Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A915C281/002013461D9911E2BC10668308B02CD2/92078AAE0B5411EF957DA628C4F9AE02.roa
File: 92078AAE0B5411EF957DA628C4F9AE02.roa (raw, json)
Hash identifier: MDqcYhBOLAd7Ve6t+D2323MIjWFyCpfTNAq4hOx2Ghw=
Subject key identifier: FA:67:01:49:1F:12:B4:AB:DC:A4:38:0A:A1:F1:16:B9:40:F1:2D:6F
Certificate issuer: /CN=A915C281/serialNumber=131768A36B30346E3DBEBEBF87B8481BAABE3EEB
Certificate serial: 3530
Authority key identifier: 13:17:68:A3:6B:30:34:6E:3D:BE:BE:BF:87:B8:48:1B:AA:BE:3E:EB
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Exdoo2swNG49vr6_h7hIG6q-Pus.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915C281/002013461D9911E2BC10668308B02CD2/92078AAE0B5411EF957DA628C4F9AE02.roa
Signing time: Thu 31 Jul 2025 15:21:03 +0000
ROA not before: Thu 31 Jul 2025 15:21:03 +0000
ROA not after: Wed 30 Sep 2026 00:00:00 +0000
asID: 45245
IP address blocks: 27.54.144.0/22 maxlen: 24
43.245.120.0/23 maxlen: 24
43.245.122.0/23 maxlen: 24
43.255.20.0/22 maxlen: 24
59.152.0.0/21 maxlen: 24
103.15.164.0/22 maxlen: 24
103.67.156.0/23 maxlen: 24
103.67.158.0/23 maxlen: 24
103.239.4.0/22 maxlen: 24
103.244.12.0/22 maxlen: 24
103.253.44.0/22 maxlen: 24
116.58.200.0/22 maxlen: 24
116.58.204.0/22 maxlen: 24
150.242.104.0/22 maxlen: 24
202.86.216.0/21 maxlen: 24
203.223.92.0/23 maxlen: 24
203.223.94.0/23 maxlen: 24
2401:1900::/32 maxlen: 36
2401:1900::/42 maxlen: 48
2401:1900:40::/42 maxlen: 42
2401:1900:80::/42 maxlen: 46
2401:1900:c0::/42 maxlen: 46
2401:1900:100::/42 maxlen: 46
2401:1900:140::/42 maxlen: 42
2401:1900:180::/42 maxlen: 42
2401:1900:1c0::/42 maxlen: 42
2401:1900:200::/42 maxlen: 42
2401:1900:1000::/42 maxlen: 48
2401:1900:1040::/42 maxlen: 42
2401:1900:1080::/42 maxlen: 42
2401:1900:1100::/42 maxlen: 42
2401:1900:1140::/42 maxlen: 42
2401:1900:2000::/42 maxlen: 48
2401:1900:2040::/42 maxlen: 42
2401:1900:2080::/42 maxlen: 42
2401:1900:2100::/42 maxlen: 42
2401:1900:2140::/42 maxlen: 42
2401:1900:8000::/42 maxlen: 48
2401:1900:8040::/42 maxlen: 46
2401:1900:8080::/42 maxlen: 46
2401:1900:80c0::/42 maxlen: 46
2401:1900:8100::/42 maxlen: 42
2401:1900:8140::/42 maxlen: 42
2401:1900:8180::/42 maxlen: 42
2401:1900:81c0::/42 maxlen: 42
2401:1900:9000::/42 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A915C281/002013461D9911E2BC10668308B02CD2/Exdoo2swNG49vr6_h7hIG6q-Pus.crl
rsync://rpki.apnic.net/member_repository/A915C281/002013461D9911E2BC10668308B02CD2/Exdoo2swNG49vr6_h7hIG6q-Pus.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Exdoo2swNG49vr6_h7hIG6q-Pus.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 14 Aug 2025 05:57:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13616 (0x3530)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915C281, serialNumber=131768A36B30346E3DBEBEBF87B8481BAABE3EEB
