Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/CB9AACF63C6311F0AD13992DC4F9AE02.roa
File: CB9AACF63C6311F0AD13992DC4F9AE02.roa (raw, json)
Hash identifier: 20n89AXoAH+tAxV0RIFai2SW6sygNRhdcVIJrkkbdSA=
Subject key identifier: B5:24:81:20:5B:44:C0:94:EB:1C:43:1E:41:E3:B2:61:CD:3D:F1:BC
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: BDE7
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/CB9AACF63C6311F0AD13992DC4F9AE02.roa
Signing time: Wed 11 Jun 2025 10:08:51 +0000
ROA not before: Wed 11 Jun 2025 10:08:51 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 58965
IP address blocks: 43.225.192.0/22 maxlen: 24
103.74.144.0/22 maxlen: 24
103.77.40.0/22 maxlen: 24
103.83.144.0/22 maxlen: 24
103.125.128.0/22 maxlen: 22
103.125.128.0/24 maxlen: 24
103.125.129.0/24 maxlen: 24
103.125.130.0/24 maxlen: 24
103.125.131.0/24 maxlen: 24
103.141.90.0/24 maxlen: 24
103.161.198.0/24 maxlen: 24
103.163.144.0/23 maxlen: 24
103.164.46.0/24 maxlen: 24
103.164.47.0/24 maxlen: 24
103.165.28.0/23 maxlen: 24
103.180.42.0/23 maxlen: 24
103.188.126.0/24 maxlen: 24
103.233.116.0/22 maxlen: 24
103.243.7.0/24 maxlen: 24
103.254.204.0/23 maxlen: 24
2001:df0:4940::/48 maxlen: 48
2001:df1:5640::/48 maxlen: 48
2001:df3:69c0::/48 maxlen: 48
2001:df3:cac0::/48 maxlen: 48
2001:df7:2b00::/48 maxlen: 48
2407:45c0::/32 maxlen: 32
2407:45c0:8000::/33 maxlen: 33
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 21 Jun 2025 15:21:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 48615 (0xbde7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Validity
Not Before: Jun 11 10:08:51 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=684955b3-b887
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:2c:03:da:60:46:6b:b3:95:d4:1c:75:cd:03:
9e:57:9c:b5:f3:c1:d9:dd:59:bd:42:cb:63:3e:b9:
80:3f:da:e0:a8:00:1d:4f:ae:7d:8a:b0:cd:2d:71:
63:30:9a:fd:c2:17:d0:b9:ef:50:71:4a:b1:35:c3:
0f:29:aa:8a:53:83:8f:4e:86:ac:04:21:22:0c:0c:
9f:d0:a4:05:56:ce:9d:ab:aa:bf:2f:c3:f1:b2:c1:
8b:2c:4b:b4:b8:3b:42:a0:60:97:2c:a4:b2:38:aa:
59:3d:92:92:36:8a:25:ed:74:05:3b:76:82:23:d1:
42:f3:61:e4:19:2b:96:1d:75:34:c9:3b:09:47:1f:
4c:1b:2a:fd:94:63:8b:58:ca:4e:31:5a:62:cc:08:
76:b3:54:ac:7b:d5:af:6c:86:90:06:c3:f1:ef:8c:
46:ad:8f:68:71:63:7e:d1:96:30:43:82:66:1f:04:
26:22:8c:75:ed:74:d7:56:84:74:14:b0:78:18:85:
89:ff:ee:84:8c:52:d7:71:46:26:46:e8:3e:61:42:
29:31:4a:c0:56:a6:c0:9f:2d:17:a4:ac:88:8a:5d:
a5:e2:6e:39:9e:50:90:e6:3e:83:0a:b8:92:34:30:
be:59:fe:98:77:81:20:3c:98:0d:23:a7:fe:36:51:
36:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:24:81:20:5B:44:C0:94:EB:1C:43:1E:41:E3:B2:61:CD:3D:F1:BC
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/CB9AACF63C6311F0AD13992DC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
43.225.192.0/22
103.74.144.0/22
103.77.40.0/22
103.83.144.0/22
103.125.128.0/22
103.141.90.0/24
103.161.198.0/24
103.163.144.0/23
103.164.46.0/23
103.165.28.0/23
103.180.42.0/23
103.188.126.0/24
103.233.116.0/22
103.243.7.0/24
103.254.204.0/23
IPv6:
2001:df0:4940::/48
2001:df1:5640::/48
2001:df3:69c0::/48
2001:df3:cac0::/48
2001:df7:2b00::/48
2407:45c0::/32
