Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/E9DBE7221E8411F0A85F5565C4F9AE02.roa
File: E9DBE7221E8411F0A85F5565C4F9AE02.roa (raw, json)
Hash identifier: WpAGE2nftQ0py4UDNtAWRnHMuR9WIj4HvlP9kw1VjFM=
Subject key identifier: CA:03:91:E8:4D:60:1B:6B:03:EF:3C:38:1E:C6:49:F9:38:8C:67:1A
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: AEF8
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/E9DBE7221E8411F0A85F5565C4F9AE02.roa
Signing time: Mon 21 Apr 2025 07:47:46 +0000
ROA not before: Mon 21 Apr 2025 07:47:46 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 132770
IP address blocks: 43.227.20.0/22 maxlen: 24
43.228.72.0/22 maxlen: 24
43.241.24.0/22 maxlen: 24
45.119.57.0/24 maxlen: 24
45.119.58.0/24 maxlen: 24
45.119.59.0/24 maxlen: 24
45.252.72.0/22 maxlen: 24
103.59.104.0/24 maxlen: 24
103.81.36.0/22 maxlen: 24
103.93.240.0/24 maxlen: 24
103.93.241.0/24 maxlen: 24
103.93.242.0/24 maxlen: 24
103.93.243.0/24 maxlen: 24
103.94.56.0/22 maxlen: 23
103.94.57.0/24 maxlen: 24
103.94.59.0/24 maxlen: 24
103.126.68.0/22 maxlen: 24
103.184.86.0/24 maxlen: 24
103.184.87.0/24 maxlen: 24
103.204.36.0/22 maxlen: 24
103.211.60.0/24 maxlen: 24
103.211.61.0/24 maxlen: 24
103.211.62.0/24 maxlen: 24
103.211.63.0/24 maxlen: 24
103.221.72.0/22 maxlen: 24
103.239.84.0/22 maxlen: 24
103.241.80.0/22 maxlen: 24
103.243.112.0/22 maxlen: 24
103.249.240.0/22 maxlen: 24
103.251.208.0/22 maxlen: 24
103.254.52.0/22 maxlen: 24
150.129.128.0/22 maxlen: 24
150.129.156.0/22 maxlen: 24
163.53.200.0/22 maxlen: 24
202.136.68.0/22 maxlen: 24
2404:4980::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 03 May 2025 02:50:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 44792 (0xaef8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Validity
Not Before: Apr 21 07:47:46 2025 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6805f821-132a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:19:fa:82:db:16:82:5f:e8:22:88:76:d8:f9:
63:59:60:bc:48:0a:35:9b:54:14:30:5e:0e:71:2b:
f8:4c:d8:47:2a:ed:f0:7e:61:ca:35:ee:30:9b:2a:
96:5f:76:75:1d:e8:3c:51:df:e6:a5:a6:7f:67:bc:
18:1a:f4:14:b7:a7:91:dc:f6:63:f1:fa:61:38:54:
ab:95:bf:b0:bf:8a:d0:9f:03:42:fb:66:53:a4:15:
f9:79:a7:12:88:bb:bf:c0:89:d8:60:f4:68:ee:a5:
c3:d6:05:cc:f9:e8:2d:7a:3f:ca:19:6b:72:03:eb:
d9:f4:ff:76:04:58:81:9c:fe:91:28:75:34:cc:a6:
7b:01:bb:36:67:10:0f:89:b1:9c:a1:e0:0d:c5:b0:
46:0d:d3:6c:b7:0d:37:65:c7:c6:8f:16:4a:96:ad:
ed:95:04:c8:1b:7f:cd:79:55:e4:13:0a:8c:01:74:
b6:08:b0:95:40:58:99:50:e4:c9:7a:67:c5:3b:77:
ed:86:07:13:73:67:5a:0d:3b:f4:cb:5a:4a:52:fc:
63:09:c3:69:1d:9e:e0:76:f9:47:e7:47:95:82:72:
5c:92:04:4d:d5:e2:81:57:d9:a7:5f:33:b7:eb:8e:
ef:dd:2b:fc:b7:cb:82:5a:bc:9d:97:7c:51:6f:32:
c8:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:03:91:E8:4D:60:1B:6B:03:EF:3C:38:1E:C6:49:F9:38:8C:67:1A
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/E9DBE7221E8411F0A85F5565C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
43.227.20.0/22
43.228.72.0/22
43.241.24.0/22
45.119.57.0-45.119.59.255
45.252.72.0/22
103.59.104.0/24
103.81.36.0/22
103.93.240.0/22
103.94.56.0/22
103.126.68.0/22
103.184.86.0/23
103.204.36.0/22
103.211.60.0/22
103.221.72.0/22
103.239.84.0/22
103.241.80.0/22
103.243.112.0/22
103.249.240.0/22
