Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9144633/A019E9CAF40111EAB061963FC4F9AE02/3AA3E4AE018111ECB7DFB21CC4F9AE02.roa
File: 3AA3E4AE018111ECB7DFB21CC4F9AE02.roa (raw, json)
Hash identifier: 5PHhaEhaUjJQhgTVvpAg3pptzWHIUBYv1sMMeeaX3Co=
Subject key identifier: FC:47:18:6A:87:D0:04:62:20:FA:B4:CF:6F:D9:20:C1:45:86:48:C5
Certificate issuer: /CN=A9144633/serialNumber=114D988E3151E9529B6BAD79D3E95436E537E123
Certificate serial: 0802
Authority key identifier: 11:4D:98:8E:31:51:E9:52:9B:6B:AD:79:D3:E9:54:36:E5:37:E1:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EU2YjjFR6VKba6150-lUNuU34SM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9144633/A019E9CAF40111EAB061963FC4F9AE02/3AA3E4AE018111ECB7DFB21CC4F9AE02.roa
Signing time: Thu 12 Jun 2025 20:58:55 +0000
ROA not before: Thu 12 Jun 2025 20:58:55 +0000
ROA not after: Thu 30 Jul 2026 00:00:00 +0000
asID: 9534
IP address blocks: 14.192.192.0/18 maxlen: 18
14.192.192.0/23 maxlen: 23
14.192.208.0/24 maxlen: 24
14.192.209.0/24 maxlen: 24
14.192.210.0/24 maxlen: 24
14.192.211.0/24 maxlen: 24
14.192.212.0/24 maxlen: 24
14.192.213.0/24 maxlen: 24
14.192.214.0/24 maxlen: 24
14.192.215.0/24 maxlen: 24
14.192.216.0/21 maxlen: 21
14.192.216.0/24 maxlen: 24
14.192.217.0/24 maxlen: 24
14.192.218.0/24 maxlen: 24
14.192.219.0/24 maxlen: 24
14.192.220.0/24 maxlen: 24
14.192.221.0/24 maxlen: 24
14.192.222.0/24 maxlen: 24
14.192.223.0/24 maxlen: 24
14.192.236.0/22 maxlen: 22
14.192.240.0/22 maxlen: 22
14.192.244.0/23 maxlen: 23
14.192.246.0/24 maxlen: 24
14.192.247.0/24 maxlen: 24
43.255.172.0/22 maxlen: 22
43.255.172.0/24 maxlen: 24
43.255.173.0/24 maxlen: 24
43.255.174.0/24 maxlen: 24
43.255.175.0/24 maxlen: 24
58.71.128.0/17 maxlen: 18
58.71.144.0/22 maxlen: 22
58.71.152.0/21 maxlen: 21
103.4.44.0/22 maxlen: 22
113.210.0.0/15 maxlen: 16
113.210.48.0/20 maxlen: 20
113.210.48.0/21 maxlen: 21
113.210.56.0/21 maxlen: 21
113.210.64.0/20 maxlen: 20
113.210.80.0/20 maxlen: 20
113.210.80.0/23 maxlen: 23
113.210.96.0/20 maxlen: 20
113.210.96.0/21 maxlen: 21
113.210.104.0/21 maxlen: 21
113.210.105.0/24 maxlen: 24
113.210.106.0/24 maxlen: 24
113.210.112.0/20 maxlen: 20
113.210.112.0/21 maxlen: 21
113.210.120.0/21 maxlen: 21
113.210.176.0/20 maxlen: 20
113.210.192.0/20 maxlen: 20
113.211.96.0/20 maxlen: 20
113.211.96.0/21 maxlen: 21
113.211.104.0/21 maxlen: 21
113.211.112.0/20 maxlen: 20
113.211.112.0/21 maxlen: 21
113.211.120.0/21 maxlen: 21
113.211.128.0/20 maxlen: 20
113.211.128.0/21 maxlen: 21
113.211.136.0/21 maxlen: 21
113.211.144.0/20 maxlen: 20
113.211.160.0/20 maxlen: 20
113.211.176.0/20 maxlen: 20
121.120.0.0/15 maxlen: 16
121.122.0.0/15 maxlen: 17
202.122.144.0/20 maxlen: 21
202.146.64.0/20 maxlen: 21
202.146.80.0/20 maxlen: 21
202.179.96.0/19 maxlen: 20
202.179.111.0/24 maxlen: 24
202.179.112.0/21 maxlen: 21
2001:d08::/32 maxlen: 32
2001:d08:a0::/44 maxlen: 44
2001:d08:d0::/44 maxlen: 44
2001:d08:d0::/47 maxlen: 47
2001:d08:d2::/47 maxlen: 47
2001:d08:d4::/47 maxlen: 47
2001:d08:d6::/47 maxlen: 47
2001:d08:d8::/47 maxlen: 47
2001:d08:da::/47 maxlen: 47
2001:d08:dc::/47 maxlen: 47
2001:d08:de::/47 maxlen: 47
2001:d08:e0::/44 maxlen: 44
2001:d08:1000::/37 maxlen: 37
2001:d08:1800::/37 maxlen: 37
2001:d08:2000::/37 maxlen: 37
