Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9165568/BD1A95D21D8711E29BE3E6DF08B02CD2/727C68508AB411EA89D83541C4F9AE02.roa
File: 727C68508AB411EA89D83541C4F9AE02.roa (raw, json)
Hash identifier: g1OdgCJIG24i3efkM1MbRleAf+V9n/PaQ+dpGNZIZlc=
Subject key identifier: 87:90:FB:C0:37:A3:C4:A4:E4:78:62:38:B4:36:11:7C:DE:23:E5:50
Certificate issuer: /CN=A9165568/serialNumber=67097E492F73D6DBD31FA016A2D5B5B86A9B3FD8
Certificate serial: 1D36
Authority key identifier: 67:09:7E:49:2F:73:D6:DB:D3:1F:A0:16:A2:D5:B5:B8:6A:9B:3F:D8
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Zwl-SS9z1tvTH6AWotW1uGqbP9g.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9165568/BD1A95D21D8711E29BE3E6DF08B02CD2/727C68508AB411EA89D83541C4F9AE02.roa
Signing time: Tue 04 Nov 2025 15:00:32 +0000
ROA not before: Tue 04 Nov 2025 15:00:32 +0000
ROA not after: Sun 31 Jan 2027 00:00:00 +0000
asID: 23966
IP address blocks: 119.30.80.0/20 maxlen: 20
119.30.86.0/24 maxlen: 24
119.30.87.0/24 maxlen: 24
119.30.100.0/24 maxlen: 24
119.30.106.0/24 maxlen: 24
119.30.107.0/24 maxlen: 24
119.30.108.0/24 maxlen: 24
119.30.112.0/22 maxlen: 24
119.30.124.0/22 maxlen: 24
119.73.0.0/18 maxlen: 18
202.61.32.0/19 maxlen: 19
202.61.32.0/20 maxlen: 20
202.61.32.0/24 maxlen: 24
202.61.34.0/24 maxlen: 24
202.61.40.0/24 maxlen: 24
202.61.41.0/24 maxlen: 24
202.61.42.0/24 maxlen: 24
202.61.43.0/24 maxlen: 24
202.61.44.0/24 maxlen: 24
202.61.46.0/24 maxlen: 24
202.61.47.0/24 maxlen: 24
202.61.48.0/21 maxlen: 24
202.61.56.0/21 maxlen: 24
202.147.160.0/20 maxlen: 24
202.147.176.0/20 maxlen: 20
202.147.176.0/21 maxlen: 24
202.147.184.0/21 maxlen: 24
202.154.224.0/19 maxlen: 19
202.154.224.0/20 maxlen: 20
202.154.224.0/24 maxlen: 24
202.154.225.0/24 maxlen: 24
202.154.226.0/24 maxlen: 24
202.154.227.0/24 maxlen: 24
202.154.228.0/24 maxlen: 24
202.154.229.0/24 maxlen: 24
202.154.230.0/24 maxlen: 24
202.154.231.0/24 maxlen: 24
202.154.232.0/24 maxlen: 24
202.154.233.0/24 maxlen: 24
202.154.234.0/24 maxlen: 24
202.154.235.0/24 maxlen: 24
202.154.236.0/24 maxlen: 24
202.154.237.0/24 maxlen: 24
202.154.238.0/24 maxlen: 24
202.154.239.0/24 maxlen: 24
202.154.240.0/20 maxlen: 20
202.154.240.0/24 maxlen: 24
202.154.241.0/24 maxlen: 24
202.154.242.0/24 maxlen: 24
202.154.243.0/24 maxlen: 24
202.154.244.0/24 maxlen: 24
202.154.245.0/24 maxlen: 24
202.154.246.0/24 maxlen: 24
202.154.247.0/24 maxlen: 24
202.154.248.0/24 maxlen: 24
202.154.249.0/24 maxlen: 24
202.154.250.0/24 maxlen: 24
202.154.251.0/24 maxlen: 24
202.154.252.0/24 maxlen: 24
202.154.253.0/24 maxlen: 24
202.154.254.0/24 maxlen: 24
202.154.255.0/24 maxlen: 24
