Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91CD39D/DE7D2F944E7611ECA5720B79C4F9AE02/48CB7422E27911ED88B5A641C4F9AE02.roa
File: 48CB7422E27911ED88B5A641C4F9AE02.roa (raw, json)
Hash identifier: L65I+FybEPptOXOi9Q669YnFolpt3Th7Afz2/fiIdIo=
Subject key identifier: 1A:B0:49:8A:4D:B8:F9:3E:8D:29:E7:3D:90:34:95:A2:43:6C:D9:07
Certificate issuer: /CN=A91CD39D/serialNumber=56B983E46BCBA115FF2265FE491909C7D74147F3
Certificate serial: 0639
Authority key identifier: 56:B9:83:E4:6B:CB:A1:15:FF:22:65:FE:49:19:09:C7:D7:41:47:F3
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VrmD5GvLoRX_ImX-SRkJx9dBR_M.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91CD39D/DE7D2F944E7611ECA5720B79C4F9AE02/48CB7422E27911ED88B5A641C4F9AE02.roa
Signing time: Mon 03 Nov 2025 00:14:28 +0000
ROA not before: Mon 03 Nov 2025 00:14:28 +0000
ROA not after: Sun 01 Mar 2026 00:00:00 +0000
asID: 55644
IP address blocks: 42.104.115.0/24 maxlen: 24
42.104.123.0/24 maxlen: 24
103.9.72.0/22 maxlen: 24
118.185.9.0/24 maxlen: 24
118.185.33.0/24 maxlen: 24
118.185.153.0/24 maxlen: 24
118.185.206.0/24 maxlen: 24
123.63.183.0/24 maxlen: 24
223.196.0.0/24 maxlen: 24
223.196.1.0/24 maxlen: 24
223.196.2.0/24 maxlen: 24
223.196.3.0/24 maxlen: 24
223.196.4.0/24 maxlen: 24
223.196.5.0/24 maxlen: 24
223.196.6.0/24 maxlen: 24
223.196.7.0/24 maxlen: 24
223.196.9.0/24 maxlen: 24
223.196.11.0/24 maxlen: 24
223.196.12.0/24 maxlen: 24
223.196.13.0/24 maxlen: 24
223.196.14.0/24 maxlen: 24
223.196.15.0/24 maxlen: 24
223.196.16.0/24 maxlen: 24
223.196.17.0/24 maxlen: 24
223.196.18.0/24 maxlen: 24
223.196.21.0/24 maxlen: 24
223.196.22.0/24 maxlen: 24
223.196.24.0/23 maxlen: 24
223.196.32.0/24 maxlen: 24
223.196.33.0/24 maxlen: 24
223.196.36.0/24 maxlen: 24
223.196.39.0/24 maxlen: 24
223.196.43.0/24 maxlen: 24
223.196.44.0/24 maxlen: 24
223.196.45.0/24 maxlen: 24
223.196.46.0/24 maxlen: 24
223.196.50.0/24 maxlen: 24
223.196.51.0/24 maxlen: 24
223.196.53.0/24 maxlen: 24
223.196.54.0/24 maxlen: 24
223.196.55.0/24 maxlen: 24
223.196.56.0/23 maxlen: 23
223.196.57.0/24 maxlen: 24
223.196.58.0/24 maxlen: 24
223.196.59.0/24 maxlen: 24
223.196.60.0/24 maxlen: 24
223.196.61.0/24 maxlen: 24
223.196.62.0/24 maxlen: 24
223.196.63.0/24 maxlen: 24
223.196.64.0/24 maxlen: 24
223.196.65.0/24 maxlen: 24
223.196.66.0/24 maxlen: 24
223.196.67.0/24 maxlen: 24
223.196.68.0/24 maxlen: 24
223.196.69.0/24 maxlen: 24
223.196.70.0/24 maxlen: 24
223.196.71.0/24 maxlen: 24
223.196.72.0/24 maxlen: 24
223.196.73.0/24 maxlen: 24
223.196.74.0/24 maxlen: 24
223.196.75.0/24 maxlen: 24
223.196.76.0/24 maxlen: 24
223.196.77.0/24 maxlen: 24
223.196.78.0/24 maxlen: 24
223.196.79.0/24 maxlen: 24
223.196.80.0/24 maxlen: 24
223.196.81.0/24 maxlen: 24
223.196.82.0/24 maxlen: 24
223.196.83.0/24 maxlen: 24
223.196.84.0/24 maxlen: 24
223.196.85.0/24 maxlen: 24
223.196.86.0/24 maxlen: 24
223.196.87.0/24 maxlen: 24
223.196.88.0/24 maxlen: 24
223.196.89.0/24 maxlen: 24
223.196.90.0/24 maxlen: 24
223.196.91.0/24 maxlen: 24
223.196.92.0/24 maxlen: 24
