Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91CD39D/DE7D2F944E7611ECA5720B79C4F9AE02/1E4EDD1A038411EF9EA1DE1DC4F9AE02.roa
File: 1E4EDD1A038411EF9EA1DE1DC4F9AE02.roa (raw, json)
Hash identifier: A2ygxvr9PN0f2GmPnzr/pvOkxXlgbKwoY3C25qzAOpk=
Subject key identifier: 06:83:B5:03:52:F3:D9:7E:2A:CF:5B:EE:ED:81:4A:28:33:BC:AB:F8
Certificate issuer: /CN=A91CD39D/serialNumber=56B983E46BCBA115FF2265FE491909C7D74147F3
Certificate serial: 05FF
Authority key identifier: 56:B9:83:E4:6B:CB:A1:15:FF:22:65:FE:49:19:09:C7:D7:41:47:F3
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VrmD5GvLoRX_ImX-SRkJx9dBR_M.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91CD39D/DE7D2F944E7611ECA5720B79C4F9AE02/1E4EDD1A038411EF9EA1DE1DC4F9AE02.roa
Signing time: Sun 10 Aug 2025 04:10:15 +0000
ROA not before: Sun 10 Aug 2025 04:10:15 +0000
ROA not after: Mon 01 Dec 2025 00:00:00 +0000
asID: 55410
IP address blocks: 42.104.64.0/21 maxlen: 24
42.104.72.0/21 maxlen: 24
42.104.80.0/21 maxlen: 24
42.104.88.0/21 maxlen: 24
42.104.96.0/21 maxlen: 24
42.104.104.0/21 maxlen: 24
42.104.112.0/21 maxlen: 24
42.104.120.0/21 maxlen: 24
42.105.253.0/24 maxlen: 24
43.245.88.0/22 maxlen: 24
103.29.44.0/22 maxlen: 24
112.79.32.0/24 maxlen: 24
118.185.0.0/16 maxlen: 16
118.185.0.0/21 maxlen: 24
118.185.8.0/21 maxlen: 24
118.185.16.0/21 maxlen: 24
118.185.24.0/21 maxlen: 21
118.185.24.0/24 maxlen: 24
118.185.25.0/24 maxlen: 24
118.185.26.0/24 maxlen: 24
118.185.27.0/24 maxlen: 24
118.185.28.0/24 maxlen: 24
118.185.29.0/24 maxlen: 24
118.185.30.0/24 maxlen: 24
118.185.31.0/24 maxlen: 24
118.185.32.0/21 maxlen: 24
118.185.40.0/21 maxlen: 24
118.185.48.0/21 maxlen: 24
118.185.56.0/21 maxlen: 24
118.185.64.0/21 maxlen: 24
118.185.72.0/21 maxlen: 24
118.185.80.0/21 maxlen: 24
118.185.88.0/21 maxlen: 24
118.185.96.0/21 maxlen: 21
118.185.97.0/24 maxlen: 24
118.185.98.0/24 maxlen: 24
118.185.99.0/24 maxlen: 24
118.185.100.0/24 maxlen: 24
118.185.101.0/24 maxlen: 24
118.185.102.0/24 maxlen: 24
118.185.103.0/24 maxlen: 24
118.185.104.0/21 maxlen: 24
118.185.112.0/21 maxlen: 24
118.185.120.0/21 maxlen: 24
118.185.128.0/20 maxlen: 21
118.185.128.0/24 maxlen: 24
118.185.129.0/24 maxlen: 24
118.185.130.0/24 maxlen: 24
118.185.131.0/24 maxlen: 24
118.185.132.0/24 maxlen: 24
118.185.133.0/24 maxlen: 24
118.185.134.0/24 maxlen: 24
118.185.135.0/24 maxlen: 24
118.185.136.0/24 maxlen: 24
118.185.137.0/24 maxlen: 24
118.185.138.0/24 maxlen: 24
118.185.139.0/24 maxlen: 24
118.185.140.0/24 maxlen: 24
