Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/F598E1D8345E11F08BA6AE6AC4F9AE02.roa
File: F598E1D8345E11F08BA6AE6AC4F9AE02.roa (raw, json)
Hash identifier: cVIDFnlO8fgd5zfVMUsDi9lm+puR8d8uujvMD12IE/8=
Subject key identifier: 0C:BF:F0:BE:9D:14:27:70:94:C2:1C:5E:9C:50:74:DE:D7:CF:6A:68
Certificate issuer: /CN=A91A560A/serialNumber=167C3B221775FEC05039468150CE814756AC6F0A
Certificate serial: 4D2B
Authority key identifier: 16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/F598E1D8345E11F08BA6AE6AC4F9AE02.roa
Signing time: Thu 28 Aug 2025 14:54:00 +0000
ROA not before: Thu 28 Aug 2025 14:54:00 +0000
ROA not after: Sat 31 Oct 2026 00:00:00 +0000
asID: 140766
IP address blocks: 103.22.218.0/23 maxlen: 24
103.52.112.0/23 maxlen: 24
103.71.96.0/23 maxlen: 24
103.145.78.0/23 maxlen: 24
103.146.166.0/23 maxlen: 24
103.154.186.0/23 maxlen: 24
103.160.74.0/23 maxlen: 24
103.160.76.0/23 maxlen: 24
103.160.78.0/23 maxlen: 24
103.160.84.0/23 maxlen: 24
103.160.88.0/23 maxlen: 24
103.160.90.0/23 maxlen: 24
103.174.212.0/23 maxlen: 24
103.174.216.0/23 maxlen: 24
103.176.146.0/23 maxlen: 24
103.176.148.0/23 maxlen: 24
103.191.144.0/23 maxlen: 24
103.191.146.0/23 maxlen: 24
103.209.32.0/23 maxlen: 24
113.192.6.0/23 maxlen: 24
124.197.16.0/20 maxlen: 24
203.29.16.0/22 maxlen: 24
2001:df1:440::/48 maxlen: 48
2001:df1:4c0::/48 maxlen: 48
2001:df1:13c0::/48 maxlen: 48
2001:df1:2640::/48 maxlen: 48
2001:df2:4c40::/48 maxlen: 48
2001:df2:7c40::/48 maxlen: 48
2001:df3:4140::/48 maxlen: 48
2001:df3:5fc0::/48 maxlen: 48
2001:df3:abc0::/48 maxlen: 48
2001:df5:9980::/48 maxlen: 48
2400:15a0::/48 maxlen: 48
2400:1660::/48 maxlen: 48
2400:3320::/48 maxlen: 48
2400:3360::/48 maxlen: 48
2400:b8e0::/48 maxlen: 48
2400:ca60::/48 maxlen: 48
2400:f760::/48 maxlen: 48
2401:74e0::/48 maxlen: 48
2406:e4c0::/32 maxlen: 48
2406:e540::/48 maxlen: 48
2406:e640::/48 maxlen: 48
2406:e6c0::/48 maxlen: 48
2406:e740::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl
rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 14 Sep 2025 16:20:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 19755 (0x4d2b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A560A, serialNumber=167C3B221775FEC05039468150CE814756AC6F0A
Validity
Not Before: Aug 28 14:54:00 2025 GMT
Not After : Oct 31 00:00:00 2026 GMT
Subject: CN=68b06d88-0749
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:c6:7d:1c:59:41:c8:b0:a9:25:b4:0b:c3:1e:
bd:c9:93:bf:c6:2b:79:71:c6:65:67:8f:c7:f7:9b:
0f:e2:f2:9d:8a:20:8c:4d:76:a1:47:22:06:dc:6f:
