Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9199197/84B2EC98F27D11EA9456EE60C4F9AE02/14C388C2114311F0B3944E67C4F9AE02.roa
File: 14C388C2114311F0B3944E67C4F9AE02.roa (raw, json)
Hash identifier: mTf8cQmCDCOr2IAAbGwT5DT/HAjoFjlHGakTn87Xya0=
Subject key identifier: 24:A5:56:16:D2:4B:51:18:AB:02:0D:1E:2B:5D:F4:5E:74:75:7F:AD
Certificate issuer: /CN=A9199197/serialNumber=6835DDFB8438D24BB6C5979316E54891066090A7
Certificate serial: 08AC
Authority key identifier: 68:35:DD:FB:84:38:D2:4B:B6:C5:97:93:16:E5:48:91:06:60:90:A7
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aDXd-4Q40ku2xZeTFuVIkQZgkKc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9199197/84B2EC98F27D11EA9456EE60C4F9AE02/14C388C2114311F0B3944E67C4F9AE02.roa
Signing time: Thu 12 Jun 2025 20:58:43 +0000
ROA not before: Thu 12 Jun 2025 20:58:43 +0000
ROA not after: Thu 30 Jul 2026 00:00:00 +0000
asID: 24560
IP address blocks: 27.56.128.0/20 maxlen: 24
27.56.144.0/20 maxlen: 24
27.56.160.0/19 maxlen: 24
27.57.0.0/16 maxlen: 24
27.58.0.0/16 maxlen: 24
27.62.116.0/24 maxlen: 24
27.62.117.0/24 maxlen: 24
27.63.176.0/20 maxlen: 24
106.200.0.0/18 maxlen: 24
106.200.192.0/18 maxlen: 24
106.201.0.0/16 maxlen: 24
106.202.128.0/17 maxlen: 24
106.203.192.0/18 maxlen: 24
106.205.0.0/18 maxlen: 24
106.205.64.0/18 maxlen: 24
106.212.0.0/17 maxlen: 24
106.212.128.0/17 maxlen: 24
106.213.0.0/17 maxlen: 24
106.214.0.0/16 maxlen: 24
106.215.0.0/17 maxlen: 24
106.215.128.0/19 maxlen: 24
106.215.160.0/20 maxlen: 24
106.215.176.0/21 maxlen: 24
106.215.184.0/21 maxlen: 24
106.215.192.0/21 maxlen: 24
106.215.200.0/24 maxlen: 24
106.219.64.0/19 maxlen: 24
106.219.96.0/20 maxlen: 24
106.219.120.0/22 maxlen: 24
106.219.124.0/22 maxlen: 24
106.219.128.0/21 maxlen: 24
106.219.136.0/22 maxlen: 24
106.219.144.0/20 maxlen: 24
106.219.160.0/20 maxlen: 24
106.219.176.0/21 maxlen: 24
106.222.192.0/18 maxlen: 24
110.224.128.0/17 maxlen: 24
110.225.0.0/16 maxlen: 24
110.226.0.0/16 maxlen: 24
110.227.0.0/16 maxlen: 24
117.96.0.0/16 maxlen: 24
117.97.128.0/18 maxlen: 24
117.98.192.0/20 maxlen: 24
117.98.208.0/21 maxlen: 21
117.98.216.0/21 maxlen: 24
117.99.96.0/20 maxlen: 24
117.99.160.0/19 maxlen: 24
223.177.0.0/16 maxlen: 24
223.178.0.0/17 maxlen: 24
223.178.192.0/18 maxlen: 24
223.179.128.0/19 maxlen: 24
223.181.0.0/17 maxlen: 24
223.181.128.0/18 maxlen: 24
223.182.64.0/18 maxlen: 24
223.182.164.0/22 maxlen: 24
223.182.172.0/22 maxlen: 24
223.182.180.0/22 maxlen: 24
223.182.248.0/21 maxlen: 24
223.184.0.0/17 maxlen: 24
223.185.12.0/22 maxlen: 24
223.185.16.0/20 maxlen: 24
223.185.32.0/19 maxlen: 24
223.185.128.0/21 maxlen: 24
223.185.136.0/21 maxlen: 24
223.185.144.0/20 maxlen: 24
223.185.160.0/20 maxlen: 24
223.185.176.0/20 maxlen: 24
223.190.0.0/17 maxlen: 24
223.190.192.0/18 maxlen: 24
223.224.172.0/23 maxlen: 24
223.226.0.0/16 maxlen: 24
223.229.128.0/17 maxlen: 24
223.230.0.0/16 maxlen: 24
223.233.64.0/18 maxlen: 24
223.235.0.0/16 maxlen: 24
223.236.0.0/16 maxlen: 24
223.239.0.0/16 maxlen: 24
2401:4900:1c00::/41 maxlen: 48
2401:4900:1c80::/41 maxlen: 48
2401:4900:1f20::/44 maxlen: 48
2401:4900:1f30::/44 maxlen: 48
2401:4900:8800::/37 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9199197/84B2EC98F27D11EA9456EE60C4F9AE02/aDXd-4Q40ku2xZeTFuVIkQZgkKc.crl
rsync://rpki.apnic.net/member_repository/A9199197/84B2EC98F27D11EA9456EE60C4F9AE02/aDXd-4Q40ku2xZeTFuVIkQZgkKc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aDXd-4Q40ku2xZeTFuVIkQZgkKc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 25 Jun 2025 20:54:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2220 (0x8ac)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9199197, serialNumber=6835DDFB8438D24BB6C5979316E54891066090A7
