Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/56D13C48871611F09D688364C4F9AE02.roa
File: 56D13C48871611F09D688364C4F9AE02.roa (raw, json)
Hash identifier: fMGLU9EpB4kUXZpZTEiuotoKEr6fM2VPfWUk0MRm74k=
Subject key identifier: C1:6B:09:5F:9F:27:06:01:6B:C0:B8:38:DF:B4:EC:52:0B:EE:6B:97
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: C3BE
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/56D13C48871611F09D688364C4F9AE02.roa
Signing time: Mon 01 Sep 2025 09:35:51 +0000
ROA not before: Mon 01 Sep 2025 09:35:51 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 151690
IP address blocks: 43.228.166.0/23 maxlen: 24
43.230.132.0/23 maxlen: 24
103.96.15.0/24 maxlen: 24
103.109.220.0/22 maxlen: 24
103.110.244.0/23 maxlen: 24
103.115.128.0/22 maxlen: 24
103.147.93.0/24 maxlen: 24
103.157.162.0/23 maxlen: 24
103.162.74.0/24 maxlen: 24
103.162.75.0/24 maxlen: 24
103.172.56.0/24 maxlen: 24
103.185.100.0/24 maxlen: 24
103.216.99.0/24 maxlen: 24
103.225.70.0/24 maxlen: 24
103.239.12.0/23 maxlen: 24
2001:df1:8040::/48 maxlen: 48
2001:df2:23c0::/48 maxlen: 48
2001:df2:9640::/48 maxlen: 48
2001:df3:29c0::/48 maxlen: 48
2001:df4:88c0::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 11 Sep 2025 15:26:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 50110 (0xc3be)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Validity
Not Before: Sep 1 09:35:51 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=68b568f7-79a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:cb:58:08:9f:ee:c5:94:9c:37:45:73:47:a6:
ea:5d:d0:44:3c:1b:a3:cd:6b:10:0b:bc:71:02:6d:
c5:28:df:a6:55:49:ca:e9:bd:a5:18:08:46:e6:f5:
db:09:00:7f:85:bd:d0:8e:8b:1b:f7:64:1e:50:96:
b9:9a:54:fd:91:0e:28:80:a7:2a:38:30:05:e0:6f:
5f:eb:1e:08:90:2f:0c:c3:4b:85:55:69:d5:86:f4:
2f:eb:e1:b0:cc:95:c7:78:b9:84:10:48:b7:7e:11:
13:da:2f:aa:b0:47:ff:3d:83:17:bf:7f:3f:6f:f1:
93:b9:d2:b3:63:12:21:27:a3:04:fb:e1:9e:2e:e0:
a0:8b:7c:84:25:80:ad:e1:61:72:c8:41:79:81:42:
17:86:cd:e0:60:61:80:9c:63:c7:b0:3a:a9:8a:58:
23:79:79:b4:36:2e:45:85:24:08:60:b7:36:14:7a:
1a:70:03:18:aa:93:64:78:8b:1d:d6:44:51:78:d4:
f9:40:e5:2b:34:32:39:ec:e2:78:94:59:cd:2e:0c:
a5:4e:d4:aa:48:51:d3:41:63:93:88:a9:11:4e:18:
d5:df:06:1c:5b:c9:50:1b:70:f3:cf:27:6a:79:7d:
c8:68:71:73:d0:f2:15:f6:b8:13:d2:3b:e1:2c:59:
f1:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:6B:09:5F:9F:27:06:01:6B:C0:B8:38:DF:B4:EC:52:0B:EE:6B:97
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/56D13C48871611F09D688364C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
43.228.166.0/23
43.230.132.0/23
103.96.15.0/24
103.109.220.0/22
103.110.244.0/23
103.115.128.0/22
103.147.93.0/24
103.157.162.0/23
103.162.74.0/23
103.172.56.0/24
103.185.100.0/24
103.216.99.0/24
103.225.70.0/24
103.239.12.0/23
IPv6:
2001:df1:8040::/48
2001:df2:23c0::/48
2001:df2:9640::/48
2001:df3:29c0::/48
2001:df4:88c0::/48
Signature Algorithm: sha256WithRSAEncryption
80:4d:ae:42:3d:fd:58:4f:d7:02:97:8f:d5:44:93:7d:b2:04:
99:e9:40:66:17:38:63:8c:b3:e7:79:f2:61:49:70:9a:e2:10:
91:20:57:aa:0d:28:55:28:d8:43:0f:d7:bb:1c:b5:fe:37:62:
63:3d:e2:8c:f8:1c:a5:28:f1:ba:fb:19:13:8c:b8:00:71:75:
7e:3c:5f:6c:77:ee:9f:18:e9:28:49:dd:df:b6:23:8e:95:47:
fe:73:3a:bb:e0:47:2a:76:7e:c3:fc:73:41:0e:17:f6:b5:e1:
f0:72:f1:8c:49:9d:56:4a:ad:68:a6:4c:40:40:1e:cb:42:e7:
88:14:1d:e7:2a:fe:af:b9:af:96:90:16:8d:cd:9d:af:ea:25:
36:c2:0b:7c:6e:e0:46:31:8f:32:59:ca:4c:88:28:6e:ba:f3:
fe:34:9c:29:53:19:ec:ab:9b:dd:b6:59:f0:98:24:81:da:b7:
2a:c9:ea:d8:be:e7:d9:29:3d:bc:bf:af:9d:df:af:d8:40:2f:
80:88:e1:55:7f:95:20:72:b7:30:f1:88:b2:d2:19:64:8d:aa:
d4:80:89:aa:e3:91:8c:61:0c:7d:6f:71:60:a0:35:7a:44:63:
bc:80:c9:34:1e:cc:4b:64:09:08:04:b2:15:32:1f:9f:b0:db:
10:fa:29:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 6 14:14:39 2025 by rpki-client