Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A916C128/664A9BCAFA6D11E3B6AC23505911EA32/DF821D20ABDE11ED954F5C84C4F9AE02.roa
File: DF821D20ABDE11ED954F5C84C4F9AE02.roa (raw, json)
Hash identifier: je3auOg70+6cT16YOal/ttbSxW+A5XuODnJlOPCEZSc=
Subject key identifier: 12:FE:64:8F:A5:4A:42:34:F2:90:A4:27:38:86:15:73:2F:80:6D:52
Certificate issuer: /CN=A916C128/serialNumber=B5642732265D40BF75CA94A9EC8119211C1B9B32
Certificate serial: 2C2E
Authority key identifier: B5:64:27:32:26:5D:40:BF:75:CA:94:A9:EC:81:19:21:1C:1B:9B:32
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tWQnMiZdQL91ypSp7IEZIRwbmzI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916C128/664A9BCAFA6D11E3B6AC23505911EA32/DF821D20ABDE11ED954F5C84C4F9AE02.roa
Signing time: Mon 02 Jun 2025 16:12:57 +0000
ROA not before: Mon 02 Jun 2025 16:12:57 +0000
ROA not after: Thu 30 Jul 2026 00:00:00 +0000
asID: 45177
IP address blocks: 14.1.32.0/19 maxlen: 24
45.65.13.0/24 maxlen: 24
45.65.14.0/23 maxlen: 24
103.9.236.0/23 maxlen: 24
103.9.238.0/23 maxlen: 24
103.13.116.0/22 maxlen: 24
103.15.178.0/24 maxlen: 24
103.230.76.0/22 maxlen: 22
103.241.120.0/22 maxlen: 22
103.255.248.0/24 maxlen: 24
113.197.96.0/22 maxlen: 23
116.93.128.0/20 maxlen: 24
119.30.0.0/22 maxlen: 24
119.30.4.0/22 maxlen: 24
120.136.0.0/21 maxlen: 24
150.107.32.0/22 maxlen: 23
163.47.204.0/22 maxlen: 24
202.74.192.0/19 maxlen: 24
203.84.224.0/20 maxlen: 24
203.211.64.0/18 maxlen: 24
2400:ee80::/32 maxlen: 48
2401:7000::/32 maxlen: 32
2401:7000::/32 maxlen: 64
2402:3500::/32 maxlen: 48
2402:3500::/32 maxlen: 64
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A916C128/664A9BCAFA6D11E3B6AC23505911EA32/tWQnMiZdQL91ypSp7IEZIRwbmzI.crl
rsync://rpki.apnic.net/member_repository/A916C128/664A9BCAFA6D11E3B6AC23505911EA32/tWQnMiZdQL91ypSp7IEZIRwbmzI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tWQnMiZdQL91ypSp7IEZIRwbmzI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 27 Jun 2025 15:34:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 11310 (0x2c2e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916C128, serialNumber=B5642732265D40BF75CA94A9EC8119211C1B9B32
Validity
Not Before: Jun 2 16:12:57 2025 GMT
Not After : Jul 30 00:00:00 2026 GMT
Subject: CN=683dcd88-c98e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:25:cd:68:10:0e:36:00:c7:be:bc:28:42:b6:
38:93:09:ba:55:6d:91:03:01:66:3f:0e:b8:ab:2f:
54:36:1c:b0:92:fb:d9:11:2e:30:a5:e1:08:ce:7a:
