Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9186214/B7F81958331A11E4AF2AB37CC4F9AE02/6FEF4E442DE011EA853E2328C4F9AE02.roa
File: 6FEF4E442DE011EA853E2328C4F9AE02.roa (raw, json)
Hash identifier: W6zfrwj6/OqirsYiKLU78RB1FM66HD+HpTrmcoXxfW0=
Subject key identifier: 87:B4:72:36:4E:46:72:0A:62:24:F7:31:82:8D:42:AA:11:BF:06:D5
Certificate issuer: /CN=A9186214/serialNumber=3FB18D89FAF3188DCE590F7C489077961F82A957
Certificate serial: 2B04
Authority key identifier: 3F:B1:8D:89:FA:F3:18:8D:CE:59:0F:7C:48:90:77:96:1F:82:A9:57
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/P7GNifrzGI3OWQ98SJB3lh-CqVc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9186214/B7F81958331A11E4AF2AB37CC4F9AE02/6FEF4E442DE011EA853E2328C4F9AE02.roa
Signing time: Sat 02 Aug 2025 15:52:41 +0000
ROA not before: Sat 02 Aug 2025 15:52:41 +0000
ROA not after: Mon 02 Mar 2026 00:00:00 +0000
asID: 24203
IP address blocks: 140.213.3.0/24 maxlen: 24
140.213.4.0/24 maxlen: 24
140.213.5.0/24 maxlen: 24
140.213.6.0/24 maxlen: 24
140.213.7.0/24 maxlen: 24
140.213.9.0/24 maxlen: 24
140.213.10.0/24 maxlen: 24
140.213.12.0/24 maxlen: 24
140.213.14.0/24 maxlen: 24
140.213.16.0/24 maxlen: 24
140.213.19.0/24 maxlen: 24
140.213.20.0/24 maxlen: 24
140.213.23.0/24 maxlen: 24
140.213.29.0/24 maxlen: 24
140.213.32.0/24 maxlen: 24
140.213.33.0/24 maxlen: 24
140.213.35.0/24 maxlen: 24
140.213.36.0/24 maxlen: 24
140.213.38.0/24 maxlen: 24
140.213.39.0/24 maxlen: 24
140.213.42.0/24 maxlen: 24
140.213.47.0/24 maxlen: 24
140.213.50.0/24 maxlen: 24
140.213.51.0/24 maxlen: 24
140.213.53.0/24 maxlen: 24
140.213.56.0/24 maxlen: 24
140.213.58.0/24 maxlen: 24
140.213.62.0/24 maxlen: 24
140.213.72.0/24 maxlen: 24
140.213.75.0/24 maxlen: 24
140.213.88.0/24 maxlen: 24
140.213.114.0/24 maxlen: 24
140.213.138.0/24 maxlen: 24
140.213.139.0/24 maxlen: 24
140.213.142.0/24 maxlen: 24
140.213.143.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9186214/B7F81958331A11E4AF2AB37CC4F9AE02/P7GNifrzGI3OWQ98SJB3lh-CqVc.crl
rsync://rpki.apnic.net/member_repository/A9186214/B7F81958331A11E4AF2AB37CC4F9AE02/P7GNifrzGI3OWQ98SJB3lh-CqVc.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/P7GNifrzGI3OWQ98SJB3lh-CqVc.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 14 Aug 2025 05:57:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 11012 (0x2b04)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9186214, serialNumber=3FB18D89FAF3188DCE590F7C489077961F82A957
