Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/359123B8655111F09BBEDB5AC4F9AE02.roa
File: 359123B8655111F09BBEDB5AC4F9AE02.roa (raw, json)
Hash identifier: FHZdh4YtrbzuQgD8ivnvmfRkT5OyQZWCYqMzOVrV20Y=
Subject key identifier: AB:C1:80:A6:B7:BF:C5:66:05:95:F6:52:75:C4:C5:A8:73:AC:D5:1E
Certificate issuer: /CN=A91A560A/serialNumber=167C3B221775FEC05039468150CE814756AC6F0A
Certificate serial: 4BE0
Authority key identifier: 16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/359123B8655111F09BBEDB5AC4F9AE02.roa
Signing time: Tue 22 Jul 2025 10:23:23 +0000
ROA not before: Tue 22 Jul 2025 10:23:23 +0000
ROA not after: Fri 31 Oct 2025 00:00:00 +0000
asID: 135951
IP address blocks: 101.101.96.0/23 maxlen: 24
103.130.216.0/22 maxlen: 23
103.142.24.0/23 maxlen: 24
103.142.26.0/23 maxlen: 24
103.155.162.0/23 maxlen: 24
103.161.172.0/24 maxlen: 24
103.161.173.0/24 maxlen: 24
103.161.178.0/23 maxlen: 23
103.162.14.0/23 maxlen: 24
103.162.20.0/23 maxlen: 24
103.162.22.0/23 maxlen: 23
103.164.154.0/23 maxlen: 24
103.177.110.0/23 maxlen: 24
103.179.184.0/23 maxlen: 24
116.118.44.0/22 maxlen: 24
163.61.72.0/23 maxlen: 24
180.93.136.0/22 maxlen: 24
2001:df5:e40::/48 maxlen: 48
2400:4de0::/48 maxlen: 48
2401:45e0::/48 maxlen: 48
2405:2840::/48 maxlen: 48
2407:5c0::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl
rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 29 Jul 2025 14:33:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 19424 (0x4be0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A560A, serialNumber=167C3B221775FEC05039468150CE814756AC6F0A
Validity
Not Before: Jul 22 10:23:23 2025 GMT
Not After : Oct 31 00:00:00 2025 GMT
Subject: CN=687f669b-8ade
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:8a:06:a9:01:42:12:d0:f1:99:24:ca:b2:8e:
89:dd:9d:4e:60:c0:d0:b1:56:93:3f:67:d0:b3:55:
cc:41:a6:e7:5a:38:bf:67:ba:2b:7b:ae:ab:c3:de:
a1:d5:02:82:ed:92:1c:44:d7:fb:1f:06:f0:2d:24:
37:d4:78:48:e5:b8:70:0c:6c:53:91:30:4e:ac:83:
5c:17:67:c9:bb:94:91:83:30:59:2f:8b:59:47:67:
2f:f4:4d:6c:32:37:f1:58:45:03:2c:8d:37:9d:13:
45:fc:62:09:bd:fd:47:b3:d8:53:1c:0b:a0:cf:4a:
54:c9:b7:b3:39:8d:a0:b9:b0:c7:a4:ab:ab:b1:69:
9f:a0:c7:7e:ee:fe:9f:57:09:4e:37:97:1c:ba:46:
7e:e5:61:15:67:bc:b0:94:85:72:75:d4:93:b2:db:
51:37:21:7e:30:85:c5:11:b1:b1:e6:e1:a3:9b:00:
e9:70:b0:e5:da:89:d3:22:76:a1:67:38:6a:25:ac:
12:e7:60:07:71:97:2c:80:7f:e3:da:c3:90:d0:0e:
8f:9e:f7:96:4a:df:34:12:3f:71:69:a0:8d:e3:da:
c8:2a:10:1c:b2:36:29:c8:4a:b1:0b:53:76:a0:18:
46:b7:cb:75:f9:ac:ef:3b:55:6f:67:fa:18:1b:69:
3e:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:C1:80:A6:B7:BF:C5:66:05:95:F6:52:75:C4:C5:A8:73:AC:D5:1E
X509v3 Authority Key Identifier:
keyid:16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/359123B8655111F09BBEDB5AC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
101.101.96.0/23
103.130.216.0/22
103.142.24.0/22
103.155.162.0/23
103.161.172.0/23
103.161.178.0/23
103.162.14.0/23