99:5e:23:93:21:09:9e:30:37:6e:73:1b:01:5c:ca:
0c:ad:21:8c:38:28:c9:29:83:5f:30:c8:4d:b8:35:
ef:0a:cd:92:4d:d7:fd:3b:0b:4c:e9:82:b5:7a:70:
7c:73:42:1e:eb:f4:66:d0:e7:25:52:6f:de:32:f1:
2c:38:71:f0:7e:e7:8c:2b:c4:f5:fa:9c:3e:2b:41:
8a:c0:37:d5:11:d3:38:6b:32:b5:53:00:74:b6:26:
fb:bd:ab:7a:a6:c6:4c:e8:04:4e:ba:9c:65:7b:26:
41:11:ac:4b:28:5b:25:6a:2b:ee:8d:62:16:b6:8d:
37:82:d3:ff:36:b3:eb:cd:b0:79:30:83:f7:6d:21:
70:6e:ad:95:b1:be:2c:fd:37:1b:ec:59:9a:7b:e0:
92:35:7b:07:3a:e6:72:00:f6:56:01:00:b6:dd:2a:
c3:87:be:8b:9b:fd:f9:17:2c:df:e1:68:90:d9:96:
4e:83:07:eb:b5:cc:ed:5e:a1:9c:bc:52:8a:7f:df:
df:25:70:f6:e4:0c:36:25:a5:da:72:45:79:1d:d9:
c0:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:FE:64:8F:A5:4A:42:34:F2:90:A4:27:38:86:15:73:2F:80:6D:52
X509v3 Authority Key Identifier:
keyid:B5:64:27:32:26:5D:40:BF:75:CA:94:A9:EC:81:19:21:1C:1B:9B:32
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916C128/664A9BCAFA6D11E3B6AC23505911EA32/tWQnMiZdQL91ypSp7IEZIRwbmzI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tWQnMiZdQL91ypSp7IEZIRwbmzI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916C128/664A9BCAFA6D11E3B6AC23505911EA32/DF821D20ABDE11ED954F5C84C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
14.1.32.0/19
45.65.13.0-45.65.15.255
103.9.236.0/22
103.13.116.0/22
103.15.178.0/24
103.230.76.0/22
103.241.120.0/22
103.255.248.0/24
113.197.96.0/22
116.93.128.0/20
119.30.0.0/21
120.136.0.0/21
150.107.32.0/22
163.47.204.0/22
202.74.192.0/19
203.84.224.0/20
203.211.64.0/18
IPv6:
2400:ee80::/32
2401:7000::/32
2402:3500::/32
Signature Algorithm: sha256WithRSAEncryption
2b:b2:01:99:df:17:38:7d:43:ae:53:ce:c8:ed:59:57:3d:ca:
be:42:0b:a0:f4:3b:56:d4:07:4c:12:6c:57:b6:aa:3b:1c:9e:
ef:13:c6:13:f0:1e:52:a5:65:26:04:95:17:2e:0a:2a:5d:40:
16:f5:30:27:74:fc:f9:00:64:c1:b7:39:fb:89:71:eb:50:5d:
b2:a9:52:44:8f:f5:43:4a:21:dd:79:f8:5e:cd:44:4f:a7:86:
3b:ba:f9:6c:89:83:ed:34:f5:d8:5a:f4:41:05:b2:a3:b4:68:
ae:88:86:da:ef:d1:31:fc:bf:42:5f:87:19:db:f8:22:e1:ce:
22:e2:13:dc:c1:8b:10:99:bd:60:f8:66:0b:c6:bf:dc:c0:aa:
4a:46:a2:91:b9:86:08:f8:bd:fd:e5:50:dc:48:15:a1:87:cd:
6f:b0:78:81:48:93:18:ce:2f:75:85:8b:32:63:de:2b:6a:53:
9c:9d:6f:82:d8:6a:d2:ab:60:42:10:81:dc:65:a3:ee:ad:cd:
17:a6:ed:c8:67:88:85:4e:a4:6a:39:e9:5f:af:30:82:ed:d6:
43:97:7a:bf:16:28:43:f8:30:59:bc:f4:8a:51:2c:71:5d:40:
38:98:49:6f:fc:5a:d1:31:37:e3:83:cd:3b:2c:a9:fc:bb:f3:
22:c0:92:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 21 05:38:10 2025 by rpki-client