Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A915A0CD/46723F1E89EC11EA81C04F1EC4F9AE02/05921A7489D111F08B040F6FC4F9AE02.roa
File: 05921A7489D111F08B040F6FC4F9AE02.roa (raw, json)
Hash identifier: HkD9Gi2HdQeYNRc4HA9ugkBPeIrGQkmYe25zzQQP0bo=
Subject key identifier: E5:C0:01:AD:9C:1B:A4:9C:E1:09:E3:C8:A7:B9:3D:8A:35:E6:37:08
Certificate issuer: /CN=A915A0CD/serialNumber=38193720821E07D6918E3A79FBE0823C6732E264
Certificate serial: 0E75
Authority key identifier: 38:19:37:20:82:1E:07:D6:91:8E:3A:79:FB:E0:82:3C:67:32:E2:64
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OBk3IIIeB9aRjjp5--CCPGcy4mQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915A0CD/46723F1E89EC11EA81C04F1EC4F9AE02/05921A7489D111F08B040F6FC4F9AE02.roa
Signing time: Thu 04 Sep 2025 20:53:19 +0000
ROA not before: Thu 04 Sep 2025 20:53:19 +0000
ROA not after: Wed 30 Sep 2026 00:00:00 +0000
asID: 133933
IP address blocks: 14.192.128.0/19 maxlen: 19
14.192.128.0/24 maxlen: 24
14.192.129.0/24 maxlen: 24
14.192.130.0/24 maxlen: 24
14.192.131.0/24 maxlen: 24
14.192.132.0/24 maxlen: 24
14.192.133.0/24 maxlen: 24
14.192.134.0/24 maxlen: 24
14.192.135.0/24 maxlen: 24
14.192.136.0/24 maxlen: 24
14.192.137.0/24 maxlen: 24
14.192.138.0/24 maxlen: 24
14.192.139.0/24 maxlen: 24
14.192.140.0/24 maxlen: 24
14.192.141.0/24 maxlen: 24
14.192.142.0/24 maxlen: 24
14.192.143.0/24 maxlen: 24
14.192.144.0/24 maxlen: 24
14.192.145.0/24 maxlen: 24
14.192.146.0/24 maxlen: 24
14.192.147.0/24 maxlen: 24
14.192.151.0/24 maxlen: 24
14.192.152.0/24 maxlen: 24
14.192.153.0/24 maxlen: 24
14.192.154.0/24 maxlen: 24
14.192.155.0/24 maxlen: 24
14.192.156.0/24 maxlen: 24
14.192.157.0/24 maxlen: 24
14.192.158.0/24 maxlen: 24
14.192.159.0/24 maxlen: 24
43.247.120.0/24 maxlen: 24
43.247.121.0/24 maxlen: 24
43.247.122.0/24 maxlen: 24
43.247.123.0/24 maxlen: 24
103.20.132.0/24 maxlen: 24
103.20.133.0/24 maxlen: 24
103.20.134.0/24 maxlen: 24
103.20.135.0/24 maxlen: 24
111.92.128.0/19 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A915A0CD/46723F1E89EC11EA81C04F1EC4F9AE02/OBk3IIIeB9aRjjp5--CCPGcy4mQ.crl
rsync://rpki.apnic.net/member_repository/A915A0CD/46723F1E89EC11EA81C04F1EC4F9AE02/OBk3IIIeB9aRjjp5--CCPGcy4mQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OBk3IIIeB9aRjjp5--CCPGcy4mQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 13 Sep 2025 20:09:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3701 (0xe75)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915A0CD, serialNumber=38193720821E07D6918E3A79FBE0823C6732E264
