Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/67C654D666F811F0A944A943C4F9AE02.roa
File: 67C654D666F811F0A944A943C4F9AE02.roa (raw, json)
Hash identifier: Ai04L8tpdip1PU2h0GQXn/79lDP1oLnOsR8L+9hrI7A=
Subject key identifier: 26:14:E4:CB:F3:15:08:03:0C:CE:AA:2D:B5:8F:5A:6F:F7:D2:8A:88
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: C0C3
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/67C654D666F811F0A944A943C4F9AE02.roa
Signing time: Tue 22 Jul 2025 12:35:53 +0000
ROA not before: Tue 22 Jul 2025 12:35:53 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 133661
IP address blocks: 45.248.156.0/22 maxlen: 24
45.248.160.0/22 maxlen: 24
101.0.32.0/22 maxlen: 24
101.0.37.0/24 maxlen: 24
101.0.38.0/24 maxlen: 24
101.0.41.0/24 maxlen: 24
101.0.42.0/24 maxlen: 24
101.0.45.0/24 maxlen: 24
101.0.49.0/24 maxlen: 24
101.0.50.0/24 maxlen: 24
101.0.53.0/24 maxlen: 24
101.0.54.0/23 maxlen: 24
101.0.57.0/24 maxlen: 24
103.40.196.0/22 maxlen: 24
103.41.20.0/22 maxlen: 24
103.41.24.0/22 maxlen: 24
103.41.36.0/22 maxlen: 24
103.66.204.0/22 maxlen: 24
103.66.208.0/22 maxlen: 24
103.72.168.0/22 maxlen: 24
103.72.220.0/22 maxlen: 24
103.73.148.0/24 maxlen: 24
103.73.149.0/24 maxlen: 24
103.73.150.0/24 maxlen: 24
103.110.248.0/24 maxlen: 24
103.110.249.0/24 maxlen: 24
103.110.250.0/24 maxlen: 24
103.110.251.0/24 maxlen: 24
103.114.64.0/24 maxlen: 24
103.114.65.0/24 maxlen: 24
103.114.66.0/24 maxlen: 24
103.114.67.0/24 maxlen: 24
103.165.76.0/24 maxlen: 24
103.166.215.0/24 maxlen: 24
103.167.154.0/23 maxlen: 24
103.167.182.0/23 maxlen: 24
103.167.212.0/23 maxlen: 24
103.168.0.0/23 maxlen: 24
103.168.33.0/24 maxlen: 24
103.170.36.0/23 maxlen: 24
103.174.92.0/23 maxlen: 24
103.178.64.0/23 maxlen: 24
103.178.203.0/24 maxlen: 24
103.179.10.0/23 maxlen: 24
103.179.100.0/23 maxlen: 24
103.179.102.0/23 maxlen: 24
103.179.120.0/24 maxlen: 24
103.179.224.0/24 maxlen: 24
103.179.226.0/24 maxlen: 24
103.180.168.0/24 maxlen: 24
103.180.174.0/24 maxlen: 24
103.180.212.0/23 maxlen: 24
103.180.214.0/23 maxlen: 24
103.180.238.0/23 maxlen: 24
103.181.56.0/23 maxlen: 24
103.181.110.0/23 maxlen: 24
103.181.151.0/24 maxlen: 24
103.181.152.0/23 maxlen: 24
103.181.154.0/23 maxlen: 24
103.181.174.0/23 maxlen: 24
103.183.30.0/23 maxlen: 24
103.183.32.0/23 maxlen: 24
103.183.34.0/23 maxlen: 24
103.187.84.0/23 maxlen: 24
103.187.96.0/23 maxlen: 24
103.187.102.0/23 maxlen: 24
103.187.130.0/23 maxlen: 24