203.223.160.0/20 maxlen: 24
210.2.128.0/18 maxlen: 18
210.2.128.0/20 maxlen: 21
210.2.128.0/24 maxlen: 24
210.2.129.0/24 maxlen: 24
210.2.130.0/24 maxlen: 24
210.2.131.0/24 maxlen: 24
210.2.132.0/22 maxlen: 22
210.2.132.0/24 maxlen: 24
210.2.133.0/24 maxlen: 24
210.2.134.0/24 maxlen: 24
210.2.135.0/24 maxlen: 24
210.2.136.0/21 maxlen: 22
210.2.136.0/24 maxlen: 24
210.2.137.0/24 maxlen: 24
210.2.138.0/24 maxlen: 24
210.2.139.0/24 maxlen: 24
210.2.140.0/24 maxlen: 24
210.2.141.0/24 maxlen: 24
210.2.142.0/24 maxlen: 24
210.2.143.0/24 maxlen: 24
210.2.144.0/20 maxlen: 21
210.2.144.0/24 maxlen: 24
210.2.145.0/24 maxlen: 24
210.2.146.0/24 maxlen: 24
210.2.147.0/24 maxlen: 24
210.2.148.0/24 maxlen: 24
210.2.149.0/24 maxlen: 24
210.2.150.0/24 maxlen: 24
210.2.151.0/24 maxlen: 24
210.2.152.0/24 maxlen: 24
210.2.153.0/24 maxlen: 24
210.2.154.0/24 maxlen: 24
210.2.155.0/24 maxlen: 24
210.2.156.0/24 maxlen: 24
210.2.157.0/24 maxlen: 24
210.2.158.0/24 maxlen: 24
210.2.159.0/24 maxlen: 24
210.2.160.0/20 maxlen: 21
210.2.160.0/24 maxlen: 24
210.2.161.0/24 maxlen: 24
210.2.162.0/24 maxlen: 24
210.2.163.0/24 maxlen: 24
210.2.164.0/24 maxlen: 24
210.2.165.0/24 maxlen: 24
210.2.166.0/24 maxlen: 24
210.2.167.0/24 maxlen: 24
210.2.168.0/24 maxlen: 24
210.2.169.0/24 maxlen: 24
210.2.170.0/24 maxlen: 24
210.2.171.0/24 maxlen: 24
210.2.172.0/24 maxlen: 24
210.2.173.0/24 maxlen: 24
210.2.174.0/24 maxlen: 24
210.2.175.0/24 maxlen: 24
210.2.176.0/20 maxlen: 22
210.2.176.0/24 maxlen: 24
210.2.177.0/24 maxlen: 24
210.2.178.0/24 maxlen: 24
210.2.179.0/24 maxlen: 24
210.2.180.0/24 maxlen: 24
210.2.181.0/24 maxlen: 24
210.2.182.0/24 maxlen: 24
210.2.183.0/24 maxlen: 24
210.2.184.0/24 maxlen: 24
210.2.185.0/24 maxlen: 24
210.2.186.0/24 maxlen: 24
210.2.187.0/24 maxlen: 24
210.2.188.0/24 maxlen: 24
210.2.189.0/24 maxlen: 24
210.2.190.0/24 maxlen: 24
210.2.191.0/24 maxlen: 24
2401:0:201::/48 maxlen: 48
2401:0:4000::/40 maxlen: 40
2401:0:8001::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9165568/BD1A95D21D8711E29BE3E6DF08B02CD2/Zwl-SS9z1tvTH6AWotW1uGqbP9g.crl
rsync://rpki.apnic.net/member_repository/A9165568/BD1A95D21D8711E29BE3E6DF08B02CD2/Zwl-SS9z1tvTH6AWotW1uGqbP9g.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Zwl-SS9z1tvTH6AWotW1uGqbP9g.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 11 Nov 2025 15:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7478 (0x1d36)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9165568, serialNumber=67097E492F73D6DBD31FA016A2D5B5B86A9B3FD8
Validity
Not Before: Nov 4 15:00:32 2025 GMT
Not After : Jan 31 00:00:00 2027 GMT