223.196.93.0/24 maxlen: 24
223.196.94.0/24 maxlen: 24
223.196.95.0/24 maxlen: 24
223.196.96.0/24 maxlen: 24
223.196.97.0/24 maxlen: 24
223.196.98.0/24 maxlen: 24
223.196.99.0/24 maxlen: 24
223.196.100.0/24 maxlen: 24
223.196.101.0/24 maxlen: 24
223.196.102.0/24 maxlen: 24
223.196.112.0/24 maxlen: 24
223.196.113.0/24 maxlen: 24
223.196.114.0/24 maxlen: 24
223.196.115.0/24 maxlen: 24
223.196.116.0/24 maxlen: 24
223.196.144.0/24 maxlen: 24
223.196.145.0/24 maxlen: 24
223.196.146.0/24 maxlen: 24
223.196.147.0/24 maxlen: 24
223.196.148.0/24 maxlen: 24
223.196.149.0/24 maxlen: 24
223.196.150.0/24 maxlen: 24
223.196.151.0/24 maxlen: 24
223.196.152.0/24 maxlen: 24
223.196.153.0/24 maxlen: 24
223.196.154.0/24 maxlen: 24
223.196.155.0/24 maxlen: 24
2400:c700::/32 maxlen: 32
2400:c700::/48 maxlen: 48
2400:c700:3::/48 maxlen: 48
2400:c700:4::/48 maxlen: 48
2400:c700:6::/48 maxlen: 48
2400:c700:7::/48 maxlen: 48
2400:c700:8::/48 maxlen: 48
2400:c700:10::/48 maxlen: 48
2400:c700:80::/48 maxlen: 48
2400:c700:81::/48 maxlen: 48
2400:c700:82::/48 maxlen: 48
2400:c700:83::/48 maxlen: 48
2400:c700:85::/48 maxlen: 48
2400:c700:86::/48 maxlen: 48
2400:c700:87::/48 maxlen: 48
2400:c700:100::/48 maxlen: 48
2400:c700:101::/48 maxlen: 48
2400:c700:102::/48 maxlen: 48
2400:c700:103::/48 maxlen: 48
2400:c700:104::/48 maxlen: 48
2400:c700:105::/48 maxlen: 48
2400:c700:180::/48 maxlen: 48
2400:c700:182::/48 maxlen: 48
2400:c700:183::/48 maxlen: 48
2400:c700:185::/48 maxlen: 48
2400:c700:186::/48 maxlen: 48
2400:c700:187::/48 maxlen: 48
2400:c700:200::/48 maxlen: 48
2400:c700:201::/48 maxlen: 48
2400:c700:202::/48 maxlen: 48
2400:c700:203::/48 maxlen: 48
2400:c700:204::/48 maxlen: 48
2400:c700:205::/48 maxlen: 48
2400:c700:280::/48 maxlen: 48
2400:c700:281::/48 maxlen: 48
2400:c700:282::/48 maxlen: 48
2400:c700:380::/48 maxlen: 48
2400:c700:1000::/36 maxlen: 36
2400:c700:1080::/48 maxlen: 48
2400:c700:1081::/48 maxlen: 48
2400:c700:1085::/48 maxlen: 48
2400:c700:1100::/48 maxlen: 48
2400:c700:1101::/48 maxlen: 48
2400:c700:1102::/48 maxlen: 48
2400:c700:1103::/48 maxlen: 48
2400:c700:1181::/48 maxlen: 48
2400:c700:1182::/48 maxlen: 48
2400:c700:1183::/48 maxlen: 48
2400:c700:1200::/48 maxlen: 48
2400:c700:1201::/48 maxlen: 48
2400:c700:1202::/48 maxlen: 48
2400:c700:1280::/48 maxlen: 48
2400:c700:1281::/48 maxlen: 48
2400:c700:1301::/48 maxlen: 48
2400:c700:2000::/48 maxlen: 48
2400:c700:3001::/48 maxlen: 48
2400:c700:4000::/48 maxlen: 48
2400:c700:4001::/48 maxlen: 48
2400:c700:5000::/48 maxlen: 48
2400:c700:9000::/48 maxlen: 48
2400:c700:a000::/48 maxlen: 48
2400:c700:b000::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91CD39D/DE7D2F944E7611ECA5720B79C4F9AE02/VrmD5GvLoRX_ImX-SRkJx9dBR_M.crl
rsync://rpki.apnic.net/member_repository/A91CD39D/DE7D2F944E7611ECA5720B79C4F9AE02/VrmD5GvLoRX_ImX-SRkJx9dBR_M.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VrmD5GvLoRX_ImX-SRkJx9dBR_M.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 12 Nov 2025 00:00:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1593 (0x639)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91CD39D, serialNumber=56B983E46BCBA115FF2265FE491909C7D74147F3
