Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91DA2D5/5F861EE6B89A11E3B4AC7E785911EA32/DE61D0DC2A7311F08DDC6D17C4F9AE02.roa
File: DE61D0DC2A7311F08DDC6D17C4F9AE02.roa (raw, json)
Hash identifier: wnP6JYClG7n+PNc2XDZbazMvuyyzMgyJZ4q4a/lxzfM=
Subject key identifier: F9:3E:2E:B3:8F:DC:35:CC:48:3F:42:0C:CD:D3:70:8C:72:F9:4A:7A
Certificate issuer: /CN=A91DA2D5/serialNumber=3C1C877347EE82729636AF0F3A375D391090F921
Certificate serial: 2D1C
Authority key identifier: 3C:1C:87:73:47:EE:82:72:96:36:AF:0F:3A:37:5D:39:10:90:F9:21
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PByHc0fugnKWNq8POjddORCQ-SE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91DA2D5/5F861EE6B89A11E3B4AC7E785911EA32/DE61D0DC2A7311F08DDC6D17C4F9AE02.roa
Signing time: Sat 06 Sep 2025 15:52:38 +0000
ROA not before: Sat 06 Sep 2025 15:52:38 +0000
ROA not after: Tue 01 Dec 2026 00:00:00 +0000
asID: 58717
IP address blocks: 43.245.140.0/22 maxlen: 22
43.245.140.0/22 maxlen: 24
43.245.140.0/23 maxlen: 23
43.245.140.0/24 maxlen: 24
43.245.141.0/24 maxlen: 24
43.245.142.0/23 maxlen: 23
43.245.142.0/24 maxlen: 24
43.245.143.0/24 maxlen: 24
103.15.244.0/22 maxlen: 24
103.15.246.64/26 maxlen: 26
103.75.238.0/23 maxlen: 24
103.96.68.0/23 maxlen: 24
103.96.70.0/23 maxlen: 24
103.108.144.0/22 maxlen: 24
103.199.84.0/22 maxlen: 24
103.242.216.0/24 maxlen: 24
103.242.217.0/24 maxlen: 24
103.242.218.0/23 maxlen: 24
144.48.148.0/23 maxlen: 23
144.48.148.0/24 maxlen: 24
144.48.149.0/24 maxlen: 24
175.41.44.0/22 maxlen: 24
2405:1500::/30 maxlen: 31
2405:1500::/32 maxlen: 32
2405:1500::/32 maxlen: 48
2405:1500::/48 maxlen: 48
2405:1500:11::/48 maxlen: 48
2405:1500:12::/48 maxlen: 48
2405:1500:13::/48 maxlen: 48
2405:1500:30::/48 maxlen: 48
2405:1500:37::/48 maxlen: 48
2405:1500:40::/48 maxlen: 48
2405:1500:41::/48 maxlen: 48
2405:1500:42::/48 maxlen: 48
2405:1500:45::/48 maxlen: 48
2405:1500:50::/48 maxlen: 48
2405:1500:52::/48 maxlen: 48
2405:1500:55::/48 maxlen: 48
2405:1500:56::/48 maxlen: 48
2405:1500:60::/48 maxlen: 48
2405:1500:70::/48 maxlen: 48
2405:1500:80::/48 maxlen: 48
2405:1500:82::/48 maxlen: 48
2405:1500:90::/48 maxlen: 48
2405:1500:92::/48 maxlen: 48
2405:1500:94::/48 maxlen: 48
2405:1500:97::/48 maxlen: 48
2405:1500:a1::/48 maxlen: 48
2405:1500:b0::/48 maxlen: 48
2405:1500:b1::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91DA2D5/5F861EE6B89A11E3B4AC7E785911EA32/PByHc0fugnKWNq8POjddORCQ-SE.crl
