Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9186E8A/3B476E7C2DFF11EB868A9135C4F9AE02/5E6E0EFA1E7911F0A04A5366C4F9AE02.roa
File: 5E6E0EFA1E7911F0A04A5366C4F9AE02.roa (raw, json)
Hash identifier: +ewFxwgws96qZb42iktranHuo6xk0cnwygWmXyUhbEc=
Subject key identifier: 84:F8:CC:66:0C:E8:C9:26:40:33:63:B6:B8:60:AD:40:2C:1D:4B:27
Certificate issuer: /CN=A9186E8A/serialNumber=A9BCCA6D34D3D5F1EFF8BBE783D49773813E5EF8
Certificate serial: 0799
Authority key identifier: A9:BC:CA:6D:34:D3:D5:F1:EF:F8:BB:E7:83:D4:97:73:81:3E:5E:F8
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qbzKbTTT1fHv-Lvng9SXc4E-Xvg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9186E8A/3B476E7C2DFF11EB868A9135C4F9AE02/5E6E0EFA1E7911F0A04A5366C4F9AE02.roa
Signing time: Mon 21 Apr 2025 06:25:07 +0000
ROA not before: Mon 21 Apr 2025 06:25:07 +0000
ROA not after: Thu 28 May 2026 00:00:00 +0000
asID: 135377
IP address blocks: 45.249.244.0/24 maxlen: 24
45.249.245.0/24 maxlen: 24
45.249.246.0/24 maxlen: 24
45.249.247.0/24 maxlen: 24
101.36.96.0/24 maxlen: 24
101.36.97.0/24 maxlen: 24
101.36.98.0/24 maxlen: 24
101.36.99.0/24 maxlen: 24
101.36.100.0/24 maxlen: 24
101.36.101.0/24 maxlen: 24
101.36.102.0/24 maxlen: 24
101.36.103.0/24 maxlen: 24
101.36.104.0/24 maxlen: 24
101.36.105.0/24 maxlen: 24
101.36.106.0/24 maxlen: 24
101.36.107.0/24 maxlen: 24
101.36.108.0/24 maxlen: 24
101.36.109.0/24 maxlen: 24
101.36.110.0/24 maxlen: 24
101.36.111.0/24 maxlen: 24
101.36.112.0/24 maxlen: 24
101.36.113.0/24 maxlen: 24
101.36.114.0/24 maxlen: 24
101.36.115.0/24 maxlen: 24
101.36.116.0/24 maxlen: 24
101.36.117.0/24 maxlen: 24
101.36.118.0/24 maxlen: 24
101.36.119.0/24 maxlen: 24
101.36.120.0/24 maxlen: 24
101.36.121.0/24 maxlen: 24
101.36.122.0/24 maxlen: 24
101.36.123.0/24 maxlen: 24
101.36.124.0/24 maxlen: 24
101.36.125.0/24 maxlen: 24
101.36.126.0/24 maxlen: 24
101.36.127.0/24 maxlen: 24
103.149.26.0/24 maxlen: 24
103.149.27.0/24 maxlen: 24
103.218.240.0/24 maxlen: 24
103.218.241.0/24 maxlen: 24
103.218.242.0/24 maxlen: 24
103.218.243.0/24 maxlen: 24
103.234.60.0/24 maxlen: 24
103.234.61.0/24 maxlen: 24
103.234.62.0/24 maxlen: 24
103.234.63.0/24 maxlen: 24
118.26.36.0/24 maxlen: 24
118.26.37.0/24 maxlen: 24
118.26.38.0/24 maxlen: 24
118.26.39.0/24 maxlen: 24
118.26.104.0/24 maxlen: 24
118.26.105.0/24 maxlen: 24
118.26.106.0/24 maxlen: 24
118.26.107.0/24 maxlen: 24
118.26.108.0/24 maxlen: 24
118.26.109.0/24 maxlen: 24
118.26.110.0/24 maxlen: 24
118.26.111.0/24 maxlen: 24
118.193.32.0/24 maxlen: 24
118.193.33.0/24 maxlen: 24
118.193.34.0/24 maxlen: 24
