Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F48F2/46D091981DA911E29CFD3EA408B02CD2/650B909C903B11EF924F0B86C4F9AE02.roa
File: 650B909C903B11EF924F0B86C4F9AE02.roa (raw, json)
Hash identifier: LlAjrsD9ycrpFNBYdBCY0r9fbGY7oXTXFKR7+XLlDrc=
Subject key identifier: D3:9F:0E:A3:F9:C0:94:AD:41:28:84:DB:E3:CA:F7:DC:0D:27:0C:BA
Certificate issuer: /CN=A91F48F2/serialNumber=EC484A51E463B98AF8E1B02AE22955A1322F1F75
Certificate serial: 3514
Authority key identifier: EC:48:4A:51:E4:63:B9:8A:F8:E1:B0:2A:E2:29:55:A1:32:2F:1F:75
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7EhKUeRjuYr44bAq4ilVoTIvH3U.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F48F2/46D091981DA911E29CFD3EA408B02CD2/650B909C903B11EF924F0B86C4F9AE02.roa
Signing time: Thu 30 Oct 2025 15:31:11 +0000
ROA not before: Thu 30 Oct 2025 15:31:11 +0000
ROA not after: Wed 30 Dec 2026 00:00:00 +0000
asID: 24068
IP address blocks: 45.116.236.0/22 maxlen: 22
45.116.236.0/24 maxlen: 24
45.116.237.0/24 maxlen: 24
45.116.238.0/24 maxlen: 24
45.116.239.0/24 maxlen: 24
103.251.200.0/22 maxlen: 22
103.251.200.0/24 maxlen: 24
103.251.202.0/24 maxlen: 24
103.251.203.0/24 maxlen: 24
202.171.48.0/20 maxlen: 20
202.171.48.0/22 maxlen: 22
202.171.48.0/24 maxlen: 24
202.171.49.0/24 maxlen: 24
202.171.50.0/24 maxlen: 24
202.171.51.0/24 maxlen: 24
202.171.52.0/22 maxlen: 22
202.171.52.0/24 maxlen: 24
202.171.53.0/24 maxlen: 24
202.171.54.0/24 maxlen: 24
202.171.55.0/24 maxlen: 24
202.171.56.0/22 maxlen: 22
202.171.56.0/24 maxlen: 24
202.171.57.0/24 maxlen: 24
202.171.58.0/24 maxlen: 24
202.171.60.0/22 maxlen: 22
202.171.60.0/24 maxlen: 24
202.171.61.0/24 maxlen: 24
202.171.62.0/24 maxlen: 24
202.171.63.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F48F2/46D091981DA911E29CFD3EA408B02CD2/7EhKUeRjuYr44bAq4ilVoTIvH3U.crl
rsync://rpki.apnic.net/member_repository/A91F48F2/46D091981DA911E29CFD3EA408B02CD2/7EhKUeRjuYr44bAq4ilVoTIvH3U.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7EhKUeRjuYr44bAq4ilVoTIvH3U.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 09 Nov 2025 15:16:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13588 (0x3514)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F48F2, serialNumber=EC484A51E463B98AF8E1B02AE22955A1322F1F75
Validity
Not Before: Oct 30 15:31:11 2025 GMT
Not After : Dec 30 00:00:00 2026 GMT
Subject: CN=690384bf-a446
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:ee:e2:6b:5b:95:d3:e2:02:90:47:41:d8:28:
6a:c9:40:dc:1f:01:e6:e0:ba:89:70:9a:af:99:6f:
66:ea:ea:e1:d3:a4:4e:e9:2e:1f:7d:3f:10:be:bc:
20:24:0e:cb:f5:90:17:60:0b:66:9e:b5:50:44:96:
a6:c6:9e:03:f7:2c:35:8b:46:18:13:f3:ae:d2:8e:
d3:0b:02:e9:5f:7f:92:86:b1:4f:e9:e4:ea:bd:2e:
30:0e:5b:29:9f:44:79:96:09:e1:22:18:2d:9d:a6:
47:07:c9:5d:39:28:2b:b8:fa:c8:66:37:f6:66:e7:
43:8d:22:cf:5f:34:6d:93:08:b2:e7:3c:a0:b9:25:
9f:df:c2:a7:37:e8:40:32:7b:b1:52:fe:23:6a:43:
67:52:89:be:25:4e:3b:2f:52:6b:ec:e2:05:e4:a5:
3a:bd:77:c9:0a:08:4d:d5:9f:47:dc:8e:b8:61:6d:
55:d7:8e:37:fe:08:cd:14:dd:ed:f9:9e:c2:b7:58:
c8:e6:53:b0:53:c6:20:61:e1:27:7c:6b:a7:6b:02:
73:b2:97:41:de:c6:6e:4b:50:da:7c:7a:50:3e:cf:
1c:f3:29:93:f4:93:79:2e:5e:b8:93:8e:79:23:94:
32:23:1f:0f:07:d1:4e:cd:97:d6:14:83:ba:43:c9:
7d:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:9F:0E:A3:F9:C0:94:AD:41:28:84:DB:E3:CA:F7:DC:0D:27:0C:BA
X509v3 Authority Key Identifier:
keyid:EC:48:4A:51:E4:63:B9:8A:F8:E1:B0:2A:E2:29:55:A1:32:2F:1F:75
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F48F2/46D091981DA911E29CFD3EA408B02CD2/7EhKUeRjuYr44bAq4ilVoTIvH3U.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7EhKUeRjuYr44bAq4ilVoTIvH3U.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F48F2/46D091981DA911E29CFD3EA408B02CD2/650B909C903B11EF924F0B86C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.116.236.0/22
103.251.200.0/22
202.171.48.0/20
Signature Algorithm: sha256WithRSAEncryption
c9:36:51:89:76:47:d4:e4:26:b9:d2:d3:bc:e4:95:93:43:5c:
4e:33:e6:46:ea:e2:c1:16:ad:91:9e:99:2d:fb:c8:dd:c7:97:
dc:80:b9:18:65:f6:90:83:9d:fe:70:93:f6:36:f7:6e:35:2b:
b3:e7:99:73:06:fd:ce:e5:8d:f5:ba:15:f8:e6:26:5b:19:2a:
f5:51:79:bb:5f:29:74:35:93:89:7d:e2:c1:34:ac:51:45:8d:
52:7e:c5:d5:95:e2:e4:e9:bb:85:b2:27:23:a7:9a:8f:28:87:
a0:b6:a7:32:6b:51:9c:6e:3f:48:ff:d0:cb:88:6a:9e:5f:37:
aa:48:28:81:bb:8d:5f:14:cd:5e:30:7f:f5:80:b0:36:b0:09:
85:97:cc:7b:b1:bd:00:cf:f7:6d:71:69:a0:45:4a:55:b7:65:
3f:ae:36:ac:c8:c5:8c:4c:a1:8f:f7:30:e9:37:3c:ae:b0:74:
f7:9e:03:6d:12:cd:1a:3d:69:1e:96:79:f7:71:65:57:7d:cd:
04:f4:5b:0e:50:2c:8f:4d:49:bb:0e:94:54:e9:b5:3f:24:14:
a0:72:fb:b7:56:b1:eb:07:4e:9c:c3:0e:c2:16:13:05:53:fa:
eb:27:2f:5a:64:66:7d:34:9a:f9:4d:95:ff:ab:6b:cb:ca:d8:
0a:40:50:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 01:10:08 2025 by rpki-client