Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A915F89C/6907C3E21D8311E29B35A5D808B02CD2/C22C630A142511F0B4847123C4F9AE02.roa
File: C22C630A142511F0B4847123C4F9AE02.roa (raw, json)
Hash identifier: 3J0+GmIjUbR+l3JjfACvvjbO1piDekd2+kPS/ZvEoUs=
Subject key identifier: C3:9A:5D:B9:37:6A:B0:9A:CE:90:4D:F4:BF:05:C2:95:25:BA:24:48
Certificate issuer: /CN=A915F89C/serialNumber=AF8F0CFB47FBFCC7C4933C473CDB36442B5051CE
Certificate serial: 37C1
Authority key identifier: AF:8F:0C:FB:47:FB:FC:C7:C4:93:3C:47:3C:DB:36:44:2B:50:51:CE
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r48M-0f7_MfEkzxHPNs2RCtQUc4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915F89C/6907C3E21D8311E29B35A5D808B02CD2/C22C630A142511F0B4847123C4F9AE02.roa
Signing time: Tue 08 Apr 2025 03:01:25 +0000
ROA not before: Tue 08 Apr 2025 03:01:25 +0000
ROA not after: Fri 31 Oct 2025 00:00:00 +0000
asID: 9506
IP address blocks: 14.100.0.0/17 maxlen: 24
42.60.0.0/16 maxlen: 24
42.61.128.0/17 maxlen: 24
101.78.64.0/18 maxlen: 24
115.66.0.0/16 maxlen: 24
116.14.0.0/15 maxlen: 15
116.14.0.0/16 maxlen: 24
116.15.0.0/16 maxlen: 24
118.200.0.0/16 maxlen: 24
118.201.0.0/17 maxlen: 24
118.201.192.0/18 maxlen: 18
118.201.224.0/19 maxlen: 24
119.74.0.0/16 maxlen: 24
121.6.0.0/16 maxlen: 24
121.7.0.0/16 maxlen: 24
180.255.64.0/18 maxlen: 24
219.74.0.0/16 maxlen: 24
219.75.0.0/17 maxlen: 24
220.255.0.0/22 maxlen: 22
220.255.0.0/24 maxlen: 24
220.255.1.0/24 maxlen: 24
220.255.2.0/24 maxlen: 24
220.255.3.0/24 maxlen: 24
220.255.4.0/22 maxlen: 22
220.255.4.0/24 maxlen: 24
220.255.5.0/24 maxlen: 24
220.255.6.0/24 maxlen: 24
220.255.7.0/24 maxlen: 24
220.255.16.0/20 maxlen: 24
220.255.32.0/19 maxlen: 19
220.255.64.0/18 maxlen: 18
220.255.128.0/17 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A915F89C/6907C3E21D8311E29B35A5D808B02CD2/r48M-0f7_MfEkzxHPNs2RCtQUc4.crl
rsync://rpki.apnic.net/member_repository/A915F89C/6907C3E21D8311E29B35A5D808B02CD2/r48M-0f7_MfEkzxHPNs2RCtQUc4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r48M-0f7_MfEkzxHPNs2RCtQUc4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 01 May 2025 14:22:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 14273 (0x37c1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915F89C, serialNumber=AF8F0CFB47FBFCC7C4933C473CDB36442B5051CE
Validity
Not Before: Apr 8 03:01:25 2025 GMT
Not After : Oct 31 00:00:00 2025 GMT
Subject: CN=67f49185-2dbd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:6d:69:8a:4b:c3:b3:36:b6:96:9b:9a:77:d0:
fd:da:02:78:28:cd:0a:35:b5:81:f1:45:b1:38:d0:
7f:2a:8f:b1:80:77:af:25:be:9d:d5:2e:a9:d4:a4:
df:6a:b7:0e:12:b0:2f:bd:dd:aa:91:2a:80:21:78:
0d:2a:d4:5e:b1:27:70:b6:78:ee:e3:ce:87:2b:33:
fa:66:02:dd:51:5e:a7:0e:60:42:ca:3e:26:7a:2e:
75:60:be:47:eb:05:52:9b:83:dd:e8:88:f3:ac:b1:
0c:3c:c3:8f:8d:fd:b0:58:1f:6a:c3:3f:d5:66:a1:
39:3d:11:39:9b:22:f5:06:c6:92:58:9d:fe:2b:6c:
83:47:a5:f8:ec:69:5e:52:73:75:b5:63:2a:cc:8e:
ba:e2:09:1b:13:40:6a:1e:a4:90:aa:f6:ca:f4:a7:
93:f4:2d:26:2a:29:0a:dc:5f:96:9b:eb:23:10:1c:
6f:9a:f8:11:04:8c:ed:36:43:8e:59:4b:6c:cd:7c:
d6:02:70:e0:af:d4:b9:fb:e8:d7:8e:37:d5:d8:59:
94:a4:04:f3:ff:4d:4e:20:ef:85:06:ac:cf:05:09:
54:f2:ea:d0:78:74:18:f8:33:1a:a3:84:94:57:00:
4f:bb:e7:6b:3c:45:be:9b:1f:07:34:50:86:61:4e:
8d:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:9A:5D:B9:37:6A:B0:9A:CE:90:4D:F4:BF:05:C2:95:25:BA:24:48
X509v3 Authority Key Identifier:
keyid:AF:8F:0C:FB:47:FB:FC:C7:C4:93:3C:47:3C:DB:36:44:2B:50:51:CE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915F89C/6907C3E21D8311E29B35A5D808B02CD2/r48M-0f7_MfEkzxHPNs2RCtQUc4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r48M-0f7_MfEkzxHPNs2RCtQUc4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915F89C/6907C3E21D8311E29B35A5D808B02CD2/C22C630A142511F0B4847123C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
14.100.0.0/17
42.60.0.0/16
42.61.128.0/17
101.78.64.0/18
115.66.0.0/16
116.14.0.0/15
118.200.0.0-118.201.127.255
118.201.192.0/18
119.74.0.0/16
121.6.0.0/15
180.255.64.0/18
219.74.0.0-219.75.127.255
220.255.0.0/21
220.255.16.0-220.255.255.255
Signature Algorithm: sha256WithRSAEncryption
c1:49:47:97:a0:a2:1c:d2:26:07:3c:2a:d7:7b:be:34:86:af:
18:66:84:91:27:5f:aa:1e:56:45:1a:b5:7d:b8:84:af:86:41:
29:cb:bc:99:2c:9e:0a:2e:cd:3d:f3:71:9d:32:4a:18:c3:da:
5c:0b:53:da:92:f2:c4:09:b6:30:b8:36:e8:28:2c:0b:d7:c8:
0b:f3:44:14:da:45:f4:f7:27:ea:6f:fa:ad:94:48:a1:cf:2f:
4b:49:6f:31:ef:5d:ea:f6:a6:52:4c:be:e0:05:ed:02:31:ee:
5e:db:f7:33:54:10:81:68:a8:1c:21:a0:f5:e0:bc:e1:e5:2c:
c7:ce:37:db:2e:f8:6c:2a:83:a5:39:6f:8a:ff:30:9f:f1:97:
0e:aa:95:78:39:c3:3a:96:a1:b0:a5:c2:85:5d:ff:d8:74:c6:
0c:df:2c:7b:3b:48:99:66:bc:12:6b:22:e4:19:08:ef:35:8d:
d9:fd:60:61:11:0a:40:8d:24:6d:bd:c6:df:19:17:3d:11:ca:
f7:39:9c:66:80:83:ce:b8:fd:65:5e:61:16:0b:1e:34:8f:89:
2f:d1:3f:b3:1b:ac:26:68:ae:02:e0:24:b7:15:e5:0a:fd:a6:
db:b9:b6:bb:7a:ab:73:cf:51:0f:71:73:7f:1b:d8:fc:82:76:
62:f3:75:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 08:13:22 2025 by rpki-client