Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/AB7DF60E169C11F0A665C224C4F9AE02.roa
File: AB7DF60E169C11F0A665C224C4F9AE02.roa (raw, json)
Hash identifier: frlWr5vxIehhCpHLotvLZeNEvuMW94zCYWXZosEvwJ4=
Subject key identifier: 7A:94:71:EA:B8:85:F1:B9:12:DD:F8:69:86:CE:51:F9:DE:4D:F4:27
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: AF8D
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/AB7DF60E169C11F0A665C224C4F9AE02.roa
Signing time: Thu 24 Apr 2025 09:02:09 +0000
ROA not before: Thu 24 Apr 2025 09:02:09 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 133676
IP address blocks: 36.50.82.0/24 maxlen: 24
43.225.74.0/24 maxlen: 24
43.230.196.0/22 maxlen: 24
43.239.132.0/22 maxlen: 24
43.240.4.0/24 maxlen: 24
43.240.5.0/24 maxlen: 24
43.240.6.0/24 maxlen: 24
43.240.7.0/24 maxlen: 24
43.250.252.0/22 maxlen: 24
45.64.8.0/24 maxlen: 24
45.64.9.0/24 maxlen: 24
45.64.10.0/24 maxlen: 24
45.64.11.0/24 maxlen: 24
45.248.24.0/24 maxlen: 24
45.248.25.0/24 maxlen: 24
45.248.26.0/23 maxlen: 24
103.42.88.0/22 maxlen: 24
103.47.12.0/23 maxlen: 24
103.47.14.0/24 maxlen: 24
103.47.15.0/24 maxlen: 24
103.47.72.0/23 maxlen: 24
103.47.74.0/23 maxlen: 24
103.47.172.0/23 maxlen: 24
103.47.174.0/23 maxlen: 24
103.49.232.0/23 maxlen: 24
103.54.24.0/23 maxlen: 24
103.54.26.0/24 maxlen: 24
103.62.147.0/24 maxlen: 24
103.80.34.0/23 maxlen: 24
103.82.72.0/22 maxlen: 24
103.85.118.0/23 maxlen: 24
103.87.204.0/22 maxlen: 24
103.93.172.0/22 maxlen: 24
103.93.212.0/23 maxlen: 24
103.98.53.0/24 maxlen: 24
103.101.116.0/24 maxlen: 24
103.101.117.0/24 maxlen: 24
103.101.118.0/23 maxlen: 24
103.103.163.0/24 maxlen: 24
103.105.228.0/23 maxlen: 24
103.105.230.0/23 maxlen: 24
103.109.180.0/23 maxlen: 24
103.109.182.0/23 maxlen: 24
103.114.188.0/23 maxlen: 24
103.118.180.0/22 maxlen: 24
103.147.88.0/23 maxlen: 24
103.148.66.0/23 maxlen: 24
103.153.208.0/23 maxlen: 24
103.173.218.0/24 maxlen: 24
103.177.202.0/23 maxlen: 24
103.178.58.0/24 maxlen: 24
103.178.59.0/24 maxlen: 24
103.181.90.0/23 maxlen: 24
103.182.44.0/23 maxlen: 24
103.182.160.0/23 maxlen: 24
103.184.184.0/23 maxlen: 24
103.186.44.0/23 maxlen: 24
103.189.146.0/24 maxlen: 24
103.189.147.0/24 maxlen: 24
103.191.182.0/23 maxlen: 24
103.191.234.0/23 maxlen: 24
103.195.26.0/23 maxlen: 24
103.204.168.0/22 maxlen: 24
103.211.56.0/23 maxlen: 24
103.211.58.0/24 maxlen: 24
103.211.190.0/23 maxlen: 24
103.212.136.0/23 maxlen: 24
103.212.138.0/23 maxlen: 24
103.213.6.0/23 maxlen: 24
103.225.204.0/24 maxlen: 24
103.225.205.0/24 maxlen: 24
103.225.206.0/23 maxlen: 24
103.226.200.0/22 maxlen: 24
103.227.95.0/24 maxlen: 24
103.248.120.0/24 maxlen: 24
103.248.121.0/24 maxlen: 24
103.248.122.0/24 maxlen: 24
103.248.123.0/24 maxlen: 24
139.5.16.0/23 maxlen: 24
139.5.18.0/23 maxlen: 24
2405:5540::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 03 May 2025 02:50:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 44941 (0xaf8d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Validity
