Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91EFC72/075F6968E60D11EBB09F6A61C4F9AE02/42DB2A2A4E6511ECA2CED527C4F9AE02.roa
File: 42DB2A2A4E6511ECA2CED527C4F9AE02.roa (raw, json)
Hash identifier: 4OaxyxcTIOcabFpXdsP8S785Tabg3Ky2JZmSrcqn/78=
Subject key identifier: 8B:51:DA:35:4A:20:C7:B3:20:57:A6:C5:B8:4E:46:E5:C8:B9:33:81
Certificate issuer: /CN=A91EFC72/serialNumber=B7A7A9FFBEC713F84E0B5180AF76DEB16E729229
Certificate serial: 05AA
Authority key identifier: B7:A7:A9:FF:BE:C7:13:F8:4E:0B:51:80:AF:76:DE:B1:6E:72:92:29
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t6ep_77HE_hOC1GAr3besW5ykik.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91EFC72/075F6968E60D11EBB09F6A61C4F9AE02/42DB2A2A4E6511ECA2CED527C4F9AE02.roa
Signing time: Thu 07 Aug 2025 00:05:28 +0000
ROA not before: Thu 07 Aug 2025 00:05:28 +0000
ROA not after: Sat 31 Oct 2026 00:00:00 +0000
asID: 10132
IP address blocks: 61.4.0.0/18 maxlen: 18
61.4.9.0/24 maxlen: 24
61.4.10.0/24 maxlen: 24
61.4.11.0/24 maxlen: 24
61.4.12.0/24 maxlen: 24
61.4.13.0/24 maxlen: 24
61.4.14.0/24 maxlen: 24
61.4.15.0/24 maxlen: 24
61.4.16.0/24 maxlen: 24
61.4.23.0/24 maxlen: 24
61.4.24.0/24 maxlen: 24
61.4.25.0/24 maxlen: 24
61.4.26.0/24 maxlen: 24
61.4.27.0/24 maxlen: 24
61.4.28.0/24 maxlen: 24
61.4.29.0/24 maxlen: 24
61.4.30.0/24 maxlen: 24
61.4.31.0/24 maxlen: 24
61.4.32.0/23 maxlen: 23
61.4.36.0/24 maxlen: 24
61.4.37.0/24 maxlen: 24
61.4.39.0/24 maxlen: 24
61.4.40.0/24 maxlen: 24
61.4.42.0/23 maxlen: 23
61.4.44.0/24 maxlen: 24
61.4.48.0/22 maxlen: 22
61.4.52.0/22 maxlen: 22
61.4.56.0/23 maxlen: 23
61.4.58.0/23 maxlen: 23
113.212.192.0/18 maxlen: 18
113.212.196.0/23 maxlen: 23
113.212.198.0/23 maxlen: 23
113.212.200.0/23 maxlen: 23
113.212.202.0/23 maxlen: 23
113.212.208.0/22 maxlen: 22
113.212.212.0/22 maxlen: 22
113.212.216.0/21 maxlen: 21
113.212.216.0/24 maxlen: 24
113.212.217.0/24 maxlen: 24
113.212.219.0/24 maxlen: 24
113.212.220.0/23 maxlen: 23
113.212.222.0/23 maxlen: 23
113.212.224.0/24 maxlen: 24
113.212.225.0/24 maxlen: 24
113.212.229.0/24 maxlen: 24
113.212.230.0/24 maxlen: 24
113.212.231.0/24 maxlen: 24
113.212.232.0/21 maxlen: 21
113.212.232.0/22 maxlen: 22
113.212.232.0/24 maxlen: 24
113.212.233.0/24 maxlen: 24
113.212.234.0/24 maxlen: 24
113.212.235.0/24 maxlen: 24
113.212.236.0/24 maxlen: 24
113.212.237.0/24 maxlen: 24
113.212.240.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91EFC72/075F6968E60D11EBB09F6A61C4F9AE02/t6ep_77HE_hOC1GAr3besW5ykik.crl
