Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A917E678/B897C582A19C11EB92A2DF29C4F9AE02/91E868D4902B11EF87435A54C4F9AE02.roa
File: 91E868D4902B11EF87435A54C4F9AE02.roa (raw, json)
Hash identifier: qm9tOH02ZhUyhN95rojnAyTLcNLxX4GEOIv6/MzX5Qk=
Subject key identifier: 73:E4:A8:F2:C6:DD:97:F4:64:D9:74:41:9C:B6:67:6B:B3:D5:C8:6B
Certificate issuer: /CN=A917E678/serialNumber=E243F3BE825569BB16ACB374BC98DABE690B17C1
Certificate serial: 06B7
Authority key identifier: E2:43:F3:BE:82:55:69:BB:16:AC:B3:74:BC:98:DA:BE:69:0B:17:C1
Authority info access: rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/4kPzvoJVabsWrLN0vJjavmkLF8E.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917E678/B897C582A19C11EB92A2DF29C4F9AE02/91E868D4902B11EF87435A54C4F9AE02.roa
Signing time: Tue 08 Jul 2025 17:26:07 +0000
ROA not before: Tue 08 Jul 2025 17:26:07 +0000
ROA not after: Wed 30 Sep 2026 00:00:00 +0000
asID: 136907
IP address blocks: 189.1.192.0/18 maxlen: 18
189.1.192.0/20 maxlen: 20
189.1.192.0/24 maxlen: 24
189.1.193.0/24 maxlen: 24
189.1.194.0/24 maxlen: 24
189.1.195.0/24 maxlen: 24
189.1.196.0/24 maxlen: 24
189.1.197.0/24 maxlen: 24
189.1.198.0/24 maxlen: 24
189.1.199.0/24 maxlen: 24
189.1.200.0/24 maxlen: 24
189.1.201.0/24 maxlen: 24
189.1.202.0/24 maxlen: 24
189.1.203.0/24 maxlen: 24
189.1.204.0/24 maxlen: 24
189.1.205.0/24 maxlen: 24
189.1.206.0/24 maxlen: 24
189.1.207.0/24 maxlen: 24
189.1.208.0/20 maxlen: 20
189.1.208.0/24 maxlen: 24
189.1.209.0/24 maxlen: 24
189.1.210.0/24 maxlen: 24
189.1.211.0/24 maxlen: 24
189.1.212.0/24 maxlen: 24
189.1.213.0/24 maxlen: 24
189.1.214.0/24 maxlen: 24
189.1.215.0/24 maxlen: 24
189.1.216.0/24 maxlen: 24
189.1.217.0/24 maxlen: 24
189.1.218.0/24 maxlen: 24
189.1.219.0/24 maxlen: 24
189.1.220.0/24 maxlen: 24
189.1.221.0/24 maxlen: 24
189.1.222.0/24 maxlen: 24
189.1.223.0/24 maxlen: 24
189.1.224.0/20 maxlen: 20
189.1.224.0/24 maxlen: 24
189.1.225.0/24 maxlen: 24
189.1.226.0/24 maxlen: 24
189.1.227.0/24 maxlen: 24
189.1.228.0/24 maxlen: 24
189.1.229.0/24 maxlen: 24
189.1.230.0/24 maxlen: 24
189.1.231.0/24 maxlen: 24
189.1.232.0/24 maxlen: 24
189.1.233.0/24 maxlen: 24
189.1.234.0/24 maxlen: 24
189.1.235.0/24 maxlen: 24
189.1.236.0/24 maxlen: 24
189.1.237.0/24 maxlen: 24
189.1.238.0/24 maxlen: 24
189.1.239.0/24 maxlen: 24
189.1.240.0/20 maxlen: 20
189.1.240.0/24 maxlen: 24
189.1.241.0/24 maxlen: 24
189.1.242.0/24 maxlen: 24
189.1.243.0/24 maxlen: 24
189.1.244.0/24 maxlen: 24
189.1.245.0/24 maxlen: 24
189.1.246.0/24 maxlen: 24
189.1.247.0/24 maxlen: 24
189.1.248.0/24 maxlen: 24
189.1.249.0/24 maxlen: 24
189.1.250.0/24 maxlen: 24
189.1.251.0/24 maxlen: 24
189.1.252.0/24 maxlen: 24
189.1.253.0/24 maxlen: 24
189.1.254.0/24 maxlen: 24
189.1.255.0/24 maxlen: 24
189.28.96.0/19 maxlen: 19
189.28.96.0/20 maxlen: 20