Validity
Not Before: Jul 31 15:21:03 2025 GMT
Not After : Sep 30 00:00:00 2026 GMT
Subject: CN=688b89df-b1c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:b3:19:fa:50:95:c7:e9:c9:d4:05:64:61:ed:
bc:81:a3:e4:48:4e:a1:7a:94:61:01:7b:99:ab:95:
af:18:5b:50:fc:50:b3:23:0a:96:0f:cc:cf:72:58:
eb:57:1a:50:22:a7:a8:e1:67:90:63:c5:81:26:de:
47:74:2e:d1:c7:47:fa:28:0c:f0:83:5a:61:e9:bd:
f9:8b:13:33:90:4e:ff:72:5f:f3:fa:dc:0f:f4:d0:
07:5f:1a:c2:dd:32:f2:d0:f1:57:61:20:65:45:f1:
b1:21:12:48:fe:8d:b4:03:7d:4d:55:04:f1:fc:3f:
9e:cc:53:fb:d0:d8:ba:ca:40:84:24:20:be:a1:a3:
d4:81:d1:0b:16:29:c9:a9:bb:38:6c:df:b9:90:cf:
b0:2c:b1:7f:f1:86:df:21:0d:19:6f:63:0d:ee:bc:
9a:bd:89:b9:57:ee:9c:70:e0:8e:04:ac:3c:18:c9:
c3:91:bc:10:35:7c:69:a6:fb:7a:4a:16:9d:07:96:
49:1c:26:45:86:90:61:e6:3d:a0:b5:3d:9e:53:97:
54:ff:16:96:7c:32:5a:de:6d:26:7e:1a:34:ed:39:
f5:63:a9:51:66:13:ef:67:7d:1a:fc:43:60:e7:79:
08:51:4a:09:d7:6d:4c:f1:1a:b1:a2:5d:85:2c:dc:
79:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:67:01:49:1F:12:B4:AB:DC:A4:38:0A:A1:F1:16:B9:40:F1:2D:6F
X509v3 Authority Key Identifier:
keyid:13:17:68:A3:6B:30:34:6E:3D:BE:BE:BF:87:B8:48:1B:AA:BE:3E:EB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915C281/002013461D9911E2BC10668308B02CD2/Exdoo2swNG49vr6_h7hIG6q-Pus.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Exdoo2swNG49vr6_h7hIG6q-Pus.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915C281/002013461D9911E2BC10668308B02CD2/92078AAE0B5411EF957DA628C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
27.54.144.0/22
43.245.120.0/22
43.255.20.0/22
59.152.0.0/21
103.15.164.0/22
103.67.156.0/22
103.239.4.0/22
103.244.12.0/22
103.253.44.0/22
116.58.200.0/21
150.242.104.0/22
202.86.216.0/21
203.223.92.0/22
IPv6:
2401:1900::/32
Signature Algorithm: sha256WithRSAEncryption
56:7b:55:ad:70:1a:62:e4:83:86:c0:44:19:7a:86:43:12:c6:
d7:8c:1b:bc:51:23:53:5c:ab:af:53:f8:80:e3:83:b6:97:24:
13:8e:03:95:1a:57:3b:ef:f7:a6:65:52:3a:cd:ef:9d:85:27:
29:4d:b5:fc:d4:2d:be:dd:54:46:64:85:2b:3f:ce:d3:0b:af:
3e:c0:32:ff:7d:dc:81:91:fd:2e:71:d9:d3:ed:25:41:5b:61:
9a:59:fe:30:db:54:20:e5:78:79:8f:7c:cd:ec:17:2b:ae:a7:
88:84:84:40:ed:59:d9:ed:9f:54:e7:ec:27:b9:a7:79:0c:25:
88:44:41:f5:cf:80:32:a3:b2:c6:a9:04:84:4b:2a:f1:16:e7:
09:90:42:41:b0:d3:0d:3e:99:e2:e6:bb:5d:4f:b4:d7:eb:dd:
99:79:70:21:08:16:55:f6:15:45:08:49:04:51:05:53:ae:0e:
0f:08:b0:ae:4f:bc:56:5f:d6:4b:85:f2:7f:11:8c:be:21:1f:
cd:3f:bf:31:05:dd:2d:e6:f0:63:09:09:d0:bb:b3:66:79:7c:
57:59:34:40:5d:ce:dc:f6:be:d4:8e:bb:5b:b1:de:92:ad:8f:
77:78:24:2f:82:69:e1:f4:ea:53:9a:c3:1c:db:33:c0:86:2f:
ad:0f:48:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 13:03:41 2025 by rpki-client