Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91DF93A/FF51E59EE5F311EAB3A91561C4F9AE02/007CF9924F1111EFA7D2F345C4F9AE02.roa
File: 007CF9924F1111EFA7D2F345C4F9AE02.roa (raw, json)
Hash identifier: jDHZwFF5yPuG0E/+EVJniBRe11d0Z59ErydSm1FeI2Q=
Subject key identifier: B5:DA:9F:C8:C2:48:61:7C:60:14:8F:DE:A9:9A:00:DA:AA:41:7B:57
Certificate issuer: /CN=A91DF93A/serialNumber=07A1C08545CACC65E0882D49E9F2F8CFD2BE8260
Certificate serial: 08BB
Authority key identifier: 07:A1:C0:85:45:CA:CC:65:E0:88:2D:49:E9:F2:F8:CF:D2:BE:82:60
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B6HAhUXKzGXgiC1J6fL4z9K-gmA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91DF93A/FF51E59EE5F311EAB3A91561C4F9AE02/007CF9924F1111EFA7D2F345C4F9AE02.roa
Signing time: Wed 18 Jun 2025 21:07:55 +0000
ROA not before: Wed 18 Jun 2025 21:07:55 +0000
ROA not after: Mon 31 Aug 2026 00:00:00 +0000
asID: 10122
IP address blocks: 103.139.72.0/24 maxlen: 24
103.139.73.0/24 maxlen: 24
164.90.64.0/24 maxlen: 24
164.90.65.0/24 maxlen: 24
164.90.66.0/24 maxlen: 24
164.90.67.0/24 maxlen: 24
164.90.68.0/24 maxlen: 24
164.90.69.0/24 maxlen: 24
164.90.71.0/24 maxlen: 24
164.90.72.0/24 maxlen: 24
164.90.73.0/24 maxlen: 24
164.90.74.0/24 maxlen: 24
164.90.76.0/24 maxlen: 24
164.90.77.0/24 maxlen: 24
164.90.78.0/24 maxlen: 24
164.90.79.0/24 maxlen: 24
164.90.80.0/24 maxlen: 24
164.90.81.0/24 maxlen: 24
164.90.82.0/24 maxlen: 24
164.90.83.0/24 maxlen: 24
164.90.84.0/24 maxlen: 24
164.90.85.0/24 maxlen: 24
164.90.86.0/24 maxlen: 24
164.90.87.0/24 maxlen: 24
164.90.88.0/24 maxlen: 24
164.90.89.0/24 maxlen: 24
164.90.90.0/24 maxlen: 24
164.90.91.0/24 maxlen: 24
164.90.92.0/24 maxlen: 24
164.90.93.0/24 maxlen: 24
164.90.94.0/24 maxlen: 24
164.90.95.0/24 maxlen: 24
164.90.96.0/24 maxlen: 24
164.90.97.0/24 maxlen: 24
164.90.98.0/24 maxlen: 24
164.90.101.0/24 maxlen: 24
164.90.102.0/24 maxlen: 24
164.90.103.0/24 maxlen: 24
164.90.104.0/24 maxlen: 24
164.90.105.0/24 maxlen: 24
164.90.106.0/24 maxlen: 24
164.90.107.0/24 maxlen: 24
164.90.108.0/24 maxlen: 24
164.90.109.0/24 maxlen: 24
164.90.110.0/24 maxlen: 24
164.90.111.0/24 maxlen: 24
164.90.113.0/24 maxlen: 24
164.90.114.0/24 maxlen: 24
164.90.115.0/24 maxlen: 24
164.90.116.0/24 maxlen: 24
164.90.117.0/24 maxlen: 24
164.90.121.0/24 maxlen: 24
164.90.122.0/24 maxlen: 24
164.90.125.0/24 maxlen: 24
164.90.126.0/24 maxlen: 24
164.90.127.0/24 maxlen: 24
202.63.32.0/24 maxlen: 24
202.63.33.0/24 maxlen: 24
202.63.34.0/24 maxlen: 24
202.63.35.0/24 maxlen: 24
