Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/AC4B36B4417311EE981FA66FC4F9AE02.roa
File: AC4B36B4417311EE981FA66FC4F9AE02.roa (raw, json)
Hash identifier: FMv0wMwssWhhkIPPTJNQGs7Z/E6IQRsXDIRmBGFTNXM=
Subject key identifier: 24:14:48:01:D8:44:F2:9B:55:E6:DF:82:F3:5E:34:D8:55:AF:42:38
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: C017
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/AC4B36B4417311EE981FA66FC4F9AE02.roa
Signing time: Fri 11 Jul 2025 07:37:26 +0000
ROA not before: Fri 11 Jul 2025 07:37:26 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 138754
IP address blocks: 43.229.88.0/22 maxlen: 24
103.42.196.0/22 maxlen: 24
103.65.250.0/23 maxlen: 24
103.70.36.0/23 maxlen: 24
103.70.196.0/22 maxlen: 24
103.76.162.0/23 maxlen: 24
103.99.144.0/23 maxlen: 24
103.99.204.0/22 maxlen: 24
103.114.252.0/23 maxlen: 24
103.118.150.0/23 maxlen: 24
103.131.128.0/23 maxlen: 24
103.132.24.0/22 maxlen: 24
103.139.64.0/23 maxlen: 24
103.140.16.0/23 maxlen: 24
103.145.172.0/23 maxlen: 24
103.146.174.0/23 maxlen: 24
103.147.208.0/23 maxlen: 24
103.148.20.0/23 maxlen: 24
103.149.158.0/23 maxlen: 24
103.151.188.0/23 maxlen: 24
103.153.92.0/23 maxlen: 24
103.153.104.0/23 maxlen: 24
103.154.36.0/24 maxlen: 24
103.154.37.0/24 maxlen: 24
103.154.54.0/23 maxlen: 24
103.155.222.0/23 maxlen: 24
103.157.104.0/23 maxlen: 24
103.158.240.0/23 maxlen: 24
103.160.194.0/23 maxlen: 24
103.160.232.0/23 maxlen: 24
103.161.54.0/23 maxlen: 24
103.161.144.0/23 maxlen: 24
103.165.166.0/23 maxlen: 24
103.166.244.0/23 maxlen: 24
103.168.200.0/23 maxlen: 24
103.169.214.0/23 maxlen: 24
103.170.54.0/23 maxlen: 24
103.171.224.0/23 maxlen: 24
103.175.2.0/23 maxlen: 24
103.175.88.0/23 maxlen: 24
103.175.136.0/23 maxlen: 24
103.176.184.0/23 maxlen: 24
103.177.26.0/23 maxlen: 24
103.177.252.0/23 maxlen: 24
103.178.204.0/23 maxlen: 24
103.179.196.0/23 maxlen: 24
103.179.230.0/23 maxlen: 24
103.181.40.0/23 maxlen: 24
103.182.166.0/23 maxlen: 24
103.183.82.0/23 maxlen: 24
103.184.238.0/23 maxlen: 24
103.189.142.0/23 maxlen: 24
103.189.214.0/23 maxlen: 24
103.190.2.0/23 maxlen: 24
103.190.194.0/23 maxlen: 24
103.191.172.0/23 maxlen: 24
103.191.186.0/23 maxlen: 24
103.199.160.0/22 maxlen: 24
103.209.132.0/23 maxlen: 24
103.209.220.0/22 maxlen: 24
137.59.84.0/22 maxlen: 24
2001:df0:b240::/48 maxlen: 48
2001:df0:c640::/48 maxlen: 48
2001:df5:2380::/48 maxlen: 48
2001:df5:d380::/48 maxlen: 48
2001:df7:480::/48 maxlen: 48
2001:df7:d80::/48 maxlen: 48
2001:df7:1380::/48 maxlen: 48
2001:df7:4b80::/48 maxlen: 48
2001:df7:4d80::/48 maxlen: 48
2001:df7:4e80::/48 maxlen: 48
2001:df7:4f80::/48 maxlen: 48
2001:df7:5280::/48 maxlen: 48
2001:df7:6980::/48 maxlen: 48
2403:a080::/32 maxlen: 38
2405:f140::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 14 Aug 2025 05:57:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 49175 (0xc017)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Validity
Not Before: Jul 11 07:37:26 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6870bf36-a035
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:3f:17:0b:0b:ca:66:40:39:74:75:8e:5d:89:
28:e7:77:02:c7:73:b7:c7:dd:23:30:f6:75:cc:56:
c0:de:c1:90:4a:73:48:62:40:6a:e0:c7:68:b9:0b:
68:40:4d:9c:94:33:6d:a4:c3:c6:86:80:bd:56:43:
2f:d2:05:04:f9:2d:48:66:66:66:58:76:5f:01:29:
1c:2b:6a:cb:a6:0e:ca:19:14:a1:94:4f:45:3f:89:
77:16:2f:32:76:89:39:28:13:d3:b7:80:31:fe:79:
2e:2e:6f:a7:7c:58:98:5d:10:bc:93:bf:07:9a:47:
f3:3a:b4:d5:d9:bd:e7:79:15:95:1d:1d:18:18:15:
94:d6:f1:04:7e:83:02:d6:ea:7d:1c:b6:b0:02:6d:
1d:58:11:c3:1b:c6:e4:38:d2:86:46:22:4b:1a:e0:
4c:d3:e1:08:6d:ab:c8:5f:a3:e9:c6:66:18:78:7f:
c7:c1:8a:09:cb:b0:15:41:99:ed:07:2c:35:5d:5b:
e0:26:9a:59:89:32:11:2b:b8:aa:1c:f7:5c:fe:66:
42:d7:2b:9b:d3:74:74:28:86:60:8d:e5:87:99:f1:
3a:ae:94:d8:6b:3d:91:e5:35:ae:0a:80:50:ed:3a:
23:35:ba:3f:d5:32:e9:de:17:ac:99:1a:0e:54:02:
6c:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:14:48:01:D8:44:F2:9B:55:E6:DF:82:F3:5E:34:D8:55:AF:42:38
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/AC4B36B4417311EE981FA66FC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
43.229.88.0/22
103.42.196.0/22
103.65.250.0/23
103.70.36.0/23
103.70.196.0/22
103.76.162.0/23
103.99.144.0/23
103.99.204.0/22
103.114.252.0/23
103.118.150.0/23
103.131.128.0/23
103.132.24.0/22
103.139.64.0/23
103.140.16.0/23
103.145.172.0/23
103.146.174.0/23
103.147.208.0/23
103.148.20.0/23
103.149.158.0/23
103.151.188.0/23
103.153.92.0/23
103.153.104.0/23
103.154.36.0/23
103.154.54.0/23
103.155.222.0/23
103.157.104.0/23
103.158.240.0/23
103.160.194.0/23
103.160.232.0/23
103.161.54.0/23
103.161.144.0/23
103.165.166.0/23
103.166.244.0/23
103.168.200.0/23
103.169.214.0/23
103.170.54.0/23
103.171.224.0/23
103.175.2.0/23
103.175.88.0/23
103.175.136.0/23
103.176.184.0/23
103.177.26.0/23
103.177.252.0/23
103.178.204.0/23
103.179.196.0/23
103.179.230.0/23
103.181.40.0/23
103.182.166.0/23
103.183.82.0/23
103.184.238.0/23
103.189.142.0/23
103.189.214.0/23
103.190.2.0/23
103.190.194.0/23
103.191.172.0/23
103.191.186.0/23
103.199.160.0/22
103.209.132.0/23
103.209.220.0/22
137.59.84.0/22
IPv6:
2001:df0:b240::/48
2001:df0:c640::/48
2001:df5:2380::/48
2001:df5:d380::/48
2001:df7:480::/48
2001:df7:d80::/48
2001:df7:1380::/48
2001:df7:4b80::/48
2001:df7:4d80::/48
2001:df7:4e80::/48
2001:df7:4f80::/48
2001:df7:5280::/48
2001:df7:6980::/48
2403:a080::/32
2405:f140::/32
Signature Algorithm: sha256WithRSAEncryption
73:0d:17:ff:4c:5f:12:c5:43:65:9e:36:2e:ee:85:03:c5:50:
c2:33:88:bb:b4:05:e0:5b:d5:96:26:6a:2f:24:bc:92:9f:60:
92:7d:6b:2a:74:22:d3:ae:3b:50:48:85:38:61:ec:f0:8b:0b:
6c:79:5b:89:80:00:8f:62:17:cb:9a:9c:89:73:c7:16:c4:a2:
1b:f7:64:39:31:98:1e:fd:a5:bf:92:3d:cd:a6:6f:e4:13:85:
31:97:07:22:cf:ca:c6:8b:45:e2:db:08:11:c2:1e:95:af:3b:
f5:f5:04:15:40:b4:0d:53:e8:66:bd:e0:cb:85:a3:0b:27:7c:
88:94:28:bd:af:19:30:3f:ab:23:f5:b5:d9:f3:c1:c2:b4:3f:
8b:fb:1f:98:c2:70:32:1f:da:9c:b3:bd:ee:20:38:a4:8c:3e:
21:f7:c7:c7:5a:73:72:0f:aa:a0:a5:55:e0:55:0f:2f:19:ae:
c7:de:ba:0a:65:8e:c3:24:35:d5:99:0f:64:87:cd:1e:37:08:
d9:ee:3b:25:eb:22:5c:79:0a:70:f4:e8:de:56:f3:4d:45:8f:
17:a7:bd:d6:c2:7b:c2:d3:b8:ef:27:7d:f2:4e:1f:a8:20:6b:
ef:48:6a:ff:32:4d:3a:a8:54:83:0d:40:75:e3:19:bb:21:28:
04:98:19:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 14:01:08 2025 by rpki-client