Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/F54578F06CED11F08EC76084C4F9AE02.roa
File: F54578F06CED11F08EC76084C4F9AE02.roa (raw, json)
Hash identifier: LL3xjpCmJ9vy4Vnd9B9wYeRXA/hw8U9XCxUroXdje7U=
Subject key identifier: 84:25:50:2E:C3:41:56:1B:5C:57:BF:E5:28:3E:E0:FD:C9:FC:23:ED
Certificate issuer: /CN=A91A560A/serialNumber=167C3B221775FEC05039468150CE814756AC6F0A
Certificate serial: 4BFA
Authority key identifier: 16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/F54578F06CED11F08EC76084C4F9AE02.roa
Signing time: Wed 30 Jul 2025 02:39:22 +0000
ROA not before: Wed 30 Jul 2025 02:39:22 +0000
ROA not after: Fri 31 Oct 2025 00:00:00 +0000
asID: 24086
IP address blocks: 103.84.76.0/22 maxlen: 24
116.96.0.0/16 maxlen: 24
116.97.0.0/17 maxlen: 24
116.97.128.0/19 maxlen: 24
116.97.160.0/20 maxlen: 24
116.97.176.0/21 maxlen: 24
116.97.192.0/18 maxlen: 24
116.98.0.0/16 maxlen: 24
116.99.0.0/16 maxlen: 24
116.100.0.0/16 maxlen: 24
116.101.0.0/16 maxlen: 24
116.102.0.0/16 maxlen: 24
116.103.0.0/18 maxlen: 24
116.103.64.0/19 maxlen: 24
116.103.96.0/21 maxlen: 24
116.103.112.0/20 maxlen: 24
116.103.128.0/17 maxlen: 24
116.104.0.0/16 maxlen: 24
116.105.0.0/16 maxlen: 24
116.106.0.0/16 maxlen: 24
116.107.0.0/16 maxlen: 24
116.108.0.0/16 maxlen: 24
116.109.0.0/16 maxlen: 24
116.110.0.0/16 maxlen: 24
116.111.0.0/17 maxlen: 24
116.111.128.0/19 maxlen: 24
116.111.160.0/20 maxlen: 24
116.111.184.0/21 maxlen: 24
125.214.32.0/23 maxlen: 24
125.214.34.0/24 maxlen: 24
125.214.36.0/22 maxlen: 24
125.214.40.0/23 maxlen: 24
125.214.42.0/24 maxlen: 24
125.214.44.0/23 maxlen: 24
125.214.46.0/24 maxlen: 24
171.242.6.0/24 maxlen: 24
203.190.160.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl
rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 14 Aug 2025 05:57:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 19450 (0x4bfa)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A560A, serialNumber=167C3B221775FEC05039468150CE814756AC6F0A
Validity
Not Before: Jul 30 02:39:22 2025 GMT
Not After : Oct 31 00:00:00 2025 GMT
Subject: CN=688985da-9d36
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:dd:38:ee:ef:b1:47:37:59:bd:18:8f:7b:61:
e5:e3:86:48:56:1e:36:c9:67:8b:14:cb:a8:aa:94:
ab:6a:38:30:38:4b:81:11:35:aa:0b:34:60:ae:a8:
ee:95:fd:57:62:4d:91:8e:22:fc:4a:f2:2d:84:71:
65:9a:a1:1a:ee:fa:1f:cb:36:cc:e7:42:de:6e:92:
b8:5b:be:70:db:00:71:60:0b:5a:8a:55:e9:e8:8c:
d9:94:ee:ba:1f:55:02:0d:e3:93:96:1a:b7:7c:85:
99:3d:16:b1:15:c3:6b:88:a3:5c:a0:e6:60:e3:12:
cf:89:84:19:48:03:0b:79:b7:c4:1e:2b:47:a6:c8:
e6:be:d9:5b:c2:12:a2:ea:7f:58:6f:11:79:f3:8c:
39:83:99:21:d8:1a:b2:6a:31:f5:b0:62:5b:3d:c9:
37:fb:41:d8:f5:ac:9d:6d:74:f9:b8:60:d4:cf:e8:
91:4b:6b:81:75:ad:b6:7f:98:27:8f:24:b5:13:49:
a1:d9:f4:e7:97:29:84:7c:e5:b9:9f:b5:1e:92:15:
79:e3:25:36:4f:a0:8f:5a:bd:c7:08:1c:b9:2e:7c:
b1:1f:b9:b9:43:5c:be:fb:0d:70:fc:f8:38:40:d5:
89:77:7c:7c:6b:59:fb:4f:aa:2f:13:2e:3a:39:2a:
1b:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:25:50:2E:C3:41:56:1B:5C:57:BF:E5:28:3E:E0:FD:C9:FC:23:ED
X509v3 Authority Key Identifier:
keyid:16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/F54578F06CED11F08EC76084C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.84.76.0/22
116.96.0.0-116.97.183.255
116.97.192.0-116.103.103.255
116.103.112.0-116.111.175.255
116.111.184.0/21
125.214.32.0-125.214.34.255
125.214.36.0-125.214.42.255
125.214.44.0-125.214.46.255
171.242.6.0/24
203.190.160.0/20
Signature Algorithm: sha256WithRSAEncryption
20:df:57:f5:44:3b:83:15:f8:8f:55:47:b0:59:68:10:99:43:
5e:79:56:10:22:85:da:7a:d9:4b:7f:5c:1a:6c:be:b4:48:4d:
09:b5:f5:e6:bd:cf:3c:56:ba:8a:2f:4b:e2:6b:a6:ec:df:9f:
28:c5:8c:42:2f:15:70:09:c9:a3:dd:59:d5:a0:b6:fd:53:b4:
10:10:c7:86:4d:2d:a8:e5:bd:05:57:f3:fd:d3:96:9b:c2:1b:
6a:c9:a7:d2:ec:2b:8d:cc:ad:38:24:5d:3c:06:0b:df:78:8c:
ea:99:71:66:c0:01:33:af:a8:c6:ba:4a:fc:80:a0:95:84:9a:
18:fc:9e:27:70:8e:f9:e2:e0:54:a5:ae:bd:42:74:61:e7:77:
08:2d:d4:0b:4a:b1:f3:4e:a7:1f:89:63:86:bf:3d:ce:92:df:
28:30:ab:58:7b:c1:13:40:3a:6c:fc:03:fe:56:ce:73:3c:f5:
0c:d9:84:45:55:2f:b0:c8:2e:e2:1f:3b:e3:ef:0f:b0:2e:f9:
09:88:59:f9:30:f7:54:bd:82:15:d2:d1:16:fe:77:af:0b:e1:
5b:7d:ce:7d:89:fb:63:09:ae:fa:61:0b:ff:b3:b3:81:61:2a:
23:f5:a0:91:e8:b0:cc:12:33:f1:6e:dd:e8:f9:28:02:cb:5d:
ee:38:14:df
-----BEGIN CERTIFICATE-----
MIIF1zCCBL+gAwIBAgICS/owDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QTU2MEExMTAvBgNVBAUTKDE2N0MzQjIyMTc3NUZFQzA1MDM5NDY4MTUwQ0U4MTQ3
NTZBQzZGMEEwHhcNMjUwNzMwMDIzOTIyWhcNMjUxMDMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02ODg5ODVkYS05ZDM2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA19047u+xRzdZvRiPe2Hl44ZIVh42yWeLFMuoqpSrajgwOEuBETWqCzRgrqju
lf1XYk2RjiL8SvIthHFlmqEa7vofyzbM50LebpK4W75w2wBxYAtailXp6IzZlO66
H1UCDeOTlhq3fIWZPRaxFcNriKNcoOZg4xLPiYQZSAMLebfEHitHpsjmvtlbwhKi
6n9YbxF584w5g5kh2BqyajH1sGJbPck3+0HY9aydbXT5uGDUz+iRS2uBda22f5gn
jyS1E0mh2fTnlymEfOW5n7UekhV54yU2T6CPWr3HCBy5LnyxH7m5Q1y++w1w/Pg4
QNWJd3x8a1n7T6ovEy46OSobhwIDAQABo4IC+zCCAvcwHQYDVR0OBBYEFIQlUC7D
QVYbXFe/5Sg+4P3J/CPtMB8GA1UdIwQYMBaAFBZ8OyIXdf7AUDlGgVDOgUdWrG8K
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNTYwQS9BQUVCMTkxQTFE
OEExMUUyQTM4N0QwRTQwOEIwMkNEMi9Gbnc3SWhkMV9zQlFPVWFCVU02QlIxYXNi
d28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0ZudzdJaGQxX3NCUU9VYUJVTTZCUjFhc2J3by5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
QTU2MEEvQUFFQjE5MUExRDhBMTFFMkEzODdEMEU0MDhCMDJDRDIvRjU0NTc4RjA2
Q0VEMTFGMDhFQzc2MDg0QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwgYQGCCsGAQUFBwEHAQH/
BHUwczBxBAIAATBrAwQCZ1RMMAsDAwV0YAMEA3RhsDAMAwQGdGHAAwQDdGdgMAwD
BAR0Z3ADBAR0b6ADBAN0b7gwDAMEBX3WIAMEAH3WIjAMAwQCfdYkAwQAfdYqMAwD
BAJ91iwDBAB91i4DBACr8gYDBATLvqAwDQYJKoZIhvcNAQELBQADggEBACDfV/VE
O4MV+I9VR7BZaBCZQ155VhAihdp62Ut/XBpsvrRITQm19ea9zzxWuoovS+Jrpuzf
nyjFjEIvFXAJyaPdWdWgtv1TtBAQx4ZNLajlvQVX8/3TlpvCG2rJp9LsK43MrTgk
XTwGC994jOqZcWbAATOvqMa6SvyAoJWEmhj8nidwjvni4FSlrr1CdGHndwgt1AtK
sfNOpx+JY4a/Pc6S3ygwq1h7wRNAOmz8A/5WznM89QzZhEVVL7DILuIfO+PvD7Au
+QmIWfkw91S9ghXS0Rb+d68L4Vt9zn2J+2MJrvphC/+zs4FhKiP1oJHosMwSM/Fu
3ej5KALLXe44FN8=
-----END CERTIFICATE-----
Generated at Thu Aug 7 17:33:01 2025 by rpki-client