Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9149F3E/9A85BB501D8211E2BC6417D708B02CD2/30941278EF2011EF9264077FC4F9AE02.roa
File: 30941278EF2011EF9264077FC4F9AE02.roa (raw, json)
Hash identifier: xIEk46u13Lcmpz8W5GI7/U4Vwo0brhJQ4NAAEPzEgVA=
Subject key identifier: 84:53:F1:B2:23:81:5E:92:D4:8B:F3:C8:2B:F0:9B:34:99:11:61:D0
Certificate issuer: /CN=A9149F3E/serialNumber=BF0E6F4EE0E17DDE8C4A24BF897D19B87AA5759F
Certificate serial: 3540
Authority key identifier: BF:0E:6F:4E:E0:E1:7D:DE:8C:4A:24:BF:89:7D:19:B8:7A:A5:75:9F
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vw5vTuDhfd6MSiS_iX0ZuHqldZ8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9149F3E/9A85BB501D8211E2BC6417D708B02CD2/30941278EF2011EF9264077FC4F9AE02.roa
Signing time: Wed 29 Oct 2025 00:05:41 +0000
ROA not before: Wed 29 Oct 2025 00:05:41 +0000
ROA not after: Mon 31 Aug 2026 00:00:00 +0000
asID: 17579
IP address blocks: 134.75.15.0/24 maxlen: 24
134.75.16.0/24 maxlen: 24
134.75.52.0/24 maxlen: 24
134.75.101.0/24 maxlen: 24
134.75.102.0/24 maxlen: 24
134.75.103.0/24 maxlen: 24
134.75.105.0/24 maxlen: 24
134.75.107.0/24 maxlen: 24
134.75.108.0/24 maxlen: 24
134.75.123.0/24 maxlen: 24
134.75.124.0/24 maxlen: 24
134.75.125.0/24 maxlen: 24
134.75.126.0/24 maxlen: 24
134.75.127.0/24 maxlen: 24
134.75.128.0/24 maxlen: 24
134.75.129.0/24 maxlen: 24
134.75.130.0/24 maxlen: 24
134.75.131.0/24 maxlen: 24
134.75.132.0/24 maxlen: 24
134.75.200.0/24 maxlen: 24
134.75.207.0/24 maxlen: 24
134.75.252.0/24 maxlen: 24
134.75.253.0/24 maxlen: 24
134.75.254.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9149F3E/9A85BB501D8211E2BC6417D708B02CD2/vw5vTuDhfd6MSiS_iX0ZuHqldZ8.crl
rsync://rpki.apnic.net/member_repository/A9149F3E/9A85BB501D8211E2BC6417D708B02CD2/vw5vTuDhfd6MSiS_iX0ZuHqldZ8.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vw5vTuDhfd6MSiS_iX0ZuHqldZ8.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 11 Nov 2025 14:22:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13632 (0x3540)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9149F3E, serialNumber=BF0E6F4EE0E17DDE8C4A24BF897D19B87AA5759F
Validity
Not Before: Oct 29 00:05:41 2025 GMT
Not After : Aug 31 00:00:00 2026 GMT
Subject: CN=69015a55-8c34
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:f1:83:2d:25:e6:8e:dc:97:3a:54:17:cd:05:
85:48:76:3f:73:3a:fb:c7:e8:66:8a:2e:02:a9:89:
ed:21:76:97:20:a9:94:9e:d1:89:e5:0e:a3:9c:86:
eb:d0:82:b1:d9:0c:e8:ee:5a:c8:a2:58:64:cd:f9:
7e:42:90:f1:1f:56:b7:a9:2e:ac:9a:e0:f0:c2:ba:
07:1e:2c:99:e0:04:1a:ea:b5:ab:e9:c9:cf:be:d1:
fc:4d:a4:dd:41:f9:4f:45:e0:b7:25:9a:20:c7:f2:
4a:96:70:9f:13:14:38:4c:ca:05:69:0b:08:7a:21:
c8:97:c5:05:47:7f:8f:c3:08:d9:fd:08:64:ec:f5:
0a:e0:fd:46:20:db:67:2e:e2:91:ff:32:00:05:af:
3f:e6:c9:06:6f:ac:3b:3a:35:68:76:32:63:59:9a:
6f:c9:19:6d:fb:6d:53:c2:52:4a:72:db:bb:f9:52:
ca:70:f0:5f:ac:52:32:4b:e9:20:48:68:33:45:8e:
62:5a:07:ed:63:87:4a:50:94:f7:12:9a:b2:7b:1d:
88:7b:03:8c:1e:4e:97:e7:51:86:bb:d4:37:15:62:
bd:4e:fc:2a:8b:30:20:27:1f:99:63:3b:e8:b0:f4:
aa:d3:8d:4a:d8:e9:b7:67:5c:a6:16:d7:06:04:33:
8a:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:53:F1:B2:23:81:5E:92:D4:8B:F3:C8:2B:F0:9B:34:99:11:61:D0
X509v3 Authority Key Identifier:
keyid:BF:0E:6F:4E:E0:E1:7D:DE:8C:4A:24:BF:89:7D:19:B8:7A:A5:75:9F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9149F3E/9A85BB501D8211E2BC6417D708B02CD2/vw5vTuDhfd6MSiS_iX0ZuHqldZ8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vw5vTuDhfd6MSiS_iX0ZuHqldZ8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9149F3E/9A85BB501D8211E2BC6417D708B02CD2/30941278EF2011EF9264077FC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
134.75.15.0-134.75.16.255
134.75.52.0/24
134.75.101.0-134.75.103.255
134.75.105.0/24
134.75.107.0-134.75.108.255
134.75.123.0-134.75.132.255
134.75.200.0/24
134.75.207.0/24
134.75.252.0-134.75.254.255
Signature Algorithm: sha256WithRSAEncryption
c9:0a:dd:63:9d:12:d0:55:bc:cc:c3:d9:c1:3e:0b:97:91:fe:
f7:9a:c9:08:87:07:13:57:2e:51:b6:14:e5:aa:76:78:dd:4a:
ad:33:60:fd:9c:d4:ce:f2:a2:26:43:e0:d9:6f:90:5d:af:61:
ae:4f:ab:07:85:96:d3:45:9f:57:a6:43:2c:95:83:8b:ae:64:
1d:76:1d:79:ac:57:ca:e0:5f:1d:df:67:28:fa:5c:ac:12:9c:
6e:8b:32:9f:fa:a9:62:77:57:1b:7d:2b:81:60:30:f6:bb:f4:
b1:c2:85:9e:72:31:e2:19:a9:9b:c3:62:3d:9e:9e:c6:80:16:
4f:d5:60:a2:ce:88:50:8d:2c:ed:6a:df:ff:ea:97:94:42:11:
fb:83:ef:97:90:50:70:d3:5a:ec:b1:7f:80:4a:8f:d0:ab:d7:
b8:59:45:f0:a6:58:62:49:c5:6a:4e:ef:5a:d6:7d:37:a6:2b:
0a:13:d1:4b:1e:dd:a0:27:76:cc:27:58:12:97:cc:9c:78:a2:
e1:8e:01:92:c4:74:d6:7c:a8:69:5f:06:87:77:9a:db:f9:72:
92:ec:af:7b:39:fc:67:34:e4:16:c2:d6:df:73:fa:38:93:43:
bc:21:a0:81:16:03:09:e9:33:e0:f8:85:73:d9:37:7d:2e:c6:
59:c8:82:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 13:32:15 2025 by rpki-client