Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9145519/A2FC3264E45C11E68CEDFA3EC4F9AE02/7814B330E45E11E681F82341C4F9AE02.roa
File: 7814B330E45E11E681F82341C4F9AE02.roa (raw, json)
Hash identifier: wGS6VfXvnD14KD/FvyuZu+ZkujOmt82UIRL+laCRJ8Q=
Subject key identifier: C1:DC:B8:A7:10:01:F2:60:83:17:1B:07:C7:16:07:56:FF:2F:D2:70
Certificate issuer: /CN=A9145519/serialNumber=6FE6B33EA87390660B46B111DAD57D606F2FEE24
Certificate serial: 1CC1
Authority key identifier: 6F:E6:B3:3E:A8:73:90:66:0B:46:B1:11:DA:D5:7D:60:6F:2F:EE:24
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b-azPqhzkGYLRrER2tV9YG8v7iQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9145519/A2FC3264E45C11E68CEDFA3EC4F9AE02/7814B330E45E11E681F82341C4F9AE02.roa
Signing time: Tue 04 Nov 2025 08:39:37 +0000
ROA not before: Tue 04 Nov 2025 08:39:37 +0000
ROA not after: Wed 30 Dec 2026 00:00:00 +0000
asID: 132167
IP address blocks: 69.160.0.0/19 maxlen: 19
69.160.0.0/24 maxlen: 24
69.160.1.0/24 maxlen: 24
69.160.2.0/24 maxlen: 24
69.160.3.0/24 maxlen: 24
69.160.4.0/24 maxlen: 24
69.160.5.0/24 maxlen: 24
69.160.6.0/24 maxlen: 24
69.160.7.0/24 maxlen: 24
69.160.8.0/24 maxlen: 24
69.160.9.0/24 maxlen: 24
69.160.10.0/24 maxlen: 24
69.160.11.0/24 maxlen: 24
69.160.13.0/24 maxlen: 24
69.160.14.0/24 maxlen: 24
69.160.16.0/24 maxlen: 24
69.160.17.0/24 maxlen: 24
69.160.18.0/24 maxlen: 24
69.160.19.0/24 maxlen: 24
69.160.20.0/24 maxlen: 24
69.160.21.0/24 maxlen: 24
69.160.22.0/24 maxlen: 24
69.160.23.0/24 maxlen: 24
69.160.24.0/24 maxlen: 24
69.160.25.0/24 maxlen: 24
69.160.26.0/24 maxlen: 24
69.160.27.0/24 maxlen: 24
69.160.28.0/24 maxlen: 24
69.160.29.0/24 maxlen: 24
69.160.30.0/24 maxlen: 24
69.160.31.0/24 maxlen: 24
74.50.208.0/21 maxlen: 21
74.50.208.0/24 maxlen: 24
74.50.209.0/24 maxlen: 24
74.50.210.0/24 maxlen: 24
74.50.211.0/24 maxlen: 24
74.50.212.0/24 maxlen: 24
74.50.213.0/24 maxlen: 24
74.50.214.0/24 maxlen: 24
74.50.215.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9145519/A2FC3264E45C11E68CEDFA3EC4F9AE02/b-azPqhzkGYLRrER2tV9YG8v7iQ.crl
rsync://rpki.apnic.net/member_repository/A9145519/A2FC3264E45C11E68CEDFA3EC4F9AE02/b-azPqhzkGYLRrER2tV9YG8v7iQ.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b-azPqhzkGYLRrER2tV9YG8v7iQ.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 11 Nov 2025 16:16:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7361 (0x1cc1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9145519, serialNumber=6FE6B33EA87390660B46B111DAD57D606F2FEE24
