Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/C80DBE965B1E11F0BD1B357AC4F9AE02.roa
File: C80DBE965B1E11F0BD1B357AC4F9AE02.roa (raw, json)
Hash identifier: YLFwbZ2Za557PNG4vwhGzHHT4HbRQtEdpK2er84scz4=
Subject key identifier: A3:04:C0:AC:DA:A9:36:DF:9E:C4:A7:67:0C:64:9D:48:63:5D:D5:5E
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: C1F0
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/C80DBE965B1E11F0BD1B357AC4F9AE02.roa
Signing time: Wed 06 Aug 2025 12:53:15 +0000
ROA not before: Wed 06 Aug 2025 12:53:15 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 150008
IP address blocks: 14.192.0.0/22 maxlen: 24
36.50.124.0/23 maxlen: 24
43.225.24.0/24 maxlen: 24
43.225.25.0/24 maxlen: 24
43.225.26.0/24 maxlen: 24
43.225.27.0/24 maxlen: 24
43.228.92.0/22 maxlen: 24
43.249.224.0/22 maxlen: 24
45.112.28.0/22 maxlen: 24
45.112.48.0/24 maxlen: 24
45.112.49.0/24 maxlen: 24
45.112.50.0/24 maxlen: 24
45.112.51.0/24 maxlen: 24
45.127.56.0/22 maxlen: 24
45.249.76.0/24 maxlen: 24
45.249.77.0/24 maxlen: 24
45.249.78.0/24 maxlen: 24
45.249.79.0/24 maxlen: 24
103.12.116.0/24 maxlen: 24
103.24.124.0/24 maxlen: 24
103.24.125.0/24 maxlen: 24
103.24.126.0/24 maxlen: 24
103.24.127.0/24 maxlen: 24
103.41.96.0/22 maxlen: 24
103.42.200.0/24 maxlen: 24
103.42.201.0/24 maxlen: 24
103.44.0.0/24 maxlen: 24
103.44.1.0/24 maxlen: 24
103.44.2.0/24 maxlen: 24
103.59.184.0/24 maxlen: 24
103.59.186.0/24 maxlen: 24
103.69.28.0/23 maxlen: 24
103.70.129.0/24 maxlen: 24
103.70.130.0/24 maxlen: 24
103.95.173.0/24 maxlen: 24
103.99.108.0/24 maxlen: 24
103.99.109.0/24 maxlen: 24
103.99.110.0/24 maxlen: 24
103.99.111.0/24 maxlen: 24
103.102.18.0/23 maxlen: 24
103.105.101.0/24 maxlen: 24
103.105.103.0/24 maxlen: 24
103.117.36.0/23 maxlen: 24
103.122.61.0/24 maxlen: 24
103.154.206.0/24 maxlen: 24
103.157.12.0/23 maxlen: 24
103.159.250.0/23 maxlen: 24
103.161.243.0/24 maxlen: 24
103.162.128.0/23 maxlen: 24
103.164.200.0/23 maxlen: 24
103.168.82.0/23 maxlen: 24
103.171.190.0/24 maxlen: 24
103.171.191.0/24 maxlen: 24
103.172.202.0/23 maxlen: 24
103.174.80.0/23 maxlen: 24
103.174.160.0/23 maxlen: 24
103.182.117.0/24 maxlen: 24
103.183.202.0/24 maxlen: 24
103.183.203.0/24 maxlen: 24
103.186.254.0/23 maxlen: 24
103.204.35.0/24 maxlen: 24
103.206.104.0/22 maxlen: 24
103.213.202.0/23 maxlen: 24
103.217.236.0/24 maxlen: 24
103.217.237.0/24 maxlen: 24
103.217.238.0/24 maxlen: 24
