Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9158E3F/C24322BA544611EA8C05651DC4F9AE02/CB67A9DC8D1311EF9895E61CC4F9AE02.roa
File: CB67A9DC8D1311EF9895E61CC4F9AE02.roa (raw, json)
Hash identifier: oTQka3Xse/mApRVhgDWpA9SvsJedfXcDHPHhbOV4Kq4=
Subject key identifier: CC:38:41:48:D1:ED:77:54:19:54:8C:C7:0E:EF:56:BE:EF:F2:FF:B9
Certificate issuer: /CN=A9158E3F/serialNumber=7E313AB7FF26E783E03C07851612751881AE4918
Certificate serial: 0C30
Authority key identifier: 7E:31:3A:B7:FF:26:E7:83:E0:3C:07:85:16:12:75:18:81:AE:49:18
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fjE6t_8m54PgPAeFFhJ1GIGuSRg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9158E3F/C24322BA544611EA8C05651DC4F9AE02/CB67A9DC8D1311EF9895E61CC4F9AE02.roa
Signing time: Tue 29 Jul 2025 10:10:17 +0000
ROA not before: Tue 29 Jul 2025 10:10:17 +0000
ROA not after: Fri 31 Oct 2025 00:00:00 +0000
asID: 15830
IP address blocks: 27.111.128.0/22 maxlen: 22
36.255.39.0/24 maxlen: 24
103.8.176.0/22 maxlen: 22
103.8.180.0/22 maxlen: 22
103.8.180.0/24 maxlen: 24
103.8.182.0/23 maxlen: 23
119.27.0.0/19 maxlen: 19
119.27.32.0/20 maxlen: 20
119.27.50.0/23 maxlen: 23
119.27.52.0/22 maxlen: 22
119.27.56.0/22 maxlen: 22
119.27.60.0/23 maxlen: 23
122.50.64.0/19 maxlen: 19
122.50.104.0/21 maxlen: 21
122.50.112.0/22 maxlen: 22
122.50.120.0/21 maxlen: 21
180.189.0.0/20 maxlen: 20
180.189.0.0/21 maxlen: 21
180.189.8.0/21 maxlen: 21
180.189.8.0/22 maxlen: 22
180.189.13.0/24 maxlen: 24
180.189.14.0/23 maxlen: 23
180.189.32.0/20 maxlen: 20
180.189.48.0/22 maxlen: 22
180.189.56.0/21 maxlen: 21
183.177.0.0/20 maxlen: 20
183.177.16.0/20 maxlen: 20
183.177.32.0/20 maxlen: 20
202.167.224.0/23 maxlen: 23
202.167.227.0/24 maxlen: 24
202.167.230.0/23 maxlen: 23
202.167.232.0/24 maxlen: 24
202.167.234.0/23 maxlen: 23
202.167.236.0/22 maxlen: 22
202.167.240.0/22 maxlen: 22
202.167.244.0/22 maxlen: 22
202.167.248.0/23 maxlen: 23
202.167.252.0/23 maxlen: 23
202.167.254.0/24 maxlen: 24
202.167.255.0/24 maxlen: 24
202.177.192.0/24 maxlen: 24
202.177.193.0/24 maxlen: 24
202.177.195.0/24 maxlen: 24
202.177.196.0/23 maxlen: 23
202.177.198.0/24 maxlen: 24
202.177.199.0/24 maxlen: 24
202.177.200.0/23 maxlen: 23
202.177.202.0/23 maxlen: 23
202.177.204.0/23 maxlen: 23
202.177.207.0/24 maxlen: 24
203.190.224.0/23 maxlen: 23
203.190.226.0/24 maxlen: 24
203.190.228.0/23 maxlen: 23
203.190.232.0/22 maxlen: 22
203.190.232.0/24 maxlen: 24
203.190.236.0/22 maxlen: 22
2407:b000::/32 maxlen: 32
2407:b001::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9158E3F/C24322BA544611EA8C05651DC4F9AE02/fjE6t_8m54PgPAeFFhJ1GIGuSRg.crl
