Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/742C40C0AE0A11EF9B1A9B3FC4F9AE02.roa
File: 742C40C0AE0A11EF9B1A9B3FC4F9AE02.roa (raw, json)
Hash identifier: l85qbcw9JUg6U1llnKiyEQhBSvOpSPdBVGLGhSkARpk=
Subject key identifier: C2:3F:00:57:4E:DF:2C:A0:B6:37:FC:0D:75:A9:D9:7C:69:26:67:F5
Certificate issuer: /CN=A91A560A/serialNumber=8AC721298F92E10A2EE3051AFBC9114284F80E12
Certificate serial: 06FE
Authority key identifier: 8A:C7:21:29:8F:92:E1:0A:2E:E3:05:1A:FB:C9:11:42:84:F8:0E:12
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ischKY-S4Qou4wUa-8kRQoT4DhI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/742C40C0AE0A11EF9B1A9B3FC4F9AE02.roa
Signing time: Thu 23 Oct 2025 06:44:33 +0000
ROA not before: Thu 23 Oct 2025 06:44:33 +0000
ROA not after: Sat 31 Oct 2026 00:00:00 +0000
asID: 150895
IP address blocks: 157.66.48.0/23 maxlen: 23
157.66.222.0/23 maxlen: 23
157.66.224.0/23 maxlen: 23
160.22.120.0/23 maxlen: 23
160.25.72.0/23 maxlen: 23
160.30.50.0/23 maxlen: 23
160.30.136.0/23 maxlen: 23
160.191.86.0/23 maxlen: 24
160.191.160.0/24 maxlen: 24
160.191.214.0/23 maxlen: 23
160.250.4.0/23 maxlen: 23
160.250.128.0/23 maxlen: 23
160.250.132.0/23 maxlen: 23
160.250.180.0/23 maxlen: 24
160.250.186.0/23 maxlen: 24
161.248.4.0/23 maxlen: 23
161.248.178.0/23 maxlen: 23
161.248.238.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/ischKY-S4Qou4wUa-8kRQoT4DhI.crl
rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/ischKY-S4Qou4wUa-8kRQoT4DhI.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ischKY-S4Qou4wUa-8kRQoT4DhI.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 11 Nov 2025 14:37:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1790 (0x6fe)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A560A, serialNumber=8AC721298F92E10A2EE3051AFBC9114284F80E12
Validity
Not Before: Oct 23 06:44:33 2025 GMT
Not After : Oct 31 00:00:00 2026 GMT
Subject: CN=68f9ced1-070d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:44:f5:f7:3c:3c:f7:7b:1a:91:56:30:98:ae:
7f:6b:c9:a2:9a:d8:e9:35:9d:62:9b:4f:d0:f7:84:
c0:55:2f:53:f4:c2:87:30:23:53:10:58:a9:d5:e6:
86:d8:a6:aa:88:42:2d:ec:ff:7b:f8:70:fc:ec:6f:
cf:17:df:96:3c:87:52:c3:73:b0:51:67:5f:20:6c:
42:34:5c:da:07:21:ac:f1:26:47:12:7f:8f:81:2d:
ec:0e:74:14:90:1e:f9:e2:82:ae:f6:28:e6:8d:0e:
10:05:73:30:49:f0:6a:ff:8d:be:b6:81:9d:94:35:
ed:87:52:99:80:21:5a:41:1d:42:97:3e:ef:7e:0a:
e7:2e:30:12:5f:e4:d9:49:ca:4c:9b:e0:56:7d:00:
f0:9a:f4:8d:69:6b:40:d2:48:1c:8a:a2:cb:5e:51:
d6:89:34:f8:e9:8c:b3:99:30:b7:99:a8:f7:67:60:
12:53:39:35:63:ac:2c:d9:2e:82:d7:64:23:af:25:
d6:8c:9c:0c:42:87:80:11:0f:64:7d:41:2d:6d:52:
8b:57:06:81:b9:86:93:5e:e7:b5:b5:ec:16:a4:68:
5a:18:2c:5b:1a:6b:7d:74:c9:28:84:59:db:80:7f:
2d:47:78:b1:04:7d:c5:9f:32:52:52:cd:46:18:17:
02:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:3F:00:57:4E:DF:2C:A0:B6:37:FC:0D:75:A9:D9:7C:69:26:67:F5
X509v3 Authority Key Identifier:
keyid:8A:C7:21:29:8F:92:E1:0A:2E:E3:05:1A:FB:C9:11:42:84:F8:0E:12
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/ischKY-S4Qou4wUa-8kRQoT4DhI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ischKY-S4Qou4wUa-8kRQoT4DhI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/742C40C0AE0A11EF9B1A9B3FC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
157.66.48.0/23
157.66.222.0-157.66.225.255
160.22.120.0/23
160.25.72.0/23
160.30.50.0/23
160.30.136.0/23
160.191.86.0/23
160.191.160.0/24
160.191.214.0/23
160.250.4.0/23
160.250.128.0/23
160.250.132.0/23
160.250.180.0/23
160.250.186.0/23
161.248.4.0/23
161.248.178.0/23
161.248.238.0/23
Signature Algorithm: sha256WithRSAEncryption
a9:6f:2c:db:84:2e:c7:a7:0b:83:4d:b4:6e:53:c2:c0:0e:ae:
62:33:80:3a:95:70:91:6b:82:f4:04:79:b1:be:e2:f3:08:fc:
1a:5c:0d:01:99:5c:94:cf:86:6f:d6:4c:dd:8d:56:d4:db:86:
81:2c:7f:45:fc:e7:57:8c:9d:e2:55:65:91:a5:c5:fd:18:8d:
9f:30:63:ed:ef:0e:ff:5d:52:e0:66:c7:24:cd:de:1d:63:cc:
bd:43:8d:de:f8:81:be:ba:95:b5:a9:51:dd:20:a3:ef:3e:e1:
df:68:a3:eb:50:28:d2:16:24:0f:d4:7c:48:ba:2e:41:28:2b:
78:80:1f:6d:e2:c8:4f:4c:e5:62:39:e8:02:da:36:49:52:8a:
cf:d3:6e:7e:d1:2c:e7:3c:8d:0d:9e:29:e9:ed:8e:f0:bb:d5:
4a:bf:28:11:76:79:dc:fc:39:44:18:55:38:a0:43:40:19:bc:
55:c6:56:51:1f:32:ec:0e:1c:cf:5f:89:b6:26:10:6c:88:91:
96:0a:eb:c7:58:3d:aa:45:3b:55:98:e4:ae:66:0d:9d:49:0c:
ec:ab:2a:6c:c9:01:f2:e6:f4:b0:1e:c8:a5:05:d7:a4:ac:ac:
36:91:32:df:46:81:8d:ea:88:48:ce:08:fc:ad:7d:dd:a3:32:
73:a3:c7:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 12:07:26 2025 by rpki-client