Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9159967/0BBF257815A911E6912D423BC4F9AE02/F79267D61E4011E6945BEB0DC4F9AE02.roa
File: F79267D61E4011E6945BEB0DC4F9AE02.roa (raw, json)
Hash identifier: cmQ5av8kTCYXFN2G0+9/rjITAXOsTESfrKy1NjUqqRk=
Subject key identifier: C0:76:54:51:4D:6B:40:C9:00:9F:42:DD:1F:CF:F7:98:4C:6C:FE:B2
Certificate issuer: /CN=A9159967/serialNumber=5330EEEEB0D0A9535FAC8505E735843AF6CE60AF
Certificate serial: 208F
Authority key identifier: 53:30:EE:EE:B0:D0:A9:53:5F:AC:85:05:E7:35:84:3A:F6:CE:60:AF
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UzDu7rDQqVNfrIUF5zWEOvbOYK8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9159967/0BBF257815A911E6912D423BC4F9AE02/F79267D61E4011E6945BEB0DC4F9AE02.roa
Signing time: Mon 30 Jun 2025 16:25:28 +0000
ROA not before: Mon 30 Jun 2025 16:25:28 +0000
ROA not after: Thu 30 Oct 2025 00:00:00 +0000
asID: 135310
IP address blocks: 103.213.236.0/22 maxlen: 22
103.213.236.0/23 maxlen: 23
103.213.236.0/24 maxlen: 24
103.213.237.0/24 maxlen: 24
103.213.238.0/23 maxlen: 23
103.213.238.0/24 maxlen: 24
103.213.239.0/24 maxlen: 24
192.140.252.0/22 maxlen: 22
192.140.252.0/23 maxlen: 23
192.140.252.0/24 maxlen: 24
192.140.253.0/24 maxlen: 24
192.140.254.0/23 maxlen: 23
192.140.254.0/24 maxlen: 24
192.140.255.0/24 maxlen: 24
2404:b180::/32 maxlen: 32
2404:b180::/48 maxlen: 48
2404:b180:1::/48 maxlen: 48
2404:b180:2::/48 maxlen: 48
2404:b180:1000::/48 maxlen: 48
2404:b180:1001::/48 maxlen: 48
2404:b180:1002::/48 maxlen: 48
2404:b180:1003::/48 maxlen: 48
2404:b180:1004::/48 maxlen: 48
2404:b180:1005::/48 maxlen: 48
2404:b180:1006::/48 maxlen: 48
2404:b180:1007::/48 maxlen: 48
2404:b180:1008::/48 maxlen: 48
2404:b180:1009::/48 maxlen: 48
2404:b180:100a::/48 maxlen: 48
2404:b180:100b::/48 maxlen: 48
2404:b180:100c::/48 maxlen: 48
2404:b180:100d::/48 maxlen: 48
2404:b180:1200::/44 maxlen: 44
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9159967/0BBF257815A911E6912D423BC4F9AE02/UzDu7rDQqVNfrIUF5zWEOvbOYK8.crl
rsync://rpki.apnic.net/member_repository/A9159967/0BBF257815A911E6912D423BC4F9AE02/UzDu7rDQqVNfrIUF5zWEOvbOYK8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UzDu7rDQqVNfrIUF5zWEOvbOYK8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 09 Jul 2025 16:05:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8335 (0x208f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9159967, serialNumber=5330EEEEB0D0A9535FAC8505E735843AF6CE60AF
Validity
