Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A916BCDF/F858344EE36D11E8956F3516C4F9AE02/AA47599A985F11EEBA5D186DC4F9AE02.roa
File: AA47599A985F11EEBA5D186DC4F9AE02.roa (raw, json)
Hash identifier: tLr2WIMib785R6yoraMON1dePFkNxq6rucoj57SxGww=
Subject key identifier: 42:C5:D4:03:7B:A0:0C:63:CD:C6:86:3A:16:1D:ED:31:08:A0:DE:C6
Certificate issuer: /CN=A916BCDF/serialNumber=51AAAC7F6F58F747072C87EC2F4878EF1CB8F4CE
Certificate serial: 127A
Authority key identifier: 51:AA:AC:7F:6F:58:F7:47:07:2C:87:EC:2F:48:78:EF:1C:B8:F4:CE
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Uaqsf29Y90cHLIfsL0h47xy49M4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916BCDF/F858344EE36D11E8956F3516C4F9AE02/AA47599A985F11EEBA5D186DC4F9AE02.roa
Signing time: Sun 02 Nov 2025 17:35:28 +0000
ROA not before: Sun 02 Nov 2025 17:35:28 +0000
ROA not after: Wed 30 Dec 2026 00:00:00 +0000
asID: 20473
IP address blocks: 43.224.32.0/22 maxlen: 24
103.43.72.0/22 maxlen: 32
202.182.96.0/20 maxlen: 23
202.182.96.0/25 maxlen: 32
202.182.96.128/25 maxlen: 32
202.182.97.0/25 maxlen: 32
202.182.97.128/25 maxlen: 32
202.182.98.0/24 maxlen: 32
202.182.99.0/25 maxlen: 32
202.182.99.128/25 maxlen: 32
202.182.100.0/24 maxlen: 32
202.182.101.0/25 maxlen: 32
202.182.101.128/25 maxlen: 32
202.182.102.0/25 maxlen: 32
202.182.102.128/25 maxlen: 32
202.182.103.0/25 maxlen: 32
202.182.103.128/25 maxlen: 32
202.182.104.0/25 maxlen: 32
202.182.104.128/25 maxlen: 32
202.182.105.0/25 maxlen: 32
202.182.105.128/25 maxlen: 32
202.182.106.0/25 maxlen: 32
202.182.106.128/25 maxlen: 32
202.182.107.0/25 maxlen: 32
202.182.107.128/25 maxlen: 32
202.182.108.0/25 maxlen: 32
202.182.108.128/25 maxlen: 32
202.182.109.0/25 maxlen: 32
202.182.109.128/25 maxlen: 32
202.182.110.0/25 maxlen: 32
202.182.110.128/25 maxlen: 32
202.182.111.0/25 maxlen: 32
202.182.111.128/25 maxlen: 32
202.182.112.0/20 maxlen: 32
2401:c080:1000::/38 maxlen: 38
2401:c080:1400::/38 maxlen: 38
2401:c080:1800::/38 maxlen: 38
2401:c080:18fb::/48 maxlen: 48
2401:c080:1c00::/38 maxlen: 38
2401:c080:2000::/38 maxlen: 38
2401:c080:2400::/38 maxlen: 38
2401:c080:3000::/38 maxlen: 38
2401:c080:3400::/38 maxlen: 38
2401:c080:3800::/38 maxlen: 38
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A916BCDF/F858344EE36D11E8956F3516C4F9AE02/Uaqsf29Y90cHLIfsL0h47xy49M4.crl
