Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91402DC/2D51AF42FD3E11E888C53944C4F9AE02/B5B4AB0839DA11EF9ECCF886C4F9AE02.roa
File: B5B4AB0839DA11EF9ECCF886C4F9AE02.roa (raw, json)
Hash identifier: 8rT3PqZci4f5Ml5bfePstSioC/qOql4PWazhv4sDx8U=
Subject key identifier: CB:5F:8C:5F:B7:D7:9E:D3:A1:1D:67:6E:A8:41:CD:2B:C2:49:56:F7
Certificate issuer: /CN=A91402DC/serialNumber=C2B9F5F3C68C576727239B92A93B36297D1B1653
Certificate serial: 135E
Authority key identifier: C2:B9:F5:F3:C6:8C:57:67:27:23:9B:92:A9:3B:36:29:7D:1B:16:53
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wrn188aMV2cnI5uSqTs2KX0bFlM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91402DC/2D51AF42FD3E11E888C53944C4F9AE02/B5B4AB0839DA11EF9ECCF886C4F9AE02.roa
Signing time: Wed 10 Sep 2025 09:10:15 +0000
ROA not before: Wed 10 Sep 2025 09:10:15 +0000
ROA not after: Wed 30 Sep 2026 00:00:00 +0000
asID: 138345
IP address blocks: 27.54.32.0/22 maxlen: 22
27.54.37.0/24 maxlen: 24
101.127.200.0/22 maxlen: 22
101.127.204.0/23 maxlen: 23
113.10.64.0/18 maxlen: 24
117.20.128.0/23 maxlen: 24
117.20.130.0/23 maxlen: 24
117.20.140.0/22 maxlen: 24
117.20.144.0/22 maxlen: 24
117.20.150.0/23 maxlen: 24
117.20.152.0/23 maxlen: 24
117.20.154.0/24 maxlen: 24
117.20.160.0/19 maxlen: 24
122.11.150.0/23 maxlen: 23
122.11.152.0/21 maxlen: 21
122.11.169.0/24 maxlen: 24
122.11.170.0/23 maxlen: 23
122.11.172.0/24 maxlen: 24
122.11.197.0/24 maxlen: 24
122.11.212.0/24 maxlen: 24
122.11.213.0/24 maxlen: 24
122.11.214.0/24 maxlen: 24
122.11.215.0/24 maxlen: 24
122.11.216.0/24 maxlen: 24
122.11.217.0/24 maxlen: 24
122.11.218.0/24 maxlen: 24
122.11.219.0/24 maxlen: 24
122.11.245.0/24 maxlen: 24
122.11.246.0/24 maxlen: 24
171.0.0.0/15 maxlen: 15
171.0.0.0/16 maxlen: 24
171.1.0.0/16 maxlen: 24
171.207.0.0/16 maxlen: 24
203.116.107.0/24 maxlen: 24
203.116.116.0/24 maxlen: 24
203.116.119.0/24 maxlen: 24
203.116.181.0/24 maxlen: 24
203.117.40.0/23 maxlen: 23
203.117.245.0/24 maxlen: 24
203.117.246.0/24 maxlen: 24
203.117.247.0/24 maxlen: 24
203.117.248.0/22 maxlen: 22
203.117.252.0/24 maxlen: 24
203.117.253.0/24 maxlen: 24
2406:3000:5a::/48 maxlen: 56
2406:3000:5b::/48 maxlen: 56
2406:3000:5c::/48 maxlen: 56
2406:3000:5d::/48 maxlen: 56
2406:3000:202::/47 maxlen: 48
2406:3000:204::/46 maxlen: 46
2406:3000:204::/48 maxlen: 48
2406:3000:205::/48 maxlen: 48
2406:3000:206::/48 maxlen: 48
2406:3000:207::/48 maxlen: 48
2406:3000:208::/47 maxlen: 48
2406:3000:20a::/47 maxlen: 48
2406:3000:20c::/46 maxlen: 46
2406:3000:20c::/48 maxlen: 48
2406:3000:20d::/48 maxlen: 48
2406:3000:20e::/48 maxlen: 48
2406:3000:20f::/48 maxlen: 48
2406:3000:210::/47 maxlen: 48
2406:3000:212::/48 maxlen: 48
2406:3000:213::/48 maxlen: 48
2406:3000:213:e000::/51 maxlen: 51
2406:3000:214::/48 maxlen: 48
2406:3002:40::/48 maxlen: 56
2406:3002:41:8000::/50 maxlen: 50
2406:3002:50::/48 maxlen: 56
2406:3002:402:200::/56 maxlen: 56
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91402DC/2D51AF42FD3E11E888C53944C4F9AE02/wrn188aMV2cnI5uSqTs2KX0bFlM.crl
rsync://rpki.apnic.net/member_repository/A91402DC/2D51AF42FD3E11E888C53944C4F9AE02/wrn188aMV2cnI5uSqTs2KX0bFlM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wrn188aMV2cnI5uSqTs2KX0bFlM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 25 Oct 2025 17:42:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4958 (0x135e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91402DC, serialNumber=C2B9F5F3C68C576727239B92A93B36297D1B1653
