Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/6E8AB092F92711ECB3FAB65FC4F9AE02.roa
File: 6E8AB092F92711ECB3FAB65FC4F9AE02.roa (raw, json)
Hash identifier: Te+T6qNnH73rFVUlX3KZGwahVw3DejzuEKhcO+Rx8xo=
Subject key identifier: D1:B0:DC:8E:25:E4:0A:28:16:5F:7E:FF:28:F1:7A:ED:16:10:2F:BD
Certificate issuer: /CN=A91A560A/serialNumber=167C3B221775FEC05039468150CE814756AC6F0A
Certificate serial: 4D3F
Authority key identifier: 16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/6E8AB092F92711ECB3FAB65FC4F9AE02.roa
Signing time: Thu 28 Aug 2025 14:54:18 +0000
ROA not before: Thu 28 Aug 2025 14:54:18 +0000
ROA not after: Sat 31 Oct 2026 00:00:00 +0000
asID: 140822
IP address blocks: 103.169.168.0/23 maxlen: 23
103.175.64.0/23 maxlen: 23
103.175.66.0/23 maxlen: 23
103.175.68.0/23 maxlen: 23
103.175.142.0/23 maxlen: 23
103.180.142.0/23 maxlen: 23
103.180.144.0/23 maxlen: 23
103.180.154.0/23 maxlen: 23
103.180.156.0/23 maxlen: 23
103.180.158.0/23 maxlen: 23
103.183.146.0/23 maxlen: 23
103.183.148.0/23 maxlen: 23
103.183.150.0/23 maxlen: 23
103.183.152.0/23 maxlen: 23
103.185.186.0/23 maxlen: 23
103.188.164.0/23 maxlen: 23
103.189.72.0/23 maxlen: 23
103.189.74.0/23 maxlen: 23
103.189.76.0/23 maxlen: 23
103.189.78.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl
rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 14 Sep 2025 16:20:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 19775 (0x4d3f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A560A, serialNumber=167C3B221775FEC05039468150CE814756AC6F0A
Validity
Not Before: Aug 28 14:54:18 2025 GMT
Not After : Oct 31 00:00:00 2026 GMT
Subject: CN=68b06d9a-5bff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:60:2f:ff:9c:14:c1:75:04:8e:d2:4f:d8:d8:
5b:e3:f5:ca:04:bc:86:bc:b9:fa:82:a8:31:83:c8:
d9:32:38:e0:8f:4b:11:36:1d:b6:cf:08:a4:e7:8a:
9b:29:da:48:3a:19:62:ec:79:54:b1:01:cf:33:53:
7d:39:7d:03:01:d1:18:2a:22:26:0a:4a:2a:58:8b:
3b:5e:d9:66:b8:37:e8:2d:76:91:31:f4:0a:2e:06:
21:cc:08:f1:a2:7a:5c:33:d5:74:e2:0a:71:9d:2a:
3a:bf:70:a6:95:aa:39:2d:09:f9:3f:9e:46:31:a1:
32:fd:ee:74:f3:95:ea:a9:70:cb:a1:d5:58:71:f0:
e1:b5:84:18:6e:9a:1b:17:19:e1:55:8d:e0:af:00:
f7:e9:50:b3:f5:23:c3:fe:7a:0d:40:82:1b:5b:e9:
30:75:20:cd:52:05:d2:88:82:ea:26:9c:83:42:2d:
79:88:71:7f:3d:ba:33:30:64:83:20:e9:cc:e9:1c:
1a:e2:d0:96:bf:52:9b:8d:53:22:12:a6:56:04:e8:
75:55:86:ed:56:a0:d8:2c:77:2d:ce:09:83:90:5c:
31:68:dc:cb:75:35:31:aa:06:b8:cb:75:63:e3:d2:
52:d2:58:62:56:91:be:06:76:35:f4:79:6d:56:1e:
3b:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:B0:DC:8E:25:E4:0A:28:16:5F:7E:FF:28:F1:7A:ED:16:10:2F:BD
X509v3 Authority Key Identifier:
keyid:16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/6E8AB092F92711ECB3FAB65FC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.169.168.0/23
103.175.64.0-103.175.69.255
103.175.142.0/23
103.180.142.0-103.180.145.255
103.180.154.0-103.180.159.255
103.183.146.0-103.183.153.255
103.185.186.0/23
103.188.164.0/23
103.189.72.0/21
Signature Algorithm: sha256WithRSAEncryption
11:0e:7c:00:23:20:61:c8:af:59:e2:b4:56:c6:8d:cb:59:ee:
5c:52:b1:18:0f:99:bb:e5:46:2e:93:84:3d:76:fa:2a:24:a2:
4b:ec:dd:fb:a9:31:94:85:81:2e:9e:28:a7:ca:17:3d:e5:3c:
02:17:18:e9:78:ca:a2:5b:28:3b:fa:e2:da:d9:7c:f3:36:7b:
dc:2a:ce:bf:de:01:f2:29:ec:33:25:6d:58:c0:2b:7f:c6:cb:
c5:a4:d4:72:23:a3:9e:aa:1d:4e:4c:a5:44:01:d9:6e:ec:94:
90:c2:4f:21:50:34:a7:a9:fa:33:86:f9:d6:6c:c5:ef:1a:84:
b7:4b:6c:c7:05:aa:6a:6b:25:cd:55:ec:db:e6:99:89:05:d4:
6e:ea:a4:d3:8c:22:86:e3:81:2f:bd:02:3b:63:de:7f:1a:26:
c1:34:ee:47:ab:27:1b:a8:01:f8:7f:85:f9:e1:ad:e2:cd:2b:
e5:fd:3f:26:1c:54:44:90:cf:d9:d5:05:99:af:76:07:c1:f4:
38:f6:74:68:45:3d:69:c5:8f:3a:a9:62:32:09:f3:61:48:f8:
2e:a6:14:20:36:63:8c:d1:41:82:eb:49:84:ed:a7:d4:75:78:
ec:10:67:e4:3e:d3:02:12:42:d2:02:f2:d2:6e:37:e4:50:c7:
49:f6:fc:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 8 05:43:28 2025 by rpki-client