Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A912C8AF/D1F64E725EEF11EAA54E6C6CC4F9AE02/0FB29E462A0811EE9A08C30FC4F9AE02.roa
File: 0FB29E462A0811EE9A08C30FC4F9AE02.roa (raw, json)
Hash identifier: O6CTOo/y474PcGRnYH9PhaTd1EVdAvkFEsjawJ8wYQ0=
Subject key identifier: C8:36:D8:95:81:0D:4C:67:53:61:FD:10:5A:3F:67:72:0C:6E:8A:25
Certificate issuer: /CN=A912C8AF/serialNumber=763F7FBD964A1C3668308C9A29E15025C0DDF9D4
Certificate serial: 0BCB
Authority key identifier: 76:3F:7F:BD:96:4A:1C:36:68:30:8C:9A:29:E1:50:25:C0:DD:F9:D4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dj9_vZZKHDZoMIyaKeFQJcDd-dQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912C8AF/D1F64E725EEF11EAA54E6C6CC4F9AE02/0FB29E462A0811EE9A08C30FC4F9AE02.roa
Signing time: Wed 22 Oct 2025 07:17:37 +0000
ROA not before: Wed 22 Oct 2025 07:17:37 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 138915
IP address blocks: 59.153.156.0/24 maxlen: 24
59.153.157.0/24 maxlen: 24
59.153.158.0/24 maxlen: 24
59.153.159.0/24 maxlen: 24
103.84.108.0/24 maxlen: 24
103.84.109.0/24 maxlen: 24
103.84.110.0/24 maxlen: 24
103.84.111.0/24 maxlen: 24
103.136.248.0/22 maxlen: 22
103.136.248.0/24 maxlen: 24
103.136.249.0/24 maxlen: 24
103.136.250.0/24 maxlen: 24
103.136.251.0/24 maxlen: 24
103.145.72.0/24 maxlen: 24
103.145.73.0/24 maxlen: 24
103.151.138.0/23 maxlen: 23
103.151.138.0/24 maxlen: 24
103.151.139.0/24 maxlen: 24
103.152.14.0/24 maxlen: 24
103.152.15.0/24 maxlen: 24
103.152.98.0/24 maxlen: 24
103.152.99.0/24 maxlen: 24
103.198.200.0/24 maxlen: 24
103.198.201.0/24 maxlen: 24
103.198.202.0/24 maxlen: 24
103.198.203.0/24 maxlen: 24
175.176.192.0/24 maxlen: 24
175.176.193.0/24 maxlen: 24
175.176.194.0/24 maxlen: 24
175.176.195.0/24 maxlen: 24
2404:a140::/32 maxlen: 32
2404:a140:2::/48 maxlen: 48
2404:a140:3::/48 maxlen: 48
2404:a140:4::/48 maxlen: 48
2404:a140:5::/48 maxlen: 48
2404:a140:6::/48 maxlen: 48
2404:a140:7::/48 maxlen: 48
2404:a140:8::/48 maxlen: 48
2404:a140:9::/48 maxlen: 48
2404:a140:a::/48 maxlen: 48
2404:a140:b::/48 maxlen: 48
2404:a140:c::/48 maxlen: 48
2404:a140:d::/48 maxlen: 48
2404:a140:e::/48 maxlen: 48
2404:a140:f::/48 maxlen: 48
2404:a140:10::/48 maxlen: 48
2404:a140:11::/48 maxlen: 48
2404:a140:12::/48 maxlen: 48
2404:a140:13::/48 maxlen: 48
2404:a140:14::/48 maxlen: 48
2404:a140:15::/48 maxlen: 48
2404:a140:16::/48 maxlen: 48
2404:a140:17::/48 maxlen: 48
2404:a140:18::/48 maxlen: 48
2404:a140:19::/48 maxlen: 48
2404:a140:1a::/48 maxlen: 48
2404:a140:1b::/48 maxlen: 48
2404:a140:1c::/48 maxlen: 48
2404:a140:1d::/48 maxlen: 48
2404:a140:1e::/48 maxlen: 48
2404:a140:1f::/48 maxlen: 48
2404:a140:20::/48 maxlen: 48
2404:a140:21::/48 maxlen: 48
2404:a140:22::/48 maxlen: 48
2404:a140:23::/48 maxlen: 48
2404:a140:24::/48 maxlen: 48
2404:a140:25::/48 maxlen: 48
2404:a140:26::/48 maxlen: 48
2404:a140:27::/48 maxlen: 48
2404:a140:28::/48 maxlen: 48