Validity
Not Before: Nov 3 00:14:28 2025 GMT
Not After : Mar 1 00:00:00 2026 GMT
Subject: CN=6907f3e3-5ded
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:1d:0f:82:d9:ce:cc:f4:47:35:c5:26:1a:b9:
7a:f8:aa:10:6f:2a:a9:53:0d:fd:7e:ad:ad:f5:4b:
49:30:af:2d:6f:89:33:53:b4:91:a6:d0:e5:76:8f:
67:ba:35:87:b4:72:6c:6e:0b:30:37:09:30:8f:83:
e5:6a:96:d4:cd:ac:04:a2:58:f8:2a:e1:15:01:73:
8c:91:80:6f:36:ea:94:87:cc:6d:4c:4e:93:1f:2d:
c6:cf:c1:2b:c3:b1:17:da:dc:18:5e:ee:ac:21:ba:
76:8e:22:53:2d:2a:83:21:fa:91:f2:c8:14:ff:b5:
78:dd:18:e9:8c:0d:22:cc:13:77:4b:20:05:81:45:
8c:96:18:e5:43:37:5c:f9:8d:61:95:a5:ac:cb:5d:
de:d9:59:98:f2:52:41:3f:1c:4b:db:8f:d0:a1:dd:
72:fc:ff:cd:61:16:67:69:7c:70:d0:64:8e:57:15:
f2:b9:26:b2:5d:58:8d:fc:7b:5c:b1:22:e8:08:f2:
61:e0:b5:bb:75:52:f4:e3:92:78:3a:83:4c:cd:1e:
b7:61:c8:b2:f8:19:38:cc:f9:9b:e2:a0:37:d8:2a:
54:e0:72:6d:28:73:f9:d8:1a:10:a7:50:55:e2:d4:
a3:77:73:15:ed:d2:4a:8b:fa:02:cb:1f:e8:bc:a3:
39:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:B0:49:8A:4D:B8:F9:3E:8D:29:E7:3D:90:34:95:A2:43:6C:D9:07
X509v3 Authority Key Identifier:
keyid:56:B9:83:E4:6B:CB:A1:15:FF:22:65:FE:49:19:09:C7:D7:41:47:F3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91CD39D/DE7D2F944E7611ECA5720B79C4F9AE02/VrmD5GvLoRX_ImX-SRkJx9dBR_M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VrmD5GvLoRX_ImX-SRkJx9dBR_M.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CD39D/DE7D2F944E7611ECA5720B79C4F9AE02/48CB7422E27911ED88B5A641C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
42.104.115.0/24
42.104.123.0/24
103.9.72.0/22
118.185.9.0/24
118.185.33.0/24
118.185.153.0/24
118.185.206.0/24
123.63.183.0/24
223.196.0.0/21
223.196.9.0/24
223.196.11.0-223.196.18.255
223.196.21.0-223.196.22.255
223.196.24.0/23
223.196.32.0/23
223.196.36.0/24
223.196.39.0/24
223.196.43.0-223.196.46.255
223.196.50.0/23
223.196.53.0-223.196.102.255
223.196.112.0-223.196.116.255
223.196.144.0-223.196.155.255
IPv6:
2400:c700::/32
Signature Algorithm: sha256WithRSAEncryption
4d:cd:fd:6b:1b:50:1e:15:d2:4a:c4:14:3a:f7:66:5e:8b:3b:
06:49:4a:5d:c3:7e:0d:67:62:64:3b:4d:4a:44:9a:9c:2b:6b:
15:88:d7:d1:e6:51:0e:d5:f6:1a:da:42:28:0e:75:b2:c1:57:
f0:1d:f2:7b:fd:6a:a0:5a:f0:3e:b1:2d:61:0e:a0:5e:78:1c:
a2:6e:67:1c:69:c4:56:d3:71:02:ba:7b:fd:87:7e:1f:0f:9c:
7d:f0:20:73:ac:fe:ab:46:9f:20:ca:66:d2:7d:83:be:c0:b6:
5d:b5:78:54:76:1d:1d:ae:d8:81:a4:0c:36:60:27:58:69:ef:
af:83:53:b5:bd:9d:c4:1c:6e:e1:65:c4:b6:41:ce:72:5f:0e:
3d:15:8f:20:81:f3:3d:e3:55:0b:fa:22:cb:a3:cd:88:10:c9:
f4:0a:e5:34:e1:3f:e9:e9:95:61:30:92:5b:72:df:95:4e:46:
3a:7f:03:4e:a5:f1:69:fe:5d:a5:71:0b:7a:07:78:09:f6:eb:
74:3a:a5:77:ca:8c:82:95:30:bb:c1:db:c2:fd:3a:8d:af:3f:
35:50:8d:05:d8:85:72:a3:b1:a3:3d:2f:d1:c3:b3:54:d0:e7:
a0:fc:c2:89:f1:dc:41:64:6d:bb:dc:70:40:87:96:7b:62:89:
88:11:b3:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 11:46:49 2025 by rpki-client