Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A912B600/A36A626E1D9311E286175DF708B02CD2/CBCF6A88358611F08913BB23C4F9AE02.roa
File: CBCF6A88358611F08913BB23C4F9AE02.roa (raw, json)
Hash identifier: yZVCdma3V4dQKQMPhMiZF1dGAyhRhWyJLkEIKyUx++k=
Subject key identifier: 47:7D:9D:58:D7:38:5C:37:93:E3:11:EC:B0:98:9B:A0:7A:14:5E:CE
Certificate issuer: /CN=A912B600/serialNumber=2F44AEBA0A5544065889705BC2EF1CDAE1158325
Certificate serial: 3514
Authority key identifier: 2F:44:AE:BA:0A:55:44:06:58:89:70:5B:C2:EF:1C:DA:E1:15:83:25
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L0SuugpVRAZYiXBbwu8c2uEVgyU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912B600/A36A626E1D9311E286175DF708B02CD2/CBCF6A88358611F08913BB23C4F9AE02.roa
Signing time: Wed 24 Sep 2025 15:00:59 +0000
ROA not before: Wed 24 Sep 2025 15:00:59 +0000
ROA not after: Tue 01 Dec 2026 00:00:00 +0000
asID: 38466
IP address blocks: 27.125.224.0/19 maxlen: 19
27.125.224.0/24 maxlen: 24
27.125.225.0/24 maxlen: 24
27.125.226.0/24 maxlen: 24
27.125.227.0/24 maxlen: 24
27.125.228.0/24 maxlen: 24
27.125.229.0/24 maxlen: 24
27.125.230.0/24 maxlen: 24
27.125.231.0/24 maxlen: 24
27.125.232.0/24 maxlen: 24
27.125.233.0/24 maxlen: 24
27.125.234.0/24 maxlen: 24
27.125.235.0/24 maxlen: 24
27.125.236.0/24 maxlen: 24
27.125.237.0/24 maxlen: 24
27.125.238.0/24 maxlen: 24
27.125.239.0/24 maxlen: 24
27.125.240.0/24 maxlen: 24
27.125.241.0/24 maxlen: 24
27.125.242.0/24 maxlen: 24
27.125.243.0/24 maxlen: 24
27.125.244.0/24 maxlen: 24
27.125.245.0/24 maxlen: 24
27.125.246.0/24 maxlen: 24
27.125.247.0/24 maxlen: 24
27.125.248.0/24 maxlen: 24
27.125.249.0/24 maxlen: 24
27.125.250.0/24 maxlen: 24
27.125.251.0/24 maxlen: 24
27.125.252.0/24 maxlen: 24
27.125.253.0/24 maxlen: 24
27.125.254.0/24 maxlen: 24
27.125.255.0/24 maxlen: 24
103.1.144.0/22 maxlen: 22
103.1.144.0/24 maxlen: 24
103.1.145.0/24 maxlen: 24
103.1.146.0/24 maxlen: 24
103.1.147.0/24 maxlen: 24
113.30.232.0/21 maxlen: 21
113.30.232.0/24 maxlen: 24
113.30.233.0/24 maxlen: 24
113.30.234.0/23 maxlen: 24
113.30.236.0/22 maxlen: 24
123.136.96.0/19 maxlen: 19
123.136.96.0/24 maxlen: 24
123.136.97.0/24 maxlen: 24
123.136.98.0/24 maxlen: 24
123.136.99.0/24 maxlen: 24
123.136.100.0/24 maxlen: 24
123.136.101.0/24 maxlen: 24
123.136.102.0/23 maxlen: 24
123.136.104.0/22 maxlen: 22
123.136.104.0/24 maxlen: 24
123.136.105.0/24 maxlen: 24
123.136.106.0/24 maxlen: 24
123.136.107.0/24 maxlen: 24
123.136.108.0/24 maxlen: 24
123.136.109.0/24 maxlen: 24
123.136.110.0/24 maxlen: 24
