Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9161613/30992668E53911EB8A5B9271C4F9AE02/AEEA30A444C911F0B1847067C4F9AE02.roa
File: AEEA30A444C911F0B1847067C4F9AE02.roa (raw, json)
Hash identifier: jBj8tUje/J9yoZyIY1hd6S/+kLstKeE/As7y2q686ZY=
Subject key identifier: 6E:C9:26:C8:10:82:F7:24:A0:2F:48:A1:48:A4:85:48:8F:5B:05:EB
Certificate issuer: /CN=A9161613/serialNumber=09FC077F33E3AD67BF147755167A3AD4EACB1E7C
Certificate serial: 062B
Authority key identifier: 09:FC:07:7F:33:E3:AD:67:BF:14:77:55:16:7A:3A:D4:EA:CB:1E:7C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CfwHfzPjrWe_FHdVFno61OrLHnw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9161613/30992668E53911EB8A5B9271C4F9AE02/AEEA30A444C911F0B1847067C4F9AE02.roa
Signing time: Mon 09 Jun 2025 00:35:46 +0000
ROA not before: Mon 09 Jun 2025 00:35:46 +0000
ROA not after: Thu 28 May 2026 00:00:00 +0000
asID: 18190
IP address blocks: 49.157.9.0/24 maxlen: 24
49.157.10.0/24 maxlen: 24
49.157.11.0/24 maxlen: 24
49.157.12.0/24 maxlen: 24
49.157.13.0/24 maxlen: 24
49.157.16.0/24 maxlen: 24
49.157.17.0/24 maxlen: 24
49.157.18.0/24 maxlen: 24
49.157.19.0/24 maxlen: 24
49.157.20.0/24 maxlen: 24
49.157.21.0/24 maxlen: 24
49.157.22.0/24 maxlen: 24
49.157.23.0/24 maxlen: 24
49.157.24.0/24 maxlen: 24
49.157.25.0/24 maxlen: 24
49.157.29.0/24 maxlen: 24
49.157.30.0/24 maxlen: 24
49.157.31.0/24 maxlen: 24
49.157.33.0/24 maxlen: 24
49.157.34.0/24 maxlen: 24
49.157.35.0/24 maxlen: 24
49.157.36.0/24 maxlen: 24
49.157.37.0/24 maxlen: 24
49.157.38.0/24 maxlen: 24
49.157.39.0/24 maxlen: 24
49.157.40.0/24 maxlen: 24
49.157.41.0/24 maxlen: 24
49.157.42.0/24 maxlen: 24
49.157.43.0/24 maxlen: 24
49.157.44.0/24 maxlen: 24
49.157.45.0/24 maxlen: 24
49.157.55.0/24 maxlen: 24
49.157.56.0/24 maxlen: 24
49.157.57.0/24 maxlen: 24
49.157.58.0/24 maxlen: 24
49.157.59.0/24 maxlen: 24
61.28.168.0/24 maxlen: 24
112.199.73.0/24 maxlen: 24
113.61.32.0/24 maxlen: 24
113.61.33.0/24 maxlen: 24
113.61.34.0/24 maxlen: 24
113.61.35.0/24 maxlen: 24
113.61.36.0/24 maxlen: 24
113.61.38.0/24 maxlen: 24
113.61.42.0/24 maxlen: 24
113.61.43.0/24 maxlen: 24
113.61.44.0/24 maxlen: 24
113.61.45.0/24 maxlen: 24
113.61.46.0/24 maxlen: 24
113.61.47.0/24 maxlen: 24
113.61.48.0/24 maxlen: 24
113.61.49.0/24 maxlen: 24
113.61.50.0/24 maxlen: 24
113.61.51.0/24 maxlen: 24
113.61.52.0/24 maxlen: 24
113.61.53.0/24 maxlen: 24
113.61.54.0/24 maxlen: 24
113.61.55.0/24 maxlen: 24
113.61.56.0/24 maxlen: 24
113.61.57.0/24 maxlen: 24
113.61.58.0/24 maxlen: 24
113.61.59.0/24 maxlen: 24
113.61.60.0/24 maxlen: 24
113.61.61.0/24 maxlen: 24
113.61.62.0/24 maxlen: 24
113.61.63.0/24 maxlen: 24
115.85.2.0/24 maxlen: 24
116.50.137.0/24 maxlen: 24
116.50.138.0/24 maxlen: 24
116.50.139.0/24 maxlen: 24
116.50.140.0/24 maxlen: 24
116.50.142.0/24 maxlen: 24
116.50.143.0/24 maxlen: 24
116.50.144.0/24 maxlen: 24
116.50.145.0/24 maxlen: 24
116.50.183.0/24 maxlen: 24
116.50.238.0/24 maxlen: 24
117.104.240.0/24 maxlen: 24
117.104.241.0/24 maxlen: 24
117.104.242.0/24 maxlen: 24
117.104.243.0/24 maxlen: 24
117.104.244.0/24 maxlen: 24
117.104.245.0/24 maxlen: 24
117.104.246.0/24 maxlen: 24
117.104.247.0/24 maxlen: 24
117.104.248.0/24 maxlen: 24
117.104.249.0/24 maxlen: 24
117.104.250.0/24 maxlen: 24
117.104.251.0/24 maxlen: 24
117.104.252.0/24 maxlen: 24
117.104.253.0/24 maxlen: 24
117.104.254.0/24 maxlen: 24
180.232.5.0/24 maxlen: 24
180.232.6.0/24 maxlen: 24
180.232.7.0/24 maxlen: 24
180.232.8.0/24 maxlen: 24
180.232.9.0/24 maxlen: 24
180.232.15.0/24 maxlen: 24
180.232.16.0/24 maxlen: 24
180.232.17.0/24 maxlen: 24
180.232.18.0/24 maxlen: 24