Validity
Not Before: Jun 12 20:58:43 2025 GMT
Not After : Jul 30 00:00:00 2026 GMT
Subject: CN=684b3f83-baa7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:e2:fd:cd:54:36:1c:5b:10:16:b3:7a:8f:33:
49:55:5a:02:32:47:e3:46:7c:53:0f:43:0e:62:f5:
e9:ba:9f:68:c7:0c:bd:22:d6:df:ca:67:b4:04:5f:
f8:81:03:14:11:f0:30:de:4c:d5:a9:ba:d6:fb:59:
29:d0:75:1f:0e:a9:3d:28:9d:6e:37:31:eb:38:57:
c1:97:5d:d6:ed:74:44:39:3e:fe:ac:5d:62:2f:3d:
bd:e8:c6:bc:fc:3f:13:bb:1a:29:b5:16:3a:d5:4f:
d2:db:d4:0c:7e:69:ba:dd:8d:6e:bb:8c:97:cc:bc:
50:f9:20:f4:8c:c2:7b:cc:e8:57:98:3d:76:4f:39:
d4:5b:85:fb:2e:fb:9f:58:2d:fa:22:b5:af:5a:db:
0e:e7:ac:63:89:4c:e7:8b:d2:b4:3c:d3:83:9a:e9:
96:4b:4b:11:8e:7a:47:7b:47:c4:0e:83:04:43:63:
ca:01:35:65:4a:fa:ee:c0:5f:81:80:f0:03:0a:db:
b4:27:df:bf:a0:4b:53:88:f7:ad:80:13:9f:0e:65:
45:9b:29:82:9e:ba:ef:ce:1c:d5:6c:cc:ab:a6:1d:
fd:ba:9e:54:4a:49:9f:bd:36:67:b2:80:8c:28:9f:
2e:d9:1f:ba:89:d7:85:2a:a2:37:0b:6d:84:13:5f:
3b:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:A5:56:16:D2:4B:51:18:AB:02:0D:1E:2B:5D:F4:5E:74:75:7F:AD
X509v3 Authority Key Identifier:
keyid:68:35:DD:FB:84:38:D2:4B:B6:C5:97:93:16:E5:48:91:06:60:90:A7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9199197/84B2EC98F27D11EA9456EE60C4F9AE02/aDXd-4Q40ku2xZeTFuVIkQZgkKc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aDXd-4Q40ku2xZeTFuVIkQZgkKc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9199197/84B2EC98F27D11EA9456EE60C4F9AE02/14C388C2114311F0B3944E67C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
27.56.128.0/18
27.57.0.0-27.58.255.255
27.62.116.0/23
27.63.176.0/20
106.200.0.0/18
106.200.192.0-106.201.255.255
106.202.128.0/17
106.203.192.0/18
106.205.0.0/17
106.212.0.0-106.213.127.255
106.214.0.0-106.215.200.255
106.219.64.0-106.219.111.255
106.219.120.0-106.219.139.255
106.219.144.0-106.219.183.255
106.222.192.0/18
110.224.128.0-110.227.255.255
117.96.0.0/16
117.97.128.0/18
117.98.192.0/19
117.99.96.0/20
117.99.160.0/19
223.177.0.0-223.178.127.255
223.178.192.0/18
223.179.128.0/19
223.181.0.0-223.181.191.255
223.182.64.0/18
223.182.164.0/22
223.182.172.0/22
223.182.180.0/22
223.182.248.0/21
223.184.0.0/17
223.185.12.0-223.185.63.255
223.185.128.0/18
223.190.0.0/17
223.190.192.0/18
223.224.172.0/23
223.226.0.0/16
223.229.128.0-223.230.255.255
223.233.64.0/18
223.235.0.0-223.236.255.255
223.239.0.0/16
IPv6:
2401:4900:1c00::/40
2401:4900:1f20::/43
2401:4900:8800::/37
Signature Algorithm: sha256WithRSAEncryption
ed:ef:1c:ba:8c:36:e5:ed:3c:64:57:f7:e4:1d:fe:6a:60:2c:
1a:98:b7:30:ee:58:0d:f4:10:a6:fc:24:de:79:ec:4c:58:d7:
56:c6:5a:52:e8:9a:60:ba:4a:8e:d9:5d:8a:e2:c8:96:f0:a2:
b6:80:7d:7b:51:56:23:16:b0:c3:55:10:52:6f:a4:46:57:03:
f8:16:08:4d:f9:26:60:af:32:d3:ba:52:11:29:ad:ba:8f:3d:
63:f7:a9:65:db:5d:ed:84:44:bb:f3:0b:c0:81:f6:f3:ab:d6:
cb:e3:9b:da:01:99:55:7a:99:bf:fe:cb:4e:9a:c8:fb:6a:ee:
e4:fa:9c:79:e9:c3:1b:65:fe:e6:e9:3f:20:a1:45:f6:7b:ac:
a3:36:00:03:d2:3a:0c:89:e3:77:48:d0:90:5d:2a:09:4b:fd:
02:b0:d0:d5:cc:1d:11:b9:e0:1d:c2:8a:b1:32:df:ef:72:dd:
a4:4e:c8:95:4f:10:5a:3e:8e:1d:e5:0e:56:66:04:09:22:ca:
dd:1f:a3:11:01:fc:0d:a6:f9:c8:82:dd:35:99:5e:f2:dd:c5:
70:2c:c4:e1:2d:b1:8d:07:28:f9:11:7f:ce:e8:b7:9f:99:17:
bc:63:43:5d:65:a9:e7:70:bd:a7:58:25:6e:f4:e5:97:64:29:
f6:5f:87:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 20 12:27:35 2025 by rpki-client