rsync://rpki.apnic.net/member_repository/A9158E3F/C24322BA544611EA8C05651DC4F9AE02/fjE6t_8m54PgPAeFFhJ1GIGuSRg.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fjE6t_8m54PgPAeFFhJ1GIGuSRg.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 14 Aug 2025 05:57:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3120 (0xc30)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9158E3F, serialNumber=7E313AB7FF26E783E03C07851612751881AE4918
Validity
Not Before: Jul 29 10:10:17 2025 GMT
Not After : Oct 31 00:00:00 2025 GMT
Subject: CN=68889e08-9375
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:b2:53:b5:d3:92:42:e9:c0:cd:65:1f:0f:27:
f5:6c:47:d8:3d:81:9f:16:50:29:77:c1:dd:3f:73:
9c:b7:26:82:75:fb:32:21:56:a8:9f:88:45:8d:99:
b9:45:f8:01:a2:43:dc:71:b4:d0:91:6d:40:13:4e:
4c:9e:70:d8:fa:a5:6d:9d:df:76:06:1d:7e:e1:b2:
8f:c9:36:7d:43:b7:bd:cd:73:62:fa:2f:e1:f0:57:
88:3f:d5:34:e1:3c:82:5f:08:63:40:6e:e1:38:5e:
f3:6d:7b:27:1d:8d:47:65:89:22:9b:f8:ef:85:57:
01:91:74:19:23:53:56:a3:de:b0:ad:f9:f3:d0:44:
5d:b2:4f:f1:1e:a2:1a:fa:71:f7:2f:b7:9b:80:95:
e1:73:8b:64:ff:ff:6b:6c:b3:83:3a:46:6f:30:af:
84:f3:b3:3d:f4:90:39:79:d0:1b:d1:fc:86:01:87:
fa:ff:52:93:94:80:d2:51:81:a2:90:ae:33:28:24:
68:2b:5a:99:65:79:7b:5c:73:08:2b:2d:3a:cf:dd:
30:7f:f5:b5:9d:b1:3b:bc:77:80:04:2e:ac:39:6d:
ad:ac:8a:44:c4:c3:56:cc:d0:fb:21:3f:a5:f1:15:
27:f3:24:d0:9d:ed:39:b4:6f:41:9a:68:27:19:8e:
09:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:38:41:48:D1:ED:77:54:19:54:8C:C7:0E:EF:56:BE:EF:F2:FF:B9
X509v3 Authority Key Identifier:
keyid:7E:31:3A:B7:FF:26:E7:83:E0:3C:07:85:16:12:75:18:81:AE:49:18
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9158E3F/C24322BA544611EA8C05651DC4F9AE02/fjE6t_8m54PgPAeFFhJ1GIGuSRg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fjE6t_8m54PgPAeFFhJ1GIGuSRg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9158E3F/C24322BA544611EA8C05651DC4F9AE02/CB67A9DC8D1311EF9895E61CC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
27.111.128.0/22
36.255.39.0/24
103.8.176.0/21
119.27.0.0-119.27.47.255
119.27.50.0-119.27.61.255
122.50.64.0/19
122.50.104.0-122.50.115.255
122.50.120.0/21
180.189.0.0/20
180.189.32.0-180.189.51.255
180.189.56.0/21
183.177.0.0-183.177.47.255
202.167.224.0/23
202.167.227.0/24
202.167.230.0-202.167.232.255
202.167.234.0-202.167.249.255
202.167.252.0/22
202.177.192.0/23
202.177.195.0-202.177.205.255
202.177.207.0/24
203.190.224.0-203.190.226.255
203.190.228.0/23
203.190.232.0/21
IPv6:
2407:b000::/31
Signature Algorithm: sha256WithRSAEncryption
50:6c:80:cd:23:dc:35:27:88:38:07:6c:23:fe:18:23:76:94:
a3:ba:e1:31:f2:8f:cf:6a:d8:8e:31:39:42:52:f3:ca:ae:54:
f2:46:ba:27:9c:a7:d1:d8:26:f0:f0:c4:f6:31:2f:31:e0:83:
ab:32:60:71:22:2f:4a:25:a9:33:bf:2d:fd:06:28:af:d2:68:
1b:90:c9:9c:6d:ac:41:1d:15:e6:fd:65:9b:d4:10:66:57:e0:
ec:ea:db:82:0a:90:38:e0:93:22:b4:a7:d0:10:32:71:87:a1:
52:b7:f5:ea:3d:f1:b0:8c:8e:a6:07:14:2a:e7:b8:e9:64:13:
09:80:ad:b6:b2:4a:f0:16:d4:71:79:1a:a3:ea:57:6e:bd:ff:
0a:5a:72:ba:3f:96:f3:f9:b4:36:62:fb:8a:d3:dc:d0:93:ad:
43:d9:42:5a:e9:67:5c:f4:09:67:99:93:43:d9:49:ef:7e:58:
39:8f:62:40:c6:e2:ee:4e:27:ed:36:ed:f9:11:91:9b:38:f4:
9e:0a:70:ff:1c:ea:cb:f9:57:72:c5:72:a5:11:ca:1f:66:de:
ba:2d:6c:82:e0:d2:87:d7:8a:af:8a:33:53:c9:13:9b:96:a4:
5f:d0:41:01:43:ce:0a:76:ee:ee:79:03:3e:1e:41:6a:5a:33:
be:7b:c9:4f
-----BEGIN CERTIFICATE-----
MIIGTzCCBTegAwIBAgICDDAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NThFM0YxMTAvBgNVBAUTKDdFMzEzQUI3RkYyNkU3ODNFMDNDMDc4NTE2MTI3NTE4
ODFBRTQ5MTgwHhcNMjUwNzI5MTAxMDE3WhcNMjUxMDMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02ODg4OWUwOC05Mzc1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA8LJTtdOSQunAzWUfDyf1bEfYPYGfFlApd8HdP3OctyaCdfsyIVaon4hFjZm5
RfgBokPccbTQkW1AE05MnnDY+qVtnd92Bh1+4bKPyTZ9Q7e9zXNi+i/h8FeIP9U0
4TyCXwhjQG7hOF7zbXsnHY1HZYkim/jvhVcBkXQZI1NWo96wrfnz0ERdsk/xHqIa
+nH3L7ebgJXhc4tk//9rbLODOkZvMK+E87M99JA5edAb0fyGAYf6/1KTlIDSUYGi
kK4zKCRoK1qZZXl7XHMIKy06z90wf/W1nbE7vHeABC6sOW2trIpExMNWzND7IT+l
8RUn8yTQne05tG9BmmgnGY4J3wIDAQABo4IDczCCA28wHQYDVR0OBBYEFMw4QUjR
7XdUGVSMxw7vVr7v8v+5MB8GA1UdIwQYMBaAFH4xOrf/JueD4DwHhRYSdRiBrkkY
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1OEUzRi9DMjQzMjJCQTU0
NDYxMUVBOEMwNTY1MURDNEY5QUUwMi9makU2dF84bTU0UGdQQWVGRmhKMUdJR3VT
UmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2ZqRTZ0XzhtNTRQZ1BBZUZGaEoxR0lHdVNSZy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
NThFM0YvQzI0MzIyQkE1NDQ2MTFFQThDMDU2NTFEQzRGOUFFMDIvQ0I2N0E5REM4
RDEzMTFFRjk4OTVFNjFDQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwgfwGCCsGAQUFBwEHAQH/
BIHsMIHpMIHXBAIAATCB0AMEAhtvgAMEACT/JwMEA2cIsDALAwMAdxsDBAR3GyAw
DAMEAXcbMgMEAXcbPAMEBXoyQDAMAwQDejJoAwQCejJwAwQDejJ4AwQEtL0AMAwD
BAW0vSADBAK0vTADBAO0vTgwCwMDALexAwQEt7EgAwQByqfgAwQAyqfjMAwDBAHK
p+YDBADKp+gwDAMEAcqn6gMEAcqn+AMEAsqn/AMEAcqxwDAMAwQAyrHDAwQByrHM
AwQAyrHPMAwDBAXLvuADBADLvuIDBAHLvuQDBAPLvugwDQQCAAIwBwMFASQHsAAw
DQYJKoZIhvcNAQELBQADggEBAFBsgM0j3DUniDgHbCP+GCN2lKO64THyj89q2I4x
OUJS88quVPJGuiecp9HYJvDwxPYxLzHgg6syYHEiL0olqTO/Lf0GKK/SaBuQyZxt
rEEdFeb9ZZvUEGZX4Ozq24IKkDjgkyK0p9AQMnGHoVK39eo98bCMjqYHFCrnuOlk
EwmArbaySvAW1HF5GqPqV269/wpacro/lvP5tDZi+4rT3NCTrUPZQlrpZ1z0CWeZ
k0PZSe9+WDmPYkDG4u5OJ+027fkRkZs49J4KcP8c6sv5V3LFcqURyh9m3rotbILg
0ofXiq+KM1PJE5uWpF/QQQFDzgp27u55Az4eQWpaM757yU8=
-----END CERTIFICATE-----
Generated at Sun Aug 10 21:07:57 2025 by rpki-client