Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A915F89C/6907C3E21D8311E29B35A5D808B02CD2/C14F62D4142511F0B4847123C4F9AE02.roa
File: C14F62D4142511F0B4847123C4F9AE02.roa (raw, json)
Hash identifier: /R3n876ue9PKaN6opojocXacwmLmKtuLn5K0/gD84YE=
Subject key identifier: 6B:59:60:DA:C7:0A:F7:9B:56:F4:99:C9:40:8C:AA:34:80:62:4C:F0
Certificate issuer: /CN=A915F89C/serialNumber=AF8F0CFB47FBFCC7C4933C473CDB36442B5051CE
Certificate serial: 37D0
Authority key identifier: AF:8F:0C:FB:47:FB:FC:C7:C4:93:3C:47:3C:DB:36:44:2B:50:51:CE
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r48M-0f7_MfEkzxHPNs2RCtQUc4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915F89C/6907C3E21D8311E29B35A5D808B02CD2/C14F62D4142511F0B4847123C4F9AE02.roa
Signing time: Thu 24 Apr 2025 02:22:11 +0000
ROA not before: Thu 24 Apr 2025 02:22:11 +0000
ROA not after: Fri 31 Oct 2025 00:00:00 +0000
asID: 3758
IP address blocks: 14.100.0.0/17 maxlen: 24
42.60.0.0/16 maxlen: 24
42.61.0.0/16 maxlen: 24
58.185.0.0/16 maxlen: 24
101.78.64.0/18 maxlen: 24
115.42.128.0/17 maxlen: 17
115.42.160.0/24 maxlen: 24
115.42.161.0/24 maxlen: 24
115.42.162.0/24 maxlen: 24
115.42.163.0/24 maxlen: 24
115.42.164.0/22 maxlen: 22
115.42.181.0/24 maxlen: 24
115.42.185.0/24 maxlen: 24
115.42.195.0/24 maxlen: 24
115.42.196.0/24 maxlen: 24
115.42.204.0/24 maxlen: 24
115.42.206.0/24 maxlen: 24
115.42.215.0/24 maxlen: 24
115.42.216.0/24 maxlen: 24
115.42.217.0/24 maxlen: 24
115.42.219.0/24 maxlen: 24
115.42.222.0/24 maxlen: 24
115.42.251.0/24 maxlen: 24
115.42.255.0/24 maxlen: 24
115.66.0.0/16 maxlen: 24
116.12.128.0/17 maxlen: 17
116.12.137.0/24 maxlen: 24
116.12.138.0/24 maxlen: 24
116.12.147.0/24 maxlen: 24
116.12.154.0/24 maxlen: 24
116.12.156.0/24 maxlen: 24
116.12.205.0/24 maxlen: 24
116.12.206.0/24 maxlen: 24
116.12.213.0/24 maxlen: 24
116.12.214.0/24 maxlen: 24
116.12.226.0/24 maxlen: 24
116.12.229.0/24 maxlen: 24
116.12.234.0/24 maxlen: 24
116.12.235.0/24 maxlen: 24
116.12.238.0/24 maxlen: 24
116.12.243.0/24 maxlen: 24
116.12.250.0/24 maxlen: 24
116.14.0.0/15 maxlen: 15
116.14.0.0/16 maxlen: 24
116.15.0.0/16 maxlen: 24
118.200.0.0/16 maxlen: 24
118.201.0.0/17 maxlen: 24
118.201.128.0/18 maxlen: 24
118.201.192.0/18 maxlen: 18
118.201.192.0/19 maxlen: 24
118.201.224.0/19 maxlen: 24
119.73.128.0/17 maxlen: 17
119.73.130.0/24 maxlen: 24
119.73.145.0/24 maxlen: 24
119.73.148.0/24 maxlen: 24
119.73.162.0/24 maxlen: 24
119.73.191.0/24 maxlen: 24
119.73.197.0/24 maxlen: 24
119.73.201.0/24 maxlen: 24
119.73.226.0/24 maxlen: 24
119.73.242.0/24 maxlen: 24
119.73.246.0/24 maxlen: 24
119.73.251.0/24 maxlen: 24
119.73.253.0/24 maxlen: 24
119.74.0.0/16 maxlen: 24
119.75.0.0/18 maxlen: 18
119.75.19.0/24 maxlen: 24
119.75.33.0/24 maxlen: 24
119.75.36.0/24 maxlen: 24