123.136.111.0/24 maxlen: 24
123.136.112.0/24 maxlen: 24
123.136.113.0/24 maxlen: 24
123.136.114.0/24 maxlen: 24
123.136.115.0/24 maxlen: 24
123.136.116.0/24 maxlen: 24
123.136.117.0/24 maxlen: 24
123.136.118.0/24 maxlen: 24
123.136.119.0/24 maxlen: 24
123.136.120.0/24 maxlen: 24
123.136.121.0/24 maxlen: 24
123.136.122.0/24 maxlen: 24
123.136.123.0/24 maxlen: 24
123.136.124.0/24 maxlen: 24
123.136.125.0/24 maxlen: 24
123.136.126.0/24 maxlen: 24
123.136.127.0/24 maxlen: 24
203.168.160.0/19 maxlen: 19
203.168.160.0/24 maxlen: 24
203.168.161.0/24 maxlen: 24
203.168.162.0/24 maxlen: 24
203.168.163.0/24 maxlen: 24
203.168.164.0/22 maxlen: 22
203.168.164.0/24 maxlen: 24
203.168.165.0/24 maxlen: 24
203.168.166.0/24 maxlen: 24
203.168.167.0/24 maxlen: 24
203.168.168.0/24 maxlen: 24
203.168.169.0/24 maxlen: 24
203.168.170.0/24 maxlen: 24
203.168.171.0/24 maxlen: 24
203.168.172.0/24 maxlen: 24
203.168.173.0/24 maxlen: 24
203.168.174.0/24 maxlen: 24
203.168.175.0/24 maxlen: 24
203.168.176.0/24 maxlen: 24
203.168.177.0/24 maxlen: 24
203.168.178.0/24 maxlen: 24
203.168.179.0/24 maxlen: 24
203.168.180.0/24 maxlen: 24
203.168.181.0/24 maxlen: 24
203.168.182.0/24 maxlen: 24
203.168.183.0/24 maxlen: 24
203.168.184.0/24 maxlen: 24
203.168.185.0/24 maxlen: 24
203.168.186.0/24 maxlen: 24
203.168.187.0/24 maxlen: 24
203.168.188.0/24 maxlen: 24
203.168.189.0/24 maxlen: 24
203.168.190.0/24 maxlen: 24
203.168.191.0/24 maxlen: 24
2405:3800::/32 maxlen: 32
2405:3800::/48 maxlen: 48
2405:3800:1::/48 maxlen: 48
2405:3800:800::/43 maxlen: 43
2405:3800:820::/43 maxlen: 43
2405:3800:840::/43 maxlen: 43
2405:3800:860::/43 maxlen: 43
2405:3800:880::/43 maxlen: 43
2405:3800:8a0::/43 maxlen: 43
2405:3800:8c0::/43 maxlen: 43
2405:3800:8e0::/43 maxlen: 43
2405:3800:900::/43 maxlen: 43
2405:3800:dc2::/47 maxlen: 47
2405:3800:dc4::/47 maxlen: 47
2405:3800:dc6::/47 maxlen: 47
2405:3800:dd0::/45 maxlen: 45
2405:3801::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A912B600/A36A626E1D9311E286175DF708B02CD2/L0SuugpVRAZYiXBbwu8c2uEVgyU.crl
rsync://rpki.apnic.net/member_repository/A912B600/A36A626E1D9311E286175DF708B02CD2/L0SuugpVRAZYiXBbwu8c2uEVgyU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L0SuugpVRAZYiXBbwu8c2uEVgyU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 27 Oct 2025 14:50:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13588 (0x3514)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912B600, serialNumber=2F44AEBA0A5544065889705BC2EF1CDAE1158325
Validity
