Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91733A8/14202384A1B411EAAF2E630FC4F9AE02/F6810AC0D0DC11EA9B1DF432C4F9AE02.roa
File: F6810AC0D0DC11EA9B1DF432C4F9AE02.roa (raw, json)
Hash identifier: X16lFY6K2nhljbiLaCzlwi3FHh2sWAR/KpBd/NkhGQQ=
Subject key identifier: 52:3B:FB:5A:98:27:49:6A:1C:AE:25:DC:A3:FD:DE:CD:24:4E:EB:68
Certificate issuer: /CN=A91733A8/serialNumber=8DC66A64753643B0E70FB9B2BD4009CBEC705441
Certificate serial: 0985
Authority key identifier: 8D:C6:6A:64:75:36:43:B0:E7:0F:B9:B2:BD:40:09:CB:EC:70:54:41
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jcZqZHU2Q7DnD7myvUAJy-xwVEE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91733A8/14202384A1B411EAAF2E630FC4F9AE02/F6810AC0D0DC11EA9B1DF432C4F9AE02.roa
Signing time: Mon 04 Aug 2025 07:35:25 +0000
ROA not before: Mon 04 Aug 2025 07:35:25 +0000
ROA not after: Thu 30 Jul 2026 00:00:00 +0000
asID: 9260
IP address blocks: 43.245.204.0/24 maxlen: 24
43.245.205.0/24 maxlen: 24
43.245.206.0/24 maxlen: 24
43.245.207.0/24 maxlen: 24
103.31.80.0/22 maxlen: 22
103.31.80.0/23 maxlen: 24
103.31.82.0/24 maxlen: 24
103.31.83.0/24 maxlen: 24
125.209.64.0/18 maxlen: 18
125.209.64.0/24 maxlen: 24
125.209.65.0/24 maxlen: 24
125.209.66.0/24 maxlen: 24
125.209.67.0/24 maxlen: 24
125.209.68.0/24 maxlen: 24
125.209.69.0/24 maxlen: 24
125.209.70.0/24 maxlen: 24
125.209.71.0/24 maxlen: 24
125.209.72.0/24 maxlen: 24
125.209.73.0/24 maxlen: 24
125.209.74.0/24 maxlen: 24
125.209.75.0/24 maxlen: 24
125.209.76.0/24 maxlen: 24
125.209.77.0/24 maxlen: 24
125.209.78.0/24 maxlen: 24
125.209.79.0/24 maxlen: 24
125.209.80.0/24 maxlen: 24
125.209.81.0/24 maxlen: 24
125.209.82.0/24 maxlen: 24
125.209.83.0/24 maxlen: 24
125.209.84.0/24 maxlen: 24
125.209.85.0/24 maxlen: 24
125.209.86.0/24 maxlen: 24
125.209.87.0/24 maxlen: 24
125.209.88.0/24 maxlen: 24
125.209.89.0/24 maxlen: 24
125.209.90.0/24 maxlen: 24
125.209.91.0/24 maxlen: 24
125.209.92.0/24 maxlen: 24
125.209.93.0/24 maxlen: 24
125.209.94.0/24 maxlen: 24
125.209.95.0/24 maxlen: 24
125.209.96.0/24 maxlen: 24
125.209.97.0/24 maxlen: 24
125.209.98.0/24 maxlen: 24
125.209.99.0/24 maxlen: 24
125.209.100.0/24 maxlen: 24
125.209.101.0/24 maxlen: 24
125.209.102.0/24 maxlen: 24
125.209.103.0/24 maxlen: 24
125.209.104.0/24 maxlen: 24
125.209.105.0/24 maxlen: 24
125.209.106.0/24 maxlen: 24
125.209.107.0/24 maxlen: 24
125.209.108.0/24 maxlen: 24
125.209.109.0/24 maxlen: 24
125.209.110.0/24 maxlen: 24
125.209.111.0/24 maxlen: 24
125.209.112.0/24 maxlen: 24
125.209.113.0/24 maxlen: 24
125.209.114.0/24 maxlen: 24
125.209.115.0/24 maxlen: 24
125.209.116.0/24 maxlen: 24
125.209.117.0/24 maxlen: 24
125.209.118.0/24 maxlen: 24
125.209.119.0/24 maxlen: 24
125.209.120.0/21 maxlen: 21
125.209.120.0/24 maxlen: 24
125.209.121.0/24 maxlen: 24
125.209.122.0/24 maxlen: 24
