Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91EB2B8/3F44CBAE2F4D11ED8F5A6A64C4F9AE02/38564246ABFB11EFAC5AA210C4F9AE02.roa
File: 38564246ABFB11EFAC5AA210C4F9AE02.roa (raw, json)
Hash identifier: FHSOIV7hZekpaVmn1ody+B5zz/ShaD8wOFOAekPJr/Y=
Subject key identifier: 55:C7:75:5C:76:18:37:2F:60:73:2A:10:9A:12:98:4E:B3:A2:28:B8
Certificate issuer: /CN=A91EB2B8/serialNumber=A69700E78D0C812AD2E2C114C82C655A0ACD447F
Certificate serial: 02B6
Authority key identifier: A6:97:00:E7:8D:0C:81:2A:D2:E2:C1:14:C8:2C:65:5A:0A:CD:44:7F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ppcA540MgSrS4sEUyCxlWgrNRH8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91EB2B8/3F44CBAE2F4D11ED8F5A6A64C4F9AE02/38564246ABFB11EFAC5AA210C4F9AE02.roa
Signing time: Wed 11 Jun 2025 02:18:37 +0000
ROA not before: Wed 11 Jun 2025 02:18:37 +0000
ROA not after: Mon 31 Aug 2026 00:00:00 +0000
asID: 139057
IP address blocks: 103.137.168.0/24 maxlen: 24
103.137.169.0/24 maxlen: 24
103.138.247.0/24 maxlen: 24
103.189.255.0/24 maxlen: 24
103.243.92.0/24 maxlen: 24
103.243.93.0/24 maxlen: 24
103.243.94.0/24 maxlen: 24
103.243.95.0/24 maxlen: 24
123.108.72.0/24 maxlen: 24
123.108.73.0/24 maxlen: 24
2407:2440:1::/48 maxlen: 48
2407:2440:2::/48 maxlen: 48
2407:2440:3::/48 maxlen: 48
2407:2440:4::/48 maxlen: 48
2407:2440:5::/48 maxlen: 48
2407:2440:6::/48 maxlen: 48
2407:2440:7::/48 maxlen: 48
2407:2440:8::/48 maxlen: 48
2407:2440:9::/48 maxlen: 48
2407:2440:a::/48 maxlen: 48
2407:2440:b::/48 maxlen: 48
2407:2440:c::/48 maxlen: 48
2407:2440:d::/48 maxlen: 48
2407:2440:e::/48 maxlen: 48
2407:2440:f::/48 maxlen: 48
2407:2440:10::/48 maxlen: 48
2407:2440:11::/48 maxlen: 48
2407:2440:12::/48 maxlen: 48
2407:2440:13::/48 maxlen: 48
2407:2440:14::/48 maxlen: 48
2407:2440:15::/48 maxlen: 48
2407:2440:16::/48 maxlen: 48
2407:2440:17::/48 maxlen: 48
2407:2440:18::/48 maxlen: 48
2407:2440:19::/48 maxlen: 48
2407:2440:1e::/48 maxlen: 48
2407:2440:1f::/48 maxlen: 48
2407:2440:20::/48 maxlen: 48
2407:2440:22::/48 maxlen: 48
2407:2440:23::/48 maxlen: 48
2407:2440:25::/48 maxlen: 48
2407:2440:28::/48 maxlen: 48
2407:2440:2a::/48 maxlen: 48
2407:2440:2b::/48 maxlen: 48
2407:2440:2c::/48 maxlen: 48
2407:2440:2d::/48 maxlen: 48
2407:2440:a001::/48 maxlen: 48
2407:2440:a002::/48 maxlen: 48
2407:2440:a003::/48 maxlen: 48
2407:2440:b001::/48 maxlen: 48
2407:2440:b002::/48 maxlen: 48
2407:2440:e001::/48 maxlen: 48
2407:2440:e002::/48 maxlen: 48
2407:2440:e003::/48 maxlen: 48
2407:2440:e004::/48 maxlen: 48
2407:2440:f001::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91EB2B8/3F44CBAE2F4D11ED8F5A6A64C4F9AE02/ppcA540MgSrS4sEUyCxlWgrNRH8.crl
rsync://rpki.apnic.net/member_repository/A91EB2B8/3F44CBAE2F4D11ED8F5A6A64C4F9AE02/ppcA540MgSrS4sEUyCxlWgrNRH8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ppcA540MgSrS4sEUyCxlWgrNRH8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 22 Jun 2025 01:36:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 694 (0x2b6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91EB2B8, serialNumber=A69700E78D0C812AD2E2C114C82C655A0ACD447F
