Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A916AAFF/7BB8BA6CBB3A11EE87C66B0FC4F9AE02/69E8AC12555811EFA88AEA24C4F9AE02.roa
File: 69E8AC12555811EFA88AEA24C4F9AE02.roa (raw, json)
Hash identifier: phqylkhfGei3IojXYcRRdYxObeB6TnyHw6jd5mx17zE=
Subject key identifier: CC:59:31:D5:36:1A:D4:AF:70:19:ED:4F:8E:8C:92:EF:A6:73:5A:C4
Certificate issuer: /CN=A916AAFF/serialNumber=E1BCC812100ED46022170789324F1CC3AFBF6AAD
Certificate serial: 013D
Authority key identifier: E1:BC:C8:12:10:0E:D4:60:22:17:07:89:32:4F:1C:C3:AF:BF:6A:AD
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4bzIEhAO1GAiFweJMk8cw6-_aq0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916AAFF/7BB8BA6CBB3A11EE87C66B0FC4F9AE02/69E8AC12555811EFA88AEA24C4F9AE02.roa
Signing time: Fri 29 Aug 2025 05:25:23 +0000
ROA not before: Fri 29 Aug 2025 05:25:23 +0000
ROA not after: Sat 31 Oct 2026 00:00:00 +0000
asID: 38819
IP address blocks: 14.0.128.0/17 maxlen: 17
14.0.128.0/24 maxlen: 24
14.0.129.0/24 maxlen: 24
14.0.130.0/24 maxlen: 24
14.0.131.0/24 maxlen: 24
14.0.132.0/22 maxlen: 22
14.0.136.0/22 maxlen: 22
14.0.136.0/24 maxlen: 24
14.0.140.0/24 maxlen: 24
14.0.141.0/24 maxlen: 24
14.0.142.0/24 maxlen: 24
14.0.143.0/24 maxlen: 24
14.0.144.0/24 maxlen: 24
14.0.145.0/24 maxlen: 24
14.0.146.0/24 maxlen: 24
14.0.152.0/21 maxlen: 21
14.0.152.0/24 maxlen: 24
14.0.153.0/24 maxlen: 24
14.0.154.0/24 maxlen: 24
14.0.155.0/24 maxlen: 24
14.0.156.0/24 maxlen: 24
14.0.157.0/24 maxlen: 24
14.0.158.0/24 maxlen: 24
14.0.159.0/24 maxlen: 24
14.0.160.0/21 maxlen: 21
14.0.160.0/24 maxlen: 24
14.0.161.0/24 maxlen: 24
14.0.162.0/24 maxlen: 24
14.0.163.0/24 maxlen: 24
14.0.164.0/24 maxlen: 24
14.0.165.0/24 maxlen: 24
14.0.166.0/24 maxlen: 24
14.0.167.0/24 maxlen: 24
14.0.168.0/21 maxlen: 21
14.0.168.0/24 maxlen: 24
14.0.169.0/24 maxlen: 24
14.0.170.0/24 maxlen: 24
14.0.171.0/24 maxlen: 24
14.0.172.0/24 maxlen: 24
14.0.173.0/24 maxlen: 24
14.0.174.0/24 maxlen: 24
14.0.175.0/24 maxlen: 24
14.0.176.0/21 maxlen: 21
14.0.176.0/24 maxlen: 24
14.0.177.0/24 maxlen: 24
14.0.178.0/24 maxlen: 24
14.0.179.0/24 maxlen: 24
14.0.180.0/24 maxlen: 24
14.0.181.0/24 maxlen: 24
14.0.182.0/24 maxlen: 24
14.0.183.0/24 maxlen: 24
14.0.192.0/24 maxlen: 24
14.0.193.0/24 maxlen: 24
14.0.194.0/24 maxlen: 24
14.0.195.0/24 maxlen: 24
14.0.196.0/22 maxlen: 22
14.0.200.0/24 maxlen: 24