189.28.96.0/24 maxlen: 24
189.28.97.0/24 maxlen: 24
189.28.98.0/24 maxlen: 24
189.28.99.0/24 maxlen: 24
189.28.100.0/24 maxlen: 24
189.28.101.0/24 maxlen: 24
189.28.102.0/24 maxlen: 24
189.28.103.0/24 maxlen: 24
189.28.104.0/24 maxlen: 24
189.28.105.0/24 maxlen: 24
189.28.106.0/24 maxlen: 24
189.28.107.0/24 maxlen: 24
189.28.108.0/24 maxlen: 24
189.28.109.0/24 maxlen: 24
189.28.110.0/24 maxlen: 24
189.28.111.0/24 maxlen: 24
189.28.112.0/20 maxlen: 20
189.28.112.0/24 maxlen: 24
189.28.113.0/24 maxlen: 24
189.28.114.0/24 maxlen: 24
189.28.115.0/24 maxlen: 24
189.28.116.0/24 maxlen: 24
189.28.117.0/24 maxlen: 24
189.28.118.0/24 maxlen: 24
189.28.119.0/24 maxlen: 24
189.28.120.0/24 maxlen: 24
189.28.121.0/24 maxlen: 24
189.28.122.0/24 maxlen: 24
189.28.123.0/24 maxlen: 24
189.28.124.0/24 maxlen: 24
189.28.125.0/24 maxlen: 24
189.28.126.0/24 maxlen: 24
189.28.127.0/24 maxlen: 24
190.92.192.0/19 maxlen: 24
190.92.224.0/19 maxlen: 19
190.92.224.0/24 maxlen: 24
190.92.225.0/24 maxlen: 24
190.92.226.0/24 maxlen: 24
190.92.227.0/24 maxlen: 24
190.92.228.0/24 maxlen: 24
190.92.229.0/24 maxlen: 24
190.92.230.0/24 maxlen: 24
190.92.231.0/24 maxlen: 24
190.92.232.0/24 maxlen: 24
190.92.233.0/24 maxlen: 24
190.92.234.0/24 maxlen: 24
190.92.235.0/24 maxlen: 24
190.92.236.0/24 maxlen: 24
190.92.237.0/24 maxlen: 24
190.92.238.0/24 maxlen: 24
190.92.239.0/24 maxlen: 24
190.92.240.0/24 maxlen: 24
190.92.241.0/24 maxlen: 24
190.92.242.0/24 maxlen: 24
190.92.243.0/24 maxlen: 24
190.92.244.0/24 maxlen: 24
190.92.245.0/24 maxlen: 24
190.92.246.0/24 maxlen: 24
190.92.247.0/24 maxlen: 24
190.92.248.0/24 maxlen: 24
190.92.249.0/24 maxlen: 24
190.92.250.0/24 maxlen: 24
190.92.251.0/24 maxlen: 24
190.92.252.0/24 maxlen: 24
190.92.253.0/24 maxlen: 24
190.92.254.0/24 maxlen: 24
190.92.255.0/24 maxlen: 24
201.77.32.0/20 maxlen: 20
201.77.32.0/24 maxlen: 24
201.77.33.0/24 maxlen: 24
201.77.34.0/24 maxlen: 24
201.77.35.0/24 maxlen: 24
201.77.36.0/24 maxlen: 24
201.77.37.0/24 maxlen: 24
201.77.38.0/24 maxlen: 24
201.77.39.0/24 maxlen: 24
201.77.40.0/24 maxlen: 24
201.77.41.0/24 maxlen: 24
201.77.42.0/24 maxlen: 24
201.77.43.0/24 maxlen: 24
201.77.44.0/24 maxlen: 24
201.77.45.0/24 maxlen: 24
201.77.46.0/24 maxlen: 24
201.77.47.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A917E678/B897C582A19C11EB92A2DF29C4F9AE02/4kPzvoJVabsWrLN0vJjavmkLF8E.crl
rsync://rpki.apnic.net/member_repository/A917E678/B897C582A19C11EB92A2DF29C4F9AE02/4kPzvoJVabsWrLN0vJjavmkLF8E.mft
rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/4kPzvoJVabsWrLN0vJjavmkLF8E.cer
rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/lqhe9LjK9dTDWhV_ThJe5JS6-Tk.crl
rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/lqhe9LjK9dTDWhV_ThJe5JS6-Tk.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/lqhe9LjK9dTDWhV_ThJe5JS6-Tk.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 14 Aug 2025 05:57:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1719 (0x6b7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917E678, serialNumber=E243F3BE825569BB16ACB374BC98DABE690B17C1
Validity
Not Before: Jul 8 17:26:07 2025 GMT
Not After : Sep 30 00:00:00 2026 GMT
Subject: CN=686d54ae-b209
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:ea:40:e0:71:65:ae:bc:c4:72:d1:ee:3e:90:
c0:e6:bf:81:32:c5:ac:03:f7:44:c1:64:5f:14:74:
c5:60:72:82:b7:af:fc:80:3e:3a:e4:f9:e2:d6:2a:
5b:61:eb:13:0d:bd:fe:98:f3:01:18:8f:b4:c3:84:
7f:b8:b4:c1:d7:8d:7f:5c:c4:39:b1:ae:67:41:b4:
05:37:4f:01:c9:94:ae:b0:10:70:39:fc:59:6d:bd:
1a:8a:8d:c2:2f:70:fc:65:18:33:69:37:cc:2c:bb:
89:ed:c5:77:6e:2d:23:cd:a3:a1:17:c8:20:09:32:
71:da:e4:31:26:a6:5b:57:df:9b:d3:58:da:8f:37:
c9:3a:56:fb:d1:d7:dd:38:70:b2:b8:8c:8c:38:51:
69:ba:84:00:93:19:b2:5b:aa:79:f5:c3:05:10:eb:
af:a2:6e:73:7b:d6:eb:ac:89:36:88:10:0f:1d:ff:
43:fd:9f:c2:4c:29:58:61:21:11:b4:ad:d5:18:2b:
b9:b1:3e:c7:fb:ec:ca:d8:9c:2b:e2:ea:23:89:d8:
7b:cb:ad:7b:fd:9c:7b:4f:46:59:9d:b0:1f:95:45:
78:35:9d:bf:66:f3:84:62:94:56:c3:da:e4:ff:e1:
48:99:6c:56:dc:bf:26:05:36:89:da:2b:14:1e:03:
08:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:E4:A8:F2:C6:DD:97:F4:64:D9:74:41:9C:B6:67:6B:B3:D5:C8:6B
X509v3 Authority Key Identifier:
keyid:E2:43:F3:BE:82:55:69:BB:16:AC:B3:74:BC:98:DA:BE:69:0B:17:C1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917E678/B897C582A19C11EB92A2DF29C4F9AE02/4kPzvoJVabsWrLN0vJjavmkLF8E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/4kPzvoJVabsWrLN0vJjavmkLF8E.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917E678/B897C582A19C11EB92A2DF29C4F9AE02/91E868D4902B11EF87435A54C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
189.1.192.0/18
189.28.96.0/19
190.92.192.0/18
201.77.32.0/20
Signature Algorithm: sha256WithRSAEncryption
bb:ef:ac:92:29:91:f6:0d:10:4d:6b:7b:0b:90:9d:7f:09:d0:
4a:e0:d3:c6:50:5a:7e:70:84:75:eb:ee:04:16:8a:60:ab:37:
32:23:63:20:c8:90:36:42:01:59:85:6d:3d:00:a1:e5:c5:79:
92:a6:94:a6:63:99:bb:59:4d:ec:6f:16:c2:ed:8e:7b:ba:20:
03:2d:77:10:47:fb:a7:3a:16:4e:f3:9e:25:18:40:32:01:20:
8a:b1:08:21:6c:ca:f9:06:e2:71:e1:52:90:e7:f2:cc:54:30:
e0:2c:4f:2b:92:af:e6:56:33:8d:fd:2f:c5:ff:85:8b:b0:97:
37:c5:a4:75:5e:7d:ff:d2:06:52:a7:31:f2:f2:62:b4:bc:64:
2e:37:76:4b:cb:e0:ee:51:fa:4a:4a:d8:17:78:48:0c:da:01:
2f:5d:52:c8:66:6a:fd:bd:5a:cc:39:02:a9:3b:4b:3c:b8:ec:
d4:fa:7d:5c:c3:f9:6c:bf:fc:5c:58:79:5d:67:5a:b2:03:af:
e4:61:09:6d:1d:95:0a:0d:89:d8:d1:13:23:00:0e:f8:20:0e:
9f:16:75:c0:1f:4f:05:8a:e6:c9:c7:09:49:f3:d2:a2:be:21:
9b:63:c1:7f:e2:98:36:80:1e:93:9d:6a:ea:9b:6d:cd:b1:31:
34:85:5f:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 05:43:02 2025 by rpki-client