Validity
Not Before: Sep 10 09:10:15 2025 GMT
Not After : Sep 30 00:00:00 2026 GMT
Subject: CN=68c14077-782e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:76:5e:2d:7b:b2:44:9e:5b:a8:18:8a:61:26:
a2:b0:95:d1:e5:fb:d2:d9:e4:f7:c4:ba:81:33:a3:
fc:ab:3b:b0:b8:76:97:e2:4d:59:6f:97:27:f1:dd:
7d:a2:46:11:04:03:35:29:ef:70:08:47:72:60:05:
49:24:46:19:f0:3a:8a:13:2a:65:f5:0d:e4:9c:66:
68:e1:87:d3:bd:04:05:5b:32:d8:f8:3a:98:bd:05:
ea:6a:e5:34:29:54:da:a8:33:49:69:ee:b9:ed:a2:
20:e4:4c:7f:8f:d5:6f:9f:ac:c5:ae:94:98:96:c6:
9e:45:d4:ca:1e:dc:4c:da:87:8d:f3:aa:de:23:e2:
b0:d0:a6:3d:90:8f:9d:38:90:1c:3f:19:df:c0:a4:
29:f9:77:5f:77:90:e2:ba:e6:4d:26:f1:d5:26:e6:
ab:35:50:72:a8:35:c2:84:22:4b:08:de:06:cc:60:
d2:30:29:b2:3f:ed:46:37:93:07:77:b5:32:81:01:
5e:0d:22:9e:22:60:0f:6a:43:dc:13:69:2a:73:11:
16:34:5c:1e:75:8a:04:0c:1b:71:b3:43:3d:f6:aa:
c5:fc:6d:16:00:e4:ba:e8:b8:b5:4b:b7:c7:61:4e:
2b:cb:12:b0:ad:e3:a3:4c:a6:43:bc:df:cb:fb:fe:
ad:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:5F:8C:5F:B7:D7:9E:D3:A1:1D:67:6E:A8:41:CD:2B:C2:49:56:F7
X509v3 Authority Key Identifier:
keyid:C2:B9:F5:F3:C6:8C:57:67:27:23:9B:92:A9:3B:36:29:7D:1B:16:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91402DC/2D51AF42FD3E11E888C53944C4F9AE02/wrn188aMV2cnI5uSqTs2KX0bFlM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wrn188aMV2cnI5uSqTs2KX0bFlM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91402DC/2D51AF42FD3E11E888C53944C4F9AE02/B5B4AB0839DA11EF9ECCF886C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
27.54.32.0/22
27.54.37.0/24
101.127.200.0-101.127.205.255
113.10.64.0/18
117.20.128.0/22
117.20.140.0-117.20.147.255
117.20.150.0-117.20.154.255
117.20.160.0/19
122.11.150.0-122.11.159.255
122.11.169.0-122.11.172.255
122.11.197.0/24
122.11.212.0-122.11.219.255
122.11.245.0-122.11.246.255
171.0.0.0/15
171.207.0.0/16
203.116.107.0/24
203.116.116.0/24
203.116.119.0/24
203.116.181.0/24
203.117.40.0/23
203.117.245.0-203.117.253.255
IPv6:
2406:3000:5a::-2406:3000:5d:ffff:ffff:ffff:ffff:ffff
2406:3000:202::-2406:3000:214:ffff:ffff:ffff:ffff:ffff
2406:3002:40::/48
2406:3002:41:8000::/50
2406:3002:50::/48
2406:3002:402:200::/56
Signature Algorithm: sha256WithRSAEncryption
23:26:2e:94:fa:2d:29:ad:92:b2:32:26:aa:3c:77:a9:48:d4:
4a:e7:87:0a:f3:14:5e:4c:02:dd:4b:9b:43:03:23:19:12:9e:
85:be:21:06:a5:38:31:4f:52:0e:f2:31:02:27:72:47:fc:d3:
b7:ba:0a:4b:29:a1:fd:e8:d8:95:89:db:1c:37:f7:9b:79:ed:
a4:bc:64:0e:1d:54:77:05:16:8e:b6:2f:1d:df:80:32:ee:87:
2e:ab:a1:3e:7d:ee:39:8d:57:4e:f2:ea:0c:94:00:fd:00:15:
d9:a4:d0:f1:5c:d5:ed:10:8a:69:9d:8a:8e:93:dc:13:7e:a4:
ef:61:e1:49:93:af:47:3f:2c:9f:9b:8c:17:56:96:aa:8f:a2:
1a:0d:92:0c:0f:c8:c8:58:f3:df:00:66:da:da:fe:62:60:6a:
7b:1e:2b:e3:04:2a:2c:4e:39:aa:54:ed:41:f5:a0:48:c4:c8:
f8:16:3d:10:10:fa:fa:4b:83:93:82:2b:71:19:cd:25:bf:a8:
2f:52:43:15:74:dd:e1:ab:f6:dc:3d:3d:9c:63:75:f9:26:d0:
7f:e4:ba:f6:54:e6:98:d7:a3:0b:3e:d6:6a:c0:b9:26:e2:fd:
19:ab:bd:fd:40:ad:f4:ad:9a:2a:5a:3a:45:6d:31:f1:97:2b:
3d:1f:6f:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 05:36:01 2025 by rpki-client