125.209.123.0/24 maxlen: 24
125.209.124.0/24 maxlen: 24
125.209.125.0/24 maxlen: 24
125.209.126.0/24 maxlen: 24
125.209.127.0/24 maxlen: 24
202.141.224.0/19 maxlen: 19
202.141.224.0/20 maxlen: 20
202.141.224.0/21 maxlen: 21
202.141.224.0/22 maxlen: 24
202.141.228.0/24 maxlen: 24
202.141.229.0/24 maxlen: 24
202.141.231.0/24 maxlen: 24
202.141.232.0/24 maxlen: 24
202.141.233.0/24 maxlen: 24
202.141.234.0/24 maxlen: 24
202.141.235.0/24 maxlen: 24
202.141.237.0/24 maxlen: 24
202.141.238.0/24 maxlen: 24
202.141.239.0/24 maxlen: 24
202.141.240.0/24 maxlen: 24
202.141.241.0/24 maxlen: 24
202.141.242.0/24 maxlen: 24
202.141.243.0/24 maxlen: 24
202.141.245.0/24 maxlen: 24
202.141.246.0/24 maxlen: 24
202.141.247.0/24 maxlen: 24
202.141.248.0/24 maxlen: 24
202.141.249.0/24 maxlen: 24
202.141.250.0/24 maxlen: 24
202.141.251.0/24 maxlen: 24
202.141.252.0/24 maxlen: 24
202.141.253.0/24 maxlen: 24
202.141.254.0/24 maxlen: 24
202.141.255.0/24 maxlen: 24
202.142.160.0/19 maxlen: 19
202.142.160.0/21 maxlen: 21
202.142.160.0/24 maxlen: 24
202.142.161.0/24 maxlen: 24
202.142.162.0/24 maxlen: 24
202.142.163.0/24 maxlen: 24
202.142.164.0/24 maxlen: 24
202.142.165.0/24 maxlen: 24
202.142.166.0/24 maxlen: 24
202.142.167.0/24 maxlen: 24
202.142.168.0/24 maxlen: 24
202.142.169.0/24 maxlen: 24
202.142.170.0/24 maxlen: 24
202.142.171.0/24 maxlen: 24
202.142.172.0/24 maxlen: 24
202.142.173.0/24 maxlen: 24
202.142.174.0/24 maxlen: 24
202.142.175.0/24 maxlen: 24
202.142.176.0/24 maxlen: 24
202.142.177.0/24 maxlen: 24
202.142.178.0/24 maxlen: 24
202.142.179.0/24 maxlen: 24
202.142.180.0/24 maxlen: 24
202.142.181.0/24 maxlen: 24
202.142.182.0/24 maxlen: 24
202.142.183.0/24 maxlen: 24
202.142.184.0/24 maxlen: 24
202.142.185.0/24 maxlen: 24
202.142.186.0/24 maxlen: 24
202.142.187.0/24 maxlen: 24
202.142.188.0/24 maxlen: 24
202.142.189.0/24 maxlen: 24
202.142.190.0/24 maxlen: 24
202.142.191.0/24 maxlen: 24
2401:8e00::/32 maxlen: 32
2401:8e00:800::/48 maxlen: 48
2401:8e00:2000::/38 maxlen: 38
2401:8e00:2400::/38 maxlen: 38
2401:8e00:2800::/48 maxlen: 48
2401:8e00:3400::/38 maxlen: 38
2401:8e00:4000::/36 maxlen: 36
2401:8e00:4000::/38 maxlen: 38
2401:8e00:4004::/48 maxlen: 48
2401:8e00:4005::/48 maxlen: 48
2401:8e00:4006::/48 maxlen: 48
2401:8e00:400f::/48 maxlen: 48
2401:8e00:5000::/36 maxlen: 36
2401:8e00:6000::/36 maxlen: 36
2401:8e00:7000::/36 maxlen: 36
2401:8e00:8000::/48 maxlen: 48
2401:8e00:8004::/48 maxlen: 48
2401:8e00:9000::/40 maxlen: 40
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91733A8/14202384A1B411EAAF2E630FC4F9AE02/jcZqZHU2Q7DnD7myvUAJy-xwVEE.crl
