Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A916ACF5/5B30C49A6F3C11EFB5899612C4F9AE02/B538B552701211EFB6868329C4F9AE02.roa
File: B538B552701211EFB6868329C4F9AE02.roa (raw, json)
Hash identifier: 5dSL8DOy/WJ/deJlqUIkaVszqeWmawzFbSAiDop9ztg=
Subject key identifier: FC:57:DF:45:0A:B3:D5:57:A7:1C:A3:7B:74:EE:0F:87:A2:DF:E0:B2
Certificate issuer: /CN=A916ACF5/serialNumber=FD5A3F5A1F335744C0C142AC4217ECBC3D20CA0F
Certificate serial: C8
Authority key identifier: FD:5A:3F:5A:1F:33:57:44:C0:C1:42:AC:42:17:EC:BC:3D:20:CA:0F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_Vo_Wh8zV0TAwUKsQhfsvD0gyg8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916ACF5/5B30C49A6F3C11EFB5899612C4F9AE02/B538B552701211EFB6868329C4F9AE02.roa
Signing time: Thu 11 Sep 2025 06:45:48 +0000
ROA not before: Thu 11 Sep 2025 06:45:48 +0000
ROA not after: Tue 01 Dec 2026 00:00:00 +0000
asID: 17439
IP address blocks: 103.30.152.0/23 maxlen: 24
103.30.154.0/24 maxlen: 24
103.30.155.0/24 maxlen: 24
123.108.32.0/19 maxlen: 24
124.153.64.0/19 maxlen: 24
124.153.96.0/19 maxlen: 24
180.179.0.0/21 maxlen: 24
180.179.8.0/21 maxlen: 24
180.179.16.0/20 maxlen: 24
180.179.32.0/19 maxlen: 24
180.179.64.0/19 maxlen: 24
180.179.96.0/19 maxlen: 23
180.179.96.0/20 maxlen: 24
180.179.112.0/21 maxlen: 24
180.179.120.0/22 maxlen: 24
180.179.124.0/23 maxlen: 24
180.179.128.0/19 maxlen: 20
180.179.128.0/24 maxlen: 24
180.179.129.0/24 maxlen: 24
180.179.130.0/24 maxlen: 24
180.179.132.0/24 maxlen: 24
180.179.133.0/24 maxlen: 24
180.179.134.0/24 maxlen: 24
180.179.135.0/24 maxlen: 24
180.179.136.0/23 maxlen: 24
180.179.138.0/24 maxlen: 24
180.179.139.0/24 maxlen: 24
180.179.140.0/23 maxlen: 24
180.179.142.0/24 maxlen: 24
180.179.143.0/24 maxlen: 24
180.179.144.0/24 maxlen: 24
180.179.145.0/24 maxlen: 24
180.179.146.0/24 maxlen: 24
180.179.149.0/24 maxlen: 24
180.179.151.0/24 maxlen: 24
180.179.153.0/24 maxlen: 24
180.179.154.0/24 maxlen: 24
180.179.155.0/24 maxlen: 24
180.179.156.0/24 maxlen: 24
180.179.157.0/24 maxlen: 24
180.179.158.0/24 maxlen: 24
180.179.159.0/24 maxlen: 24
180.179.160.0/19 maxlen: 20
180.179.160.0/24 maxlen: 24
180.179.161.0/24 maxlen: 24
180.179.162.0/23 maxlen: 23
180.179.164.0/24 maxlen: 24
180.179.165.0/24 maxlen: 24
180.179.166.0/24 maxlen: 24
180.179.167.0/24 maxlen: 24
180.179.168.0/24 maxlen: 24
180.179.169.0/24 maxlen: 24
180.179.170.0/23 maxlen: 23
180.179.172.0/24 maxlen: 24
180.179.173.0/24 maxlen: 24
180.179.174.0/24 maxlen: 24
180.179.175.0/24 maxlen: 24
180.179.177.0/24 maxlen: 24
180.179.178.0/24 maxlen: 24
180.179.179.0/24 maxlen: 24
180.179.180.0/24 maxlen: 24
180.179.182.0/23 maxlen: 23
180.179.184.0/24 maxlen: 24
180.179.185.0/24 maxlen: 24
180.179.186.0/24 maxlen: 24