103.187.158.0/23 maxlen: 24
103.187.170.0/23 maxlen: 24
103.217.116.0/22 maxlen: 24
103.217.120.0/22 maxlen: 24
103.223.8.0/22 maxlen: 24
103.223.12.0/22 maxlen: 24
114.134.24.0/22 maxlen: 24
163.47.212.0/22 maxlen: 24
175.176.184.0/22 maxlen: 24
180.188.224.0/24 maxlen: 24
180.188.232.0/24 maxlen: 24
180.188.236.0/23 maxlen: 24
180.188.241.0/24 maxlen: 24
180.188.242.0/23 maxlen: 24
180.188.246.0/23 maxlen: 24
180.188.248.0/24 maxlen: 24
180.188.249.0/24 maxlen: 24
180.188.250.0/24 maxlen: 24
180.188.251.0/24 maxlen: 24
180.188.252.0/22 maxlen: 24
202.14.120.0/22 maxlen: 24
203.76.178.0/24 maxlen: 24
203.76.180.0/24 maxlen: 24
203.76.181.0/24 maxlen: 24
203.76.188.0/24 maxlen: 24
203.76.190.0/24 maxlen: 24
203.76.191.0/24 maxlen: 24
203.115.68.0/24 maxlen: 24
203.115.73.0/24 maxlen: 24
203.115.84.0/23 maxlen: 24
203.115.91.0/24 maxlen: 24
210.89.39.0/24 maxlen: 24
210.89.58.0/23 maxlen: 24
210.89.61.0/24 maxlen: 24
210.89.62.0/23 maxlen: 24
223.130.28.0/22 maxlen: 24
2001:df0:e400::/48 maxlen: 48
2001:df2:e200::/48 maxlen: 48
2001:df2:e600::/48 maxlen: 48
2400:7b20::/32 maxlen: 32
2401:a880::/32 maxlen: 48
2404:7c80::/32 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 14 Aug 2025 05:57:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 49347 (0xc0c3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Validity
Not Before: Jul 22 12:35:53 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=687f85a9-305a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:51:d3:0e:ff:37:d5:59:cf:7b:3b:ac:19:47:
54:46:37:d4:01:ee:9b:6e:fa:4d:48:c3:9d:19:28:
c4:fb:ce:9e:fa:48:54:8e:4f:bd:9c:ae:d2:65:ef:
f9:90:37:b3:47:c9:cf:da:32:68:dd:6b:06:6f:af:
97:93:64:f3:98:88:e9:16:2d:a3:19:fd:ba:f0:7c:
6d:6d:d6:ff:e0:7f:f2:80:a5:54:8b:95:a5:ce:d2:
a3:8e:dc:a0:d9:c2:6b:0b:3c:7d:02:b3:e9:b6:4c:
ee:30:e1:a9:18:fb:33:7c:28:a2:08:62:84:1e:72:
b8:72:de:c6:d4:27:e0:a5:f1:03:15:d1:ff:d3:04:
d6:d8:4d:f3:93:ba:73:ad:73:8b:63:bb:35:ec:15:
9c:9b:e8:36:33:88:60:a5:32:82:d0:9f:68:63:5a:
bc:21:83:7b:53:db:c7:0c:63:1b:57:61:16:8d:ef:
7b:97:a4:3e:2e:38:0d:f5:aa:c8:bc:7a:4a:6e:86:
84:7e:50:90:a3:20:4f:a7:46:cf:82:4a:99:e1:c7:
40:9f:9e:43:ad:e5:11:fa:b8:51:c6:d6:3a:74:d7:
e4:59:f0:c3:96:5b:ba:89:1d:9a:58:b7:a6:61:ba:
ac:68:7e:3f:72:cd:32:0a:17:22:5e:82:b4:f3:1f:
04:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:14:E4:CB:F3:15:08:03:0C:CE:AA:2D:B5:8F:5A:6F:F7:D2:8A:88
