Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9130F9C/29CB020EFA0B11E9978B0A32C4F9AE02/41CBB5B87F7611ECAD50FA4EC4F9AE02.roa
File: 41CBB5B87F7611ECAD50FA4EC4F9AE02.roa (raw, json)
Hash identifier: QVZHVEKIjuuhqR8CaduzUx2n60lfnPfkbZyqpQZ1wv4=
Subject key identifier: C6:81:4C:26:4D:5C:FD:01:D1:49:BD:EB:12:DF:83:82:C6:F7:78:25
Certificate issuer: /CN=A9130F9C/serialNumber=138CD10A4778DE0E35911E9C9C944F4B21C4DB09
Certificate serial: 0C92
Authority key identifier: 13:8C:D1:0A:47:78:DE:0E:35:91:1E:9C:9C:94:4F:4B:21:C4:DB:09
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/E4zRCkd43g41kR6cnJRPSyHE2wk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9130F9C/29CB020EFA0B11E9978B0A32C4F9AE02/41CBB5B87F7611ECAD50FA4EC4F9AE02.roa
Signing time: Fri 02 May 2025 18:56:46 +0000
ROA not before: Fri 02 May 2025 18:56:46 +0000
ROA not after: Thu 30 Jul 2026 00:00:00 +0000
asID: 134146
IP address blocks: 103.55.144.0/22 maxlen: 24
202.83.124.0/24 maxlen: 24
202.83.126.0/23 maxlen: 23
202.83.126.0/24 maxlen: 24
202.83.127.0/24 maxlen: 24
2400:4fc0::/32 maxlen: 32
2400:4fc0:1::/48 maxlen: 48
2400:4fc0:2::/48 maxlen: 48
2400:4fc0:3::/48 maxlen: 48
2400:4fc0:4::/48 maxlen: 48
2400:4fc0:5::/48 maxlen: 48
2400:4fc0:6::/48 maxlen: 48
2400:4fc0:7::/48 maxlen: 48
2400:4fc0:8::/48 maxlen: 48
2400:4fc0:9::/48 maxlen: 48
2400:4fc0:a::/48 maxlen: 48
2400:4fc0:b::/48 maxlen: 48
2400:4fc0:c::/48 maxlen: 48
2400:4fc0:d::/48 maxlen: 48
2400:4fc0:e::/48 maxlen: 48
2400:4fc0:f::/48 maxlen: 48
2400:4fc0:10::/48 maxlen: 48
2400:4fc0:11::/48 maxlen: 48
2400:4fc0:12::/48 maxlen: 48
2400:4fc0:13::/48 maxlen: 48
2400:4fc0:14::/48 maxlen: 48
2400:4fc0:15::/48 maxlen: 48
2400:4fc0:16::/48 maxlen: 48
2400:4fc0:17::/48 maxlen: 48
2400:4fc0:18::/48 maxlen: 48
2400:4fc0:19::/48 maxlen: 48
2400:4fc0:1a::/48 maxlen: 48
2400:4fc0:1b::/48 maxlen: 48
2400:4fc0:1c::/48 maxlen: 48
2400:4fc0:1d::/48 maxlen: 48
2400:4fc0:1e::/48 maxlen: 48
2400:4fc0:1f::/48 maxlen: 48
2400:4fc0:20::/48 maxlen: 48
2400:4fc0:21::/48 maxlen: 48
2400:4fc0:22::/48 maxlen: 48
2400:4fc0:23::/48 maxlen: 48
2400:4fc0:24::/48 maxlen: 48
2400:4fc0:25::/48 maxlen: 48
2400:4fc0:26::/48 maxlen: 48
2400:4fc0:27::/48 maxlen: 48
2400:4fc0:28::/48 maxlen: 48
2400:4fc0:29::/48 maxlen: 48
2400:4fc0:2a::/48 maxlen: 48
2400:4fc0:2b::/48 maxlen: 48
2400:4fc0:2c::/48 maxlen: 48
2400:4fc0:2d::/48 maxlen: 48
2400:4fc0:2e::/48 maxlen: 48
2400:4fc0:2f::/48 maxlen: 48
2400:4fc0:30::/48 maxlen: 48
2400:4fc0:31::/48 maxlen: 48
2400:4fc0:32::/48 maxlen: 48
2400:4fc0:33::/48 maxlen: 48