Not Before: Apr 24 09:02:09 2025 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6809fe11-32c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:82:4d:e7:7e:21:08:e7:6a:ce:29:a0:70:47:
96:c0:3e:3e:db:05:af:82:70:25:ab:5d:c0:2f:ab:
f3:5c:82:01:5f:98:e5:22:d0:7c:57:40:8e:11:49:
60:b8:ba:5c:a3:26:cb:e0:af:d1:45:e2:be:07:81:
a0:69:ed:fb:5a:cc:70:5b:8a:da:7b:6e:fd:65:b2:
4a:0b:b3:40:10:fd:b8:9b:f3:dd:e1:6d:05:b5:64:
ab:f6:b3:fc:39:44:f5:d2:61:96:9d:af:1b:fe:49:
a1:0b:a8:a5:f7:98:8a:a9:93:04:a7:00:51:8c:e8:
c3:d3:53:04:20:00:55:a3:a7:cd:70:18:49:8d:29:
51:7a:48:37:87:a8:11:05:80:1e:dd:9a:77:05:d7:
68:f4:3c:7b:4c:d1:30:cb:e6:e1:85:86:66:c7:0a:
69:57:58:cf:5d:05:64:ed:59:cb:01:bc:cf:a9:ec:
66:9e:86:63:9f:e5:17:9e:c6:59:bb:6f:44:69:03:
5f:52:d1:30:7d:77:78:6a:2a:7c:28:16:8f:14:7f:
1b:07:fe:34:59:53:d2:4b:bb:d2:19:17:c4:d8:3c:
54:bf:4e:7b:04:3c:7a:22:cb:57:0a:6d:dd:a7:f3:
4d:32:9d:a5:ed:68:80:c2:3f:6d:fe:49:c3:ae:b6:
16:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:94:71:EA:B8:85:F1:B9:12:DD:F8:69:86:CE:51:F9:DE:4D:F4:27
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/AB7DF60E169C11F0A665C224C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
36.50.82.0/24
43.225.74.0/24
43.230.196.0/22
43.239.132.0/22
43.240.4.0/22
43.250.252.0/22
45.64.8.0/22
45.248.24.0/22
103.42.88.0/22
103.47.12.0/22
103.47.72.0/22
103.47.172.0/22
103.49.232.0/23
103.54.24.0-103.54.26.255
103.62.147.0/24
103.80.34.0/23
103.82.72.0/22
103.85.118.0/23
103.87.204.0/22
103.93.172.0/22
103.93.212.0/23
103.98.53.0/24
103.101.116.0/22
103.103.163.0/24
103.105.228.0/22
103.109.180.0/22
103.114.188.0/23
103.118.180.0/22
103.147.88.0/23
103.148.66.0/23
103.153.208.0/23
103.173.218.0/24
103.177.202.0/23
103.178.58.0/23
103.181.90.0/23
103.182.44.0/23
103.182.160.0/23
103.184.184.0/23
103.186.44.0/23
103.189.146.0/23
103.191.182.0/23
103.191.234.0/23
103.195.26.0/23
103.204.168.0/22
103.211.56.0-103.211.58.255
103.211.190.0/23
103.212.136.0/22
103.213.6.0/23
103.225.204.0/22
103.226.200.0/22
103.227.95.0/24
103.248.120.0/22
139.5.16.0/22
IPv6:
2405:5540::/32
Signature Algorithm: sha256WithRSAEncryption
7e:9c:cb:47:e5:4a:45:c0:40:b2:55:01:95:4a:58:51:f5:b8:
a0:d3:07:63:6e:04:16:a3:ef:2b:5b:0c:2d:cc:d3:03:8a:f6:
86:b9:ae:53:b9:8b:cf:65:97:71:81:3c:a1:6d:37:74:4e:6f:
50:4f:2c:39:d6:0c:c8:c0:20:66:77:dc:ca:d5:64:2b:e8:40:
ad:2d:c0:22:cf:80:2c:7a:71:af:fd:19:b3:3a:ec:49:89:fd:
75:8c:f7:61:29:f5:70:2e:e2:ad:88:c7:7b:12:c8:53:c9:34:
4f:12:73:53:be:30:f4:93:58:e3:00:1d:3f:67:3d:66:0c:a9:
5f:9d:62:55:30:1c:eb:1b:6e:97:9b:f2:6c:30:6c:a6:13:08:
f8:dd:a0:a6:92:aa:d2:df:0d:d6:8c:1e:d5:02:0c:25:5e:0b:
da:c7:25:12:de:66:80:4a:65:8a:09:84:ea:62:bb:12:0b:03:
8c:5a:86:31:e7:4d:1b:fb:0f:95:7c:db:a1:b6:a8:8c:db:23:
f6:68:b6:61:3b:a8:39:9a:4f:f3:b1:8f:9b:27:be:50:40:b5:
ee:0d:99:0e:3c:dc:35:93:87:38:3f:55:61:11:6e:cf:d2:d8:
e4:1a:67:16:47:92:09:96:45:a5:f8:91:36:4f:7c:d1:39:41:
ee:a2:c4:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 12:31:19 2025 by rpki-client