103.162.20.0/22
103.164.154.0/23
103.177.110.0/23
103.179.184.0/23
116.118.44.0/22
163.61.72.0/23
180.93.136.0/22
IPv6:
2001:df5:e40::/48
2400:4de0::/48
2401:45e0::/48
2405:2840::/48
2407:5c0::/48
Signature Algorithm: sha256WithRSAEncryption
0f:22:2d:26:ba:e2:8f:e8:b0:5c:4f:eb:41:8d:0c:2c:e7:6f:
dc:a1:8b:c4:b1:0c:17:83:71:35:10:94:7c:63:b9:da:bc:e5:
f9:52:c5:d3:94:9d:70:44:3d:16:df:87:cc:ae:ad:75:e1:a2:
c5:a5:e3:ea:64:9a:07:e1:3c:87:f1:ca:61:95:04:d0:1b:aa:
2c:06:40:4b:00:83:e3:79:ce:bd:b3:70:54:fd:2b:2a:44:e3:
ff:9a:3c:d9:97:42:da:57:88:45:91:1b:6b:5d:ba:0d:a9:a6:
34:a4:2f:92:f6:fa:e6:75:c0:5f:52:e5:87:d9:46:37:7a:b2:
51:e6:86:96:57:44:0e:d5:66:1c:3c:59:56:57:b0:c3:2f:d5:
b3:4c:aa:54:8d:92:60:b1:1e:4b:e9:89:cc:3a:14:59:d8:a8:
0e:53:0f:fb:5c:0f:5c:99:df:35:a6:82:a0:19:4d:99:b8:56:
32:05:69:30:7f:cb:ac:3b:58:9c:77:87:f8:e7:29:45:b9:52:
8d:e2:19:55:a4:e9:74:cd:08:34:c3:ac:d5:a7:a5:7b:c5:7a:
41:ec:6d:53:5f:d8:0f:fe:f9:6f:99:e2:b7:3f:a2:40:f9:aa:
8a:c4:dc:27:8e:91:0d:0d:a0:32:22:59:99:ec:9b:8d:ee:2e:
50:c0:22:93
-----BEGIN CERTIFICATE-----
MIIF9zCCBN+gAwIBAgICS+AwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QTU2MEExMTAvBgNVBAUTKDE2N0MzQjIyMTc3NUZFQzA1MDM5NDY4MTUwQ0U4MTQ3
NTZBQzZGMEEwHhcNMjUwNzIyMTAyMzIzWhcNMjUxMDMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02ODdmNjY5Yi04YWRlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAvooGqQFCEtDxmSTKso6J3Z1OYMDQsVaTP2fQs1XMQabnWji/Z7ore66rw96h
1QKC7ZIcRNf7HwbwLSQ31HhI5bhwDGxTkTBOrINcF2fJu5SRgzBZL4tZR2cv9E1s
MjfxWEUDLI03nRNF/GIJvf1Hs9hTHAugz0pUybezOY2gubDHpKursWmfoMd+7v6f
VwlON5ccukZ+5WEVZ7ywlIVyddSTsttRNyF+MIXFEbGx5uGjmwDpcLDl2onTInah
ZzhqJawS52AHcZcsgH/j2sOQ0A6PnveWSt80Ej9xaaCN49rIKhAcsjYpyEqxC1N2
oBhGt8t1+azvO1VvZ/oYG2k+5wIDAQABo4IDGzCCAxcwHQYDVR0OBBYEFKvBgKa3
v8VmBZX2UnXExahzrNUeMB8GA1UdIwQYMBaAFBZ8OyIXdf7AUDlGgVDOgUdWrG8K
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNTYwQS9BQUVCMTkxQTFE
OEExMUUyQTM4N0QwRTQwOEIwMkNEMi9Gbnc3SWhkMV9zQlFPVWFCVU02QlIxYXNi
d28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0ZudzdJaGQxX3NCUU9VYUJVTTZCUjFhc2J3by5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
QTU2MEEvQUFFQjE5MUExRDhBMTFFMkEzODdEMEU0MDhCMDJDRDIvMzU5MTIzQjg2
NTUxMTFGMDlCQkVEQjVBQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwgaQGCCsGAQUFBwEHAQH/
BIGUMIGRMFoEAgABMFQDBAFlZWADBAJngtgDBAJnjhgDBAFnm6IDBAFnoawDBAFn
obIDBAFnog4DBAJnohQDBAFnpJoDBAFnsW4DBAFns7gDBAJ0diwDBAGjPUgDBAK0
XYgwMwQCAAIwLQMHACABDfUOQAMHACQATeAAAAMHACQBReAAAAMHACQFKEAAAAMH
ACQHBcAAADANBgkqhkiG9w0BAQsFAAOCAQEADyItJrrij+iwXE/rQY0MLOdv3KGL
xLEMF4NxNRCUfGO52rzl+VLF05SdcEQ9Ft+HzK6tdeGixaXj6mSaB+E8h/HKYZUE
0BuqLAZASwCD43nOvbNwVP0rKkTj/5o82ZdC2leIRZEba126DammNKQvkvb65nXA
X1Llh9lGN3qyUeaGlldEDtVmHDxZVlewwy/Vs0yqVI2SYLEeS+mJzDoUWdioDlMP
+1wPXJnfNaaCoBlNmbhWMgVpMH/LrDtYnHeH+OcpRblSjeIZVaTpdM0INMOs1ael
e8V6QextU1/YD/75b5nitz+iQPmqisTcJ46RDQ2gMiJZmeybje4uUMAikw==
-----END CERTIFICATE-----
Generated at Wed Jul 23 02:02:57 2025 by rpki-client