Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A913D1EA/9C932B48173A11EBA3B97E7FC4F9AE02/0DA7D8508C7B11F0BC99F531C4F9AE02.roa
File: 0DA7D8508C7B11F0BC99F531C4F9AE02.roa (raw, json)
Hash identifier: z5ynwic/0OYrIJXB9UAn2mnXwrtcqy7+joS2MDp5Ghs=
Subject key identifier: F3:45:5A:D1:9B:32:BE:05:CC:7C:E2:F7:88:09:52:53:60:33:BE:56
Certificate issuer: /CN=A913D1EA/serialNumber=E692C5B60B3EF1C2044439FC390AD56DC3CBCD63
Certificate serial: 087E
Authority key identifier: E6:92:C5:B6:0B:3E:F1:C2:04:44:39:FC:39:0A:D5:6D:C3:CB:CD:63
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5pLFtgs-8cIERDn8OQrVbcPLzWM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A913D1EA/9C932B48173A11EBA3B97E7FC4F9AE02/0DA7D8508C7B11F0BC99F531C4F9AE02.roa
Signing time: Mon 08 Sep 2025 06:14:19 +0000
ROA not before: Mon 08 Sep 2025 06:14:19 +0000
ROA not after: Tue 30 Dec 2025 00:00:00 +0000
asID: 135607
IP address blocks: 61.245.4.0/24 maxlen: 24
61.245.5.0/24 maxlen: 24
61.245.6.0/24 maxlen: 24
61.245.7.0/24 maxlen: 24
61.245.8.0/24 maxlen: 24
61.245.9.0/24 maxlen: 24
61.245.12.0/24 maxlen: 24
61.245.13.0/24 maxlen: 24
61.245.14.0/24 maxlen: 24
61.245.15.0/24 maxlen: 24
61.245.16.0/24 maxlen: 24
61.245.17.0/24 maxlen: 24
61.245.18.0/24 maxlen: 24
61.245.19.0/24 maxlen: 24
61.245.20.0/24 maxlen: 24
61.245.21.0/24 maxlen: 24
61.245.22.0/24 maxlen: 24
61.245.23.0/24 maxlen: 24
61.245.24.0/24 maxlen: 24
61.245.25.0/24 maxlen: 24
61.245.26.0/24 maxlen: 24
61.245.27.0/24 maxlen: 24
61.245.28.0/24 maxlen: 24
61.245.29.0/24 maxlen: 24
61.245.30.0/24 maxlen: 24
61.245.120.0/24 maxlen: 24
61.245.121.0/24 maxlen: 24
61.245.122.0/24 maxlen: 24
61.245.123.0/24 maxlen: 24
103.76.160.0/23 maxlen: 23
103.76.160.0/24 maxlen: 24
103.76.161.0/24 maxlen: 24
103.100.100.0/23 maxlen: 23
103.100.100.0/24 maxlen: 24
103.100.101.0/24 maxlen: 24
126.209.0.0/22 maxlen: 24
126.209.4.0/22 maxlen: 24
126.209.8.0/24 maxlen: 24
126.209.9.0/24 maxlen: 24
126.209.10.0/24 maxlen: 24
126.209.11.0/24 maxlen: 24
126.209.12.0/24 maxlen: 24
126.209.13.0/24 maxlen: 24
126.209.14.0/24 maxlen: 24
126.209.16.0/24 maxlen: 24
126.209.17.0/24 maxlen: 24
126.209.18.0/24 maxlen: 24
126.209.19.0/24 maxlen: 24
126.209.20.0/24 maxlen: 24
126.209.21.0/24 maxlen: 24
126.209.22.0/24 maxlen: 24
126.209.23.0/24 maxlen: 24
126.209.24.0/24 maxlen: 24
126.209.25.0/24 maxlen: 24
126.209.26.0/24 maxlen: 24
126.209.27.0/24 maxlen: 24