Validity
Not Before: Nov 4 08:39:37 2025 GMT
Not After : Dec 30 00:00:00 2026 GMT
Subject: CN=6909bbc9-f6dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:66:75:96:50:35:46:3f:09:4f:c5:13:ca:49:
51:eb:ed:80:dd:7a:7c:c2:bf:9d:fe:c7:83:85:9c:
04:a1:85:a0:27:6a:44:bc:ee:ee:bd:62:e7:28:b3:
44:57:9c:e1:b6:e7:14:46:e5:79:6a:54:2d:37:a0:
e4:f9:f1:2e:29:da:33:37:b2:9c:8e:9a:1e:f1:cd:
83:15:7b:9a:7d:42:81:24:0d:8d:fe:1c:fb:5d:24:
e9:24:72:36:a1:47:f5:69:ba:00:d4:01:d5:86:53:
24:3c:d5:47:ff:9a:7c:23:53:33:20:29:f7:6d:3b:
6b:49:1a:4e:23:3d:ff:ce:66:58:6d:9d:ca:9f:5f:
09:14:10:2a:87:16:59:d2:86:4e:74:61:50:26:4c:
36:09:e3:23:b8:db:bb:2f:66:86:b2:0a:23:7c:07:
04:37:f6:23:8e:3a:d3:84:8c:58:28:9d:bf:e5:61:
24:5c:10:3e:e0:27:ab:5e:70:5f:1d:eb:9b:a6:46:
fd:78:72:0e:a6:76:dc:e9:a4:ea:55:96:66:00:72:
69:59:92:af:22:2a:4e:30:0a:5c:aa:0e:f4:e2:59:
0e:82:27:87:df:5d:78:82:a0:65:6e:e2:4b:f9:86:
5b:4d:06:1b:ef:9e:d4:cd:47:db:9b:f5:2d:99:eb:
37:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:DC:B8:A7:10:01:F2:60:83:17:1B:07:C7:16:07:56:FF:2F:D2:70
X509v3 Authority Key Identifier:
keyid:6F:E6:B3:3E:A8:73:90:66:0B:46:B1:11:DA:D5:7D:60:6F:2F:EE:24
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9145519/A2FC3264E45C11E68CEDFA3EC4F9AE02/b-azPqhzkGYLRrER2tV9YG8v7iQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b-azPqhzkGYLRrER2tV9YG8v7iQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9145519/A2FC3264E45C11E68CEDFA3EC4F9AE02/7814B330E45E11E681F82341C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
69.160.0.0/19
74.50.208.0/21
Signature Algorithm: sha256WithRSAEncryption
8b:2e:a4:f7:6a:53:bd:54:d3:84:80:24:20:e7:0e:c9:73:8b:
fa:72:e1:ce:00:ef:51:cb:96:8b:b6:13:61:cd:6b:4d:29:53:
f6:b2:26:ce:1d:57:90:9e:e2:dc:dc:f7:f7:c5:3f:bc:76:a5:
07:44:ac:a6:92:46:07:02:4e:8c:e2:fe:c4:59:66:cb:51:3c:
64:1b:0e:d8:66:d1:6e:a9:f9:33:ff:a1:25:21:b2:c2:36:fa:
2b:63:46:09:04:94:df:81:2e:f6:aa:d5:3d:3e:66:4d:36:f0:
67:64:63:ea:ff:bf:99:1b:fb:7d:fb:0d:87:91:90:bb:1e:ca:
8a:58:e7:dd:f5:11:07:0f:31:4b:37:0d:8a:cf:0f:d5:a4:fd:
38:0d:7b:4c:b3:b5:c2:79:59:d7:71:95:4d:04:1b:e4:c6:b8:
60:13:70:57:4d:7d:0a:c7:40:b1:41:35:b7:6a:50:83:49:26:
29:46:de:bd:4c:d3:16:99:18:39:64:fc:5b:40:ef:e4:82:25:
b0:69:9f:3a:ca:05:24:1c:a9:39:f7:83:21:37:99:b3:21:25:
1b:05:89:b7:3f:24:e8:5e:09:1d:6d:04:9a:72:bc:19:a2:d9:
56:bc:10:95:e7:41:0d:4f:7e:2e:9b:da:df:c8:cf:1b:f2:12:
8e:3d:3c:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 16:44:13 2025 by rpki-client