2404:a140:29::/48 maxlen: 48
2404:a140:2a::/48 maxlen: 48
2404:a140:2b::/48 maxlen: 48
2404:a140:2c::/48 maxlen: 48
2404:a140:2d::/48 maxlen: 48
2404:a140:2e::/48 maxlen: 48
2404:a140:2f::/48 maxlen: 48
2404:a140:30::/48 maxlen: 48
2404:a140:32::/48 maxlen: 48
2404:a140:33::/48 maxlen: 48
2404:a140:38::/48 maxlen: 48
2404:a140:39::/48 maxlen: 48
2404:a140:3a::/48 maxlen: 48
2404:a140:3b::/48 maxlen: 48
2404:a140:3c::/48 maxlen: 48
2404:a140:3d::/48 maxlen: 48
2404:a140:3e::/48 maxlen: 48
2404:a140:3f::/48 maxlen: 48
2404:a140:42::/48 maxlen: 48
2404:a140:43::/48 maxlen: 48
2404:a140:44::/48 maxlen: 48
2404:a140:45::/48 maxlen: 48
2404:a140:46::/48 maxlen: 48
2404:a140:47::/48 maxlen: 48
2404:a140:4a::/48 maxlen: 48
2404:a140:4b::/48 maxlen: 48
2404:a140:4c::/48 maxlen: 48
2404:a140:4d::/48 maxlen: 48
2404:a140:4f::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A912C8AF/D1F64E725EEF11EAA54E6C6CC4F9AE02/dj9_vZZKHDZoMIyaKeFQJcDd-dQ.crl
rsync://rpki.apnic.net/member_repository/A912C8AF/D1F64E725EEF11EAA54E6C6CC4F9AE02/dj9_vZZKHDZoMIyaKeFQJcDd-dQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dj9_vZZKHDZoMIyaKeFQJcDd-dQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 29 Oct 2025 20:06:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3019 (0xbcb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912C8AF, serialNumber=763F7FBD964A1C3668308C9A29E15025C0DDF9D4
Validity
Not Before: Oct 22 07:17:37 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=68f88511-95ae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f7:f1:d3:d7:0e:b0:50:e1:8a:40:88:f8:a2:af:
b1:37:e1:38:12:c9:1b:0f:7b:f5:08:09:7b:50:d4:
97:e3:e8:6b:73:98:dc:f8:04:c0:29:eb:84:e2:6f:
03:3b:73:9e:fd:32:9c:cc:f2:51:7e:1f:03:3f:9b:
c6:c3:d5:4b:4f:c1:42:f5:0b:54:b7:e6:cd:c9:e8:
d9:1d:17:2c:9a:96:6d:d9:16:21:ab:5b:68:7b:28:
e2:97:2b:84:ea:51:dc:38:23:95:72:c0:9b:b7:8d:
aa:e4:d2:39:98:46:ca:93:aa:d8:a1:81:9b:cb:61:
65:a2:7c:3a:9d:19:98:43:be:54:c9:d8:c8:a5:f1:
3f:9f:bb:95:71:8d:45:37:7f:22:62:3d:6e:fe:11:
ed:12:b7:08:d1:72:eb:a9:fc:17:ac:bb:b1:08:a8:
5e:89:a0:9f:1e:23:e5:d1:a9:2b:bb:c0:d6:b0:ed:
e6:3d:6e:33:4e:24:63:35:67:3d:b8:3a:6a:9d:7b:
d3:ba:d8:3c:d5:4d:4c:c7:03:4d:87:e8:a8:79:2b:
59:22:50:5e:02:ef:b0:f7:4a:81:d7:eb:30:f7:7e:
66:1e:7f:d6:08:dc:86:98:a2:59:09:61:e8:2f:db:
04:5c:9c:92:44:73:24:e5:24:90:0d:70:ef:b0:8e:
9b:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:36:D8:95:81:0D:4C:67:53:61:FD:10:5A:3F:67:72:0C:6E:8A:25
X509v3 Authority Key Identifier:
keyid:76:3F:7F:BD:96:4A:1C:36:68:30:8C:9A:29:E1:50:25:C0:DD:F9:D4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912C8AF/D1F64E725EEF11EAA54E6C6CC4F9AE02/dj9_vZZKHDZoMIyaKeFQJcDd-dQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dj9_vZZKHDZoMIyaKeFQJcDd-dQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912C8AF/D1F64E725EEF11EAA54E6C6CC4F9AE02/0FB29E462A0811EE9A08C30FC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
