Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A915F89C/6907C3E21D8311E29B35A5D808B02CD2/C22C630A142511F0B4847123C4F9AE02.roa
File: C22C630A142511F0B4847123C4F9AE02.roa (raw, json)
Hash identifier: wb/aJSYfXUghCBxmEbmxnEE2JyRw9wslQQme1Qx+Kdg=
Subject key identifier: C0:54:20:5A:3C:E3:55:53:E8:B0:96:CA:52:EE:AB:F1:AB:B2:BB:C7
Certificate issuer: /CN=A915F89C/serialNumber=AF8F0CFB47FBFCC7C4933C473CDB36442B5051CE
Certificate serial: 37F3
Authority key identifier: AF:8F:0C:FB:47:FB:FC:C7:C4:93:3C:47:3C:DB:36:44:2B:50:51:CE
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r48M-0f7_MfEkzxHPNs2RCtQUc4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915F89C/6907C3E21D8311E29B35A5D808B02CD2/C22C630A142511F0B4847123C4F9AE02.roa
Signing time: Thu 12 Jun 2025 07:49:29 +0000
ROA not before: Thu 12 Jun 2025 07:49:29 +0000
ROA not after: Fri 31 Oct 2025 00:00:00 +0000
asID: 9506
IP address blocks: 14.100.0.0/17 maxlen: 24
42.60.0.0/16 maxlen: 24
42.61.128.0/17 maxlen: 24
101.78.64.0/18 maxlen: 24
115.66.0.0/16 maxlen: 24
116.14.0.0/15 maxlen: 15
116.14.0.0/16 maxlen: 24
116.15.0.0/16 maxlen: 24
118.200.0.0/16 maxlen: 24
118.201.0.0/17 maxlen: 24
118.201.192.0/18 maxlen: 18
118.201.224.0/19 maxlen: 24
119.74.0.0/16 maxlen: 24
119.234.128.0/18 maxlen: 19
119.234.192.0/19 maxlen: 19
121.6.0.0/16 maxlen: 24
121.7.0.0/16 maxlen: 24
180.255.64.0/18 maxlen: 24
219.74.0.0/16 maxlen: 24
219.75.0.0/17 maxlen: 24
220.255.0.0/22 maxlen: 22
220.255.0.0/24 maxlen: 24
220.255.1.0/24 maxlen: 24
220.255.2.0/24 maxlen: 24
220.255.3.0/24 maxlen: 24
220.255.4.0/22 maxlen: 22
220.255.4.0/24 maxlen: 24
220.255.5.0/24 maxlen: 24
220.255.6.0/24 maxlen: 24
220.255.7.0/24 maxlen: 24
220.255.16.0/20 maxlen: 24
220.255.32.0/19 maxlen: 19
220.255.64.0/18 maxlen: 18
220.255.128.0/17 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A915F89C/6907C3E21D8311E29B35A5D808B02CD2/r48M-0f7_MfEkzxHPNs2RCtQUc4.crl
rsync://rpki.apnic.net/member_repository/A915F89C/6907C3E21D8311E29B35A5D808B02CD2/r48M-0f7_MfEkzxHPNs2RCtQUc4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r48M-0f7_MfEkzxHPNs2RCtQUc4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 25 Jun 2025 14:22:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 14323 (0x37f3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915F89C, serialNumber=AF8F0CFB47FBFCC7C4933C473CDB36442B5051CE
Validity
Not Before: Jun 12 07:49:29 2025 GMT
Not After : Oct 31 00:00:00 2025 GMT
Subject: CN=684a8688-d7d8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:dc:ab:08:ae:36:8e:90:01:e1:91:f0:2b:59:
