Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/2A309C02FD8611EFB0589357C4F9AE02.roa
File: 2A309C02FD8611EFB0589357C4F9AE02.roa (raw, json)
Hash identifier: CakBrB1DkYeCvmwuM3Vyi/s+xU8iI3xcWa/nm2trH0c=
Subject key identifier: 5B:51:8B:1E:57:75:72:FF:AE:64:F3:05:D0:8D:CD:DA:A1:5A:23:25
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: C0D6
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/2A309C02FD8611EFB0589357C4F9AE02.roa
Signing time: Thu 24 Jul 2025 06:23:27 +0000
ROA not before: Thu 24 Jul 2025 06:23:27 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 151690
IP address blocks: 43.228.166.0/23 maxlen: 24
43.230.132.0/23 maxlen: 24
103.96.15.0/24 maxlen: 24
103.109.220.0/22 maxlen: 24
103.115.128.0/22 maxlen: 24
103.147.93.0/24 maxlen: 24
103.157.162.0/23 maxlen: 24
103.162.74.0/24 maxlen: 24
103.162.75.0/24 maxlen: 24
103.172.56.0/24 maxlen: 24
103.185.100.0/24 maxlen: 24
103.216.99.0/24 maxlen: 24
103.225.70.0/24 maxlen: 24
103.239.12.0/23 maxlen: 24
2001:df2:23c0::/48 maxlen: 48
2001:df2:9640::/48 maxlen: 48
2001:df3:29c0::/48 maxlen: 48
2001:df4:88c0::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 14 Aug 2025 05:57:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 49366 (0xc0d6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Validity
Not Before: Jul 24 06:23:27 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6881d15f-e20e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:fa:6d:57:c0:97:5c:f1:d8:0a:8f:fb:5d:34:
bc:5b:1b:4a:6e:38:68:5c:3f:b4:dd:ab:0e:28:ea:
dc:8d:2d:9e:9a:bf:11:d2:97:53:71:eb:c8:95:9a:
42:ff:ae:bb:39:90:4a:11:64:7a:05:c1:52:47:d5:
32:d8:b1:be:c0:9d:53:a3:98:21:bf:f8:06:66:c6:
6d:e4:a3:05:ca:11:b6:10:23:77:9d:c3:e3:6f:b5:
3a:13:6e:d9:7e:43:77:2f:52:33:ca:43:09:78:e5:
e6:7c:f0:ef:3c:dd:af:b9:6b:4b:31:a5:4f:d5:03:
22:f1:11:f5:3f:19:5a:92:1d:90:d4:57:2b:10:f7:
23:2e:05:10:b9:ed:60:79:38:5b:80:5a:f2:45:46:
ed:cd:08:be:de:75:14:9c:72:93:9c:f0:5e:d0:33:
cc:d9:14:11:db:34:b3:5f:47:cb:e2:5b:a8:cc:6f:
79:50:38:2f:0c:69:9d:36:75:43:e7:48:ac:c9:fd:
59:f5:4c:84:20:11:b2:3b:f2:92:01:22:8c:5e:85:
49:df:69:39:d0:98:69:23:f4:ef:96:55:c4:93:bc:
8d:74:85:4d:11:28:e1:27:7a:cb:3f:69:7e:40:ec:
85:ff:50:1b:68:3d:e9:cb:46:26:99:d3:20:97:4b:
81:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:51:8B:1E:57:75:72:FF:AE:64:F3:05:D0:8D:CD:DA:A1:5A:23:25
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/2A309C02FD8611EFB0589357C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
43.228.166.0/23
43.230.132.0/23
103.96.15.0/24
103.109.220.0/22
103.115.128.0/22
103.147.93.0/24
103.157.162.0/23
103.162.74.0/23
103.172.56.0/24
103.185.100.0/24
103.216.99.0/24
103.225.70.0/24
103.239.12.0/23
IPv6:
2001:df2:23c0::/48
2001:df2:9640::/48
2001:df3:29c0::/48
2001:df4:88c0::/48
Signature Algorithm: sha256WithRSAEncryption
3b:8c:48:a3:09:8d:4e:29:4b:00:a3:7c:e0:71:05:79:32:05:
9d:b0:68:fa:55:f0:29:b1:a3:3a:6e:94:69:1d:b4:06:8b:d2:
8b:9b:09:f4:33:74:29:89:f1:7d:82:42:e2:7b:74:a8:c9:03:
af:19:78:7b:da:27:81:9f:43:96:c3:cc:c4:9e:b8:22:de:73:
4a:bd:11:2f:a6:08:d9:0a:9f:bf:ce:50:4f:8b:08:ce:c9:c5:
18:64:d8:0c:7a:12:be:57:cd:68:c5:c1:c9:97:9d:5e:81:ab:
3f:24:f7:06:b3:fb:ae:c5:90:40:f8:dd:1e:d4:e3:24:d1:48:
23:0d:89:fa:7c:66:21:e9:c7:be:e2:a7:48:61:6e:70:69:d7:
78:cb:ca:6b:3c:d2:b4:b1:de:6e:d5:92:b1:8b:55:80:23:f4:
27:3f:eb:a0:af:4b:c6:fc:d3:1f:d9:7a:b1:cc:7f:05:fe:f7:
91:af:38:dc:f5:c7:01:68:ca:cf:9e:4e:d1:26:b5:67:b3:d3:
7f:b3:c2:62:92:42:96:00:87:3c:c5:a2:44:4b:c5:c8:fb:18:
b6:ca:5a:42:d7:0d:09:75:6a:e8:65:75:0d:32:9b:b3:9c:88:
89:a6:5b:d9:e3:69:1a:85:26:6d:57:a5:15:f7:d0:5a:97:94:
e1:80:54:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 15:59:21 2025 by rpki-client