Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D1136/CF3281C8215B11E5A7BF890EC4F9AE02/8F92939C46C711E9A5547325C4F9AE02.roa
File: 8F92939C46C711E9A5547325C4F9AE02.roa (raw, json)
Hash identifier: DmzFqtms4jMKGs52grdF6fZLNgf7jxYCHnP/u/dLXR0=
Subject key identifier: C2:22:1C:69:5C:81:21:48:4E:C4:62:77:32:56:15:0F:B8:5D:59:81
Certificate issuer: /CN=A91D1136/serialNumber=B7B73E89B621081609CD689AB0AEF7FAF148926C
Certificate serial: 2675
Authority key identifier: B7:B7:3E:89:B6:21:08:16:09:CD:68:9A:B0:AE:F7:FA:F1:48:92:6C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t7c-ibYhCBYJzWiasK73-vFIkmw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D1136/CF3281C8215B11E5A7BF890EC4F9AE02/8F92939C46C711E9A5547325C4F9AE02.roa
Signing time: Tue 02 Sep 2025 16:04:05 +0000
ROA not before: Tue 02 Sep 2025 16:04:05 +0000
ROA not after: Tue 01 Dec 2026 00:00:00 +0000
asID: 10089
IP address blocks: 115.67.0.0/21 maxlen: 21
115.67.0.0/24 maxlen: 24
115.67.1.0/24 maxlen: 24
115.67.2.0/24 maxlen: 24
115.67.3.0/24 maxlen: 24
115.67.4.0/24 maxlen: 24
115.67.5.0/24 maxlen: 24
115.67.6.0/24 maxlen: 24
115.67.7.0/24 maxlen: 24
115.67.100.0/24 maxlen: 24
115.67.101.0/24 maxlen: 24
115.67.108.0/24 maxlen: 24
2404:8d00::/29 maxlen: 29
2404:8d04::/31 maxlen: 32
2404:8d04::/36 maxlen: 36
2404:8d04:1000::/36 maxlen: 36
2404:8d04:2000::/36 maxlen: 36
2404:8d04:3000::/36 maxlen: 36
2404:8d04:4000::/36 maxlen: 36
2404:8d04:5000::/36 maxlen: 36
2404:8d04:6000::/36 maxlen: 36
2404:8d04:7000::/36 maxlen: 36
2404:8d04:8000::/36 maxlen: 36
2404:8d04:9000::/36 maxlen: 36
2404:8d04:a000::/36 maxlen: 36
2404:8d04:b000::/36 maxlen: 36
2404:8d04:c000::/36 maxlen: 36
2404:8d04:d000::/36 maxlen: 36
2404:8d04:e000::/36 maxlen: 36
2404:8d04:f000::/36 maxlen: 36
2404:8d05::/36 maxlen: 36
2404:8d05:1000::/36 maxlen: 36
2404:8d05:2000::/36 maxlen: 36
2404:8d05:3000::/36 maxlen: 36
2404:8d05:4000::/36 maxlen: 36
2404:8d05:5000::/36 maxlen: 36
2404:8d05:6000::/36 maxlen: 36
2404:8d05:7000::/36 maxlen: 36
2404:8d05:8000::/36 maxlen: 36
2404:8d05:9000::/36 maxlen: 36
2404:8d05:a000::/36 maxlen: 36
2404:8d05:b000::/36 maxlen: 36
2404:8d05:c000::/36 maxlen: 36
2404:8d05:d000::/36 maxlen: 36
2404:8d05:e000::/36 maxlen: 36
2404:8d05:f000::/36 maxlen: 36
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D1136/CF3281C8215B11E5A7BF890EC4F9AE02/t7c-ibYhCBYJzWiasK73-vFIkmw.crl
rsync://rpki.apnic.net/member_repository/A91D1136/CF3281C8215B11E5A7BF890EC4F9AE02/t7c-ibYhCBYJzWiasK73-vFIkmw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t7c-ibYhCBYJzWiasK73-vFIkmw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 13 Sep 2025 15:46:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 9845 (0x2675)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D1136, serialNumber=B7B73E89B621081609CD689AB0AEF7FAF148926C