rsync://rpki.apnic.net/member_repository/A91DA2D5/5F861EE6B89A11E3B4AC7E785911EA32/PByHc0fugnKWNq8POjddORCQ-SE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PByHc0fugnKWNq8POjddORCQ-SE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 25 Sep 2025 15:35:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 11548 (0x2d1c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91DA2D5, serialNumber=3C1C877347EE82729636AF0F3A375D391090F921
Validity
Not Before: Sep 6 15:52:38 2025 GMT
Not After : Dec 1 00:00:00 2026 GMT
Subject: CN=68bc58c6-5946
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:f4:f7:ba:72:cf:6b:88:63:50:7a:90:5d:43:
4f:00:e3:e4:05:98:42:2d:01:08:5c:57:e7:65:1d:
22:28:62:d3:72:7d:5d:fc:40:cd:4b:2c:05:0c:42:
f6:9c:42:8a:ac:41:17:d5:7e:99:69:22:fc:0b:c6:
b5:a3:a0:7d:21:12:d6:75:d2:6f:c3:d2:ce:e1:f2:
b8:7d:ec:6f:11:9a:be:3b:df:1f:4c:64:50:15:98:
83:a0:36:c2:e5:11:52:42:43:26:99:d0:b0:aa:a2:
7a:63:84:73:8f:ec:aa:d4:ca:83:d2:18:77:bf:de:
7a:4f:28:3b:7d:6c:e3:83:25:79:07:55:06:64:e4:
73:b7:0a:18:52:ab:66:f3:f8:88:33:b4:f4:72:2e:
94:ba:d9:27:88:39:ac:dd:06:91:15:23:01:94:11:
3d:0f:21:2f:70:1f:21:3e:c1:52:75:42:9c:12:3c:
5f:9e:e8:6b:f0:09:54:82:a3:67:1f:5d:47:ba:48:
02:80:36:5e:d2:04:97:26:3b:1e:17:92:ba:29:2b:
da:a0:b9:2c:99:0e:e3:96:bb:01:5d:48:1e:ac:67:
cc:bf:ee:48:c0:87:b8:84:09:46:ec:53:be:a9:bf:
4a:78:3c:a6:60:7b:f7:dd:b3:4f:a9:b2:14:10:48:
00:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:3E:2E:B3:8F:DC:35:CC:48:3F:42:0C:CD:D3:70:8C:72:F9:4A:7A
X509v3 Authority Key Identifier:
keyid:3C:1C:87:73:47:EE:82:72:96:36:AF:0F:3A:37:5D:39:10:90:F9:21
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91DA2D5/5F861EE6B89A11E3B4AC7E785911EA32/PByHc0fugnKWNq8POjddORCQ-SE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PByHc0fugnKWNq8POjddORCQ-SE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DA2D5/5F861EE6B89A11E3B4AC7E785911EA32/DE61D0DC2A7311F08DDC6D17C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
43.245.140.0/22
103.15.244.0/22
103.75.238.0/23
103.96.68.0/22
103.108.144.0/22
103.199.84.0/22
103.242.216.0/22
144.48.148.0/23
175.41.44.0/22
IPv6:
2405:1500::/30
Signature Algorithm: sha256WithRSAEncryption
c4:5a:39:75:a9:d6:18:9a:aa:aa:c0:69:e7:37:e9:be:9a:de:
32:cb:6e:e9:d1:66:bc:8e:78:2e:a8:bb:af:ed:4b:16:7b:b6:
d1:3b:f9:4e:7f:3a:e2:cb:db:4c:52:c6:48:23:ec:82:d5:57:
ca:74:b4:64:7d:2f:db:35:cd:9e:f0:bb:d8:0a:bb:67:05:45:
78:68:49:27:cf:3d:f2:5f:fe:96:b2:01:a2:f8:0b:27:44:e8:
12:fb:d9:f4:f2:4d:52:f1:dc:09:9f:77:e8:8e:6f:6e:b6:ab:
f1:ad:61:80:f2:e2:5b:66:aa:34:84:0d:b8:32:6b:c7:c0:22:
5f:a2:90:99:e5:81:84:cb:85:77:71:ea:d0:30:93:57:e0:a7:
92:df:e0:95:72:93:fd:e0:ce:23:85:48:92:8c:50:c3:87:b4:
14:be:cd:e3:64:01:1f:5d:b0:fa:e0:ca:c2:ba:e1:81:19:25:
62:f7:26:d0:9d:9b:bb:79:9a:75:45:ca:66:d5:b4:a9:d4:37:
d8:88:d6:d4:4a:87:2c:ff:92:57:e2:d6:09:21:0a:a6:bc:bc:
d0:95:0d:10:c4:00:94:23:f5:30:cd:a3:40:06:3a:db:c7:b2:
ac:9d:8f:d9:04:59:1e:53:99:ad:0a:ee:ba:9e:a1:d4:a8:42:
f9:40:df:91
-----BEGIN CERTIFICATE-----
MIIFsDCCBJigAwIBAgICLRwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
REEyRDUxMTAvBgNVBAUTKDNDMUM4NzczNDdFRTgyNzI5NjM2QUYwRjNBMzc1RDM5
MTA5MEY5MjEwHhcNMjUwOTA2MTU1MjM4WhcNMjYxMjAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02OGJjNThjNi01OTQ2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAxfT3unLPa4hjUHqQXUNPAOPkBZhCLQEIXFfnZR0iKGLTcn1d/EDNSywFDEL2
nEKKrEEX1X6ZaSL8C8a1o6B9IRLWddJvw9LO4fK4fexvEZq+O98fTGRQFZiDoDbC
5RFSQkMmmdCwqqJ6Y4Rzj+yq1MqD0hh3v956Tyg7fWzjgyV5B1UGZORztwoYUqtm
8/iIM7T0ci6UutkniDms3QaRFSMBlBE9DyEvcB8hPsFSdUKcEjxfnuhr8AlUgqNn
H11HukgCgDZe0gSXJjseF5K6KSvaoLksmQ7jlrsBXUgerGfMv+5IwIe4hAlG7FO+
qb9KeDymYHv33bNPqbIUEEgAmwIDAQABo4IC1DCCAtAwHQYDVR0OBBYEFPk+LrOP
3DXMSD9CDM3TcIxy+Up6MB8GA1UdIwQYMBaAFDwch3NH7oJyljavDzo3XTkQkPkh
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEQTJENS81Rjg2MUVFNkI4
OUExMUUzQjRBQzdFNzg1OTExRUEzMi9QQnlIYzBmdWduS1dOcThQT2pkZE9SQ1Et
U0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1BCeUhjMGZ1Z25LV05xOFBPamRkT1JDUS1TRS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
REEyRDUvNUY4NjFFRTZCODlBMTFFM0I0QUM3RTc4NTkxMUVBMzIvREU2MUQwREMy
QTczMTFGMDhEREM2RDE3QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwXgYIKwYBBQUHAQcBAf8E
TzBNMDwEAgABMDYDBAIr9YwDBAJnD/QDBAFnS+4DBAJnYEQDBAJnbJADBAJnx1QD
BAJn8tgDBAGQMJQDBAKvKSwwDQQCAAIwBwMFAiQFFQAwDQYJKoZIhvcNAQELBQAD
ggEBAMRaOXWp1hiaqqrAaec36b6a3jLLbunRZryOeC6ou6/tSxZ7ttE7+U5/OuLL
20xSxkgj7ILVV8p0tGR9L9s1zZ7wu9gKu2cFRXhoSSfPPfJf/payAaL4CydE6BL7
2fTyTVLx3Amfd+iOb262q/GtYYDy4ltmqjSEDbgya8fAIl+ikJnlgYTLhXdx6tAw
k1fgp5Lf4JVyk/3gziOFSJKMUMOHtBS+zeNkAR9dsPrgysK64YEZJWL3JtCdm7t5
mnVFymbVtKnUN9iI1tRKhyz/klfi1gkhCqa8vNCVDRDEAJQj9TDNo0AGOtvHsqyd
j9kEWR5Tma0K7rqeodSoQvlA35E=
-----END CERTIFICATE-----
Generated at Fri Sep 19 05:49:55 2025 by rpki-client