Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A918F1C9/6A57AB8C7F9511EAB0ED8537C4F9AE02/93E4B52CE43E11EF91571D16C4F9AE02.roa
File: 93E4B52CE43E11EF91571D16C4F9AE02.roa (raw, json)
Hash identifier: bxEMXPw0Uf6AR6ksTo+EYnAV7IQpuoAnSjrI4XOmEWM=
Subject key identifier: BF:CD:1B:B1:D6:B4:80:5D:B7:05:B2:CC:F3:03:59:91:5A:95:DB:E2
Certificate issuer: /CN=A918F1C9/serialNumber=DE4CE960A3930AB4C227FCE8F857C084197F08D0
Certificate serial: 77
Authority key identifier: DE:4C:E9:60:A3:93:0A:B4:C2:27:FC:E8:F8:57:C0:84:19:7F:08:D0
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3kzpYKOTCrTCJ_zo-FfAhBl_CNA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918F1C9/6A57AB8C7F9511EAB0ED8537C4F9AE02/93E4B52CE43E11EF91571D16C4F9AE02.roa
Signing time: Thu 18 Sep 2025 20:31:01 +0000
ROA not before: Thu 18 Sep 2025 20:31:01 +0000
ROA not after: Tue 01 Dec 2026 00:00:00 +0000
asID: 138167
IP address blocks: 103.121.224.0/24 maxlen: 24
103.121.225.0/24 maxlen: 24
103.121.226.0/24 maxlen: 24
103.121.227.0/24 maxlen: 24
2403:72c0:a100::/40 maxlen: 40
2403:72c0:a200::/40 maxlen: 40
2403:72c0:a300::/40 maxlen: 40
2403:72c0:a400::/40 maxlen: 40
2403:72c0:a500::/40 maxlen: 40
2403:72c0:a600::/40 maxlen: 40
2403:72c0:a700::/40 maxlen: 40
2403:72c0:a800::/40 maxlen: 40
2403:72c0:a900::/40 maxlen: 40
2403:72c0:aa00::/40 maxlen: 40
2403:72c0:ab00::/40 maxlen: 40
2403:72c0:ac00::/40 maxlen: 40
2403:72c0:ad00::/40 maxlen: 40
2403:72c0:ae00::/40 maxlen: 40
2403:72c0:af00::/40 maxlen: 40
2403:72c0:b100::/40 maxlen: 40
2403:72c0:b200::/40 maxlen: 40
2403:72c0:b300::/40 maxlen: 40
2403:72c0:b400::/40 maxlen: 40
2403:72c0:b500::/40 maxlen: 40
2403:72c0:b600::/40 maxlen: 40
2403:72c0:b700::/40 maxlen: 40
2403:72c0:b800::/40 maxlen: 40
2403:72c0:b900::/40 maxlen: 40
2403:72c0:ba00::/40 maxlen: 40
2403:72c0:bb00::/40 maxlen: 40
2403:72c0:bc00::/40 maxlen: 40
2403:72c0:bd00::/40 maxlen: 40
2403:72c0:be00::/40 maxlen: 40
2403:72c0:bf00::/40 maxlen: 40
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918F1C9/6A57AB8C7F9511EAB0ED8537C4F9AE02/3kzpYKOTCrTCJ_zo-FfAhBl_CNA.crl
rsync://rpki.apnic.net/member_repository/A918F1C9/6A57AB8C7F9511EAB0ED8537C4F9AE02/3kzpYKOTCrTCJ_zo-FfAhBl_CNA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3kzpYKOTCrTCJ_zo-FfAhBl_CNA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 25 Sep 2025 20:31:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 119 (0x77)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918F1C9, serialNumber=DE4CE960A3930AB4C227FCE8F857C084197F08D0
Validity
