Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91CEBCA/B588B4A61D8811E28CAE8FE108B02CD2/F175093C71A411F09351784AC4F9AE02.roa
File: F175093C71A411F09351784AC4F9AE02.roa (raw, json)
Hash identifier: sX+/MXQGa3XOHWne5n8WyzQHADebdwQ8tiP703yRh44=
Subject key identifier: 9A:9F:7E:36:74:D0:5F:2B:E3:A6:21:A1:BD:28:5F:86:B2:51:8A:39
Certificate issuer: /CN=A91CEBCA/serialNumber=FE826EE9BC12DAAD3B197471B0413F1EB2082635
Certificate serial: 34D5
Authority key identifier: FE:82:6E:E9:BC:12:DA:AD:3B:19:74:71:B0:41:3F:1E:B2:08:26:35
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_oJu6bwS2q07GXRxsEE_HrIIJjU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91CEBCA/B588B4A61D8811E28CAE8FE108B02CD2/F175093C71A411F09351784AC4F9AE02.roa
Signing time: Tue 05 Aug 2025 02:36:09 +0000
ROA not before: Tue 05 Aug 2025 02:36:09 +0000
ROA not after: Thu 28 May 2026 00:00:00 +0000
asID: 17666
IP address blocks: 43.246.164.0/24 maxlen: 24
43.246.166.0/24 maxlen: 24
43.246.167.0/24 maxlen: 24
111.67.32.0/24 maxlen: 24
111.67.33.0/24 maxlen: 24
111.67.34.0/24 maxlen: 24
111.67.35.0/24 maxlen: 24
111.67.38.0/24 maxlen: 24
111.67.39.0/24 maxlen: 24
111.67.42.0/24 maxlen: 24
111.67.43.0/24 maxlen: 24
111.67.44.0/24 maxlen: 24
111.67.45.0/24 maxlen: 24
111.67.46.0/24 maxlen: 24
111.67.47.0/24 maxlen: 24
202.9.96.0/22 maxlen: 22
202.9.100.0/24 maxlen: 24
202.9.101.0/24 maxlen: 24
202.9.102.0/24 maxlen: 24
202.9.103.0/24 maxlen: 24
202.9.104.0/23 maxlen: 24
202.9.106.0/24 maxlen: 24
202.9.107.0/24 maxlen: 24
202.87.96.0/22 maxlen: 22
202.87.96.0/24 maxlen: 24
202.87.97.0/24 maxlen: 24
202.87.98.0/24 maxlen: 24
202.87.99.0/24 maxlen: 24
202.87.104.0/24 maxlen: 24
202.87.105.0/24 maxlen: 24
202.87.106.0/24 maxlen: 24
202.87.107.0/24 maxlen: 24
202.87.108.0/24 maxlen: 24
202.87.109.0/24 maxlen: 24
202.87.110.0/24 maxlen: 24
202.87.111.0/24 maxlen: 24
202.87.116.0/24 maxlen: 24
202.87.117.0/24 maxlen: 24
202.87.118.0/24 maxlen: 24
202.87.119.0/24 maxlen: 24
202.87.124.0/24 maxlen: 24
202.87.125.0/24 maxlen: 24
202.87.126.0/24 maxlen: 24
202.87.127.0/24 maxlen: 24
2401:200::/32 maxlen: 32
2401:200::/36 maxlen: 36
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91CEBCA/B588B4A61D8811E28CAE8FE108B02CD2/_oJu6bwS2q07GXRxsEE_HrIIJjU.crl
rsync://rpki.apnic.net/member_repository/A91CEBCA/B588B4A61D8811E28CAE8FE108B02CD2/_oJu6bwS2q07GXRxsEE_HrIIJjU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_oJu6bwS2q07GXRxsEE_HrIIJjU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 14 Aug 2025 05:57:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13525 (0x34d5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91CEBCA, serialNumber=FE826EE9BC12DAAD3B197471B0413F1EB2082635
