Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91EECAF/EEFDFEA45EA711EAA5E83184C4F9AE02/53CAA3B2023811EBA421D755C4F9AE02.roa
File: 53CAA3B2023811EBA421D755C4F9AE02.roa (raw, json)
Hash identifier: Ri1dXeOFxDR/7l+L35yanQI8/jxsp+el2wPepBX2c9g=
Subject key identifier: E6:86:55:EF:14:F1:51:A2:C8:5A:70:CA:6B:31:03:DD:85:6A:40:40
Certificate issuer: /CN=A91EECAF/serialNumber=6EBD3A269785123ADC3F496639AEDFB10F30D618
Certificate serial: 0B1B
Authority key identifier: 6E:BD:3A:26:97:85:12:3A:DC:3F:49:66:39:AE:DF:B1:0F:30:D6:18
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/br06JpeFEjrcP0lmOa7fsQ8w1hg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91EECAF/EEFDFEA45EA711EAA5E83184C4F9AE02/53CAA3B2023811EBA421D755C4F9AE02.roa
Signing time: Tue 15 Jul 2025 04:29:55 +0000
ROA not before: Tue 15 Jul 2025 04:29:55 +0000
ROA not after: Tue 30 Dec 2025 00:00:00 +0000
asID: 58807
IP address blocks: 223.118.32.0/24 maxlen: 24
223.119.8.0/21 maxlen: 21
223.119.10.0/24 maxlen: 24
223.119.26.0/23 maxlen: 24
223.119.28.0/23 maxlen: 24
223.119.32.0/24 maxlen: 24
223.119.34.0/24 maxlen: 24
223.119.35.0/24 maxlen: 24
223.119.36.0/24 maxlen: 24
223.119.37.0/24 maxlen: 24
223.119.74.0/23 maxlen: 24
223.119.88.0/23 maxlen: 24
223.119.100.0/24 maxlen: 24
223.119.192.0/24 maxlen: 24
223.119.252.0/23 maxlen: 23
223.119.252.0/24 maxlen: 24
223.119.253.0/24 maxlen: 24
2402:4f00:f000::/36 maxlen: 36
2402:4f00:f000::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91EECAF/EEFDFEA45EA711EAA5E83184C4F9AE02/br06JpeFEjrcP0lmOa7fsQ8w1hg.crl
rsync://rpki.apnic.net/member_repository/A91EECAF/EEFDFEA45EA711EAA5E83184C4F9AE02/br06JpeFEjrcP0lmOa7fsQ8w1hg.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/br06JpeFEjrcP0lmOa7fsQ8w1hg.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 27 Jul 2025 19:39:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2843 (0xb1b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91EECAF, serialNumber=6EBD3A269785123ADC3F496639AEDFB10F30D618
Validity
Not Before: Jul 15 04:29:55 2025 GMT
Not After : Dec 30 00:00:00 2025 GMT
Subject: CN=6875d943-a313
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:13:0c:15:23:44:c6:19:26:40:1b:cc:f4:de:
0a:df:a8:b3:b6:69:68:5f:dc:cb:73:87:c1:dc:28:
24:6b:91:39:78:69:fa:26:a3:46:ba:2f:37:e0:ff:
10:9b:55:38:25:5d:c9:84:f8:0c:61:17:d8:48:05:
94:cf:ee:65:3e:db:10:8a:62:92:cb:26:cc:03:bf:
58:ea:e5:06:bb:ab:25:e8:d5:93:7e:be:61:07:54:
63:1d:f4:8a:2a:c7:8d:88:e7:36:65:3a:b9:37:a8:
df:17:96:fd:0d:a7:48:c3:98:a7:73:35:27:8c:4b:
c7:22:f1:d0:37:c5:57:80:8e:96:7e:22:5a:08:7b:
d3:fa:1e:dd:39:51:e0:ac:37:98:0b:39:a7:6c:eb:
ee:19:02:12:69:ad:6b:c8:0b:ab:0b:c2:24:6b:b1:
34:d0:56:13:11:87:9b:c6:b9:ce:73:cd:cb:7f:9f:
96:d8:4b:55:03:9c:87:b5:af:d2:e4:d0:e5:70:d0:
24:3a:c7:19:7f:b1:ee:bf:31:54:e7:fa:57:79:60:
92:77:6d:7d:a0:df:4e:2b:5b:34:81:05:a8:b7:a1:
42:c0:52:59:b3:8a:0b:79:64:71:6b:20:6a:ba:30:
97:81:7a:cb:cd:59:70:bd:8f:dd:15:41:2d:c5:9f:
a7:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:86:55:EF:14:F1:51:A2:C8:5A:70:CA:6B:31:03:DD:85:6A:40:40
X509v3 Authority Key Identifier:
keyid:6E:BD:3A:26:97:85:12:3A:DC:3F:49:66:39:AE:DF:B1:0F:30:D6:18
