Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9145446/ACA2E75C1FC511E5B450DD62C4F9AE02/E44FF288EE9811EF88F8B953C4F9AE02.roa
File: E44FF288EE9811EF88F8B953C4F9AE02.roa (raw, json)
Hash identifier: vgA83pTqE5wQaERvUq7kKR7PZxKy0bTB6yP2zoqgmcU=
Subject key identifier: 23:96:10:3E:4F:4A:F1:BA:7F:32:2E:CB:15:38:82:56:E6:AE:38:EB
Certificate issuer: /CN=A9145446/serialNumber=7D65EBE14C3046E73E3986957302A26E081F1AF8
Certificate serial: 280A
Authority key identifier: 7D:65:EB:E1:4C:30:46:E7:3E:39:86:95:73:02:A2:6E:08:1F:1A:F8
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fWXr4UwwRuc-OYaVcwKibggfGvg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9145446/ACA2E75C1FC511E5B450DD62C4F9AE02/E44FF288EE9811EF88F8B953C4F9AE02.roa
Signing time: Tue 03 Jun 2025 05:53:24 +0000
ROA not before: Tue 03 Jun 2025 05:53:24 +0000
ROA not after: Mon 01 Dec 2025 00:00:00 +0000
asID: 23930
IP address blocks: 43.243.126.0/24 maxlen: 24
43.243.127.0/24 maxlen: 24
103.38.214.0/24 maxlen: 24
103.38.215.0/24 maxlen: 24
116.93.0.0/23 maxlen: 23
116.93.1.0/24 maxlen: 24
116.93.4.0/23 maxlen: 23
116.93.4.0/24 maxlen: 24
116.93.5.0/24 maxlen: 24
116.93.6.0/24 maxlen: 24
116.93.7.0/24 maxlen: 24
116.93.8.0/23 maxlen: 23
116.93.8.0/24 maxlen: 24
116.93.9.0/24 maxlen: 24
116.93.10.0/23 maxlen: 23
116.93.10.0/24 maxlen: 24
116.93.11.0/24 maxlen: 24
116.93.12.0/23 maxlen: 23
116.93.12.0/24 maxlen: 24
116.93.13.0/24 maxlen: 24
116.93.15.0/24 maxlen: 24
116.93.16.0/23 maxlen: 23
116.93.17.0/24 maxlen: 24
116.93.18.0/23 maxlen: 23
116.93.18.0/24 maxlen: 24
116.93.20.0/24 maxlen: 24
116.93.21.0/24 maxlen: 24
116.93.22.0/23 maxlen: 23
116.93.23.0/24 maxlen: 24
116.93.24.0/22 maxlen: 22
116.93.24.0/23 maxlen: 23
116.93.24.0/24 maxlen: 24
116.93.25.0/24 maxlen: 24
116.93.26.0/23 maxlen: 23
116.93.26.0/24 maxlen: 24
116.93.27.0/24 maxlen: 24
116.93.28.0/23 maxlen: 23
116.93.28.0/24 maxlen: 24
116.93.29.0/24 maxlen: 24
116.93.30.0/23 maxlen: 23
116.93.30.0/24 maxlen: 24
116.93.31.0/24 maxlen: 24
116.93.32.0/23 maxlen: 23
116.93.32.0/24 maxlen: 24
116.93.33.0/24 maxlen: 24
116.93.34.0/23 maxlen: 23
116.93.34.0/24 maxlen: 24
116.93.36.0/23 maxlen: 23
116.93.36.0/24 maxlen: 24
116.93.37.0/24 maxlen: 24
116.93.38.0/23 maxlen: 23
116.93.38.0/24 maxlen: 24
116.93.39.0/24 maxlen: 24
116.93.40.0/24 maxlen: 24
116.93.41.0/24 maxlen: 24
116.93.42.0/24 maxlen: 24
116.93.43.0/24 maxlen: 24
116.93.44.0/24 maxlen: 24
116.93.45.0/24 maxlen: 24
116.93.46.0/23 maxlen: 23
116.93.47.0/24 maxlen: 24
116.93.48.0/23 maxlen: 23
116.93.49.0/24 maxlen: 24
116.93.50.0/23 maxlen: 23
116.93.51.0/24 maxlen: 24
116.93.52.0/24 maxlen: 24
116.93.54.0/23 maxlen: 23
116.93.54.0/24 maxlen: 24
116.93.61.0/24 maxlen: 24
116.93.62.0/24 maxlen: 24
116.93.63.0/24 maxlen: 24
116.93.64.0/24 maxlen: 24
116.93.65.0/24 maxlen: 24
116.93.66.0/24 maxlen: 24
116.93.67.0/24 maxlen: 24
116.93.71.0/24 maxlen: 24
116.93.74.0/24 maxlen: 24
116.93.75.0/24 maxlen: 24