59.153.156.0/22
103.84.108.0/22
103.136.248.0/22
103.145.72.0/23
103.151.138.0/23
103.152.14.0/23
103.152.98.0/23
103.198.200.0/22
175.176.192.0/22
IPv6:
2404:a140::/32
Signature Algorithm: sha256WithRSAEncryption
22:cf:e7:49:a0:b2:6a:4e:ec:36:2a:0b:7e:8f:d1:5c:35:09:
5d:6b:45:a1:80:ed:d7:ea:3a:06:10:40:f3:d4:62:8e:6b:4e:
ac:7d:53:0b:cb:dd:53:a5:91:d1:10:07:8d:a2:3b:01:91:2b:
bd:fe:6f:fc:c9:42:67:db:df:b7:ef:69:3d:fa:e6:de:4d:3f:
5c:e1:6c:d9:fa:08:ca:f3:05:24:14:b4:e4:bc:37:6c:e2:6a:
62:3e:23:78:09:ab:2a:e7:8d:0b:70:7e:13:62:25:54:7b:8a:
f8:9e:02:21:78:b9:f5:55:cd:06:e8:f6:8a:17:94:51:02:fc:
99:8d:63:d5:f2:d6:d0:da:27:3e:66:79:70:aa:99:86:84:b2:
2e:f1:2d:f4:ca:a4:91:43:4a:2a:77:4b:bd:de:1f:c5:31:d1:
ba:90:94:de:66:11:63:ca:95:24:4f:95:92:80:38:ea:65:8b:
24:5b:1a:0c:e8:ca:86:2a:a4:30:27:30:3b:c1:9e:6e:0b:60:
26:2f:5b:aa:ed:0e:d6:3b:ef:ad:0b:b4:7c:3d:a4:9c:df:c7:
d3:7e:91:73:2e:bf:b2:cb:30:04:35:ad:6c:7c:71:a5:ba:05:
9d:85:53:51:12:1a:50:2b:84:4b:8c:0a:83:ca:af:4d:b9:c6:
25:6a:68:e7
-----BEGIN CERTIFICATE-----
MIIFsDCCBJigAwIBAgICC8swDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MkM4QUYxMTAvBgNVBAUTKDc2M0Y3RkJEOTY0QTFDMzY2ODMwOEM5QTI5RTE1MDI1
QzBEREY5RDQwHhcNMjUxMDIyMDcxNzM3WhcNMjYwNzAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02OGY4ODUxMS05NWFlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA9/HT1w6wUOGKQIj4oq+xN+E4EskbD3v1CAl7UNSX4+hrc5jc+ATAKeuE4m8D
O3Oe/TKczPJRfh8DP5vGw9VLT8FC9QtUt+bNyejZHRcsmpZt2RYhq1toeyjilyuE
6lHcOCOVcsCbt42q5NI5mEbKk6rYoYGby2Flonw6nRmYQ75UydjIpfE/n7uVcY1F
N38iYj1u/hHtErcI0XLrqfwXrLuxCKheiaCfHiPl0akru8DWsO3mPW4zTiRjNWc9
uDpqnXvTutg81U1MxwNNh+ioeStZIlBeAu+w90qB1+sw935mHn/WCNyGmKJZCWHo
L9sEXJySRHMk5SSQDXDvsI6bjQIDAQABo4IC1DCCAtAwHQYDVR0OBBYEFMg22JWB
DUxnU2H9EFo/Z3IMboolMB8GA1UdIwQYMBaAFHY/f72WShw2aDCMminhUCXA3fnU
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyQzhBRi9EMUY2NEU3MjVF
RUYxMUVBQTU0RTZDNkNDNEY5QUUwMi9kajlfdlpaS0hEWm9NSXlhS2VGUUpjRGQt
ZFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2RqOV92WlpLSERab01JeWFLZUZRSmNEZC1kUS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
MkM4QUYvRDFGNjRFNzI1RUVGMTFFQUE1NEU2QzZDQzRGOUFFMDIvMEZCMjlFNDYy
QTA4MTFFRTlBMDhDMzBGQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwXgYIKwYBBQUHAQcBAf8E
TzBNMDwEAgABMDYDBAI7mZwDBAJnVGwDBAJniPgDBAFnkUgDBAFnl4oDBAFnmA4D
BAFnmGIDBAJnxsgDBAKvsMAwDQQCAAIwBwMFACQEoUAwDQYJKoZIhvcNAQELBQAD
ggEBACLP50mgsmpO7DYqC36P0Vw1CV1rRaGA7dfqOgYQQPPUYo5rTqx9UwvL3VOl
kdEQB42iOwGRK73+b/zJQmfb37fvaT365t5NP1zhbNn6CMrzBSQUtOS8N2ziamI+
I3gJqyrnjQtwfhNiJVR7ivieAiF4ufVVzQbo9ooXlFEC/JmNY9Xy1tDaJz5meXCq
mYaEsi7xLfTKpJFDSip3S73eH8Ux0bqQlN5mEWPKlSRPlZKAOOpliyRbGgzoyoYq
pDAnMDvBnm4LYCYvW6rtDtY7760LtHw9pJzfx9N+kXMuv7LLMAQ1rWx8caW6BZ2F
U1ESGlArhEuMCoPKr025xiVqaOc=
-----END CERTIFICATE-----
Generated at Fri Oct 24 12:16:28 2025 by rpki-client