Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91514B1/84189226FBE411EB82B6264FC4F9AE02/283A4D20174911EC896AD61BC4F9AE02.roa
File: 283A4D20174911EC896AD61BC4F9AE02.roa (raw, json)
Hash identifier: 6h1NTpD4tkBzcf6FEpLVgu2lpNKCaqNRRFWFuF/E8kY=
Subject key identifier: B9:96:50:E6:63:45:99:AB:03:EA:E2:C9:C0:D0:9A:9C:60:95:DB:CE
Certificate issuer: /CN=A91514B1/serialNumber=6171432D5594CB3F608D3BE0F52600BBEC46E5FB
Certificate serial: 0601
Authority key identifier: 61:71:43:2D:55:94:CB:3F:60:8D:3B:E0:F5:26:00:BB:EC:46:E5:FB
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YXFDLVWUyz9gjTvg9SYAu-xG5fs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91514B1/84189226FBE411EB82B6264FC4F9AE02/283A4D20174911EC896AD61BC4F9AE02.roa
Signing time: Sun 03 Aug 2025 00:06:34 +0000
ROA not before: Sun 03 Aug 2025 00:06:34 +0000
ROA not after: Sat 31 Oct 2026 00:00:00 +0000
asID: 7474
IP address blocks: 1.44.0.0/16 maxlen: 16
59.154.0.0/16 maxlen: 16
59.154.122.0/23 maxlen: 23
59.154.173.0/24 maxlen: 24
59.154.180.0/24 maxlen: 24
59.154.235.0/24 maxlen: 24
59.154.236.0/22 maxlen: 22
59.154.241.0/24 maxlen: 24
59.154.242.0/23 maxlen: 23
59.154.252.0/23 maxlen: 23
59.154.254.0/24 maxlen: 24
61.88.0.0/17 maxlen: 17
61.88.14.0/24 maxlen: 24
61.88.46.0/24 maxlen: 24
61.88.47.0/24 maxlen: 24
61.88.52.0/24 maxlen: 24
61.88.53.0/24 maxlen: 24
61.88.55.0/24 maxlen: 24
61.88.57.0/24 maxlen: 24
61.88.60.0/24 maxlen: 24
61.88.62.0/24 maxlen: 24
61.88.65.0/24 maxlen: 24
61.88.116.0/24 maxlen: 24
61.88.128.0/18 maxlen: 18
61.88.157.0/24 maxlen: 24
61.88.192.0/20 maxlen: 20
61.88.208.0/21 maxlen: 21
61.88.216.0/22 maxlen: 22
61.88.228.0/24 maxlen: 24
61.88.229.0/24 maxlen: 24
61.88.230.0/24 maxlen: 24
61.88.232.0/24 maxlen: 24
61.88.233.0/24 maxlen: 24
61.88.234.0/24 maxlen: 24
61.88.235.0/24 maxlen: 24
61.88.253.0/24 maxlen: 24
61.88.254.0/23 maxlen: 23
119.225.0.0/16 maxlen: 16
124.19.0.0/17 maxlen: 17
124.19.72.0/24 maxlen: 24
124.19.76.0/22 maxlen: 22
124.19.84.0/22 maxlen: 22
124.19.88.0/21 maxlen: 21
124.19.96.0/24 maxlen: 24
124.19.97.0/24 maxlen: 24
125.63.128.0/17 maxlen: 17
202.139.0.0/17 maxlen: 17
202.139.4.0/24 maxlen: 24
202.139.5.0/24 maxlen: 24
202.139.8.0/22 maxlen: 22
202.139.12.0/22 maxlen: 22
202.139.24.0/24 maxlen: 24
202.139.25.0/24 maxlen: 24
202.139.28.0/24 maxlen: 24
202.139.29.0/24 maxlen: 24
202.139.30.0/24 maxlen: 24
202.139.31.0/24 maxlen: 24
202.139.34.0/24 maxlen: 24
202.139.35.0/24 maxlen: 24
202.139.36.0/24 maxlen: 24
202.139.37.0/24 maxlen: 24
202.139.38.0/24 maxlen: 24
202.139.44.0/24 maxlen: 24
202.139.45.0/24 maxlen: 24
202.139.60.0/24 maxlen: 24
202.139.61.0/24 maxlen: 24
202.139.62.0/24 maxlen: 24
