Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91EAE60/F1996712C7CF11E4B13BE121C4F9AE02/BBF567AEB0F011E5A08A224DC4F9AE02.roa
File: BBF567AEB0F011E5A08A224DC4F9AE02.roa (raw, json)
Hash identifier: tAGi/sSZ9el7Z/s+1sNJT90gzy4cpKpqrErB6Bm68K0=
Subject key identifier: 56:78:1B:1B:A3:A0:6E:59:83:92:BE:F6:A1:0B:07:CD:6C:33:2A:E2
Certificate issuer: /CN=A91EAE60/serialNumber=20083D4DFA844C5727558C4C756DB20DF807CD81
Certificate serial: 2798
Authority key identifier: 20:08:3D:4D:FA:84:4C:57:27:55:8C:4C:75:6D:B2:0D:F8:07:CD:81
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IAg9TfqETFcnVYxMdW2yDfgHzYE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91EAE60/F1996712C7CF11E4B13BE121C4F9AE02/BBF567AEB0F011E5A08A224DC4F9AE02.roa
Signing time: Tue 08 Jul 2025 15:52:45 +0000
ROA not before: Tue 08 Jul 2025 15:52:45 +0000
ROA not after: Wed 30 Sep 2026 00:00:00 +0000
asID: 17887
IP address blocks: 43.247.56.0/22 maxlen: 22
43.247.56.0/24 maxlen: 24
43.247.57.0/24 maxlen: 24
103.11.12.0/22 maxlen: 22
103.106.8.0/22 maxlen: 22
103.106.8.0/24 maxlen: 24
103.213.204.0/22 maxlen: 22
103.213.204.0/24 maxlen: 24
103.213.205.0/24 maxlen: 24
202.60.192.0/20 maxlen: 20
202.60.192.0/21 maxlen: 21
202.60.192.0/22 maxlen: 22
202.60.195.0/24 maxlen: 24
202.60.196.0/22 maxlen: 22
202.60.198.0/24 maxlen: 24
202.60.199.0/24 maxlen: 24
202.60.200.0/21 maxlen: 21
202.60.200.0/22 maxlen: 22
202.60.200.0/24 maxlen: 24
202.60.203.0/24 maxlen: 24
202.60.204.0/22 maxlen: 22
202.60.204.0/24 maxlen: 24
202.60.205.0/24 maxlen: 24
202.60.207.0/24 maxlen: 24
203.159.72.0/22 maxlen: 22
203.159.72.0/24 maxlen: 24
203.159.73.0/24 maxlen: 24
203.159.74.0/24 maxlen: 24
203.159.75.0/24 maxlen: 24
203.159.96.0/19 maxlen: 19
203.159.96.0/24 maxlen: 24
203.159.100.0/24 maxlen: 24
203.159.101.0/24 maxlen: 24
203.159.103.0/24 maxlen: 24
203.159.104.0/24 maxlen: 24
203.159.107.0/24 maxlen: 24
203.159.108.0/24 maxlen: 24
203.159.111.0/24 maxlen: 24
203.159.120.0/24 maxlen: 24
203.159.124.0/24 maxlen: 24
203.159.125.0/24 maxlen: 24
203.159.126.0/24 maxlen: 24
203.159.127.0/24 maxlen: 24
2405:6d00::/32 maxlen: 32
2405:6d00:100::/48 maxlen: 48
2405:6d00:101::/48 maxlen: 48
2405:6d00:104::/48 maxlen: 48
2405:6d00:105::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91EAE60/F1996712C7CF11E4B13BE121C4F9AE02/IAg9TfqETFcnVYxMdW2yDfgHzYE.crl
rsync://rpki.apnic.net/member_repository/A91EAE60/F1996712C7CF11E4B13BE121C4F9AE02/IAg9TfqETFcnVYxMdW2yDfgHzYE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IAg9TfqETFcnVYxMdW2yDfgHzYE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 25 Jul 2025 15:45:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 10136 (0x2798)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91EAE60, serialNumber=20083D4DFA844C5727558C4C756DB20DF807CD81
