Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B5D7E/ECA682341D8711E298322DE008B02CD2/CE997E2EEA9B11EFA6A3D730C4F9AE02.roa
File: CE997E2EEA9B11EFA6A3D730C4F9AE02.roa (raw, json)
Hash identifier: uN0e+cUzXR0q+zRv9FKfvDWSlrjYXQb/CNzmut03rlU=
Subject key identifier: 62:40:2B:73:BF:36:C5:A4:70:3A:6A:6F:07:C7:0C:DD:DB:E0:74:7A
Certificate issuer: /CN=A91B5D7E/serialNumber=4CAE3AEFB1AC8ABDDB99BCCEE4FA5A916D157B34
Certificate serial: 35F5
Authority key identifier: 4C:AE:3A:EF:B1:AC:8A:BD:DB:99:BC:CE:E4:FA:5A:91:6D:15:7B:34
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TK4677Gsir3bmbzO5PpakW0VezQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B5D7E/ECA682341D8711E298322DE008B02CD2/CE997E2EEA9B11EFA6A3D730C4F9AE02.roa
Signing time: Wed 19 Mar 2025 07:44:11 +0000
ROA not before: Wed 19 Mar 2025 07:44:11 +0000
ROA not after: Mon 02 Mar 2026 00:00:00 +0000
asID: 23750
IP address blocks: 103.207.84.0/24 maxlen: 24
103.207.86.0/24 maxlen: 24
103.207.87.0/24 maxlen: 24
116.90.100.0/24 maxlen: 24
116.90.106.0/24 maxlen: 24
116.90.107.0/24 maxlen: 24
116.90.108.0/24 maxlen: 24
116.90.109.0/24 maxlen: 24
116.90.110.0/24 maxlen: 24
116.90.111.0/24 maxlen: 24
116.90.120.0/24 maxlen: 24
116.90.123.0/24 maxlen: 24
116.90.124.0/24 maxlen: 24
116.90.125.0/24 maxlen: 24
116.90.126.0/24 maxlen: 24
116.90.127.0/24 maxlen: 24
121.46.64.0/24 maxlen: 24
121.46.65.0/24 maxlen: 24
121.46.66.0/24 maxlen: 24
121.46.67.0/24 maxlen: 24
202.69.32.0/24 maxlen: 24
202.69.33.0/24 maxlen: 24
202.69.34.0/24 maxlen: 24
202.69.35.0/24 maxlen: 24
202.69.36.0/24 maxlen: 24
202.69.37.0/24 maxlen: 24
202.69.38.0/24 maxlen: 24
202.69.39.0/24 maxlen: 24
202.69.40.0/24 maxlen: 24
202.69.41.0/24 maxlen: 24
202.69.42.0/24 maxlen: 24
202.69.43.0/24 maxlen: 24
202.69.44.0/24 maxlen: 24
202.69.45.0/24 maxlen: 24
202.69.46.0/24 maxlen: 24
202.69.47.0/24 maxlen: 24
202.69.48.0/24 maxlen: 24
202.69.49.0/24 maxlen: 24
202.69.50.0/24 maxlen: 24
202.69.51.0/24 maxlen: 24
202.69.52.0/24 maxlen: 24
202.69.53.0/24 maxlen: 24
202.69.54.0/24 maxlen: 24
202.69.55.0/24 maxlen: 24
202.69.56.0/24 maxlen: 24
202.69.57.0/24 maxlen: 24
202.69.58.0/24 maxlen: 24
202.69.59.0/24 maxlen: 24
202.69.60.0/24 maxlen: 24
202.69.61.0/24 maxlen: 24
202.69.62.0/24 maxlen: 24
202.69.63.0/24 maxlen: 24
202.142.144.0/24 maxlen: 24
202.142.145.0/24 maxlen: 24
202.142.146.0/24 maxlen: 24
202.142.147.0/24 maxlen: 24
202.142.148.0/24 maxlen: 24
202.142.149.0/24 maxlen: 24
202.142.150.0/24 maxlen: 24
202.142.152.0/24 maxlen: 24
202.142.153.0/24 maxlen: 24
202.142.154.0/24 maxlen: 24
202.142.156.0/24 maxlen: 24
202.142.157.0/24 maxlen: 24
202.142.158.0/24 maxlen: 24
202.142.159.0/24 maxlen: 24
2406:ac00:1::/48 maxlen: 48
2406:ac00:2::/48 maxlen: 48
2406:ac00:203::/48 maxlen: 48
2406:ac00:204::/48 maxlen: 48
2406:ac00:205::/48 maxlen: 48
2406:ac00:206::/48 maxlen: 48
2406:ac00:207::/48 maxlen: 48
2406:ac00:208::/48 maxlen: 48
2406:ac00:209::/48 maxlen: 48
2406:ac00:300::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B5D7E/ECA682341D8711E298322DE008B02CD2/TK4677Gsir3bmbzO5PpakW0VezQ.crl
