen: 24
126.209.62.0/24 maxlen: 24
126.209.63.0/24 maxlen: 24
126.209.64.0/24 maxlen: 24
126.209.65.0/24 maxlen: 24
126.209.66.0/24 maxlen: 24
126.209.67.0/24 maxlen: 24
126.209.68.0/24 maxlen: 24
126.209.69.0/24 maxlen: 24
126.209.70.0/24 maxlen: 24
126.209.71.0/24 maxlen: 24
126.209.72.0/24 maxlen: 24
126.209.73.0/24 maxlen: 24
126.209.74.0/24 maxlen: 24
126.209.75.0/24 maxlen: 24
126.209.76.0/24 maxlen: 24
126.209.77.0/24 maxlen: 24
126.209.78.0/24 maxlen: 24
126.209.79.0/24 maxlen: 24
126.209.80.0/24 maxlen: 24
126.209.81.0/24 maxlen: 24
126.209.82.0/24 maxlen: 24
126.209.83.0/24 maxlen: 24
126.209.84.0/24 maxlen: 24
126.209.85.0/24 maxlen: 24
126.209.86.0/24 maxlen: 24
126.209.87.0/24 maxlen: 24
126.209.92.0/24 maxlen: 24
126.209.93.0/24 maxlen: 24
126.209.95.0/24 maxlen: 24
2401:e740::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A913D1EA/9C932B48173A11EBA3B97E7FC4F9AE02/5pLFtgs-8cIERDn8OQrVbcPLzWM.crl
rsync://rpki.apnic.net/member_repository/A913D1EA/9C932B48173A11EBA3B97E7FC4F9AE02/5pLFtgs-8cIERDn8OQrVbcPLzWM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5pLFtgs-8cIERDn8OQrVbcPLzWM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 03 May 2025 21:14:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2045 (0x7fd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A913D1EA, serialNumber=E692C5B60B3EF1C2044439FC390AD56DC3CBCD63
Validity
Not Before: Apr 1 11:34:29 2025 GMT
Not After : Dec 30 00:00:00 2025 GMT
Subject: CN=67ebcf44-c8ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:15:62:9d:84:06:40:56:a4:0c:12:24:62:ad:
fe:4f:d9:98:17:10:76:b9:c9:ae:3c:ac:ab:3c:30:
6f:b5:db:40:66:b6:c9:cc:2c:73:63:3c:6d:22:7d:
9e:14:7f:8b:0e:d1:b5:fd:4e:ac:4f:b7:d9:59:26:
34:c2:7a:39:a1:c5:31:72:24:bd:46:9f:25:36:8a:
5d:3e:ee:47:c6:e3:ee:18:dc:8d:09:fe:75:d9:ba:
77:97:9f:e4:23:c8:87:cf:68:c1:70:2e:d3:4a:24:
97:bf:1d:72:a8:f8:c1:2b:42:b7:5f:d1:f7:c7:10:
07:f0:1b:33:e9:90:41:4c:10:70:ee:90:90:8c:01:
a0:85:3a:4b:5f:b6:7b:1b:67:fe:40:96:f1:dc:14:
b3:78:0d:04:95:c4:95:9d:2b:c8:a3:8f:89:91:f4:
1e:03:d8:82:10:ac:68:05:e3:c1:25:bb:91:aa:5b:
c4:92:bf:ba:4e:99:4d:8b:24:c2:70:5c:02:38:39:
ba:b7:eb:f9:71:86:9a:18:1c:4b:90:78:d9:63:02:
e0:1e:e7:83:46:b1:e2:04:36:d1:fb:5e:c4:5e:d4:
15:35:05:f7:33:51:55:4c:47:7a:99:38:c0:46:c2:
62:27:a5:a2:84:cf:86:ea:fc:83:23:32:c2:d0:c0:
96:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:0D:BD:BE:83:13:E8:F9:AC:71:95:43:F5:54:D0:D0:5E:3F:46:45
X509v3 Authority Key Identifier:
keyid:E6:92:C5:B6:0B:3E:F1:C2:04:44:39:FC:39:0A:D5:6D:C3:CB:CD:63
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A913D1EA/9C932B48173A11EBA3B97E7FC4F9AE02/5pLFtgs-8cIERDn8OQrVbcPLzWM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5pLFtgs-8cIERDn8OQrVbcPLzWM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913D1EA/9C932B48173A11EBA3B97E7FC4F9AE02/9D00ABAC089C11F09075A534C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
61.245.4.0-61.245.9.255
61.245.12.0-61.245.30.255
61.245.120.0/22
103.76.160.0/23
103.100.100.0/23
126.209.0.0-126.209.41.255
126.209.44.0-126.209.50.255
126.209.52.0-126.209.57.255
126.209.61.0-126.209.87.255
126.209.92.0/23
126.209.95.0/24
IPv6:
2401:e740::/32
Signature Algorithm: sha256WithRSAEncryption
a8:9e:a5:27:ce:dd:df:0a:96:2b:8c:10:26:51:ba:b5:27:34:
d7:f7:eb:83:ef:ed:17:1e:86:83:b8:e8:49:db:19:25:b2:cd:
eb:d6:aa:c7:91:a2:23:ba:be:9f:65:ae:14:86:df:67:cc:03:
0e:7a:d5:54:f1:a3:30:d6:9c:d7:6a:4e:df:f0:0e:05:bf:8e:
31:c4:59:e2:13:f2:b9:83:1c:e1:89:dd:36:06:50:bd:1c:b7:
5f:24:21:0d:1d:51:e4:e3:5b:c8:25:05:42:7d:52:71:db:9d:
e5:8a:53:0c:74:d1:be:63:69:5f:9e:67:de:bf:1e:e8:92:2d:
50:b5:56:e0:a5:90:6a:e6:db:95:cb:0e:bb:72:e2:e9:d1:a2:
71:13:04:7e:a2:2a:18:e5:39:23:cd:85:46:e2:5d:41:db:b5:
5a:40:72:1f:62:f5:4d:44:44:81:be:13:80:7a:bb:2f:39:27:
ab:e4:05:95:ce:3c:43:57:72:76:20:26:2c:36:f0:c5:fb:4a:
b1:4f:60:ca:fa:0e:a3:9e:0a:1d:5e:1d:1b:a8:7e:27:d4:e5:
13:8c:a8:94:51:9e:ae:dc:3d:62:30:d2:ee:56:c5:20:ed:90:
bc:5e:18:b5:bc:04:47:61:4a:ed:12:1e:b3:ad:96:66:03:51:
1a:44:89:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 05:32:19 2025 by rpki-client