Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91CD39D/DE7D2F944E7611ECA5720B79C4F9AE02/48CB7422E27911ED88B5A641C4F9AE02.roa
File: 48CB7422E27911ED88B5A641C4F9AE02.roa (raw, json)
Hash identifier: QmFCb1gnvXBWWYpq973wK4QQOQ9b3T0BnSVKwwKlbk4=
Subject key identifier: E3:4D:C5:45:A3:9B:64:FF:3A:99:9F:29:06:C2:15:C3:BA:4A:34:6A
Certificate issuer: /CN=A91CD39D/serialNumber=56B983E46BCBA115FF2265FE491909C7D74147F3
Certificate serial: 0600
Authority key identifier: 56:B9:83:E4:6B:CB:A1:15:FF:22:65:FE:49:19:09:C7:D7:41:47:F3
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VrmD5GvLoRX_ImX-SRkJx9dBR_M.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91CD39D/DE7D2F944E7611ECA5720B79C4F9AE02/48CB7422E27911ED88B5A641C4F9AE02.roa
Signing time: Sun 10 Aug 2025 04:10:16 +0000
ROA not before: Sun 10 Aug 2025 04:10:16 +0000
ROA not after: Mon 01 Dec 2025 00:00:00 +0000
asID: 55644
IP address blocks: 42.104.115.0/24 maxlen: 24
42.104.123.0/24 maxlen: 24
103.9.72.0/22 maxlen: 24
118.185.9.0/24 maxlen: 24
118.185.33.0/24 maxlen: 24
118.185.153.0/24 maxlen: 24
118.185.206.0/24 maxlen: 24
123.63.183.0/24 maxlen: 24
223.196.0.0/24 maxlen: 24
223.196.1.0/24 maxlen: 24
223.196.2.0/24 maxlen: 24
223.196.3.0/24 maxlen: 24
223.196.4.0/24 maxlen: 24
223.196.5.0/24 maxlen: 24
223.196.6.0/24 maxlen: 24
223.196.7.0/24 maxlen: 24
223.196.9.0/24 maxlen: 24
223.196.11.0/24 maxlen: 24
223.196.12.0/24 maxlen: 24
223.196.13.0/24 maxlen: 24
223.196.14.0/24 maxlen: 24
223.196.15.0/24 maxlen: 24
223.196.16.0/24 maxlen: 24
223.196.17.0/24 maxlen: 24
223.196.18.0/24 maxlen: 24
223.196.21.0/24 maxlen: 24
223.196.22.0/24 maxlen: 24
223.196.24.0/23 maxlen: 24
223.196.32.0/24 maxlen: 24
223.196.33.0/24 maxlen: 24
223.196.36.0/24 maxlen: 24
223.196.39.0/24 maxlen: 24
223.196.43.0/24 maxlen: 24
223.196.44.0/24 maxlen: 24
223.196.45.0/24 maxlen: 24
223.196.46.0/24 maxlen: 24
223.196.50.0/24 maxlen: 24
223.196.51.0/24 maxlen: 24
223.196.53.0/24 maxlen: 24
223.196.54.0/24 maxlen: 24
223.196.55.0/24 maxlen: 24
223.196.56.0/23 maxlen: 23
223.196.57.0/24 maxlen: 24
223.196.58.0/24 maxlen: 24
223.196.59.0/24 maxlen: 24
223.196.60.0/24 maxlen: 24
223.196.61.0/24 maxlen: 24
223.196.62.0/24 maxlen: 24
223.196.63.0/24 maxlen: 24
223.196.64.0/24 maxlen: 24
223.196.65.0/24 maxlen: 24
223.196.66.0/24 maxlen: 24
223.196.67.0/24 maxlen: 24
223.196.68.0/24 maxlen: 24
223.196.69.0/24 maxlen: 24
223.196.70.0/24 maxlen: 24
223.196.71.0/24 maxlen: 24
223.196.72.0/24 maxlen: 24
223.196.73.0/24 maxlen: 24
223.196.74.0/24 maxlen: 24
223.196.75.0/24 maxlen: 24
223.196.76.0/24 maxlen: 24
223.196.77.0/24 maxlen: 24
223.196.78.0/24 maxlen: 24
223.196.79.0/24 maxlen: 24
223.196.80.0/24 maxlen: 24
223.196.81.0/24 maxlen: 24
223.196.82.0/24 maxlen: 24