116.93.78.0/24 maxlen: 24
116.93.79.0/24 maxlen: 24
116.93.80.0/23 maxlen: 23
116.93.80.0/24 maxlen: 24
116.93.85.0/24 maxlen: 24
116.93.87.0/24 maxlen: 24
116.93.88.0/24 maxlen: 24
116.93.90.0/24 maxlen: 24
116.93.91.0/24 maxlen: 24
116.93.93.0/24 maxlen: 24
116.93.94.0/24 maxlen: 24
116.93.96.0/24 maxlen: 24
116.93.97.0/24 maxlen: 24
116.93.98.0/24 maxlen: 24
116.93.100.0/24 maxlen: 24
116.93.102.0/24 maxlen: 24
116.93.105.0/24 maxlen: 24
116.93.106.0/24 maxlen: 24
116.93.107.0/24 maxlen: 24
116.93.108.0/24 maxlen: 24
116.93.109.0/24 maxlen: 24
116.93.110.0/24 maxlen: 24
116.93.111.0/24 maxlen: 24
116.93.112.0/24 maxlen: 24
116.93.114.0/24 maxlen: 24
116.93.115.0/24 maxlen: 24
116.93.117.0/24 maxlen: 24
116.93.118.0/24 maxlen: 24
116.93.119.0/24 maxlen: 24
116.93.120.0/24 maxlen: 24
116.93.121.0/24 maxlen: 24
116.93.122.0/24 maxlen: 24
116.93.124.0/24 maxlen: 24
116.93.126.0/24 maxlen: 24
116.93.127.0/24 maxlen: 24
121.127.6.0/24 maxlen: 24
121.127.7.0/24 maxlen: 24
121.127.8.0/24 maxlen: 24
121.127.9.0/24 maxlen: 24
121.127.10.0/24 maxlen: 24
121.127.11.0/24 maxlen: 24
121.127.12.0/23 maxlen: 23
121.127.12.0/24 maxlen: 24
121.127.13.0/24 maxlen: 24
121.127.14.0/23 maxlen: 23
121.127.14.0/24 maxlen: 24
121.127.15.0/24 maxlen: 24
121.127.16.0/24 maxlen: 24
121.127.17.0/24 maxlen: 24
121.127.18.0/24 maxlen: 24
121.127.20.0/23 maxlen: 23
121.127.20.0/24 maxlen: 24
121.127.21.0/24 maxlen: 24
121.127.22.0/23 maxlen: 23
121.127.22.0/24 maxlen: 24
121.127.23.0/24 maxlen: 24
121.127.26.0/23 maxlen: 23
121.127.26.0/24 maxlen: 24
121.127.27.0/24 maxlen: 24
121.127.28.0/23 maxlen: 23
121.127.28.0/24 maxlen: 24
121.127.29.0/24 maxlen: 24
121.127.30.0/23 maxlen: 23
121.127.30.0/24 maxlen: 24
121.127.31.0/24 maxlen: 24
203.99.232.0/21 maxlen: 21
203.99.232.0/23 maxlen: 23
203.99.232.0/24 maxlen: 24
203.99.233.0/24 maxlen: 24
203.99.234.0/24 maxlen: 24
203.99.235.0/24 maxlen: 24
203.99.236.0/24 maxlen: 24
203.99.237.0/24 maxlen: 24
203.99.238.0/23 maxlen: 23
203.99.238.0/24 maxlen: 24
203.99.239.0/24 maxlen: 24
203.208.24.0/23 maxlen: 23
203.208.24.0/24 maxlen: 24
203.208.25.0/24 maxlen: 24
203.208.26.0/24 maxlen: 24
203.208.27.0/24 maxlen: 24
203.208.28.0/24 maxlen: 24
203.208.29.0/24 maxlen: 24
203.208.30.0/24 maxlen: 24
203.208.31.0/24 maxlen: 24
2401:9800::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9145446/ACA2E75C1FC511E5B450DD62C4F9AE02/fWXr4UwwRuc-OYaVcwKibggfGvg.crl
rsync://rpki.apnic.net/member_repository/A9145446/ACA2E75C1FC511E5B450DD62C4F9AE02/fWXr4UwwRuc-OYaVcwKibggfGvg.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fWXr4UwwRuc-OYaVcwKibggfGvg.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 27 Jun 2025 15:47:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 10250 (0x280a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9145446, serialNumber=7D65EBE14C3046E73E3986957302A26E081F1AF8
Validity
Not Before: Jun 3 05:53:24 2025 GMT
Not After : Dec 1 00:00:00 2025 GMT