Validity
Not Before: Sep 2 16:04:05 2025 GMT
Not After : Dec 1 00:00:00 2026 GMT
Subject: CN=68b71575-b47d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:a7:25:da:a2:47:5f:c0:15:69:13:fc:6c:f8:
0a:2e:18:89:4a:cc:40:70:35:5b:95:23:61:18:9d:
72:ac:25:7c:3e:75:c1:54:17:29:8b:f6:c2:a6:5c:
6e:d9:32:46:f4:32:c9:f8:f3:ec:e2:4e:ac:66:ea:
73:8a:af:4b:0e:62:b4:77:32:78:fc:01:09:4a:40:
4d:4e:a4:b4:12:43:f5:a4:8e:da:24:ba:5a:3a:a3:
55:f9:8a:ab:b9:5c:d8:78:de:84:35:dd:36:ae:20:
d5:ce:a9:83:6e:32:e7:38:10:0f:f8:8f:49:05:f7:
e8:1f:e6:35:a5:1c:b7:43:bf:97:35:35:d4:16:9b:
fb:e8:22:ac:fb:96:6e:b9:4e:53:48:c0:be:58:c6:
ad:38:9c:64:5f:86:e6:51:9b:b4:de:0e:78:b3:ab:
d7:85:cb:12:f0:a7:fc:96:9c:c2:1e:f8:69:36:84:
f2:d7:5c:cb:2e:ba:d2:70:e6:16:24:f2:44:7e:86:
44:c0:9a:56:14:86:95:c9:cd:99:8a:7d:51:ab:6b:
e5:95:98:40:ab:f5:e0:0e:98:bb:1f:df:ca:ab:38:
d5:c4:c7:1e:db:74:f8:9c:04:58:d0:80:95:7d:91:
fa:be:5f:11:a4:57:28:45:72:27:3f:89:c4:c3:55:
1c:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:22:1C:69:5C:81:21:48:4E:C4:62:77:32:56:15:0F:B8:5D:59:81
X509v3 Authority Key Identifier:
keyid:B7:B7:3E:89:B6:21:08:16:09:CD:68:9A:B0:AE:F7:FA:F1:48:92:6C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D1136/CF3281C8215B11E5A7BF890EC4F9AE02/t7c-ibYhCBYJzWiasK73-vFIkmw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t7c-ibYhCBYJzWiasK73-vFIkmw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D1136/CF3281C8215B11E5A7BF890EC4F9AE02/8F92939C46C711E9A5547325C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
115.67.0.0/21
115.67.100.0/23
115.67.108.0/24
IPv6:
2404:8d00::/29
Signature Algorithm: sha256WithRSAEncryption
4e:52:75:8d:41:e2:e5:13:70:88:a9:02:b6:3f:c0:37:e7:ab:
f5:e2:f2:e9:99:c6:bc:a3:36:ca:54:35:f7:21:86:8a:37:ab:
74:b5:82:e9:e5:df:5b:d6:82:9a:7c:58:7a:54:57:57:0c:57:
08:89:48:16:98:2f:00:71:11:85:ee:17:09:f4:c3:3f:50:1a:
b3:38:d9:1b:83:49:02:3c:28:19:cc:b8:c6:e7:ad:9a:ea:d7:
9e:f2:a3:7f:dc:e4:56:e7:f5:c5:53:aa:71:97:e3:2e:fd:08:
c0:c8:9e:23:89:83:03:2b:9c:d2:9f:e9:47:02:70:fe:cf:64:
a1:4b:b6:79:5e:92:cd:15:ad:d8:bc:e4:5c:36:8d:14:49:3f:
83:a8:37:c7:19:47:6c:7b:61:a8:d7:0f:92:d6:1f:52:00:50:
40:2a:e1:c4:2e:51:ac:f9:b3:8e:3e:98:42:01:7a:58:ef:d1:
70:79:3d:59:44:73:89:70:33:29:5a:98:d5:ab:67:54:72:4f:
19:e8:7a:ca:2e:17:82:8a:07:b7:37:54:94:c4:31:cc:d6:9d:
0d:26:06:a1:46:dc:62:1b:70:21:64:f4:f0:5e:4a:0a:15:51:
8c:0d:ea:53:f2:59:51:2c:2f:77:60:46:5b:24:f7:c6:d9:01:
c9:08:a4:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 8 09:59:01 2025 by rpki-client