Not Before: Sep 18 20:31:01 2025 GMT
Not After : Dec 1 00:00:00 2026 GMT
Subject: CN=68cc6c05-5857
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:9d:b2:7b:3b:e7:d4:51:bd:68:70:28:f8:d4:
92:8c:83:35:92:a3:3b:fd:8e:20:b8:fe:0b:e8:be:
de:c6:59:af:9a:0b:97:a0:d2:10:55:51:9a:85:df:
8a:3f:43:33:c5:12:d3:44:2b:a1:ec:ba:d7:8f:84:
bb:6e:1d:60:ac:28:2e:ad:77:b0:91:3a:96:7f:fe:
88:11:9b:f8:5c:b8:eb:b1:02:91:8b:c1:67:4d:bb:
26:c4:2d:ec:0b:14:f7:f2:ff:a7:4b:95:05:10:86:
96:c1:49:0f:db:70:5c:ce:4d:f3:3b:24:64:d2:e4:
53:76:9e:de:e5:29:9a:a9:c4:6b:60:d4:d3:60:fe:
fe:06:17:2b:c9:3a:84:23:6c:89:37:c6:de:2c:74:
13:78:32:34:4b:a2:5d:ca:45:fe:ff:74:03:12:e9:
06:eb:54:6a:14:f3:b3:6b:5e:74:ad:5c:b2:d0:b3:
54:2c:d3:53:aa:a2:6f:d4:1d:b8:63:7a:4a:ef:09:
b2:e0:a2:48:61:47:72:36:bc:7b:dc:28:dc:f2:ec:
23:0e:ad:5d:ba:4f:b5:80:ea:b6:29:77:23:08:3b:
ba:72:40:ad:fe:4f:ab:dd:19:cb:67:00:5b:73:dd:
c2:c6:13:5c:f3:21:eb:a2:ed:9b:88:26:91:b6:84:
3d:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:CD:1B:B1:D6:B4:80:5D:B7:05:B2:CC:F3:03:59:91:5A:95:DB:E2
X509v3 Authority Key Identifier:
keyid:DE:4C:E9:60:A3:93:0A:B4:C2:27:FC:E8:F8:57:C0:84:19:7F:08:D0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918F1C9/6A57AB8C7F9511EAB0ED8537C4F9AE02/3kzpYKOTCrTCJ_zo-FfAhBl_CNA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3kzpYKOTCrTCJ_zo-FfAhBl_CNA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918F1C9/6A57AB8C7F9511EAB0ED8537C4F9AE02/93E4B52CE43E11EF91571D16C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.121.224.0/22
IPv6:
2403:72c0:a100::-2403:72c0:afff:ffff:ffff:ffff:ffff:ffff
2403:72c0:b100::-2403:72c0:bfff:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
d3:61:b8:67:6f:cd:40:50:1e:8b:09:9e:74:17:cc:5b:25:50:
1c:90:24:13:9f:e1:8f:df:2a:64:40:d7:5e:10:08:2f:5c:a8:
67:9a:2a:41:14:11:41:b4:d7:f0:3b:33:bc:d5:06:9a:cd:86:
ca:93:3f:2d:9b:49:94:c5:71:d0:d7:28:47:f4:a4:75:b3:11:
01:a6:28:2c:93:11:95:c8:7b:05:62:68:22:d6:6e:09:31:85:
56:c5:c9:96:82:fa:bd:fb:f3:22:8b:89:5c:cf:b7:78:72:46:
9e:f4:62:61:cb:d9:08:32:4c:db:43:6c:74:c0:44:4d:12:06:
eb:1d:65:15:e7:8d:cf:36:89:ac:85:46:c5:ce:d1:1d:77:64:
63:53:d9:ad:5f:4d:28:48:e7:ee:70:09:d3:05:5c:d1:63:41:
e9:b3:01:21:21:7b:bb:5f:82:b0:f0:2e:ca:fb:16:3d:a1:a1:
e0:4c:9c:7d:31:58:92:7c:39:3f:56:1f:ce:fd:c6:87:6b:4b:
9d:6d:69:37:cc:cf:3c:d1:68:90:a2:20:d1:57:54:24:69:1e:
5e:61:c0:3b:f7:bc:1b:29:e3:ca:38:88:4f:9e:0a:59:f4:31:
2f:d8:44:20:df:04:5c:c9:fe:26:e2:7a:ef:14:98:ef:4c:01:
c6:e1:5b:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 19 07:33:54 2025 by rpki-client