119.75.41.0/24 maxlen: 24
119.75.48.0/24 maxlen: 24
119.75.53.0/24 maxlen: 24
119.75.57.0/24 maxlen: 24
121.6.0.0/16 maxlen: 24
121.7.0.0/16 maxlen: 24
124.66.128.0/19 maxlen: 19
124.66.133.0/24 maxlen: 24
124.66.150.0/24 maxlen: 24
124.66.156.0/24 maxlen: 24
124.66.157.0/24 maxlen: 24
124.66.158.0/24 maxlen: 24
124.66.159.0/24 maxlen: 24
180.255.0.0/18 maxlen: 24
180.255.64.0/18 maxlen: 24
203.124.0.0/22 maxlen: 22
203.125.0.0/16 maxlen: 24
203.126.0.0/16 maxlen: 24
203.127.0.0/16 maxlen: 24
203.169.64.0/18 maxlen: 18
219.74.0.0/16 maxlen: 24
219.75.0.0/17 maxlen: 24
220.255.0.0/22 maxlen: 22
220.255.0.0/24 maxlen: 24
220.255.1.0/24 maxlen: 24
220.255.2.0/24 maxlen: 24
220.255.3.0/24 maxlen: 24
220.255.4.0/22 maxlen: 22
220.255.4.0/24 maxlen: 24
220.255.5.0/24 maxlen: 24
220.255.6.0/24 maxlen: 24
220.255.7.0/24 maxlen: 24
220.255.8.0/21 maxlen: 21
220.255.11.0/24 maxlen: 24
220.255.12.0/24 maxlen: 24
220.255.13.0/24 maxlen: 24
220.255.14.0/24 maxlen: 24
220.255.15.0/24 maxlen: 24
220.255.16.0/20 maxlen: 20
220.255.32.0/19 maxlen: 19
220.255.64.0/18 maxlen: 18
220.255.128.0/17 maxlen: 24
2001:c20::/32 maxlen: 32
2001:c20::/38 maxlen: 38
2001:c20:10::/48 maxlen: 48
2001:c20:18::/48 maxlen: 48
2001:c20:400::/38 maxlen: 38
2001:c20:401::/48 maxlen: 48
2001:c20:403::/48 maxlen: 48
2001:c20:801::/48 maxlen: 48
2001:c20:2006::/48 maxlen: 48
2001:c20:2007::/48 maxlen: 48
2001:c20:2010::/48 maxlen: 48
2001:c20:3001::/48 maxlen: 48
2001:c20:3c00::/38 maxlen: 38
2001:c20:4800::/38 maxlen: 38
2001:c20:4805::/48 maxlen: 48
2001:c20:48ba::/48 maxlen: 48
2001:c20:48da::/48 maxlen: 48
2001:c20:48fe::/48 maxlen: 48
2001:c20:4c00::/38 maxlen: 38
2001:c20:5000::/38 maxlen: 38
2001:c20:5008::/48 maxlen: 48
2001:c20:6c00::/38 maxlen: 38
2001:c20:7009::/48 maxlen: 48
2001:c20:7800::/38 maxlen: 38
2001:c20:7804::/48 maxlen: 48
2001:c20:7806::/48 maxlen: 48
2001:c20:7807::/48 maxlen: 48
2001:c20:8400::/38 maxlen: 38
2001:c20:8405::/48 maxlen: 48
2001:c20:8406::/48 maxlen: 48
2001:c20:8407::/48 maxlen: 48
2001:c20:8408::/48 maxlen: 48
2001:c20:8409::/48 maxlen: 48
2001:c20:a005::/48 maxlen: 48
2001:c20:b005::/48 maxlen: 48
2001:c20:c814::/48 maxlen: 48
2001:c20:d004::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A915F89C/6907C3E21D8311E29B35A5D808B02CD2/r48M-0f7_MfEkzxHPNs2RCtQUc4.crl
rsync://rpki.apnic.net/member_repository/A915F89C/6907C3E21D8311E29B35A5D808B02CD2/r48M-0f7_MfEkzxHPNs2RCtQUc4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r48M-0f7_MfEkzxHPNs2RCtQUc4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 01 May 2025 14:22:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 14288 (0x37d0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915F89C, serialNumber=AF8F0CFB47FBFCC7C4933C473CDB36442B5051CE