223.196.83.0/24 maxlen: 24
223.196.84.0/24 maxlen: 24
223.196.85.0/24 maxlen: 24
223.196.86.0/24 maxlen: 24
223.196.87.0/24 maxlen: 24
223.196.88.0/24 maxlen: 24
223.196.89.0/24 maxlen: 24
223.196.90.0/24 maxlen: 24
223.196.91.0/24 maxlen: 24
223.196.92.0/24 maxlen: 24
223.196.93.0/24 maxlen: 24
223.196.94.0/24 maxlen: 24
223.196.95.0/24 maxlen: 24
223.196.96.0/24 maxlen: 24
223.196.97.0/24 maxlen: 24
223.196.98.0/24 maxlen: 24
223.196.99.0/24 maxlen: 24
223.196.100.0/24 maxlen: 24
223.196.101.0/24 maxlen: 24
223.196.102.0/24 maxlen: 24
223.196.112.0/24 maxlen: 24
223.196.113.0/24 maxlen: 24
223.196.114.0/24 maxlen: 24
223.196.115.0/24 maxlen: 24
223.196.116.0/24 maxlen: 24
223.196.144.0/24 maxlen: 24
223.196.145.0/24 maxlen: 24
223.196.146.0/24 maxlen: 24
223.196.147.0/24 maxlen: 24
223.196.148.0/24 maxlen: 24
223.196.149.0/24 maxlen: 24
223.196.150.0/24 maxlen: 24
223.196.151.0/24 maxlen: 24
223.196.152.0/24 maxlen: 24
223.196.153.0/24 maxlen: 24
223.196.154.0/24 maxlen: 24
223.196.155.0/24 maxlen: 24
2400:c700::/32 maxlen: 32
2400:c700::/48 maxlen: 48
2400:c700:3::/48 maxlen: 48
2400:c700:4::/48 maxlen: 48
2400:c700:6::/48 maxlen: 48
2400:c700:7::/48 maxlen: 48
2400:c700:8::/48 maxlen: 48
2400:c700:10::/48 maxlen: 48
2400:c700:80::/48 maxlen: 48
2400:c700:81::/48 maxlen: 48
2400:c700:82::/48 maxlen: 48
2400:c700:83::/48 maxlen: 48
2400:c700:85::/48 maxlen: 48
2400:c700:86::/48 maxlen: 48
2400:c700:87::/48 maxlen: 48
2400:c700:100::/48 maxlen: 48
2400:c700:101::/48 maxlen: 48
2400:c700:102::/48 maxlen: 48
2400:c700:103::/48 maxlen: 48
2400:c700:104::/48 maxlen: 48
2400:c700:105::/48 maxlen: 48
2400:c700:180::/48 maxlen: 48
2400:c700:182::/48 maxlen: 48
2400:c700:183::/48 maxlen: 48
2400:c700:185::/48 maxlen: 48
2400:c700:186::/48 maxlen: 48
2400:c700:187::/48 maxlen: 48
2400:c700:200::/48 maxlen: 48
2400:c700:201::/48 maxlen: 48
2400:c700:202::/48 maxlen: 48
2400:c700:203::/48 maxlen: 48
2400:c700:204::/48 maxlen: 48
2400:c700:205::/48 maxlen: 48
2400:c700:280::/48 maxlen: 48
2400:c700:281::/48 maxlen: 48
2400:c700:282::/48 maxlen: 48
2400:c700:380::/48 maxlen: 48
2400:c700:1000::/36 maxlen: 36
2400:c700:1080::/48 maxlen: 48
2400:c700:1081::/48 maxlen: 48
2400:c700:1085::/48 maxlen: 48
2400:c700:1100::/48 maxlen: 48
2400:c700:1101::/48 maxlen: 48
2400:c700:1102::/48 maxlen: 48
2400:c700:1103::/48 maxlen: 48
2400:c700:1181::/48 maxlen: 48
2400:c700:1182::/48 maxlen: 48
2400:c700:1183::/48 maxlen: 48
2400:c700:1200::/48 maxlen: 48
2400:c700:1201::/48 maxlen: 48
2400:c700:1202::/48 maxlen: 48
2400:c700:1280::/48 maxlen: 48
2400:c700:1281::/48 maxlen: 48
2400:c700:1301::/48 maxlen: 48
2400:c700:2000::/48 maxlen: 48
2400:c700:3001::/48 maxlen: 48
2400:c700:4000::/48 maxlen: 48
