Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A914C725/31844C36809F11E7BD6A6B2EC4F9AE02/B4DF66BA809F11E7B741FD2EC4F9AE02.roa
File: B4DF66BA809F11E7B741FD2EC4F9AE02.roa (raw, json)
Hash identifier: NtbBfKBhWJufBJ+Zx0sdblhNzhOyn0/W+4n9rD0fO4w=
Subject key identifier: AA:83:B6:12:8E:94:54:61:BC:A7:CE:5D:56:05:0D:18:EB:7B:2C:3D
Certificate issuer: /CN=A914C725/serialNumber=ED17D1BE3D5711C6C98C8CCC59AAF737E865C384
Certificate serial: 1994
Authority key identifier: ED:17:D1:BE:3D:57:11:C6:C9:8C:8C:CC:59:AA:F7:37:E8:65:C3:84
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7RfRvj1XEcbJjIzMWar3N-hlw4Q.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914C725/31844C36809F11E7BD6A6B2EC4F9AE02/B4DF66BA809F11E7B741FD2EC4F9AE02.roa
Signing time: Thu 23 Oct 2025 06:54:55 +0000
ROA not before: Thu 23 Oct 2025 06:54:55 +0000
ROA not after: Mon 31 Aug 2026 00:00:00 +0000
asID: 56286
IP address blocks: 103.29.56.0/22 maxlen: 22
103.29.56.0/24 maxlen: 24
103.29.57.0/24 maxlen: 24
103.29.58.0/24 maxlen: 24
103.29.59.0/24 maxlen: 24
103.106.166.0/23 maxlen: 23
103.106.166.0/24 maxlen: 24
103.106.167.0/24 maxlen: 24
203.25.78.0/24 maxlen: 24
2403:1300::/32 maxlen: 32
2403:1300::/36 maxlen: 36
2403:1300:100::/40 maxlen: 40
2403:1300:100::/48 maxlen: 48
2403:1300:101::/48 maxlen: 48
2403:1300:102::/48 maxlen: 48
2403:1300:111::/48 maxlen: 48
2403:1300:113::/48 maxlen: 48
2403:1300:121::/48 maxlen: 48
2403:1300:122::/48 maxlen: 48
2403:1300:123::/48 maxlen: 48
2403:1300:131::/48 maxlen: 48
2403:1300:200::/40 maxlen: 40
2403:1300:201::/48 maxlen: 48
2403:1300:202::/48 maxlen: 48
2403:1300:211::/48 maxlen: 48
2403:1300:221::/48 maxlen: 48
2403:1300:222::/48 maxlen: 48
2403:1300:223::/48 maxlen: 48
2403:1300:231::/48 maxlen: 48
2403:1300:300::/40 maxlen: 40
2403:1300:301::/48 maxlen: 48
2403:1300:302::/48 maxlen: 48
2403:1300:311::/48 maxlen: 48
2403:1300:321::/48 maxlen: 48
2403:1300:331::/48 maxlen: 48
2403:1300:1000::/36 maxlen: 36
2403:1300:2000::/36 maxlen: 36
2403:1300:3000::/36 maxlen: 36
2403:1300:8000::/36 maxlen: 36
2403:1300:8000::/40 maxlen: 40
2403:1300:8001::/48 maxlen: 48
2403:1300:8002::/48 maxlen: 48
2403:1300:beef::/48 maxlen: 48
2403:1300:f000::/36 maxlen: 36
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A914C725/31844C36809F11E7BD6A6B2EC4F9AE02/7RfRvj1XEcbJjIzMWar3N-hlw4Q.crl
rsync://rpki.apnic.net/member_repository/A914C725/31844C36809F11E7BD6A6B2EC4F9AE02/7RfRvj1XEcbJjIzMWar3N-hlw4Q.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7RfRvj1XEcbJjIzMWar3N-hlw4Q.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 09 Nov 2025 16:24:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6548 (0x1994)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914C725, serialNumber=ED17D1BE3D5711C6C98C8CCC59AAF737E865C384
