Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9148D01/E92519FA990B11EBA355CB53C4F9AE02/4DEF33661FBE11EF97E7974FC4F9AE02.roa
File: 4DEF33661FBE11EF97E7974FC4F9AE02.roa (raw, json)
Hash identifier: Y+VLDu2SxSlCmyYhdp6AoKcsXOlSBGjMVVqDa5ym82Q=
Subject key identifier: 53:87:7E:5B:FE:EE:C1:78:50:49:2E:F7:8B:56:83:06:A9:0F:B2:1F
Certificate issuer: /CN=A9148D01/serialNumber=7E36AB1C044321B74CF678263E0524FD34179BBD
Certificate serial: 06C6
Authority key identifier: 7E:36:AB:1C:04:43:21:B7:4C:F6:78:26:3E:05:24:FD:34:17:9B:BD
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fjarHARDIbdM9ngmPgUk_TQXm70.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9148D01/E92519FA990B11EBA355CB53C4F9AE02/4DEF33661FBE11EF97E7974FC4F9AE02.roa
Signing time: Wed 14 May 2025 23:12:10 +0000
ROA not before: Wed 14 May 2025 23:12:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 17762
IP address blocks: 49.248.0.0/17 maxlen: 21
49.248.0.0/18 maxlen: 24
49.248.64.0/19 maxlen: 24
49.248.96.0/22 maxlen: 22
49.248.96.0/23 maxlen: 24
49.248.104.0/21 maxlen: 24
49.248.112.0/20 maxlen: 23
49.248.112.0/21 maxlen: 24
49.248.120.0/22 maxlen: 24
49.248.124.0/23 maxlen: 24
49.248.126.0/24 maxlen: 24
49.248.128.0/18 maxlen: 18
49.248.128.0/21 maxlen: 23
49.248.129.0/24 maxlen: 24
49.248.135.0/24 maxlen: 24
49.248.136.0/21 maxlen: 23
49.248.136.0/24 maxlen: 24
49.248.138.0/23 maxlen: 24
49.248.140.0/22 maxlen: 24
49.248.144.0/22 maxlen: 24
49.248.148.0/23 maxlen: 24
49.248.151.0/24 maxlen: 24
49.248.152.0/21 maxlen: 24
49.248.160.0/19 maxlen: 24
49.248.192.0/19 maxlen: 24
49.248.246.0/23 maxlen: 24
49.248.248.0/21 maxlen: 24
103.3.40.0/24 maxlen: 24
103.3.41.0/24 maxlen: 24
103.3.43.0/24 maxlen: 24
103.8.148.0/22 maxlen: 24
114.143.0.0/16 maxlen: 24
123.252.128.0/18 maxlen: 21
123.252.128.0/22 maxlen: 22
123.252.128.0/23 maxlen: 24
123.252.131.0/24 maxlen: 24
123.252.133.0/24 maxlen: 24
123.252.134.0/23 maxlen: 24
123.252.136.0/21 maxlen: 22
123.252.136.0/23 maxlen: 24
123.252.138.0/24 maxlen: 24
123.252.140.0/22 maxlen: 24
123.252.144.0/20 maxlen: 24
123.252.160.0/19 maxlen: 24
123.252.192.0/18 maxlen: 24
202.149.192.0/19 maxlen: 19
202.149.192.0/22 maxlen: 22
202.149.192.0/24 maxlen: 24
202.149.193.0/24 maxlen: 24
202.149.196.0/24 maxlen: 24
202.149.198.0/24 maxlen: 24
202.149.199.0/24 maxlen: 24
202.149.201.0/24 maxlen: 24
202.149.202.0/24 maxlen: 24
202.149.203.0/24 maxlen: 24
202.149.204.0/22 maxlen: 22
202.149.204.0/23 maxlen: 23
202.149.207.0/24 maxlen: 24
202.149.210.0/24 maxlen: 24
202.149.212.0/22 maxlen: 22
202.149.214.0/24 maxlen: 24
202.149.217.0/24 maxlen: 24
202.149.218.0/24 maxlen: 24
202.149.219.0/24 maxlen: 24
202.149.220.0/22 maxlen: 22
202.149.222.0/23 maxlen: 23
202.149.222.0/24 maxlen: 24
202.149.223.0/24 maxlen: 24
202.189.224.0/19 maxlen: 24
2402:d400::/32 maxlen: 32
2402:d400::/44 maxlen: 48
2402:d400:40::/48 maxlen: 48
2402:d400:41::/48 maxlen: 48
2402:d400:3e2::/48 maxlen: 48
2402:d400:3e3::/48 maxlen: 48
2402:d400:3e4::/48 maxlen: 48
2402:d400:3e5::/48 maxlen: 48
2402:d400:fa00::/44 maxlen: 48
2402:d400:fa10::/44 maxlen: 48
