Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A919C3BE/947B3506093811EA95CA3129C4F9AE02/F0202A84B36311F082F02072C4F9AE02.roa
File: F0202A84B36311F082F02072C4F9AE02.roa (raw, json)
Hash identifier: BPqEGs/kp4/YORti6uUMV8XFvZq0a3v1h7gImxJAxZo=
Subject key identifier: 7A:78:BE:10:E3:5A:6F:02:4F:6A:DF:32:6A:4B:5E:88:BB:C4:18:31
Certificate issuer: /CN=A919C3BE/serialNumber=C467CB2CCB9C21A707B5DFBCEABA054C190523AE
Certificate serial: 0CC9
Authority key identifier: C4:67:CB:2C:CB:9C:21:A7:07:B5:DF:BC:EA:BA:05:4C:19:05:23:AE
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xGfLLMucIacHtd-86roFTBkFI64.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A919C3BE/947B3506093811EA95CA3129C4F9AE02/F0202A84B36311F082F02072C4F9AE02.roa
Signing time: Mon 27 Oct 2025 18:37:06 +0000
ROA not before: Mon 27 Oct 2025 18:37:06 +0000
ROA not after: Tue 31 Mar 2026 00:00:00 +0000
asID: 134970
IP address blocks: 103.251.244.0/22 maxlen: 24
103.251.244.0/23 maxlen: 24
103.251.245.0/24 maxlen: 24
103.251.246.0/24 maxlen: 24
103.251.247.0/24 maxlen: 24
220.247.128.0/22 maxlen: 24
220.247.128.0/24 maxlen: 24
220.247.130.0/23 maxlen: 23
220.247.130.0/24 maxlen: 24
220.247.131.0/24 maxlen: 24
2407:7380::/48 maxlen: 48
2407:7380:b::/48 maxlen: 48
2407:7380:c::/48 maxlen: 48
2407:7380:d::/48 maxlen: 48
2407:7380:1000::/48 maxlen: 48
2407:7380:2000::/48 maxlen: 48
2407:7380:3000::/48 maxlen: 48
2407:7380:4000::/48 maxlen: 48
2407:7380:5000::/48 maxlen: 48
2407:7380:6000::/48 maxlen: 48
2407:7380:7000::/48 maxlen: 48
2407:7380:8000::/48 maxlen: 48
2407:7380:9000::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A919C3BE/947B3506093811EA95CA3129C4F9AE02/xGfLLMucIacHtd-86roFTBkFI64.crl
rsync://rpki.apnic.net/member_repository/A919C3BE/947B3506093811EA95CA3129C4F9AE02/xGfLLMucIacHtd-86roFTBkFI64.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xGfLLMucIacHtd-86roFTBkFI64.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 09 Nov 2025 18:26:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3273 (0xcc9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A919C3BE, serialNumber=C467CB2CCB9C21A707B5DFBCEABA054C190523AE
Validity
Not Before: Oct 27 18:37:06 2025 GMT
Not After : Mar 31 00:00:00 2026 GMT
Subject: CN=68ffbbd2-9ba5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:f1:95:a5:2a:ac:2f:5f:e4:24:66:10:2e:1e:
ef:44:a2:29:72:15:ef:28:e1:15:5e:7e:7f:a4:b3:
d4:be:e6:2d:e6:be:af:c4:c3:9a:ae:2c:f7:b3:93:
e9:43:66:59:e8:12:3f:20:55:56:d0:53:52:8b:91:
0f:69:fc:98:6e:04:bb:62:21:49:5a:9c:6e:48:ac:
27:96:56:74:a6:a1:a5:df:1c:11:1b:e6:55:22:f0:
62:52:28:bf:c1:ec:62:df:fe:2e:5b:88:3b:be:62:
ca:47:6f:46:26:68:be:be:76:b7:4e:71:59:c5:0c:
32:46:57:c6:68:2e:6f:18:bb:da:8b:35:0a:bc:f5:
5c:65:7f:ff:99:1b:69:d6:23:24:f0:1d:90:90:42:
ea:a1:07:f2:1e:d3:31:22:1c:d7:64:b9:23:79:1b:
dd:bc:e7:90:e4:a0:6d:51:e5:ef:b0:8b:55:f5:ac:
46:0e:e7:4d:32:dd:c1:87:3e:e2:16:d3:9d:f3:93:
ff:62:9f:bd:f9:63:6b:29:b6:e1:2c:27:b5:08:00:
c7:84:54:9e:5e:e3:b6:b6:e4:7f:99:f6:b6:dd:d0:
03:dc:92:48:15:db:76:f7:05:c1:1e:a0:d4:e9:e5:
83:bb:fe:fe:b1:d6:ec:53:24:45:37:f2:b9:d5:cd:
ab:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:78:BE:10:E3:5A:6F:02:4F:6A:DF:32:6A:4B:5E:88:BB:C4:18:31
X509v3 Authority Key Identifier:
keyid:C4:67:CB:2C:CB:9C:21:A7:07:B5:DF:BC:EA:BA:05:4C:19:05:23:AE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A919C3BE/947B3506093811EA95CA3129C4F9AE02/xGfLLMucIacHtd-86roFTBkFI64.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xGfLLMucIacHtd-86roFTBkFI64.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919C3BE/947B3506093811EA95CA3129C4F9AE02/F0202A84B36311F082F02072C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.251.244.0/22
220.247.128.0/22
IPv6:
2407:7380::/48
2407:7380:b::-2407:7380:d:ffff:ffff:ffff:ffff:ffff
2407:7380:1000::/48
2407:7380:2000::/48
2407:7380:3000::/48
2407:7380:4000::/48
2407:7380:5000::/48
2407:7380:6000::/48
2407:7380:7000::/48
2407:7380:8000::/48
2407:7380:9000::/48
Signature Algorithm: sha256WithRSAEncryption
6b:1e:f5:cd:2b:7a:ed:1e:6d:37:1a:f8:cd:b2:e7:5b:88:8c:
48:cb:1a:48:94:29:20:b3:6f:e0:d6:42:98:73:1e:7a:2d:1c:
2a:17:36:50:fc:7c:85:29:3a:66:ee:04:6b:b2:90:e6:e7:f3:
ef:4c:30:76:50:19:c0:23:6a:75:dd:0d:0d:36:e1:07:1b:de:
35:b1:d8:40:0d:24:e3:c9:c0:18:8c:c4:3c:a7:8e:70:81:af:
d9:8a:2a:c1:69:ba:41:28:11:76:a2:f4:ae:a8:6d:c9:4d:84:
dd:64:2e:6a:77:50:41:4c:3e:fe:1b:a1:77:1c:e3:97:8e:74:
95:bd:92:8e:14:c9:be:58:3d:e6:67:5d:b7:9d:e4:95:ec:e2:
ec:e3:6f:c6:49:c3:d9:ea:06:3f:71:a3:01:13:59:06:bb:ff:
cc:7b:fa:d8:5f:81:26:b8:f4:40:47:52:a5:d7:ca:37:d4:70:
81:90:8c:91:4f:49:c4:0f:c9:65:23:47:9d:c4:7d:6a:a7:8c:
84:4d:74:0d:3c:9c:f1:3a:95:ca:b7:6c:69:a4:b8:5f:23:8f:
48:d6:05:78:a3:5a:a7:80:cc:db:c3:68:94:e0:39:63:99:be:
6c:3f:9f:8b:e1:4c:ad:40:0e:c9:f9:75:e0:86:b7:43:7f:81:
cc:7a:62:79
-----BEGIN CERTIFICATE-----
MIIF8DCCBNigAwIBAgICDMkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OUMzQkUxMTAvBgNVBAUTKEM0NjdDQjJDQ0I5QzIxQTcwN0I1REZCQ0VBQkEwNTRD
MTkwNTIzQUUwHhcNMjUxMDI3MTgzNzA2WhcNMjYwMzMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02OGZmYmJkMi05YmE1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAo/GVpSqsL1/kJGYQLh7vRKIpchXvKOEVXn5/pLPUvuYt5r6vxMOariz3s5Pp
Q2ZZ6BI/IFVW0FNSi5EPafyYbgS7YiFJWpxuSKwnllZ0pqGl3xwRG+ZVIvBiUii/
wexi3/4uW4g7vmLKR29GJmi+vna3TnFZxQwyRlfGaC5vGLvaizUKvPVcZX//mRtp
1iMk8B2QkELqoQfyHtMxIhzXZLkjeRvdvOeQ5KBtUeXvsItV9axGDudNMt3Bhz7i
FtOd85P/Yp+9+WNrKbbhLCe1CADHhFSeXuO2tuR/mfa23dAD3JJIFdt29wXBHqDU
6eWDu/7+sdbsUyRFN/K51c2rSwIDAQABo4IDFDCCAxAwHQYDVR0OBBYEFHp4vhDj
Wm8CT2rfMmpLXoi7xBgxMB8GA1UdIwQYMBaAFMRnyyzLnCGnB7XfvOq6BUwZBSOu
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5QzNCRS85NDdCMzUwNjA5
MzgxMUVBOTVDQTMxMjlDNEY5QUUwMi94R2ZMTE11Y0lhY0h0ZC04NnJvRlRCa0ZJ
NjQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3hHZkxMTXVjSWFjSHRkLTg2cm9GVEJrRkk2NC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
OUMzQkUvOTQ3QjM1MDYwOTM4MTFFQTk1Q0EzMTI5QzRGOUFFMDIvRjAyMDJBODRC
MzYzMTFGMDgyRjAyMDcyQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwgZ0GCCsGAQUFBwEHAQH/
BIGNMIGKMBIEAgABMAwDBAJn+/QDBALc94AwdAQCAAIwbgMHACQHc4AAADASAwcA
JAdzgAALAwcBJAdzgAAMAwcAJAdzgBAAAwcAJAdzgCAAAwcAJAdzgDAAAwcAJAdz
gEAAAwcAJAdzgFAAAwcAJAdzgGAAAwcAJAdzgHAAAwcAJAdzgIAAAwcAJAdzgJAA
MA0GCSqGSIb3DQEBCwUAA4IBAQBrHvXNK3rtHm03GvjNsudbiIxIyxpIlCkgs2/g
1kKYcx56LRwqFzZQ/HyFKTpm7gRrspDm5/PvTDB2UBnAI2p13Q0NNuEHG941sdhA
DSTjycAYjMQ8p45wga/ZiirBabpBKBF2ovSuqG3JTYTdZC5qd1BBTD7+G6F3HOOX
jnSVvZKOFMm+WD3mZ123neSV7OLs42/GScPZ6gY/caMBE1kGu//Me/rYX4EmuPRA
R1Kl18o31HCBkIyRT0nED8llI0edxH1qp4yETXQNPJzxOpXKt2xppLhfI49I1gV4
o1qngMzbw2iU4Dljmb5sP5+L4UytQA7J+XXghrdDf4HMemJ5
-----END CERTIFICATE-----
Generated at Tue Nov 4 07:13:49 2025 by rpki-client