2400:c700:4001::/48 maxlen: 48
2400:c700:5000::/48 maxlen: 48
2400:c700:9000::/48 maxlen: 48
2400:c700:a000::/48 maxlen: 48
2400:c700:b000::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91CD39D/DE7D2F944E7611ECA5720B79C4F9AE02/VrmD5GvLoRX_ImX-SRkJx9dBR_M.crl
rsync://rpki.apnic.net/member_repository/A91CD39D/DE7D2F944E7611ECA5720B79C4F9AE02/VrmD5GvLoRX_ImX-SRkJx9dBR_M.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VrmD5GvLoRX_ImX-SRkJx9dBR_M.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 14 Aug 2025 05:57:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1536 (0x600)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91CD39D, serialNumber=56B983E46BCBA115FF2265FE491909C7D74147F3
Validity
Not Before: Aug 10 04:10:16 2025 GMT
Not After : Dec 1 00:00:00 2025 GMT
Subject: CN=68981ba8-301b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:15:72:92:61:02:ef:c5:3d:e1:da:b3:4b:1f:
0b:f1:e9:c3:17:0e:3e:56:a9:88:b3:84:15:f6:45:
85:e1:0a:35:91:99:30:11:5c:4d:a0:7a:33:d0:e0:
92:00:dc:47:7d:80:cc:46:7f:a5:f6:47:c2:fb:bc:
b8:58:ef:bb:c0:a6:bf:f3:06:a0:7d:b2:bf:33:ac:
2d:76:ff:57:4a:03:43:a1:ad:08:20:cf:da:35:39:
72:ae:95:31:21:98:65:8f:79:e6:5c:29:42:b6:82:
0c:2a:00:9f:21:d9:43:04:d9:a7:ad:d4:96:a1:24:
c7:67:c3:82:c5:be:a2:a8:1f:09:6e:18:fd:44:94:
ef:39:01:75:6d:51:15:7c:3f:e6:33:97:5b:4f:3a:
37:6f:4d:d5:1c:9d:1d:48:ca:90:8a:8e:90:29:f7:
4d:e1:21:c1:2d:f7:50:2e:54:e1:1f:50:7d:d7:57:
b3:d7:f2:a5:75:e7:5b:09:c8:6f:75:fb:51:d9:30:
8f:d9:c9:30:37:64:23:05:8e:90:61:33:89:6b:09:
85:7d:be:71:c7:08:c5:2d:da:a1:64:63:59:56:6f:
6b:a9:13:d7:1e:b5:cf:4e:56:dc:92:0f:c6:00:44:
57:ea:b6:e3:1e:ed:83:3e:09:8b:ab:26:47:c7:86:
88:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:4D:C5:45:A3:9B:64:FF:3A:99:9F:29:06:C2:15:C3:BA:4A:34:6A
X509v3 Authority Key Identifier:
keyid:56:B9:83:E4:6B:CB:A1:15:FF:22:65:FE:49:19:09:C7:D7:41:47:F3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91CD39D/DE7D2F944E7611ECA5720B79C4F9AE02/VrmD5GvLoRX_ImX-SRkJx9dBR_M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VrmD5GvLoRX_ImX-SRkJx9dBR_M.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CD39D/DE7D2F944E7611ECA5720B79C4F9AE02/48CB7422E27911ED88B5A641C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
42.104.115.0/24
42.104.123.0/24
103.9.72.0/22
118.185.9.0/24
118.185.33.0/24
118.185.153.0/24
118.185.206.0/24
123.63.183.0/24
223.196.0.0/21
223.196.9.0/24
223.196.11.0-223.196.18.255
223.196.21.0-223.196.22.255
223.196.24.0/23
223.196.32.0/23
223.196.36.0/24
223.196.39.0/24
223.196.43.0-223.196.46.255
223.196.50.0/23
223.196.53.0-223.196.102.255
223.196.112.0-223.196.116.255
223.196.144.0-223.196.155.255
IPv6:
2400:c700::/32
Signature Algorithm: sha256WithRSAEncryption