rsync://rpki.apnic.net/member_repository/A916BCDF/F858344EE36D11E8956F3516C4F9AE02/Uaqsf29Y90cHLIfsL0h47xy49M4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Uaqsf29Y90cHLIfsL0h47xy49M4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 11 Nov 2025 17:12:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4730 (0x127a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916BCDF, serialNumber=51AAAC7F6F58F747072C87EC2F4878EF1CB8F4CE
Validity
Not Before: Nov 2 17:35:28 2025 GMT
Not After : Dec 30 00:00:00 2026 GMT
Subject: CN=6907965f-ca62
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:fb:72:0e:20:8b:e5:3a:1a:68:68:c5:86:28:
f2:16:a3:01:2c:6d:7e:1e:21:03:1a:10:b9:5d:e8:
55:10:3e:5e:00:45:3e:d7:a8:10:15:7a:54:eb:f7:
4b:22:1e:5b:42:c0:d8:f1:3e:68:0a:4c:b4:e4:04:
30:ec:b0:03:6b:a6:2d:c1:40:d2:10:c1:2d:e2:fb:
7b:5e:ec:35:46:a7:0f:31:31:fb:7d:6b:ac:14:af:
48:5f:0f:c0:1f:9c:66:de:65:5f:cd:bf:2b:42:33:
e5:84:73:3a:47:ae:8b:2e:42:70:ea:33:6e:04:8c:
ef:4b:5d:6d:dc:23:f7:2b:1d:d6:ef:ad:3f:6a:03:
74:f7:2d:27:dd:67:8e:c5:d9:b2:2f:8c:5a:e9:ec:
05:84:be:b8:5c:09:4f:3d:05:f3:2c:c4:6a:39:32:
c8:56:6d:d8:9c:88:05:9d:f8:c4:df:c5:ce:8a:cb:
d6:a6:6b:62:a5:7a:a9:c8:9a:34:93:3d:15:71:5d:
cc:9e:d5:92:a2:1d:5e:28:55:2d:66:bf:44:10:31:
d8:be:2c:af:d1:79:df:e8:64:3f:fe:bf:5a:64:13:
ca:46:d7:80:86:66:61:ab:2b:31:46:59:c9:32:8e:
09:1a:6c:c2:88:16:25:cd:49:96:06:af:4c:6d:03:
58:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:C5:D4:03:7B:A0:0C:63:CD:C6:86:3A:16:1D:ED:31:08:A0:DE:C6
X509v3 Authority Key Identifier:
keyid:51:AA:AC:7F:6F:58:F7:47:07:2C:87:EC:2F:48:78:EF:1C:B8:F4:CE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916BCDF/F858344EE36D11E8956F3516C4F9AE02/Uaqsf29Y90cHLIfsL0h47xy49M4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Uaqsf29Y90cHLIfsL0h47xy49M4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916BCDF/F858344EE36D11E8956F3516C4F9AE02/AA47599A985F11EEBA5D186DC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
43.224.32.0/22
103.43.72.0/22
202.182.96.0/19
IPv6:
2401:c080:1000::-2401:c080:27ff:ffff:ffff:ffff:ffff:ffff
2401:c080:3000::-2401:c080:3bff:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
75:1f:b5:51:9a:44:1b:2d:5c:7d:80:80:25:91:f3:f9:18:f9:
c0:5a:2d:51:7f:fa:91:22:3c:c6:e4:55:7b:aa:6c:48:94:87:
5f:af:21:5d:9a:38:84:39:61:6e:b1:1c:d8:e7:d2:a8:84:cd:
bd:f8:7a:16:fa:65:7a:60:29:83:12:c1:0c:27:f3:6f:77:8f:
58:9f:2a:46:5e:1b:42:8b:47:6f:28:72:5a:5e:91:7e:28:76:
70:72:57:d7:54:25:5a:b1:bb:98:b9:5a:47:d1:9d:0b:fa:7f:
09:9d:58:f5:dd:cc:24:4a:fa:47:65:1d:b6:6d:03:8f:aa:1c:
1a:b1:74:18:50:99:2d:3c:b4:b5:9d:5a:e8:c4:2b:c6:ea:c9:
ad:c4:9e:0a:d5:e8:9b:3a:96:e8:f4:37:ae:26:4d:33:1b:d3:
7c:c2:af:da:c6:6b:a8:4f:48:05:71:7d:c3:30:7b:97:3c:c3:
8c:2d:c5:76:f5:4a:54:ee:da:20:86:84:f4:92:46:46:e5:59:
0a:c9:fa:b8:ea:e4:f6:82:ac:07:1f:b8:f6:29:0e:7c:c5:a2:
ed:05:21:bf:0a:0d:df:30:60:1b:de:0a:fe:ba:05:25:68:41:
49:69:51:e4:e5:3b:56:d4:50:de:c6:6d:fb:60:e7:08:e1:a2:
77:ab:51:25
-----BEGIN CERTIFICATE-----
MIIFqTCCBJGgAwIBAgICEnowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NkJDREYxMTAvBgNVBAUTKDUxQUFBQzdGNkY1OEY3NDcwNzJDODdFQzJGNDg3OEVG
MUNCOEY0Q0UwHhcNMjUxMTAyMTczNTI4WhcNMjYxMjMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02OTA3OTY1Zi1jYTYyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA0ftyDiCL5ToaaGjFhijyFqMBLG1+HiEDGhC5XehVED5eAEU+16gQFXpU6/dL
Ih5bQsDY8T5oCky05AQw7LADa6YtwUDSEMEt4vt7Xuw1RqcPMTH7fWusFK9IXw/A
H5xm3mVfzb8rQjPlhHM6R66LLkJw6jNuBIzvS11t3CP3Kx3W760/agN09y0n3WeO
xdmyL4xa6ewFhL64XAlPPQXzLMRqOTLIVm3YnIgFnfjE38XOisvWpmtipXqpyJo0
kz0VcV3MntWSoh1eKFUtZr9EEDHYviyv0Xnf6GQ//r9aZBPKRteAhmZhqysxRlnJ
Mo4JGmzCiBYlzUmWBq9MbQNY8wIDAQABo4ICzTCCAskwHQYDVR0OBBYEFELF1AN7
oAxjzcaGOhYd7TEIoN7GMB8GA1UdIwQYMBaAFFGqrH9vWPdHByyH7C9IeO8cuPTO
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2QkNERi9GODU4MzQ0RUUz
NkQxMUU4OTU2RjM1MTZDNEY5QUUwMi9VYXFzZjI5WTkwY0hMSWZzTDBoNDd4eTQ5
TTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1VhcXNmMjlZOTBjSExJZnNMMGg0N3h5NDlNNC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
NkJDREYvRjg1ODM0NEVFMzZEMTFFODk1NkYzNTE2QzRGOUFFMDIvQUE0NzU5OUE5
ODVGMTFFRUJBNUQxODZEQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwVwYIKwYBBQUHAQcBAf8E
SDBGMBgEAgABMBIDBAIr4CADBAJnK0gDBAXKtmAwKgQCAAIwJDAQAwYEJAHAgBAD
BgMkAcCAIDAQAwYEJAHAgDADBgIkAcCAODANBgkqhkiG9w0BAQsFAAOCAQEAdR+1
UZpEGy1cfYCAJZHz+Rj5wFotUX/6kSI8xuRVe6psSJSHX68hXZo4hDlhbrEc2OfS
qITNvfh6FvplemApgxLBDCfzb3ePWJ8qRl4bQotHbyhyWl6Rfih2cHJX11QlWrG7
mLlaR9GdC/p/CZ1Y9d3MJEr6R2Udtm0Dj6ocGrF0GFCZLTy0tZ1a6MQrxurJrcSe
CtXomzqW6PQ3riZNMxvTfMKv2sZrqE9IBXF9wzB7lzzDjC3FdvVKVO7aIIaE9JJG
RuVZCsn6uOrk9oKsBx+49ikOfMWi7QUhvwoN3zBgG94K/roFJWhBSWlR5OU7VtRQ
3sZt+2DnCOGid6tRJQ==
-----END CERTIFICATE-----
Generated at Wed Nov 5 21:14:47 2025 by rpki-client