Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/10821840EDE511EF9B4E433AC4F9AE02.roa
File: 10821840EDE511EF9B4E433AC4F9AE02.roa (raw, json)
Hash identifier: CMWdEDMMJPN6ub2Qgi9BFaN/JRT8XqnPUKSBLcMOr1A=
Subject key identifier: 68:64:EF:3F:D5:CB:A8:60:D3:5C:B9:FF:D3:D8:5B:75:EE:BE:68:D5
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: AFE4
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/10821840EDE511EF9B4E433AC4F9AE02.roa
Signing time: Mon 28 Apr 2025 11:06:08 +0000
ROA not before: Mon 28 Apr 2025 11:06:08 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 55352
IP address blocks: 36.255.180.0/22 maxlen: 22
36.255.180.0/24 maxlen: 24
36.255.181.0/24 maxlen: 24
36.255.182.0/24 maxlen: 24
36.255.183.0/24 maxlen: 24
36.255.184.0/22 maxlen: 22
36.255.184.0/24 maxlen: 24
36.255.185.0/24 maxlen: 24
36.255.186.0/24 maxlen: 24
36.255.187.0/24 maxlen: 24
43.231.132.0/22 maxlen: 24
43.231.212.0/22 maxlen: 24
43.231.236.0/22 maxlen: 24
43.231.252.0/22 maxlen: 24
43.247.136.0/22 maxlen: 24
45.112.8.0/22 maxlen: 24
45.112.56.0/22 maxlen: 24
45.114.80.0/22 maxlen: 24
45.115.56.0/24 maxlen: 24
45.115.57.0/24 maxlen: 24
45.115.58.0/24 maxlen: 24
45.115.59.0/24 maxlen: 24
45.117.108.0/22 maxlen: 24
45.126.144.0/22 maxlen: 24
45.251.12.0/24 maxlen: 24
45.251.13.0/24 maxlen: 24
45.251.14.0/24 maxlen: 24
45.251.15.0/24 maxlen: 24
59.152.56.0/22 maxlen: 22
59.152.56.0/24 maxlen: 24
59.152.57.0/24 maxlen: 24
59.152.58.0/24 maxlen: 24
59.152.59.0/24 maxlen: 24
59.153.0.0/22 maxlen: 24
59.153.120.0/22 maxlen: 24
103.8.164.0/22 maxlen: 24
103.29.156.0/22 maxlen: 24
103.36.26.0/24 maxlen: 24
103.36.27.0/24 maxlen: 24
103.57.172.0/22 maxlen: 22
103.57.172.0/24 maxlen: 24
103.57.173.0/24 maxlen: 24
103.57.174.0/24 maxlen: 24
103.57.175.0/24 maxlen: 24
103.60.208.0/22 maxlen: 24
103.75.60.0/23 maxlen: 24
103.83.216.0/22 maxlen: 22
103.83.216.0/24 maxlen: 24
103.83.217.0/24 maxlen: 24
103.83.218.0/24 maxlen: 24
103.83.219.0/24 maxlen: 24
103.102.92.0/22 maxlen: 24
103.114.0.0/22 maxlen: 24
103.119.188.0/22 maxlen: 24
103.131.184.0/22 maxlen: 22
103.131.184.0/24 maxlen: 24
103.131.185.0/24 maxlen: 24
103.131.186.0/24 maxlen: 24
103.131.187.0/24 maxlen: 24
103.136.174.0/24 maxlen: 24
103.155.212.0/23 maxlen: 24
103.156.212.0/23 maxlen: 24
103.163.194.0/23 maxlen: 24
103.176.240.0/23 maxlen: 24
103.179.212.0/23 maxlen: 24
103.181.86.0/24 maxlen: 24
103.183.54.0/23 maxlen: 24
103.197.224.0/22 maxlen: 24
103.198.164.0/22 maxlen: 24
103.200.100.0/22 maxlen: 22
103.200.100.0/24 maxlen: 24
103.200.101.0/24 maxlen: 24
103.200.102.0/24 maxlen: 24
103.200.103.0/24 maxlen: 24
103.200.104.0/22 maxlen: 24
103.200.212.0/22 maxlen: 22
103.200.212.0/24 maxlen: 24
103.200.213.0/24 maxlen: 24
103.200.214.0/24 maxlen: 24