126.209.28.0/24 maxlen: 24
126.209.29.0/24 maxlen: 24
126.209.30.0/24 maxlen: 24
126.209.31.0/24 maxlen: 24
126.209.32.0/24 maxlen: 24
126.209.33.0/24 maxlen: 24
126.209.34.0/24 maxlen: 24
126.209.35.0/24 maxlen: 24
126.209.36.0/24 maxlen: 24
126.209.37.0/24 maxlen: 24
126.209.38.0/24 maxlen: 24
126.209.39.0/24 maxlen: 24
126.209.40.0/24 maxlen: 24
126.209.41.0/24 maxlen: 24
126.209.44.0/24 maxlen: 24
126.209.45.0/24 maxlen: 24
126.209.46.0/24 maxlen: 24
126.209.47.0/24 maxlen: 24
126.209.48.0/24 maxlen: 24
126.209.49.0/24 maxlen: 24
126.209.50.0/24 maxlen: 24
126.209.52.0/24 maxlen: 24
126.209.53.0/24 maxlen: 24
126.209.54.0/24 maxlen: 24
126.209.55.0/24 maxlen: 24
126.209.56.0/24 maxlen: 24
126.209.57.0/24 maxlen: 24
126.209.61.0/24 maxlen: 24
126.209.62.0/24 maxlen: 24
126.209.63.0/24 maxlen: 24
126.209.64.0/24 maxlen: 24
126.209.65.0/24 maxlen: 24
126.209.66.0/24 maxlen: 24
126.209.67.0/24 maxlen: 24
126.209.68.0/24 maxlen: 24
126.209.69.0/24 maxlen: 24
126.209.70.0/24 maxlen: 24
126.209.71.0/24 maxlen: 24
126.209.72.0/24 maxlen: 24
126.209.73.0/24 maxlen: 24
126.209.74.0/24 maxlen: 24
126.209.75.0/24 maxlen: 24
126.209.76.0/24 maxlen: 24
126.209.77.0/24 maxlen: 24
126.209.78.0/24 maxlen: 24
126.209.79.0/24 maxlen: 24
126.209.80.0/24 maxlen: 24
126.209.81.0/24 maxlen: 24
126.209.82.0/24 maxlen: 24
126.209.83.0/24 maxlen: 24
126.209.84.0/24 maxlen: 24
126.209.87.0/24 maxlen: 24
126.209.92.0/24 maxlen: 24
126.209.93.0/24 maxlen: 24
126.209.95.0/24 maxlen: 24
2401:e740::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A913D1EA/9C932B48173A11EBA3B97E7FC4F9AE02/5pLFtgs-8cIERDn8OQrVbcPLzWM.crl
rsync://rpki.apnic.net/member_repository/A913D1EA/9C932B48173A11EBA3B97E7FC4F9AE02/5pLFtgs-8cIERDn8OQrVbcPLzWM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5pLFtgs-8cIERDn8OQrVbcPLzWM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 15 Sep 2025 21:23:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2174 (0x87e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A913D1EA, serialNumber=E692C5B60B3EF1C2044439FC390AD56DC3CBCD63
Validity
Not Before: Sep 8 06:14:19 2025 GMT
Not After : Dec 30 00:00:00 2025 GMT
Subject: CN=68be743a-fe44
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:7d:df:79:a5:ae:6c:d2:20:21:f6:fd:29:cd:
00:0b:7e:3d:d4:fd:aa:61:48:2f:c7:f6:2c:0d:83:
0d:f6:5d:d8:ef:26:4c:5b:8f:00:ea:dd:52:6d:66:
ab:35:59:8c:dc:a3:eb:45:39:ef:36:c7:63:0b:1d:
05:b0:da:14:9e:b2:5e:ad:4d:1d:8d:d4:b0:3b:7d:
a9:88:f5:4c:f0:e4:d6:08:e3:16:82:81:af:3c:a8:
f4:29:3a:82:13:a7:1f:ed:0e:fd:ac:02:47:5c:5c:
f8:6a:ae:c4:72:e0:3d:de:9f:09:66:ed:81:d8:45:
bb:12:6d:22:35:36:2c:a1:4e:53:ab:f1:54:53:29:
6e:31:62:ff:f6:c3:93:51:35:09:84:52:80:74:b3:
3f:91:8f:ef:b4:ae:8e:ac:de:de:82:b2:e5:0b:6d:
98:fc:ff:2a:9f:5c:34:a9:35:38:02:5c:55:5f:a5:
84:ec:3d:1e:25:34:b0:44:12:27:a3:b5:bd:35:e0:
ed:1d:76:21:4e:b8:b0:18:44:88:7f:0e:33:e0:63:
22:1b:8b:23:ab:5d:7b:59:bb:20:60:54:5a:6f:fe:
9a:78:d0:00:30:6c:d8:97:e4:a5:4b:23:20:86:1c:
b0:12:32:8d:e3:59:4d:d9:e4:1e:62:e2:68:1d:db:
a5:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:45:5A:D1:9B:32:BE:05:CC:7C:E2:F7:88:09:52:53:60:33:BE:56
X509v3 Authority Key Identifier:
keyid:E6:92:C5:B6:0B:3E:F1:C2:04:44:39:FC:39:0A:D5:6D:C3:CB:CD:63
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A913D1EA/9C932B48173A11EBA3B97E7FC4F9AE02/5pLFtgs-8cIERDn8OQrVbcPLzWM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5pLFtgs-8cIERDn8OQrVbcPLzWM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913D1EA/9C932B48173A11EBA3B97E7FC4F9AE02/0DA7D8508C7B11F0BC99F531C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
61.245.4.0-61.245.9.255
61.245.12.0-61.245.30.255
61.245.120.0/22
103.76.160.0/23
103.100.100.0/23
126.209.0.0-126.209.14.255
126.209.16.0-126.209.41.255
126.209.44.0-126.209.50.255
126.209.52.0-126.209.57.255
126.209.61.0-126.209.84.255
126.209.87.0/24
126.209.92.0/23
126.209.95.0/24
IPv6:
2401:e740::/32
Signature Algorithm: sha256WithRSAEncryption
92:b3:b4:05:d0:f5:76:79:05:35:df:58:1d:04:ac:5b:c8:07:
22:bf:3c:22:af:61:75:88:a6:87:75:e3:ba:16:30:55:ab:ce:
a7:4d:26:b9:00:fa:a2:1b:3b:5e:8f:86:fe:ae:ad:ef:61:2a:
ec:0a:fc:1e:f9:4d:bc:9f:e6:82:79:d5:b7:c7:32:d7:e1:aa:
71:3c:f8:f9:2f:42:3f:fc:ff:b7:07:b6:a1:cc:58:af:19:e6:
c4:8e:5b:84:35:17:7d:8b:d8:2f:20:e6:6a:44:f4:fb:b9:00:
a8:f5:2a:a3:37:ce:e8:69:88:64:d7:02:a1:3a:c7:da:e1:5e:
eb:de:7e:6f:f0:8d:d6:d9:1f:08:0a:d1:3b:c9:79:26:e4:29:
dc:84:6e:92:d1:c5:b8:6f:13:b3:dd:7f:80:1d:37:98:13:2d:
a9:c5:1b:09:35:a3:08:11:4a:9d:2f:73:90:07:b1:e8:6a:f1:
93:8b:bb:53:5c:29:77:f6:a9:f4:4b:e4:93:7e:4a:2b:15:27:
13:88:67:cb:01:cc:ed:15:95:fa:e3:38:85:09:cd:31:4f:c9:
31:32:67:34:de:34:e2:45:65:17:c3:4c:fe:f5:d4:00:29:76:
4e:82:41:42:9b:19:dd:6b:2f:e9:0c:93:eb:f1:69:da:89:93:
7e:7f:e3:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 9 14:29:47 2025 by rpki-client