Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/82A3B7906C7411F0A018466EC4F9AE02.roa
File: 82A3B7906C7411F0A018466EC4F9AE02.roa (raw, json)
Hash identifier: WSjt4+2bxoziNvL9UQ6TMk+OcgiiTlR5WEdlenXpmJE=
Subject key identifier: 4D:A4:14:D8:50:C8:26:CA:62:37:04:16:2F:15:C2:9D:0A:1E:2D:D7
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: C139
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/82A3B7906C7411F0A018466EC4F9AE02.roa
Signing time: Tue 29 Jul 2025 12:06:51 +0000
ROA not before: Tue 29 Jul 2025 12:06:51 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 150596
IP address blocks: 45.123.9.0/24 maxlen: 24
45.123.11.0/24 maxlen: 24
103.38.200.0/24 maxlen: 24
103.38.201.0/24 maxlen: 24
103.77.42.0/24 maxlen: 24
103.77.43.0/24 maxlen: 24
103.83.145.0/24 maxlen: 24
103.110.16.0/22 maxlen: 22
103.110.16.0/24 maxlen: 24
103.110.17.0/24 maxlen: 24
103.110.18.0/24 maxlen: 24
103.110.19.0/24 maxlen: 24
103.110.180.0/23 maxlen: 24
103.134.114.0/24 maxlen: 24
103.141.91.0/24 maxlen: 24
103.168.177.0/24 maxlen: 24
103.171.223.0/24 maxlen: 24
103.172.59.0/24 maxlen: 24
103.176.176.0/24 maxlen: 24
103.188.127.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 14 Aug 2025 05:57:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 49465 (0xc139)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Validity
Not Before: Jul 29 12:06:51 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6888b95b-0cac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:d5:b9:48:d4:92:2d:95:0e:31:11:18:ee:dc:
b3:d5:cf:c0:cc:1a:c0:ad:a1:37:6b:b8:b0:31:29:
a7:33:71:84:b0:37:e8:1a:a0:00:07:d6:af:36:58:
fe:74:5a:5d:df:b4:dd:ac:d1:73:0a:ad:96:5d:f1:
f2:96:b8:1b:74:9d:b6:4d:12:36:c4:3e:c7:e2:2d:
a3:c7:3a:a6:00:47:f9:f5:a8:3a:7b:5a:0e:cd:99:
13:9c:5f:9e:54:97:9b:b9:6d:26:b1:dd:2d:cd:07:
00:7c:d6:a9:05:27:71:a9:58:cf:a9:51:d6:6e:b1:
c8:5b:ce:3e:a1:97:82:b1:c4:10:5e:1c:87:13:b7:
4e:63:b2:86:8a:2a:a5:55:fd:d3:98:89:76:32:00:
ae:25:e4:a9:da:4d:38:d9:ba:11:0d:b3:9d:0a:a9:
8a:3f:e6:4d:09:0a:ea:89:21:b1:80:33:8d:3d:92:
5a:03:f2:6d:7f:71:66:fa:68:53:5d:27:27:82:92:
98:f0:43:a3:ea:ef:fb:4c:71:a6:3a:80:65:4a:f3:
93:14:4c:90:46:71:c7:d7:2c:28:8d:3f:47:aa:83:
8a:4d:3d:f6:15:2b:2c:a2:7f:43:8e:f2:b1:51:c6:
d5:20:2c:b6:80:10:53:04:e0:3b:fe:6d:44:98:59:
08:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:A4:14:D8:50:C8:26:CA:62:37:04:16:2F:15:C2:9D:0A:1E:2D:D7
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/82A3B7906C7411F0A018466EC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.123.9.0/24
45.123.11.0/24
103.38.200.0/23
103.77.42.0/23
103.83.145.0/24
103.110.16.0/22
103.110.180.0/23
103.134.114.0/24
103.141.91.0/24
103.168.177.0/24
103.171.223.0/24
103.172.59.0/24
103.176.176.0/24
103.188.127.0/24
Signature Algorithm: sha256WithRSAEncryption
75:87:12:8b:8b:af:7a:1e:87:c0:27:b2:6a:89:b1:9c:eb:5b:
a2:4d:4a:2a:52:ee:b5:23:db:bf:d1:df:c9:b4:7f:d5:e1:76:
75:24:74:c5:1b:38:3c:27:a6:bd:26:50:dd:6c:6f:19:ef:0b:
83:12:14:7e:5d:16:06:91:64:b8:70:74:5c:b9:42:2c:09:2b:
fe:d0:52:ed:3f:0a:9d:ed:e1:c2:cc:ca:a5:47:e0:74:fe:de:
e6:c7:be:7a:3c:43:77:ea:0f:7f:78:18:65:1b:42:ee:d2:4e:
98:b7:79:22:0f:3f:6b:ef:e5:7c:dd:7b:f2:a4:ef:89:50:6d:
71:b1:5e:f7:d2:0f:5e:76:9f:b0:8e:47:46:20:a1:b8:9a:4b:
fe:7e:16:63:88:95:24:66:00:55:6f:1f:34:21:4c:09:40:c1:
38:cd:e1:ae:2f:02:37:2e:26:89:d8:f2:96:3f:f0:4d:6f:34:
3b:32:18:26:1a:f9:34:3b:aa:c6:02:dc:60:5f:e3:22:95:22:
7a:8b:cb:2a:f5:c4:e2:f8:8d:74:06:98:67:6c:a3:37:98:35:
39:c2:72:4a:e4:5a:29:61:41:12:41:e6:52:3d:d9:88:cb:98:
fd:31:3d:89:a6:85:c3:4e:b4:bd:e5:11:76:f9:34:a5:06:ac:
9f:04:e7:5d
-----BEGIN CERTIFICATE-----
MIIFwDCCBKigAwIBAgIDAME5MA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5
MThFREIyMTEwLwYDVQQFEygyOTZFREI2NEYzQUY2RTlEOTgwOTMyRTgxNkY5NTk4
M0UzQUJDODIzMB4XDTI1MDcyOTEyMDY1MVoXDTI2MDcwMTAwMDAwMFowGDEWMBQG
A1UEAxMNNjg4OGI5NWItMGNhYzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAM3VuUjUki2VDjERGO7cs9XPwMwawK2hN2u4sDEppzNxhLA36BqgAAfWrzZY
/nRaXd+03azRcwqtll3x8pa4G3Sdtk0SNsQ+x+Ito8c6pgBH+fWoOntaDs2ZE5xf
nlSXm7ltJrHdLc0HAHzWqQUncalYz6lR1m6xyFvOPqGXgrHEEF4chxO3TmOyhooq
pVX905iJdjIAriXkqdpNONm6EQ2znQqpij/mTQkK6okhsYAzjT2SWgPybX9xZvpo
U10nJ4KSmPBDo+rv+0xxpjqAZUrzkxRMkEZxx9csKI0/R6qDik099hUrLKJ/Q47y
sVHG1SAstoAQUwTgO/5tRJhZCHkCAwEAAaOCAuMwggLfMB0GA1UdDgQWBBRNpBTY
UMgmymI3BBYvFcKdCh4t1zAfBgNVHSMEGDAWgBQpbttk869unZgJMugW+VmD46vI
IzAOBgNVHQ8BAf8EBAMCB4AwgYMGA1UdHwR8MHoweKB2oHSGcnJzeW5jOi8vcnBr
aS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkxOEVEQjIvMkE0M0UzMEM3
MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvS1c3YlpQT3ZicDJZQ1RMb0Z2bFpnLU9y
eUNNLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr
aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3
MkZEMUZGMi9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5Q00uY2VyMEoGA1UdIAEB
/wRAMD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBu
aWMubmV0L1JQS0kvQ1BTLnBkZjCBywYIKwYBBQUHAQsEgb4wgbswgYMGCCsGAQUF
BzALhndyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MThFREIyLzJBNDNFMzBDNzBFOTExRTJCMzZENEI2QjI5NzlCQjIwLzgyQTNCNzkw
NkM3NDExRjBBMDE4NDY2RUM0RjlBRTAyLnJvYTAzBggrBgEFBQcwDYYnaHR0cHM6
Ly9ycmRwLmFwbmljLm5ldC9ub3RpZmljYXRpb24ueG1sMG0GCCsGAQUFBwEHAQH/
BF4wXDBaBAIAATBUAwQALXsJAwQALXsLAwQBZybIAwQBZ00qAwQAZ1ORAwQCZ24Q
AwQBZ260AwQAZ4ZyAwQAZ41bAwQAZ6ixAwQAZ6vfAwQAZ6w7AwQAZ7CwAwQAZ7x/
MA0GCSqGSIb3DQEBCwUAA4IBAQB1hxKLi696HofAJ7JqibGc61uiTUoqUu61I9u/
0d/JtH/V4XZ1JHTFGzg8J6a9JlDdbG8Z7wuDEhR+XRYGkWS4cHRcuUIsCSv+0FLt
Pwqd7eHCzMqlR+B0/t7mx756PEN36g9/eBhlG0Lu0k6Yt3kiDz9r7+V83XvypO+J
UG1xsV730g9edp+wjkdGIKG4mkv+fhZjiJUkZgBVbx80IUwJQME4zeGuLwI3LiaJ
2PKWP/BNbzQ7MhgmGvk0O6rGAtxgX+MilSJ6i8sq9cTi+I10BphnbKM3mDU5wnJK
5FopYUESQeZSPdmIy5j9MT2JpoXDTrS95RF2+TSlBqyfBOdd
-----END CERTIFICATE-----
Generated at Sun Aug 10 14:01:03 2025 by rpki-client