Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9191436/AAB802E8C78C11E8A76CD914C4F9AE02/ED7D926622C511EE8579CC72C4F9AE02.roa
File: ED7D926622C511EE8579CC72C4F9AE02.roa (raw, json)
Hash identifier: ES8GbDgYjPQKSinBWCo4y5X0XRM+XTBy5dM4dCgeuYg=
Subject key identifier: D4:3B:1F:7E:F0:1A:90:15:B9:77:91:90:F2:0F:BE:8A:B2:D7:24:9E
Certificate issuer: /CN=A9191436/serialNumber=2DA251C11AC68814F527F22E55DE9AC8C57FD66C
Certificate serial: 1367
Authority key identifier: 2D:A2:51:C1:1A:C6:88:14:F5:27:F2:2E:55:DE:9A:C8:C5:7F:D6:6C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LaJRwRrGiBT1J_IuVd6ayMV_1mw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9191436/AAB802E8C78C11E8A76CD914C4F9AE02/ED7D926622C511EE8579CC72C4F9AE02.roa
Signing time: Fri 25 Jul 2025 01:33:10 +0000
ROA not before: Fri 25 Jul 2025 01:33:10 +0000
ROA not after: Thu 28 May 2026 00:00:00 +0000
asID: 9902
IP address blocks: 103.23.136.0/22 maxlen: 22
103.23.136.0/24 maxlen: 24
103.23.137.0/24 maxlen: 24
103.23.138.0/24 maxlen: 24
103.23.139.0/24 maxlen: 24
103.25.92.0/24 maxlen: 24
103.25.93.0/24 maxlen: 24
103.25.94.0/24 maxlen: 24
103.25.95.0/24 maxlen: 24
103.244.248.0/22 maxlen: 22
103.244.248.0/24 maxlen: 24
103.244.249.0/24 maxlen: 24
103.244.250.0/24 maxlen: 24
103.244.251.0/24 maxlen: 24
110.235.220.0/22 maxlen: 22
110.235.220.0/24 maxlen: 24
110.235.221.0/24 maxlen: 24
110.235.222.0/24 maxlen: 24
110.235.223.0/24 maxlen: 24
123.108.248.0/21 maxlen: 21
123.108.248.0/24 maxlen: 24
123.108.249.0/24 maxlen: 24
123.108.250.0/24 maxlen: 24
123.108.251.0/24 maxlen: 24
123.108.252.0/24 maxlen: 24
123.108.253.0/24 maxlen: 24
123.108.254.0/23 maxlen: 24
124.199.112.0/20 maxlen: 20
124.199.112.0/24 maxlen: 24
124.199.113.0/24 maxlen: 24
124.199.114.0/24 maxlen: 24
124.199.115.0/24 maxlen: 24
124.199.116.0/24 maxlen: 24
124.199.117.0/24 maxlen: 24
124.199.118.0/24 maxlen: 24
124.199.119.0/24 maxlen: 24
124.199.120.0/24 maxlen: 24
124.199.121.0/24 maxlen: 24
124.199.122.0/24 maxlen: 24
124.199.123.0/24 maxlen: 24
124.199.124.0/24 maxlen: 24
124.199.125.0/24 maxlen: 24
124.199.126.0/24 maxlen: 24
124.199.127.0/24 maxlen: 24
163.53.196.0/22 maxlen: 22
163.53.196.0/24 maxlen: 24
163.53.197.0/24 maxlen: 24
163.53.198.0/24 maxlen: 24
163.53.199.0/24 maxlen: 24
202.124.32.0/24 maxlen: 24
202.124.33.0/24 maxlen: 24
202.124.34.0/24 maxlen: 24
202.124.35.0/24 maxlen: 24
202.124.36.0/24 maxlen: 24