rsync://rpki.apnic.net/member_repository/A91EFC72/075F6968E60D11EBB09F6A61C4F9AE02/t6ep_77HE_hOC1GAr3besW5ykik.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t6ep_77HE_hOC1GAr3besW5ykik.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 19 Aug 2025 23:41:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1450 (0x5aa)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91EFC72, serialNumber=B7A7A9FFBEC713F84E0B5180AF76DEB16E729229
Validity
Not Before: Aug 7 00:05:28 2025 GMT
Not After : Oct 31 00:00:00 2026 GMT
Subject: CN=6893edc8-7c2b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:c5:d6:b3:16:bf:84:db:0d:3f:22:10:29:06:
c7:f5:6b:dd:ac:d4:76:ef:69:41:10:93:17:80:72:
ab:98:50:78:91:f3:98:7e:4e:a0:ad:6c:67:53:ae:
67:d1:44:35:e4:63:4d:fa:68:95:e3:31:c7:4e:16:
c8:dc:b0:e9:c4:e2:a5:00:56:57:88:4e:f9:e2:b3:
9f:16:07:b8:62:1d:f8:0e:6a:e7:05:e7:ec:7d:a1:
ed:cf:2c:ba:35:8a:c3:99:fd:1f:c4:d2:f2:e5:89:
05:c8:de:e1:cb:cb:63:d7:8f:d4:59:87:97:bc:b4:
ab:7b:12:f8:ba:9a:5f:eb:5f:ca:9c:c4:65:f5:16:
2d:e7:00:6a:e3:8b:18:e4:8f:ac:e7:e4:45:0d:4b:
92:ea:b8:cd:e5:f0:a9:ed:65:1b:d8:37:1b:f3:b2:
12:07:bc:a7:7d:58:f8:05:8e:6f:71:d1:3f:63:41:
71:d9:74:c1:c9:f3:e4:09:3b:d7:cf:6c:d6:40:ef:
e7:99:95:25:31:8c:16:5d:5d:ce:92:ba:03:a2:4c:
bf:ab:4c:01:76:8f:e8:39:1d:0d:c8:a0:da:53:00:
81:93:93:c7:b2:ab:a1:86:c5:ad:8f:8e:1e:f4:00:
40:56:8c:6c:88:16:6d:01:bf:c6:f8:88:f5:67:f1:
00:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:51:DA:35:4A:20:C7:B3:20:57:A6:C5:B8:4E:46:E5:C8:B9:33:81
X509v3 Authority Key Identifier:
keyid:B7:A7:A9:FF:BE:C7:13:F8:4E:0B:51:80:AF:76:DE:B1:6E:72:92:29
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91EFC72/075F6968E60D11EBB09F6A61C4F9AE02/t6ep_77HE_hOC1GAr3besW5ykik.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t6ep_77HE_hOC1GAr3besW5ykik.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EFC72/075F6968E60D11EBB09F6A61C4F9AE02/42DB2A2A4E6511ECA2CED527C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
61.4.0.0/18
113.212.192.0/18
Signature Algorithm: sha256WithRSAEncryption
64:53:04:22:68:1c:00:a6:bf:49:93:63:88:ef:01:10:55:83:
02:05:3b:a0:be:c8:c0:69:69:3c:e7:40:56:6a:68:15:bc:2e:
b6:52:ab:5c:af:0b:77:9c:ba:56:62:ad:dd:8d:c3:3c:a1:91:
14:b6:16:ca:72:3e:d3:2b:67:e0:c1:02:a9:78:77:fa:51:c4:
9d:60:67:f5:64:cd:7e:39:0c:70:20:e9:53:8e:b9:c4:36:99:
8f:1a:d2:59:28:ad:1a:40:c0:d5:95:45:86:0a:72:31:d6:5f:
b1:10:d3:0c:cc:57:18:fe:d9:21:79:bd:5c:32:d3:41:ca:4e:
e8:91:ba:f9:0a:80:7f:ef:6c:e7:95:33:f3:38:d7:8a:4b:d6:
21:fa:58:cd:4e:d1:5a:63:f6:ca:d8:0e:76:24:47:ba:30:78:
63:5f:f8:ee:1b:6f:a5:b1:ea:eb:36:56:d6:2a:72:0c:b1:d0:
e1:bc:a9:a4:7b:92:f4:61:fa:c6:48:b0:28:15:0c:b0:79:6c:
2a:55:bd:a8:82:0f:3d:09:61:7c:99:08:39:ab:c9:7b:41:54:
a5:8e:9a:e2:8d:42:e9:17:a4:9e:cd:39:00:fb:48:f6:e2:11:
e3:95:1e:42:ef:82:92:9c:90:db:51:4d:02:1d:10:41:53:a2:
98:9b:d9:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 13 05:36:08 2025 by rpki-client