Validity
Not Before: Apr 24 02:22:11 2025 GMT
Not After : Oct 31 00:00:00 2025 GMT
Subject: CN=6809a052-43c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:3f:51:85:d6:44:f9:7f:6d:00:d4:81:79:1f:
8b:56:06:80:f6:a5:61:c9:98:8d:9d:58:35:76:cc:
9f:84:5c:dd:e1:5f:20:6c:aa:e8:f6:66:d8:91:7e:
ca:a3:64:df:c1:20:3a:df:75:6c:d2:1e:e4:6f:c5:
d4:0e:95:79:e5:e6:7e:ab:7b:b8:d2:59:f2:42:5d:
a1:5d:14:bf:a7:49:ae:8b:5b:68:0b:64:e4:1b:01:
76:79:c0:66:da:97:fb:0d:95:56:27:f5:52:28:3f:
c0:bc:12:0f:65:17:a0:5b:97:f3:6b:57:03:6b:f1:
61:f7:49:da:e4:c3:3b:3c:a2:7b:a9:de:2c:0a:ef:
41:b3:b7:47:c9:85:8a:fd:0a:d6:3e:59:dc:88:4b:
21:c5:74:29:b9:48:12:81:36:08:25:9f:c6:c9:4a:
71:ed:a3:e3:1d:06:c5:a0:1b:ad:0e:03:a4:f7:47:
86:cd:83:03:b7:92:39:ae:b9:ff:7b:3f:40:6e:8c:
62:6f:d1:3f:33:65:8a:07:c6:86:47:e1:a3:b5:c3:
bd:50:c7:e0:b6:82:6b:c0:63:22:d0:b9:f8:b3:41:
8d:b0:1d:6e:05:10:90:54:ed:df:f4:21:22:bb:71:
a4:de:0c:ff:04:a9:98:65:c0:67:54:dc:04:30:71:
1d:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:59:60:DA:C7:0A:F7:9B:56:F4:99:C9:40:8C:AA:34:80:62:4C:F0
X509v3 Authority Key Identifier:
keyid:AF:8F:0C:FB:47:FB:FC:C7:C4:93:3C:47:3C:DB:36:44:2B:50:51:CE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915F89C/6907C3E21D8311E29B35A5D808B02CD2/r48M-0f7_MfEkzxHPNs2RCtQUc4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r48M-0f7_MfEkzxHPNs2RCtQUc4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915F89C/6907C3E21D8311E29B35A5D808B02CD2/C14F62D4142511F0B4847123C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
14.100.0.0/17
42.60.0.0/15
58.185.0.0/16
101.78.64.0/18
115.42.128.0/17
115.66.0.0/16
116.12.128.0/17
116.14.0.0/15
118.200.0.0/15
119.73.128.0-119.75.63.255
121.6.0.0/15
124.66.128.0/19
180.255.0.0/17
203.124.0.0/22
203.125.0.0-203.127.255.255
203.169.64.0/18
219.74.0.0-219.75.127.255
220.255.0.0/16
IPv6:
2001:c20::/32
Signature Algorithm: sha256WithRSAEncryption
37:6c:d3:81:36:20:2d:72:8f:57:68:09:e7:ad:ee:a4:9e:c6:
f6:4d:62:83:69:97:68:24:d9:75:f8:c1:0c:bb:94:58:26:06:
03:dc:d9:d6:17:99:cc:79:fb:81:fe:35:b2:df:c8:db:ce:c8:
67:50:0f:1f:59:7c:c1:b0:89:83:15:e3:df:4b:03:0a:5e:92:
2c:f6:4d:33:87:25:14:ff:0a:8d:c6:07:97:69:30:b4:fb:60:
d1:14:7a:38:62:2a:3a:05:55:5f:a0:db:2c:5c:af:a7:f0:eb:
4f:33:60:ea:f1:0f:a8:55:38:f2:a4:ee:f6:9b:eb:0b:4d:85:
ce:86:d8:4a:57:39:d6:53:7c:bf:cf:f5:88:1e:1c:5b:94:25:
bd:d3:d4:23:f6:83:85:f9:fc:66:5c:6f:d6:41:ac:c0:a8:c5:
25:0d:26:28:22:f7:1c:cc:72:b5:95:5c:f4:b2:d4:0e:b7:01:
ee:4d:b9:bd:ba:96:46:c2:7b:1e:34:ec:e7:64:cc:3a:91:fb:
3b:ae:c9:77:02:fc:82:a2:65:b9:53:2a:d8:60:71:18:4d:c6:
ce:e3:11:27:b1:f1:a3:a5:ca:93:22:27:c3:27:04:2b:a5:8c:
d1:50:f9:e9:50:c2:d9:eb:11:a0:78:d8:57:08:50:c5:18:c2:
96:00:1e:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 08:12:19 2025 by rpki-client