49:88:f2:5c:18:1b:d9:64:ba:fd:ec:44:b3:1e:7b:
b6:e4:77:31:32:a9:91:46:33:f5:b7:55:d6:80:9e:
77:3e:e6:60:47:e7:4f:ce:0f:ca:1e:45:23:64:ba:
f7:17:8c:a1:8a:77:68:7d:22:93:d1:aa:e2:f7:fb:
42:1b:67:08:a3:c4:2e:8d:ea:28:b6:88:1a:3c:ac:
f1:51:f7:e8:78:08:a9:66:45:4f:65:aa:bb:35:fb:
75:1a:33:0f:00:53:6d:1d:ec:cb:f1:91:47:bf:22:
02:ba:dc:06:a1:fe:98:1e:43:3e:4c:ac:01:9f:b4:
77:c4:e7:b4:86:f6:3e:e1:36:9f:b2:d9:39:d9:7d:
71:bb:ef:c1:62:57:56:dd:1d:b4:22:d2:12:1c:40:
ed:19:cf:14:89:19:8a:5e:17:c0:1e:2b:10:3f:b0:
a1:70:d7:bd:94:11:b9:af:0d:94:69:51:d6:49:20:
af:95:b0:ca:ba:3c:2e:40:64:52:54:61:7e:af:7e:
8f:f9:d3:40:f6:7f:8e:30:39:58:65:f3:42:74:f1:
2b:47:b5:d8:ce:7d:5c:d3:c9:16:c2:4d:18:78:91:
56:12:a4:14:6a:ee:a7:67:17:35:1f:c0:30:3d:0c:
6b:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:54:20:5A:3C:E3:55:53:E8:B0:96:CA:52:EE:AB:F1:AB:B2:BB:C7
X509v3 Authority Key Identifier:
keyid:AF:8F:0C:FB:47:FB:FC:C7:C4:93:3C:47:3C:DB:36:44:2B:50:51:CE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915F89C/6907C3E21D8311E29B35A5D808B02CD2/r48M-0f7_MfEkzxHPNs2RCtQUc4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r48M-0f7_MfEkzxHPNs2RCtQUc4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915F89C/6907C3E21D8311E29B35A5D808B02CD2/C22C630A142511F0B4847123C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
14.100.0.0/17
42.60.0.0/16
42.61.128.0/17
101.78.64.0/18
115.66.0.0/16
116.14.0.0/15
118.200.0.0-118.201.127.255
118.201.192.0/18
119.74.0.0/16
119.234.128.0-119.234.223.255
121.6.0.0/15
180.255.64.0/18
219.74.0.0-219.75.127.255
220.255.0.0/21
220.255.16.0-220.255.255.255
Signature Algorithm: sha256WithRSAEncryption
23:bc:66:e4:fe:ad:9d:56:05:a1:d5:bd:4a:2b:83:ef:0e:91:
14:2c:50:e8:fe:ad:8f:be:e9:73:6f:35:23:50:ba:08:d7:eb:
c7:02:fe:0e:07:67:a8:c8:7b:6b:dc:e2:9f:10:64:a4:ff:6e:
4f:61:d1:b3:43:f9:f8:3e:c7:7d:72:de:3e:5b:f7:b1:c8:00:
6a:5e:b3:80:5d:2c:73:bd:1d:1b:ab:78:57:fe:ff:94:d7:ab:
17:4a:7b:ae:79:5e:29:b1:ed:94:84:95:b5:8b:dc:79:0a:1e:
53:44:97:51:1c:e7:f8:ff:db:87:80:94:8a:4b:47:2d:29:35:
83:3d:5c:58:40:9d:0f:1a:36:25:28:32:65:ff:13:fe:18:3b:
66:92:c7:35:f7:dc:6a:82:22:5d:bb:ae:52:39:09:30:f2:e9:
76:67:27:ca:2a:08:f5:43:f6:db:f3:21:3d:63:8f:32:1c:f0:
07:54:43:a8:6b:db:b2:45:69:9f:4d:59:bb:7c:01:80:24:50:
a3:dc:91:c5:7e:80:0c:6f:0a:d7:bf:5f:cb:8d:66:39:0e:c0:
d1:37:fd:98:02:bf:ca:a0:d0:34:26:e2:37:1c:95:0b:73:f9:
ff:43:58:29:55:f6:ab:a9:55:b1:35:9f:4f:cf:4d:ee:21:90:
3e:a6:e9:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 20 06:35:35 2025 by rpki-client