202.63.36.0/24 maxlen: 24
202.63.37.0/24 maxlen: 24
202.63.38.0/24 maxlen: 24
202.63.39.0/24 maxlen: 24
202.63.40.0/24 maxlen: 24
202.63.41.0/24 maxlen: 24
202.63.42.0/24 maxlen: 24
202.63.43.0/24 maxlen: 24
202.63.44.0/24 maxlen: 24
202.63.45.0/24 maxlen: 24
202.63.46.0/24 maxlen: 24
202.63.47.0/24 maxlen: 24
202.63.48.0/24 maxlen: 24
202.63.49.0/24 maxlen: 24
202.63.50.0/24 maxlen: 24
202.63.51.0/24 maxlen: 24
202.63.52.0/24 maxlen: 24
202.63.53.0/24 maxlen: 24
202.63.54.0/24 maxlen: 24
202.63.55.0/24 maxlen: 24
202.63.56.0/24 maxlen: 24
202.63.57.0/24 maxlen: 24
202.63.58.0/24 maxlen: 24
202.63.59.0/24 maxlen: 24
202.63.60.0/24 maxlen: 24
202.63.61.0/24 maxlen: 24
202.63.62.0/24 maxlen: 24
202.63.63.0/24 maxlen: 24
202.168.96.0/24 maxlen: 24
202.168.97.0/24 maxlen: 24
202.168.99.0/24 maxlen: 24
202.168.100.0/24 maxlen: 24
202.168.101.0/24 maxlen: 24
202.168.102.0/24 maxlen: 24
202.168.103.0/24 maxlen: 24
202.168.104.0/24 maxlen: 24
202.168.105.0/24 maxlen: 24
202.168.106.0/24 maxlen: 24
202.168.107.0/24 maxlen: 24
202.168.108.0/24 maxlen: 24
202.168.109.0/24 maxlen: 24
202.168.110.0/24 maxlen: 24
202.168.112.0/24 maxlen: 24
202.168.113.0/24 maxlen: 24
202.168.114.0/24 maxlen: 24
202.168.115.0/24 maxlen: 24
202.168.116.0/24 maxlen: 24
202.168.117.0/24 maxlen: 24
202.168.118.0/24 maxlen: 24
202.168.119.0/24 maxlen: 24
202.168.120.0/24 maxlen: 24
202.168.121.0/24 maxlen: 24
202.168.122.0/24 maxlen: 24
202.168.123.0/24 maxlen: 24
202.168.124.0/23 maxlen: 23
202.168.124.0/24 maxlen: 24
202.168.125.0/24 maxlen: 24
202.168.126.0/24 maxlen: 24
202.168.127.0/24 maxlen: 24
2404:efc0:155::/48 maxlen: 48
2404:efc0:235::/48 maxlen: 48
2404:efc0:236::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91DF93A/FF51E59EE5F311EAB3A91561C4F9AE02/B6HAhUXKzGXgiC1J6fL4z9K-gmA.crl
rsync://rpki.apnic.net/member_repository/A91DF93A/FF51E59EE5F311EAB3A91561C4F9AE02/B6HAhUXKzGXgiC1J6fL4z9K-gmA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B6HAhUXKzGXgiC1J6fL4z9K-gmA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 27 Jul 2025 20:59:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2235 (0x8bb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91DF93A, serialNumber=07A1C08545CACC65E0882D49E9F2F8CFD2BE8260
Validity
Not Before: Jun 18 21:07:55 2025 GMT
Not After : Aug 31 00:00:00 2026 GMT
Subject: CN=68532aab-8259
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:37:99:75:df:72:a2:32:60:76:40:fc:92:56:
66:58:40:c3:be:a1:60:3b:fb:fb:79:53:8a:8c:86:
06:e2:75:9d:57:97:c2:ec:03:aa:aa:20:2f:18:5e:
9e:1b:b0:1a:99:6f:3f:58:3f:61:4d:c0:75:72:17:
00:3f:12:f9:48:47:9f:c1:fd:3d:77:fc:fc:25:82:
ad:2c:1f:d3:28:e2:13:e3:02:a5:df:96:2b:02:5c:
6d:01:68:cb:54:df:6a:3a:f6:af:e0:76:55:85:47:
9b:d6:2a:2b:e9:58:18:9d:8e:3b:75:9d:77:8f:c4:
dc:62:62:1b:78:0d:07:26:13:97:eb:f6:8b:c4:18:
9d:81:ce:b3:f6:c1:c6:1d:4d:0c:27:08:31:00:d1:
60:f5:05:95:64:5e:94:a2:48:a5:de:35:83:22:a4:
81:4f:d2:43:a3:d1:46:ab:06:33:5b:a4:d6:96:ae:
2a:3d:eb:f6:26:b4:99:24:58:03:13:91:b4:29:58:
ac:8a:2f:45:65:93:25:59:db:5c:ee:14:01:1e:08:
ae:5a:b0:ed:c6:c2:fe:a5:b2:a4:71:13:06:79:1b:
bc:4a:cb:87:15:5c:d8:63:78:5d:9e:ef:25:3a:1d:
12:79:cd:6d:a4:7e:00:57:3d:6f:ac:01:57:f3:2c:
bd:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:DA:9F:C8:C2:48:61:7C:60:14:8F:DE:A9:9A:00:DA:AA:41:7B:57
X509v3 Authority Key Identifier:
keyid:07:A1:C0:85:45:CA:CC:65:E0:88:2D:49:E9:F2:F8:CF:D2:BE:82:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91DF93A/FF51E59EE5F311EAB3A91561C4F9AE02/B6HAhUXKzGXgiC1J6fL4z9K-gmA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B6HAhUXKzGXgiC1J6fL4z9K-gmA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DF93A/FF51E59EE5F311EAB3A91561C4F9AE02/007CF9924F1111EFA7D2F345C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.139.72.0/23
164.90.64.0-164.90.69.255
164.90.71.0-164.90.74.255
164.90.76.0-164.90.98.255
164.90.101.0-164.90.111.255
164.90.113.0-164.90.117.255
164.90.121.0-164.90.122.255
164.90.125.0-164.90.127.255
202.63.32.0/19
202.168.96.0/23
202.168.99.0-202.168.110.255
202.168.112.0/20
IPv6:
2404:efc0:155::/48
2404:efc0:235::-2404:efc0:236:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
95:14:bf:4f:e3:05:7e:6f:a8:d9:f2:1a:be:9a:97:66:7a:7b:
07:c4:f6:e8:af:4e:bb:41:43:e0:16:a6:8a:d7:38:cd:05:98:
5a:15:cc:08:de:20:db:fa:01:25:cf:d7:ca:06:f9:25:61:fd:
e2:cb:f0:20:4f:79:3a:bc:9b:86:29:de:16:40:a7:7c:b0:f1:
4b:c0:63:41:7b:d0:f8:ac:32:dd:2f:c1:e4:56:ca:e3:b3:3d:
e7:38:29:af:a2:fd:34:f5:c5:5c:11:6d:ed:74:37:3f:f2:24:
cc:61:41:7b:4e:b9:8a:41:eb:3b:e7:9b:a4:51:0b:26:97:cd:
dc:f6:33:60:8b:ec:0e:85:e1:28:28:7e:a2:e0:5a:3d:35:72:
cf:96:77:49:ab:a8:64:9e:e0:18:07:44:d7:51:30:c4:1b:1e:
d5:a7:b3:28:3a:78:77:ce:e6:ce:97:1f:8a:a7:a5:fe:1a:3b:
31:7f:dc:56:8a:fb:90:a2:d6:51:fb:fe:36:29:c4:77:db:26:
91:a0:2a:68:03:db:74:18:7a:92:00:3f:64:7b:1c:5b:aa:2b:
74:ef:f6:1c:d0:3d:37:1a:3a:e2:a0:77:d5:5c:ee:35:1f:08:
fb:90:7d:82:54:9a:87:5c:de:fa:6e:df:88:7a:9a:f1:dc:15:
0c:bc:a1:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 21 08:44:09 2025 by rpki-client