Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9144633/A019E9CAF40111EAB061963FC4F9AE02/3AA3E4AE018111ECB7DFB21CC4F9AE02.roa
File: 3AA3E4AE018111ECB7DFB21CC4F9AE02.roa (raw, json)
Hash identifier: VOepHc1HyCfrEW738kMBAMUMo6FUtXYjckaaoVEy+k0=
Subject key identifier: 10:80:9D:B4:DF:98:26:EB:43:64:69:4C:D9:B7:CE:AE:14:4B:69:C4
Certificate issuer: /CN=A9144633/serialNumber=114D988E3151E9529B6BAD79D3E95436E537E123
Certificate serial: 081D
Authority key identifier: 11:4D:98:8E:31:51:E9:52:9B:6B:AD:79:D3:E9:54:36:E5:37:E1:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EU2YjjFR6VKba6150-lUNuU34SM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9144633/A019E9CAF40111EAB061963FC4F9AE02/3AA3E4AE018111ECB7DFB21CC4F9AE02.roa
Signing time: Fri 01 Aug 2025 02:18:34 +0000
ROA not before: Fri 01 Aug 2025 02:18:33 +0000
ROA not after: Thu 30 Jul 2026 00:00:00 +0000
asID: 9534
IP address blocks: 14.192.192.0/18 maxlen: 18
14.192.192.0/23 maxlen: 23
14.192.208.0/24 maxlen: 24
14.192.209.0/24 maxlen: 24
14.192.210.0/24 maxlen: 24
14.192.211.0/24 maxlen: 24
14.192.212.0/24 maxlen: 24
14.192.213.0/24 maxlen: 24
14.192.214.0/24 maxlen: 24
14.192.215.0/24 maxlen: 24
14.192.216.0/21 maxlen: 21
14.192.216.0/24 maxlen: 24
14.192.217.0/24 maxlen: 24
14.192.218.0/24 maxlen: 24
14.192.219.0/24 maxlen: 24
14.192.220.0/24 maxlen: 24
14.192.221.0/24 maxlen: 24
14.192.222.0/24 maxlen: 24
14.192.223.0/24 maxlen: 24
14.192.236.0/22 maxlen: 22
14.192.240.0/22 maxlen: 22
14.192.244.0/23 maxlen: 23
14.192.246.0/24 maxlen: 24
14.192.247.0/24 maxlen: 24
43.255.172.0/22 maxlen: 22
43.255.172.0/24 maxlen: 24
43.255.173.0/24 maxlen: 24
43.255.174.0/24 maxlen: 24
43.255.175.0/24 maxlen: 24
58.71.128.0/17 maxlen: 18
58.71.144.0/22 maxlen: 22
58.71.152.0/21 maxlen: 21
103.4.44.0/22 maxlen: 22
113.210.0.0/15 maxlen: 16
113.210.48.0/20 maxlen: 20
113.210.48.0/21 maxlen: 21
113.210.56.0/21 maxlen: 21
113.210.64.0/20 maxlen: 20
113.210.80.0/20 maxlen: 20
113.210.80.0/23 maxlen: 23
113.210.96.0/20 maxlen: 20
113.210.96.0/21 maxlen: 21
113.210.104.0/21 maxlen: 21
113.210.105.0/24 maxlen: 24
113.210.106.0/24 maxlen: 24
113.210.112.0/20 maxlen: 20
113.210.112.0/21 maxlen: 21
113.210.120.0/21 maxlen: 21
113.210.176.0/20 maxlen: 20
113.210.192.0/20 maxlen: 20
113.211.96.0/20 maxlen: 20
113.211.96.0/21 maxlen: 21
113.211.104.0/21 maxlen: 21
113.211.112.0/20 maxlen: 20
113.211.112.0/21 maxlen: 21
113.211.120.0/21 maxlen: 21
113.211.128.0/20 maxlen: 20
113.211.128.0/21 maxlen: 21
113.211.136.0/21 maxlen: 21
113.211.144.0/20 maxlen: 20
113.211.160.0/20 maxlen: 20
113.211.176.0/20 maxlen: 20
121.120.0.0/15 maxlen: 16
121.122.0.0/15 maxlen: 17
202.122.144.0/20 maxlen: 21
202.146.64.0/19 maxlen: 19
202.146.64.0/20 maxlen: 21
202.146.80.0/20 maxlen: 21
202.179.96.0/19 maxlen: 20
202.179.111.0/24 maxlen: 24
202.179.112.0/21 maxlen: 21
2001:d08::/32 maxlen: 32
2001:d08:a0::/44 maxlen: 44
2001:d08:d0::/44 maxlen: 44
2001:d08:d0::/47 maxlen: 47
2001:d08:d2::/47 maxlen: 47
2001:d08:d4::/47 maxlen: 47
2001:d08:d6::/47 maxlen: 47
2001:d08:d8::/47 maxlen: 47
2001:d08:da::/47 maxlen: 47
2001:d08:dc::/47 maxlen: 47
2001:d08:de::/47 maxlen: 47
2001:d08:e0::/44 maxlen: 44
2001:d08:1000::/37 maxlen: 37
2001:d08:1800::/37 maxlen: 37