Signature Algorithm: sha256WithRSAEncryption
8f:d9:27:cc:de:1a:1f:f3:a5:ef:96:1b:95:50:7a:6e:62:41:
6e:b9:b8:33:b5:b0:69:fc:1b:ed:90:f9:34:c7:67:6c:e8:d9:
36:7d:42:53:9a:c8:43:fb:de:ff:07:c7:3d:a0:92:c9:f2:48:
d6:7a:af:3f:ee:5f:18:7e:c2:39:78:0b:4e:bb:05:7b:1d:ba:
8e:35:29:19:8f:e4:df:c3:53:a6:6a:8f:f8:42:1e:b8:a3:0e:
e3:bd:9b:48:9e:fb:08:e7:a7:fc:03:2a:18:aa:4e:d1:86:16:
6f:18:95:d2:f0:00:3d:70:ca:d8:40:a8:0b:34:7d:5c:d3:1a:
0a:06:9d:4c:2c:11:07:63:e2:a5:52:f8:85:69:e2:cb:65:8e:
13:90:ae:f6:3b:39:33:c7:70:da:10:6b:20:e3:e7:f6:12:a5:
68:a6:c2:5c:fa:c4:99:05:57:5a:12:07:c7:5d:e1:b5:00:7e:
b8:e9:20:6c:7f:a8:28:63:62:fc:7a:4f:a6:b7:37:51:71:7c:
bc:2e:86:0b:f2:43:63:0b:e0:67:42:63:22:4e:8a:65:7a:86:
e6:37:2d:fe:80:70:26:9e:4d:33:85:98:21:ad:65:61:71:f3:
97:d6:7c:08:c0:6b:92:56:c3:08:24:28:f3:3d:2e:48:70:ef:
3d:db:8f:f9
-----BEGIN CERTIFICATE-----
MIIGBTCCBO2gAwIBAgIDAL3nMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5
MThFREIyMTEwLwYDVQQFEygyOTZFREI2NEYzQUY2RTlEOTgwOTMyRTgxNkY5NTk4
M0UzQUJDODIzMB4XDTI1MDYxMTEwMDg1MVoXDTI2MDcwMTAwMDAwMFowGDEWMBQG
A1UEAxMNNjg0OTU1YjMtYjg4NzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAKQsA9pgRmuzldQcdc0DnlectfPB2d1ZvULLYz65gD/a4KgAHU+ufYqwzS1x
YzCa/cIX0LnvUHFKsTXDDymqilODj06GrAQhIgwMn9CkBVbOnauqvy/D8bLBiyxL
tLg7QqBglyyksjiqWT2SkjaKJe10BTt2giPRQvNh5Bkrlh11NMk7CUcfTBsq/ZRj
i1jKTjFaYswIdrNUrHvVr2yGkAbD8e+MRq2PaHFjftGWMEOCZh8EJiKMde1011aE
dBSweBiFif/uhIxS13FGJkboPmFCKTFKwFamwJ8tF6SsiIpdpeJuOZ5QkOY+gwq4
kjQwvln+mHeBIDyYDSOn/jZRNoMCAwEAAaOCAygwggMkMB0GA1UdDgQWBBS1JIEg
W0TAlOscQx5B47JhzT3xvDAfBgNVHSMEGDAWgBQpbttk869unZgJMugW+VmD46vI
IzAOBgNVHQ8BAf8EBAMCB4AwgYMGA1UdHwR8MHoweKB2oHSGcnJzeW5jOi8vcnBr
aS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkxOEVEQjIvMkE0M0UzMEM3
MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvS1c3YlpQT3ZicDJZQ1RMb0Z2bFpnLU9y
eUNNLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr
aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3
MkZEMUZGMi9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5Q00uY2VyMEoGA1UdIAEB
/wRAMD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBu
aWMubmV0L1JQS0kvQ1BTLnBkZjCBywYIKwYBBQUHAQsEgb4wgbswgYMGCCsGAQUF
BzALhndyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MThFREIyLzJBNDNFMzBDNzBFOTExRTJCMzZENEI2QjI5NzlCQjIwL0NCOUFBQ0Y2
M0M2MzExRjBBRDEzOTkyREM0RjlBRTAyLnJvYTAzBggrBgEFBQcwDYYnaHR0cHM6
Ly9ycmRwLmFwbmljLm5ldC9ub3RpZmljYXRpb24ueG1sMIGxBggrBgEFBQcBBwEB
/wSBoTCBnjBgBAIAATBaAwQCK+HAAwQCZ0qQAwQCZ00oAwQCZ1OQAwQCZ32AAwQA
Z41aAwQAZ6HGAwQBZ6OQAwQBZ6QuAwQBZ6UcAwQBZ7QqAwQAZ7x+AwQCZ+l0AwQA
Z/MHAwQBZ/7MMDoEAgACMDQDBwAgAQ3wSUADBwAgAQ3xVkADBwAgAQ3zacADBwAg
AQ3zysADBwAgAQ33KwADBQAkB0XAMA0GCSqGSIb3DQEBCwUAA4IBAQCP2SfM3hof
86XvlhuVUHpuYkFuubgztbBp/BvtkPk0x2ds6Nk2fUJTmshD+97/B8c9oJLJ8kjW
eq8/7l8YfsI5eAtOuwV7HbqONSkZj+Tfw1Omao/4Qh64ow7jvZtInvsI56f8AyoY
qk7RhhZvGJXS8AA9cMrYQKgLNH1c0xoKBp1MLBEHY+KlUviFaeLLZY4TkK72Ozkz
x3DaEGsg4+f2EqVopsJc+sSZBVdaEgfHXeG1AH646SBsf6goY2L8ek+mtzdRcXy8
LoYL8kNjC+BnQmMiTopleobmNy3+gHAmnk0zhZghrWVhcfOX1nwIwGuSVsMIJCjz
PS5IcO8924/5
-----END CERTIFICATE-----
Generated at Sun Jun 15 07:05:29 2025 by rpki-client