2400:4fc0:34::/48 maxlen: 48
2400:4fc0:35::/48 maxlen: 48
2400:4fc0:36::/48 maxlen: 48
2400:4fc0:37::/48 maxlen: 48
2400:4fc0:38::/48 maxlen: 48
2400:4fc0:39::/48 maxlen: 48
2400:4fc0:40::/48 maxlen: 48
2400:4fc0:41::/48 maxlen: 48
2400:4fc0:42::/48 maxlen: 48
2400:4fc0:43::/48 maxlen: 48
2400:4fc0:44::/48 maxlen: 48
2400:4fc0:45::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9130F9C/29CB020EFA0B11E9978B0A32C4F9AE02/E4zRCkd43g41kR6cnJRPSyHE2wk.crl
rsync://rpki.apnic.net/member_repository/A9130F9C/29CB020EFA0B11E9978B0A32C4F9AE02/E4zRCkd43g41kR6cnJRPSyHE2wk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/E4zRCkd43g41kR6cnJRPSyHE2wk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 09 May 2025 18:56:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3218 (0xc92)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9130F9C, serialNumber=138CD10A4778DE0E35911E9C9C944F4B21C4DB09
Validity
Not Before: May 2 18:56:46 2025 GMT
Not After : Jul 30 00:00:00 2026 GMT
Subject: CN=6815156d-32a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:4f:ee:93:38:ac:2a:b9:04:58:c9:bd:14:46:
20:da:ec:f5:39:51:8c:9f:ac:93:88:37:b8:ee:28:
99:82:37:1b:1a:09:5c:da:36:cf:23:6d:3e:9f:25:
ce:4c:82:5f:dd:72:dc:55:36:b5:7f:93:ed:9b:88:
e7:33:c8:64:4d:1f:ba:77:d0:aa:a6:b5:72:14:07:
4c:11:35:03:d7:8f:bd:4c:a2:d7:9f:3d:40:ff:77:
3f:ca:54:65:ef:7e:1a:8e:df:62:76:0b:65:59:97:
12:10:5b:2b:4a:21:a8:0f:4c:b4:bf:94:65:4d:74:
e7:48:85:04:2a:6f:f1:e7:e5:30:9e:da:eb:51:80:
20:6c:83:df:f0:71:50:4a:6d:ed:a3:a3:4e:97:d9:
8d:51:1f:55:91:79:55:0c:7b:6a:ed:73:e7:81:b9:
93:88:75:00:4b:68:57:05:70:36:76:6b:fc:b9:ca:
86:bf:5c:29:b8:76:81:d6:6b:fa:cf:58:0f:12:b3:
cc:ed:8e:2f:ff:e6:58:4f:ff:d3:63:bf:86:93:bd:
4e:75:00:5b:5d:e7:8c:88:84:46:76:e4:0a:b8:c0:
8f:37:6c:98:08:49:9a:76:a4:3d:67:c2:84:68:e6:
c3:59:e4:43:88:7f:db:c3:7b:cc:ce:81:8e:dc:7e:
87:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:81:4C:26:4D:5C:FD:01:D1:49:BD:EB:12:DF:83:82:C6:F7:78:25
X509v3 Authority Key Identifier:
keyid:13:8C:D1:0A:47:78:DE:0E:35:91:1E:9C:9C:94:4F:4B:21:C4:DB:09
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9130F9C/29CB020EFA0B11E9978B0A32C4F9AE02/E4zRCkd43g41kR6cnJRPSyHE2wk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/E4zRCkd43g41kR6cnJRPSyHE2wk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9130F9C/29CB020EFA0B11E9978B0A32C4F9AE02/41CBB5B87F7611ECAD50FA4EC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.55.144.0/22
202.83.124.0/24
202.83.126.0/23
IPv6:
2400:4fc0::/32
Signature Algorithm: sha256WithRSAEncryption