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91EECAF/EEFDFEA45EA711EAA5E83184C4F9AE02/br06JpeFEjrcP0lmOa7fsQ8w1hg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/br06JpeFEjrcP0lmOa7fsQ8w1hg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EECAF/EEFDFEA45EA711EAA5E83184C4F9AE02/53CAA3B2023811EBA421D755C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
223.118.32.0/24
223.119.8.0/21
223.119.26.0-223.119.29.255
223.119.32.0/24
223.119.34.0-223.119.37.255
223.119.74.0/23
223.119.88.0/23
223.119.100.0/24
223.119.192.0/24
223.119.252.0/23
IPv6:
2402:4f00:f000::/36
Signature Algorithm: sha256WithRSAEncryption
86:17:da:82:ea:f3:7f:6f:09:88:15:76:e5:6e:5e:be:a0:ff:
60:30:16:77:44:2b:71:29:6e:c1:c4:b4:45:00:0c:8a:72:8c:
01:2c:72:85:48:8e:2b:03:2a:89:9b:18:42:ab:03:5f:d5:62:
52:22:87:bf:a9:32:34:d8:18:ba:6e:47:5a:d7:55:b8:2d:a4:
8e:1c:60:9d:4d:9b:ce:63:eb:97:e8:29:93:c2:8a:91:bf:45:
81:cf:b8:70:3a:ad:0e:d4:1f:c1:57:35:f3:a3:13:d0:9f:05:
00:d1:29:57:75:e2:27:6e:e2:6e:b9:35:bb:76:01:f8:5e:b2:
6d:9d:67:2f:9c:c3:05:1f:74:db:85:71:5a:78:71:b9:c2:29:
ad:81:17:60:6a:80:27:6c:f8:a6:c2:af:7d:69:91:ff:4a:3b:
49:cf:e9:5d:41:56:d0:0e:1c:12:74:80:d7:9c:66:4e:19:0c:
1d:89:d6:1a:6d:95:68:2a:b0:03:20:73:01:27:71:68:9f:3d:
6f:3d:ee:85:04:7e:66:55:ae:07:f6:3b:fb:ca:15:16:34:57:
89:8c:02:ce:2d:77:f5:d3:93:6a:ea:00:ab:28:1f:74:80:b4:
fb:6c:8b:52:be:9b:ab:07:bb:ba:66:45:b1:8e:64:0e:f9:55:
96:4c:92:c9
-----BEGIN CERTIFICATE-----
MIIFxzCCBK+gAwIBAgICCxswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RUVDQUYxMTAvBgNVBAUTKDZFQkQzQTI2OTc4NTEyM0FEQzNGNDk2NjM5QUVERkIx
MEYzMEQ2MTgwHhcNMjUwNzE1MDQyOTU1WhcNMjUxMjMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02ODc1ZDk0My1hMzEzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA8BMMFSNExhkmQBvM9N4K36iztmloX9zLc4fB3Cgka5E5eGn6JqNGui834P8Q
m1U4JV3JhPgMYRfYSAWUz+5lPtsQimKSyybMA79Y6uUGu6sl6NWTfr5hB1RjHfSK
KseNiOc2ZTq5N6jfF5b9DadIw5inczUnjEvHIvHQN8VXgI6WfiJaCHvT+h7dOVHg
rDeYCzmnbOvuGQISaa1ryAurC8Ika7E00FYTEYebxrnOc83Lf5+W2EtVA5yHta/S
5NDlcNAkOscZf7HuvzFU5/pXeWCSd219oN9OK1s0gQWot6FCwFJZs4oLeWRxayBq
ujCXgXrLzVlwvY/dFUEtxZ+nXQIDAQABo4IC6zCCAucwHQYDVR0OBBYEFOaGVe8U
8VGiyFpwymsxA92FakBAMB8GA1UdIwQYMBaAFG69OiaXhRI63D9JZjmu37EPMNYY
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFRUNBRi9FRUZERkVBNDVF
QTcxMUVBQTVFODMxODRDNEY5QUUwMi9icjA2SnBlRkVqcmNQMGxtT2E3ZnNROHcx
aGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2JyMDZKcGVGRWpyY1AwbG1PYTdmc1E4dzFoZy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
RUVDQUYvRUVGREZFQTQ1RUE3MTFFQUE1RTgzMTg0QzRGOUFFMDIvNTNDQUEzQjIw
MjM4MTFFQkE0MjFENzU1QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwdQYIKwYBBQUHAQcBAf8E
ZjBkMFIEAgABMEwDBADfdiADBAPfdwgwDAMEAd93GgMEAd93HAMEAN93IDAMAwQB
33ciAwQB33ckAwQB33dKAwQB33dYAwQA33dkAwQA33fAAwQB33f8MA4EAgACMAgD
BgQkAk8A8DANBgkqhkiG9w0BAQsFAAOCAQEAhhfagurzf28JiBV25W5evqD/YDAW
d0QrcSluwcS0RQAMinKMASxyhUiOKwMqiZsYQqsDX9ViUiKHv6kyNNgYum5HWtdV
uC2kjhxgnU2bzmPrl+gpk8KKkb9Fgc+4cDqtDtQfwVc186MT0J8FANEpV3XiJ27i
brk1u3YB+F6ybZ1nL5zDBR9024VxWnhxucIprYEXYGqAJ2z4psKvfWmR/0o7Sc/p
XUFW0A4cEnSA15xmThkMHYnWGm2VaCqwAyBzASdxaJ89bz3uhQR+ZlWuB/Y7+8oV
FjRXiYwCzi139dOTauoAqygfdIC0+2yLUr6bqwe7umZFsY5kDvlVlkySyQ==
-----END CERTIFICATE-----
Generated at Mon Jul 21 18:09:03 2025 by rpki-client