Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91FDC78/15474008AEAC11EAA6C1D761C4F9AE02/DA0B639E89E711F08DD17A55C4F9AE02.roa
File: DA0B639E89E711F08DD17A55C4F9AE02.roa (raw, json)
Hash identifier: 92JEuDCm1e9WQ8I7GIzUujJiphmCChYv7JlAxtt8zqs=
Subject key identifier: 41:CE:A1:52:7A:E2:71:D3:BE:FE:DA:82:87:04:61:E6:B1:7E:76:41
Certificate issuer: /CN=A91FDC78/serialNumber=CC57E036431A5EA3C172AA7283401AF3C4AD5C59
Certificate serial: 0933
Authority key identifier: CC:57:E0:36:43:1A:5E:A3:C1:72:AA:72:83:40:1A:F3:C4:AD:5C:59
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zFfgNkMaXqPBcqpyg0Aa88StXFk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91FDC78/15474008AEAC11EAA6C1D761C4F9AE02/DA0B639E89E711F08DD17A55C4F9AE02.roa
Signing time: Fri 05 Sep 2025 08:04:30 +0000
ROA not before: Fri 05 Sep 2025 08:04:30 +0000
ROA not after: Thu 28 May 2026 00:00:00 +0000
asID: 135126
IP address blocks: 43.252.112.0/22 maxlen: 22
43.252.112.0/24 maxlen: 24
43.252.113.0/24 maxlen: 24
43.252.114.0/24 maxlen: 24
43.252.115.0/24 maxlen: 24
103.210.24.0/22 maxlen: 22
103.210.24.0/23 maxlen: 23
103.210.24.0/24 maxlen: 24
103.210.25.0/24 maxlen: 24
103.210.26.0/24 maxlen: 24
103.210.27.0/24 maxlen: 24
180.233.124.0/22 maxlen: 22
180.233.124.0/24 maxlen: 24
180.233.125.0/24 maxlen: 24
180.233.126.0/24 maxlen: 24
180.233.127.0/24 maxlen: 24
2404:78c0::/40 maxlen: 48
2404:78c0:100::/40 maxlen: 48
2404:78c0:200::/40 maxlen: 48
2404:78c0:300::/40 maxlen: 48
2404:78c0:400::/40 maxlen: 48
2404:78c0:500::/40 maxlen: 48
2404:78c0:600::/40 maxlen: 48
2404:78c0:700::/40 maxlen: 48
2404:78c0:800::/40 maxlen: 48
2404:78c0:900::/40 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91FDC78/15474008AEAC11EAA6C1D761C4F9AE02/zFfgNkMaXqPBcqpyg0Aa88StXFk.crl
rsync://rpki.apnic.net/member_repository/A91FDC78/15474008AEAC11EAA6C1D761C4F9AE02/zFfgNkMaXqPBcqpyg0Aa88StXFk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zFfgNkMaXqPBcqpyg0Aa88StXFk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 25 Sep 2025 20:31:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2355 (0x933)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91FDC78, serialNumber=CC57E036431A5EA3C172AA7283401AF3C4AD5C59
Validity
Not Before: Sep 5 08:04:30 2025 GMT
Not After : May 28 00:00:00 2026 GMT
Subject: CN=68ba998d-ae2d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:4c:55:7f:93:25:55:5c:ef:8c:76:60:93:73:
62:f9:88:e4:d2:db:05:7d:ce:ae:67:aa:ec:57:6e:
92:07:39:2c:c7:c7:75:01:29:8f:d2:2e:84:ca:6f:
c6:48:ad:6a:56:d7:03:90:7b:a5:0b:7c:51:1e:e0:
e6:8d:49:d8:76:70:ff:64:7d:e1:a0:23:bf:d6:b1:
eb:6a:90:92:c8:92:71:c6:17:de:0c:cf:81:8b:82:
1f:2e:49:75:31:30:cd:21:da:a4:c0:56:86:1f:4a:
4f:de:59:8f:a1:b7:8f:05:db:60:20:3b:2a:cc:73:
79:49:e1:db:21:ae:ac:dd:51:da:9e:b3:17:d1:87:
89:b4:1f:72:ea:b9:1a:26:3c:8b:13:67:9a:25:fa:
f4:66:c5:fa:f0:2a:d4:db:99:8f:1f:ef:b6:9b:2e:
f1:0e:17:16:04:11:64:9d:4a:7a:ec:1c:29:f7:c9:
b7:85:9a:ba:34:83:c2:80:d8:fb:68:df:5f:6b:07:
2e:57:e3:28:c4:04:8a:8b:23:b0:ed:21:54:d7:ae:
d9:bf:d9:74:23:2f:21:ca:c5:7e:a3:7c:98:c4:0a:
84:b7:83:60:71:bb:05:27:5b:b6:00:79:77:95:df:
01:d7:2a:f9:a1:3b:f2:59:8a:a2:fe:86:dc:a4:d2:
46:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:CE:A1:52:7A:E2:71:D3:BE:FE:DA:82:87:04:61:E6:B1:7E:76:41
X509v3 Authority Key Identifier:
keyid:CC:57:E0:36:43:1A:5E:A3:C1:72:AA:72:83:40:1A:F3:C4:AD:5C:59
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91FDC78/15474008AEAC11EAA6C1D761C4F9AE02/zFfgNkMaXqPBcqpyg0Aa88StXFk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zFfgNkMaXqPBcqpyg0Aa88StXFk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FDC78/15474008AEAC11EAA6C1D761C4F9AE02/DA0B639E89E711F08DD17A55C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
43.252.112.0/22
103.210.24.0/22
180.233.124.0/22
IPv6:
2404:78c0::-2404:78c0:9ff:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
03:3b:cd:ad:05:4b:b6:b1:4c:ad:8c:85:40:70:02:47:ad:90:
b1:02:47:e7:85:27:bb:c7:29:e8:6a:ce:11:97:6d:29:a2:05:
8e:f6:b7:f1:48:6f:30:1e:fb:4e:30:0b:4f:b8:72:0e:c0:bc:
cc:6c:81:86:46:20:44:07:c6:87:6c:75:31:60:c0:f3:89:b1:
07:de:99:27:08:f7:ef:2d:c0:a5:f8:bd:93:ec:83:1b:d0:14:
76:2d:e9:b3:16:33:90:b1:ea:cb:87:ae:05:74:12:1f:14:84:
28:2a:37:15:79:44:58:8d:d2:cd:d2:2f:e4:d4:9b:de:42:b1:
b6:bc:a9:a2:ee:80:42:e8:a5:6d:3d:8c:f9:51:64:c7:58:d8:
d3:a6:ef:2b:88:52:28:a8:23:30:2f:93:28:6a:15:7b:e9:02:
93:b7:78:e8:95:f6:f1:ab:df:3e:4b:62:92:a4:5b:ce:3f:c9:
2f:b4:91:3f:90:45:8c:e5:e3:8b:15:77:f7:b3:33:30:0a:aa:
25:18:aa:48:50:f0:41:33:3d:fb:8f:cf:4b:d5:f2:84:6b:f1:
e4:15:82:be:4b:95:d4:ba:56:c5:96:7e:fc:0a:7f:4f:ac:4a:
3c:f0:48:68:ff:d7:dd:98:ca:dc:66:90:8c:2b:0b:2d:b4:a9:
7f:fa:e5:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 19 02:59:29 2025 by rpki-client