Validity
Not Before: Aug 2 15:52:41 2025 GMT
Not After : Mar 2 00:00:00 2026 GMT
Subject: CN=688e3449-1c01
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:b2:39:90:24:b4:b4:35:91:0f:e6:b3:52:e4:
df:c4:0a:c7:b8:c2:21:a7:6d:d1:85:80:44:4f:5a:
97:d4:06:88:5d:f5:66:78:fa:d8:71:ed:6a:ed:f6:
75:71:a5:b8:09:c9:b8:36:25:02:a6:07:da:f1:cb:
30:77:9a:57:b2:09:90:21:de:1d:1d:16:a1:53:81:
45:cc:c2:42:e2:8b:93:cc:70:d8:c2:d3:1d:b8:6b:
9f:80:7c:09:f4:57:9b:38:56:81:7c:b0:ed:b9:b2:
1a:94:82:5e:e4:13:20:cd:97:1c:b7:39:0a:95:03:
f3:26:bc:06:43:2f:cd:39:51:0f:94:8f:12:41:7b:
78:72:7d:e4:33:15:2e:17:70:f9:47:48:52:24:41:
5b:df:c3:7d:35:72:5e:79:71:f1:a9:1a:f2:e3:f6:
a3:99:85:d2:5d:46:b6:94:4a:0b:34:ff:43:70:32:
a6:b4:5c:5e:5f:cb:19:48:7e:7e:d7:01:b0:40:a2:
8c:7d:f5:4a:57:75:2c:36:0c:93:07:60:d5:c4:c1:
51:e7:7d:aa:1b:96:3a:4d:05:df:f6:e7:09:40:f8:
88:3c:7c:18:63:c7:bb:29:6e:ed:52:2c:62:8d:f7:
33:11:a4:44:4c:40:b7:a8:e2:26:57:63:76:36:e2:
fd:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:B4:72:36:4E:46:72:0A:62:24:F7:31:82:8D:42:AA:11:BF:06:D5
X509v3 Authority Key Identifier:
keyid:3F:B1:8D:89:FA:F3:18:8D:CE:59:0F:7C:48:90:77:96:1F:82:A9:57
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9186214/B7F81958331A11E4AF2AB37CC4F9AE02/P7GNifrzGI3OWQ98SJB3lh-CqVc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/P7GNifrzGI3OWQ98SJB3lh-CqVc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9186214/B7F81958331A11E4AF2AB37CC4F9AE02/6FEF4E442DE011EA853E2328C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
140.213.3.0-140.213.7.255
140.213.9.0-140.213.10.255
140.213.12.0/24
140.213.14.0/24
140.213.16.0/24
140.213.19.0-140.213.20.255
140.213.23.0/24
140.213.29.0/24
140.213.32.0/23
140.213.35.0-140.213.36.255
140.213.38.0/23
140.213.42.0/24
140.213.47.0/24
140.213.50.0/23
140.213.53.0/24
140.213.56.0/24
140.213.58.0/24
140.213.62.0/24
140.213.72.0/24
140.213.75.0/24
140.213.88.0/24
140.213.114.0/24
140.213.138.0/23
140.213.142.0/23
Signature Algorithm: sha256WithRSAEncryption
73:ee:b5:70:25:9f:5a:37:c6:a7:19:71:97:f4:c9:77:d8:be:
93:9c:d9:e0:0a:d8:c6:0a:02:3b:df:78:26:00:1a:8d:5f:bb:
10:62:f4:d6:97:fb:ef:ea:86:70:02:9c:d5:89:f4:60:fa:91:
03:56:83:91:25:3e:87:d2:06:5f:1a:e3:dc:a1:53:5a:62:27:
e1:4f:1a:52:ae:9f:48:fc:e7:1b:64:08:c0:aa:05:1d:e7:61:
0a:b6:52:33:fc:39:87:a6:a7:0c:4b:cf:39:cc:ee:03:70:8d:
c2:fc:40:2b:ec:51:07:92:c4:2f:e2:0d:5f:20:ad:91:40:22:
10:65:82:0b:40:97:4f:31:ab:85:49:eb:df:a4:2c:67:18:69:
ef:a1:b5:8a:64:09:a3:0b:bd:a3:e7:b4:94:18:f9:0d:96:de:
7f:30:a6:a8:53:93:d9:97:f4:85:d0:1b:55:f0:f8:39:57:d7:
c2:19:02:97:51:24:0a:29:9f:d8:ee:1c:f5:28:c5:46:45:a6:
ab:90:00:5f:07:83:bb:aa:34:d4:d7:09:1f:fa:b0:a8:27:c2:
14:eb:03:23:30:65:ba:a8:cc:e3:7e:26:f5:87:ca:36:c9:b1:
35:3c:d7:b2:52:d9:fb:80:dc:82:80:d6:ca:55:8f:29:30:94:
98:c5:4c:0a
-----BEGIN CERTIFICATE-----
MIIGIDCCBQigAwIBAgICKwQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
ODYyMTQxMTAvBgNVBAUTKDNGQjE4RDg5RkFGMzE4OERDRTU5MEY3QzQ4OTA3Nzk2
MUY4MkE5NTcwHhcNMjUwODAyMTU1MjQxWhcNMjYwMzAyMDAwMDAwWjAYMRYwFAYD
VQQDEw02ODhlMzQ0OS0xYzAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAv7I5kCS0tDWRD+azUuTfxArHuMIhp23RhYBET1qX1AaIXfVmePrYce1q7fZ1
caW4Ccm4NiUCpgfa8cswd5pXsgmQId4dHRahU4FFzMJC4ouTzHDYwtMduGufgHwJ
9FebOFaBfLDtubIalIJe5BMgzZcctzkKlQPzJrwGQy/NOVEPlI8SQXt4cn3kMxUu
F3D5R0hSJEFb38N9NXJeeXHxqRry4/ajmYXSXUa2lEoLNP9DcDKmtFxeX8sZSH5+
1wGwQKKMffVKV3UsNgyTB2DVxMFR532qG5Y6TQXf9ucJQPiIPHwYY8e7KW7tUixi
jfczEaRETEC3qOImV2N2NuL9yQIDAQABo4IDRDCCA0AwHQYDVR0OBBYEFIe0cjZO
RnIKYiT3MYKNQqoRvwbVMB8GA1UdIwQYMBaAFD+xjYn68xiNzlkPfEiQd5YfgqlX
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NjIxNC9CN0Y4MTk1ODMz
MUExMUU0QUYyQUIzN0NDNEY5QUUwMi9QN0dOaWZyekdJM09XUTk4U0pCM2xoLUNx
VmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL1A3R05pZnJ6R0kzT1dROThTSkIzbGgtQ3FWYy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
ODYyMTQvQjdGODE5NTgzMzFBMTFFNEFGMkFCMzdDQzRGOUFFMDIvNkZFRjRFNDQy
REUwMTFFQTg1M0UyMzI4QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwgc0GCCsGAQUFBwEHAQH/
BIG9MIG6MIG3BAIAATCBsDAMAwQAjNUDAwQDjNUAMAwDBACM1QkDBACM1QoDBACM
1QwDBACM1Q4DBACM1RAwDAMEAIzVEwMEAIzVFAMEAIzVFwMEAIzVHQMEAYzVIDAM
AwQAjNUjAwQAjNUkAwQBjNUmAwQAjNUqAwQAjNUvAwQBjNUyAwQAjNU1AwQAjNU4
AwQAjNU6AwQAjNU+AwQAjNVIAwQAjNVLAwQAjNVYAwQAjNVyAwQBjNWKAwQBjNWO
MA0GCSqGSIb3DQEBCwUAA4IBAQBz7rVwJZ9aN8anGXGX9Ml32L6TnNngCtjGCgI7
33gmABqNX7sQYvTWl/vv6oZwApzVifRg+pEDVoORJT6H0gZfGuPcoVNaYifhTxpS
rp9I/OcbZAjAqgUd52EKtlIz/DmHpqcMS885zO4DcI3C/EAr7FEHksQv4g1fIK2R
QCIQZYILQJdPMauFSevfpCxnGGnvobWKZAmjC72j57SUGPkNlt5/MKaoU5PZl/SF
0BtV8Pg5V9fCGQKXUSQKKZ/Y7hz1KMVGRaarkABfB4O7qjTU1wkf+rCoJ8IU6wMj
MGW6qMzjfib1h8o2ybE1PNeyUtn7gNyCgNbKVY8pMJSYxUwK
-----END CERTIFICATE-----
Generated at Sun Aug 10 21:13:22 2025 by rpki-client