180.179.192.0/19 maxlen: 20
180.179.192.0/22 maxlen: 22
180.179.192.0/24 maxlen: 24
180.179.193.0/24 maxlen: 24
180.179.194.0/24 maxlen: 24
180.179.195.0/24 maxlen: 24
180.179.196.0/22 maxlen: 22
180.179.196.0/24 maxlen: 24
180.179.197.0/24 maxlen: 24
180.179.198.0/24 maxlen: 24
180.179.199.0/24 maxlen: 24
180.179.200.0/22 maxlen: 22
180.179.200.0/24 maxlen: 24
180.179.201.0/24 maxlen: 24
180.179.202.0/24 maxlen: 24
180.179.203.0/24 maxlen: 24
180.179.204.0/22 maxlen: 23
180.179.206.0/23 maxlen: 24
180.179.208.0/24 maxlen: 24
180.179.209.0/24 maxlen: 24
180.179.211.0/24 maxlen: 24
180.179.212.0/24 maxlen: 24
180.179.213.0/24 maxlen: 24
180.179.214.0/24 maxlen: 24
180.179.215.0/24 maxlen: 24
180.179.216.0/24 maxlen: 24
180.179.217.0/24 maxlen: 24
180.179.218.0/24 maxlen: 24
180.179.219.0/24 maxlen: 24
180.179.220.0/24 maxlen: 24
180.179.221.0/24 maxlen: 24
180.179.222.0/24 maxlen: 24
180.179.223.0/24 maxlen: 24
180.179.224.0/19 maxlen: 20
180.179.224.0/23 maxlen: 23
180.179.224.0/24 maxlen: 24
180.179.226.0/24 maxlen: 24
180.179.227.0/24 maxlen: 24
180.179.228.0/24 maxlen: 24
180.179.229.0/24 maxlen: 24
180.179.230.0/24 maxlen: 24
180.179.231.0/24 maxlen: 24
180.179.232.0/24 maxlen: 24
180.179.233.0/24 maxlen: 24
180.179.234.0/24 maxlen: 24
180.179.235.0/24 maxlen: 24
180.179.236.0/24 maxlen: 24
180.179.237.0/24 maxlen: 24
180.179.239.0/24 maxlen: 24
180.179.240.0/20 maxlen: 21
180.179.240.0/24 maxlen: 24
180.179.242.0/24 maxlen: 24
180.179.243.0/24 maxlen: 24
180.179.244.0/24 maxlen: 24
180.179.245.0/24 maxlen: 24
180.179.246.0/24 maxlen: 24
180.179.247.0/24 maxlen: 24
180.179.248.0/24 maxlen: 24
180.179.249.0/24 maxlen: 24
180.179.253.0/24 maxlen: 24
180.179.255.0/24 maxlen: 24
202.87.32.0/19 maxlen: 24
2401:8800::/40 maxlen: 40
2401:8800:200::/40 maxlen: 40
2401:8800:400::/40 maxlen: 40
2401:8800:600::/40 maxlen: 40
2401:8800:800::/40 maxlen: 40
2401:8800:a00::/40 maxlen: 40
2401:8800:a00::/48 maxlen: 48
2401:8800:a03::/48 maxlen: 48
2401:8800:c00::/40 maxlen: 40
2401:8800:c05::/48 maxlen: 48
2401:8800:e00::/40 maxlen: 40
2401:8800:1000::/40 maxlen: 40
2401:8800:1100::/40 maxlen: 40
2401:8800:1200::/40 maxlen: 40
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A916ACF5/5B30C49A6F3C11EFB5899612C4F9AE02/_Vo_Wh8zV0TAwUKsQhfsvD0gyg8.crl
rsync://rpki.apnic.net/member_repository/A916ACF5/5B30C49A6F3C11EFB5899612C4F9AE02/_Vo_Wh8zV0TAwUKsQhfsvD0gyg8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_Vo_Wh8zV0TAwUKsQhfsvD0gyg8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 26 Oct 2025 08:46:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 200 (0xc8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916ACF5, serialNumber=FD5A3F5A1F335744C0C142AC4217ECBC3D20CA0F