103.251.208.0/22
103.254.52.0/22
150.129.128.0/22
150.129.156.0/22
163.53.200.0/22
202.136.68.0/22
IPv6:
2404:4980::/32
Signature Algorithm: sha256WithRSAEncryption
47:8c:f7:41:23:da:33:63:e3:6c:92:c0:9a:68:89:5f:77:1a:
76:ee:40:30:57:1f:6c:48:54:d9:75:0e:a6:ba:47:e4:c3:70:
91:5a:a8:00:f3:f4:d2:de:41:b7:cb:62:58:91:47:e1:cd:01:
2a:5b:65:aa:87:cf:cb:a1:5f:68:fd:ed:32:12:c4:74:f8:b2:
fd:89:49:fa:42:40:91:fe:dd:36:61:20:6e:fd:88:24:35:49:
70:52:d5:df:cf:5b:32:30:03:8e:8f:d6:98:7c:42:fd:d6:85:
3e:82:42:dc:19:0b:8e:6e:bc:d6:bc:50:fc:44:26:d5:e3:78:
9a:16:5c:10:6d:76:01:98:75:ef:12:eb:ce:70:97:bc:ca:ca:
20:74:e0:9b:10:c3:30:db:55:20:c2:24:5e:15:9b:27:34:49:
5c:63:f4:6a:13:96:25:bb:5c:bb:96:c6:74:f7:32:ef:18:44:
05:7b:b7:c2:45:a6:4d:ff:f9:5a:45:27:2d:d3:6b:0b:d2:ec:
94:da:88:85:b5:56:dc:c9:11:5f:51:9f:a4:71:ad:0e:66:77:
3b:bf:d6:19:3f:63:18:d7:d3:b1:80:22:ac:e9:5a:28:8c:d7:
28:c6:17:b9:a6:1f:0f:12:ae:53:43:b0:75:f6:c9:45:c9:ec:
1e:aa:f0:19
-----BEGIN CERTIFICATE-----
MIIGGDCCBQCgAwIBAgIDAK74MA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5
MThFREIyMTEwLwYDVQQFEygyOTZFREI2NEYzQUY2RTlEOTgwOTMyRTgxNkY5NTk4
M0UzQUJDODIzMB4XDTI1MDQyMTA3NDc0NloXDTI1MDcwMTAwMDAwMFowGDEWMBQG
A1UEAxMNNjgwNWY4MjEtMTMyYTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBANAZ+oLbFoJf6CKIdtj5Y1lgvEgKNZtUFDBeDnEr+EzYRyrt8H5hyjXuMJsq
ll92dR3oPFHf5qWmf2e8GBr0FLenkdz2Y/H6YThUq5W/sL+K0J8DQvtmU6QV+Xmn
Eoi7v8CJ2GD0aO6lw9YFzPnoLXo/yhlrcgPr2fT/dgRYgZz+kSh1NMymewG7NmcQ
D4mxnKHgDcWwRg3TbLcNN2XHxo8WSpat7ZUEyBt/zXlV5BMKjAF0tgiwlUBYmVDk
yXpnxTt37YYHE3NnWg079MtaSlL8YwnDaR2e4Hb5R+dHlYJyXJIETdXigVfZp18z
t+uO790r/LfLglq8nZd8UW8yyC0CAwEAAaOCAzswggM3MB0GA1UdDgQWBBTKA5Ho
TWAbawPvPDgexkn5OIxnGjAfBgNVHSMEGDAWgBQpbttk869unZgJMugW+VmD46vI
IzAOBgNVHQ8BAf8EBAMCB4AwgYMGA1UdHwR8MHoweKB2oHSGcnJzeW5jOi8vcnBr
aS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkxOEVEQjIvMkE0M0UzMEM3
MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvS1c3YlpQT3ZicDJZQ1RMb0Z2bFpnLU9y
eUNNLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr
aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3
MkZEMUZGMi9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5Q00uY2VyMEoGA1UdIAEB
/wRAMD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBu
aWMubmV0L1JQS0kvQ1BTLnBkZjCBywYIKwYBBQUHAQsEgb4wgbswgYMGCCsGAQUF
BzALhndyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MThFREIyLzJBNDNFMzBDNzBFOTExRTJCMzZENEI2QjI5NzlCQjIwL0U5REJFNzIy
MUU4NDExRjBBODVGNTU2NUM0RjlBRTAyLnJvYTAzBggrBgEFBQcwDYYnaHR0cHM6
Ly9ycmRwLmFwbmljLm5ldC9ub3RpZmljYXRpb24ueG1sMIHEBggrBgEFBQcBBwEB
/wSBtDCBsTCBnwQCAAEwgZgDBAIr4xQDBAIr5EgDBAIr8RgwDAMEAC13OQMEAi13
OAMEAi38SAMEAGc7aAMEAmdRJAMEAmdd8AMEAmdeOAMEAmd+RAMEAWe4VgMEAmfM
JAMEAmfTPAMEAmfdSAMEAmfvVAMEAmfxUAMEAmfzcAMEAmf58AMEAmf70AMEAmf+
NAMEApaBgAMEApaBnAMEAqM1yAMEAsqIRDANBAIAAjAHAwUAJARJgDANBgkqhkiG
9w0BAQsFAAOCAQEAR4z3QSPaM2PjbJLAmmiJX3cadu5AMFcfbEhU2XUOprpH5MNw
kVqoAPP00t5Bt8tiWJFH4c0BKltlqofPy6FfaP3tMhLEdPiy/YlJ+kJAkf7dNmEg
bv2IJDVJcFLV389bMjADjo/WmHxC/daFPoJC3BkLjm681rxQ/EQm1eN4mhZcEG12
AZh17xLrznCXvMrKIHTgmxDDMNtVIMIkXhWbJzRJXGP0ahOWJbtcu5bGdPcy7xhE
BXu3wkWmTf/5WkUnLdNrC9LslNqIhbVW3MkRX1GfpHGtDmZ3O7/WGT9jGNfTsYAi
rOlaKIzXKMYXuaYfDxKuU0OwdfbJRcnsHqrwGQ==
-----END CERTIFICATE-----
Generated at Sat Apr 26 13:43:32 2025 by rpki-client