Validity
Not Before: Aug 5 02:36:09 2025 GMT
Not After : May 28 00:00:00 2026 GMT
Subject: CN=68916e19-d03f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:f6:40:0d:f9:83:b8:72:a0:d5:7e:e1:c1:66:
f3:75:3f:11:7e:80:9a:5e:1a:63:13:0a:44:b6:8b:
12:b2:49:57:9c:30:b7:67:90:41:0c:49:2e:e3:3b:
36:4d:64:91:e5:13:58:00:ee:b2:14:e8:0d:f2:00:
f6:20:e9:15:9f:51:9c:c8:81:c5:65:7e:5c:4d:f6:
2a:44:2b:33:6e:cd:5d:11:07:e5:73:89:ca:b6:64:
4d:df:bf:3e:65:d2:ef:54:b3:6d:55:61:cb:ee:c7:
89:e1:d8:63:62:36:d9:4e:7e:79:08:37:ef:39:b4:
ff:76:e7:73:ca:2b:6f:89:16:3f:1c:cd:39:aa:20:
54:b5:03:f1:f2:a5:0b:44:de:4b:a0:b8:ae:4f:a8:
2f:5a:2f:f3:9a:70:86:ee:6a:74:83:bb:6d:53:f7:
58:b7:52:46:be:f0:e5:6c:28:7a:4e:5c:4f:8c:f7:
bd:cd:62:5c:ac:e3:59:c8:b9:9e:69:75:06:fd:dd:
2e:ea:f6:8a:af:8d:74:06:04:aa:3d:4f:f4:11:a7:
bb:67:2b:16:11:b0:c3:e0:3c:45:9b:50:87:3a:ac:
cb:ad:fc:18:79:49:65:00:e4:17:76:7a:4e:b5:c7:
74:c4:43:a0:2e:99:4f:6a:d3:32:4e:3e:66:58:d2:
ca:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:9F:7E:36:74:D0:5F:2B:E3:A6:21:A1:BD:28:5F:86:B2:51:8A:39
X509v3 Authority Key Identifier:
keyid:FE:82:6E:E9:BC:12:DA:AD:3B:19:74:71:B0:41:3F:1E:B2:08:26:35
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91CEBCA/B588B4A61D8811E28CAE8FE108B02CD2/_oJu6bwS2q07GXRxsEE_HrIIJjU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_oJu6bwS2q07GXRxsEE_HrIIJjU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CEBCA/B588B4A61D8811E28CAE8FE108B02CD2/F175093C71A411F09351784AC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
43.246.164.0/24
43.246.166.0/23
111.67.32.0/22
111.67.38.0/23
111.67.42.0-111.67.47.255
202.9.96.0-202.9.107.255
202.87.96.0/22
202.87.104.0/21
202.87.116.0/22
202.87.124.0/22
IPv6:
2401:200::/32
Signature Algorithm: sha256WithRSAEncryption
71:d8:1d:c0:b4:20:20:4d:74:5d:a5:dc:4e:d9:ff:33:12:6d:
b4:7d:8d:a0:3e:b8:90:d8:f0:72:70:a4:a0:55:2b:ad:76:9c:
ab:7c:06:cb:b0:cc:a3:f8:4c:60:54:37:d6:d0:1b:2e:e0:c3:
77:6a:de:fa:2d:7e:7e:e6:b9:4d:9b:61:a3:c0:6d:a4:1b:dc:
cf:ee:5a:74:21:a5:60:ab:3e:53:f2:ef:de:e5:c2:3c:c9:e1:
58:d2:3d:2a:d8:c8:f7:74:fc:f1:ac:31:b8:32:9b:c8:d0:0e:
68:48:39:bc:94:20:97:10:d1:fd:bc:0c:1a:f2:5b:51:e7:55:
1f:10:ff:06:96:fb:7d:73:d5:99:aa:e6:14:eb:79:dd:ba:cb:
41:10:d7:75:8f:6e:70:d7:a0:37:67:6b:c3:0d:36:22:77:18:
55:52:95:3e:e9:da:b9:93:84:80:9a:3a:3b:e4:2c:56:07:24:
45:9f:16:e8:7f:00:f5:c6:cf:53:2e:93:48:a1:f7:df:b1:49:
ec:90:54:70:da:a3:5a:49:f5:37:c9:bb:a4:97:42:70:77:2d:
99:81:b3:35:b4:d9:fc:d5:20:e1:81:7c:2b:5a:71:a5:6b:4d:
9b:a6:71:2b:05:8d:22:06:eb:ef:d7:30:3c:0f:30:ed:f7:98:
20:30:b4:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 10:35:30 2025 by rpki-client