Subject: CN=683e8dd4-b9f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:56:74:8e:2d:e5:88:d8:97:c5:89:90:e1:d9:
05:85:1b:1a:a7:29:04:55:a7:8f:84:5f:ff:d9:a6:
23:73:af:49:15:d3:f7:41:e2:d7:cb:8e:e5:c8:09:
05:01:20:dc:51:28:ff:33:af:d6:58:4a:bd:67:17:
27:2a:0c:8f:19:ff:b0:83:78:0a:c7:d4:1c:2d:8e:
f3:85:1f:33:46:fd:0f:9c:d9:2b:3b:98:a0:bb:e2:
84:20:3f:ac:5e:1a:ab:c7:ba:39:9a:30:6d:04:87:
15:bb:c8:0b:fe:d9:22:90:d6:61:61:99:a9:08:8e:
55:cb:94:2b:e5:8d:8d:9c:b4:12:7d:67:45:15:7e:
f4:64:d7:19:7f:01:e4:5e:e5:71:e5:03:38:f1:47:
84:cc:d9:d1:62:ac:6d:42:1a:82:69:24:52:2b:1b:
e6:3e:51:b7:8d:d7:79:f2:b3:18:e6:16:15:73:23:
ce:42:70:0e:9d:83:79:0f:27:3f:ed:8f:47:9a:24:
8b:ce:4e:6e:d1:91:a4:52:89:23:72:55:c8:0a:57:
a1:50:3d:87:f6:1b:6e:57:55:57:b2:67:0d:a6:a4:
19:0e:2b:d2:8e:d4:6c:92:95:ea:54:9f:ad:08:4e:
0b:1c:1e:b8:ab:9c:a5:dd:67:ba:95:80:d6:d6:35:
71:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:96:10:3E:4F:4A:F1:BA:7F:32:2E:CB:15:38:82:56:E6:AE:38:EB
X509v3 Authority Key Identifier:
keyid:7D:65:EB:E1:4C:30:46:E7:3E:39:86:95:73:02:A2:6E:08:1F:1A:F8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9145446/ACA2E75C1FC511E5B450DD62C4F9AE02/fWXr4UwwRuc-OYaVcwKibggfGvg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fWXr4UwwRuc-OYaVcwKibggfGvg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9145446/ACA2E75C1FC511E5B450DD62C4F9AE02/E44FF288EE9811EF88F8B953C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
43.243.126.0/23
103.38.214.0/23
116.93.0.0/23
116.93.4.0-116.93.13.255
116.93.15.0-116.93.52.255
116.93.54.0/23
116.93.61.0-116.93.67.255
116.93.71.0/24
116.93.74.0/23
116.93.78.0-116.93.81.255
116.93.85.0/24
116.93.87.0-116.93.88.255
116.93.90.0/23
116.93.93.0-116.93.94.255
116.93.96.0-116.93.98.255
116.93.100.0/24
116.93.102.0/24
116.93.105.0-116.93.112.255
116.93.114.0/23
116.93.117.0-116.93.122.255
116.93.124.0/24
116.93.126.0/23
121.127.6.0-121.127.18.255
121.127.20.0/22
121.127.26.0-121.127.31.255
203.99.232.0/21
203.208.24.0/21
IPv6:
2401:9800::/32
Signature Algorithm: sha256WithRSAEncryption
a2:04:66:a3:97:a4:17:1c:e2:5a:24:8a:f8:ef:93:00:67:ef:
fa:2b:e3:2e:ca:3c:90:3a:85:c0:32:ca:04:95:e5:bb:6e:5c:
41:4c:95:fc:5f:93:f8:c8:1e:97:f8:2a:60:c3:11:f0:e6:ef:
7c:54:a7:aa:f8:7d:70:d0:c2:1e:db:8a:44:85:cc:c9:34:aa:
52:55:89:cf:a7:45:52:df:72:b2:1e:9d:f1:fa:2d:23:6d:2b:
2b:2f:cb:ba:2d:44:c6:20:94:d3:0b:29:85:6e:4d:a9:76:b5:
60:45:75:52:ce:4b:e8:99:8f:c4:89:44:a4:45:78:ab:7f:be:
e5:26:a0:2a:35:f0:fc:c4:a5:45:c5:33:e4:df:b9:9a:4f:ea:
6c:3b:f4:d5:2a:27:ec:77:41:5a:14:51:73:eb:db:64:1d:ae:
f3:e9:27:64:ef:17:82:97:23:de:46:51:ee:51:7d:41:9c:f5:
24:9b:c4:33:6d:a7:ac:91:92:1a:5b:f4:43:1b:ef:04:f3:a1:
1a:57:d3:5a:7d:36:52:7a:57:7c:be:0f:ce:20:b7:20:ec:04:
4d:fc:54:29:4a:60:ac:50:0d:8b:a1:48:d3:9d:d0:eb:2e:43:
04:8c:ff:fe:fc:99:d1:6f:55:ad:b2:52:be:f5:e8:fb:f8:de:
4c:d5:e2:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 21 23:50:17 2025 by rpki-client