180.232.19.0/24 maxlen: 24
180.232.113.0/24 maxlen: 24
180.232.114.0/24 maxlen: 24
180.232.115.0/24 maxlen: 24
180.232.116.0/24 maxlen: 24
180.232.117.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9161613/30992668E53911EB8A5B9271C4F9AE02/CfwHfzPjrWe_FHdVFno61OrLHnw.crl
rsync://rpki.apnic.net/member_repository/A9161613/30992668E53911EB8A5B9271C4F9AE02/CfwHfzPjrWe_FHdVFno61OrLHnw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CfwHfzPjrWe_FHdVFno61OrLHnw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 25 Jun 2025 23:10:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1579 (0x62b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9161613, serialNumber=09FC077F33E3AD67BF147755167A3AD4EACB1E7C
Validity
Not Before: Jun 9 00:35:46 2025 GMT
Not After : May 28 00:00:00 2026 GMT
Subject: CN=68462c62-78e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:1a:c3:ec:3f:b9:a9:d9:0b:8b:52:ad:03:57:
ff:c8:bf:d5:c1:b2:f6:00:03:cc:e8:fc:96:34:9b:
c6:7f:26:db:06:92:85:9a:d7:c8:25:af:79:08:1d:
a5:a4:2b:c4:d7:02:49:03:d0:4c:5d:41:25:ef:33:
93:53:f0:4c:b6:f2:f1:bb:a2:eb:ed:6b:2a:87:8a:
4c:49:00:26:b1:6f:13:e9:b9:23:7d:34:34:99:78:
c6:6a:1e:0a:96:fb:f1:86:90:14:f0:18:a2:f5:3f:
56:e3:8b:85:76:0d:d0:7e:d6:ed:f5:6a:32:4a:c5:
c4:2b:76:29:3c:f0:69:69:17:01:69:d2:40:81:63:
f4:18:a0:b6:6d:56:da:c8:13:0c:e2:33:6d:d9:a8:
fb:0c:b0:46:d0:38:20:2d:4c:08:c5:eb:f4:d7:ac:
dd:c3:95:77:ed:e8:11:9b:c8:84:4d:a9:1c:3e:c0:
fa:41:bb:54:59:80:39:7c:28:23:9b:9e:49:21:be:
6f:b0:02:d3:9c:cf:9e:7d:24:e8:cb:28:77:56:eb:
da:7f:88:ef:8b:29:ad:1a:22:1c:ae:35:f6:7f:c0:
41:41:ab:d6:26:9b:3f:a8:5c:89:1e:c0:35:f6:af:
7d:0d:14:c8:e2:28:1b:c2:1f:27:80:6d:47:a6:ed:
78:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:C9:26:C8:10:82:F7:24:A0:2F:48:A1:48:A4:85:48:8F:5B:05:EB
X509v3 Authority Key Identifier:
keyid:09:FC:07:7F:33:E3:AD:67:BF:14:77:55:16:7A:3A:D4:EA:CB:1E:7C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9161613/30992668E53911EB8A5B9271C4F9AE02/CfwHfzPjrWe_FHdVFno61OrLHnw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CfwHfzPjrWe_FHdVFno61OrLHnw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9161613/30992668E53911EB8A5B9271C4F9AE02/AEEA30A444C911F0B1847067C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
49.157.9.0-49.157.13.255
49.157.16.0-49.157.25.255
49.157.29.0-49.157.31.255
49.157.33.0-49.157.45.255
49.157.55.0-49.157.59.255
61.28.168.0/24
112.199.73.0/24
113.61.32.0-113.61.36.255
113.61.38.0/24
113.61.42.0-113.61.63.255
115.85.2.0/24
116.50.137.0-116.50.140.255
116.50.142.0-116.50.145.255
116.50.183.0/24
116.50.238.0/24
117.104.240.0-117.104.254.255
180.232.5.0-180.232.9.255
180.232.15.0-180.232.19.255
180.232.113.0-180.232.117.255
Signature Algorithm: sha256WithRSAEncryption
89:a9:3b:73:3b:2c:a7:a8:74:01:9d:86:9a:35:2f:d2:5c:38:
bf:af:65:dd:40:6a:e2:8b:6d:b2:94:b8:0f:1e:92:96:0c:1e:
21:36:03:3a:2e:6e:a2:34:6c:33:61:b8:e8:b5:2c:e9:71:54:
59:bc:3c:31:de:76:86:35:96:50:1e:c7:a2:3b:37:f5:88:ce:
d9:4f:7d:b6:69:f7:50:ee:ac:b5:81:da:12:3d:57:ed:92:cf:
df:ab:40:b8:f4:c7:ce:37:36:47:80:3f:01:8b:10:58:fb:27:
81:9f:b1:2f:ed:35:2f:00:8c:6b:d0:84:a5:c4:5f:be:10:b2:
92:d4:1c:1a:da:24:33:37:8a:67:05:c9:b0:60:80:d5:28:d8:
58:c1:6e:2d:78:50:17:14:4b:24:5f:25:ae:9b:7a:ec:32:78:
7a:cc:1d:c1:42:20:7e:88:f7:b0:1b:9c:a0:fe:9d:8a:88:db:
f3:e9:e3:a9:5d:bc:91:f2:15:b0:b1:3e:8f:5a:25:bf:b9:11:
b3:cd:58:d0:f5:c7:b5:77:83:56:60:65:3e:15:e9:0e:c3:da:
34:59:2e:9a:7f:7d:c7:82:81:c0:fd:49:5e:2e:26:ed:a7:c6:
d1:47:2b:e5:e0:44:55:a8:a1:50:a6:ea:ce:fe:45:82:74:f8:
bd:a0:f5:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 20 13:36:16 2025 by rpki-client