Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D58F6/56BE0C7CA6B211E9AACFB45BC4F9AE02/C0743AE8A6B611E9AB731B69C4F9AE02.roa
File: C0743AE8A6B611E9AB731B69C4F9AE02.roa (raw, json)
Hash identifier: +kCLBh2YGSzCnhz2gSh1rvEq4IKXwlVr0gntvPGayP4=
Subject key identifier: 47:C1:67:4B:D5:1B:3C:40:EE:5D:F5:D5:BB:F4:7C:3F:92:0B:57:A8
Certificate issuer: /CN=A91D58F6/serialNumber=65D9190FFC869C94F582190FAAD40F0514A5BA4E
Certificate serial: 0E3E
Authority key identifier: 65:D9:19:0F:FC:86:9C:94:F5:82:19:0F:AA:D4:0F:05:14:A5:BA:4E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZdkZD_yGnJT1ghkPqtQPBRSluk4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D58F6/56BE0C7CA6B211E9AACFB45BC4F9AE02/C0743AE8A6B611E9AB731B69C4F9AE02.roa
Signing time: Wed 18 Jun 2025 18:20:56 +0000
ROA not before: Wed 18 Jun 2025 18:20:56 +0000
ROA not after: Mon 31 Aug 2026 00:00:00 +0000
asID: 23881
IP address blocks: 45.121.196.0/24 maxlen: 24
45.121.197.0/24 maxlen: 24
45.121.198.0/24 maxlen: 24
45.121.199.0/24 maxlen: 24
103.15.196.0/24 maxlen: 24
103.15.197.0/24 maxlen: 24
103.15.198.0/24 maxlen: 24
103.15.199.0/24 maxlen: 24
103.19.24.0/24 maxlen: 24
103.19.25.0/24 maxlen: 24
103.19.26.0/24 maxlen: 24
103.19.27.0/24 maxlen: 24
203.135.128.0/24 maxlen: 24
203.135.129.0/24 maxlen: 24
203.135.130.0/24 maxlen: 24
203.135.131.0/24 maxlen: 24
203.135.132.0/24 maxlen: 24
203.135.133.0/24 maxlen: 24
203.135.134.0/24 maxlen: 24
203.135.135.0/24 maxlen: 24
203.135.136.0/24 maxlen: 24
203.135.137.0/24 maxlen: 24
203.135.138.0/24 maxlen: 24
203.135.139.0/24 maxlen: 24
203.135.140.0/24 maxlen: 24
203.135.141.0/24 maxlen: 24
203.135.142.0/24 maxlen: 24
203.135.143.0/24 maxlen: 24
203.135.144.0/24 maxlen: 24
203.135.145.0/24 maxlen: 24
203.135.146.0/24 maxlen: 24
203.135.147.0/24 maxlen: 24
203.135.148.0/24 maxlen: 24
203.135.149.0/24 maxlen: 24
203.135.150.0/24 maxlen: 24
203.135.151.0/24 maxlen: 24
203.135.152.0/24 maxlen: 24
203.135.153.0/24 maxlen: 24
203.135.154.0/24 maxlen: 24
203.135.155.0/24 maxlen: 24
203.135.156.0/24 maxlen: 24
203.135.157.0/24 maxlen: 24
203.135.158.0/24 maxlen: 24
203.135.159.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D58F6/56BE0C7CA6B211E9AACFB45BC4F9AE02/ZdkZD_yGnJT1ghkPqtQPBRSluk4.crl
rsync://rpki.apnic.net/member_repository/A91D58F6/56BE0C7CA6B211E9AACFB45BC4F9AE02/ZdkZD_yGnJT1ghkPqtQPBRSluk4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZdkZD_yGnJT1ghkPqtQPBRSluk4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 27 Jul 2025 17:48:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3646 (0xe3e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D58F6, serialNumber=65D9190FFC869C94F582190FAAD40F0514A5BA4E