118.185.141.0/24 maxlen: 24
118.185.142.0/24 maxlen: 24
118.185.143.0/24 maxlen: 24
118.185.144.0/21 maxlen: 24
118.185.152.0/21 maxlen: 24
118.185.160.0/21 maxlen: 24
118.185.168.0/21 maxlen: 24
118.185.176.0/21 maxlen: 24
118.185.184.0/21 maxlen: 24
118.185.192.0/21 maxlen: 24
118.185.200.0/21 maxlen: 24
118.185.208.0/21 maxlen: 24
118.185.216.0/21 maxlen: 24
118.185.224.0/21 maxlen: 24
118.185.232.0/21 maxlen: 24
118.185.240.0/21 maxlen: 24
118.185.248.0/21 maxlen: 24
122.15.0.0/16 maxlen: 16
122.15.0.0/21 maxlen: 24
122.15.8.0/21 maxlen: 24
122.15.16.0/21 maxlen: 24
122.15.24.0/21 maxlen: 24
122.15.32.0/21 maxlen: 24
122.15.40.0/21 maxlen: 24
122.15.48.0/21 maxlen: 24
122.15.56.0/21 maxlen: 24
122.15.64.0/21 maxlen: 24
122.15.72.0/21 maxlen: 24
122.15.80.0/21 maxlen: 24
122.15.88.0/21 maxlen: 24
122.15.96.0/21 maxlen: 24
122.15.104.0/21 maxlen: 24
122.15.112.0/21 maxlen: 24
122.15.120.0/21 maxlen: 24
122.15.128.0/21 maxlen: 24
122.15.136.0/21 maxlen: 24
122.15.144.0/21 maxlen: 24
122.15.152.0/21 maxlen: 24
122.15.160.0/21 maxlen: 24
122.15.168.0/21 maxlen: 24
122.15.176.0/21 maxlen: 24
122.15.184.0/21 maxlen: 24
122.15.192.0/21 maxlen: 24
122.15.200.0/21 maxlen: 24
122.15.208.0/21 maxlen: 24
122.15.216.0/21 maxlen: 24
122.15.224.0/21 maxlen: 24
122.15.232.0/21 maxlen: 24
122.15.240.0/21 maxlen: 24
122.15.248.0/21 maxlen: 24
123.63.0.0/16 maxlen: 16
123.63.0.0/21 maxlen: 24
123.63.8.0/21 maxlen: 24
123.63.16.0/21 maxlen: 24
123.63.24.0/21 maxlen: 24
123.63.32.0/21 maxlen: 24
123.63.40.0/21 maxlen: 24
123.63.48.0/21 maxlen: 24
123.63.56.0/21 maxlen: 24
123.63.64.0/21 maxlen: 24
123.63.72.0/21 maxlen: 24
123.63.80.0/21 maxlen: 24
123.63.88.0/21 maxlen: 24
123.63.96.0/21 maxlen: 24
123.63.104.0/21 maxlen: 24
123.63.112.0/21 maxlen: 24
123.63.120.0/21 maxlen: 24
123.63.128.0/18 maxlen: 18
123.63.128.0/20 maxlen: 24
123.63.144.0/21 maxlen: 24
123.63.152.0/21 maxlen: 24
123.63.160.0/19 maxlen: 19
123.63.160.0/21 maxlen: 24
123.63.168.0/21 maxlen: 24
123.63.176.0/21 maxlen: 24
123.63.184.0/21 maxlen: 24
123.63.192.0/18 maxlen: 18
123.63.192.0/21 maxlen: 24
123.63.200.0/21 maxlen: 24
123.63.208.0/21 maxlen: 24
123.63.216.0/21 maxlen: 24
123.63.224.0/19 maxlen: 19
123.63.224.0/21 maxlen: 24
123.63.232.0/21 maxlen: 24
123.63.240.0/21 maxlen: 24
123.63.248.0/21 maxlen: 24
124.247.192.0/24 maxlen: 24
124.247.193.0/24 maxlen: 24
124.247.194.0/24 maxlen: 24
124.247.198.0/24 maxlen: 24
124.247.199.0/24 maxlen: 24
124.247.201.0/24 maxlen: 24