2402:d400:fa20::/44 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9148D01/E92519FA990B11EBA355CB53C4F9AE02/fjarHARDIbdM9ngmPgUk_TQXm70.crl
rsync://rpki.apnic.net/member_repository/A9148D01/E92519FA990B11EBA355CB53C4F9AE02/fjarHARDIbdM9ngmPgUk_TQXm70.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fjarHARDIbdM9ngmPgUk_TQXm70.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 25 Jun 2025 22:33:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1734 (0x6c6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9148D01, serialNumber=7E36AB1C044321B74CF678263E0524FD34179BBD
Validity
Not Before: May 14 23:12:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6825234a-2d7c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:c4:08:64:87:7f:9b:46:56:04:72:0a:27:c7:
f0:e6:5c:1b:37:09:db:d6:0b:78:e3:2b:42:7c:68:
c8:28:c1:0f:e8:ab:67:f7:82:87:bd:29:2b:94:36:
34:fb:7e:85:4a:28:36:1f:1b:c7:25:a3:f3:51:cf:
38:1c:a9:d2:17:eb:90:f1:eb:28:08:4b:74:65:0d:
b7:9f:e7:46:fd:6a:6b:c6:ac:0e:d7:89:e9:93:9d:
3c:e3:f2:1d:3e:c1:95:0d:90:7c:4f:37:db:41:c6:
72:99:22:d2:ef:f0:f3:f9:3b:f6:90:d9:d4:3c:44:
f6:2e:eb:ca:f7:01:43:67:a4:1d:a6:59:a1:56:1d:
c4:97:d1:b1:d9:ba:2b:41:52:fa:67:c6:2f:0d:e3:
8a:92:ca:f2:20:66:58:e5:a7:2a:23:b3:a5:d3:a7:
99:f5:07:cc:5f:97:66:80:82:cb:14:61:c1:25:f7:
66:28:f3:b5:b7:b9:f4:6a:d9:40:44:97:8f:43:e3:
6b:17:11:d4:3f:7c:64:ec:b8:63:85:03:95:f6:83:
8a:3f:63:c8:97:48:ef:59:bd:8e:06:1f:cc:31:db:
33:48:c2:2b:39:0a:67:8a:12:34:12:92:c7:ba:19:
df:24:a3:4c:f8:1a:e3:1a:b8:04:53:6d:32:04:a0:
9d:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:87:7E:5B:FE:EE:C1:78:50:49:2E:F7:8B:56:83:06:A9:0F:B2:1F
X509v3 Authority Key Identifier:
keyid:7E:36:AB:1C:04:43:21:B7:4C:F6:78:26:3E:05:24:FD:34:17:9B:BD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9148D01/E92519FA990B11EBA355CB53C4F9AE02/fjarHARDIbdM9ngmPgUk_TQXm70.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fjarHARDIbdM9ngmPgUk_TQXm70.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9148D01/E92519FA990B11EBA355CB53C4F9AE02/4DEF33661FBE11EF97E7974FC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
49.248.0.0-49.248.223.255
49.248.246.0-49.248.255.255
103.3.40.0/23
103.3.43.0/24
103.8.148.0/22
114.143.0.0/16
123.252.128.0/17
202.149.192.0/19
202.189.224.0/19
IPv6:
2402:d400::/32
Signature Algorithm: sha256WithRSAEncryption
76:71:03:1a:2b:b6:91:a9:4a:c3:99:55:85:c2:52:c3:dc:cc:
fa:cf:b5:4d:a9:14:d3:23:4a:4e:a9:ff:e0:93:54:f0:e7:cd:
f4:0e:16:f0:e4:7f:45:d2:94:da:a4:74:1a:14:d0:44:84:4e:
1e:7b:2c:df:08:04:07:e1:64:51:0b:2c:b1:c1:9b:ca:3e:72:
4f:78:b2:14:86:b8:89:16:f1:1d:98:50:c2:80:9b:ed:47:41:
35:e5:64:b2:44:52:5a:81:38:b3:f1:da:3e:0b:88:a6:ac:20:
1a:4b:d4:76:e4:7f:b7:c8:54:cc:6c:1e:d9:fa:6b:8d:2d:7a:
1a:7b:c6:31:70:3a:2d:57:7b:04:7d:9b:28:2f:30:c9:5f:bc:
c9:05:09:03:b1:30:0b:3d:0e:a2:af:be:0e:a7:31:f9:1c:ef:
fb:c0:2a:ec:74:be:0b:3c:95:33:f2:47:9d:8b:51:5e:38:2a:
75:f0:f7:8f:06:b9:53:3c:44:80:f8:7d:c1:b3:74:c4:1b:c0:
33:cf:ac:0b:05:ac:7e:d0:1e:2e:f1:b1:2c:c3:ab:02:ef:b4:
f2:82:6f:1e:56:19:fb:73:90:99:10:bc:b7:c3:4d:c0:9a:20:
71:7b:d7:2d:49:7e:6a:02:48:09:c1:08:91:d1:fb:74:0d:89:
32:41:7e:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 19 23:42:44 2025 by rpki-client