Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/E962FF70204011F09DB6AC7CC4F9AE02.roa
File: E962FF70204011F09DB6AC7CC4F9AE02.roa (raw, json)
Hash identifier: mdwc7DQk8f8Eek68bk4yIEvIZa5T+RJraC8VB6hErXk=
Subject key identifier: 1A:49:D9:53:56:92:D4:43:61:41:68:88:DB:EC:22:D1:A5:5D:C5:29
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: AF7D
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/E962FF70204011F09DB6AC7CC4F9AE02.roa
Signing time: Wed 23 Apr 2025 12:46:02 +0000
ROA not before: Wed 23 Apr 2025 12:46:02 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 133001
IP address blocks: 43.225.160.0/22 maxlen: 24
43.251.216.0/22 maxlen: 24
45.117.220.0/22 maxlen: 24
45.119.44.0/22 maxlen: 22
45.119.44.0/24 maxlen: 24
45.119.45.0/24 maxlen: 24
45.119.46.0/24 maxlen: 24
45.119.47.0/24 maxlen: 24
103.38.36.0/22 maxlen: 24
103.42.166.0/23 maxlen: 24
103.51.132.0/24 maxlen: 24
103.51.133.0/24 maxlen: 24
103.51.134.0/24 maxlen: 24
103.51.135.0/24 maxlen: 24
103.54.76.0/24 maxlen: 24
103.54.77.0/24 maxlen: 24
103.56.227.0/24 maxlen: 24
103.110.102.0/24 maxlen: 24
103.114.0.0/22 maxlen: 23
103.114.2.0/23 maxlen: 24
103.116.147.0/24 maxlen: 24
103.116.238.0/24 maxlen: 24
103.116.239.0/24 maxlen: 24
103.140.26.0/24 maxlen: 24
103.140.27.0/24 maxlen: 24
103.165.68.0/24 maxlen: 24
103.165.69.0/24 maxlen: 24
103.176.74.0/23 maxlen: 24
103.176.211.0/24 maxlen: 24
103.196.76.0/22 maxlen: 24
103.200.74.0/23 maxlen: 23
103.201.148.0/22 maxlen: 24
103.239.168.0/24 maxlen: 24
103.239.169.0/24 maxlen: 24
103.239.170.0/24 maxlen: 24
103.239.171.0/24 maxlen: 24
111.125.225.0/24 maxlen: 24
183.87.251.0/24 maxlen: 24
183.87.252.0/22 maxlen: 24
202.94.160.0/22 maxlen: 24
2401:b240::/32 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 03 May 2025 03:41:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 44925 (0xaf7d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Validity
Not Before: Apr 23 12:46:02 2025 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6808e109-3c0c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:50:a4:46:30:23:15:23:7c:98:16:91:c3:c6:
fc:0d:f1:62:88:d9:de:17:8e:09:5d:51:ce:f0:cc:
2e:d4:be:16:df:5b:be:1d:31:49:a2:14:db:28:62:
08:c9:b2:69:2c:39:55:39:e6:95:57:e2:bc:6e:cf:
c4:fe:94:a0:50:0f:de:7a:3b:09:fb:bd:84:9d:83:
38:4b:b8:e9:32:f3:a1:5f:26:81:42:ce:0b:e8:c4:
0c:a7:13:38:2a:e8:7a:59:b0:2d:a0:57:2e:7d:70:
af:f5:16:19:46:13:21:77:80:a4:9e:56:ab:e6:fc:
48:32:82:dd:a4:8b:0a:3c:f5:b4:1b:e1:c0:36:5e:
b9:0e:15:6f:45:1d:26:a3:07:98:1a:eb:53:10:b3:
3b:23:a9:d5:77:11:01:82:45:4c:10:aa:0c:e9:27:
b9:8e:ee:07:25:ad:f8:18:ca:62:b5:89:ee:ed:24:
b0:34:6d:b7:0e:7d:07:69:d5:2b:da:56:49:ec:82:
c6:de:2d:ac:33:6d:e5:09:6d:5c:9d:31:33:a8:1c:
02:7e:66:19:a2:51:c2:a0:d2:af:ff:a1:de:47:82:
3c:92:e7:41:f5:d8:08:b1:54:e5:2c:30:01:09:79:
cd:5e:18:01:b9:77:66:4b:c3:4f:d8:cb:b2:1e:2f:
02:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:49:D9:53:56:92:D4:43:61:41:68:88:DB:EC:22:D1:A5:5D:C5:29
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/E962FF70204011F09DB6AC7CC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
43.225.160.0/22
43.251.216.0/22
45.117.220.0/22
45.119.44.0/22
103.38.36.0/22
103.42.166.0/23
103.51.132.0/22
103.54.76.0/23
103.56.227.0/24
103.110.102.0/24
103.114.0.0/22
103.116.147.0/24
103.116.238.0/23
103.140.26.0/23
103.165.68.0/23
103.176.74.0/23
103.176.211.0/24
103.196.76.0/22
103.200.74.0/23
103.201.148.0/22
103.239.168.0/22
111.125.225.0/24
183.87.251.0-183.87.255.255
202.94.160.0/22
IPv6:
2401:b240::/32
Signature Algorithm: sha256WithRSAEncryption
43:a6:ed:48:92:7e:f8:8f:1f:5f:30:f7:cc:63:02:19:a5:fc:
b8:d8:8b:4f:66:92:43:a0:b5:b7:dc:d7:a3:7a:27:e4:b9:58:
0d:fc:d5:db:b7:5c:9a:b0:db:ef:7c:a9:10:b2:45:8c:7e:49:
7f:37:52:fa:0f:8d:4a:bc:63:74:d6:67:c3:f4:94:67:63:b2:
c1:36:3e:2c:9a:2a:65:fb:d9:89:8b:9a:a4:4e:52:b0:55:7d:
f9:83:c2:7e:08:32:f0:8e:81:89:bd:c2:75:0a:0d:5f:a4:fb:
85:9f:29:f0:e9:81:f2:09:46:fa:aa:19:ac:f4:5a:f1:69:4d:
6f:2e:30:03:47:a4:bf:df:3a:e1:ce:d0:66:d1:59:0b:12:ac:
03:7e:10:f1:fd:74:dc:8b:16:ee:3a:3b:74:35:cb:74:ca:cd:
12:2e:03:28:b8:dd:c3:25:69:a9:c7:2e:79:2a:d9:bb:f6:c5:
97:94:b6:8f:59:4d:06:68:eb:8d:d6:70:fc:db:a6:aa:7f:63:
3b:ed:55:83:d7:fe:43:40:5b:56:ec:74:41:c3:cc:9a:e6:72:
f1:2b:bf:25:46:68:30:da:8f:f2:90:2c:78:18:f1:95:d0:75:
0a:d6:4d:7f:d1:25:40:c6:47:bc:98:34:12:a1:c7:f6:f6:48:
06:9e:cc:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 16:38:03 2025 by rpki-client