Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/842DD2688A0A11F08EF8FA7AC4F9AE02.roa
File: 842DD2688A0A11F08EF8FA7AC4F9AE02.roa (raw, json)
Hash identifier: wjGOKOPA/EQzdHtmsdr89GKoucVMcYiFY50BAffbLLU=
Subject key identifier: B4:42:02:F9:37:CA:A6:7A:C6:B5:72:76:82:44:04:7E:CE:4F:7A:12
Certificate issuer: /CN=A91E6134/serialNumber=8308087911EA49E215DC4926B0226A521E5B39C4
Certificate serial: 29AA
Authority key identifier: 83:08:08:79:11:EA:49:E2:15:DC:49:26:B0:22:6A:52:1E:5B:39:C4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/842DD2688A0A11F08EF8FA7AC4F9AE02.roa
Signing time: Fri 05 Sep 2025 03:43:42 +0000
ROA not before: Fri 05 Sep 2025 03:43:42 +0000
ROA not after: Thu 30 Jul 2026 00:00:00 +0000
asID: 138241
IP address blocks: 103.11.63.0/24 maxlen: 24
113.203.208.0/24 maxlen: 24
113.203.209.0/24 maxlen: 24
113.203.210.0/24 maxlen: 24
113.203.211.0/24 maxlen: 24
113.203.212.0/24 maxlen: 24
113.203.213.0/24 maxlen: 24
113.203.214.0/24 maxlen: 24
113.203.215.0/24 maxlen: 24
113.203.216.0/24 maxlen: 24
113.203.217.0/24 maxlen: 24
113.203.218.0/24 maxlen: 24
113.203.219.0/24 maxlen: 24
113.203.220.0/24 maxlen: 24
113.203.221.0/24 maxlen: 24
113.203.222.0/24 maxlen: 24
113.203.223.0/24 maxlen: 24
113.203.233.0/24 maxlen: 24
113.203.241.0/24 maxlen: 24
113.203.246.0/24 maxlen: 24
113.203.248.0/22 maxlen: 22
113.203.252.0/24 maxlen: 24
113.203.253.0/24 maxlen: 24
113.203.254.0/24 maxlen: 24
113.203.255.0/24 maxlen: 24
115.167.0.0/24 maxlen: 24
115.167.1.0/24 maxlen: 24
115.167.2.0/24 maxlen: 24
115.167.3.0/24 maxlen: 24
115.167.4.0/24 maxlen: 24
115.167.5.0/24 maxlen: 24
115.167.6.0/24 maxlen: 24
115.167.7.0/24 maxlen: 24
115.167.8.0/24 maxlen: 24
115.167.9.0/24 maxlen: 24
115.167.10.0/24 maxlen: 24
115.167.11.0/24 maxlen: 24
115.167.12.0/24 maxlen: 24
115.167.13.0/24 maxlen: 24
115.167.14.0/24 maxlen: 24
115.167.15.0/24 maxlen: 24
115.167.16.0/22 maxlen: 24
115.167.20.0/22 maxlen: 24
115.167.24.0/22 maxlen: 24
115.167.28.0/24 maxlen: 24
115.167.29.0/24 maxlen: 24
115.167.30.0/24 maxlen: 24
115.167.31.0/24 maxlen: 24
115.167.48.0/24 maxlen: 24
115.167.49.0/24 maxlen: 24
115.167.50.0/24 maxlen: 24
115.167.51.0/24 maxlen: 24
115.167.52.0/24 maxlen: 24
115.167.53.0/24 maxlen: 24
115.167.54.0/24 maxlen: 24
115.167.55.0/24 maxlen: 24
115.167.56.0/22 maxlen: 24
115.167.60.0/24 maxlen: 24
115.167.61.0/24 maxlen: 24
115.167.62.0/24 maxlen: 24
115.167.63.0/24 maxlen: 24
115.167.96.0/22 maxlen: 24
115.167.101.0/24 maxlen: 24
115.167.102.0/24 maxlen: 24
115.167.103.0/24 maxlen: 24
115.167.104.0/22 maxlen: 22
115.167.112.0/22 maxlen: 22
115.167.117.0/24 maxlen: 24
115.167.120.0/24 maxlen: 24
115.167.121.0/24 maxlen: 24
115.167.122.0/24 maxlen: 24
115.167.123.0/24 maxlen: 24
115.167.124.0/24 maxlen: 24
175.110.64.0/24 maxlen: 24
175.110.66.0/24 maxlen: 24
175.110.67.0/24 maxlen: 24
175.110.81.0/24 maxlen: 24
175.110.82.0/24 maxlen: 24
175.110.88.0/24 maxlen: 24
175.110.90.0/24 maxlen: 24
175.110.91.0/24 maxlen: 24
175.110.96.0/24 maxlen: 24
175.110.97.0/24 maxlen: 24
175.110.98.0/24 maxlen: 24
175.110.99.0/24 maxlen: 24
175.110.100.0/24 maxlen: 24
175.110.101.0/24 maxlen: 24
175.110.102.0/24 maxlen: 24
175.110.103.0/24 maxlen: 24
175.110.104.0/21 maxlen: 21
180.178.142.0/24 maxlen: 24
180.178.144.0/24 maxlen: 24
180.178.145.0/24 maxlen: 24
180.178.146.0/24 maxlen: 24
180.178.147.0/24 maxlen: 24
180.178.148.0/24 maxlen: 24
180.178.149.0/24 maxlen: 24
180.178.150.0/24 maxlen: 24
180.178.151.0/24 maxlen: 24
180.178.152.0/21 maxlen: 21
180.178.160.0/21 maxlen: 21
180.178.168.0/24 maxlen: 24
180.178.169.0/24 maxlen: 24