86:11:a1:9f:d0:17:f9:09:92:b6:c8:ca:22:be:0c:59:fe:b8:
bc:9c:2a:27:4f:8d:09:90:7a:8e:2c:43:b9:25:0f:47:90:47:
82:9b:1b:39:98:29:b2:fe:f7:7c:6c:e5:25:97:fc:56:29:58:
fd:f8:06:a8:66:01:44:01:20:be:f9:d9:4e:39:46:40:a9:4f:
1f:6f:5a:14:b8:2d:53:84:00:cb:fa:b6:9b:03:87:d2:eb:7a:
a2:52:43:31:eb:3f:90:cf:5f:19:c7:bf:b9:da:ac:ff:e3:53:
e5:5f:fb:db:67:fa:9c:63:1d:8b:bc:d6:21:fd:7b:46:45:93:
18:c7:97:44:a4:df:2c:37:29:8f:76:db:bc:2a:11:a3:e3:5f:
aa:cd:e9:f7:04:1a:28:fd:c6:cb:c1:c0:77:af:ad:49:37:d8:
e2:53:b7:bb:e7:2a:16:99:34:85:cc:05:77:35:b2:37:e3:aa:
0e:d4:75:3c:db:94:30:f2:23:24:0d:d8:a1:75:51:fc:e0:32:
25:7c:ea:d7:c0:a4:a9:5e:63:18:db:05:06:78:d5:35:3e:58:
d3:5a:17:89:f8:0c:37:7e:48:bb:ed:bf:93:a5:b9:91:51:53:
36:d2:1c:7c:3d:dd:7d:0d:dc:91:80:db:29:68:e7:65:1d:72:
1a:7f:2f:5c
-----BEGIN CERTIFICATE-----
MIIGLTCCBRWgAwIBAgICBgAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
Q0QzOUQxMTAvBgNVBAUTKDU2Qjk4M0U0NkJDQkExMTVGRjIyNjVGRTQ5MTkwOUM3
RDc0MTQ3RjMwHhcNMjUwODEwMDQxMDE2WhcNMjUxMjAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02ODk4MWJhOC0zMDFiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAvRVykmEC78U94dqzSx8L8enDFw4+VqmIs4QV9kWF4Qo1kZkwEVxNoHoz0OCS
ANxHfYDMRn+l9kfC+7y4WO+7wKa/8wagfbK/M6wtdv9XSgNDoa0IIM/aNTlyrpUx
IZhlj3nmXClCtoIMKgCfIdlDBNmnrdSWoSTHZ8OCxb6iqB8Jbhj9RJTvOQF1bVEV
fD/mM5dbTzo3b03VHJ0dSMqQio6QKfdN4SHBLfdQLlThH1B911ez1/KldedbCchv
dftR2TCP2ckwN2QjBY6QYTOJawmFfb5xxwjFLdqhZGNZVm9rqRPXHrXPTlbckg/G
AERX6rbjHu2DPgmLqyZHx4aI5QIDAQABo4IDUTCCA00wHQYDVR0OBBYEFONNxUWj
m2T/OpmfKQbCFcO6SjRqMB8GA1UdIwQYMBaAFFa5g+Rry6EV/yJl/kkZCcfXQUfz
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRDM5RC9ERTdEMkY5NDRF
NzYxMUVDQTU3MjBCNzlDNEY5QUUwMi9Wcm1ENUd2TG9SWF9JbVgtU1JrSng5ZEJS
X00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1ZybUQ1R3ZMb1JYX0ltWC1TUmtKeDlkQlJfTS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
Q0QzOUQvREU3RDJGOTQ0RTc2MTFFQ0E1NzIwQjc5QzRGOUFFMDIvNDhDQjc0MjJF
Mjc5MTFFRDg4QjVBNjQxQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwgdoGCCsGAQUFBwEHAQH/
BIHKMIHHMIG1BAIAATCBrgMEACpocwMEACpoewMEAmcJSAMEAHa5CQMEAHa5IQME
AHa5mQMEAHa5zgMEAHs/twMEA9/EAAMEAN/ECTAMAwQA38QLAwQA38QSMAwDBADf
xBUDBADfxBYDBAHfxBgDBAHfxCADBADfxCQDBADfxCcwDAMEAN/EKwMEAN/ELgME
Ad/EMjAMAwQA38Q1AwQA38RmMAwDBATfxHADBADfxHQwDAMEBN/EkAMEAt/EmDAN
BAIAAjAHAwUAJADHADANBgkqhkiG9w0BAQsFAAOCAQEAhhGhn9AX+QmStsjKIr4M
Wf64vJwqJ0+NCZB6jixDuSUPR5BHgpsbOZgpsv73fGzlJZf8VilY/fgGqGYBRAEg
vvnZTjlGQKlPH29aFLgtU4QAy/q2mwOH0ut6olJDMes/kM9fGce/udqs/+NT5V/7
22f6nGMdi7zWIf17RkWTGMeXRKTfLDcpj3bbvCoRo+Nfqs3p9wQaKP3Gy8HAd6+t
STfY4lO3u+cqFpk0hcwFdzWyN+OqDtR1PNuUMPIjJA3YoXVR/OAyJXzq18CkqV5j
GNsFBnjVNT5Y01oXifgMN35Iu+2/k6W5kVFTNtIcfD3dfQ3ckYDbKWjnZR1yGn8v
XA==
-----END CERTIFICATE-----
Generated at Sun Aug 10 21:11:20 2025 by rpki-client