Validity
Not Before: Oct 23 06:54:55 2025 GMT
Not After : Aug 31 00:00:00 2026 GMT
Subject: CN=68f9d13f-8499
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:6d:43:ef:1d:f1:5a:86:50:98:ae:77:bb:32:
fb:5d:f8:67:3e:fb:76:70:18:ba:2d:f5:dd:44:7b:
12:0f:de:39:bd:67:f7:ff:1b:78:15:48:ad:34:93:
2b:fe:d2:d2:d3:7a:e6:94:71:ee:0b:ef:19:99:8b:
6d:58:3e:5f:67:62:3b:af:ff:ed:5c:9f:dd:30:71:
d8:46:82:ed:ba:58:4c:24:ba:8d:79:10:41:dd:c0:
66:4d:5e:09:70:40:1b:56:18:43:f6:d4:e2:78:a4:
9d:90:fe:68:51:30:9a:bf:ba:44:3c:a6:47:2e:05:
64:d5:70:c3:b3:bf:23:e3:d2:46:a3:6a:dc:03:eb:
c0:f8:6c:8e:9c:37:f8:01:e8:24:34:7e:d7:84:64:
60:92:da:6f:46:c4:73:2f:b2:21:a1:d2:a3:20:02:
b2:70:e4:35:ff:db:23:e8:cb:08:69:69:ed:13:06:
84:80:ad:92:4d:fb:46:83:52:72:92:57:1b:78:d1:
3b:3e:fc:22:ab:74:63:9b:60:df:aa:84:28:41:76:
b2:fb:78:07:8d:c3:bb:0c:97:95:67:95:dc:70:0d:
48:14:72:e0:fb:42:ee:06:a8:76:c2:aa:46:a7:2e:
f4:82:de:d9:e6:3a:3f:2f:09:fd:07:b7:f5:e1:7a:
fb:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:83:B6:12:8E:94:54:61:BC:A7:CE:5D:56:05:0D:18:EB:7B:2C:3D
X509v3 Authority Key Identifier:
keyid:ED:17:D1:BE:3D:57:11:C6:C9:8C:8C:CC:59:AA:F7:37:E8:65:C3:84
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914C725/31844C36809F11E7BD6A6B2EC4F9AE02/7RfRvj1XEcbJjIzMWar3N-hlw4Q.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7RfRvj1XEcbJjIzMWar3N-hlw4Q.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914C725/31844C36809F11E7BD6A6B2EC4F9AE02/B4DF66BA809F11E7B741FD2EC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.29.56.0/22
103.106.166.0/23
203.25.78.0/24
IPv6:
2403:1300::/32
Signature Algorithm: sha256WithRSAEncryption
9f:f0:9e:0f:3d:db:36:46:41:29:66:37:b2:5f:b0:93:3e:ad:
cb:6a:df:06:51:73:17:00:ef:2c:29:69:bc:3d:ac:bc:f2:18:
52:d4:0a:f8:3e:21:fe:b5:48:f4:d3:3f:aa:36:59:00:f8:c5:
af:18:22:93:ed:20:c9:09:ea:97:68:e3:c7:7b:36:1e:b2:34:
36:a6:ad:c2:c0:82:d2:7f:4a:38:57:d4:82:9b:ad:36:54:72:
f4:5b:f7:f2:dc:11:57:c8:fb:ab:0b:93:84:cb:8f:11:e2:69:
4b:08:a1:c6:55:c3:71:17:9d:d0:87:b7:a3:28:6c:63:a7:ea:
8a:3c:eb:f9:09:af:6a:95:18:0a:69:bd:03:ab:20:c5:32:a3:
8f:50:0a:d1:39:73:e3:5c:2d:ac:bd:00:9d:87:2a:8f:76:f0:
9d:f9:23:a6:8d:d9:5d:9c:07:a8:bc:1f:fa:94:5c:76:58:e8:
30:6c:b1:52:a9:3b:15:c3:fe:ba:95:8e:be:05:d7:ae:23:db:
2d:eb:6f:e1:69:12:d9:33:7a:d0:d7:41:b2:cc:08:8a:c1:69:
0e:6b:1d:f1:17:19:66:b3:8f:81:2a:2d:e5:b9:79:3b:bf:7a:
0d:57:c9:26:01:a8:74:0a:d5:59:af:99:62:3a:97:79:67:f0:
51:53:3a:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 13:39:50 2025 by rpki-client