Validity
Not Before: Sep 11 06:45:48 2025 GMT
Not After : Dec 1 00:00:00 2026 GMT
Subject: CN=68c2701c-776a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:aa:57:b3:55:63:b7:bf:72:57:af:a9:e3:2e:
c3:69:72:64:94:2f:0e:88:6e:f7:75:d3:26:cf:77:
1f:a2:f1:30:7f:a6:b2:4b:7e:8b:5e:9b:11:b9:b8:
6e:51:ee:fe:c9:e8:b4:d8:12:00:1c:98:12:36:cd:
02:ca:c9:eb:69:b4:20:bd:7e:40:0f:8e:73:4d:4f:
17:ce:d8:d4:46:a2:20:20:05:00:3c:b7:6b:d1:62:
ea:b2:58:cd:12:d2:ce:66:b4:25:7f:2b:bc:4e:0e:
17:3a:ab:e1:01:99:0d:13:87:ed:3e:bf:ee:bd:3e:
2e:e2:62:07:b9:55:47:04:dd:13:ba:ea:7a:43:b1:
50:80:ab:1d:ea:70:2a:74:48:d7:24:de:e1:9a:00:
1e:54:3c:04:fc:c6:33:75:a7:12:fd:ed:4c:7c:40:
a6:22:8e:f3:ce:8e:bc:e5:10:83:67:89:40:00:e5:
c1:36:c3:81:e6:e1:02:7a:c9:68:33:13:60:f6:c3:
6f:3f:75:92:60:86:5e:ab:74:f5:19:d1:f7:db:ab:
e3:e6:d7:9a:d2:f9:dd:62:90:8c:26:63:ee:33:ce:
7f:b3:b9:f1:56:ab:f9:75:60:e4:19:b0:10:4b:94:
f2:1e:f6:73:73:d5:b5:a6:20:f9:82:72:90:64:9e:
34:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:57:DF:45:0A:B3:D5:57:A7:1C:A3:7B:74:EE:0F:87:A2:DF:E0:B2
X509v3 Authority Key Identifier:
keyid:FD:5A:3F:5A:1F:33:57:44:C0:C1:42:AC:42:17:EC:BC:3D:20:CA:0F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916ACF5/5B30C49A6F3C11EFB5899612C4F9AE02/_Vo_Wh8zV0TAwUKsQhfsvD0gyg8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_Vo_Wh8zV0TAwUKsQhfsvD0gyg8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916ACF5/5B30C49A6F3C11EFB5899612C4F9AE02/B538B552701211EFB6868329C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.30.152.0/22
123.108.32.0/19
124.153.64.0/18
180.179.0.0/16
202.87.32.0/19
IPv6:
2401:8800::/40
2401:8800:200::/40
2401:8800:400::/40
2401:8800:600::/40
2401:8800:800::/40
2401:8800:a00::/40
2401:8800:c00::/40
2401:8800:e00::/40
2401:8800:1000::-2401:8800:12ff:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
62:aa:06:12:d8:c1:59:d8:7d:f4:21:16:ce:1e:1a:77:a4:84:
ce:cf:24:49:4b:ca:d7:16:44:c9:73:f3:7a:6f:7a:3a:94:87:
f4:0f:90:79:2a:7b:08:a7:14:e7:3d:56:dd:de:c8:72:8e:94:
f8:31:ad:83:e1:c1:a2:fd:bb:fe:2e:68:64:d7:f3:07:be:3f:
77:84:de:cf:2c:cd:d6:1d:f3:07:b2:c2:f9:2f:89:84:6f:9b:
bf:19:25:7c:31:e1:dd:1e:6e:cb:18:76:5d:4a:55:c3:6d:2d:
9f:1e:a5:a9:d6:12:6c:f5:fa:ca:44:82:3b:da:22:72:dd:14:
ab:5d:01:0e:c2:9c:8b:2b:5e:2c:c5:17:c6:54:eb:c6:c6:73:
e7:54:8a:df:1f:f9:69:4a:aa:70:a7:2e:26:37:21:5e:34:4b:
cb:66:f4:72:02:17:aa:de:93:24:cf:5c:63:b7:00:2f:8b:f1:
7f:7e:01:25:26:7e:dc:aa:c4:e5:92:5f:2b:c6:8d:ee:99:39:
3c:8d:8b:8b:d6:29:9a:70:ac:a6:72:ea:7b:a4:a8:78:f8:5f:
0e:6a:1d:81:9a:b9:db:99:bb:12:6a:c4:01:a2:66:ed:6c:02:
37:c4:2e:60:8e:c0:7b:db:65:8a:02:3d:8d:3e:44:20:a7:d8:
6c:25:66:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 02:37:07 2025 by rpki-client