b5:ba:cb:86:38:49:24:25:b1:10:0b:70:58:a7:07:
ca:e3:0e:41:77:44:5e:84:89:d6:6f:b0:b3:53:c9:
02:3c:1b:8b:9a:84:71:4f:fb:f3:65:50:57:aa:71:
ec:cc:35:11:75:d5:4d:02:9c:73:be:28:26:fa:d0:
53:1f:a9:76:f2:8e:67:72:10:c3:11:85:5d:93:9f:
7f:7c:09:22:f6:34:72:4d:24:be:bc:83:c1:44:5e:
90:07:b8:96:e0:92:a9:8d:8a:98:be:1e:03:0e:1a:
03:b5:01:9f:df:75:cb:b5:69:c0:1f:54:e8:3e:b2:
75:24:21:25:bc:8b:29:ce:5d:cb:cd:b9:41:d9:0a:
c8:74:1b:53:df:65:8b:91:a9:12:0b:15:71:2a:ab:
73:0f:98:dd:1b:13:86:99:39:36:c6:1f:45:56:ce:
7a:56:b8:7c:fe:39:b4:3f:8a:d0:fa:62:8c:5c:6e:
64:50:b0:89:7b:10:28:2f:19:72:3e:32:27:78:31:
cd:13:0a:b1:f7:8d:b2:b2:a0:ff:bc:96:d9:c4:53:
01:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:BF:F0:BE:9D:14:27:70:94:C2:1C:5E:9C:50:74:DE:D7:CF:6A:68
X509v3 Authority Key Identifier:
keyid:16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/F598E1D8345E11F08BA6AE6AC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.22.218.0/23
103.52.112.0/23
103.71.96.0/23
103.145.78.0/23
103.146.166.0/23
103.154.186.0/23
103.160.74.0-103.160.79.255
103.160.84.0/23
103.160.88.0/22
103.174.212.0/23
103.174.216.0/23
103.176.146.0-103.176.149.255
103.191.144.0/22
103.209.32.0/23
113.192.6.0/23
124.197.16.0/20
203.29.16.0/22
IPv6:
2001:df1:440::/48
2001:df1:4c0::/48
2001:df1:13c0::/48
2001:df1:2640::/48
2001:df2:4c40::/48
2001:df2:7c40::/48
2001:df3:4140::/48
2001:df3:5fc0::/48
2001:df3:abc0::/48
2001:df5:9980::/48
2400:15a0::/48
2400:1660::/48
2400:3320::/48
2400:3360::/48
2400:b8e0::/48
2400:ca60::/48
2400:f760::/48
2401:74e0::/48
2406:e4c0::/32
2406:e540::/48
2406:e640::/48
2406:e6c0::/48
2406:e740::/48
Signature Algorithm: sha256WithRSAEncryption
2b:ad:66:6a:6a:ff:72:f7:68:92:fa:76:65:f8:39:60:d4:f7:
44:9e:6e:30:8a:c0:39:db:8f:26:76:c6:fc:03:51:21:06:a9:
81:91:61:6f:ed:64:d4:67:ec:d3:a5:3c:01:0c:6f:bc:46:c9:
2b:e6:4a:39:2b:0d:53:3e:bc:89:ea:2d:7b:df:44:54:2a:7e:
d4:27:98:5f:7c:5e:f9:e9:4e:68:35:4f:2b:3f:16:d5:a9:f1:
c7:68:5f:28:e0:e3:a4:f6:1e:81:4a:1c:63:69:b6:03:62:f1:
13:02:bb:7a:74:f8:a5:76:d2:0b:6d:bc:ab:ab:0a:1f:ea:24:
70:58:2f:11:93:c2:3a:8f:e2:0c:cb:02:df:57:ff:7f:5e:26:
86:4f:d7:64:00:dc:8d:80:2e:cf:cc:ad:60:f5:67:02:a7:40:
ed:9f:d9:ff:2e:02:0a:6f:71:f3:80:7f:5c:ab:af:67:63:b6:
02:13:89:be:ee:00:73:84:57:3d:e0:43:02:29:71:84:f2:3f:
56:8f:d5:03:ae:ad:75:22:d8:0a:31:20:7d:a2:a2:96:9f:88:
e7:1d:c3:d7:f5:c1:27:1d:8a:db:ff:6c:2b:57:05:d3:ae:12:
02:f5:0c:3c:1f:b9:18:75:51:c6:fd:f5:42:f2:49:59:5f:1f:
6d:31:76:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 8 05:39:28 2025 by rpki-client