Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/6EFB8CEA71BA11F0B7A42F85C4F9AE02.roa
File: 6EFB8CEA71BA11F0B7A42F85C4F9AE02.roa (raw, json)
Hash identifier: znC2YJg1eqyyf95ocYObdz2h0ZoUTJh/nPhesd+ku3A=
Subject key identifier: C9:DD:23:6D:E1:34:44:B0:6A:AD:41:8D:33:71:06:25:5D:43:AC:F4
Certificate issuer: /CN=A91E6134/serialNumber=8308087911EA49E215DC4926B0226A521E5B39C4
Certificate serial: 2946
Authority key identifier: 83:08:08:79:11:EA:49:E2:15:DC:49:26:B0:22:6A:52:1E:5B:39:C4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/6EFB8CEA71BA11F0B7A42F85C4F9AE02.roa
Signing time: Fri 08 Aug 2025 14:04:53 +0000
ROA not before: Fri 08 Aug 2025 14:04:53 +0000
ROA not after: Thu 30 Jul 2026 00:00:00 +0000
asID: 138241
IP address blocks: 103.11.63.0/24 maxlen: 24
113.203.208.0/24 maxlen: 24
113.203.209.0/24 maxlen: 24
113.203.210.0/24 maxlen: 24
113.203.211.0/24 maxlen: 24
113.203.212.0/24 maxlen: 24
113.203.213.0/24 maxlen: 24
113.203.214.0/24 maxlen: 24
113.203.215.0/24 maxlen: 24
113.203.216.0/24 maxlen: 24
113.203.217.0/24 maxlen: 24
113.203.218.0/24 maxlen: 24
113.203.219.0/24 maxlen: 24
113.203.220.0/24 maxlen: 24
113.203.222.0/24 maxlen: 24
113.203.223.0/24 maxlen: 24
113.203.233.0/24 maxlen: 24
113.203.241.0/24 maxlen: 24
113.203.242.0/24 maxlen: 24
113.203.243.0/24 maxlen: 24
113.203.246.0/24 maxlen: 24
113.203.248.0/22 maxlen: 22
113.203.252.0/24 maxlen: 24
113.203.253.0/24 maxlen: 24
113.203.254.0/24 maxlen: 24
113.203.255.0/24 maxlen: 24
115.167.1.0/24 maxlen: 24
115.167.2.0/24 maxlen: 24
115.167.3.0/24 maxlen: 24
115.167.6.0/24 maxlen: 24
115.167.9.0/24 maxlen: 24
115.167.11.0/24 maxlen: 24
115.167.12.0/24 maxlen: 24
115.167.13.0/24 maxlen: 24
115.167.15.0/24 maxlen: 24
115.167.16.0/22 maxlen: 24
115.167.20.0/22 maxlen: 24
115.167.24.0/22 maxlen: 24
115.167.28.0/24 maxlen: 24
115.167.29.0/24 maxlen: 24
115.167.30.0/24 maxlen: 24
115.167.31.0/24 maxlen: 24
115.167.48.0/24 maxlen: 24
115.167.49.0/24 maxlen: 24
115.167.50.0/24 maxlen: 24
115.167.56.0/22 maxlen: 24
115.167.60.0/24 maxlen: 24
115.167.61.0/24 maxlen: 24
115.167.63.0/24 maxlen: 24
115.167.96.0/22 maxlen: 24
115.167.101.0/24 maxlen: 24
115.167.102.0/24 maxlen: 24
115.167.103.0/24 maxlen: 24
115.167.104.0/22 maxlen: 22
115.167.112.0/22 maxlen: 22
115.167.116.0/24 maxlen: 24
115.167.117.0/24 maxlen: 24
115.167.118.0/24 maxlen: 24
115.167.119.0/24 maxlen: 24
115.167.120.0/24 maxlen: 24
115.167.121.0/24 maxlen: 24
115.167.122.0/24 maxlen: 24
115.167.123.0/24 maxlen: 24
115.167.124.0/24 maxlen: 24
115.167.125.0/24 maxlen: 24
175.110.64.0/24 maxlen: 24
175.110.66.0/24 maxlen: 24
175.110.67.0/24 maxlen: 24
175.110.82.0/24 maxlen: 24
175.110.88.0/24 maxlen: 24
175.110.90.0/24 maxlen: 24
175.110.91.0/24 maxlen: 24
175.110.96.0/24 maxlen: 24
175.110.97.0/24 maxlen: 24
175.110.98.0/24 maxlen: 24
175.110.101.0/24 maxlen: 24
175.110.102.0/24 maxlen: 24
175.110.103.0/24 maxlen: 24
175.110.104.0/21 maxlen: 21
180.178.142.0/24 maxlen: 24
180.178.144.0/24 maxlen: 24
180.178.146.0/24 maxlen: 24
180.178.147.0/24 maxlen: 24
180.178.148.0/24 maxlen: 24
180.178.149.0/24 maxlen: 24
180.178.150.0/24 maxlen: 24
180.178.152.0/21 maxlen: 21
180.178.160.0/21 maxlen: 21
180.178.168.0/24 maxlen: 24
180.178.169.0/24 maxlen: 24
180.178.170.0/24 maxlen: 24
180.178.171.0/24 maxlen: 24
180.178.176.0/21 maxlen: 21
180.178.185.0/24 maxlen: 24
180.178.186.0/24 maxlen: 24
180.178.187.0/24 maxlen: 24
180.178.188.0/24 maxlen: 24
180.178.190.0/24 maxlen: 24
180.178.191.0/24 maxlen: 24
202.92.26.0/24 maxlen: 24
