Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/83239BB20A1E11F0BAD8A91EC4F9AE02.roa
File: 83239BB20A1E11F0BAD8A91EC4F9AE02.roa (raw, json)
Hash identifier: A9zYtURq6YNWrBkAf2xWwtVJ5sq0hcrZLiDWlmiwqSY=
Subject key identifier: 15:40:59:51:0C:A9:A6:15:20:5A:BF:A3:54:0A:F6:96:AE:41:97:58
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: BDE4
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/83239BB20A1E11F0BAD8A91EC4F9AE02.roa
Signing time: Wed 11 Jun 2025 07:45:44 +0000
ROA not before: Wed 11 Jun 2025 07:45:44 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 151106
IP address blocks: 43.243.76.0/24 maxlen: 24
103.157.50.0/23 maxlen: 24
103.161.26.0/23 maxlen: 24
103.177.226.0/23 maxlen: 24
103.179.96.0/23 maxlen: 24
103.179.118.0/23 maxlen: 24
103.181.84.0/23 maxlen: 24
103.183.216.0/23 maxlen: 24
103.187.92.0/23 maxlen: 24
103.189.82.0/23 maxlen: 24
103.214.230.0/23 maxlen: 24
103.215.96.0/23 maxlen: 24
103.243.232.0/24 maxlen: 24
2001:df2:bec0::/47 maxlen: 47
2001:df2:bec0::/48 maxlen: 48
2001:df2:bec1::/48 maxlen: 48
2001:df5:4980::/48 maxlen: 48
2001:df5:a7c0::/48 maxlen: 48
2001:df5:af40::/48 maxlen: 48
2001:df5:b340::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 21 Jun 2025 15:21:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 48612 (0xbde4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Validity
Not Before: Jun 11 07:45:44 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=68493427-991e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:87:0b:ce:5d:58:53:ef:3e:7d:29:8a:5f:5e:
51:1a:b3:48:37:59:00:14:7c:ff:f6:88:2b:6a:df:
e8:11:f5:99:c9:87:26:c7:23:95:89:30:6f:07:71:
c5:64:81:71:a9:6d:24:d7:7b:68:d2:3f:94:74:a0:
ff:a5:e6:56:28:5e:48:92:bb:70:a0:a2:a2:d9:b4:
08:9b:1c:10:89:cb:b4:a5:5e:4a:da:54:db:2d:53:
c9:21:b5:0e:54:1b:14:8e:fb:55:11:10:7f:e3:e4:
ce:22:34:9c:6f:8d:c1:f4:c5:4e:1d:12:4a:26:7c:
e3:98:ec:5c:aa:4e:9c:51:61:69:bb:d3:41:b9:44:
3e:28:47:67:45:33:08:bb:a6:99:ca:df:70:53:42:
d5:c7:73:61:93:2a:b2:e5:f2:50:0d:a0:25:d1:56:
70:ca:cc:98:db:b8:a0:7d:e8:05:ca:73:59:1c:6d:
22:68:43:be:15:c0:83:bf:af:34:87:e2:a0:71:ca:
e2:4a:76:24:ee:17:5b:70:1c:5b:eb:e8:10:96:a7:
41:86:80:9e:a4:c9:8e:ab:96:12:ae:a1:2d:ff:b2:
6f:dd:ae:63:2a:82:c3:d3:06:eb:72:d0:5a:78:64:
10:f2:3b:c3:f1:e6:19:7f:92:07:ef:70:70:2d:29:
43:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:40:59:51:0C:A9:A6:15:20:5A:BF:A3:54:0A:F6:96:AE:41:97:58
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/83239BB20A1E11F0BAD8A91EC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
43.243.76.0/24
103.157.50.0/23
103.161.26.0/23
103.177.226.0/23
103.179.96.0/23
103.179.118.0/23
103.181.84.0/23
103.183.216.0/23
103.187.92.0/23
103.189.82.0/23
103.214.230.0/23
103.215.96.0/23
103.243.232.0/24
IPv6:
2001:df2:bec0::/47
2001:df5:4980::/48
2001:df5:a7c0::/48
2001:df5:af40::/48
2001:df5:b340::/48
Signature Algorithm: sha256WithRSAEncryption
89:24:fc:d6:46:dc:35:54:f4:7a:fb:0b:ff:02:78:8d:71:b5:
dd:b0:ff:26:ee:4f:11:2c:0a:50:ec:7f:32:1d:96:76:80:4c:
cf:e0:ea:69:df:07:0e:14:fd:65:7d:4e:53:f8:09:c5:8f:e4:
80:fb:48:69:f5:8c:de:ce:bb:86:ca:96:ba:42:91:46:59:ba:
76:80:ed:86:f6:3f:ff:bc:ad:92:92:92:1f:a2:78:57:31:8a:
95:11:3f:1a:b4:be:73:f2:6e:e7:19:05:5f:be:dc:82:8a:86:
2e:e9:35:52:ee:de:ba:ac:5a:b8:67:0a:e6:d0:62:0a:2f:46:
98:55:a9:19:9e:bd:60:91:0d:98:0c:00:a1:63:93:b2:d8:6e:
4a:9b:1c:a5:7c:4e:cf:e8:3f:30:cc:05:df:ce:31:53:ff:24:
b6:bc:a6:71:1d:a2:a5:df:c0:3f:4b:de:ee:f8:d3:ce:55:2d:
2f:58:ac:cf:a3:ba:57:35:d2:19:aa:30:13:e1:97:2e:f8:a6:
e0:08:20:d9:f8:63:1e:93:dc:84:1d:6f:34:87:89:92:be:6e:
6b:ea:f4:e8:ba:64:06:28:a7:fd:15:2e:76:0b:80:e2:b1:0e:
e1:0d:db:48:21:53:1a:2b:4a:6e:d2:eb:5f:72:f1:fe:2b:33:
53:55:c7:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 10:01:48 2025 by rpki-client