rsync://rpki.apnic.net/member_repository/A91B5D7E/ECA682341D8711E298322DE008B02CD2/TK4677Gsir3bmbzO5PpakW0VezQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TK4677Gsir3bmbzO5PpakW0VezQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 01 May 2025 14:28:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13813 (0x35f5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B5D7E, serialNumber=4CAE3AEFB1AC8ABDDB99BCCEE4FA5A916D157B34
Validity
Not Before: Mar 19 07:44:11 2025 GMT
Not After : Mar 2 00:00:00 2026 GMT
Subject: CN=67da75ca-a4e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:0c:8e:83:81:4e:23:cf:ac:64:83:a7:90:d7:
b4:3a:8f:ef:4d:1b:28:68:c3:14:d8:2b:42:c9:e5:
cb:46:2b:9c:47:88:ba:b3:33:6e:76:b3:bf:0f:74:
ca:71:e0:2b:4d:0f:2a:76:fa:85:3b:c5:8b:71:5a:
75:de:82:44:2d:a1:d5:10:d8:00:d5:2c:08:7a:86:
54:a1:05:e3:8c:a1:19:35:31:1e:5f:23:81:d6:7e:
e8:d1:76:b9:8e:a5:34:53:40:4b:ac:b8:3e:1f:c7:
fe:1d:a1:3b:b3:40:58:d2:bf:9f:c6:aa:22:48:73:
59:f6:ed:ad:92:ca:81:39:55:4e:58:56:5e:25:de:
97:54:2d:ef:39:11:6d:bb:df:3f:53:15:33:87:03:
73:97:30:c8:1f:d1:ef:b6:6d:e7:29:a3:b0:f9:65:
45:27:1b:ed:b2:4a:84:61:a1:15:e3:90:06:3d:59:
89:a9:fc:79:b7:a9:86:a6:1f:69:3e:75:0d:78:8f:
79:79:26:c9:f4:97:8c:f1:ca:6d:88:d1:c2:5c:78:
d7:7c:e2:da:aa:88:9b:d9:f4:47:30:8a:f7:2e:ae:
19:32:6a:41:5e:32:94:fa:c5:91:90:19:31:8d:0f:
54:40:13:3e:bc:ce:81:f2:fe:2b:0c:c8:fa:df:5d:
82:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:40:2B:73:BF:36:C5:A4:70:3A:6A:6F:07:C7:0C:DD:DB:E0:74:7A
X509v3 Authority Key Identifier:
keyid:4C:AE:3A:EF:B1:AC:8A:BD:DB:99:BC:CE:E4:FA:5A:91:6D:15:7B:34
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B5D7E/ECA682341D8711E298322DE008B02CD2/TK4677Gsir3bmbzO5PpakW0VezQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TK4677Gsir3bmbzO5PpakW0VezQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B5D7E/ECA682341D8711E298322DE008B02CD2/CE997E2EEA9B11EFA6A3D730C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.207.84.0/24
103.207.86.0/23
116.90.100.0/24
116.90.106.0-116.90.111.255
116.90.120.0/24
116.90.123.0-116.90.127.255
121.46.64.0/22
202.69.32.0/19
202.142.144.0-202.142.150.255
202.142.152.0-202.142.154.255
202.142.156.0/22
IPv6:
2406:ac00:1::-2406:ac00:2:ffff:ffff:ffff:ffff:ffff
2406:ac00:203::-2406:ac00:209:ffff:ffff:ffff:ffff:ffff
2406:ac00:300::/48
Signature Algorithm: sha256WithRSAEncryption
09:94:7d:ae:81:81:bc:62:fc:4b:c5:98:99:f1:4a:e8:70:38:
89:fc:55:2d:83:23:05:cf:37:ab:fc:12:13:3f:02:47:c7:1b:
23:c9:62:b3:7f:85:28:af:87:04:e3:60:b6:5e:d6:ae:73:97:
0c:76:4c:0c:53:e1:b5:32:57:30:e8:90:ef:d5:b1:17:75:15:
ba:b9:b4:af:27:9b:a9:9c:00:a4:3f:15:4e:02:4a:9b:55:88:
41:11:6e:de:95:1c:d4:66:d2:1c:57:c0:1e:eb:66:40:27:54:
c7:22:59:6c:80:d5:c3:a7:5e:78:c8:f4:09:97:67:bc:d5:fd:
38:a1:82:d1:51:64:4d:42:df:33:23:13:e0:8e:ec:30:d7:99:
0d:05:83:53:1d:a3:f0:4a:62:4b:6d:d3:a7:2f:1e:c7:6d:cb:
ea:6f:eb:e9:7f:32:1c:ba:42:ae:ab:68:ca:71:58:3a:1e:10:
38:7e:35:b8:d7:5c:1b:af:26:3d:00:1a:46:8e:d1:a8:1d:92:
77:1e:a5:ba:2e:a5:4a:fa:4e:fe:96:d2:d1:1c:96:52:c8:e0:
72:32:d2:6e:53:ed:a0:1d:af:20:b2:48:96:92:89:81:3d:e8:
c6:0a:85:d7:08:5b:30:26:99:40:ed:a6:0b:19:14:f1:04:97:
f5:fd:5a:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 09:06:47 2025 by rpki-client