223.29.225.0/24 maxlen: 24
223.29.228.0/24 maxlen: 24
223.29.229.0/24 maxlen: 24
223.29.230.0/24 maxlen: 24
223.29.231.0/24 maxlen: 24
223.29.235.0/24 maxlen: 24
223.29.236.0/24 maxlen: 24
223.29.238.0/24 maxlen: 24
223.29.239.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.crl
rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 14 Aug 2025 05:57:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 10566 (0x2946)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E6134, serialNumber=8308087911EA49E215DC4926B0226A521E5B39C4
Validity
Not Before: Aug 8 14:04:53 2025 GMT
Not After : Jul 30 00:00:00 2026 GMT
Subject: CN=68960404-5c79
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:d1:8b:3e:11:9b:c1:37:72:5e:44:6f:18:d7:
cd:73:64:c1:dd:b4:a4:d0:7f:ee:bd:ec:b1:d2:79:
ee:48:d2:b5:1d:73:76:bf:11:3c:d5:7d:98:44:f8:
36:49:78:cf:b9:71:92:60:7b:34:c1:9e:7b:d1:76:
b9:b5:b5:d2:e9:8b:f5:d5:f7:40:fa:25:7e:7a:51:
c7:de:58:07:20:56:74:4e:62:0c:dd:64:9b:71:55:
fc:d3:28:8e:b2:8a:fd:bd:31:13:4b:6b:00:a1:d1:
3f:8b:c5:d7:ee:0b:16:1a:3a:91:df:a1:f6:cf:70:
92:f3:36:dd:72:a3:30:21:56:b0:3e:be:79:d2:a9:
f5:2c:84:e5:01:5a:0d:11:84:76:0d:7f:c5:39:18:
e2:25:de:c4:07:26:6d:9c:79:0a:2c:96:43:2b:3a:
c9:d0:41:a7:aa:53:c6:87:2b:e2:b1:5c:2b:bd:09:
44:8d:1c:3c:7f:b7:af:9a:fc:67:67:bc:13:cd:27:
4f:55:ab:1a:66:c0:ed:f9:9f:cc:02:26:01:3a:bc:
3e:80:b2:51:19:51:0d:01:e2:44:31:1b:50:09:c2:
83:73:6b:22:d1:7a:2b:b9:52:25:1d:a7:47:bf:b7:
5e:b7:4c:12:62:09:b9:64:02:f3:f6:ea:8c:0c:70:
86:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:DD:23:6D:E1:34:44:B0:6A:AD:41:8D:33:71:06:25:5D:43:AC:F4
X509v3 Authority Key Identifier:
keyid:83:08:08:79:11:EA:49:E2:15:DC:49:26:B0:22:6A:52:1E:5B:39:C4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/6EFB8CEA71BA11F0B7A42F85C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.11.63.0/24
113.203.208.0-113.203.220.255
113.203.222.0/23
113.203.233.0/24
113.203.241.0-113.203.243.255
113.203.246.0/24
113.203.248.0/21
115.167.1.0-115.167.3.255
115.167.6.0/24
115.167.9.0/24
115.167.11.0-115.167.13.255
115.167.15.0-115.167.31.255
115.167.48.0-115.167.50.255
115.167.56.0-115.167.61.255
115.167.63.0/24
115.167.96.0/22
115.167.101.0-115.167.107.255
115.167.112.0-115.167.125.255
175.110.64.0/24
175.110.66.0/23
175.110.82.0/24
175.110.88.0/24
175.110.90.0/23
175.110.96.0-175.110.98.255
175.110.101.0-175.110.111.255
180.178.142.0/24
180.178.144.0/24
180.178.146.0-180.178.150.255
180.178.152.0-180.178.171.255
180.178.176.0/21
180.178.185.0-180.178.188.255
180.178.190.0/23
202.92.26.0/24
223.29.225.0/24
223.29.228.0/22
223.29.235.0-223.29.236.255
223.29.238.0/23
Signature Algorithm: sha256WithRSAEncryption
99:c3:99:48:f8:c2:72:0a:17:ec:d8:c5:03:02:d7:a1:cb:b4:
cf:2d:8c:89:69:13:b6:d7:82:aa:aa:7e:70:c7:40:d0:ae:0e:
ae:5f:15:95:0e:99:27:86:41:cc:df:18:98:97:03:fa:0c:ba:
6d:aa:ae:74:4c:c2:f9:b5:b3:e0:08:7c:d0:c2:6a:72:a6:5f:
69:3e:cb:2d:c2:ed:19:96:27:e8:8a:ec:06:ae:69:5d:5a:7b:
91:3e:5c:8f:22:d8:fb:ec:40:61:25:78:0c:18:29:9a:f6:21:
0a:dc:d4:f5:29:a1:f5:bf:35:98:b3:c5:f8:b1:f5:13:1e:af:
9b:50:d2:20:5e:2d:e2:9c:5e:52:4a:c1:fa:f3:5c:a5:5b:31:
3a:8f:4e:be:74:ae:93:99:36:e7:39:55:b2:59:31:91:f5:4a:
70:e7:b6:93:5a:7f:45:79:2e:2d:1d:de:53:ca:36:81:27:ae:
05:44:e7:99:5d:bb:36:99:c9:8f:ce:cc:bc:e4:f6:0c:31:ac:
e9:7f:f0:4c:7e:2e:18:1e:5c:13:42:c4:9d:47:db:1c:83:65:
be:46:24:be:7c:d2:20:e8:54:dc:4b:48:d3:d7:78:f0:41:34:
78:97:ce:b5:44:cf:34:7a:77:bd:f2:c4:62:af:25:06:f3:6c:
6e:75:79:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 20:50:57 2025 by rpki-client