Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A919536C/75B98BF0366011EE88E0F530C4F9AE02/AEC0C8428C5811EFA0E8E859C4F9AE02.roa
File: AEC0C8428C5811EFA0E8E859C4F9AE02.roa (raw, json)
Hash identifier: q1C12AJZxBjIQzqN4k7K7GMZE1FYJg2qefZeo78vHPs=
Subject key identifier: E0:2A:D2:FD:41:BD:B2:4D:29:B5:56:67:FE:DF:FC:30:00:82:C6:B2
Certificate issuer: /CN=A919536C/serialNumber=A090E520BF9D51F2FDCEED413AF27AC758F6AE1D
Certificate serial: 0177
Authority key identifier: A0:90:E5:20:BF:9D:51:F2:FD:CE:ED:41:3A:F2:7A:C7:58:F6:AE:1D
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/oJDlIL-dUfL9zu1BOvJ6x1j2rh0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A919536C/75B98BF0366011EE88E0F530C4F9AE02/AEC0C8428C5811EFA0E8E859C4F9AE02.roa
Signing time: Thu 27 Mar 2025 09:12:15 +0000
ROA not before: Thu 27 Mar 2025 09:12:15 +0000
ROA not after: Sun 31 Aug 2025 00:00:00 +0000
asID: 132280
IP address blocks: 96.30.72.0/21 maxlen: 21
96.30.74.0/23 maxlen: 24
96.30.76.0/23 maxlen: 24
96.30.80.0/22 maxlen: 22
96.30.83.0/24 maxlen: 24
96.30.88.0/23 maxlen: 24
96.30.90.0/23 maxlen: 24
96.30.92.0/22 maxlen: 22
96.30.93.0/24 maxlen: 24
96.30.94.0/23 maxlen: 23
96.30.96.0/22 maxlen: 23
96.30.97.0/24 maxlen: 24
96.30.104.0/23 maxlen: 24
96.30.106.0/24 maxlen: 24
96.30.110.0/24 maxlen: 24
96.30.113.0/24 maxlen: 24
96.30.114.0/23 maxlen: 24
96.30.116.0/22 maxlen: 23
96.30.116.0/24 maxlen: 24
96.30.120.0/23 maxlen: 23
96.30.120.0/24 maxlen: 24
96.30.123.0/24 maxlen: 24
96.30.124.0/24 maxlen: 24
96.30.125.0/24 maxlen: 24
96.30.126.0/23 maxlen: 24
146.88.32.0/20 maxlen: 21
146.88.32.0/22 maxlen: 22
146.88.32.0/24 maxlen: 24
146.88.33.0/24 maxlen: 24
146.88.40.0/24 maxlen: 24
146.88.48.0/22 maxlen: 23
146.88.56.0/23 maxlen: 24
146.88.58.0/24 maxlen: 24
146.88.59.0/24 maxlen: 24
146.88.60.0/24 maxlen: 24
146.88.61.0/24 maxlen: 24
146.88.62.0/24 maxlen: 24
146.88.63.0/24 maxlen: 24
161.82.128.0/17 maxlen: 19
161.82.128.0/21 maxlen: 22
161.82.135.0/24 maxlen: 24
161.82.136.0/21 maxlen: 22
161.82.138.0/24 maxlen: 24
161.82.142.0/24 maxlen: 24
161.82.144.0/21 maxlen: 22
161.82.146.0/24 maxlen: 24
161.82.152.0/21 maxlen: 22
161.82.156.0/24 maxlen: 24
161.82.157.0/24 maxlen: 24
161.82.160.0/21 maxlen: 22
161.82.164.0/24 maxlen: 24
161.82.168.0/21 maxlen: 22
161.82.173.0/24 maxlen: 24
161.82.176.0/21 maxlen: 22
161.82.180.0/24 maxlen: 24
161.82.182.0/24 maxlen: 24
161.82.184.0/21 maxlen: 22
161.82.189.0/24 maxlen: 24
161.82.192.0/21 maxlen: 22
161.82.197.0/24 maxlen: 24
161.82.200.0/21 maxlen: 22
161.82.203.0/24 maxlen: 24
161.82.204.0/24 maxlen: 24
161.82.208.0/21 maxlen: 22
161.82.208.0/24 maxlen: 24
161.82.210.0/24 maxlen: 24
161.82.211.0/24 maxlen: 24
161.82.212.0/24 maxlen: 24
161.82.213.0/24 maxlen: 24
161.82.214.0/24 maxlen: 24
161.82.216.0/21 maxlen: 22
161.82.216.0/24 maxlen: 24
161.82.220.0/24 maxlen: 24
161.82.221.0/24 maxlen: 24
161.82.222.0/24 maxlen: 24
161.82.223.0/24 maxlen: 24
161.82.224.0/19 maxlen: 22
161.82.226.0/24 maxlen: 24
161.82.233.0/24 maxlen: 24
161.82.237.0/24 maxlen: 24
161.82.246.0/24 maxlen: 24
161.82.248.0/24 maxlen: 24
161.82.249.0/24 maxlen: 24
161.82.250.0/24 maxlen: 24