Validity
Not Before: Jun 11 02:18:37 2025 GMT
Not After : Aug 31 00:00:00 2026 GMT
Subject: CN=6848e77d-cd27
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:b8:46:df:0f:4b:82:88:df:75:19:b9:c8:e4:
c1:f4:06:17:d7:2c:a3:95:02:8a:98:65:85:0a:db:
c2:4c:6e:e4:4c:c6:5a:7f:34:1e:32:6e:6a:eb:03:
26:2b:9c:01:e0:a0:3f:fa:e9:71:7c:5e:c9:a7:93:
a4:85:65:9f:d0:c2:2e:9a:14:09:d6:96:15:db:c9:
ec:a9:8b:59:6b:7b:4e:a0:df:18:3f:42:47:1b:1b:
e0:6c:10:de:bd:12:83:f3:a6:5d:f5:b3:29:bc:87:
53:d5:13:bb:e2:53:40:5c:a0:af:f8:46:ef:78:c9:
39:d3:38:c5:69:6c:ec:ca:17:23:a1:a6:14:26:fb:
c2:d4:53:da:70:81:82:14:9a:67:d0:d1:9a:69:9d:
a9:8a:3f:f3:09:01:f6:0e:ba:97:ce:f2:72:c5:e9:
41:b5:86:c6:50:a5:10:90:87:78:11:0b:77:6e:bd:
a5:9f:8f:37:42:54:4a:26:55:1c:8b:5b:ee:9b:24:
e8:57:92:ac:c7:45:30:bd:9d:8c:46:98:11:cb:9f:
7d:ff:6f:54:29:e2:8c:ce:76:a3:59:5c:b2:08:75:
64:26:41:ab:14:94:86:3b:12:fd:81:8f:4e:3a:72:
99:77:12:52:f3:bf:55:b8:a0:10:4e:75:55:8e:1c:
f0:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:C7:75:5C:76:18:37:2F:60:73:2A:10:9A:12:98:4E:B3:A2:28:B8
X509v3 Authority Key Identifier:
keyid:A6:97:00:E7:8D:0C:81:2A:D2:E2:C1:14:C8:2C:65:5A:0A:CD:44:7F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91EB2B8/3F44CBAE2F4D11ED8F5A6A64C4F9AE02/ppcA540MgSrS4sEUyCxlWgrNRH8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ppcA540MgSrS4sEUyCxlWgrNRH8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EB2B8/3F44CBAE2F4D11ED8F5A6A64C4F9AE02/38564246ABFB11EFAC5AA210C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.137.168.0/23
103.138.247.0/24
103.189.255.0/24
103.243.92.0/22
123.108.72.0/23
IPv6:
2407:2440:1::-2407:2440:19:ffff:ffff:ffff:ffff:ffff
2407:2440:1e::-2407:2440:20:ffff:ffff:ffff:ffff:ffff
2407:2440:22::/47
2407:2440:25::/48
2407:2440:28::/48
2407:2440:2a::-2407:2440:2d:ffff:ffff:ffff:ffff:ffff
2407:2440:a001::-2407:2440:a003:ffff:ffff:ffff:ffff:ffff
2407:2440:b001::-2407:2440:b002:ffff:ffff:ffff:ffff:ffff
2407:2440:e001::-2407:2440:e004:ffff:ffff:ffff:ffff:ffff
2407:2440:f001::/48
Signature Algorithm: sha256WithRSAEncryption
7d:82:89:55:f2:c4:6a:fc:c9:50:8b:2e:9f:cf:55:f0:b7:ef:
33:32:35:43:04:61:5b:79:6c:01:d5:b8:ad:64:b4:7b:cf:7e:
88:ea:db:54:bd:70:74:63:d0:f7:31:6d:73:5c:d3:b8:e1:6b:
19:1d:4b:81:28:6e:6f:bd:d5:b6:80:e0:89:15:ed:ba:4b:62:
a2:17:9d:f3:8f:6d:1d:b7:1d:d1:36:c8:7f:15:01:8a:62:3e:
f9:5e:cb:e0:32:1c:3e:59:11:96:c6:6a:92:8f:23:e6:dc:7d:
dd:e6:5f:23:b2:bb:9e:4d:63:06:ce:b9:23:a4:09:1e:94:0f:
e8:73:40:4f:0d:4e:49:9f:8f:7c:8f:d1:33:08:22:d5:e3:8b:
07:40:9b:71:a4:00:1f:91:f3:e9:c9:2b:f6:c0:c6:58:31:61:
99:d2:75:0c:be:a7:bc:b4:38:a9:56:4a:60:ad:7a:31:de:ab:
bc:0c:bf:af:f8:07:c5:82:f0:b2:d1:5d:fb:fb:52:d6:fd:10:
9f:d1:6a:7b:05:ae:2f:4e:26:02:24:43:e6:21:a8:26:8e:34:
b3:c4:ec:0c:b3:25:99:66:9e:21:71:c4:4f:3a:b7:bc:4a:ed:
2f:4a:fb:f1:ab:ca:28:8a:21:cd:ab:ed:12:62:77:5f:b3:7f:
0c:91:90:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 17 01:30:38 2025 by rpki-client