202.124.37.0/24 maxlen: 24
202.124.38.0/24 maxlen: 24
202.124.39.0/24 maxlen: 24
202.124.40.0/21 maxlen: 21
202.124.40.0/24 maxlen: 24
202.124.41.0/24 maxlen: 24
202.124.42.0/24 maxlen: 24
202.124.43.0/24 maxlen: 24
202.124.44.0/24 maxlen: 24
202.124.45.0/24 maxlen: 24
202.124.46.0/24 maxlen: 24
202.124.47.0/24 maxlen: 24
203.80.160.0/21 maxlen: 21
203.80.160.0/24 maxlen: 24
203.80.161.0/24 maxlen: 24
203.80.162.0/24 maxlen: 24
203.80.163.0/24 maxlen: 24
203.80.164.0/24 maxlen: 24
203.80.165.0/24 maxlen: 24
203.80.166.0/24 maxlen: 24
203.80.167.0/24 maxlen: 24
203.167.16.0/22 maxlen: 24
2402:5100::/32 maxlen: 32
2402:5100::/48 maxlen: 48
2402:5100:1::/48 maxlen: 48
2402:5100:2::/48 maxlen: 48
2402:5100:3::/48 maxlen: 48
2402:5100:4::/48 maxlen: 48
2402:5100:5::/48 maxlen: 48
2402:5100:6::/47 maxlen: 47
2402:5100:8::/45 maxlen: 45
2402:5100:10::/44 maxlen: 44
2402:5100:20::/43 maxlen: 43
2402:5100:40::/42 maxlen: 42
2402:5100:80::/41 maxlen: 41
2402:5100:100::/40 maxlen: 40
2402:5100:200::/39 maxlen: 39
2402:5100:400::/38 maxlen: 38
2402:5100:800::/37 maxlen: 37
2402:5100:a61:9160::/64 maxlen: 64
2402:5100:1000::/36 maxlen: 36
2402:5100:109a:9c00::/54 maxlen: 54
2402:5100:13e4::/49 maxlen: 49
2402:5100:19c5:7b1a::/63 maxlen: 63
2402:5100:2000::/35 maxlen: 35
2402:5100:2000::/36 maxlen: 44
2402:5100:2000::/48 maxlen: 48
2402:5100:2878:a000::/51 maxlen: 51
2402:5100:3051:faf0::/61 maxlen: 61
2402:5100:34fa:4000::/50 maxlen: 50
2402:5100:3ca1::/52 maxlen: 52
2402:5100:4000::/34 maxlen: 34
2402:5100:440a:6c00::/54 maxlen: 54
2402:5100:4858:8798::/62 maxlen: 62
2402:5100:49af:7378::/62 maxlen: 62
2402:5100:4dc9:200::/55 maxlen: 55
2402:5100:5a54::/48 maxlen: 48
2402:5100:5ad0:e000::/51 maxlen: 51
2402:5100:5adf:ff00::/56 maxlen: 56
2402:5100:5b82:c640::/58 maxlen: 58
2402:5100:5f51:8000::/50 maxlen: 50
2402:5100:633d:8000::/49 maxlen: 49
2402:5100:7944:6230::/60 maxlen: 60
2402:5100:7c59:3040::/59 maxlen: 59
2402:5100:8000::/33 maxlen: 33
2402:5100:82ec:1000::/52 maxlen: 52
2402:5100:8a2c:fa80::/58 maxlen: 58
2402:5100:8c49:1daf::/64 maxlen: 64
2402:5100:913d:267c::/63 maxlen: 63
2402:5100:92a8:d800::/53 maxlen: 53
2402:5100:92d3:d000::/59 maxlen: 59
2402:5100:92ed:82a0::/59 maxlen: 59
2402:5100:9674:9800::/53 maxlen: 53
2402:5100:968b:9fd0::/61 maxlen: 61
2402:5100:96f4:35f2::/63 maxlen: 63
2402:5100:97d1:bab4::/62 maxlen: 62
