Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A915C62B/64A05146601211E5BE925070C4F9AE02/AFF73BD2BA0811EAB2479081C4F9AE02.roa
File: AFF73BD2BA0811EAB2479081C4F9AE02.roa (raw, json)
Hash identifier: uGRoaBEpGo4yAmtbgi1VOwtzxczgF1r1S032AP+3DGc=
Subject key identifier: AF:09:78:C7:F6:8A:08:62:F2:D9:65:9F:23:DE:7F:74:66:95:AD:B1
Certificate issuer: /CN=A915C62B/serialNumber=50F20EA9E975AE4C4C8667CB57F7BCF570215C96
Certificate serial: 24F0
Authority key identifier: 50:F2:0E:A9:E9:75:AE:4C:4C:86:67:CB:57:F7:BC:F5:70:21:5C:96
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UPIOqel1rkxMhmfLV_e89XAhXJY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915C62B/64A05146601211E5BE925070C4F9AE02/AFF73BD2BA0811EAB2479081C4F9AE02.roa
Signing time: Tue 16 Sep 2025 15:53:43 +0000
ROA not before: Tue 16 Sep 2025 15:53:43 +0000
ROA not after: Sat 31 Oct 2026 00:00:00 +0000
asID: 19905
IP address blocks: 203.208.149.0/24 maxlen: 24
203.208.151.0/24 maxlen: 24
203.208.152.0/24 maxlen: 24
203.208.153.0/24 maxlen: 24
203.208.154.0/24 maxlen: 24
203.208.155.0/24 maxlen: 24
203.208.157.0/24 maxlen: 24
203.208.158.0/24 maxlen: 24
203.208.166.0/24 maxlen: 24
203.208.171.0/24 maxlen: 24
203.208.172.0/24 maxlen: 24
203.208.173.0/24 maxlen: 24
203.208.178.0/24 maxlen: 24
203.208.182.0/24 maxlen: 24
203.208.183.0/24 maxlen: 24
203.208.185.0/24 maxlen: 24
203.208.190.0/24 maxlen: 24
203.208.193.0/24 maxlen: 24
203.208.194.0/24 maxlen: 24
203.208.221.0/24 maxlen: 24
203.208.223.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A915C62B/64A05146601211E5BE925070C4F9AE02/UPIOqel1rkxMhmfLV_e89XAhXJY.crl
rsync://rpki.apnic.net/member_repository/A915C62B/64A05146601211E5BE925070C4F9AE02/UPIOqel1rkxMhmfLV_e89XAhXJY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UPIOqel1rkxMhmfLV_e89XAhXJY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 25 Oct 2025 16:02:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 9456 (0x24f0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915C62B, serialNumber=50F20EA9E975AE4C4C8667CB57F7BCF570215C96
Validity
Not Before: Sep 16 15:53:43 2025 GMT
Not After : Oct 31 00:00:00 2026 GMT
Subject: CN=68c98807-3304
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:91:da:98:27:8d:06:ef:0a:d6:6e:b8:96:e5:
99:78:08:bf:e2:52:89:cd:74:6e:01:ca:03:14:b6:
d3:cb:ef:71:50:d7:1e:15:51:20:ec:00:59:32:74:
2d:55:89:1c:b0:0d:1e:13:da:25:40:dc:56:ad:28:
4b:4d:47:6f:fe:6d:f3:ed:a5:f7:a3:fe:1a:f1:26:
7d:94:eb:86:88:80:79:41:53:cc:8c:11:ce:24:aa:
e5:89:48:1f:3c:99:44:24:13:76:4f:27:19:12:94:
b6:af:2a:bc:fe:41:63:15:2a:83:7e:07:ea:dc:e5:
51:83:89:e2:06:84:68:97:d4:28:05:89:76:46:13:
0c:7a:62:9b:14:9e:81:ae:13:4e:b0:50:1f:cf:a5:
c0:76:23:be:27:a1:62:48:6a:28:55:d5:42:46:1f:
5a:89:29:64:5e:0f:ad:b6:df:21:99:38:86:6e:1e:
57:2c:27:2b:1a:8c:82:8c:e1:bf:e7:ef:ea:6d:8c:
da:49:59:92:bb:ca:a0:4b:7b:68:0a:03:28:74:a2:
8e:fd:d4:f2:f6:b8:6c:bf:d0:f4:3f:30:85:a1:38:
8c:32:8c:f2:54:93:ba:53:af:2f:85:16:e6:e1:18:
ad:70:af:e8:b0:56:10:dd:05:28:78:d2:48:38:b3:
20:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:09:78:C7:F6:8A:08:62:F2:D9:65:9F:23:DE:7F:74:66:95:AD:B1
X509v3 Authority Key Identifier:
keyid:50:F2:0E:A9:E9:75:AE:4C:4C:86:67:CB:57:F7:BC:F5:70:21:5C:96
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915C62B/64A05146601211E5BE925070C4F9AE02/UPIOqel1rkxMhmfLV_e89XAhXJY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UPIOqel1rkxMhmfLV_e89XAhXJY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915C62B/64A05146601211E5BE925070C4F9AE02/AFF73BD2BA0811EAB2479081C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
203.208.149.0/24
203.208.151.0-203.208.155.255
203.208.157.0-203.208.158.255
203.208.166.0/24
203.208.171.0-203.208.173.255
203.208.178.0/24
203.208.182.0/23
203.208.185.0/24
203.208.190.0/24
203.208.193.0-203.208.194.255
203.208.221.0/24
203.208.223.0/24
Signature Algorithm: sha256WithRSAEncryption
58:63:3b:94:3e:e4:01:80:39:9d:ab:a2:1d:2a:31:e7:84:94:
77:eb:06:3d:f9:22:2d:00:2c:a2:89:0a:c5:4a:f9:12:d6:79:
2b:7e:91:54:a4:11:e3:54:64:6d:24:cf:fc:f9:09:1f:b2:40:
0b:aa:31:cd:c3:8d:19:51:69:fc:7d:21:dd:94:1f:65:ad:e1:
88:07:ac:ba:1f:47:4b:76:d3:87:ad:8f:24:52:86:9c:cd:71:
b2:e3:c7:21:a5:9a:6d:57:39:91:e1:20:ad:e6:43:aa:79:24:
95:e3:9f:9c:74:91:83:98:0b:76:36:4d:de:f6:39:a9:22:7e:
16:bd:c1:29:79:cc:c8:3c:79:f4:99:00:9a:f3:c9:ff:db:3b:
54:3d:ed:75:65:71:d0:a9:c0:3b:b1:36:a3:29:bd:98:8b:9f:
e2:c2:e4:53:54:28:00:5b:5e:2d:a7:87:9c:76:77:c8:dd:49:
a2:69:c3:d0:4a:32:f4:32:96:d4:40:df:5f:9d:6c:6c:c6:41:
ad:4e:5e:b8:5d:46:c6:6c:b4:15:f0:76:04:04:3d:85:49:a1:
a2:ba:a1:af:c6:15:72:0e:e2:4f:f8:54:23:e7:dc:89:fe:c6:
42:9f:27:9d:9e:20:a7:9c:bf:3c:d4:40:f7:ed:96:fb:de:7e:
f5:1c:5d:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 21:04:27 2025 by rpki-client