Subject: CN=690a150f-13d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:f2:a4:0a:a1:3f:d6:ce:8e:af:34:98:aa:3d:
f3:e8:3b:22:49:de:32:31:ba:10:d0:6d:4b:6e:de:
ef:68:fe:13:7a:66:10:7c:21:f1:ad:9d:80:a5:ca:
39:b8:22:35:a0:dc:48:1b:ae:ea:fd:07:94:39:b0:
4d:f1:03:2b:8f:0f:2f:5d:45:09:15:5c:9b:34:21:
bc:b1:b6:fc:ee:66:5d:f7:bd:55:69:a6:ac:95:e2:
8a:aa:de:c8:7d:00:3a:61:96:90:bb:d1:51:95:cc:
f2:b3:c5:b7:c1:4f:99:c5:d6:e0:54:4a:84:f9:87:
ea:ed:81:5e:df:7f:8f:d5:46:12:d7:cb:11:16:45:
10:52:a2:6e:d4:ae:11:05:59:81:66:3a:5d:d4:9a:
0e:80:4b:e5:fd:a9:63:2d:84:b1:bc:60:90:4a:cb:
dd:81:ab:a2:5a:e2:16:77:3f:e4:c0:e4:a0:df:15:
83:b9:96:0f:8e:50:00:ff:6a:ae:a9:1e:dd:8d:d1:
ce:8a:6e:75:39:a6:65:63:5a:0f:c3:2f:3d:3a:5f:
0e:af:1e:f1:9f:09:89:8b:03:4f:32:58:c7:1e:81:
52:43:67:7b:d8:d9:6c:91:29:b8:87:5d:bf:d2:8c:
17:60:d7:f7:b4:ed:1c:63:70:98:47:81:01:26:4e:
d0:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:90:FB:C0:37:A3:C4:A4:E4:78:62:38:B4:36:11:7C:DE:23:E5:50
X509v3 Authority Key Identifier:
keyid:67:09:7E:49:2F:73:D6:DB:D3:1F:A0:16:A2:D5:B5:B8:6A:9B:3F:D8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9165568/BD1A95D21D8711E29BE3E6DF08B02CD2/Zwl-SS9z1tvTH6AWotW1uGqbP9g.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Zwl-SS9z1tvTH6AWotW1uGqbP9g.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9165568/BD1A95D21D8711E29BE3E6DF08B02CD2/727C68508AB411EA89D83541C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
119.30.80.0/20
119.30.100.0/24
119.30.106.0-119.30.108.255
119.30.112.0/22
119.30.124.0/22
119.73.0.0/18
202.61.32.0/19
202.147.160.0/19
202.154.224.0/19
203.223.160.0/20
210.2.128.0/18
IPv6:
2401:0:201::/48
2401:0:4000::/40
2401:0:8001::/48
Signature Algorithm: sha256WithRSAEncryption
87:8e:02:f7:be:49:c6:98:88:0a:49:47:9e:49:b2:40:cb:b4:
5e:e7:b0:0f:6b:59:80:15:a0:d3:a1:9c:f4:72:c8:67:b6:7c:
73:7b:a4:b9:5c:c2:aa:62:ac:13:cb:3c:80:70:ef:a8:5f:3d:
34:b4:9c:c5:ac:2e:3a:6a:56:53:a9:68:11:3d:64:7f:7b:1a:
c4:7e:51:bc:eb:58:0b:70:5d:df:e8:34:f3:a9:de:b0:c1:d7:
7f:c5:01:3c:cd:81:39:09:26:b8:e2:31:55:d4:45:33:a2:8a:
eb:66:a3:24:44:6a:41:1b:c8:76:af:5c:fd:54:ce:72:33:4d:
4d:c7:4c:69:95:b7:ba:92:e8:b1:78:14:a3:8f:98:b5:a9:3f:
58:2b:cd:7a:5c:e2:ee:79:b2:17:f0:75:18:b0:8a:35:bf:a1:
a8:14:6b:9a:97:2a:17:79:be:00:73:bb:b0:77:44:d3:52:32:
96:02:43:3d:0d:7f:c2:2a:2e:09:e0:d8:d5:11:4c:08:2a:70:
25:43:46:78:e1:b3:3e:4d:7a:75:3d:bf:04:f2:d4:e7:bf:21:
9f:0e:50:f5:a6:e8:12:c1:bc:09:92:eb:85:0e:dd:4d:e1:b1:
6c:68:ab:36:f0:0b:f0:dd:e1:3d:cb:dd:fa:7a:15:a8:30:74:
91:76:cc:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 04:49:30 2025 by rpki-client