118.193.35.0/24 maxlen: 24
118.193.36.0/24 maxlen: 24
118.193.37.0/24 maxlen: 24
118.193.38.0/24 maxlen: 24
118.193.39.0/24 maxlen: 24
118.193.40.0/24 maxlen: 24
118.193.41.0/24 maxlen: 24
118.193.42.0/24 maxlen: 24
118.193.43.0/24 maxlen: 24
118.193.44.0/24 maxlen: 24
118.193.45.0/24 maxlen: 24
118.193.46.0/24 maxlen: 24
118.193.47.0/24 maxlen: 24
118.193.56.0/24 maxlen: 24
118.193.57.0/24 maxlen: 24
118.193.58.0/24 maxlen: 24
118.193.59.0/24 maxlen: 24
118.193.60.0/24 maxlen: 24
118.193.61.0/24 maxlen: 24
118.193.62.0/24 maxlen: 24
118.193.63.0/24 maxlen: 24
118.193.64.0/24 maxlen: 24
118.193.65.0/24 maxlen: 24
118.193.66.0/24 maxlen: 24
118.193.67.0/24 maxlen: 24
118.193.68.0/24 maxlen: 24
118.193.69.0/24 maxlen: 24
118.193.70.0/24 maxlen: 24
118.193.71.0/24 maxlen: 24
118.193.72.0/24 maxlen: 24
118.193.73.0/24 maxlen: 24
118.193.74.0/24 maxlen: 24
118.193.75.0/24 maxlen: 24
118.193.76.0/24 maxlen: 24
118.193.77.0/24 maxlen: 24
118.193.78.0/24 maxlen: 24
118.193.79.0/24 maxlen: 24
118.194.228.0/24 maxlen: 24
118.194.229.0/24 maxlen: 24
118.194.230.0/24 maxlen: 24
118.194.231.0/24 maxlen: 24
118.194.232.0/24 maxlen: 24
118.194.233.0/24 maxlen: 24
118.194.234.0/24 maxlen: 24
118.194.235.0/24 maxlen: 24
118.194.236.0/24 maxlen: 24
118.194.237.0/24 maxlen: 24
118.194.238.0/24 maxlen: 24
118.194.239.0/24 maxlen: 24
118.194.248.0/24 maxlen: 24
118.194.249.0/24 maxlen: 24
118.194.250.0/24 maxlen: 24
118.194.251.0/24 maxlen: 24
118.194.252.0/24 maxlen: 24
118.194.253.0/24 maxlen: 24
118.194.254.0/24 maxlen: 24
118.194.255.0/24 maxlen: 24
123.58.192.0/24 maxlen: 24
123.58.193.0/24 maxlen: 24
123.58.194.0/24 maxlen: 24
123.58.195.0/24 maxlen: 24
123.58.196.0/24 maxlen: 24
123.58.197.0/24 maxlen: 24
123.58.198.0/24 maxlen: 24
123.58.199.0/24 maxlen: 24
123.58.200.0/24 maxlen: 24
123.58.201.0/24 maxlen: 24
123.58.202.0/24 maxlen: 24
123.58.203.0/24 maxlen: 24
123.58.204.0/24 maxlen: 24
123.58.205.0/24 maxlen: 24
123.58.206.0/24 maxlen: 24
123.58.207.0/24 maxlen: 24
123.58.208.0/24 maxlen: 24
123.58.209.0/24 maxlen: 24
123.58.210.0/24 maxlen: 24
123.58.211.0/24 maxlen: 24
123.58.212.0/24 maxlen: 24
123.58.213.0/24 maxlen: 24
123.58.214.0/24 maxlen: 24
123.58.215.0/24 maxlen: 24
123.58.216.0/24 maxlen: 24
123.58.217.0/24 maxlen: 24
123.58.218.0/24 maxlen: 24
123.58.219.0/24 maxlen: 24
123.58.220.0/24 maxlen: 24
123.58.221.0/24 maxlen: 24
123.58.222.0/24 maxlen: 24
123.58.223.0/24 maxlen: 24
150.107.36.0/24 maxlen: 24
150.107.37.0/24 maxlen: 24
150.107.38.0/24 maxlen: 24
150.107.39.0/24 maxlen: 24
2001:df3:9500::/48 maxlen: 48
