Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A911D834/DFBA50B81D8D11E2824DEDEB08B02CD2/338EAE62944C11F0A5549211C4F9AE02.roa
File: 338EAE62944C11F0A5549211C4F9AE02.roa (raw, json)
Hash identifier: MaIZ9WJ2QSPLv1IkCG1fAbYtGbONfG/gCy6D1hTgYdk=
Subject key identifier: 2A:77:2B:AF:F3:CA:3C:D2:FD:E6:D7:DD:75:DC:94:7A:27:B0:D4:46
Certificate issuer: /CN=A911D834/serialNumber=FDB2754D950630EB11DF84E2855CAAB7D1626F80
Certificate serial: 3525
Authority key identifier: FD:B2:75:4D:95:06:30:EB:11:DF:84:E2:85:5C:AA:B7:D1:62:6F:80
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_bJ1TZUGMOsR34TihVyqt9Fib4A.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911D834/DFBA50B81D8D11E2824DEDEB08B02CD2/338EAE62944C11F0A5549211C4F9AE02.roa
Signing time: Fri 10 Oct 2025 04:47:12 +0000
ROA not before: Fri 10 Oct 2025 04:47:12 +0000
ROA not after: Tue 01 Dec 2026 00:00:00 +0000
asID: 4007
IP address blocks: 103.232.152.0/22 maxlen: 24
103.235.196.0/22 maxlen: 24
110.34.0.0/19 maxlen: 24
116.66.192.0/21 maxlen: 24
163.47.148.0/22 maxlen: 22
163.47.148.0/24 maxlen: 24
163.47.149.0/24 maxlen: 24
163.47.150.0/24 maxlen: 24
163.47.151.0/24 maxlen: 24
163.53.24.0/23 maxlen: 23
163.53.24.0/24 maxlen: 24
163.53.25.0/24 maxlen: 24
182.93.64.0/19 maxlen: 24
202.51.80.0/24 maxlen: 24
202.51.88.0/23 maxlen: 23
202.51.88.0/24 maxlen: 24
202.51.92.0/24 maxlen: 24
202.51.93.0/24 maxlen: 24
202.63.240.0/21 maxlen: 24
2403:3800::/32 maxlen: 40
2403:3800:8::/48 maxlen: 48
2403:3800:600::/48 maxlen: 48
2403:3800:700::/48 maxlen: 48
2403:3800:820::/48 maxlen: 48
2403:3800:1200::/44 maxlen: 44
2403:3800:1210::/44 maxlen: 44
2403:3800:1220::/44 maxlen: 44
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A911D834/DFBA50B81D8D11E2824DEDEB08B02CD2/_bJ1TZUGMOsR34TihVyqt9Fib4A.crl
rsync://rpki.apnic.net/member_repository/A911D834/DFBA50B81D8D11E2824DEDEB08B02CD2/_bJ1TZUGMOsR34TihVyqt9Fib4A.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_bJ1TZUGMOsR34TihVyqt9Fib4A.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 25 Oct 2025 14:41:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13605 (0x3525)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911D834, serialNumber=FDB2754D950630EB11DF84E2855CAAB7D1626F80
Validity
Not Before: Oct 10 04:47:12 2025 GMT
Not After : Dec 1 00:00:00 2026 GMT
Subject: CN=68e88fd0-f618
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:9d:33:7b:ee:75:c3:ca:44:18:87:f9:d0:c4:
a4:02:f6:bd:7a:27:14:e9:ea:d4:bd:ff:bf:ba:59:
0f:1f:51:65:a2:63:43:5e:61:9c:c1:69:b0:59:8b:
bd:ca:5b:3e:69:bf:c6:e0:e5:42:7e:0a:11:e6:14:
48:de:61:d5:f5:5f:33:be:ad:50:2a:99:44:3a:b9:
5c:a6:0c:95:a5:55:f7:98:62:e1:60:d7:8f:3a:23:
88:1f:63:ed:ce:a6:b2:6c:35:80:33:04:b1:b1:4c:
fd:18:3a:a5:b0:1a:3d:68:d9:3d:dc:a3:0a:bc:ab:
bb:d0:38:5f:62:dd:1a:12:93:9f:49:92:91:ae:1a:
0a:bc:5d:83:68:4a:38:20:55:38:6b:3c:70:09:48:
31:82:f4:03:25:27:2d:fc:bc:2a:95:01:42:c1:72:
f2:1f:c5:e2:9c:7c:b6:1b:1f:d1:e9:26:5c:bf:99:
e3:74:be:eb:cc:67:ab:0b:c8:d6:31:7f:3e:f6:98:
48:f0:0d:9b:7e:c9:22:89:b1:22:8f:27:5f:3f:9a:
03:22:c6:c2:67:61:aa:4d:19:0b:e7:e5:3c:53:97:
b1:89:c4:5c:24:e8:c0:09:6f:69:d7:1f:5e:13:fc:
6b:58:35:c4:06:df:c1:c8:5c:59:ac:5e:d4:45:e3:
8b:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:77:2B:AF:F3:CA:3C:D2:FD:E6:D7:DD:75:DC:94:7A:27:B0:D4:46
X509v3 Authority Key Identifier:
keyid:FD:B2:75:4D:95:06:30:EB:11:DF:84:E2:85:5C:AA:B7:D1:62:6F:80
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911D834/DFBA50B81D8D11E2824DEDEB08B02CD2/_bJ1TZUGMOsR34TihVyqt9Fib4A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_bJ1TZUGMOsR34TihVyqt9Fib4A.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911D834/DFBA50B81D8D11E2824DEDEB08B02CD2/338EAE62944C11F0A5549211C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.232.152.0/22
103.235.196.0/22
110.34.0.0/19
116.66.192.0/21
163.47.148.0/22
163.53.24.0/23
182.93.64.0/19
202.51.80.0/24
202.51.88.0/23
202.51.92.0/23
202.63.240.0/21
IPv6:
2403:3800::/32
Signature Algorithm: sha256WithRSAEncryption
62:4e:8e:a7:b3:c4:42:15:c8:e1:c3:a1:87:bc:c5:0f:6f:0b:
40:58:62:b9:56:5c:ce:14:4c:36:32:f2:81:72:4e:c3:6c:d2:
6b:0b:84:04:c4:6c:54:8d:40:23:4d:a1:82:36:a7:99:82:d3:
e9:42:c5:b7:77:1d:de:44:3e:f8:a3:58:ec:c1:3c:fa:53:10:
0a:be:fa:ff:69:50:ef:da:fa:05:f6:bd:3e:89:4a:0a:a1:79:
cf:84:69:00:e6:ef:46:64:20:5a:c1:2c:5c:92:a3:e0:57:f5:
95:14:22:ec:ff:3d:78:1b:14:1a:e8:e7:14:1d:36:73:76:6f:
46:f7:4f:20:6b:ca:96:67:9e:f3:1e:cd:87:77:c3:bc:9f:7c:
e5:0f:14:b7:c1:68:55:cf:55:42:73:83:1c:d3:f4:27:f9:ac:
eb:73:21:cf:3c:5f:f5:75:50:a8:6e:82:61:c9:69:15:08:dc:
5f:d7:fb:6a:94:93:d4:75:4c:1c:cb:5d:54:a9:cc:8f:92:58:
49:dd:49:2f:5e:7e:2e:45:60:3a:00:c1:3c:13:fa:48:34:8d:
09:fa:0c:ba:91:d4:bd:c3:ec:0a:c6:46:19:04:55:90:d0:06:
4f:4c:dd:ff:74:fb:8a:8e:ed:17:0d:76:be:82:83:b0:65:0a:
5b:6b:02:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 14:53:17 2025 by rpki-client