Validity
Not Before: Sep 4 20:53:19 2025 GMT
Not After : Sep 30 00:00:00 2026 GMT
Subject: CN=68b9fc3e-932e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:11:83:87:fc:69:16:5e:53:a5:63:46:c2:f7:
cd:ca:0e:d5:2f:54:50:52:7b:fc:7e:69:c5:46:01:
dd:cf:d7:9a:e6:3d:db:86:2b:15:6b:37:9f:27:67:
e7:ce:58:c1:e4:0d:8e:04:10:78:a7:d6:d0:4c:53:
42:d2:24:bf:f5:cf:99:69:51:67:04:f8:19:bd:99:
a0:ba:e7:fd:d6:01:fe:d7:76:70:85:b1:a7:c0:38:
f0:05:cd:55:f0:51:fb:62:95:c2:d3:20:5d:cb:d5:
65:9c:3d:5b:e0:5d:6c:65:db:f5:f4:4d:1a:f5:ba:
a5:2f:96:fc:f9:7b:fd:01:31:53:c6:51:64:9c:5a:
0c:86:83:55:f5:25:3c:a4:3c:60:4d:07:7a:eb:1b:
1c:e9:a6:bd:6f:33:f2:2f:b5:5c:65:eb:ac:84:16:
0d:f5:88:d4:f0:ad:28:05:18:c2:ee:63:96:cd:ee:
67:a9:66:8a:30:17:79:d1:b6:b2:a3:ce:4d:bc:b1:
d0:40:51:e4:15:a7:4d:12:c3:f5:24:1a:17:a9:7c:
08:30:7b:cf:0c:a2:aa:70:7e:64:93:3c:3b:a0:32:
21:67:83:be:e3:8f:81:2a:66:e4:33:90:32:f8:7a:
d2:0b:c7:c9:b2:69:e0:c6:d2:a8:02:1f:5f:bb:9d:
5d:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:C0:01:AD:9C:1B:A4:9C:E1:09:E3:C8:A7:B9:3D:8A:35:E6:37:08
X509v3 Authority Key Identifier:
keyid:38:19:37:20:82:1E:07:D6:91:8E:3A:79:FB:E0:82:3C:67:32:E2:64
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915A0CD/46723F1E89EC11EA81C04F1EC4F9AE02/OBk3IIIeB9aRjjp5--CCPGcy4mQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OBk3IIIeB9aRjjp5--CCPGcy4mQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915A0CD/46723F1E89EC11EA81C04F1EC4F9AE02/05921A7489D111F08B040F6FC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
14.192.128.0/19
43.247.120.0/22
103.20.132.0/22
111.92.128.0/19
Signature Algorithm: sha256WithRSAEncryption
83:d7:a7:78:7b:05:84:dd:e1:f6:c6:3d:58:0e:59:d0:f9:56:
d3:e4:0f:37:64:99:66:e5:dd:98:11:ac:7c:66:c6:89:47:3f:
f8:0d:58:f4:ea:ea:57:a1:7f:21:52:ed:29:60:81:0f:e4:94:
85:20:2c:be:8e:7e:ec:8b:af:ae:95:99:49:5a:ef:07:ca:e8:
15:56:68:c2:5a:36:c8:1f:cd:4a:b5:d7:07:61:31:76:70:1f:
c2:f7:33:94:b9:ad:0b:6a:90:fe:02:b0:24:2b:3f:d8:fe:f4:
ae:37:dc:eb:e7:08:48:72:a8:f4:73:e4:a8:cf:d3:6f:0f:e7:
43:b9:05:a9:74:2f:1a:62:9c:e9:f4:e7:62:58:65:ad:a8:61:
c6:36:6c:84:eb:d5:6b:82:f8:79:84:c2:44:5d:d2:2d:32:33:
96:05:17:73:40:59:ce:0b:49:86:73:fe:b4:3e:78:06:53:58:
dc:9c:d0:a7:01:57:ee:85:95:63:98:fe:39:6c:c4:cd:5b:dc:
eb:21:9f:d9:36:51:ae:f5:ae:5d:f6:46:6e:c2:78:e4:db:5a:
68:b5:2b:53:8f:07:73:6b:0e:39:9d:b5:9e:99:8c:94:b8:e7:
28:cb:54:90:12:c0:df:b6:f9:12:b2:70:36:fb:06:0d:b9:38:
71:22:85:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 8 11:23:29 2025 by rpki-client