Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E28E2/952FA632D2E611ED9A52D55AC4F9AE02/42D4386CDFDB11F0A18E0FE3536F56BC.roa
File: 42D4386CDFDB11F0A18E0FE3536F56BC.roa (raw, json)
Hash identifier: +FOKSn3UMqNBdCkwTnN5e6gZKaXTHMKWX9i32crYuLc=
Subject key identifier: 9F:F9:2F:83:3F:6E:32:AF:ED:43:77:25:F1:2E:B4:1A:91:8F:10:34
Certificate issuer: /CN=A91E28E2/serialNumber=B481987331E1ED408B51CB9FD8EF4A650AC8669A
Certificate serial: 0294
Authority key identifier: B4:81:98:73:31:E1:ED:40:8B:51:CB:9F:D8:EF:4A:65:0A:C8:66:9A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tIGYczHh7UCLUcuf2O9KZQrIZpo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E28E2/952FA632D2E611ED9A52D55AC4F9AE02/42D4386CDFDB11F0A18E0FE3536F56BC.roa
Signing time: Sun 05 Jul 2026 03:28:31 +0000
ROA not before: Sun 05 Jul 2026 03:28:31 +0000
ROA not after: Tue 31 Aug 2027 00:00:00 +0000
asID: 45352
IP address blocks: 45.117.120.0/24 maxlen: 24
45.117.121.0/24 maxlen: 24
45.117.122.0/24 maxlen: 24
103.57.188.0/24 maxlen: 24
103.57.189.0/24 maxlen: 24
103.57.190.0/23 maxlen: 24
2403:1cc0::/48 maxlen: 48
2403:1cc0:1000::/48 maxlen: 48
2403:1cc0:1001::/48 maxlen: 48
2403:1cc0:1002::/48 maxlen: 48
2403:1cc0:1003::/48 maxlen: 48
2403:1cc0:1007::/48 maxlen: 48
2403:1cc0:1008::/48 maxlen: 48
2403:1cc0:1201::/48 maxlen: 48
2403:1cc0:1301::/48 maxlen: 48
2403:1cc0:1303::/48 maxlen: 48
2403:1cc0:1401::/48 maxlen: 48
2403:1cc0:2000::/48 maxlen: 48
2403:1cc0:2201::/48 maxlen: 48
2403:1cc0:2300::/48 maxlen: 48
2403:1cc0:3201::/48 maxlen: 48
2403:1cc0:3202::/48 maxlen: 48
2403:1cc0:3203::/48 maxlen: 48
2403:1cc0:4101::/48 maxlen: 48
2403:1cc0:5201::/48 maxlen: 48
2403:1cc0:6000::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E28E2/952FA632D2E611ED9A52D55AC4F9AE02/tIGYczHh7UCLUcuf2O9KZQrIZpo.crl
rsync://rpki.apnic.net/member_repository/A91E28E2/952FA632D2E611ED9A52D55AC4F9AE02/tIGYczHh7UCLUcuf2O9KZQrIZpo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tIGYczHh7UCLUcuf2O9KZQrIZpo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Jul 2026 02:57:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 660 (0x294)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E28E2, serialNumber=B481987331E1ED408B51CB9FD8EF4A650AC8669A
Validity
Not Before: Jul 5 03:28:31 2026 GMT
Not After : Aug 31 00:00:00 2027 GMT
Subject: CN=6a49cf5f-6da6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:2b:b4:b0:e9:10:b8:94:4a:cb:23:f4:d1:b1:
be:5e:62:21:d7:50:59:96:3a:9c:9a:f2:59:02:c6:
d6:25:d2:3f:b8:88:a5:3f:72:8f:a1:9b:73:75:d5:
99:60:f6:94:0a:4f:72:03:c2:34:2a:62:a6:50:bc:
89:69:9d:3c:76:fc:98:b4:16:34:2c:46:30:31:91:
34:ff:9f:10:57:e2:2f:6e:d0:14:41:74:a3:ad:c7:
82:65:ad:e7:32:ff:91:d0:4e:e8:21:30:66:6e:45:
27:5c:07:f5:42:df:dc:20:2d:24:53:a9:4d:d8:34:
2b:e6:f6:98:be:93:2b:04:9f:fc:30:b9:16:f7:92:
59:bb:03:9a:7b:b0:8d:fc:ed:f2:0b:ed:f4:d1:96:
dc:6b:f0:94:c0:9c:c8:5f:28:08:c5:86:90:e3:b1:
90:27:b9:4c:e3:05:7c:a1:72:f6:6b:7d:cd:c7:db:
fd:bf:99:24:f1:e2:67:35:2e:7c:90:7b:c0:c3:6c:
29:37:16:9d:c0:fd:78:4e:22:e2:37:ab:1f:66:7c:
bd:72:c9:7c:fc:89:a4:e8:98:cd:8c:60:eb:84:04:
b7:68:10:7d:d1:31:2d:fc:96:71:27:dd:2f:8a:7b:
a8:11:c4:69:11:97:a2:5e:88:e9:8d:2c:a2:df:d8:
90:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:F9:2F:83:3F:6E:32:AF:ED:43:77:25:F1:2E:B4:1A:91:8F:10:34
X509v3 Authority Key Identifier:
keyid:B4:81:98:73:31:E1:ED:40:8B:51:CB:9F:D8:EF:4A:65:0A:C8:66:9A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E28E2/952FA632D2E611ED9A52D55AC4F9AE02/tIGYczHh7UCLUcuf2O9KZQrIZpo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tIGYczHh7UCLUcuf2O9KZQrIZpo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E28E2/952FA632D2E611ED9A52D55AC4F9AE02/42D4386CDFDB11F0A18E0FE3536F56BC.roa
sbgp-ipAddrBlock: critical
IPv4:
45.117.120.0-45.117.122.255
103.57.188.0/22
IPv6:
2403:1cc0::/48
2403:1cc0:1000::/46
2403:1cc0:1007::-2403:1cc0:1008:ffff:ffff:ffff:ffff:ffff
2403:1cc0:1201::/48
2403:1cc0:1301::/48
2403:1cc0:1303::/48
2403:1cc0:1401::/48
2403:1cc0:2000::/48
2403:1cc0:2201::/48
2403:1cc0:2300::/48
2403:1cc0:3201::-2403:1cc0:3203:ffff:ffff:ffff:ffff:ffff
2403:1cc0:4101::/48
2403:1cc0:5201::/48
2403:1cc0:6000::/48
Signature Algorithm: sha256WithRSAEncryption
a7:02:c4:da:7b:9b:aa:c6:ff:c6:e5:82:4f:b0:6b:fd:e4:a8:
46:03:a0:20:a0:16:93:f3:07:0c:d6:45:6a:b0:e6:53:cd:e9:
3a:fe:81:bc:5d:1f:f7:f8:cd:c0:0f:d4:df:48:6d:b5:2f:35:
2d:b8:2d:af:8f:05:a3:96:1f:f5:0a:61:c4:cc:24:5d:a0:d2:
48:9d:e6:aa:af:a4:b2:90:a2:5c:cc:35:99:f8:22:ad:4d:76:
90:12:a9:d6:61:3b:e7:0c:98:5b:49:0c:92:6a:66:49:08:27:
de:ed:4e:b7:b4:45:ae:b7:62:e7:05:bb:38:9f:4e:e2:d3:b6:
e1:36:4f:85:9e:0e:26:de:1e:76:a3:ad:f7:a5:91:5b:49:d1:
90:28:b9:94:db:2a:5b:cc:c0:46:e0:61:31:5e:0f:ea:d8:fc:
fb:4f:de:5e:94:0f:08:4e:b4:e6:01:52:03:4a:71:c7:c1:62:
9f:27:61:ba:77:84:9e:d6:f6:e1:47:b9:5e:5a:5b:04:e4:ec:
bf:96:d2:cd:2b:14:95:f4:5d:0a:77:a8:9f:af:ad:5a:fc:28:
40:ee:48:f4:69:12:30:28:82:50:67:a3:b5:a5:a3:8d:69:b7:
fa:e8:26:27:f5:5a:8e:37:54:10:a3:db:08:a7:b0:2a:c8:f5:
e0:d7:1a:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 18 07:20:43 2026 by rpki-client