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/67C654D666F811F0A944A943C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.248.156.0-45.248.163.255
101.0.32.0/22
101.0.37.0-101.0.38.255
101.0.41.0-101.0.42.255
101.0.45.0/24
101.0.49.0-101.0.50.255
101.0.53.0-101.0.55.255
101.0.57.0/24
103.40.196.0/22
103.41.20.0-103.41.27.255
103.41.36.0/22
103.66.204.0-103.66.211.255
103.72.168.0/22
103.72.220.0/22
103.73.148.0-103.73.150.255
103.110.248.0/22
103.114.64.0/22
103.165.76.0/24
103.166.215.0/24
103.167.154.0/23
103.167.182.0/23
103.167.212.0/23
103.168.0.0/23
103.168.33.0/24
103.170.36.0/23
103.174.92.0/23
103.178.64.0/23
103.178.203.0/24
103.179.10.0/23
103.179.100.0/22
103.179.120.0/24
103.179.224.0/24
103.179.226.0/24
103.180.168.0/24
103.180.174.0/24
103.180.212.0/22
103.180.238.0/23
103.181.56.0/23
103.181.110.0/23
103.181.151.0-103.181.155.255
103.181.174.0/23
103.183.30.0-103.183.35.255
103.187.84.0/23
103.187.96.0/23
103.187.102.0/23
103.187.130.0/23
103.187.158.0/23
103.187.170.0/23
103.217.116.0-103.217.123.255
103.223.8.0/21
114.134.24.0/22
163.47.212.0/22
175.176.184.0/22
180.188.224.0/24
180.188.232.0/24
180.188.236.0/23
180.188.241.0-180.188.243.255
180.188.246.0-180.188.255.255
202.14.120.0/22
203.76.178.0/24
203.76.180.0/23
203.76.188.0/24
203.76.190.0/23
203.115.68.0/24
203.115.73.0/24
203.115.84.0/23
203.115.91.0/24
210.89.39.0/24
210.89.58.0/23
210.89.61.0-210.89.63.255
223.130.28.0/22
IPv6:
2001:df0:e400::/48
2001:df2:e200::/48
2001:df2:e600::/48
2400:7b20::/32
2401:a880::/32
2404:7c80::/32
Signature Algorithm: sha256WithRSAEncryption
9e:7b:ec:4b:19:cf:df:13:ee:b2:0b:6c:a3:41:a4:f5:78:d8:
88:36:30:f5:ac:ce:ae:22:e8:99:e2:c4:4d:ae:9f:67:77:7a:
bf:0f:31:86:96:20:87:a7:20:fd:34:9f:ee:77:08:0f:b5:a2:
3c:64:61:4f:dd:2d:9b:1a:07:30:10:4d:c9:aa:cd:67:6d:40:
9f:39:d8:05:c3:a7:22:14:f3:4d:98:9f:30:15:c8:39:25:2e:
b3:bf:37:8a:c8:ce:40:f7:ee:7a:6e:7c:be:46:41:d3:71:9e:
85:8d:c3:dc:71:81:4e:ad:a0:09:3f:2e:f2:f3:2c:d7:21:c5:
d9:aa:af:06:8b:54:1d:fb:11:94:de:ea:69:4c:1d:10:33:1a:
eb:48:af:07:60:f4:71:7d:2c:87:b3:e3:bb:fa:44:fb:11:1a:
e3:ee:ce:4c:8a:3d:91:c6:95:fb:5f:17:4b:ee:50:a7:49:67:
71:4e:b3:89:13:9f:f7:a2:5b:60:a3:66:67:34:d8:02:39:0d:
69:c2:f7:17:3f:e1:ec:8a:40:10:e2:e6:6c:22:b2:15:53:71:
ab:61:31:66:45:20:d8:b5:e2:9b:d8:75:b1:00:14:a3:60:8d:
06:04:ea:1d:33:f5:66:45:b4:1e:36:68:33:9e:d3:78:de:15:
91:f2:9a:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 18:59:00 2025 by rpki-client