d7:e6:d8:2d:7f:3f:f5:b4:b4:ec:5e:31:7c:41:a8:bf:df:d2:
ce:0e:b3:22:34:f3:d1:0c:81:7b:f8:15:59:3c:d9:88:6a:49:
68:f5:e6:de:4e:a8:ca:bc:d2:d9:50:ad:ff:e2:1e:e5:1e:f4:
f0:e4:2e:a1:60:b5:bb:ce:61:7f:e9:72:47:8e:9e:14:06:01:
46:1e:03:5d:70:d9:b6:d5:6a:0b:a8:5a:3d:cd:84:2a:e0:34:
ba:e2:4d:5e:4b:91:a8:75:f6:a7:e3:f5:43:d7:1f:63:c5:bc:
0e:a8:d4:67:23:ff:34:a4:86:2a:39:1e:63:c5:4c:61:84:32:
2e:92:81:96:a7:d3:c4:76:96:8c:1f:c7:7f:f3:2e:a7:70:13:
03:ee:40:45:d5:76:d4:69:e3:58:45:e0:f4:8d:78:00:6b:d6:
7d:96:8d:49:f9:3d:2e:92:fb:9c:55:d2:69:17:86:d0:5e:94:
0e:38:1c:3b:e3:db:9c:51:2c:de:e5:02:fb:75:67:77:8c:14:
04:dc:54:c4:c8:85:40:98:33:69:fa:4e:61:88:98:96:da:08:
55:d0:e7:0e:c6:28:63:b0:82:35:13:98:c0:d7:5f:87:98:d6:
bb:f4:ad:78:e2:cb:2b:71:c0:7a:82:86:aa:28:b2:cd:d0:f9:
47:da:65:4d
-----BEGIN CERTIFICATE-----
MIIFjDCCBHSgAwIBAgICDJIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MzBGOUMxMTAvBgNVBAUTKDEzOENEMTBBNDc3OERFMEUzNTkxMUU5QzlDOTQ0RjRC
MjFDNERCMDkwHhcNMjUwNTAyMTg1NjQ2WhcNMjYwNzMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02ODE1MTU2ZC0zMmE0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA2k/ukzisKrkEWMm9FEYg2uz1OVGMn6yTiDe47iiZgjcbGglc2jbPI20+nyXO
TIJf3XLcVTa1f5Ptm4jnM8hkTR+6d9CqprVyFAdMETUD14+9TKLXnz1A/3c/ylRl
734ajt9idgtlWZcSEFsrSiGoD0y0v5RlTXTnSIUEKm/x5+UwntrrUYAgbIPf8HFQ
Sm3to6NOl9mNUR9VkXlVDHtq7XPngbmTiHUAS2hXBXA2dmv8ucqGv1wpuHaB1mv6
z1gPErPM7Y4v/+ZYT//TY7+Gk71OdQBbXeeMiIRGduQKuMCPN2yYCEmadqQ9Z8KE
aObDWeRDiH/bw3vMzoGO3H6HcQIDAQABo4ICsDCCAqwwHQYDVR0OBBYEFMaBTCZN
XP0B0Um96xLfg4LG93glMB8GA1UdIwQYMBaAFBOM0QpHeN4ONZEenJyUT0shxNsJ
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMEY5Qy8yOUNCMDIwRUZB
MEIxMUU5OTc4QjBBMzJDNEY5QUUwMi9FNHpSQ2tkNDNnNDFrUjZjbkpSUFN5SEUy
d2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0U0elJDa2Q0M2c0MWtSNmNuSlJQU3lIRTJ3ay5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
MzBGOUMvMjlDQjAyMEVGQTBCMTFFOTk3OEIwQTMyQzRGOUFFMDIvNDFDQkI1Qjg3
Rjc2MTFFQ0FENTBGQTRFQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwOgYIKwYBBQUHAQcBAf8E
KzApMBgEAgABMBIDBAJnN5ADBADKU3wDBAHKU34wDQQCAAIwBwMFACQAT8AwDQYJ
KoZIhvcNAQELBQADggEBANfm2C1/P/W0tOxeMXxBqL/f0s4OsyI089EMgXv4FVk8
2YhqSWj15t5OqMq80tlQrf/iHuUe9PDkLqFgtbvOYX/pckeOnhQGAUYeA11w2bbV
aguoWj3NhCrgNLriTV5Lkah19qfj9UPXH2PFvA6o1Gcj/zSkhio5HmPFTGGEMi6S
gZan08R2lowfx3/zLqdwEwPuQEXVdtRp41hF4PSNeABr1n2WjUn5PS6S+5xV0mkX
htBelA44HDvj25xRLN7lAvt1Z3eMFATcVMTIhUCYM2n6TmGImJbaCFXQ5w7GKGOw
gjUTmMDXX4eY1rv0rXjiyytxwHqChqooss3Q+UfaZU0=
-----END CERTIFICATE-----
Generated at Sat May 3 09:24:36 2025 by rpki-client