2402:5100:9839:d180::/64 maxlen: 64
2402:5100:9839:d18b::/64 maxlen: 64
2402:5100:98c5::/50 maxlen: 50
2402:5100:9a3e:d560::/59 maxlen: 59
2402:5100:9ae1:9640::/58 maxlen: 58
2402:5100:9b45::/48 maxlen: 48
2402:5100:9c24::/48 maxlen: 48
2402:5100:9e92:7000::/52 maxlen: 52
2402:5100:9f87:ca0::/60 maxlen: 60
2402:5100:a595::/49 maxlen: 49
2402:5100:a5af:9200::/55 maxlen: 55
2402:5100:a6d7:1cd8::/61 maxlen: 61
2402:5100:a8d2:8a00::/55 maxlen: 55
2402:5100:ac16:2800::/56 maxlen: 56
2402:5100:ad38:f128::/63 maxlen: 63
2402:5100:af3d:9780::/57 maxlen: 57
2402:5100:af82::/48 maxlen: 48
2402:5100:b344:1800::/53 maxlen: 53
2402:5100:baec::/49 maxlen: 49
2402:5100:bd4f::/48 maxlen: 48
2402:5100:be38:d980::/57 maxlen: 57
2402:5100:bf0d:425e::/64 maxlen: 64
2402:5100:c000::/48 maxlen: 48
2402:5100:c017:3e00::/57 maxlen: 57
2402:5100:c126::/48 maxlen: 48
2402:5100:c29b::/48 maxlen: 48
2402:5100:c42e:9728::/61 maxlen: 61
2402:5100:c8e5:e000::/51 maxlen: 51
2402:5100:ca6b:62b0::/60 maxlen: 60
2402:5100:d107::/48 maxlen: 48
2402:5100:d1a2:dc00::/56 maxlen: 56
2402:5100:d360:8000::/50 maxlen: 50
2402:5100:d3b2:b800::/53 maxlen: 53
2402:5100:d7f6::/48 maxlen: 48
2402:5100:d879:7e00::/60 maxlen: 60
2402:5100:d8e9:4a04::/62 maxlen: 62
2402:5100:dc0e::/54 maxlen: 54
2402:5100:dd4c::/48 maxlen: 48
2402:5100:e458::/48 maxlen: 48
2402:5100:e965:69c0::/58 maxlen: 58
2402:5100:ef12:8800::/54 maxlen: 54
2402:5100:f116:2200::/56 maxlen: 56
2402:5100:f23f:7a80::/57 maxlen: 57
2402:5100:f48e::/48 maxlen: 48
2402:5100:f71d:2000::/51 maxlen: 51
2402:5100:f9ee:8800::/55 maxlen: 55
2402:5100:fcbe:3000::/52 maxlen: 52
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9191436/AAB802E8C78C11E8A76CD914C4F9AE02/LaJRwRrGiBT1J_IuVd6ayMV_1mw.crl
rsync://rpki.apnic.net/member_repository/A9191436/AAB802E8C78C11E8A76CD914C4F9AE02/LaJRwRrGiBT1J_IuVd6ayMV_1mw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LaJRwRrGiBT1J_IuVd6ayMV_1mw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 19 Aug 2025 17:01:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4967 (0x1367)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9191436, serialNumber=2DA251C11AC68814F527F22E55DE9AC8C57FD66C
Validity
Not Before: Jul 25 01:33:10 2025 GMT
Not After : May 28 00:00:00 2026 GMT
Subject: CN=6882ded6-9c70
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:00:6f:71:19:ff:04:61:c9:42:06:d2:87:48:
15:89:88:49:50:a7:db:16:02:73:66:40:29:ba:94:
10:96:07:e5:ea:33:8d:72:0c:88:01:b3:3d:a9:35:
b2:4b:55:b2:6f:c6:eb:3d:52:93:8d:d0:7e:8c:f9:
3c:43:83:a2:64:7e:a5:1f:4c:18:fe:00:55:f8:af:
a0:41:8b:aa:a6:3b:36:d5:c5:f3:c7:d0:ae:ca:16:
2d:d0:e7:5a:29:78:5c:8a:25:ab:32:be:48:50:f0:
4c:ee:72:f2:6f:c1:86:02:17:02:4a:7d:27:01:57:
dc:0f:67:b1:13:bb:31:78:b3:d6:8d:00:7f:11:69:
30:a6:71:67:09:92:96:04:00:1d:cd:7e:61:8f:5c:
58:5f:7b:e2:b8:aa:8e:a3:45:55:ff:88:d0:2c:f5:
e3:68:6b:d8:5c:44:6a:03:42:9c:3d:8c:de:fd:2b:
c0:0b:23:d7:b5:e0:66:37:0f:fa:7d:77:14:15:ac:
6e:29:b6:f2:1c:8d:77:76:cb:88:4e:8c:04:fa:ca:
27:45:5a:06:f6:4d:88:61:a3:36:1e:af:04:e4:b6:
1a:5e:66:9b:13:77:1f:2d:d8:db:6f:ba:e7:3b:dd:
71:f7:de:57:7c:d8:7e:84:76:b8:c2:57:54:33:a1:
df:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:3B:1F:7E:F0:1A:90:15:B9:77:91:90:F2:0F:BE:8A:B2:D7:24:9E
X509v3 Authority Key Identifier:
keyid:2D:A2:51:C1:1A:C6:88:14:F5:27:F2:2E:55:DE:9A:C8:C5:7F:D6:6C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9191436/AAB802E8C78C11E8A76CD914C4F9AE02/LaJRwRrGiBT1J_IuVd6ayMV_1mw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LaJRwRrGiBT1J_IuVd6ayMV_1mw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9191436/AAB802E8C78C11E8A76CD914C4F9AE02/ED7D926622C511EE8579CC72C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.23.136.0/22
103.25.92.0/22
103.244.248.0/22
110.235.220.0/22
123.108.248.0/21
124.199.112.0/20
163.53.196.0/22
202.124.32.0/20
203.80.160.0/21
203.167.16.0/22
IPv6:
2402:5100::/32
Signature Algorithm: sha256WithRSAEncryption
8a:1e:21:4d:0c:cc:18:d2:72:97:4c:67:11:90:30:3c:53:52:
bc:78:de:a1:46:b2:f1:81:8b:48:94:f7:a4:27:a1:7c:ec:a1:
73:af:06:6a:ba:90:07:1b:a8:5b:ea:02:9d:dd:cb:7b:7d:c8:
cf:ff:48:89:c7:e3:c5:e1:31:1e:ab:d1:ac:d3:f2:1a:a6:04:
be:ef:c4:9a:5c:74:54:83:fa:55:69:da:64:54:0b:b5:4a:be:
20:bf:fe:f1:c2:06:f5:46:d8:4d:77:af:e9:17:4f:b0:98:33:
bb:a7:c6:1f:f5:a2:71:e8:2d:95:a2:02:f7:09:e6:5f:72:ce:
b1:36:47:f4:31:36:93:6d:6f:26:db:00:63:92:d3:06:fd:54:
9a:0f:da:a9:52:5d:81:f6:63:46:d2:9d:80:4e:e2:34:13:fc:
b9:00:ae:4d:1d:65:de:89:ee:93:58:40:79:4c:58:3f:15:93:
89:b4:45:97:41:12:12:6f:59:28:98:ad:00:47:03:58:d3:ad:
0c:9d:4c:04:b4:bc:4f:99:ee:f9:41:b1:69:23:62:d7:66:b7:
3a:3f:24:5a:eb:3c:6b:59:d0:16:24:31:2f:fd:97:09:9a:25:
0a:c6:5d:99:5e:39:e1:80:5a:24:c0:87:89:97:b7:62:8f:1b:
60:90:01:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 12 18:26:44 2025 by rpki-client