Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9179F22/CF9BF5FE8F2F11EE9CBFD961C4F9AE02/41969D1C8F3011EEA61ACF62C4F9AE02.roa
File: 41969D1C8F3011EEA61ACF62C4F9AE02.roa (raw, json)
Hash identifier: 1JKH9Kzf0a0jD3ntdSigeMkWplx7p4rNlwsS+9j/3dE=
Subject key identifier: 27:23:8D:C2:7B:39:D9:9D:AE:E1:2E:22:89:50:78:DD:75:8D:B9:BB
Certificate issuer: /CN=A9179F22/serialNumber=FCF753D346AAAB95AB14C6267515CDF13F80FBBB
Certificate serial: 016D
Authority key identifier: FC:F7:53:D3:46:AA:AB:95:AB:14:C6:26:75:15:CD:F1:3F:80:FB:BB
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_PdT00aqq5WrFMYmdRXN8T-A-7s.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9179F22/CF9BF5FE8F2F11EE9CBFD961C4F9AE02/41969D1C8F3011EEA61ACF62C4F9AE02.roa
Signing time: Thu 25 Sep 2025 06:48:37 +0000
ROA not before: Thu 25 Sep 2025 06:48:37 +0000
ROA not after: Fri 01 May 2026 00:00:00 +0000
asID: 16509
IP address blocks: 103.150.252.0/24 maxlen: 24
202.74.46.0/24 maxlen: 24
2400:a4a0:1::/48 maxlen: 48
2400:a4a0:30::/48 maxlen: 48
2400:a4a0:40::/48 maxlen: 48
2400:a4a0:41::/48 maxlen: 48
2400:a4a0:42::/48 maxlen: 48
2400:a4a0:90::/48 maxlen: 48
2400:a4a0:100::/48 maxlen: 48
2400:a4a0:101::/48 maxlen: 48
2400:a4a0:115::/48 maxlen: 48
2400:a4a0:a100::/48 maxlen: 48
2400:a4a0:aaa2::/48 maxlen: 48
2400:a4a0:aaa3::/48 maxlen: 48
2400:a4a0:aaa4::/48 maxlen: 48
2400:a4a0:aaa5::/48 maxlen: 48
2400:a4a0:b100::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9179F22/CF9BF5FE8F2F11EE9CBFD961C4F9AE02/_PdT00aqq5WrFMYmdRXN8T-A-7s.crl
rsync://rpki.apnic.net/member_repository/A9179F22/CF9BF5FE8F2F11EE9CBFD961C4F9AE02/_PdT00aqq5WrFMYmdRXN8T-A-7s.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_PdT00aqq5WrFMYmdRXN8T-A-7s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 14 Oct 2025 04:19:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 365 (0x16d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9179F22, serialNumber=FCF753D346AAAB95AB14C6267515CDF13F80FBBB
Validity
Not Before: Sep 25 06:48:37 2025 GMT
Not After : May 1 00:00:00 2026 GMT
Subject: CN=68d4e5c5-e973
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:7f:b9:7c:bb:fa:a1:31:02:e1:82:25:7b:33:
74:e9:bc:9e:17:40:46:af:55:68:ee:f7:67:75:31:
97:3d:78:b9:d9:c0:4f:2f:d6:7c:b0:2c:ec:e0:26:
3d:75:b0:fc:f1:ad:9e:f6:a7:f8:36:19:48:b7:c2:
fb:55:64:a3:7b:da:9d:03:41:e3:ef:4a:26:44:ed:
e2:2e:50:7c:f5:11:e9:68:c3:6f:0e:ee:5a:37:30:
54:6f:35:5e:9b:b8:de:a8:fc:17:f2:d9:88:b3:a0:
ba:57:2a:ed:a8:0f:fc:c1:69:2b:e3:b6:6f:71:9f:
a8:99:33:09:b1:f6:09:bd:69:bc:96:0d:0e:63:f3:
13:ac:12:67:cd:4b:8d:fb:79:28:e9:1a:36:5a:30:
0b:89:a8:fe:7e:85:1b:19:e4:4c:f0:35:85:b3:0c:
80:fe:b8:56:5d:b3:c4:07:2f:67:e8:61:69:f4:93:
e4:29:1b:7a:6e:c6:64:38:63:0c:87:b0:75:d6:0c:
67:68:51:8b:cc:3a:0f:86:c7:41:cf:62:db:fc:22:
92:53:3d:42:ee:a3:b7:b0:e8:fc:9d:2d:8d:5c:74:
a2:64:c6:8a:c0:a5:fd:03:97:06:d6:e8:4a:fb:93:
90:37:25:c7:2b:2d:47:66:46:2c:19:61:7e:7d:11:
e8:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:23:8D:C2:7B:39:D9:9D:AE:E1:2E:22:89:50:78:DD:75:8D:B9:BB
X509v3 Authority Key Identifier:
keyid:FC:F7:53:D3:46:AA:AB:95:AB:14:C6:26:75:15:CD:F1:3F:80:FB:BB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9179F22/CF9BF5FE8F2F11EE9CBFD961C4F9AE02/_PdT00aqq5WrFMYmdRXN8T-A-7s.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_PdT00aqq5WrFMYmdRXN8T-A-7s.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9179F22/CF9BF5FE8F2F11EE9CBFD961C4F9AE02/41969D1C8F3011EEA61ACF62C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.150.252.0/24
202.74.46.0/24
IPv6:
2400:a4a0:1::/48
2400:a4a0:30::/48
2400:a4a0:40::-2400:a4a0:42:ffff:ffff:ffff:ffff:ffff
2400:a4a0:90::/48
2400:a4a0:100::/47
2400:a4a0:115::/48
2400:a4a0:a100::/48
2400:a4a0:aaa2::-2400:a4a0:aaa5:ffff:ffff:ffff:ffff:ffff
2400:a4a0:b100::/48
Signature Algorithm: sha256WithRSAEncryption
21:33:83:1b:98:68:87:8a:2c:be:d4:ff:de:40:c1:26:ac:6e:
c7:bd:23:6c:45:7c:82:ab:c1:85:4e:be:9c:6a:9e:51:d5:ce:
2f:21:e5:d0:b0:86:ae:16:2a:10:49:8e:3a:e3:80:5d:9a:c0:
15:ed:9c:69:46:cd:ae:a6:d4:7a:53:c3:06:16:74:9c:a5:e3:
08:2f:df:c1:3e:46:b3:7d:76:37:97:45:c9:96:62:c7:27:b0:
d0:4c:1c:82:a6:ff:3e:44:09:41:bc:45:f3:15:64:b8:4d:05:
bc:64:1c:15:11:72:02:d3:f7:b9:c9:1f:2f:2d:1e:80:2d:cd:
1f:29:ed:13:ef:f6:44:60:b8:3c:06:4d:c4:47:a3:46:9c:af:
3e:62:a6:68:11:81:23:4f:4f:f3:de:7b:6c:1b:ce:6b:ef:09:
b1:ca:1c:a9:7b:bc:e8:48:ef:07:58:49:a0:77:81:23:33:1c:
0e:44:dd:48:ea:c0:48:a4:8c:85:d5:dc:09:f1:8f:a2:3f:ff:
df:12:a5:59:25:d5:37:b6:36:7e:94:bb:f9:6b:f0:e8:f8:f4:
0d:dd:5b:01:b1:92:83:e5:fa:e1:d2:1d:34:28:a9:d7:be:13:
d5:3b:f3:e8:eb:a3:0d:db:26:62:76:3d:7c:a4:ce:1a:bd:29:
51:55:ce:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 9 03:58:11 2025 by rpki-client