Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91EECAF/EEFDFEA45EA711EAA5E83184C4F9AE02/53CAA3B2023811EBA421D755C4F9AE02.roa
File: 53CAA3B2023811EBA421D755C4F9AE02.roa (raw, json)
Hash identifier: DeDkGdsN3N2xX3gJk6DxRPzTQe+BgFZ1qo1jOWYyHBQ=
Subject key identifier: 5F:7A:27:E7:7A:00:9A:AC:C1:25:C8:9A:B0:27:12:8A:51:99:AD:44
Certificate issuer: /CN=A91EECAF/serialNumber=6EBD3A269785123ADC3F496639AEDFB10F30D618
Certificate serial: 0B5F
Authority key identifier: 6E:BD:3A:26:97:85:12:3A:DC:3F:49:66:39:AE:DF:B1:0F:30:D6:18
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/br06JpeFEjrcP0lmOa7fsQ8w1hg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91EECAF/EEFDFEA45EA711EAA5E83184C4F9AE02/53CAA3B2023811EBA421D755C4F9AE02.roa
Signing time: Wed 22 Oct 2025 04:09:27 +0000
ROA not before: Wed 22 Oct 2025 04:09:27 +0000
ROA not after: Wed 30 Dec 2026 00:00:00 +0000
asID: 58807
IP address blocks: 223.118.32.0/24 maxlen: 24
223.119.8.0/21 maxlen: 21
223.119.10.0/24 maxlen: 24
223.119.26.0/23 maxlen: 24
223.119.28.0/23 maxlen: 24
223.119.32.0/24 maxlen: 24
223.119.34.0/24 maxlen: 24
223.119.35.0/24 maxlen: 24
223.119.36.0/24 maxlen: 24
223.119.37.0/24 maxlen: 24
223.119.74.0/23 maxlen: 24
223.119.88.0/23 maxlen: 24
223.119.100.0/24 maxlen: 24
223.119.192.0/24 maxlen: 24
223.119.252.0/23 maxlen: 23
223.119.252.0/24 maxlen: 24
223.119.253.0/24 maxlen: 24
2402:4f00:f000::/36 maxlen: 36
2402:4f00:f000::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91EECAF/EEFDFEA45EA711EAA5E83184C4F9AE02/br06JpeFEjrcP0lmOa7fsQ8w1hg.crl
rsync://rpki.apnic.net/member_repository/A91EECAF/EEFDFEA45EA711EAA5E83184C4F9AE02/br06JpeFEjrcP0lmOa7fsQ8w1hg.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/br06JpeFEjrcP0lmOa7fsQ8w1hg.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 09 Nov 2025 19:25:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2911 (0xb5f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91EECAF, serialNumber=6EBD3A269785123ADC3F496639AEDFB10F30D618
Validity
Not Before: Oct 22 04:09:27 2025 GMT
Not After : Dec 30 00:00:00 2026 GMT
Subject: CN=68f858f7-7ac6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:1a:db:91:89:4a:b4:fc:1d:6c:72:08:20:60:
d3:6b:87:48:5f:de:bb:92:40:81:6d:ac:3a:a3:dc:
8a:c7:2d:70:9c:1a:d9:98:1f:ac:2d:79:1b:b7:27:
93:34:f7:6a:5c:66:64:fb:d5:c8:c4:f2:3d:67:22:
bb:cb:e3:bb:43:89:e3:a9:ed:9d:89:0c:35:50:41:
f5:45:77:ac:12:2d:15:b6:f6:dc:37:29:56:20:31:
0c:92:c9:23:d9:ab:b7:19:46:ce:c6:67:91:a5:39:
44:8e:38:2b:8a:a6:85:2b:97:ec:4b:5a:3b:44:34:
83:f0:78:32:fc:07:78:b9:34:8a:3d:6a:d5:10:fb:
65:b5:36:dc:62:df:e8:d4:9a:b4:70:1e:46:34:1b:
77:1e:3d:62:76:fd:63:27:5e:b0:ee:00:d1:a7:9d:
bb:8d:50:04:69:87:5d:92:cb:63:dc:b3:f3:09:e2:
4f:d9:bf:4a:b8:6e:9a:5e:ed:6a:d1:07:bf:81:c2:
47:74:3c:dc:cb:de:67:73:f7:5a:e4:40:8f:42:74:
7f:0d:26:c6:46:63:53:56:cd:9a:d0:41:76:10:65:
9e:d6:0f:4b:ff:91:d3:61:88:f3:52:b8:b5:ee:e6:
0e:ed:88:5d:f2:80:d8:60:13:41:fc:81:c2:0e:98:
8c:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:7A:27:E7:7A:00:9A:AC:C1:25:C8:9A:B0:27:12:8A:51:99:AD:44
X509v3 Authority Key Identifier:
keyid:6E:BD:3A:26:97:85:12:3A:DC:3F:49:66:39:AE:DF:B1:0F:30:D6:18
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91EECAF/EEFDFEA45EA711EAA5E83184C4F9AE02/br06JpeFEjrcP0lmOa7fsQ8w1hg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/br06JpeFEjrcP0lmOa7fsQ8w1hg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EECAF/EEFDFEA45EA711EAA5E83184C4F9AE02/53CAA3B2023811EBA421D755C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
223.118.32.0/24
223.119.8.0/21
223.119.26.0-223.119.29.255
223.119.32.0/24
223.119.34.0-223.119.37.255
223.119.74.0/23
223.119.88.0/23
223.119.100.0/24
223.119.192.0/24
223.119.252.0/23
IPv6:
2402:4f00:f000::/36
Signature Algorithm: sha256WithRSAEncryption
5f:0c:a1:e1:7e:e3:31:06:cd:48:26:6b:35:d4:f3:1a:ef:c2:
70:51:f7:07:7d:ea:5c:25:1c:d8:96:90:9e:63:1c:4d:a7:86:
b5:62:2d:1d:8d:bc:1d:cf:ee:38:4d:dc:52:89:eb:1e:7b:1d:
63:0b:1f:c3:9a:d9:c4:53:90:c6:e6:43:74:e3:03:c2:e4:29:
6f:2a:55:f1:46:6a:2b:3d:39:16:38:e6:fe:85:e9:49:f9:36:
a6:53:45:71:4e:29:3b:36:c2:81:e8:e4:f7:c8:2f:9e:14:81:
2f:df:4a:97:66:f8:e3:3b:70:36:b0:5a:76:6b:7e:a2:a3:09:
ba:70:b2:f8:be:1b:b3:1f:52:7a:62:7d:0b:65:32:e5:a2:d0:
c2:04:a6:6a:e4:35:62:25:23:aa:3c:a3:4b:8c:85:01:fc:c4:
db:69:e9:38:1a:64:c6:b6:4e:c2:92:dc:f2:be:17:27:f8:7e:
72:01:ac:53:5c:f6:e6:75:3a:94:e2:8d:6c:5e:ed:a3:80:57:
50:77:c5:56:c7:10:05:3e:ac:e3:da:2d:67:30:dc:eb:7c:72:
f3:6c:5c:80:c2:df:f6:ec:d1:16:23:97:be:7d:95:1b:86:21:
9b:c4:f0:d4:f7:42:ad:ed:91:56:09:88:b7:5b:fd:e2:bd:6f:
66:15:38:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 01:02:48 2025 by rpki-client