202.139.64.0/24 maxlen: 24
202.139.82.0/24 maxlen: 24
202.139.102.0/24 maxlen: 24
202.139.113.0/24 maxlen: 24
202.139.128.0/18 maxlen: 18
202.139.142.0/24 maxlen: 24
202.139.143.0/24 maxlen: 24
202.139.148.0/24 maxlen: 24
202.139.154.0/24 maxlen: 24
202.139.155.0/24 maxlen: 24
202.139.156.0/24 maxlen: 24
202.139.157.0/24 maxlen: 24
202.139.159.0/24 maxlen: 24
202.139.160.0/24 maxlen: 24
202.139.164.0/24 maxlen: 24
202.139.175.0/24 maxlen: 24
202.139.176.0/24 maxlen: 24
202.139.180.0/24 maxlen: 24
202.139.183.0/24 maxlen: 24
202.139.184.0/24 maxlen: 24
202.139.185.0/24 maxlen: 24
202.139.188.0/24 maxlen: 24
202.139.189.0/24 maxlen: 24
203.13.96.0/24 maxlen: 24
203.13.98.0/24 maxlen: 24
203.13.123.0/24 maxlen: 24
203.13.125.0/24 maxlen: 24
203.13.126.0/24 maxlen: 24
203.13.127.0/24 maxlen: 24
203.13.128.0/24 maxlen: 24
203.13.129.0/24 maxlen: 24
203.13.133.0/24 maxlen: 24
203.13.134.0/24 maxlen: 24
203.202.0.0/17 maxlen: 17
203.202.60.0/24 maxlen: 24
203.202.61.0/24 maxlen: 24
203.202.62.0/24 maxlen: 24
203.202.63.0/24 maxlen: 24
203.202.66.0/24 maxlen: 24
203.202.67.0/24 maxlen: 24
203.202.104.0/24 maxlen: 24
203.202.105.0/24 maxlen: 24
203.202.110.0/24 maxlen: 24
203.202.111.0/24 maxlen: 24
203.202.112.0/24 maxlen: 24
203.202.113.0/24 maxlen: 24
203.202.114.0/24 maxlen: 24
203.202.117.0/24 maxlen: 24
203.202.118.0/24 maxlen: 24
203.202.121.0/24 maxlen: 24
203.202.122.0/24 maxlen: 24
203.202.128.0/18 maxlen: 18
203.202.128.0/24 maxlen: 24
203.202.157.0/24 maxlen: 24
203.202.164.0/24 maxlen: 24
203.202.165.0/24 maxlen: 24
203.202.166.0/24 maxlen: 24
203.202.167.0/24 maxlen: 24
203.202.174.0/24 maxlen: 24
203.202.175.0/24 maxlen: 24
203.202.176.0/22 maxlen: 22
203.202.183.0/24 maxlen: 24
203.202.190.0/24 maxlen: 24
203.202.191.0/24 maxlen: 24
210.0.0.0/24 maxlen: 24
220.101.0.0/17 maxlen: 17
2405:9000::/32 maxlen: 32
2405:9000:a::/48 maxlen: 48
2405:9000:203::/48 maxlen: 48
2405:9000:207::/48 maxlen: 48
2405:9000:3440::/48 maxlen: 48
2405:9000:4900::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91514B1/84189226FBE411EB82B6264FC4F9AE02/YXFDLVWUyz9gjTvg9SYAu-xG5fs.crl
rsync://rpki.apnic.net/member_repository/A91514B1/84189226FBE411EB82B6264FC4F9AE02/YXFDLVWUyz9gjTvg9SYAu-xG5fs.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YXFDLVWUyz9gjTvg9SYAu-xG5fs.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 14 Aug 2025 05:57:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1537 (0x601)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91514B1, serialNumber=6171432D5594CB3F608D3BE0F52600BBEC46E5FB
Validity
Not Before: Aug 3 00:06:34 2025 GMT
Not After : Oct 31 00:00:00 2026 GMT