2404:82c0::/42 maxlen: 42
2404:82c0:40::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9186E8A/3B476E7C2DFF11EB868A9135C4F9AE02/qbzKbTTT1fHv-Lvng9SXc4E-Xvg.crl
rsync://rpki.apnic.net/member_repository/A9186E8A/3B476E7C2DFF11EB868A9135C4F9AE02/qbzKbTTT1fHv-Lvng9SXc4E-Xvg.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qbzKbTTT1fHv-Lvng9SXc4E-Xvg.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 01 May 2025 21:35:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1945 (0x799)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9186E8A, serialNumber=A9BCCA6D34D3D5F1EFF8BBE783D49773813E5EF8
Validity
Not Before: Apr 21 06:25:07 2025 GMT
Not After : May 28 00:00:00 2026 GMT
Subject: CN=6805e4c3-a5e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:aa:28:8d:93:8b:21:c7:ee:c8:a9:83:6d:b1:
9d:79:2a:e5:fd:54:e8:20:36:38:f3:da:91:42:94:
e6:8c:5b:b3:63:4c:7a:3e:4a:b5:e2:f5:f9:25:03:
43:b8:2b:9e:26:3b:a8:8c:d1:f9:34:3e:34:58:31:
f6:bd:37:fb:c3:60:76:18:09:78:a2:db:b0:79:0e:
ff:f3:c8:51:87:8a:80:89:bd:1a:ef:8c:22:49:10:
86:ed:5a:63:f5:f0:c1:b7:ff:51:40:9c:9b:d7:b5:
38:5a:75:f4:22:e7:79:3c:c0:d4:b0:2a:c4:9c:ab:
4c:fe:54:78:35:8f:15:e1:a1:9b:ae:47:45:a2:d9:
e8:ca:12:86:51:76:0a:8f:92:20:46:df:5f:b5:af:
3a:1f:3a:8d:52:ac:c5:e9:63:ef:76:ab:10:b3:47:
32:23:5e:a3:67:9c:e3:ef:66:d8:37:97:57:b1:bb:
5c:d3:5d:05:b3:3c:ab:f1:42:5d:7f:fa:ef:1a:1b:
38:70:66:4b:73:2f:51:1d:6e:0c:ee:6d:78:b5:27:
c1:b0:21:96:f2:89:c8:5c:25:30:0c:3b:fc:0a:8a:
77:be:82:78:a2:25:66:45:57:30:f7:2d:49:54:b4:
fc:a5:ef:03:84:4e:7f:b0:5b:0d:95:3b:de:53:7e:
92:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:F8:CC:66:0C:E8:C9:26:40:33:63:B6:B8:60:AD:40:2C:1D:4B:27
X509v3 Authority Key Identifier:
keyid:A9:BC:CA:6D:34:D3:D5:F1:EF:F8:BB:E7:83:D4:97:73:81:3E:5E:F8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9186E8A/3B476E7C2DFF11EB868A9135C4F9AE02/qbzKbTTT1fHv-Lvng9SXc4E-Xvg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qbzKbTTT1fHv-Lvng9SXc4E-Xvg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9186E8A/3B476E7C2DFF11EB868A9135C4F9AE02/5E6E0EFA1E7911F0A04A5366C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.249.244.0/22
101.36.96.0/19
103.149.26.0/23
103.218.240.0/22
103.234.60.0/22
118.26.36.0/22
118.26.104.0/21
118.193.32.0/20
118.193.56.0-118.193.79.255
118.194.228.0-118.194.239.255
118.194.248.0/21
123.58.192.0/19
150.107.36.0/22
IPv6:
2001:df3:9500::/48
2404:82c0::-2404:82c0:40:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
2e:6c:d0:0c:46:2c:5d:e8:7d:ae:36:58:dd:1f:1e:93:48:01:
62:8a:14:03:72:44:36:3a:ef:f3:b0:07:bd:ce:4d:ca:3f:52:
2b:2b:ee:7d:4d:aa:6d:b0:19:24:b8:9d:92:dd:18:a3:50:e9:
81:c3:2d:b5:62:6e:09:94:42:42:7b:d4:b1:33:96:37:98:8c:
b8:fb:4c:66:52:49:98:7e:b7:28:63:65:ba:83:db:a8:de:ad:
7d:8a:62:e6:3a:b7:de:f2:6a:83:1c:70:fa:0b:47:39:2b:d8:
20:0b:04:c8:84:01:36:4e:e3:c5:92:94:20:5b:3c:b7:7a:df:
22:78:fd:fc:3b:8b:56:b5:fe:ac:29:6d:eb:0a:0b:d5:b2:4b:
56:63:1d:ac:2c:bc:6a:b4:49:12:25:0a:14:3c:9a:c6:7a:ff:
b6:4b:f8:72:54:f4:6c:7b:16:83:bf:cb:a2:e6:96:ef:9b:e3:
d3:87:1d:f9:c7:9c:c7:43:a5:9c:e1:39:b8:49:25:5e:03:bc:
a1:5a:7b:3a:66:75:3d:2b:c3:ca:9d:68:44:eb:a2:61:ae:f3:
03:5a:ef:c0:0c:de:0c:d0:e3:ee:93:2a:a1:e3:29:a0:5b:42:
a7:f4:c2:76:e8:08:ac:ce:78:c0:07:7b:de:25:b0:c5:39:c8:
bc:21:cd:2d
-----BEGIN CERTIFICATE-----
MIIF7zCCBNegAwIBAgICB5kwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
ODZFOEExMTAvBgNVBAUTKEE5QkNDQTZEMzREM0Q1RjFFRkY4QkJFNzgzRDQ5Nzcz
ODEzRTVFRjgwHhcNMjUwNDIxMDYyNTA3WhcNMjYwNTI4MDAwMDAwWjAYMRYwFAYD
VQQDEw02ODA1ZTRjMy1hNWU1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAu6oojZOLIcfuyKmDbbGdeSrl/VToIDY489qRQpTmjFuzY0x6Pkq14vX5JQND
uCueJjuojNH5ND40WDH2vTf7w2B2GAl4otuweQ7/88hRh4qAib0a74wiSRCG7Vpj
9fDBt/9RQJyb17U4WnX0Iud5PMDUsCrEnKtM/lR4NY8V4aGbrkdFotnoyhKGUXYK
j5IgRt9fta86HzqNUqzF6WPvdqsQs0cyI16jZ5zj72bYN5dXsbtc010Fszyr8UJd
f/rvGhs4cGZLcy9RHW4M7m14tSfBsCGW8onIXCUwDDv8Cop3voJ4oiVmRVcw9y1J
VLT8pe8DhE5/sFsNlTveU36SCwIDAQABo4IDEzCCAw8wHQYDVR0OBBYEFIT4zGYM
6MkmQDNjtrhgrUAsHUsnMB8GA1UdIwQYMBaAFKm8ym0009Xx7/i754PUl3OBPl74
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NkU4QS8zQjQ3NkU3QzJE
RkYxMUVCODY4QTkxMzVDNEY5QUUwMi9xYnpLYlRUVDFmSHYtTHZuZzlTWGM0RS1Y
dmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3FiektiVFRUMWZIdi1Mdm5nOVNYYzRFLVh2Zy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
ODZFOEEvM0I0NzZFN0MyREZGMTFFQjg2OEE5MTM1QzRGOUFFMDIvNUU2RTBFRkEx
RTc5MTFGMEEwNEE1MzY2QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwgZwGCCsGAQUFBwEHAQH/
BIGMMIGJMGQEAgABMF4DBAIt+fQDBAVlJGADBAFnlRoDBAJn2vADBAJn6jwDBAJ2
GiQDBAN2GmgDBAR2wSAwDAMEA3bBOAMEBHbBQDAMAwQCdsLkAwQEdsLgAwQDdsL4
AwQFezrAAwQClmskMCEEAgACMBsDBwAgAQ3zlQAwEAMFBiQEgsADBwAkBILAAEAw
DQYJKoZIhvcNAQELBQADggEBAC5s0AxGLF3ofa42WN0fHpNIAWKKFANyRDY67/Ow
B73OTco/Uisr7n1Nqm2wGSS4nZLdGKNQ6YHDLbVibgmUQkJ71LEzljeYjLj7TGZS
SZh+tyhjZbqD26jerX2KYuY6t97yaoMccPoLRzkr2CALBMiEATZO48WSlCBbPLd6
3yJ4/fw7i1a1/qwpbesKC9WyS1ZjHawsvGq0SRIlChQ8msZ6/7ZL+HJU9Gx7FoO/
y6Lmlu+b49OHHfnHnMdDpZzhObhJJV4DvKFaezpmdT0rw8qdaETromGu8wNa78AM
3gzQ4+6TKqHjKaBbQqf0wnboCKzOeMAHe94lsMU5yLwhzS0=
-----END CERTIFICATE-----
Generated at Sat Apr 26 08:16:50 2025 by rpki-client