Not Before: Sep 24 15:00:59 2025 GMT
Not After : Dec 1 00:00:00 2026 GMT
Subject: CN=68d407ab-fcd8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:4d:86:08:b1:5a:8a:8e:3c:f5:a7:eb:57:e5:
80:d2:7b:f6:b4:8e:9e:fe:24:29:1f:c0:d2:2d:bb:
28:5a:a2:98:72:68:80:74:42:b3:1a:40:d9:b1:83:
4c:2a:bd:19:40:eb:ca:94:f1:a9:34:36:21:9e:95:
68:2d:e1:cd:93:14:df:25:02:c7:ab:40:e1:64:66:
02:08:f4:ab:3b:32:8f:6b:96:f7:ed:39:76:32:14:
04:de:54:19:c2:e7:25:f0:6d:77:93:3c:a8:8c:70:
42:34:8a:bb:2f:2b:4a:22:4b:18:fa:1d:9a:54:97:
9d:f2:ba:a2:57:33:57:81:f7:33:fe:fc:ba:15:12:
11:ca:93:78:c7:c1:8f:4f:2f:d3:81:4a:19:3d:af:
21:8e:5c:94:9b:f3:31:b2:a3:d1:a2:c9:56:cd:bd:
30:ce:48:54:db:29:51:ae:c1:dc:56:07:1b:62:94:
91:3a:63:f3:52:b4:65:85:77:9d:00:99:16:93:2f:
ee:95:85:65:44:cd:26:82:b4:d5:f5:de:d8:d7:a4:
40:6b:21:45:fa:02:14:23:a6:d4:30:4f:cc:7d:73:
b2:3b:fb:82:55:19:51:27:67:dc:b3:63:98:b5:19:
4e:da:8c:19:c8:f7:50:1f:15:3d:0d:96:37:3c:e0:
dd:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:7D:9D:58:D7:38:5C:37:93:E3:11:EC:B0:98:9B:A0:7A:14:5E:CE
X509v3 Authority Key Identifier:
keyid:2F:44:AE:BA:0A:55:44:06:58:89:70:5B:C2:EF:1C:DA:E1:15:83:25
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912B600/A36A626E1D9311E286175DF708B02CD2/L0SuugpVRAZYiXBbwu8c2uEVgyU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L0SuugpVRAZYiXBbwu8c2uEVgyU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912B600/A36A626E1D9311E286175DF708B02CD2/CBCF6A88358611F08913BB23C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
27.125.224.0/19
103.1.144.0/22
113.30.232.0/21
123.136.96.0/19
203.168.160.0/19
IPv6:
2405:3800::/31
Signature Algorithm: sha256WithRSAEncryption
20:be:78:86:e0:ff:b2:dc:3b:4c:f1:ab:b7:72:a5:17:c6:a1:
c9:db:dc:04:28:20:67:4f:e2:ae:5d:3c:9c:ec:89:91:45:6e:
11:89:a3:f4:cf:09:41:32:08:41:a6:00:52:db:05:63:8f:00:
df:71:55:19:01:e6:cd:c7:66:41:c2:4f:c4:85:71:85:68:2b:
03:5d:0f:29:6e:c2:e1:bc:d9:76:2d:4e:2d:53:a3:9a:4d:71:
f2:79:ce:a7:13:34:97:22:2a:7b:3b:d4:9e:45:7f:c4:17:b6:
a0:56:6c:5b:05:10:d1:33:6c:b2:a9:71:1e:40:0c:7a:cc:e9:
15:6d:fc:6d:5b:a5:43:4e:be:51:f6:a4:a5:de:f2:c9:61:e1:
4c:01:07:7a:70:6a:e5:b5:f0:c3:d1:5d:75:91:df:10:9c:3c:
9a:86:e4:cd:d3:a9:38:09:db:ad:65:0c:65:9c:de:23:cf:34:
31:31:6b:93:b5:a0:04:47:29:75:ee:c6:4a:6f:a8:a6:5c:ad:
ad:23:cd:6d:62:14:0a:e8:b7:00:39:9e:29:1c:1e:d9:cc:da:
34:a7:2d:0d:5c:d5:8b:6e:0b:50:67:fe:7b:25:a7:8f:2d:d0:
cf:0d:04:8e:53:74:ea:2f:c6:1f:5a:5b:ae:9b:8d:78:ad:81:
27:58:86:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 23:15:00 2025 by rpki-client