14.0.201.0/24 maxlen: 24
14.0.202.0/23 maxlen: 23
14.0.204.0/23 maxlen: 23
14.0.206.0/24 maxlen: 24
14.0.207.0/24 maxlen: 24
14.0.208.0/21 maxlen: 21
14.0.208.0/24 maxlen: 24
14.0.215.0/24 maxlen: 24
14.0.216.0/21 maxlen: 21
14.0.216.0/24 maxlen: 24
14.0.223.0/24 maxlen: 24
14.0.224.0/21 maxlen: 21
14.0.224.0/24 maxlen: 24
14.0.225.0/24 maxlen: 24
14.0.226.0/24 maxlen: 24
14.0.227.0/24 maxlen: 24
14.0.228.0/24 maxlen: 24
14.0.229.0/24 maxlen: 24
14.0.230.0/24 maxlen: 24
14.0.231.0/24 maxlen: 24
14.0.232.0/21 maxlen: 21
14.0.232.0/24 maxlen: 24
14.0.233.0/24 maxlen: 24
14.0.234.0/24 maxlen: 24
14.0.235.0/24 maxlen: 24
14.0.236.0/24 maxlen: 24
14.0.237.0/24 maxlen: 24
14.0.240.0/21 maxlen: 21
14.0.240.0/24 maxlen: 24
14.0.247.0/24 maxlen: 24
110.4.0.0/19 maxlen: 19
110.4.0.0/24 maxlen: 24
110.4.1.0/24 maxlen: 24
110.4.2.0/24 maxlen: 24
110.4.4.0/24 maxlen: 24
110.4.8.0/24 maxlen: 24
110.4.9.0/24 maxlen: 24
110.4.11.0/24 maxlen: 24
110.4.13.0/24 maxlen: 24
110.4.14.0/24 maxlen: 24
110.4.15.0/24 maxlen: 24
110.4.16.0/24 maxlen: 24
110.4.17.0/24 maxlen: 24
110.4.18.0/24 maxlen: 24
110.4.19.0/24 maxlen: 24
110.4.20.0/24 maxlen: 24
110.4.21.0/24 maxlen: 24
110.4.22.0/24 maxlen: 24
110.4.25.0/24 maxlen: 24
203.210.0.0/20 maxlen: 20
203.210.2.0/24 maxlen: 24
203.210.3.0/24 maxlen: 24
203.210.4.0/24 maxlen: 24
203.210.6.0/24 maxlen: 24
203.210.7.0/24 maxlen: 24
203.210.8.0/24 maxlen: 24
2403:1000::/32 maxlen: 32
2403:1000:1100::/40 maxlen: 40
2403:1000:1200::/40 maxlen: 40
2403:1000:1300::/40 maxlen: 40
2403:1000:3100::/40 maxlen: 40
2403:1000:4100::/40 maxlen: 40
2403:1000:5100::/40 maxlen: 40
2403:1000:5300::/40 maxlen: 40
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A916AAFF/7BB8BA6CBB3A11EE87C66B0FC4F9AE02/4bzIEhAO1GAiFweJMk8cw6-_aq0.crl
rsync://rpki.apnic.net/member_repository/A916AAFF/7BB8BA6CBB3A11EE87C66B0FC4F9AE02/4bzIEhAO1GAiFweJMk8cw6-_aq0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4bzIEhAO1GAiFweJMk8cw6-_aq0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 16 Sep 2025 04:38:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 317 (0x13d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916AAFF, serialNumber=E1BCC812100ED46022170789324F1CC3AFBF6AAD
Validity
Not Before: Aug 29 05:25:23 2025 GMT
Not After : Oct 31 00:00:00 2026 GMT
Subject: CN=68b139c2-a98a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:4b:f5:a1:42:6d:93:5c:b4:21:e6:35:93:e2:
1d:ad:28:0c:92:24:39:f7:e1:55:dd:ed:a2:10:7c:
70:60:cc:76:6a:19:58:7d:14:48:78:d8:f7:ad:4f:
8c:1c:5e:6e:6a:26:f5:4f:9a:a1:89:bf:5e:3a:8e:
3e:9c:40:68:4b:97:ff:22:79:24:1a:e6:24:9b:c3:
92:e4:2d:0e:10:e9:1e:84:a4:e9:a0:99:9a:92:ec:
02:6e:72:39:d4:7c:e6:be:41:db:05:61:01:d3:0b:
ed:64:ba:e2:e2:dd:49:93:55:6e:6f:f3:01:23:10:
0c:44:0e:f7:9d:c9:b4:35:1f:98:b8:7e:ea:e4:82:
90:e0:80:4f:45:28:65:41:d0:6e:a8:ef:c5:ed:09:
e4:d6:06:59:40:ca:d0:d8:8e:ee:00:fb:58:9b:0f:
bf:a8:40:6b:fa:3d:35:46:21:a6:6d:e5:ab:3f:6b:
45:03:2a:11:06:3d:31:7a:93:c9:02:1f:25:5a:95:
9e:b4:8b:1c:cf:fe:ef:00:56:e9:39:d9:b3:c4:91:
fd:0f:59:c9:3a:75:ea:c5:c2:fc:67:3d:0b:89:83:
38:f4:03:22:0d:08:eb:ce:a3:fe:89:79:73:ec:2a:
8e:f2:58:ec:50:a8:80:2a:43:c1:62:0e:93:ff:76:
75:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:59:31:D5:36:1A:D4:AF:70:19:ED:4F:8E:8C:92:EF:A6:73:5A:C4
X509v3 Authority Key Identifier:
keyid:E1:BC:C8:12:10:0E:D4:60:22:17:07:89:32:4F:1C:C3:AF:BF:6A:AD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916AAFF/7BB8BA6CBB3A11EE87C66B0FC4F9AE02/4bzIEhAO1GAiFweJMk8cw6-_aq0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4bzIEhAO1GAiFweJMk8cw6-_aq0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916AAFF/7BB8BA6CBB3A11EE87C66B0FC4F9AE02/69E8AC12555811EFA88AEA24C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
14.0.128.0/17
110.4.0.0/19
203.210.0.0/20
IPv6:
2403:1000::/32
Signature Algorithm: sha256WithRSAEncryption
80:20:52:72:1c:03:2b:1d:ce:00:86:ff:3a:72:14:29:fa:bc:
5d:7b:81:c4:b6:5c:35:b2:ae:33:36:0d:64:9d:20:76:5c:fe:
9f:7d:3a:2f:5c:4c:1e:6e:2e:00:df:6a:c3:38:e3:90:2a:a2:
dc:d6:ac:f7:d1:6f:f2:e6:8b:45:bb:70:14:b9:00:dd:53:fc:
c4:28:62:40:dc:23:61:b3:5a:6d:77:96:c6:3a:a2:09:ba:ba:
4e:35:9e:85:32:c8:a1:a4:07:ed:14:bc:b7:c3:50:e7:ae:8c:
ec:ab:4f:c6:25:2e:68:f9:27:01:0f:90:59:50:cd:89:bf:d6:
f3:d2:70:52:f0:7e:2e:15:7d:98:53:17:8b:20:4c:71:de:f4:
3c:23:dc:43:4d:ea:b4:7f:c8:ea:7c:b4:d6:f7:cb:df:c0:5c:
e0:6f:46:39:49:21:6d:28:30:87:52:2f:67:d5:dc:79:37:12:
e3:d6:48:7a:1a:cb:87:15:88:d8:d1:1b:d9:53:c9:e1:1c:6f:
91:67:53:6c:df:07:ce:16:41:8b:fb:3e:15:16:dc:e1:d9:57:
17:a0:c1:70:e9:0a:a7:f9:e9:54:97:a2:cd:13:8e:c9:80:aa:
a6:75:16:51:cf:c5:9a:22:44:1d:c7:aa:6c:63:a0:41:b1:5a:
2a:ec:95:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 9 13:12:17 2025 by rpki-client