Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91EB2B8/3F44CBAE2F4D11ED8F5A6A64C4F9AE02/20978DD270E411F08F40242AC4F9AE02.roa
File: 20978DD270E411F08F40242AC4F9AE02.roa (raw, json)
Hash identifier: 5QlFZohbvIA8ksl+8t96mctXoilfacTZ8jEUeG+PwoA=
Subject key identifier: F2:A0:7E:3D:C5:96:0B:88:E3:47:E2:82:BD:DF:57:19:D9:3C:CC:6D
Certificate issuer: /CN=A91EB2B8/serialNumber=A69700E78D0C812AD2E2C114C82C655A0ACD447F
Certificate serial: 02F6
Authority key identifier: A6:97:00:E7:8D:0C:81:2A:D2:E2:C1:14:C8:2C:65:5A:0A:CD:44:7F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ppcA540MgSrS4sEUyCxlWgrNRH8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91EB2B8/3F44CBAE2F4D11ED8F5A6A64C4F9AE02/20978DD270E411F08F40242AC4F9AE02.roa
Signing time: Tue 05 Aug 2025 08:21:41 +0000
ROA not before: Tue 05 Aug 2025 08:21:41 +0000
ROA not after: Mon 31 Aug 2026 00:00:00 +0000
asID: 139057
IP address blocks: 103.137.168.0/24 maxlen: 24
103.137.169.0/24 maxlen: 24
103.137.170.0/24 maxlen: 24
103.137.171.0/24 maxlen: 24
103.138.247.0/24 maxlen: 24
103.189.255.0/24 maxlen: 24
103.243.92.0/24 maxlen: 24
103.243.93.0/24 maxlen: 24
103.243.94.0/24 maxlen: 24
103.243.95.0/24 maxlen: 24
123.108.72.0/24 maxlen: 24
123.108.73.0/24 maxlen: 24
2407:2440:1::/48 maxlen: 48
2407:2440:2::/48 maxlen: 48
2407:2440:3::/48 maxlen: 48
2407:2440:4::/48 maxlen: 48
2407:2440:5::/48 maxlen: 48
2407:2440:6::/48 maxlen: 48
2407:2440:7::/48 maxlen: 48
2407:2440:8::/48 maxlen: 48
2407:2440:9::/48 maxlen: 48
2407:2440:a::/48 maxlen: 48
2407:2440:b::/48 maxlen: 48
2407:2440:c::/48 maxlen: 48
2407:2440:d::/48 maxlen: 48
2407:2440:e::/48 maxlen: 48
2407:2440:f::/48 maxlen: 48
2407:2440:10::/48 maxlen: 48
2407:2440:11::/48 maxlen: 48
2407:2440:12::/48 maxlen: 48
2407:2440:13::/48 maxlen: 48
2407:2440:14::/48 maxlen: 48
2407:2440:15::/48 maxlen: 48
2407:2440:16::/48 maxlen: 48
2407:2440:17::/48 maxlen: 48
2407:2440:18::/48 maxlen: 48
2407:2440:19::/48 maxlen: 48
2407:2440:1e::/48 maxlen: 48
2407:2440:1f::/48 maxlen: 48
2407:2440:20::/48 maxlen: 48
2407:2440:22::/48 maxlen: 48
2407:2440:23::/48 maxlen: 48
2407:2440:25::/48 maxlen: 48
2407:2440:28::/48 maxlen: 48
2407:2440:2a::/48 maxlen: 48
2407:2440:2b::/48 maxlen: 48
2407:2440:2c::/48 maxlen: 48
2407:2440:2d::/48 maxlen: 48
2407:2440:a001::/48 maxlen: 48
2407:2440:a002::/48 maxlen: 48
2407:2440:a003::/48 maxlen: 48
2407:2440:a004::/48 maxlen: 48
2407:2440:a007::/48 maxlen: 48
2407:2440:b001::/48 maxlen: 48
2407:2440:b002::/48 maxlen: 48
2407:2440:b003::/48 maxlen: 48
2407:2440:e001::/48 maxlen: 48
2407:2440:e002::/48 maxlen: 48
2407:2440:e003::/48 maxlen: 48
2407:2440:e004::/48 maxlen: 48
2407:2440:e007::/48 maxlen: 48
2407:2440:e008::/48 maxlen: 48
2407:2440:e009::/48 maxlen: 48
2407:2440:e00a::/48 maxlen: 48
2407:2440:e00b::/48 maxlen: 48
2407:2440:f001::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91EB2B8/3F44CBAE2F4D11ED8F5A6A64C4F9AE02/ppcA540MgSrS4sEUyCxlWgrNRH8.crl
rsync://rpki.apnic.net/member_repository/A91EB2B8/3F44CBAE2F4D11ED8F5A6A64C4F9AE02/ppcA540MgSrS4sEUyCxlWgrNRH8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ppcA540MgSrS4sEUyCxlWgrNRH8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 14 Aug 2025 02:27:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 758 (0x2f6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91EB2B8, serialNumber=A69700E78D0C812AD2E2C114C82C655A0ACD447F