124.247.203.0/24 maxlen: 24
124.247.204.0/24 maxlen: 24
124.247.205.0/24 maxlen: 24
124.247.224.0/24 maxlen: 24
124.247.228.0/24 maxlen: 24
124.247.229.0/24 maxlen: 24
124.247.230.0/24 maxlen: 24
124.247.231.0/24 maxlen: 24
124.247.232.0/24 maxlen: 24
124.247.233.0/24 maxlen: 24
124.247.234.0/24 maxlen: 24
124.247.235.0/24 maxlen: 24
124.247.236.0/24 maxlen: 24
182.19.0.0/19 maxlen: 19
182.19.0.0/20 maxlen: 24
182.19.16.0/20 maxlen: 24
182.19.32.0/19 maxlen: 19
182.19.32.0/20 maxlen: 24
182.19.48.0/20 maxlen: 24
182.19.64.0/20 maxlen: 24
182.19.80.0/21 maxlen: 24
182.19.88.0/21 maxlen: 24
182.19.96.0/19 maxlen: 24
223.196.18.0/24 maxlen: 24
223.196.25.0/24 maxlen: 24
223.196.36.0/24 maxlen: 24
223.196.39.0/24 maxlen: 24
2400:5200:401::/48 maxlen: 48
2400:5200:402::/48 maxlen: 48
2400:5200:403::/48 maxlen: 48
2400:5200:404::/48 maxlen: 48
2400:5200:c00::/40 maxlen: 48
2400:5200:1000::/40 maxlen: 48
2400:5200:1400::/40 maxlen: 48
2400:5200:1800::/40 maxlen: 48
2400:5200:1c00::/40 maxlen: 48
2400:5200:2000::/36 maxlen: 48
2400:5200:3000::/36 maxlen: 48
2400:5200:4000::/36 maxlen: 48
2400:5200:5000::/36 maxlen: 48
2400:5200:6000::/36 maxlen: 48
2400:5200:7000::/36 maxlen: 48
2400:5200:8000::/36 maxlen: 48
2400:5200:9000::/36 maxlen: 48
2400:5200:a000::/36 maxlen: 48
2400:5200:b000::/36 maxlen: 48
2400:5200:c000::/36 maxlen: 48
2400:5200:d000::/36 maxlen: 48
2400:5200:e000::/36 maxlen: 48
2400:5200:f000::/36 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91CD39D/DE7D2F944E7611ECA5720B79C4F9AE02/VrmD5GvLoRX_ImX-SRkJx9dBR_M.crl
rsync://rpki.apnic.net/member_repository/A91CD39D/DE7D2F944E7611ECA5720B79C4F9AE02/VrmD5GvLoRX_ImX-SRkJx9dBR_M.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VrmD5GvLoRX_ImX-SRkJx9dBR_M.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 14 Aug 2025 05:57:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1535 (0x5ff)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91CD39D, serialNumber=56B983E46BCBA115FF2265FE491909C7D74147F3
Validity
Not Before: Aug 10 04:10:15 2025 GMT
Not After : Dec 1 00:00:00 2025 GMT
Subject: CN=68981ba7-c7e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:e5:11:05:77:11:8e:77:e6:3a:0f:f0:bc:71:
9c:0d:e1:46:22:84:ca:a1:80:c3:f3:14:09:e7:a5:
01:8b:8f:c3:b2:7c:cf:c3:ff:9c:c4:62:7d:c1:6d:
86:f6:cd:b3:ba:98:c5:b5:ac:b7:61:24:c6:05:0c:
a2:cf:2f:28:a2:88:c9:c9:21:03:22:8a:5f:78:ca:
81:0a:ae:d7:9a:d5:6a:6c:f0:ee:4c:b2:0f:a5:9f:
d0:0b:68:42:a3:2e:93:b1:7c:88:5b:20:5b:50:e0:
68:38:db:cc:92:a6:ef:38:dd:52:9b:63:68:4c:3a:
98:85:4f:e7:ae:e1:9d:ea:e8:a9:1a:09:4a:b6:60:
bf:c6:01:0d:16:5e:63:bf:f9:f4:56:e5:3a:ae:01:
39:c4:98:c8:40:16:5a:5a:9e:50:71:1f:1a:ba:19:
3b:e6:62:fc:92:64:56:9f:11:aa:9f:78:d4:e0:e9:
d1:68:3c:f9:b6:37:42:7b:e7:cc:85:7b:b0:13:67:
4a:6e:01:04:f9:d9:61:4e:75:5c:aa:7f:77:c9:24:
2f:1d:89:cb:38:c7:84:78:3f:e4:7d:ce:4d:ad:34:
28:6a:a5:b8:28:2f:df:a1:8a:2c:4d:9d:be:09:a0:
42:d1:c1:67:a6:25:fd:94:9a:f6:94:7f:c5:cf:ef:
fc:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:83:B5:03:52:F3:D9:7E:2A:CF:5B:EE:ED:81:4A:28:33:BC:AB:F8
X509v3 Authority Key Identifier:
keyid:56:B9:83:E4:6B:CB:A1:15:FF:22:65:FE:49:19:09:C7:D7:41:47:F3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91CD39D/DE7D2F944E7611ECA5720B79C4F9AE02/VrmD5GvLoRX_ImX-SRkJx9dBR_M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VrmD5GvLoRX_ImX-SRkJx9dBR_M.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CD39D/DE7D2F944E7611ECA5720B79C4F9AE02/1E4EDD1A038411EF9EA1DE1DC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
42.104.64.0/18
42.105.253.0/24
43.245.88.0/22
103.29.44.0/22
112.79.32.0/24
118.185.0.0/16
122.15.0.0/16
123.63.0.0/16
124.247.192.0-124.247.194.255
124.247.198.0/23
124.247.201.0/24
124.247.203.0-124.247.205.255
124.247.224.0/24
124.247.228.0-124.247.236.255
182.19.0.0/17
223.196.18.0/24
223.196.25.0/24
223.196.36.0/24
223.196.39.0/24
IPv6:
2400:5200:401::-2400:5200:404:ffff:ffff:ffff:ffff:ffff
2400:5200:c00::/40
2400:5200:1000::/40
2400:5200:1400::/40
2400:5200:1800::/40
2400:5200:1c00::/40
2400:5200:2000::-2400:5200:ffff:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
60:be:1c:4b:c5:96:0b:18:1a:24:c2:65:6b:32:14:fc:d7:6e:
97:29:68:42:cb:22:e8:2c:f0:b9:36:0f:f7:8a:7b:e9:f0:d4:
cd:18:46:e7:37:5a:b5:58:d0:48:c7:49:72:4d:09:87:d4:98:
9f:c8:fa:a3:10:6f:43:7d:08:bc:84:6c:88:de:94:4b:05:15:
bb:6a:66:df:97:58:e2:18:d5:56:1d:dc:df:f1:09:9c:08:d0:
87:71:bc:ab:d6:cb:b8:7f:ee:79:b3:12:66:8f:7a:bc:02:e4:
e7:58:62:a0:dd:0c:08:6b:3e:8e:7d:9e:df:b8:09:4e:07:f0:
db:0d:91:81:da:42:83:f6:1b:b5:f1:5a:86:35:3e:f7:ca:7e:
bb:74:92:a5:52:86:8b:14:9c:8e:75:b7:79:aa:87:de:3f:0b:
49:25:60:11:07:11:2f:cc:fe:9f:d8:cc:4e:9f:9b:b8:34:8a:
83:97:e6:9b:47:7b:55:50:70:58:c3:87:2f:fb:91:4a:8d:c4:
f9:af:3d:ef:4e:56:54:57:8d:86:65:57:7f:7b:36:9b:2a:e0:
eb:f2:20:ac:2f:5e:ee:0a:b6:62:c9:16:33:a0:81:08:8e:f7:
c3:b1:25:ab:a1:4e:cd:bc:b7:56:a7:ba:c4:e3:76:f0:d4:38:
00:e5:01:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 04:17:40 2025 by rpki-client