Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9145456/7719C710306611EB85251355C4F9AE02/5EB91EB40F9611F0A2F2830DC4F9AE02.roa
File: 5EB91EB40F9611F0A2F2830DC4F9AE02.roa (raw, json)
Hash identifier: ELwpdf1bXqRGXsJVm4M3iE7sXfkobzOhG4xnV55UstA=
Subject key identifier: 26:F1:15:2B:6D:95:03:B7:F9:1D:86:2C:57:DF:5B:07:BD:C8:5A:5E
Certificate issuer: /CN=A9145456/serialNumber=3FB0A56E20F194C7749879D4D225B3F97E9EBECF
Certificate serial: 07A4
Authority key identifier: 3F:B0:A5:6E:20:F1:94:C7:74:98:79:D4:D2:25:B3:F9:7E:9E:BE:CF
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/P7ClbiDxlMd0mHnU0iWz-X6evs8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9145456/7719C710306611EB85251355C4F9AE02/5EB91EB40F9611F0A2F2830DC4F9AE02.roa
Signing time: Tue 10 Jun 2025 06:07:27 +0000
ROA not before: Tue 10 Jun 2025 06:07:27 +0000
ROA not after: Mon 02 Mar 2026 00:00:00 +0000
asID: 139831
IP address blocks: 131.226.64.0/18 maxlen: 18
131.226.64.0/22 maxlen: 24
131.226.68.0/22 maxlen: 24
131.226.74.0/23 maxlen: 24
131.226.76.0/23 maxlen: 24
131.226.80.0/22 maxlen: 24
131.226.84.0/22 maxlen: 24
131.226.88.0/22 maxlen: 24
131.226.92.0/22 maxlen: 24
131.226.96.0/22 maxlen: 23
131.226.100.0/22 maxlen: 23
131.226.100.0/24 maxlen: 24
131.226.104.0/22 maxlen: 23
131.226.108.0/22 maxlen: 23
131.226.112.0/22 maxlen: 23
131.226.116.0/23 maxlen: 23
131.226.118.0/23 maxlen: 23
131.226.120.0/23 maxlen: 23
131.226.122.0/23 maxlen: 23
131.226.124.0/23 maxlen: 24
131.226.126.0/24 maxlen: 24
131.226.127.0/24 maxlen: 24
139.135.64.0/18 maxlen: 18
139.135.64.0/22 maxlen: 22
139.135.68.0/22 maxlen: 22
139.135.72.0/22 maxlen: 22
139.135.76.0/22 maxlen: 22
139.135.80.0/22 maxlen: 22
139.135.88.0/22 maxlen: 22
139.135.104.0/22 maxlen: 23
139.135.108.0/22 maxlen: 23
139.135.124.0/23 maxlen: 23
160.84.128.0/18 maxlen: 18
160.84.128.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9145456/7719C710306611EB85251355C4F9AE02/P7ClbiDxlMd0mHnU0iWz-X6evs8.crl
rsync://rpki.apnic.net/member_repository/A9145456/7719C710306611EB85251355C4F9AE02/P7ClbiDxlMd0mHnU0iWz-X6evs8.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/P7ClbiDxlMd0mHnU0iWz-X6evs8.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 27 Jun 2025 21:34:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1956 (0x7a4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9145456, serialNumber=3FB0A56E20F194C7749879D4D225B3F97E9EBECF
Validity
Not Before: Jun 10 06:07:27 2025 GMT
Not After : Mar 2 00:00:00 2026 GMT
Subject: CN=6847cb9f-7964
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:0a:98:92:e7:1e:f0:3d:b2:a0:44:73:58:c7:
7e:a1:ff:05:b1:c2:15:d6:5e:da:05:6a:2c:95:09:
cf:05:75:56:de:32:8f:b5:08:be:34:86:e8:7c:ed:
8a:aa:ad:cb:49:01:ed:8a:4d:c8:49:76:bf:ab:29:
c3:4b:a1:ce:10:77:82:88:58:76:30:91:ec:3b:a1:
87:a9:14:43:61:20:2e:95:b3:67:bb:e0:f3:20:b0:
7c:59:a3:7d:71:0c:75:d9:2a:be:f4:b4:b8:e9:0a:
be:90:75:fa:02:8c:59:18:e1:34:ed:5d:25:f5:8a:
35:ca:3a:c8:6b:2b:ec:a0:2d:43:29:88:69:fb:7c:
40:d1:b7:f1:1d:60:34:bc:5c:6c:08:2c:fe:d1:85:
41:09:c1:26:79:0d:b3:54:c7:98:1b:7b:85:f3:0d:
de:75:94:0c:18:84:69:a2:f1:90:1a:69:0e:ca:b1:
78:d3:a1:09:40:38:27:6b:cf:aa:94:1c:4e:22:38:
d0:c3:9a:57:20:69:99:e3:13:c7:ac:73:3a:f5:6e:
b6:96:7d:0f:a3:7e:54:07:db:99:62:b5:89:db:1a:
11:1d:e3:f1:bd:d1:c2:2f:f1:14:c5:38:42:5b:87:
b7:e6:01:62:82:61:ce:83:c8:85:f6:1f:ad:bb:9a:
2d:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:F1:15:2B:6D:95:03:B7:F9:1D:86:2C:57:DF:5B:07:BD:C8:5A:5E
X509v3 Authority Key Identifier:
keyid:3F:B0:A5:6E:20:F1:94:C7:74:98:79:D4:D2:25:B3:F9:7E:9E:BE:CF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9145456/7719C710306611EB85251355C4F9AE02/P7ClbiDxlMd0mHnU0iWz-X6evs8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/P7ClbiDxlMd0mHnU0iWz-X6evs8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9145456/7719C710306611EB85251355C4F9AE02/5EB91EB40F9611F0A2F2830DC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
131.226.64.0/18
139.135.64.0/18
160.84.128.0/18
Signature Algorithm: sha256WithRSAEncryption
32:89:7e:e7:d0:31:c8:7d:87:1c:a5:6d:8c:f7:46:fb:22:12:
c1:09:67:01:04:15:5e:6d:a4:4a:c5:3a:96:cc:55:01:49:cc:
b9:d9:7c:57:89:b8:2d:7d:db:28:be:43:37:fd:d1:6b:38:19:
66:c9:ef:c1:4d:e8:08:91:f3:d0:81:30:30:5d:d4:12:cb:04:
76:24:96:ed:e0:4c:44:75:13:05:64:d0:e7:9e:a1:87:2f:76:
91:df:29:6e:62:1b:77:ad:5a:04:c1:80:81:34:e7:aa:b9:0c:
e9:4a:a1:7e:6a:f3:5d:b9:d5:ee:5f:87:ce:63:68:37:f0:22:
de:de:25:4b:83:28:0f:84:88:f7:ef:22:38:1a:7a:85:81:67:
26:42:4a:b0:61:c2:a7:2e:4e:ee:4e:01:ff:6a:01:c3:f8:6b:
ff:84:af:cd:93:77:cc:56:94:04:40:14:56:ee:18:25:43:00:
28:ea:21:3a:1e:26:88:65:92:de:52:a0:7a:b2:96:26:c9:53:
f3:ed:01:d0:fa:0c:e4:04:0d:60:06:88:ec:c2:85:53:6e:c7:
7d:54:25:09:19:5b:e1:06:df:be:36:a3:a0:2d:02:14:52:93:
94:3a:cc:24:da:e1:0d:c4:8b:73:de:cf:20:12:4e:27:07:8f:
fe:55:bb:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 21 23:53:44 2025 by rpki-client