Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/73246420200411F0ACA27118C4F9AE02.roa
File: 73246420200411F0ACA27118C4F9AE02.roa (raw, json)
Hash identifier: NreFqxL48vS6HKxpedmAmZYwr5ky/j5FQMOQmzKR9dY=
Subject key identifier: 61:EA:87:54:2C:EE:6D:C8:35:E5:94:B5:0F:61:6B:C7:F5:5C:D6:38
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: AF53
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/73246420200411F0ACA27118C4F9AE02.roa
Signing time: Wed 23 Apr 2025 05:33:13 +0000
ROA not before: Wed 23 Apr 2025 05:33:13 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 137127
IP address blocks: 103.102.28.0/22 maxlen: 24
103.109.136.0/24 maxlen: 24
103.109.139.0/24 maxlen: 24
103.112.121.0/24 maxlen: 24
103.124.109.0/24 maxlen: 24
103.144.64.0/23 maxlen: 24
103.147.120.0/24 maxlen: 24
103.147.121.0/24 maxlen: 24
103.148.62.0/24 maxlen: 24
103.148.63.0/24 maxlen: 24
103.167.130.0/23 maxlen: 24
103.170.66.0/23 maxlen: 24
103.171.200.0/23 maxlen: 24
103.172.148.0/23 maxlen: 23
103.174.34.0/23 maxlen: 24
103.183.24.0/24 maxlen: 24
103.183.25.0/24 maxlen: 24
103.190.14.0/24 maxlen: 24
103.190.15.0/24 maxlen: 24
103.220.32.0/24 maxlen: 24
103.220.34.0/24 maxlen: 24
137.59.99.0/24 maxlen: 24
2001:df0:82c0::/48 maxlen: 48
2001:df0:e140::/48 maxlen: 48
2001:df1:25c0::/48 maxlen: 48
2400:9820::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 03 May 2025 02:50:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 44883 (0xaf53)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Validity
Not Before: Apr 23 05:33:13 2025 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=68087b99-c9a2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:a6:4b:89:be:31:2d:be:14:ed:27:27:d6:c5:
4c:ab:25:66:6d:cf:80:c4:ac:e5:a3:2e:6b:0d:ae:
f0:1e:ae:ad:93:09:6c:74:6d:d3:a4:f2:b6:1c:f9:
fb:3f:ea:73:87:41:e6:fc:55:60:2b:19:e0:15:b9:
29:b3:9d:87:71:25:6c:74:ac:5a:70:d7:99:e7:f7:
02:93:ba:52:c7:aa:f1:43:c7:b8:f3:4f:f6:38:b4:
67:58:9d:27:6e:ac:1b:0e:38:56:17:a3:cc:ea:13:
04:61:c0:c2:54:98:57:70:0e:8e:0a:ca:06:73:b1:
fb:e4:a1:85:4e:46:a2:0b:00:42:b1:42:85:a1:b7:
9d:0f:0d:7a:ca:1d:17:54:17:a7:90:0b:65:48:f4:
c8:41:78:19:60:1b:c6:6f:bb:d7:90:c8:71:33:6d:
82:61:36:c5:89:57:6e:1b:2e:35:3a:0a:b1:b4:86:
63:62:58:64:18:0a:e3:dd:e5:fc:05:74:a2:0a:91:
fd:9e:5d:c5:f0:e0:07:e5:ae:83:f7:66:94:15:d4:
08:cd:28:7c:ad:f0:ac:4d:14:6d:14:e5:90:d3:49:
6f:4f:71:7b:bf:5e:a5:cd:43:9f:bc:0d:dd:0e:7c:
61:10:cc:b2:89:30:b7:b0:c7:bc:cd:44:e9:0e:c2:
d8:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:EA:87:54:2C:EE:6D:C8:35:E5:94:B5:0F:61:6B:C7:F5:5C:D6:38
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/73246420200411F0ACA27118C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.102.28.0/22
103.109.136.0/24
103.109.139.0/24
103.112.121.0/24
103.124.109.0/24
103.144.64.0/23
103.147.120.0/23
103.148.62.0/23
103.167.130.0/23
103.170.66.0/23
103.171.200.0/23
103.172.148.0/23
103.174.34.0/23
103.183.24.0/23
103.190.14.0/23
103.220.32.0/24
103.220.34.0/24
137.59.99.0/24
IPv6:
2001:df0:82c0::/48
2001:df0:e140::/48
2001:df1:25c0::/48
2400:9820::/32
Signature Algorithm: sha256WithRSAEncryption
8e:3a:20:6c:1a:e0:0b:bb:e7:2a:7f:d3:53:74:de:eb:75:e6:
29:07:f1:99:07:2e:a0:c6:30:55:79:c8:48:f2:c9:bb:70:b8:
9c:ac:ec:7e:14:35:14:95:e3:02:ce:6e:77:42:7e:fe:7d:ad:
eb:9a:62:8f:60:60:52:f3:18:0d:fd:0f:04:54:09:71:78:38:
ee:a9:86:33:17:09:4d:28:8d:0a:aa:78:00:e5:41:16:3c:4f:
5a:70:6d:8b:c1:18:0f:7f:ec:83:cc:b0:87:59:e9:85:ed:25:
ad:69:eb:f4:1a:e2:84:f6:e2:3e:d5:36:8a:01:64:33:b5:77:
4d:c8:89:00:4b:af:77:1d:80:a2:eb:34:2a:a0:4d:02:15:30:
77:c5:43:29:cb:07:7c:3c:77:1e:a1:5c:a1:66:98:7f:18:6c:
a0:63:0a:d4:a2:fc:c2:10:f2:bb:fc:86:c7:f1:88:1b:13:96:
1f:8c:6d:d6:77:96:2d:34:38:a2:7a:23:e0:67:1e:1b:ba:14:
4e:16:0e:01:5f:71:1e:10:48:f4:d9:10:d4:15:11:56:ad:88:
40:99:9e:0a:3a:86:07:64:78:11:65:88:29:37:5a:24:32:ca:
96:1a:4d:18:7d:1b:a6:e1:3b:22:e8:78:1e:ba:2b:4b:f4:2d:
ba:e3:67:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 12:33:58 2025 by rpki-client