180.178.170.0/24 maxlen: 24
180.178.171.0/24 maxlen: 24
180.178.176.0/21 maxlen: 21
180.178.185.0/24 maxlen: 24
180.178.186.0/24 maxlen: 24
180.178.187.0/24 maxlen: 24
180.178.188.0/24 maxlen: 24
180.178.190.0/24 maxlen: 24
180.178.191.0/24 maxlen: 24
202.92.26.0/24 maxlen: 24
223.29.225.0/24 maxlen: 24
223.29.228.0/24 maxlen: 24
223.29.229.0/24 maxlen: 24
223.29.230.0/24 maxlen: 24
223.29.231.0/24 maxlen: 24
223.29.235.0/24 maxlen: 24
223.29.236.0/24 maxlen: 24
223.29.238.0/24 maxlen: 24
223.29.239.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.crl
rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 12 Sep 2025 04:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 10666 (0x29aa)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E6134, serialNumber=8308087911EA49E215DC4926B0226A521E5B39C4
Validity
Not Before: Sep 5 03:43:42 2025 GMT
Not After : Jul 30 00:00:00 2026 GMT
Subject: CN=68ba5c6e-db81
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:77:f9:8a:24:a1:54:82:63:c2:ca:43:86:f3:
fa:f3:14:af:27:4b:12:99:1e:42:2f:11:fc:a7:4c:
b9:18:ac:66:c3:ff:20:e2:65:bd:b5:41:e3:fe:76:
8b:91:95:62:5f:7e:94:71:2f:a7:f6:68:b1:47:96:
dc:f2:48:07:cc:c0:7a:0c:5f:24:24:83:d3:35:39:
ba:52:63:ba:48:51:49:c6:68:92:56:b8:3c:a7:25:
02:a6:2c:29:20:78:f8:28:8f:be:49:e5:74:bf:f1:
88:19:13:26:61:f2:92:3d:3d:fd:d2:3b:4d:6a:c4:
e2:21:8f:cd:6a:76:bc:d7:4e:5d:72:44:cb:36:26:
a0:0e:bb:84:45:1c:69:3b:fb:7b:24:01:86:e7:ce:
30:79:cc:21:b4:e4:3d:ec:b5:e1:8a:18:7d:19:e0:
84:4f:65:7f:8e:21:4c:ec:44:35:ef:da:f6:f5:a4:
cf:d4:21:65:a6:5c:d7:6f:a9:bb:c9:be:2c:3f:45:
3b:4f:4f:41:a0:fe:2b:67:94:f1:b2:14:fc:40:7e:
16:30:ae:fc:64:0f:5f:35:f1:96:3f:65:4d:70:e6:
8a:77:8c:b1:92:83:ad:cc:a3:57:28:e4:bb:9a:b9:
3b:68:2c:c5:58:34:22:6b:40:e1:20:13:5c:e0:8c:
ea:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:42:02:F9:37:CA:A6:7A:C6:B5:72:76:82:44:04:7E:CE:4F:7A:12
X509v3 Authority Key Identifier:
keyid:83:08:08:79:11:EA:49:E2:15:DC:49:26:B0:22:6A:52:1E:5B:39:C4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/842DD2688A0A11F08EF8FA7AC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.11.63.0/24
113.203.208.0/20
113.203.233.0/24
113.203.241.0/24
113.203.246.0/24
113.203.248.0/21
115.167.0.0/19
115.167.48.0/20
115.167.96.0/22
115.167.101.0-115.167.107.255
115.167.112.0/22
115.167.117.0/24
115.167.120.0-115.167.124.255
175.110.64.0/24
175.110.66.0/23
175.110.81.0-175.110.82.255
175.110.88.0/24
175.110.90.0/23
175.110.96.0/20
180.178.142.0/24
180.178.144.0-180.178.171.255
180.178.176.0/21
180.178.185.0-180.178.188.255
180.178.190.0/23
202.92.26.0/24
223.29.225.0/24
223.29.228.0/22
223.29.235.0-223.29.236.255
223.29.238.0/23
Signature Algorithm: sha256WithRSAEncryption
ac:1e:53:47:5d:8b:75:f0:bc:53:af:58:be:19:6e:2d:a6:d5:
63:63:b6:42:bb:e6:ea:c9:17:18:97:b2:ba:69:04:25:2e:58:
c3:d8:38:64:1d:85:01:de:55:eb:12:60:ca:31:88:b3:91:48:
61:3b:2f:ff:0a:da:44:32:b7:45:7c:f5:bc:cb:9d:98:6a:77:
53:0e:17:2e:83:c5:73:af:e4:7c:d8:b5:cc:cf:88:01:ba:1c:
4b:4b:81:53:25:85:0e:f2:a6:ed:f3:fd:d5:fd:65:7d:c5:8c:
4a:6f:f0:93:81:5c:85:c1:37:e8:3f:f9:cd:89:ad:f5:d8:15:
aa:2a:35:02:c8:83:5a:53:1b:d7:5f:be:3d:b8:f0:6d:90:84:
a4:b4:3a:52:73:9e:db:b6:b8:ab:c1:fa:26:c3:3b:70:d2:3a:
44:be:01:50:04:00:6c:59:05:89:08:a5:68:92:74:60:8c:9f:
0c:42:e4:da:98:78:ff:a2:4b:d8:99:d7:16:88:bd:ad:ef:4b:
83:38:42:c4:45:1c:2b:54:f0:01:ef:bd:65:d6:20:c5:d1:f8:
20:10:c1:0e:db:65:c3:81:4d:f0:98:cd:f3:c0:9e:b2:26:e6:
4a:1a:ee:43:8f:ff:58:63:ed:a6:b6:f1:0b:89:ad:3e:40:8c:
15:f0:04:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 6 05:15:47 2025 by rpki-client