161.82.255.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A919536C/75B98BF0366011EE88E0F530C4F9AE02/oJDlIL-dUfL9zu1BOvJ6x1j2rh0.crl
rsync://rpki.apnic.net/member_repository/A919536C/75B98BF0366011EE88E0F530C4F9AE02/oJDlIL-dUfL9zu1BOvJ6x1j2rh0.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/oJDlIL-dUfL9zu1BOvJ6x1j2rh0.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 02 May 2025 03:26:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 375 (0x177)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A919536C, serialNumber=A090E520BF9D51F2FDCEED413AF27AC758F6AE1D
Validity
Not Before: Mar 27 09:12:15 2025 GMT
Not After : Aug 31 00:00:00 2025 GMT
Subject: CN=67e5166f-56ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:ff:1d:ec:a5:51:2d:32:20:21:c4:d2:a5:a2:
30:2f:a5:0c:d8:1e:96:e5:5e:df:9c:e1:76:1b:6d:
02:07:fe:c5:50:50:e5:29:40:c8:a4:7d:83:c9:9c:
59:dd:23:51:23:f4:44:7c:dc:bc:fb:cf:58:4e:81:
ec:28:e0:32:9a:b5:dc:56:5d:2b:a8:60:ef:c2:79:
0e:9c:0c:36:da:44:18:60:da:7f:de:91:64:df:ad:
90:6c:b9:a1:08:a8:f6:4f:f7:60:55:40:2b:19:91:
50:6d:35:e6:45:b5:d9:10:28:57:26:12:3f:08:ce:
ad:95:1c:b6:75:33:98:46:b9:51:be:7b:1e:6f:a8:
1c:95:59:13:ef:a1:b8:6c:e5:d3:5a:f0:f6:4c:87:
cd:f7:eb:f9:2d:ca:38:2a:d9:6d:db:d2:bc:4b:c2:
1b:e5:d9:da:1a:82:2f:06:b8:d5:6b:99:9a:b2:7e:
d2:f0:d6:cc:e1:67:3c:55:1b:8d:28:d6:1b:03:f9:
fd:d6:83:9e:dc:23:1a:da:1a:79:70:0b:36:60:03:
60:4d:b7:18:a5:9b:6e:75:6b:9a:c0:dc:9a:f4:11:
0d:8a:81:2d:35:7c:60:70:ea:05:e1:72:27:0a:9a:
f7:ed:db:b4:7e:da:e2:b4:5a:e3:51:95:0e:3d:df:
04:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:2A:D2:FD:41:BD:B2:4D:29:B5:56:67:FE:DF:FC:30:00:82:C6:B2
X509v3 Authority Key Identifier:
keyid:A0:90:E5:20:BF:9D:51:F2:FD:CE:ED:41:3A:F2:7A:C7:58:F6:AE:1D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A919536C/75B98BF0366011EE88E0F530C4F9AE02/oJDlIL-dUfL9zu1BOvJ6x1j2rh0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/oJDlIL-dUfL9zu1BOvJ6x1j2rh0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919536C/75B98BF0366011EE88E0F530C4F9AE02/AEC0C8428C5811EFA0E8E859C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
96.30.72.0-96.30.83.255
96.30.88.0-96.30.99.255
96.30.104.0-96.30.106.255
96.30.110.0/24
96.30.113.0-96.30.121.255
96.30.123.0-96.30.127.255
146.88.32.0-146.88.51.255
146.88.56.0/21
161.82.128.0/17
Signature Algorithm: sha256WithRSAEncryption
99:e1:a6:bf:33:84:f5:a1:e1:d8:76:e3:7f:2a:f4:73:6c:d1:
a4:24:8e:71:c3:72:f4:81:62:41:f4:9f:08:48:41:54:99:e0:
40:1a:0e:df:96:e4:86:82:17:0a:0d:79:1c:4f:7c:37:c4:02:
2b:d2:bd:1a:0e:5c:9b:00:71:d2:bd:af:79:ef:16:0d:59:57:
26:4d:82:ed:b3:89:9e:93:f9:56:a0:fb:c0:c9:c7:39:ef:d7:
76:80:3f:19:0b:a8:0a:5d:60:18:b0:d5:85:94:0c:73:e4:4c:
5a:f1:fc:55:a4:cd:ca:7a:be:72:82:f4:96:62:4a:91:7e:19:
a4:de:81:d4:9e:10:82:91:73:8d:0d:96:cc:52:6e:34:e7:ca:
8d:9e:a4:98:6b:ef:e4:cc:4a:0d:1f:aa:77:5c:22:27:e9:44:
33:82:31:67:1f:c5:df:2f:a3:45:f6:14:d3:d2:73:b7:3c:5e:
80:46:de:d4:67:ba:84:17:08:8c:ab:94:d3:b3:00:6e:d2:e1:
4f:66:e7:3d:d2:0f:e4:c1:da:52:3a:e7:2f:39:cb:36:50:3e:
35:ff:3c:3e:da:a9:83:7d:3b:59:5f:9a:53:e4:02:f3:57:2c:
2f:b8:04:45:67:2f:59:3e:19:ce:0c:ac:2f:cf:20:45:39:61:
aa:1d:4f:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 15:12:46 2025 by rpki-client