2001:d08:2800::/41 maxlen: 41
2001:d08:2900::/41 maxlen: 41
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9144633/A019E9CAF40111EAB061963FC4F9AE02/EU2YjjFR6VKba6150-lUNuU34SM.crl
rsync://rpki.apnic.net/member_repository/A9144633/A019E9CAF40111EAB061963FC4F9AE02/EU2YjjFR6VKba6150-lUNuU34SM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EU2YjjFR6VKba6150-lUNuU34SM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 21 Jun 2025 20:50:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2050 (0x802)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9144633, serialNumber=114D988E3151E9529B6BAD79D3E95436E537E123
Validity
Not Before: Jun 12 20:58:55 2025 GMT
Not After : Jul 30 00:00:00 2026 GMT
Subject: CN=684b3f8e-bfc2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:3d:48:36:e3:e7:19:a5:66:e9:93:36:6c:cf:
0d:e3:b9:78:e9:6e:b7:90:ee:87:ba:c6:de:62:0e:
3e:d1:2c:bf:f5:91:8a:78:d8:35:37:04:61:2a:a4:
ac:d0:b5:3e:17:79:b6:8e:8e:f6:29:f2:12:9c:39:
44:3e:6a:8d:11:82:b4:5f:9a:7f:3e:66:4f:44:9b:
62:2b:99:5c:d2:d7:9a:e8:ab:b1:4d:87:5d:97:5f:
f0:ec:55:b8:03:42:75:2c:1b:f7:8d:a6:7b:49:64:
a5:a4:3b:dd:68:43:a5:50:64:f4:c3:31:94:c2:35:
90:1b:5a:d5:b0:a3:e0:12:a1:5a:9a:e9:7b:97:64:
fd:f3:f8:b2:29:9d:78:6b:d0:5e:5c:ed:6e:2a:81:
a4:0a:90:e1:4b:f4:56:59:d1:07:c7:0c:ca:c6:b8:
47:5d:27:f8:40:9e:d5:76:60:f7:6a:98:38:87:d0:
c0:0f:e4:9b:ef:c1:c3:ba:6b:df:c7:da:07:02:9b:
ae:b4:60:a7:c6:8d:65:8f:f9:83:29:27:00:4f:d4:
c4:68:35:0e:c7:0d:bb:ff:3e:79:06:db:ce:01:2b:
f4:82:60:02:89:fa:91:2e:92:26:48:f3:2b:c0:fa:
a7:3b:01:b2:96:79:ad:8b:44:31:dd:1d:f8:ae:ef:
72:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:47:18:6A:87:D0:04:62:20:FA:B4:CF:6F:D9:20:C1:45:86:48:C5
X509v3 Authority Key Identifier:
keyid:11:4D:98:8E:31:51:E9:52:9B:6B:AD:79:D3:E9:54:36:E5:37:E1:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9144633/A019E9CAF40111EAB061963FC4F9AE02/EU2YjjFR6VKba6150-lUNuU34SM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EU2YjjFR6VKba6150-lUNuU34SM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9144633/A019E9CAF40111EAB061963FC4F9AE02/3AA3E4AE018111ECB7DFB21CC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
14.192.192.0/18
43.255.172.0/22
58.71.128.0/17
103.4.44.0/22
113.210.0.0/15
121.120.0.0/14
202.122.144.0/20
202.146.64.0/19
202.179.96.0/19
IPv6:
2001:d08::/32
Signature Algorithm: sha256WithRSAEncryption
5a:de:3c:e0:70:50:b9:64:d3:87:59:0a:20:1f:ae:83:4e:50:
cb:3d:56:d4:60:be:f9:3b:9c:df:c0:8f:1a:ff:5a:a7:24:b3:
cd:7e:d2:f8:c2:c7:77:44:e1:1e:eb:09:ea:f9:d3:70:3e:69:
cf:2a:21:ae:37:cc:96:c4:3a:76:65:81:6e:f0:77:91:90:04:
20:1a:3b:75:d2:d5:11:96:75:ce:a5:49:50:30:04:68:b4:bf:
11:f7:a5:52:73:dd:13:8e:2d:30:bb:e8:4b:a0:f2:52:2d:29:
f3:5e:72:5d:37:81:4b:5b:9a:a1:bf:ae:c5:ba:bd:47:98:ee:
a3:a2:3e:5a:ab:21:36:d6:52:8d:fa:90:e3:22:9a:0e:f5:55:
d0:e8:82:22:cd:39:7e:73:3b:9e:25:96:a2:82:c5:83:cb:74:
39:7a:a6:3e:05:6d:f4:ca:ce:d9:ad:00:10:e0:fa:45:cd:76:
16:19:d4:c6:a6:ab:e0:86:ff:2f:9b:7d:47:b3:f6:eb:17:84:
40:f8:8a:24:9e:23:6f:89:a5:4a:8a:77:4a:c4:54:ac:b4:0e:
9c:a6:14:84:6a:2d:3a:f1:64:df:05:91:90:34:fb:db:f9:65:
72:32:a4:3b:e4:1a:57:0b:78:4e:99:20:a9:03:60:2d:24:72:
e2:21:58:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 16:09:41 2025 by rpki-client