Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/F598E1D8345E11F08BA6AE6AC4F9AE02.roa
File: F598E1D8345E11F08BA6AE6AC4F9AE02.roa (raw, json)
Hash identifier: HdFlCjwYro4ME4B3UGXEgQ2O3V4SVuSj2uWSDyAlJTk=
Subject key identifier: BC:15:D6:7B:6A:67:E5:8A:9A:B9:10:06:12:82:5C:C0:34:1F:FC:30
Certificate issuer: /CN=A91A560A/serialNumber=167C3B221775FEC05039468150CE814756AC6F0A
Certificate serial: 4B36
Authority key identifier: 16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/F598E1D8345E11F08BA6AE6AC4F9AE02.roa
Signing time: Mon 19 May 2025 03:12:03 +0000
ROA not before: Mon 19 May 2025 03:12:03 +0000
ROA not after: Fri 31 Oct 2025 00:00:00 +0000
asID: 140766
IP address blocks: 103.22.218.0/23 maxlen: 24
103.52.112.0/23 maxlen: 24
103.71.96.0/23 maxlen: 24
103.145.78.0/23 maxlen: 24
103.146.166.0/23 maxlen: 24
103.154.186.0/23 maxlen: 24
103.160.74.0/23 maxlen: 24
103.160.76.0/23 maxlen: 24
103.160.78.0/23 maxlen: 24
103.160.84.0/23 maxlen: 24
103.160.88.0/23 maxlen: 24
103.160.90.0/23 maxlen: 24
103.174.212.0/23 maxlen: 24
103.174.216.0/23 maxlen: 24
103.176.146.0/23 maxlen: 24
103.176.148.0/23 maxlen: 24
103.191.144.0/23 maxlen: 24
103.191.146.0/23 maxlen: 24
103.209.32.0/23 maxlen: 24
113.192.6.0/23 maxlen: 24
124.197.16.0/20 maxlen: 24
203.29.16.0/22 maxlen: 24
2001:df1:440::/48 maxlen: 48
2001:df1:4c0::/48 maxlen: 48
2001:df1:13c0::/48 maxlen: 48
2001:df1:2640::/48 maxlen: 48
2001:df2:4c40::/48 maxlen: 48
2001:df2:7c40::/48 maxlen: 48
2001:df3:4140::/48 maxlen: 48
2001:df3:5fc0::/48 maxlen: 48
2001:df3:abc0::/48 maxlen: 48
2001:df5:9980::/48 maxlen: 48
2400:15a0::/48 maxlen: 48
2400:1660::/48 maxlen: 48
2400:3320::/48 maxlen: 48
2400:3360::/48 maxlen: 48
2400:b8e0::/48 maxlen: 48
2400:ca60::/48 maxlen: 48
2400:f760::/48 maxlen: 48
2401:74e0::/48 maxlen: 48
2406:e4c0::/32 maxlen: 48
2406:e540::/48 maxlen: 48
2406:e640::/48 maxlen: 48
2406:e6c0::/48 maxlen: 48
2406:e740::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl
rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Jun 2025 14:35:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 19254 (0x4b36)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A560A, serialNumber=167C3B221775FEC05039468150CE814756AC6F0A
Validity
Not Before: May 19 03:12:03 2025 GMT
Not After : Oct 31 00:00:00 2025 GMT
Subject: CN=682aa182-fb6f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:cc:33:33:9b:b4:4e:1d:33:fd:ca:cc:6c:70:
ef:b7:8f:8d:3a:4a:7a:ce:c2:ca:d4:7d:be:e4:1e:
01:8d:d3:5d:84:12:79:db:0d:d1:a5:3b:d6:3f:9a:
e6:21:f8:4c:01:74:7c:08:b4:cc:32:12:a1:03:65:
84:06:8a:53:c6:fe:fa:5e:9a:51:28:69:02:a7:5c:
f6:62:b9:a5:05:95:51:01:7c:cb:13:c9:85:4b:79:
b1:f7:aa:e3:d0:26:13:00:ca:f1:a0:d6:3c:02:4c:
3c:60:45:e2:33:b8:7e:88:64:ab:86:36:ec:7d:74:
35:24:b2:47:27:ee:54:23:81:0e:09:b2:9a:78:79:
72:b9:62:a8:c6:43:bd:2e:ab:8f:a3:e5:bb:62:de:
9f:94:89:7b:fb:d9:f5:64:30:e5:75:e0:df:d0:f7:
ad:9c:2b:6f:5f:63:12:74:38:bb:13:f4:28:44:af:
8e:e8:93:d5:c0:01:33:49:04:01:9a:a9:31:46:be:
14:6f:f3:87:37:8f:b5:ab:e4:74:50:03:ae:66:f9:
8f:58:8a:4f:1a:45:7c:bf:0a:a2:b0:66:06:1e:32:
41:b8:af:6b:38:8a:95:eb:16:de:cf:bc:8e:40:aa:
23:9e:16:cc:e0:9e:f3:ac:d8:6b:23:23:ab:cc:34:
8a:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:15:D6:7B:6A:67:E5:8A:9A:B9:10:06:12:82:5C:C0:34:1F:FC:30
X509v3 Authority Key Identifier:
keyid:16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/F598E1D8345E11F08BA6AE6AC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.22.218.0/23
103.52.112.0/23
103.71.96.0/23
103.145.78.0/23
103.146.166.0/23
103.154.186.0/23
103.160.74.0-103.160.79.255
103.160.84.0/23
103.160.88.0/22
103.174.212.0/23
103.174.216.0/23
103.176.146.0-103.176.149.255
103.191.144.0/22
103.209.32.0/23
113.192.6.0/23
124.197.16.0/20
203.29.16.0/22
IPv6:
2001:df1:440::/48
2001:df1:4c0::/48
2001:df1:13c0::/48
2001:df1:2640::/48
2001:df2:4c40::/48
2001:df2:7c40::/48
2001:df3:4140::/48
2001:df3:5fc0::/48
2001:df3:abc0::/48
2001:df5:9980::/48
2400:15a0::/48
2400:1660::/48
2400:3320::/48
2400:3360::/48
2400:b8e0::/48
2400:ca60::/48
2400:f760::/48
2401:74e0::/48
2406:e4c0::/32
2406:e540::/48
2406:e640::/48
2406:e6c0::/48
2406:e740::/48
Signature Algorithm: sha256WithRSAEncryption
be:95:12:a8:d8:40:ff:d8:3a:f6:88:a5:62:1c:82:77:aa:ef:
90:8c:49:67:5c:0d:2f:1f:eb:22:07:95:b0:7f:fb:99:78:1d:
fb:b7:92:dc:47:ab:10:b8:0d:8c:32:61:e8:b5:ee:97:d6:84:
08:43:57:2c:cf:73:05:dd:41:71:f8:42:00:4f:90:04:e7:1d:
8b:c3:a9:6c:a5:d1:c9:0a:46:f3:aa:6d:17:e8:0e:54:7f:1e:
20:4e:24:84:e0:cc:f3:95:36:c9:2b:f1:86:3a:e3:61:79:48:
7d:b7:e6:5e:e5:42:b2:bc:73:69:da:32:7d:13:ea:01:8f:04:
04:dc:d7:fb:ee:5c:14:e9:78:90:fe:bc:c3:f5:9d:47:b7:42:
72:1f:88:45:d1:5f:38:df:cf:c8:30:88:25:2b:28:64:bd:f4:
82:88:c2:dc:e5:b5:c0:60:45:73:68:f1:ed:99:09:d0:bc:fa:
c1:3a:42:14:3d:4f:84:2c:07:f8:7b:54:ed:f5:d3:48:6f:43:
c5:cf:9d:3e:15:dc:1d:78:03:e7:eb:60:96:3d:56:46:ef:49:
6a:f9:cc:49:9b:f4:18:db:46:ff:c3:4e:a7:a4:2a:97:63:ea:
e3:d7:d7:00:7a:4b:91:f9:c2:d6:aa:01:41:51:11:99:7c:c8:
26:9a:d5:3b
-----BEGIN CERTIFICATE-----
MIIGvjCCBaagAwIBAgICSzYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QTU2MEExMTAvBgNVBAUTKDE2N0MzQjIyMTc3NUZFQzA1MDM5NDY4MTUwQ0U4MTQ3
NTZBQzZGMEEwHhcNMjUwNTE5MDMxMjAzWhcNMjUxMDMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02ODJhYTE4Mi1mYjZmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAzMwzM5u0Th0z/crMbHDvt4+NOkp6zsLK1H2+5B4BjdNdhBJ52w3RpTvWP5rm
IfhMAXR8CLTMMhKhA2WEBopTxv76XppRKGkCp1z2YrmlBZVRAXzLE8mFS3mx96rj
0CYTAMrxoNY8Akw8YEXiM7h+iGSrhjbsfXQ1JLJHJ+5UI4EOCbKaeHlyuWKoxkO9
LquPo+W7Yt6flIl7+9n1ZDDldeDf0PetnCtvX2MSdDi7E/QoRK+O6JPVwAEzSQQB
mqkxRr4Ub/OHN4+1q+R0UAOuZvmPWIpPGkV8vwqisGYGHjJBuK9rOIqV6xbez7yO
QKojnhbM4J7zrNhrIyOrzDSKSQIDAQABo4ID4jCCA94wHQYDVR0OBBYEFLwV1ntq
Z+WKmrkQBhKCXMA0H/wwMB8GA1UdIwQYMBaAFBZ8OyIXdf7AUDlGgVDOgUdWrG8K
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNTYwQS9BQUVCMTkxQTFE
OEExMUUyQTM4N0QwRTQwOEIwMkNEMi9Gbnc3SWhkMV9zQlFPVWFCVU02QlIxYXNi
d28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0ZudzdJaGQxX3NCUU9VYUJVTTZCUjFhc2J3by5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
QTU2MEEvQUFFQjE5MUExRDhBMTFFMkEzODdEMEU0MDhCMDJDRDIvRjU5OEUxRDgz
NDVFMTFGMDhCQTZBRTZBQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwggFqBggrBgEFBQcBBwEB
/wSCAVkwggFVMHwEAgABMHYDBAFnFtoDBAFnNHADBAFnR2ADBAFnkU4DBAFnkqYD
BAFnmrowDAMEAWegSgMEBGegQAMEAWegVAMEAmegWAMEAWeu1AMEAWeu2DAMAwQB
Z7CSAwQBZ7CUAwQCZ7+QAwQBZ9EgAwQBccAGAwQEfMUQAwQCyx0QMIHUBAIAAjCB
zQMHACABDfEEQAMHACABDfEEwAMHACABDfETwAMHACABDfEmQAMHACABDfJMQAMH
ACABDfJ8QAMHACABDfNBQAMHACABDfNfwAMHACABDfOrwAMHACABDfWZgAMHACQA
FaAAAAMHACQAFmAAAAMHACQAMyAAAAMHACQAM2AAAAMHACQAuOAAAAMHACQAymAA
AAMHACQA92AAAAMHACQBdOAAAAMFACQG5MADBwAkBuVAAAADBwAkBuZAAAADBwAk
BubAAAADBwAkBudAAAAwDQYJKoZIhvcNAQELBQADggEBAL6VEqjYQP/YOvaIpWIc
gneq75CMSWdcDS8f6yIHlbB/+5l4Hfu3ktxHqxC4DYwyYei17pfWhAhDVyzPcwXd
QXH4QgBPkATnHYvDqWyl0ckKRvOqbRfoDlR/HiBOJITgzPOVNskr8YY642F5SH23
5l7lQrK8c2naMn0T6gGPBATc1/vuXBTpeJD+vMP1nUe3QnIfiEXRXzjfz8gwiCUr
KGS99IKIwtzltcBgRXNo8e2ZCdC8+sE6QhQ9T4QsB/h7VO3100hvQ8XPnT4V3B14
A+frYJY9VkbvSWr5zEmb9BjbRv/DTqekKpdj6uPX1wB6S5H5wtaqAUFREZl8yCaa
1Ts=
-----END CERTIFICATE-----
Generated at Tue Jun 3 23:55:09 2025 by rpki-client