2001:d08:2000::/37 maxlen: 37
2001:d08:2800::/41 maxlen: 41
2001:d08:2900::/41 maxlen: 41
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9144633/A019E9CAF40111EAB061963FC4F9AE02/EU2YjjFR6VKba6150-lUNuU34SM.crl
rsync://rpki.apnic.net/member_repository/A9144633/A019E9CAF40111EAB061963FC4F9AE02/EU2YjjFR6VKba6150-lUNuU34SM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EU2YjjFR6VKba6150-lUNuU34SM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 11 Aug 2025 21:18:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2077 (0x81d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9144633, serialNumber=114D988E3151E9529B6BAD79D3E95436E537E123
Validity
Not Before: Aug 1 02:18:33 2025 GMT
Not After : Jul 30 00:00:00 2026 GMT
Subject: CN=688c23f9-afd9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:61:cc:35:ac:58:14:4a:16:19:35:56:d4:ff:
ca:93:04:bb:8b:21:6a:58:35:22:98:d4:ba:18:3b:
58:78:ae:9e:4e:a9:ab:4f:90:a8:2c:eb:db:98:d3:
ca:f0:02:e8:36:25:c3:71:7d:fe:cf:f1:7f:8d:4a:
d4:ad:1d:10:26:e7:1c:ad:70:64:0b:c9:cc:c5:6b:
75:04:91:be:b2:97:f6:c3:ab:d4:cd:9d:ad:16:01:
5a:ce:a8:8f:40:b3:87:0c:68:56:f8:9b:45:5f:d2:
cc:02:6b:1b:e7:2e:cd:c7:2b:47:49:be:e9:14:7c:
ea:32:c6:fe:28:83:88:66:d9:fc:08:ce:f2:40:0c:
88:43:34:66:1e:97:91:3e:4b:92:bc:f9:34:e8:1e:
79:ff:fe:d1:22:33:51:cf:a4:5f:8d:f4:65:ba:d0:
58:7e:82:89:33:d1:7b:4f:ff:c8:2d:81:f0:5d:fe:
8c:3d:4b:76:3f:db:66:e0:e5:12:60:92:58:33:75:
a6:ec:5b:2f:a1:bb:1d:8b:06:df:20:33:60:0e:36:
25:cd:ff:e9:81:02:60:1c:84:7d:90:da:cb:d5:44:
3f:0d:c0:51:4f:43:04:12:df:38:6a:e8:fc:2d:37:
9f:1a:83:5e:22:f2:d1:d8:12:a9:1b:ce:bf:67:da:
6b:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:80:9D:B4:DF:98:26:EB:43:64:69:4C:D9:B7:CE:AE:14:4B:69:C4
X509v3 Authority Key Identifier:
keyid:11:4D:98:8E:31:51:E9:52:9B:6B:AD:79:D3:E9:54:36:E5:37:E1:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9144633/A019E9CAF40111EAB061963FC4F9AE02/EU2YjjFR6VKba6150-lUNuU34SM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EU2YjjFR6VKba6150-lUNuU34SM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9144633/A019E9CAF40111EAB061963FC4F9AE02/3AA3E4AE018111ECB7DFB21CC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
14.192.192.0/18
43.255.172.0/22
58.71.128.0/17
103.4.44.0/22
113.210.0.0/15
121.120.0.0/14
202.122.144.0/20
202.146.64.0/19
202.179.96.0/19
IPv6:
2001:d08::/32
Signature Algorithm: sha256WithRSAEncryption
61:11:35:8c:51:90:49:5b:2a:b3:f6:83:63:1c:9f:23:4d:0b:
07:11:50:69:27:16:1c:47:9b:1a:84:c4:b3:f2:3a:e4:a3:18:
56:6a:cb:b7:59:fb:36:73:1d:96:f0:bd:57:31:49:07:76:94:
dd:77:dd:f4:d2:29:ef:e2:70:14:65:33:c2:14:f5:14:91:8b:
23:dd:e3:b1:04:7e:4c:31:6a:81:31:27:4b:6b:a5:53:69:f5:
07:40:d2:0c:f6:9d:e4:21:5e:bf:ad:a5:3c:f1:ce:e2:4e:f0:
7a:fe:93:e5:f7:93:4c:92:aa:41:95:07:c7:f0:a6:03:7b:f7:
2f:46:9e:1a:54:06:a4:91:49:ce:bd:11:23:63:f6:33:29:2a:
43:6a:48:0e:d1:c8:a9:51:e8:ad:eb:68:90:ba:9b:3e:a3:5c:
d6:ff:d3:c5:b0:f9:a4:d0:66:86:43:ac:5c:d2:5a:43:c2:ad:
99:03:dd:c8:cf:4f:bf:0c:be:a4:32:44:a0:09:ac:c8:5f:7f:
e9:91:4e:9a:4c:da:cc:a5:c9:0c:9c:fe:0c:e5:b5:e0:1b:b4:
f6:c2:b3:31:47:b6:53:54:a0:e7:3a:fa:9e:1e:aa:8b:66:3a:
bd:c6:5b:1d:e0:75:51:cd:3c:1d:e7:b8:82:31:9e:a0:82:12:
d0:22:a2:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 14:18:44 2025 by rpki-client