Validity
Not Before: Jun 18 18:20:56 2025 GMT
Not After : Aug 31 00:00:00 2026 GMT
Subject: CN=68530388-7297
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:c6:7a:45:da:3b:de:dc:19:3d:75:1a:3b:22:
39:03:c3:ad:a1:d9:19:4e:2d:fc:97:11:13:98:7f:
01:2f:c0:bd:71:7b:76:6d:b9:5b:d8:18:82:11:df:
05:02:b5:95:60:37:e0:bd:45:34:e7:ab:f3:0c:5b:
88:35:16:b2:e3:41:c3:8a:4e:98:51:51:b1:07:4b:
02:b4:4e:a4:a9:ae:79:09:de:02:ba:b6:c5:47:07:
c6:c6:91:77:ed:11:ec:ae:35:8a:5a:ad:8d:83:ab:
bf:bf:4d:49:33:05:6b:3b:3d:c8:00:76:9d:c0:90:
25:23:6e:16:b9:d7:8d:d7:73:69:28:de:c7:37:b3:
47:85:32:1c:59:b6:3c:6c:a4:e2:66:a4:a3:26:80:
a7:ee:bd:4f:95:0f:d4:63:3a:35:54:9e:53:70:26:
5a:b2:d3:3b:65:18:4e:e7:db:86:13:8a:6f:15:56:
eb:70:82:7f:79:90:d6:32:30:4b:5b:2d:e5:66:50:
8c:3d:4c:46:e6:0e:53:17:59:ee:64:03:65:26:88:
35:79:3b:5b:fe:6c:fe:a9:7f:c8:5f:ee:12:4d:69:
df:57:ff:0b:70:cb:47:42:fc:b5:3c:49:a3:f3:25:
15:ba:66:d3:59:da:c0:93:99:6c:bf:c7:61:69:95:
10:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:C1:67:4B:D5:1B:3C:40:EE:5D:F5:D5:BB:F4:7C:3F:92:0B:57:A8
X509v3 Authority Key Identifier:
keyid:65:D9:19:0F:FC:86:9C:94:F5:82:19:0F:AA:D4:0F:05:14:A5:BA:4E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D58F6/56BE0C7CA6B211E9AACFB45BC4F9AE02/ZdkZD_yGnJT1ghkPqtQPBRSluk4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZdkZD_yGnJT1ghkPqtQPBRSluk4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D58F6/56BE0C7CA6B211E9AACFB45BC4F9AE02/C0743AE8A6B611E9AB731B69C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.121.196.0/22
103.15.196.0/22
103.19.24.0/22
203.135.128.0/19
Signature Algorithm: sha256WithRSAEncryption
76:89:d2:e4:4a:08:a2:b1:73:b6:3d:c4:02:b7:da:e1:16:b2:
89:92:47:79:b6:ea:f1:97:f7:a3:8f:e5:b3:3a:b2:ef:bd:f6:
be:1c:57:f0:32:39:97:9a:da:51:47:69:42:02:16:e9:ac:00:
3f:93:54:e8:cb:b1:03:13:0f:10:5f:89:6c:32:25:c7:78:e9:
9a:74:b7:5c:ec:e0:07:e5:3b:bc:de:d1:3c:91:28:61:1d:b3:
50:f1:f2:31:7d:64:d6:7d:c6:e1:51:ba:ad:b3:41:12:0c:17:
62:d6:98:a3:a8:30:60:39:4f:1c:c5:9d:64:33:ee:f8:93:4d:
17:1a:fb:c3:9a:ef:9f:88:ad:70:d1:e2:8b:75:86:1f:d1:2e:
8b:46:1a:d0:53:20:65:16:5d:7f:c7:ec:fb:de:af:41:4a:1a:
85:e5:ee:22:99:fe:8f:2e:ee:4d:6e:e0:42:02:9b:85:f7:17:
a0:e1:c4:1d:08:b6:d2:af:f2:7e:d3:a7:ce:40:72:18:6b:38:
6c:5c:5e:e0:65:1e:3c:2c:00:ea:6b:20:b8:b3:4b:12:12:34:
6a:5d:59:79:5a:7d:3a:bd:55:2d:18:1b:89:60:cd:d8:64:3b:
73:1f:00:f4:05:e8:c3:a1:13:b6:3a:51:77:3f:31:5e:c6:4f:
16:89:02:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 21 06:54:19 2025 by rpki-client