rsync://rpki.apnic.net/member_repository/A91733A8/14202384A1B411EAAF2E630FC4F9AE02/jcZqZHU2Q7DnD7myvUAJy-xwVEE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jcZqZHU2Q7DnD7myvUAJy-xwVEE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 14 Aug 2025 05:57:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2437 (0x985)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91733A8, serialNumber=8DC66A64753643B0E70FB9B2BD4009CBEC705441
Validity
Not Before: Aug 4 07:35:25 2025 GMT
Not After : Jul 30 00:00:00 2026 GMT
Subject: CN=689062bd-fe96
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:02:5e:f9:ee:18:79:d4:80:a2:55:84:a7:cc:
4f:86:b3:75:ed:42:b7:e6:31:48:ec:99:de:ac:d4:
c9:40:02:bd:78:08:35:97:81:0e:dc:72:db:53:eb:
92:3a:da:f3:d5:e7:14:6e:27:c8:e7:a9:3b:a4:c9:
cb:90:4f:e8:85:ac:20:56:f8:eb:ae:ec:f9:f7:01:
3b:34:74:09:f3:0f:94:8e:5d:f9:8c:cd:c1:29:86:
63:ea:73:5f:30:71:e7:80:7a:4a:e4:6a:45:4b:2b:
6b:a6:3e:03:37:bf:3c:df:83:15:10:b7:9d:04:f6:
d8:8d:29:c2:83:ec:ce:81:83:40:57:f9:cc:f3:9c:
a9:51:f1:36:94:2b:5e:bb:c5:41:fc:5f:49:91:3d:
66:47:86:fd:3a:9c:66:ad:83:91:55:38:71:71:62:
da:cd:0b:95:dc:be:25:81:db:8a:a3:95:ef:ff:d9:
da:ef:05:f2:6a:c3:b3:61:e4:f1:51:5c:d8:18:e1:
01:73:41:10:56:54:40:41:5e:f0:6a:c1:8f:70:32:
c1:da:6f:fa:c6:49:5f:cf:76:73:d2:73:ad:72:f7:
e3:75:7e:bd:d5:61:7e:b9:c5:10:d3:60:8f:06:97:
54:d7:62:8e:83:96:e2:fc:88:0c:4b:75:e0:c9:98:
0e:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:3B:FB:5A:98:27:49:6A:1C:AE:25:DC:A3:FD:DE:CD:24:4E:EB:68
X509v3 Authority Key Identifier:
keyid:8D:C6:6A:64:75:36:43:B0:E7:0F:B9:B2:BD:40:09:CB:EC:70:54:41
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91733A8/14202384A1B411EAAF2E630FC4F9AE02/jcZqZHU2Q7DnD7myvUAJy-xwVEE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jcZqZHU2Q7DnD7myvUAJy-xwVEE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91733A8/14202384A1B411EAAF2E630FC4F9AE02/F6810AC0D0DC11EA9B1DF432C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
43.245.204.0/22
103.31.80.0/22
125.209.64.0/18
202.141.224.0/19
202.142.160.0/19
IPv6:
2401:8e00::/32
Signature Algorithm: sha256WithRSAEncryption
b3:e9:4d:29:7f:0c:db:f0:12:7b:ef:8f:7a:e4:6f:31:a7:79:
cb:e5:18:c5:3b:24:6b:3e:65:11:ab:97:32:f3:ff:b1:a3:8a:
95:7b:1a:b1:8d:a7:17:c9:a7:3d:54:e8:75:7d:46:5b:39:cd:
f1:d4:31:e0:7b:69:45:8d:9e:c8:2d:16:3d:34:df:2e:d7:d5:
77:fe:b4:f2:c7:6f:a2:f6:3e:f9:c7:13:9b:0e:f1:12:f7:79:
91:36:51:73:c0:f5:4c:47:a9:f9:cc:dd:a7:14:69:df:29:f0:
cd:e6:54:ad:15:bd:e0:29:49:b4:2c:46:b6:d0:18:9b:64:46:
7c:f1:0c:ec:cf:7a:7c:2c:7c:70:a5:e1:9d:a2:74:99:b5:4f:
22:55:08:aa:e5:3b:48:b8:ae:48:01:e9:7b:c1:da:cd:4d:4b:
45:a7:00:98:f0:59:f0:09:7a:b1:ff:99:91:e6:46:28:b0:32:
b4:23:e2:aa:7f:e9:53:c2:e0:03:9e:d9:4b:07:77:e9:15:d4:
0f:43:de:e1:b3:31:00:a7:62:7b:76:b9:1c:67:0b:c4:b0:24:
bf:47:08:03:70:0b:25:16:a6:40:14:7f:82:82:d3:4b:ba:9c:
e1:8b:a0:4f:e1:b8:f5:df:6a:74:1e:9f:16:e9:17:3f:7b:c9:
8c:b7:f3:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 04:49:58 2025 by rpki-client