Not Before: Jun 30 16:25:28 2025 GMT
Not After : Oct 30 00:00:00 2025 GMT
Subject: CN=6862ba78-f702
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:3f:58:8b:7f:93:95:9c:21:d1:c3:c9:7b:b5:
eb:e3:5f:ec:da:16:05:ff:d8:88:f2:d0:33:02:91:
58:2c:89:8d:8f:93:95:7f:33:2c:cb:b1:89:15:b2:
49:7f:5d:78:91:a3:46:eb:5e:28:44:29:0e:59:82:
0c:9b:54:ae:a4:1d:9e:9b:78:84:d7:49:af:c3:2c:
cb:59:3b:8e:3e:0a:a1:91:3c:05:1e:dd:ba:fe:d0:
42:6e:5c:e8:3f:81:59:9c:90:ec:16:30:37:6f:10:
a7:5e:46:b4:ef:a1:94:0f:f7:97:a9:55:d0:b0:2f:
83:a1:ae:8d:ec:42:b3:34:18:f8:53:29:fb:85:fe:
86:22:d9:3f:de:bd:0c:a4:6a:df:1c:e9:fb:7d:c3:
cb:07:aa:1d:b3:e8:59:80:4d:35:06:b6:81:5b:46:
c7:60:a4:d0:fd:c8:66:e8:12:ad:99:1c:3b:db:f7:
a0:09:72:85:dd:c3:de:29:49:0c:7e:92:c0:c5:d1:
dc:2a:b4:67:e1:d6:8b:e5:0a:8f:ed:a0:60:b4:be:
86:07:3a:ea:7e:7c:9e:2e:36:0b:34:40:d5:fc:81:
97:c1:8c:12:3f:9e:ab:f9:a6:f0:a4:97:9c:a6:3a:
73:91:93:1a:63:cb:42:6d:3d:70:35:ae:28:16:00:
2f:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:76:54:51:4D:6B:40:C9:00:9F:42:DD:1F:CF:F7:98:4C:6C:FE:B2
X509v3 Authority Key Identifier:
keyid:53:30:EE:EE:B0:D0:A9:53:5F:AC:85:05:E7:35:84:3A:F6:CE:60:AF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9159967/0BBF257815A911E6912D423BC4F9AE02/UzDu7rDQqVNfrIUF5zWEOvbOYK8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UzDu7rDQqVNfrIUF5zWEOvbOYK8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9159967/0BBF257815A911E6912D423BC4F9AE02/F79267D61E4011E6945BEB0DC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.213.236.0/22
192.140.252.0/22
IPv6:
2404:b180::/32
Signature Algorithm: sha256WithRSAEncryption
d1:4d:20:68:a3:e5:5e:fd:ca:97:00:f7:84:cb:84:91:a8:88:
1d:3d:8d:12:5a:80:de:c6:bd:12:50:73:18:4a:fb:96:bf:47:
b5:14:35:e7:52:f3:bc:fa:eb:40:2d:30:61:f2:50:84:1d:e0:
1e:4e:78:17:69:34:71:db:c7:fc:4c:e2:c7:eb:46:a5:cd:1a:
ee:f8:6e:c7:82:71:3b:05:ec:a6:f2:80:5e:72:2e:1a:72:c1:
4b:2b:4e:81:87:4b:01:7c:97:e8:76:8f:96:d6:ab:f5:8f:61:
46:d5:3c:6e:00:f3:14:ac:1a:d9:95:41:55:f6:62:e1:c9:8e:
09:9c:82:6e:a8:63:a1:15:5d:06:78:9d:fc:75:bc:ac:ef:db:
36:f0:9f:4d:30:f1:40:9a:30:c3:e7:74:be:84:15:fa:56:ab:
5f:fe:65:aa:12:06:42:55:60:55:33:07:a9:c6:92:48:e4:8f:
af:04:f1:bf:a7:a3:5b:22:97:b5:36:ab:be:67:f7:5c:35:e1:
b1:b6:73:ea:69:d8:bc:24:d0:db:e3:74:07:30:b2:7e:dd:73:
d5:b0:2a:8f:d9:8b:7a:7b:50:7c:d5:82:39:dc:e2:e2:59:4e:
2c:fa:10:25:80:8a:66:77:4e:94:c2:d0:2e:01:ff:a8:a2:5d:
1d:b4:29:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 3 17:30:48 2025 by rpki-client