Subject: CN=688ea80a-104e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:1c:c6:c0:48:80:9b:dc:5d:c0:23:f2:9c:63:
b8:59:0e:5f:fa:fc:ec:6f:c6:37:51:51:93:b7:1b:
01:fd:8d:1d:8d:94:b1:2d:1a:fd:4c:7a:0f:9f:94:
c2:57:6a:fb:8a:77:2e:a5:a8:1d:05:39:a8:16:33:
58:61:ca:26:e9:e1:e8:db:d9:65:0f:c1:9b:4d:1d:
ea:0a:75:3e:04:f8:46:48:1c:68:3b:fd:d2:f0:59:
e1:46:e8:c1:dc:b5:f1:18:c5:6b:6d:b0:b7:f7:7f:
2d:25:74:20:24:1a:b3:f6:89:91:04:63:f2:82:ad:
b8:19:7d:ea:3e:99:09:80:f4:26:01:d9:73:c9:a5:
1a:6b:9b:53:fe:8a:92:b8:e0:f3:1f:c8:0e:3a:ad:
ac:4f:50:af:83:11:ff:f9:72:6d:3f:e0:7a:1e:a6:
33:97:fa:38:c8:b1:60:9f:3b:38:56:2e:1c:55:bd:
97:b6:cf:35:ab:c7:c8:4a:92:12:32:1e:d6:45:4c:
d7:9a:18:2f:87:f8:75:af:88:88:f3:0c:19:46:a4:
e3:c7:a2:87:1d:d8:28:c8:8d:f7:e9:4d:64:00:5b:
30:f5:6e:9e:a6:8d:30:47:63:8b:1a:44:f6:db:45:
87:7f:a4:d5:58:d2:35:7e:9d:d5:51:90:ed:19:32:
19:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:96:50:E6:63:45:99:AB:03:EA:E2:C9:C0:D0:9A:9C:60:95:DB:CE
X509v3 Authority Key Identifier:
keyid:61:71:43:2D:55:94:CB:3F:60:8D:3B:E0:F5:26:00:BB:EC:46:E5:FB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91514B1/84189226FBE411EB82B6264FC4F9AE02/YXFDLVWUyz9gjTvg9SYAu-xG5fs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YXFDLVWUyz9gjTvg9SYAu-xG5fs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91514B1/84189226FBE411EB82B6264FC4F9AE02/283A4D20174911EC896AD61BC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
1.44.0.0/16
59.154.0.0/16
61.88.0.0-61.88.219.255
61.88.228.0-61.88.230.255
61.88.232.0/22
61.88.253.0-61.88.255.255
119.225.0.0/16
124.19.0.0/17
125.63.128.0/17
202.139.0.0-202.139.191.255
203.13.96.0/24
203.13.98.0/24
203.13.123.0/24
203.13.125.0-203.13.129.255
203.13.133.0-203.13.134.255
203.202.0.0-203.202.191.255
210.0.0.0/24
220.101.0.0/17
IPv6:
2405:9000::/32
Signature Algorithm: sha256WithRSAEncryption
c1:57:09:5c:85:ab:41:8a:c1:42:a8:26:75:ad:ce:b2:8c:01:
04:34:5b:85:1e:cb:50:d7:fa:0e:9f:d2:1d:ac:7a:45:9b:34:
e4:1f:75:aa:e2:00:9a:8e:3a:fd:53:f1:e3:9d:a2:cd:90:4e:
46:31:48:6c:56:3a:fd:39:f3:7d:ec:10:3f:26:f4:7a:a0:90:
06:8b:f3:54:52:4f:b0:95:45:ae:5d:fa:c7:51:cc:5f:b9:cb:
93:4d:81:64:b0:34:36:21:ff:c4:0b:cc:b6:2b:22:93:a5:7a:
06:e2:33:31:32:ea:43:59:19:e1:0b:6d:de:8b:22:03:1a:94:
12:08:b8:c4:45:40:01:2a:5f:de:19:3d:65:82:7c:1c:70:43:
51:2e:06:9c:94:f3:3f:8d:8a:77:8b:9d:5c:23:6d:06:57:d0:
63:43:fb:fc:2e:75:1f:31:0b:a6:9d:42:ef:d6:44:41:82:c0:
6f:54:29:6d:39:27:ed:89:30:1d:10:02:e4:cb:f4:85:0e:76:
6b:b3:08:0a:09:e0:97:dd:4e:a7:2a:b5:9a:87:4c:14:35:ae:
6f:a9:0d:58:8a:26:4a:9a:e3:98:a6:01:c0:ad:05:ac:c3:24:
2c:26:02:1f:2c:8a:4f:d6:e1:81:15:64:a0:34:4a:ec:27:9d:
d9:e6:9b:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 04:47:56 2025 by rpki-client