Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91EECAF/EEFDFEA45EA711EAA5E83184C4F9AE02/DE5B4B680B8411EFBE929A1DC4F9AE02.roa
File: DE5B4B680B8411EFBE929A1DC4F9AE02.roa (raw, json)
Hash identifier: R6+4ss6mJMA2fcEMrX15U2Fp8fbdxhbZt9mRr5DW3z8=
Subject key identifier: 02:82:59:3E:46:2F:91:A9:0F:3A:DE:85:39:2C:1A:CD:E4:6B:D5:3D
Certificate issuer: /CN=A91EECAF/serialNumber=6EBD3A269785123ADC3F496639AEDFB10F30D618
Certificate serial: 0B5E
Authority key identifier: 6E:BD:3A:26:97:85:12:3A:DC:3F:49:66:39:AE:DF:B1:0F:30:D6:18
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/br06JpeFEjrcP0lmOa7fsQ8w1hg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91EECAF/EEFDFEA45EA711EAA5E83184C4F9AE02/DE5B4B680B8411EFBE929A1DC4F9AE02.roa
Signing time: Wed 22 Oct 2025 04:09:26 +0000
ROA not before: Wed 22 Oct 2025 04:09:26 +0000
ROA not after: Wed 30 Dec 2026 00:00:00 +0000
asID: 58453
IP address blocks: 103.11.108.0/22 maxlen: 22
103.11.108.0/24 maxlen: 24
103.11.109.0/24 maxlen: 24
223.118.0.0/15 maxlen: 15
223.118.0.0/16 maxlen: 24
223.118.0.0/27 maxlen: 27
223.119.0.0/16 maxlen: 20
223.119.0.0/21 maxlen: 24
223.119.8.0/22 maxlen: 24
223.119.12.0/22 maxlen: 24
223.119.16.0/20 maxlen: 24
223.119.32.0/19 maxlen: 23
223.119.33.0/24 maxlen: 24
223.119.38.0/23 maxlen: 24
223.119.40.0/21 maxlen: 24
223.119.48.0/22 maxlen: 24
223.119.53.0/24 maxlen: 24
223.119.54.0/23 maxlen: 24
223.119.56.0/21 maxlen: 24
223.119.64.0/18 maxlen: 23
223.119.64.0/19 maxlen: 24
223.119.96.0/22 maxlen: 24
223.119.101.0/24 maxlen: 24
223.119.102.0/23 maxlen: 24
223.119.104.0/21 maxlen: 24
223.119.112.0/20 maxlen: 24
223.119.128.0/17 maxlen: 23
223.119.128.0/18 maxlen: 24
223.119.192.0/19 maxlen: 24
223.119.224.0/20 maxlen: 24
223.119.240.0/21 maxlen: 24
223.119.248.0/22 maxlen: 24
223.119.252.0/23 maxlen: 24
223.120.0.0/17 maxlen: 24
223.121.0.0/17 maxlen: 24
2402:4f00::/32 maxlen: 32
2402:4f00:1000::/36 maxlen: 36
2402:4f00:2000::/36 maxlen: 36
2402:4f00:4000:4::/64 maxlen: 64
2402:4f00:4001:100::/56 maxlen: 56
2402:4f00:4002:100::/56 maxlen: 56
2402:4f00:4003::/48 maxlen: 48
2402:4f00:8000::/36 maxlen: 36
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91EECAF/EEFDFEA45EA711EAA5E83184C4F9AE02/br06JpeFEjrcP0lmOa7fsQ8w1hg.crl
rsync://rpki.apnic.net/member_repository/A91EECAF/EEFDFEA45EA711EAA5E83184C4F9AE02/br06JpeFEjrcP0lmOa7fsQ8w1hg.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/br06JpeFEjrcP0lmOa7fsQ8w1hg.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 09 Nov 2025 19:25:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2910 (0xb5e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91EECAF, serialNumber=6EBD3A269785123ADC3F496639AEDFB10F30D618