103.200.215.0/24 maxlen: 24
103.204.160.0/22 maxlen: 24
103.205.172.0/22 maxlen: 22
103.205.172.0/24 maxlen: 24
103.205.173.0/24 maxlen: 24
103.205.174.0/24 maxlen: 24
103.205.175.0/24 maxlen: 24
103.220.40.0/22 maxlen: 24
103.221.248.0/22 maxlen: 24
103.226.140.0/22 maxlen: 24
103.226.144.0/22 maxlen: 24
103.226.188.0/22 maxlen: 24
103.226.204.0/22 maxlen: 24
103.226.236.0/22 maxlen: 24
103.226.240.0/22 maxlen: 24
103.234.212.0/22 maxlen: 22
103.234.212.0/24 maxlen: 24
103.234.213.0/24 maxlen: 24
103.234.214.0/24 maxlen: 24
103.234.215.0/24 maxlen: 24
103.234.240.0/22 maxlen: 22
103.234.240.0/24 maxlen: 24
103.234.241.0/24 maxlen: 24
103.234.242.0/24 maxlen: 24
103.234.243.0/24 maxlen: 24
103.239.171.0/24 maxlen: 24
111.125.217.0/24 maxlen: 24
111.125.218.0/23 maxlen: 24
111.125.224.0/24 maxlen: 24
111.125.226.0/24 maxlen: 24
111.125.228.0/24 maxlen: 24
111.125.233.0/24 maxlen: 24
111.125.236.0/24 maxlen: 24
111.125.241.0/24 maxlen: 24
111.125.242.0/24 maxlen: 24
111.125.249.0/24 maxlen: 24
111.125.252.0/22 maxlen: 24
124.66.172.0/22 maxlen: 24
175.100.176.0/20 maxlen: 24
202.168.144.0/22 maxlen: 24
2406:9e00:20::/48 maxlen: 48
2406:9e00:21::/48 maxlen: 48
2406:9e00:22::/48 maxlen: 48
2406:9e00:23::/48 maxlen: 48
2406:9e00:24::/48 maxlen: 48
2406:9e00:25::/48 maxlen: 48
2406:9e00:26::/48 maxlen: 48
2406:9e00:27::/48 maxlen: 48
2406:9e00:28::/48 maxlen: 48
2406:9e00:29::/48 maxlen: 48
2406:9e00:2a::/48 maxlen: 48
2406:9e00:2b::/48 maxlen: 48
2406:9e00:2c::/48 maxlen: 48
2406:9e00:2d::/48 maxlen: 48
2406:9e00:2e::/48 maxlen: 48
2406:9e00:2f::/48 maxlen: 48
2406:9e00:30::/48 maxlen: 48
2406:9e00:31::/48 maxlen: 48
2406:9e00:32::/48 maxlen: 48
2406:9e00:33::/48 maxlen: 48
2406:9e00:34::/48 maxlen: 48
2406:9e00:35::/48 maxlen: 48
2406:9e00:36::/48 maxlen: 48
2406:9e00:37::/48 maxlen: 48
2406:9e00:38::/48 maxlen: 48
2406:9e00:39::/48 maxlen: 48
2406:9e00:3a::/48 maxlen: 48
2406:9e00:3b::/48 maxlen: 48
2406:9e00:3c::/48 maxlen: 48
2406:9e00:3d::/48 maxlen: 48
2406:9e00:3e::/48 maxlen: 48
2406:9e00:3f::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 05 May 2025 15:28:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 45028 (0xafe4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Validity
Not Before: Apr 28 11:06:08 2025 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=680f6120-e09a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:d7:5f:80:0f:98:84:54:60:88:15:34:2e:2a:
ae:11:71:51:26:8e:36:aa:24:b2:6f:dd:38:76:0d:
fe:ca:85:d1:ac:d3:53:9c:ce:51:6c:93:cc:03:77:
02:e5:1b:bb:49:34:c3:1e:ee:8e:90:17:cd:65:e2:
dd:b0:ab:03:b0:aa:f4:0b:9b:e8:12:0d:43:ca:4d:
9e:29:fb:20:1c:d2:3e:b4:fd:04:fd:fa:2e:17:39:
da:30:ef:51:34:fa:53:ab:fc:9d:f1:17:98:44:a5:
bd:43:20:6b:56:19:46:aa:ec:63:22:52:a0:31:3b:
d5:c4:7a:51:37:db:5a:1f:bc:45:49:f4:37:17:16:
5d:c7:98:0c:86:83:5a:d3:6b:a5:08:65:56:d7:90:
68:e9:c0:6f:d2:d4:59:ce:69:bc:08:fd:93:dd:5f:
fd:f6:da:55:6f:b3:9b:80:8d:dc:2a:20:de:3b:97:
1f:1a:9f:f6:37:44:3a:c4:71:1a:d6:59:7e:87:a9:
de:be:cd:30:bb:bb:45:97:a3:eb:31:70:2e:85:5c:
33:8c:cc:10:b8:ae:28:a6:c6:09:14:9a:78:8d:c4:
3f:b2:19:55:cf:bc:b2:28:bf:db:23:f0:a9:9c:12:
4b:0e:e1:7b:12:68:d2:f2:5d:0b:1e:9c:29:2a:6a:
20:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:64:EF:3F:D5:CB:A8:60:D3:5C:B9:FF:D3:D8:5B:75:EE:BE:68:D5
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/10821840EDE511EF9B4E433AC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
36.255.180.0-36.255.187.255
43.231.132.0/22
43.231.212.0/22
43.231.236.0/22
43.231.252.0/22
43.247.136.0/22
45.112.8.0/22
45.112.56.0/22
45.114.80.0/22
45.115.56.0/22
45.117.108.0/22
45.126.144.0/22
45.251.12.0/22
59.152.56.0/22
59.153.0.0/22
59.153.120.0/22
103.8.164.0/22
103.29.156.0/22
103.36.26.0/23
103.57.172.0/22
103.60.208.0/22
103.75.60.0/23
103.83.216.0/22
103.102.92.0/22
103.114.0.0/22
103.119.188.0/22
103.131.184.0/22
103.136.174.0/24
103.155.212.0/23
103.156.212.0/23
103.163.194.0/23
103.176.240.0/23
103.179.212.0/23
103.181.86.0/24
103.183.54.0/23
103.197.224.0/22
103.198.164.0/22
103.200.100.0-103.200.107.255
103.200.212.0/22
103.204.160.0/22
103.205.172.0/22
103.220.40.0/22
103.221.248.0/22
103.226.140.0-103.226.147.255
103.226.188.0/22
103.226.204.0/22
103.226.236.0-103.226.243.255
103.234.212.0/22
103.234.240.0/22
103.239.171.0/24
111.125.217.0-111.125.219.255
111.125.224.0/24
111.125.226.0/24
111.125.228.0/24
111.125.233.0/24
111.125.236.0/24
111.125.241.0-111.125.242.255
111.125.249.0/24
111.125.252.0/22
124.66.172.0/22
175.100.176.0/20
202.168.144.0/22
IPv6:
2406:9e00:20::/43
Signature Algorithm: sha256WithRSAEncryption
9c:dc:b5:66:37:ee:c8:8e:eb:ae:db:17:17:a2:54:23:10:f4:
6d:ab:f4:bf:3a:c3:5d:60:1b:6a:e0:70:ae:7e:c3:81:81:34:
64:05:d2:6c:6f:c1:90:dc:95:9a:85:27:90:25:87:04:37:a4:
30:b9:15:bb:d6:43:74:0f:87:87:a3:62:f5:bc:f6:3f:65:03:
d6:01:c2:98:64:22:80:e1:a8:9e:38:78:ce:16:5d:36:7f:3e:
c9:88:ba:ff:c1:60:60:c4:64:2e:74:dc:28:01:7d:e8:fc:eb:
64:10:ac:26:00:27:6c:82:a8:3e:61:4a:0d:f9:8f:9c:ef:b4:
2b:0c:df:b7:17:90:79:3c:bf:fb:30:a8:11:d3:f3:98:fc:78:
03:62:b1:55:af:30:f8:1d:aa:e3:51:1f:10:56:b0:14:3c:3e:
eb:a1:52:a6:e9:35:d7:d5:70:c9:19:58:17:2d:2a:ae:f5:99:
bf:3b:d0:66:1d:31:7a:d2:15:c5:00:d0:ef:1f:0a:29:63:18:
ac:96:85:ad:44:56:67:17:14:d6:14:33:ab:51:cf:eb:2a:1c:
10:00:07:2d:2e:0c:7b:3b:6b:6f:5e:8e:0f:86:6a:49:88:9e:
17:cf:49:f0:dd:99:b5:7d:a8:0d:82:73:05:7a:c8:9b:cc:57:
93:32:02:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 17:45:20 2025 by rpki-client on console.sobornost.net