Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/6916D8FCD18311EFA0665D52C4F9AE02.roa
File: 6916D8FCD18311EFA0665D52C4F9AE02.roa (raw, json)
Hash identifier: NCfqIX48OePrmTHkNgDbVk+lKtXwnJHhuog8FGkMmWc=
Subject key identifier: D2:31:BA:43:8F:BC:5F:7A:29:01:0A:DE:96:85:70:5D:86:B9:8B:95
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: BF7F
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/6916D8FCD18311EFA0665D52C4F9AE02.roa
Signing time: Thu 03 Jul 2025 11:35:59 +0000
ROA not before: Thu 03 Jul 2025 11:35:59 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 135780
IP address blocks: 103.82.208.0/22 maxlen: 24
103.122.14.0/23 maxlen: 24
103.141.166.0/23 maxlen: 24
103.176.166.0/23 maxlen: 24
2404:8ec0::/32 maxlen: 32
2404:8ec0::/34 maxlen: 34
2404:8ec0::/41 maxlen: 48
2404:8ec0:4000::/34 maxlen: 34
2404:8ec0:8000::/34 maxlen: 34
2404:8ec0:afaf::/48 maxlen: 48
2404:8ec0:c000::/34 maxlen: 34
2404:8ec0:ddd0::/48 maxlen: 48
2404:8ec0:ddd1::/48 maxlen: 48
2404:8ec0:ddd2::/48 maxlen: 48
2404:8ec0:ddd3::/48 maxlen: 48
2404:8ec0:ddd4::/48 maxlen: 48
2404:8ec0:ddd5::/48 maxlen: 48
2404:8ec0:ddd6::/48 maxlen: 48
2404:8ec0:ddd7::/48 maxlen: 48
2404:8ec0:ddd8::/48 maxlen: 48
2404:8ec0:ddd9::/48 maxlen: 48
2404:8ec0:ddda::/48 maxlen: 48
2404:8ec0:dddb::/48 maxlen: 48
2404:8ec0:dddc::/48 maxlen: 48
2404:8ec0:dddd::/48 maxlen: 48
2404:8ec0:ddde::/48 maxlen: 48
2404:8ec0:dddf::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 14 Aug 2025 05:57:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 49023 (0xbf7f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Validity
Not Before: Jul 3 11:35:59 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=68666b1f-dada
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:8f:2f:d3:42:48:ca:67:9c:1c:72:7a:e5:21:
b5:57:5c:7f:94:8e:55:2f:b3:0a:ec:b9:07:03:af:
02:97:99:f7:3d:10:ce:0a:ea:20:a8:3d:e0:b9:94:
83:e2:96:87:41:93:74:06:95:6c:1e:66:e4:c6:b5:
f0:c6:ee:07:f6:9e:07:70:ab:a3:9f:a3:da:9e:44:
48:b2:b8:a6:e8:1c:41:4a:b9:76:62:1c:ab:13:c5:
d7:40:ca:3d:17:55:20:5e:bc:a7:6e:60:86:c9:0c:
12:a5:2a:d2:74:4a:a8:1a:06:88:6f:e1:65:0d:53:
19:cb:04:de:1d:14:64:0a:1b:b5:7d:95:95:d5:26:
30:77:ca:84:5b:38:d5:d8:4e:88:5c:9d:53:94:d7:
f9:ea:39:66:5a:3a:85:05:28:50:f2:ee:37:23:a3:
cf:11:30:7e:69:a8:2e:81:82:2a:f6:7d:20:97:17:
ac:8b:f2:d3:da:73:32:cf:1b:44:c1:06:20:a8:7e:
27:5d:ab:db:0b:0f:e8:86:a7:4b:cf:86:9c:82:29:
38:95:2a:aa:20:2a:79:25:de:18:12:b8:48:f5:a1:
6b:4a:c3:66:58:fb:fb:77:99:cf:a4:c2:de:23:d0:
ca:3b:ab:2a:8a:f9:db:86:ed:fa:59:6c:4b:fc:3c:
7d:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:31:BA:43:8F:BC:5F:7A:29:01:0A:DE:96:85:70:5D:86:B9:8B:95
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/6916D8FCD18311EFA0665D52C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.82.208.0/22
103.122.14.0/23
103.141.166.0/23
103.176.166.0/23
IPv6:
2404:8ec0::/32
Signature Algorithm: sha256WithRSAEncryption
b0:e1:ac:ce:f3:8a:71:6a:89:36:99:d5:e5:04:bf:6e:5c:fc:
a0:c8:9a:36:ad:06:86:2a:55:1f:2d:a8:4f:63:2b:b0:26:c4:
88:68:92:0c:6a:3f:a0:d0:3b:4c:16:06:4e:ae:95:2f:5e:39:
05:79:08:96:69:ae:f0:91:93:5c:40:61:c2:76:d5:d1:74:98:
de:f6:e8:50:d5:6d:c7:19:33:a7:59:79:3f:10:5f:af:33:32:
e0:d7:1b:f1:1d:57:4d:57:ac:64:4b:10:46:13:04:b0:2c:b5:
32:c9:44:84:d7:12:17:bb:c6:bf:b4:b8:4b:91:5e:c8:78:0f:
34:d9:44:ec:c3:0f:d8:0e:7e:93:f4:83:51:db:d5:99:8f:79:
ac:cb:52:8b:82:bc:95:4a:f0:9e:6c:f7:a2:78:89:ea:b5:7a:
be:f0:b3:c4:85:5b:47:c8:97:31:5f:bc:67:97:2b:f3:57:87:
05:18:68:83:12:7e:55:41:08:3e:60:b5:eb:5e:45:68:5f:b8:
15:69:1f:8d:d5:6f:1a:b5:2b:a2:76:7d:94:36:95:9a:be:c5:
a6:e3:c1:5d:32:da:33:c3:57:3a:4a:9a:20:15:61:e5:fb:1d:
6c:15:b2:f1:61:65:63:5c:70:7e:8d:56:06:19:20:97:8d:55:
1a:3f:32:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 16:01:53 2025 by rpki-client