Validity
Not Before: Oct 22 04:09:26 2025 GMT
Not After : Dec 30 00:00:00 2026 GMT
Subject: CN=68f858f6-dfa8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:40:5c:9a:4d:1b:9a:b4:5b:be:12:7b:31:c6:
25:b7:71:ed:be:b2:7f:4c:07:79:40:66:29:65:d9:
3e:86:ef:fc:90:bb:90:38:53:15:7f:58:fe:38:ed:
b0:ce:df:b1:2f:75:99:90:1c:c1:b9:44:d5:ba:af:
08:2b:b1:fb:74:9a:98:91:8d:cb:50:ae:37:78:70:
63:b9:27:9e:98:a3:ca:15:a6:40:5a:c4:05:8d:a7:
e8:3d:51:13:17:33:19:e6:cf:87:42:4d:58:c4:6a:
0e:a1:cf:a0:92:6b:2f:ef:de:63:de:8c:3e:f4:ef:
7a:46:54:c4:a1:b8:8f:24:5c:62:b6:9a:b9:98:9e:
20:59:2f:e7:3f:90:36:38:26:c9:46:bd:93:46:82:
0f:40:92:19:04:ce:91:54:c4:39:b0:2d:72:50:8e:
77:28:4f:61:52:dd:23:2a:92:ed:fa:a7:7c:b0:b4:
75:e6:88:dc:75:01:1e:cc:4b:2e:1a:cc:fd:62:65:
0e:92:1a:2f:ef:f2:d4:bb:f9:d7:6e:08:cc:ef:6f:
13:9b:60:01:08:5f:43:21:10:b6:0c:6c:ec:d7:1f:
fb:ee:a2:17:61:9e:99:6d:7a:eb:57:b3:96:46:07:
0b:14:e5:cf:93:03:07:e3:a4:10:cd:b9:a5:24:98:
8f:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:82:59:3E:46:2F:91:A9:0F:3A:DE:85:39:2C:1A:CD:E4:6B:D5:3D
X509v3 Authority Key Identifier:
keyid:6E:BD:3A:26:97:85:12:3A:DC:3F:49:66:39:AE:DF:B1:0F:30:D6:18
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91EECAF/EEFDFEA45EA711EAA5E83184C4F9AE02/br06JpeFEjrcP0lmOa7fsQ8w1hg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/br06JpeFEjrcP0lmOa7fsQ8w1hg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EECAF/EEFDFEA45EA711EAA5E83184C4F9AE02/DE5B4B680B8411EFBE929A1DC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.11.108.0/22
223.118.0.0-223.120.127.255
223.121.0.0/17
IPv6:
2402:4f00::/32
Signature Algorithm: sha256WithRSAEncryption
7c:37:ff:21:03:32:19:b1:3f:31:86:4e:c1:62:45:d0:b4:2d:
48:42:9b:13:a7:2c:da:67:2e:71:66:3a:53:05:c6:75:49:eb:
5f:e0:9d:dd:bc:5b:bf:15:b3:63:a8:4b:af:4f:14:cc:ef:39:
47:11:16:5a:fd:b8:e5:5c:46:79:ec:c4:ac:80:98:cc:7e:cd:
2c:54:f5:84:79:e8:f9:4e:22:8b:a4:3b:9c:aa:e4:5a:99:37:
a7:9f:ed:a2:7e:94:05:87:09:ff:2b:00:12:12:60:c7:ef:41:
30:a4:fb:ae:be:9b:94:94:7e:a6:05:48:eb:c3:3c:43:20:8d:
09:1a:3b:67:fb:76:3c:d0:9e:eb:07:5b:f6:d6:89:bb:35:47:
62:8d:54:e0:c3:1b:29:23:20:b1:c7:02:d7:70:3c:49:3c:b0:
85:25:19:04:15:0c:bf:d8:b7:be:60:c6:62:42:3e:27:1d:f2:
41:89:ae:5a:d2:e3:56:0e:62:15:b7:0f:08:82:e8:14:e6:19:
4e:d9:c7:2b:45:57:fa:a9:04:58:94:44:fc:10:12:37:59:63:
48:f6:88:53:48:1b:39:0d:d8:39:c8:ad:c3:a9:95:90:9e:95:
04:fb:27:a3:2e:c9:78:f6:a9:f0:94:ba:db:72:36:7f:e8:7e:
16:95:0d:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 01:06:12 2025 by rpki-client