103.217.239.0/24 maxlen: 24
103.220.234.0/23 maxlen: 24
103.233.73.0/24 maxlen: 24
103.236.193.0/24 maxlen: 24
103.239.36.0/24 maxlen: 24
103.239.37.0/24 maxlen: 24
103.239.38.0/24 maxlen: 24
103.239.39.0/24 maxlen: 24
103.248.208.0/22 maxlen: 24
103.252.144.0/22 maxlen: 24
103.255.144.0/22 maxlen: 24
106.0.36.0/23 maxlen: 24
182.18.177.0/24 maxlen: 24
202.65.129.0/24 maxlen: 24
202.65.130.0/24 maxlen: 24
202.65.133.0/24 maxlen: 24
202.65.134.0/24 maxlen: 24
202.65.138.0/24 maxlen: 24
202.65.142.0/24 maxlen: 24
202.65.144.0/24 maxlen: 24
202.65.147.0/24 maxlen: 24
202.65.148.0/24 maxlen: 24
202.65.154.0/24 maxlen: 24
202.65.155.0/24 maxlen: 24
202.65.158.0/24 maxlen: 24
202.65.159.0/24 maxlen: 24
2001:df7:bd80::/48 maxlen: 48
2001:df7:cb80::/48 maxlen: 48
2400:3b01::/32 maxlen: 40
2400:3b01::/48 maxlen: 48
2400:3b01:5::/48 maxlen: 48
2400:3b01:6::/48 maxlen: 48
2400:3b01:7::/48 maxlen: 48
2400:3b01:8::/48 maxlen: 48
2400:3b01:9::/48 maxlen: 48
2400:3b01:a::/48 maxlen: 48
2400:3b01:b::/48 maxlen: 48
2400:3b01:c::/48 maxlen: 48
2400:3b01:d::/48 maxlen: 48
2400:3b01:e::/48 maxlen: 48
2400:3b01:f::/48 maxlen: 48
2400:3b01:10::/48 maxlen: 48
2400:3b01:11::/48 maxlen: 48
2400:3b01:12::/48 maxlen: 48
2400:3b01:13::/48 maxlen: 48
2400:3b01:14::/48 maxlen: 48
2400:3b01:15::/48 maxlen: 48
2400:3b01:16::/48 maxlen: 48
2400:3b01:17::/48 maxlen: 48
2400:3b01:18::/48 maxlen: 48
2400:3b01:19::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 14 Aug 2025 05:57:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 49648 (0xc1f0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Validity
Not Before: Aug 6 12:53:15 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6893503b-85ce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:73:3d:88:cf:a6:22:9c:b7:03:9d:22:64:d6:
a4:e7:bb:94:9c:15:ea:12:4d:10:cc:6d:9d:f0:d8:
71:e7:d3:c6:5a:81:fa:a4:57:65:ab:08:8b:84:73:
24:f4:f0:22:fe:ca:c2:52:21:c7:32:3d:56:b7:9a:
31:7f:b3:01:50:a9:55:5b:8f:fe:b6:01:d4:ec:0e:
2b:cf:3a:70:27:51:3a:11:b2:55:e9:17:b3:ee:18:
75:90:ac:56:58:d0:2a:5f:f5:c6:ba:b4:b2:5f:29:
fa:32:3e:1e:6c:3f:29:22:22:a6:ca:f4:89:97:0d:
c7:b7:36:c8:4a:65:c4:ab:50:de:0f:4d:50:46:c8:
f6:ba:55:3d:7f:49:94:8e:d6:17:7c:75:14:b1:79:
c0:06:3d:ae:c9:51:f4:9d:07:53:e1:fe:9e:86:34:
d0:41:2c:9d:33:c1:2e:63:b4:90:90:91:69:17:e9:
a3:c3:29:48:a8:e7:76:d0:8e:c9:96:59:85:22:98:
ea:89:d4:54:7a:d7:f8:04:ee:36:91:e3:fb:0f:bd:
56:79:5b:d2:7e:a1:a8:15:13:ed:9d:8a:16:82:a1:
d8:e8:a0:dc:17:a1:19:e2:ae:e0:d5:7c:ca:d8:94:
e3:7c:85:c8:aa:90:a5:03:88:71:5b:8c:84:75:3f:
44:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:04:C0:AC:DA:A9:36:DF:9E:C4:A7:67:0C:64:9D:48:63:5D:D5:5E
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/C80DBE965B1E11F0BD1B357AC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
14.192.0.0/22
36.50.124.0/23
43.225.24.0/22
43.228.92.0/22
43.249.224.0/22
45.112.28.0/22
45.112.48.0/22
45.127.56.0/22
45.249.76.0/22
103.12.116.0/24
103.24.124.0/22
103.41.96.0/22
103.42.200.0/23
103.44.0.0-103.44.2.255
103.59.184.0/24
103.59.186.0/24
103.69.28.0/23
103.70.129.0-103.70.130.255
103.95.173.0/24
103.99.108.0/22
103.102.18.0/23
103.105.101.0/24
103.105.103.0/24
103.117.36.0/23
103.122.61.0/24
103.154.206.0/24
103.157.12.0/23
103.159.250.0/23
103.161.243.0/24
103.162.128.0/23
103.164.200.0/23
103.168.82.0/23
103.171.190.0/23
103.172.202.0/23
103.174.80.0/23
103.174.160.0/23
103.182.117.0/24
103.183.202.0/23
103.186.254.0/23
103.204.35.0/24
103.206.104.0/22
103.213.202.0/23
103.217.236.0/22
103.220.234.0/23
103.233.73.0/24
103.236.193.0/24
103.239.36.0/22
103.248.208.0/22
103.252.144.0/22
103.255.144.0/22
106.0.36.0/23
182.18.177.0/24
202.65.129.0-202.65.130.255
202.65.133.0-202.65.134.255
202.65.138.0/24
202.65.142.0/24
202.65.144.0/24
202.65.147.0-202.65.148.255
202.65.154.0/23
202.65.158.0/23
IPv6:
2001:df7:bd80::/48
2001:df7:cb80::/48
2400:3b01::/32
Signature Algorithm: sha256WithRSAEncryption
66:a9:2b:ed:df:da:ac:43:8b:ab:0b:0f:1d:29:04:aa:a2:00:
d3:5f:70:da:0b:9d:59:8e:af:29:c8:8b:12:25:75:20:6b:66:
86:36:c9:b1:54:ac:02:7f:dc:53:87:ab:14:df:51:f8:e3:62:
22:12:52:59:e9:27:0e:14:ba:3e:e7:ab:0b:71:25:b2:01:e8:
b7:76:10:81:e3:74:31:05:68:28:66:19:b7:42:56:be:ad:41:
ef:a8:6f:4c:ea:ef:12:03:72:98:ab:2f:b7:c9:6a:0e:b9:5f:
79:e4:12:c1:ef:19:18:7a:ea:88:27:66:2a:f9:8e:c3:4b:63:
98:a7:f9:ec:4f:87:94:3f:82:dd:7f:3f:2e:60:80:7c:54:60:
ca:65:31:12:70:a7:d3:7e:c4:23:95:a4:60:d0:aa:8d:84:dd:
8a:68:b9:8c:ef:47:ca:63:c8:c0:03:c1:eb:cf:1e:57:7e:29:
ba:4f:51:59:d1:47:42:bb:a5:65:19:7d:4e:98:30:8f:56:43:
e7:15:f2:f1:be:60:e9:e6:3f:43:4c:8e:51:05:40:45:ba:98:
82:43:a6:48:87:8d:90:1f:05:cd:b9:b0:ce:36:2a:45:43:cc:
f1:e8:5a:12:b4:6c:69:3a:c7:dd:79:0c:f3:72:57:14:fa:8e:
21:ee:9f:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 05:37:02 2025 by rpki-client