Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91AEB42/1AD97B646A6E11EDBB990363C4F9AE02/7F12211CB57611EF8568F73EC4F9AE02.roa
File: 7F12211CB57611EF8568F73EC4F9AE02.roa (raw, json)
Hash identifier: QrlNZWZs8aRcNpdGd2nxsOF2PbzqkSaJ3GAXtc2Zf30=
Subject key identifier: 90:68:BD:AD:3B:0C:81:90:19:77:68:3B:DF:3D:15:D7:20:A3:2A:A1
Certificate issuer: /CN=A91AEB42/serialNumber=56237928548B082F5B13C16EDC3E6A7C2F80FCF1
Certificate serial: 0224
Authority key identifier: 56:23:79:28:54:8B:08:2F:5B:13:C1:6E:DC:3E:6A:7C:2F:80:FC:F1
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ViN5KFSLCC9bE8Fu3D5qfC-A_PE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91AEB42/1AD97B646A6E11EDBB990363C4F9AE02/7F12211CB57611EF8568F73EC4F9AE02.roa
Signing time: Wed 23 Jul 2025 14:46:52 +0000
ROA not before: Wed 23 Jul 2025 14:46:52 +0000
ROA not after: Tue 30 Dec 2025 00:00:00 +0000
asID: 132839
IP address blocks: 43.229.212.0/22 maxlen: 24
43.230.168.0/22 maxlen: 24
43.240.48.0/22 maxlen: 24
43.241.44.0/22 maxlen: 24
43.249.24.0/22 maxlen: 24
43.251.104.0/22 maxlen: 24
45.64.108.0/22 maxlen: 24
45.114.168.0/22 maxlen: 24
45.115.124.0/22 maxlen: 24
45.120.80.0/22 maxlen: 24
45.127.36.0/22 maxlen: 24
45.127.124.0/22 maxlen: 24
45.250.196.0/22 maxlen: 24
103.36.20.0/22 maxlen: 24
103.37.40.0/22 maxlen: 24
103.40.112.0/22 maxlen: 24
103.42.176.0/22 maxlen: 24
103.49.8.0/22 maxlen: 24
103.49.248.0/22 maxlen: 24
103.54.124.0/22 maxlen: 24
103.55.128.0/22 maxlen: 24
103.60.148.0/22 maxlen: 24
103.75.12.0/22 maxlen: 24
103.75.44.0/22 maxlen: 24
103.80.16.0/22 maxlen: 24
103.85.188.0/22 maxlen: 24
103.151.250.0/23 maxlen: 24
103.195.192.0/22 maxlen: 24
103.196.60.0/22 maxlen: 24
103.200.124.0/22 maxlen: 24
103.204.76.0/22 maxlen: 24
103.214.164.0/22 maxlen: 24
103.215.212.0/22 maxlen: 24
103.219.104.0/22 maxlen: 24
103.233.248.0/22 maxlen: 24
116.193.168.0/22 maxlen: 24
117.120.60.0/22 maxlen: 24
120.89.68.0/22 maxlen: 24
121.54.160.0/22 maxlen: 24
144.48.124.0/22 maxlen: 24
157.119.92.0/22 maxlen: 24
182.161.68.0/22 maxlen: 24
202.165.120.0/22 maxlen: 24
2401:f940::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91AEB42/1AD97B646A6E11EDBB990363C4F9AE02/ViN5KFSLCC9bE8Fu3D5qfC-A_PE.crl
rsync://rpki.apnic.net/member_repository/A91AEB42/1AD97B646A6E11EDBB990363C4F9AE02/ViN5KFSLCC9bE8Fu3D5qfC-A_PE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ViN5KFSLCC9bE8Fu3D5qfC-A_PE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 14 Aug 2025 05:57:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 548 (0x224)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91AEB42, serialNumber=56237928548B082F5B13C16EDC3E6A7C2F80FCF1
Validity
Not Before: Jul 23 14:46:52 2025 GMT
Not After : Dec 30 00:00:00 2025 GMT
Subject: CN=6880f5dc-bc84
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:df:02:16:64:fd:5f:2a:cc:aa:07:b4:8f:f7:
6f:2d:83:39:eb:6c:64:11:48:11:47:5c:16:00:5a:
69:c0:f2:c3:95:60:d6:7f:ac:c5:b1:ab:16:df:ce:
b1:a2:a5:4d:ff:95:61:85:88:2b:17:e4:47:c7:95:
aa:09:89:e5:20:ec:cb:4c:f5:27:dc:e1:df:67:c1:
17:4d:20:e0:e8:8d:5e:ce:e0:39:75:50:74:92:6d:
7b:09:a4:5e:1f:59:4a:2f:c9:ee:b7:fd:c0:91:3e:
6f:05:75:61:99:ea:99:0a:73:ce:2d:31:a9:16:ed:
81:41:07:5f:33:d7:4e:e0:15:4a:e0:df:bc:99:27:
1c:9f:e1:1a:79:7c:4e:ba:2c:1e:03:57:0c:49:f4:
bf:74:73:17:45:58:33:54:d3:5b:fd:9c:90:9f:6e:
f7:c9:34:0a:4b:d6:c4:25:e7:a6:0c:59:5b:52:11:
83:e8:ee:2c:69:f4:30:c2:61:1e:08:07:22:10:c9:
3e:81:9e:58:84:f8:cf:cf:3a:0b:b0:bc:2c:79:53:
3a:5b:da:a4:f0:54:38:7c:e8:c7:89:49:e1:3c:bb:
e4:bc:7f:df:8a:a4:e8:d5:ca:a7:2e:0e:b9:5b:c1:
bf:83:51:d7:c0:fb:3f:2f:04:c8:f8:3c:70:12:a0:
8c:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:68:BD:AD:3B:0C:81:90:19:77:68:3B:DF:3D:15:D7:20:A3:2A:A1
X509v3 Authority Key Identifier:
keyid:56:23:79:28:54:8B:08:2F:5B:13:C1:6E:DC:3E:6A:7C:2F:80:FC:F1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91AEB42/1AD97B646A6E11EDBB990363C4F9AE02/ViN5KFSLCC9bE8Fu3D5qfC-A_PE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ViN5KFSLCC9bE8Fu3D5qfC-A_PE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AEB42/1AD97B646A6E11EDBB990363C4F9AE02/7F12211CB57611EF8568F73EC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
43.229.212.0/22
43.230.168.0/22
43.240.48.0/22
43.241.44.0/22
43.249.24.0/22
43.251.104.0/22
45.64.108.0/22
45.114.168.0/22
45.115.124.0/22
45.120.80.0/22
45.127.36.0/22
45.127.124.0/22
45.250.196.0/22
103.36.20.0/22
103.37.40.0/22
103.40.112.0/22
103.42.176.0/22
103.49.8.0/22
103.49.248.0/22
103.54.124.0/22
103.55.128.0/22
103.60.148.0/22
103.75.12.0/22
103.75.44.0/22
103.80.16.0/22
103.85.188.0/22
103.151.250.0/23
103.195.192.0/22
103.196.60.0/22
103.200.124.0/22
103.204.76.0/22
103.214.164.0/22
103.215.212.0/22
103.219.104.0/22
103.233.248.0/22
116.193.168.0/22
117.120.60.0/22
120.89.68.0/22
121.54.160.0/22
144.48.124.0/22
157.119.92.0/22
182.161.68.0/22
202.165.120.0/22
IPv6:
2401:f940::/32
Signature Algorithm: sha256WithRSAEncryption
ae:42:30:c7:84:ea:21:4c:ac:bf:81:05:89:da:18:36:56:d9:
a4:43:ba:55:33:09:5a:dd:a3:57:c7:ce:98:01:7d:b9:cb:01:
4b:96:24:d1:1a:a0:2c:5a:33:32:12:36:5e:20:10:47:72:fa:
28:66:e4:e6:34:27:e8:a1:36:5f:3a:48:79:9c:3a:93:a3:80:
dd:8f:2e:90:0e:a9:e8:8e:c7:0a:8d:81:97:71:fe:37:3a:0e:
de:e0:ac:9e:55:f1:71:48:13:af:6c:49:d7:18:cf:c0:71:73:
3c:c8:77:e1:c5:60:5b:b3:92:b0:2e:67:0b:08:4c:6f:5b:34:
85:7b:2f:64:83:d6:b7:12:10:bc:a7:0d:8c:3d:02:e5:4a:25:
b3:7f:71:21:de:84:9f:f8:43:d7:05:a7:35:f4:c6:b1:39:ae:
34:da:a8:27:5a:6a:a1:5b:1c:ef:36:dc:5a:0d:d1:11:22:c3:
54:67:29:5c:35:c8:80:2e:53:7a:d0:8e:3c:66:f3:ce:38:19:
d8:75:a5:f4:ce:14:28:a9:df:8c:6c:a0:47:7b:c6:e0:be:ce:
d7:72:8c:b4:ce:4c:ac:f4:ba:00:7d:c8:db:a3:9c:14:c5:6d:
d9:d3:c0:9b:49:1c:3f:4b:ee:b1:f0:b9:41:5c:09:e2:d5:9e:
f8:b8:5e:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 01:47:55 2025 by rpki-client