Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/276F89A8151C11F0934DCB2AC4F9AE02.roa
File: 276F89A8151C11F0934DCB2AC4F9AE02.roa (raw, json)
Hash identifier: YHyk7wCrSuCY6RaorX9dLIgoSSTKwtIIL1b7YBWVdVg=
Subject key identifier: DB:D9:7C:D9:D1:F1:64:6D:7F:C0:2C:B5:CB:69:3C:DE:16:03:24:CC
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: AE26
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/276F89A8151C11F0934DCB2AC4F9AE02.roa
Signing time: Wed 09 Apr 2025 08:25:12 +0000
ROA not before: Wed 09 Apr 2025 08:25:12 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 58965
IP address blocks: 43.225.192.0/22 maxlen: 24
103.74.144.0/22 maxlen: 24
103.77.40.0/22 maxlen: 24
103.83.144.0/22 maxlen: 24
103.110.16.0/22 maxlen: 24
103.125.128.0/22 maxlen: 22
103.125.128.0/24 maxlen: 24
103.125.129.0/24 maxlen: 24
103.125.130.0/24 maxlen: 24
103.125.131.0/24 maxlen: 24
103.134.114.0/23 maxlen: 24
103.141.90.0/23 maxlen: 24
103.161.198.0/24 maxlen: 24
103.163.144.0/23 maxlen: 24
103.164.46.0/24 maxlen: 24
103.164.47.0/24 maxlen: 24
103.165.28.0/23 maxlen: 24
103.180.42.0/23 maxlen: 24
103.188.126.0/24 maxlen: 24
103.233.116.0/22 maxlen: 24
103.243.7.0/24 maxlen: 24
103.254.204.0/23 maxlen: 24
2001:df0:4940::/48 maxlen: 48
2001:df1:5640::/48 maxlen: 48
2001:df3:69c0::/48 maxlen: 48
2001:df3:cac0::/48 maxlen: 48
2001:df7:2b00::/48 maxlen: 48
2407:45c0::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 03 May 2025 02:50:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 44582 (0xae26)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Validity
Not Before: Apr 9 08:25:12 2025 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=67f62ee7-a2d9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:ed:0f:c9:cd:df:de:a3:d6:76:88:bd:26:93:
b3:0b:14:8a:2d:1e:95:4a:20:54:18:66:b3:64:df:
d1:c7:fb:ff:4d:2d:85:94:66:da:15:d4:93:60:76:
78:11:0f:50:9b:a4:19:dd:7b:e6:a4:08:ff:79:75:
8c:1b:14:a1:6b:cc:92:de:32:7c:92:e5:be:29:9d:
49:9c:fd:e8:9d:30:89:21:a7:91:dc:8c:1b:c8:08:
cf:ac:a0:36:88:76:69:36:36:53:b9:0c:37:d3:c4:
37:60:d6:71:7f:00:cd:78:bf:bc:f2:3e:05:e8:c3:
cc:93:b2:d2:31:61:ae:dd:bf:15:53:81:20:42:04:
e5:3d:e8:a4:4b:94:8d:04:82:0c:35:b3:f0:89:26:
79:38:11:9f:7f:d9:e6:1c:fd:3f:b3:3b:f8:db:13:
31:47:b9:56:fb:8d:41:88:e4:c9:a6:2f:7a:49:56:
84:eb:20:99:5b:c1:ea:13:7e:6f:00:0b:ae:93:57:
3d:ad:0c:4c:7b:38:69:c9:ba:ba:3f:49:44:e9:eb:
ff:71:08:bf:20:35:3e:ba:86:1b:cc:f2:db:cb:95:
f0:3f:bc:7b:13:18:ae:5a:10:0b:31:89:dd:de:bf:
fb:83:b4:a5:ef:fc:9a:48:58:76:8c:48:35:6c:3e:
0b:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:D9:7C:D9:D1:F1:64:6D:7F:C0:2C:B5:CB:69:3C:DE:16:03:24:CC
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/276F89A8151C11F0934DCB2AC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
43.225.192.0/22
103.74.144.0/22
103.77.40.0/22
103.83.144.0/22
103.110.16.0/22
103.125.128.0/22
103.134.114.0/23
103.141.90.0/23
103.161.198.0/24
103.163.144.0/23
103.164.46.0/23
103.165.28.0/23
103.180.42.0/23
103.188.126.0/24
103.233.116.0/22
103.243.7.0/24
103.254.204.0/23
IPv6:
2001:df0:4940::/48
2001:df1:5640::/48
2001:df3:69c0::/48
2001:df3:cac0::/48
2001:df7:2b00::/48
2407:45c0::/32
Signature Algorithm: sha256WithRSAEncryption
7d:7f:85:57:77:96:92:5e:5e:50:98:4c:b5:80:e8:9c:8c:40:
b0:c0:62:25:f8:ae:e2:cd:eb:57:c0:ec:16:f9:90:3e:07:46:
60:86:e0:e1:2e:1e:18:06:07:26:cd:14:bd:66:52:e5:04:2d:
49:03:36:f2:2b:fc:3a:15:45:85:50:aa:1b:f6:45:43:14:76:
72:9d:73:d5:d5:30:c3:d8:42:23:26:ad:7b:89:56:70:9a:bd:
76:86:f5:8f:14:67:9a:ec:53:d6:2d:a5:3a:15:67:7f:66:e3:
9c:c5:95:e2:b8:7c:6a:ff:da:9a:0b:5a:02:c7:9f:95:63:2c:
5d:33:db:d5:2d:95:ed:95:36:52:d8:36:94:f8:ce:40:5c:31:
11:83:a5:dd:04:33:1d:a6:f3:f3:01:7a:1d:3d:97:70:59:8d:
5b:b0:00:5a:0d:44:f9:42:90:6b:38:94:2e:22:f5:6e:7c:21:
b0:2e:ca:dc:16:e5:91:d9:fc:a9:0d:64:19:79:2a:ab:23:97:
1f:7d:31:e7:c7:cb:4e:0d:89:5d:54:b6:a7:2d:cf:6b:8f:93:
62:cd:13:4d:41:cf:84:36:f6:a4:88:fa:9b:e6:6b:51:67:aa:
6d:5d:14:17:5a:a8:93:54:64:48:15:ed:ac:55:d0:c3:ce:8b:
36:17:ab:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 12:22:38 2025 by rpki-client