Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/11D5AE86322911F0AD08854BC4F9AE02.roa
File: 11D5AE86322911F0AD08854BC4F9AE02.roa (raw, json)
Hash identifier: 9GzT/WS8vUmCZTggekK7F7r41xpCIkHrNLymjXK0QBI=
Subject key identifier: 0A:EA:D3:42:C4:14:36:60:BA:A5:C8:AB:56:69:F4:A3:90:A0:B4:CF
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: BD8C
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/11D5AE86322911F0AD08854BC4F9AE02.roa
Signing time: Fri 06 Jun 2025 14:16:25 +0000
ROA not before: Fri 06 Jun 2025 14:16:25 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 135834
IP address blocks: 103.80.116.0/22 maxlen: 24
103.91.86.0/24 maxlen: 24
103.91.120.0/22 maxlen: 24
103.102.119.0/24 maxlen: 24
103.102.144.0/23 maxlen: 24
103.171.209.0/24 maxlen: 24
103.185.244.0/24 maxlen: 24
103.185.245.0/24 maxlen: 24
103.228.9.0/24 maxlen: 24
2401:93c0::/48 maxlen: 48
2401:93c0:1::/48 maxlen: 48
2401:93c0:2::/48 maxlen: 48
2401:93c0:3::/48 maxlen: 48
2401:93c0:4::/48 maxlen: 48
2401:93c0:20::/48 maxlen: 48
2401:93c0:21::/48 maxlen: 48
2401:93c0:22::/48 maxlen: 48
2401:93c0:23::/48 maxlen: 48
2401:93c0:24::/48 maxlen: 48
2401:93c0:25::/48 maxlen: 48
2401:93c0:26::/48 maxlen: 48
2401:93c0:27::/48 maxlen: 48
2401:93c0:28::/48 maxlen: 48
2401:93c0:29::/48 maxlen: 48
2401:93c0:2a::/48 maxlen: 48
2401:93c0:2b::/48 maxlen: 48
2401:93c0:2c::/48 maxlen: 48
2401:93c0:2d::/48 maxlen: 48
2401:93c0:2e::/48 maxlen: 48
2401:93c0:2f::/48 maxlen: 48
2401:93c0:30::/48 maxlen: 48
2401:93c0:31::/48 maxlen: 48
2401:93c0:32::/48 maxlen: 48
2401:93c0:33::/48 maxlen: 48
2401:93c0:34::/48 maxlen: 48
2401:93c0:35::/48 maxlen: 48
2401:93c0:36::/48 maxlen: 48
2401:93c0:37::/48 maxlen: 48
2401:93c0:38::/48 maxlen: 48
2401:93c0:39::/48 maxlen: 48
2401:93c0:3a::/48 maxlen: 48
2401:93c0:3b::/48 maxlen: 48
2401:93c0:3c::/48 maxlen: 48
2401:93c0:3d::/48 maxlen: 48
2401:93c0:3e::/48 maxlen: 48
2401:93c0:3f::/48 maxlen: 48
2401:93c0:4e::/48 maxlen: 48
2401:93c0:4f::/48 maxlen: 48
2401:93c0:50::/48 maxlen: 48
2401:93c0:51::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 16 Jun 2025 08:10:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 48524 (0xbd8c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Validity
Not Before: Jun 6 14:16:25 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6842f838-5adf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:4c:a5:43:fd:77:87:a3:c3:db:d7:ed:a5:fc:
39:38:e2:a5:a5:dd:65:53:40:0f:b8:7a:d2:7e:c6:
64:1a:32:f7:48:e6:42:13:46:71:4c:fd:de:30:67:
19:36:42:fd:3c:27:72:97:4e:c2:46:e5:58:fb:a1:
f4:03:24:d4:50:bf:2c:2b:b6:ff:5c:a0:76:0a:79:
8a:21:d5:01:ee:76:a4:4d:bf:6b:47:2a:98:ee:80:
5a:2f:51:66:f8:41:14:2d:55:02:fc:8c:02:2a:3d:
02:20:26:fb:89:50:c3:f5:bd:9d:53:4a:3d:bb:88:
b7:00:d0:da:30:60:c3:55:52:03:3a:78:31:ed:1d:
3c:c9:e8:56:71:7e:61:cc:26:1a:b8:24:79:d2:f0:
70:85:0d:61:f1:bd:a1:d3:16:6a:49:17:e4:53:6d:
03:90:c7:32:e6:6d:4d:b3:19:08:04:c3:4f:a9:cf:
5a:f2:23:6f:e2:4e:bb:63:f0:72:c6:26:cb:3b:98:
85:f4:f1:f6:16:63:7d:ef:bb:a6:38:19:10:b7:77:
84:3b:05:af:96:9d:c6:46:fd:15:34:90:9d:31:d0:
c4:88:e3:c6:bd:18:cb:83:72:7a:93:1c:9c:e1:61:
35:d3:2e:2e:81:2d:a3:96:0a:7e:17:6b:a8:f5:43:
ca:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:EA:D3:42:C4:14:36:60:BA:A5:C8:AB:56:69:F4:A3:90:A0:B4:CF
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/11D5AE86322911F0AD08854BC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.80.116.0/22
103.91.86.0/24
103.91.120.0/22
103.102.119.0/24
103.102.144.0/23
103.171.209.0/24
103.185.244.0/23
103.228.9.0/24
IPv6:
2401:93c0::-2401:93c0:4:ffff:ffff:ffff:ffff:ffff
2401:93c0:20::/43
2401:93c0:4e::-2401:93c0:51:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
83:63:5f:29:8d:6f:af:b3:8c:77:d9:7b:8a:2e:c5:39:fa:c2:
32:29:d4:dc:d5:4f:db:23:1a:61:fd:7f:12:35:d6:9f:04:ea:
ef:2c:39:28:09:78:38:87:8b:70:1e:d0:02:d1:ca:6f:95:df:
e7:82:cd:97:65:77:ee:9a:89:bd:bd:e9:d7:f8:49:f4:38:f6:
eb:3b:68:9a:b8:9a:a4:28:0c:cf:da:63:c8:a3:2d:a1:e9:75:
93:fe:58:05:28:9f:0b:60:8d:71:21:1f:ea:1e:95:d8:7e:93:
d5:e7:70:bd:52:c7:0b:f4:5f:fb:f6:1b:20:98:53:b1:cc:df:
87:10:48:7b:14:c0:8f:8c:fc:6c:ff:00:77:14:0a:8f:e9:ea:
1b:73:21:e3:05:f6:d4:20:70:58:ea:f1:31:0f:89:91:c1:ff:
a5:1b:77:b0:6d:72:40:4b:71:1a:57:25:b4:72:ce:e1:19:b8:
94:74:60:15:2a:9f:45:e0:d4:7f:9b:e1:33:d8:87:b0:3e:2d:
e1:f3:38:52:21:87:39:39:43:c4:d7:a5:e4:fe:0e:91:56:62:
84:54:ae:38:33:45:25:95:f9:ae:e6:3f:88:a3:5c:a3:86:79:
39:f6:a3:a0:d2:d1:6e:a2:82:04:1d:f0:1a:c2:ef:20:76:13:
c0:d0:48:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 11:19:55 2025 by rpki-client