Validity
Not Before: Aug 5 08:21:41 2025 GMT
Not After : Aug 31 00:00:00 2026 GMT
Subject: CN=6891bf15-daf6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:b6:7a:7e:11:54:96:5d:fe:82:38:c2:94:ad:
02:45:7c:1f:6c:9f:0a:53:1f:b1:05:54:dc:ec:ae:
7c:33:91:b4:31:bf:ca:2e:97:38:1e:65:27:f4:6e:
7e:d0:62:f7:66:6f:42:32:0b:f7:93:4a:ea:3f:05:
9c:e3:8a:77:d4:09:19:b9:fc:84:9e:68:6d:35:c2:
3b:ab:bf:6c:00:e7:a5:35:ef:3e:f6:81:e3:b6:00:
c0:b5:5c:00:ad:77:e3:fb:f7:bf:fe:ea:83:a9:d3:
92:62:11:64:19:59:3f:37:2d:98:a8:5f:ce:8f:65:
e7:2d:90:11:5b:b4:97:ab:3f:b6:4c:84:43:90:55:
52:94:8b:5e:3f:b8:c9:15:8e:17:da:cc:52:ac:1d:
4d:4b:8f:bf:09:a4:49:fc:ad:ca:9e:34:9a:a3:e6:
d8:5f:0d:fe:21:f2:33:cf:a7:f5:d5:2f:9b:24:c2:
92:78:00:ae:38:ed:d2:d9:e3:37:7f:bb:1c:1b:90:
79:56:87:cc:7d:db:f6:3d:75:13:69:71:61:99:71:
77:ab:7a:e9:78:70:ff:1d:a7:9d:6e:b6:ab:d9:e8:
7a:71:10:6a:75:19:08:b3:02:98:c0:f6:33:9c:9d:
ca:93:4e:3e:a3:ef:33:c7:7b:94:0b:2d:8c:83:ab:
54:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:A0:7E:3D:C5:96:0B:88:E3:47:E2:82:BD:DF:57:19:D9:3C:CC:6D
X509v3 Authority Key Identifier:
keyid:A6:97:00:E7:8D:0C:81:2A:D2:E2:C1:14:C8:2C:65:5A:0A:CD:44:7F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91EB2B8/3F44CBAE2F4D11ED8F5A6A64C4F9AE02/ppcA540MgSrS4sEUyCxlWgrNRH8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ppcA540MgSrS4sEUyCxlWgrNRH8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EB2B8/3F44CBAE2F4D11ED8F5A6A64C4F9AE02/20978DD270E411F08F40242AC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.137.168.0/22
103.138.247.0/24
103.189.255.0/24
103.243.92.0/22
123.108.72.0/23
IPv6:
2407:2440:1::-2407:2440:19:ffff:ffff:ffff:ffff:ffff
2407:2440:1e::-2407:2440:20:ffff:ffff:ffff:ffff:ffff
2407:2440:22::/47
2407:2440:25::/48
2407:2440:28::/48
2407:2440:2a::-2407:2440:2d:ffff:ffff:ffff:ffff:ffff
2407:2440:a001::-2407:2440:a004:ffff:ffff:ffff:ffff:ffff
2407:2440:a007::/48
2407:2440:b001::-2407:2440:b003:ffff:ffff:ffff:ffff:ffff
2407:2440:e001::-2407:2440:e004:ffff:ffff:ffff:ffff:ffff
2407:2440:e007::-2407:2440:e00b:ffff:ffff:ffff:ffff:ffff
2407:2440:f001::/48
Signature Algorithm: sha256WithRSAEncryption
ad:4a:e5:77:64:02:57:6c:18:8b:ed:04:a4:e9:8a:f5:e5:45:
4e:97:65:a1:7e:5b:ab:d6:90:62:77:12:96:e1:b6:00:d2:d8:
c2:48:db:1e:f2:e6:48:56:47:19:0a:18:76:b1:a2:3e:cb:b9:
2c:bc:fc:e3:c5:a7:2e:90:c0:68:74:00:a4:15:10:32:05:33:
a6:49:32:27:23:e4:42:37:a7:96:4f:7a:f4:67:29:d1:d2:1f:
88:3c:e6:34:d1:9d:35:c1:ab:eb:28:56:fb:86:5f:98:9c:60:
66:57:c8:3d:c1:c1:74:26:9c:5d:d0:4f:7d:24:c0:ec:52:cb:
e8:df:cf:a8:fc:98:b6:ae:8c:01:c2:54:bd:ba:58:a4:88:76:
18:cf:df:33:bc:e0:f7:99:db:0d:38:1e:74:68:c0:b9:84:f2:
00:c7:51:74:f8:70:5f:84:ae:13:84:b7:c5:50:a8:4c:ef:e9:
14:74:70:dd:b6:48:ee:4e:82:b0:ea:dd:1a:0f:27:47:1c:dd:
b5:eb:a8:da:ab:cd:31:98:87:c7:17:01:2f:f1:8a:b6:4e:29:
f7:a5:cf:97:57:63:ba:f6:0e:35:b6:df:4f:53:bd:27:4f:39:
a3:1e:c9:98:87:f6:34:40:c7:10:0b:6e:83:28:a6:b6:bd:aa:
2c:2b:21:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 8 19:21:18 2025 by rpki-client