Validity
Not Before: Jul 8 15:52:45 2025 GMT
Not After : Sep 30 00:00:00 2026 GMT
Subject: CN=686d3ecd-f3a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:9e:55:42:11:fe:bc:9e:d1:91:4a:17:20:33:
26:fe:dc:c3:47:81:69:a9:ca:1a:c9:d3:cb:f3:62:
42:9b:f7:3c:d3:93:3e:c4:59:50:50:d4:db:1d:bb:
fa:9b:0e:37:c0:a2:be:4a:5f:3e:5c:17:3b:38:58:
55:84:c8:a2:b4:aa:99:f9:90:c4:ac:2a:3a:8b:2b:
0b:ab:73:81:ad:0e:ce:7b:a4:32:cc:5a:98:80:d5:
1a:52:fe:8d:80:41:ae:e9:99:27:c6:b8:4a:08:f5:
d3:e8:1f:93:3d:cf:ae:30:dd:97:a5:a8:6d:9e:84:
c2:53:91:8d:3b:2d:e1:04:30:c6:bb:9b:49:41:7c:
77:e7:76:d6:a2:b1:e6:e5:ef:82:9a:74:ae:c6:5e:
94:1e:27:ea:b8:35:de:dc:b7:19:ef:a0:1c:3d:12:
5a:59:2b:45:9b:90:51:36:d8:c5:ba:e9:4e:c8:1f:
3e:7a:1e:f5:96:93:3c:45:6a:9b:44:e6:08:9e:21:
bc:c2:22:d7:fb:b7:02:cb:8b:be:8f:8b:a6:3c:91:
ac:67:81:da:6a:29:01:9f:2c:b7:60:94:53:2d:19:
a7:9d:13:41:0f:21:76:07:6c:93:10:f7:e7:8e:f1:
8b:12:3a:af:86:e6:18:61:de:ce:4b:9f:9b:82:a3:
7d:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:78:1B:1B:A3:A0:6E:59:83:92:BE:F6:A1:0B:07:CD:6C:33:2A:E2
X509v3 Authority Key Identifier:
keyid:20:08:3D:4D:FA:84:4C:57:27:55:8C:4C:75:6D:B2:0D:F8:07:CD:81
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91EAE60/F1996712C7CF11E4B13BE121C4F9AE02/IAg9TfqETFcnVYxMdW2yDfgHzYE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IAg9TfqETFcnVYxMdW2yDfgHzYE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EAE60/F1996712C7CF11E4B13BE121C4F9AE02/BBF567AEB0F011E5A08A224DC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
43.247.56.0/22
103.11.12.0/22
103.106.8.0/22
103.213.204.0/22
202.60.192.0/20
203.159.72.0/22
203.159.96.0/19
IPv6:
2405:6d00::/32
Signature Algorithm: sha256WithRSAEncryption
2f:f1:c8:95:15:99:99:4d:f4:ef:e2:85:cb:01:62:05:9a:ae:
18:0a:75:37:38:0f:54:a0:05:42:c5:16:6d:39:d9:e7:b2:74:
22:77:de:75:16:59:42:7a:3f:ad:fe:c2:d8:0f:5e:57:40:71:
8f:5a:cb:78:89:2b:ab:6e:24:2d:66:c3:bd:06:81:1f:6b:dc:
af:f0:18:5b:0f:54:68:6b:5b:22:c8:1e:ce:ff:6d:57:a3:a6:
aa:3e:85:ac:8e:85:ee:6f:66:07:e3:4b:0b:1c:6b:6f:26:a5:
c5:1f:55:44:9c:0d:59:3a:89:54:b5:8a:cc:2d:24:1d:bd:50:
b6:e7:5a:9c:e9:6b:35:72:b2:55:be:dd:7a:1f:be:85:ac:47:
79:87:dd:a9:bd:95:60:31:88:06:24:5b:18:93:02:0e:58:a4:
16:e1:5b:36:e8:bf:66:ec:96:fa:7a:47:cb:19:12:40:dd:e3:
fc:b0:78:9e:b7:b4:04:53:9d:21:e1:9f:24:25:1a:ca:07:2c:
65:55:c0:1f:8e:9b:ed:f5:d1:08:49:d9:4c:2d:72:3d:74:95:
d1:12:19:38:6f:04:8e:ab:7e:a2:1e:95:58:8d:ad:cc:f6:f2:
de:86:c7:6b:0a:bb:ad:d2:93:f2:51:48:66:8f:8c:68:09:23:
e3:5a:b6:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 10:51:56 2025 by rpki-client