Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A916CE83/9564191A43B811E9ABA22A34C4F9AE02/6657C8D243B911E9AE253437C4F9AE02.roa
File: 6657C8D243B911E9AE253437C4F9AE02.roa (raw, json)
Hash identifier: lt8gmY8g1SyOkxFazii9tDuABaAafi0NX+TiAw/IKTA=
Subject key identifier: DC:E1:99:1D:C0:BC:47:14:31:88:8A:74:BA:ED:FE:10:F4:52:F7:E9
Certificate issuer: /CN=A916CE83/serialNumber=B066E241050C38C349CB25D44014450F4F5018AE
Certificate serial: 1066
Authority key identifier: B0:66:E2:41:05:0C:38:C3:49:CB:25:D4:40:14:45:0F:4F:50:18:AE
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sGbiQQUMOMNJyyXUQBRFD09QGK4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916CE83/9564191A43B811E9ABA22A34C4F9AE02/6657C8D243B911E9AE253437C4F9AE02.roa
Signing time: Wed 13 Aug 2025 07:12:09 +0000
ROA not before: Wed 13 Aug 2025 07:12:09 +0000
ROA not after: Fri 01 May 2026 00:00:00 +0000
asID: 138600
IP address blocks: 103.134.56.0/22 maxlen: 22
103.134.56.0/23 maxlen: 23
103.134.56.0/24 maxlen: 24
103.134.57.0/24 maxlen: 24
103.134.58.0/23 maxlen: 23
103.134.58.0/24 maxlen: 24
103.134.59.0/24 maxlen: 24
2401:84e0::/32 maxlen: 32
2401:84e0:2::/48 maxlen: 48
2401:84e0:3::/48 maxlen: 48
2401:84e0:4::/48 maxlen: 48
2401:84e0:5::/48 maxlen: 48
2401:84e0:6::/48 maxlen: 48
2401:84e0:7::/48 maxlen: 48
2401:84e0:8::/48 maxlen: 48
2401:84e0:9::/48 maxlen: 48
2401:84e0:a::/48 maxlen: 48
2401:84e0:b::/48 maxlen: 48
2401:84e0:c::/48 maxlen: 48
2401:84e0:d::/48 maxlen: 48
2401:84e0:e::/48 maxlen: 48
2401:84e0:f::/48 maxlen: 48
2401:84e0:10::/48 maxlen: 48
2401:84e0:11::/48 maxlen: 48
2401:84e0:12::/48 maxlen: 48
2401:84e0:13::/48 maxlen: 48
2401:84e0:14::/48 maxlen: 48
2401:84e0:15::/48 maxlen: 48
2401:84e0:16::/48 maxlen: 48
2401:84e0:17::/48 maxlen: 48
2401:84e0:18::/48 maxlen: 48
2401:84e0:19::/48 maxlen: 48
2401:84e0:1a::/48 maxlen: 48
2401:84e0:1b::/48 maxlen: 48
2401:84e0:1c::/48 maxlen: 48
2401:84e0:1d::/48 maxlen: 48
2401:84e0:1e::/48 maxlen: 48
2401:84e0:1f::/48 maxlen: 48
2401:84e0:20::/48 maxlen: 48
2401:84e0:21::/48 maxlen: 48
2401:84e0:22::/48 maxlen: 48
2401:84e0:23::/48 maxlen: 48
2401:84e0:24::/48 maxlen: 48
2401:84e0:25::/48 maxlen: 48
2401:84e0:26::/48 maxlen: 48
2401:84e0:27::/48 maxlen: 48
2401:84e0:28::/48 maxlen: 48
2401:84e0:29::/48 maxlen: 48
2401:84e0:2a::/48 maxlen: 48
2401:84e0:2b::/48 maxlen: 48
2401:84e0:2c::/48 maxlen: 48
2401:84e0:2d::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A916CE83/9564191A43B811E9ABA22A34C4F9AE02/sGbiQQUMOMNJyyXUQBRFD09QGK4.crl
rsync://rpki.apnic.net/member_repository/A916CE83/9564191A43B811E9ABA22A34C4F9AE02/sGbiQQUMOMNJyyXUQBRFD09QGK4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sGbiQQUMOMNJyyXUQBRFD09QGK4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 29 Aug 2025 17:32:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4198 (0x1066)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916CE83, serialNumber=B066E241050C38C349CB25D44014450F4F5018AE
Validity
Not Before: Aug 13 07:12:09 2025 GMT
Not After : May 1 00:00:00 2026 GMT
Subject: CN=689c3ac8-cd7a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:3d:5d:6a:e9:f1:ae:20:5b:d1:c4:dc:a5:8e:
63:21:df:42:a1:7e:f7:ac:1e:43:6f:b3:83:1d:9e:
b0:8a:2f:f6:01:c2:25:31:55:e5:2b:ef:50:4d:6a:
e6:08:5a:af:dc:c9:83:93:8b:85:31:24:d8:4d:2f:
dd:a8:ee:4e:57:9b:b5:66:f8:ea:4a:01:b2:33:48:
f4:db:e4:e7:a5:f5:1b:e8:99:a6:2a:f5:b3:b0:0a:
f1:da:56:88:da:a0:65:8b:b2:c9:9e:08:ee:36:be:
cf:2e:e5:08:b8:29:4c:96:9b:cb:fe:62:fc:f9:c0:
6b:7c:67:8c:cb:68:a1:31:89:99:41:97:d0:e7:d9:
00:ff:da:00:1e:30:b8:d1:2c:f4:49:0d:d3:52:86:
03:2d:2f:0c:b9:1e:e8:78:3b:b4:b8:9a:29:a9:63:
4a:fe:54:bb:73:ae:47:31:04:1b:b8:d6:7f:0e:0c:
36:60:b0:11:ea:a7:2a:aa:5a:2e:db:78:17:41:36:
43:12:0b:2c:b9:65:96:0e:c3:9b:84:b6:b9:dc:9a:
12:aa:92:aa:27:1d:0e:5f:c2:71:20:a2:f8:54:cc:
0e:67:53:25:72:85:b6:69:dd:e5:98:34:93:67:d9:
c0:b7:7d:ec:b0:7a:1d:ca:18:b9:6d:aa:c2:6a:ef:
3d:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:E1:99:1D:C0:BC:47:14:31:88:8A:74:BA:ED:FE:10:F4:52:F7:E9
X509v3 Authority Key Identifier:
keyid:B0:66:E2:41:05:0C:38:C3:49:CB:25:D4:40:14:45:0F:4F:50:18:AE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916CE83/9564191A43B811E9ABA22A34C4F9AE02/sGbiQQUMOMNJyyXUQBRFD09QGK4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sGbiQQUMOMNJyyXUQBRFD09QGK4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916CE83/9564191A43B811E9ABA22A34C4F9AE02/6657C8D243B911E9AE253437C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.134.56.0/22
IPv6:
2401:84e0::/32
Signature Algorithm: sha256WithRSAEncryption
6e:61:f4:bd:aa:c3:e7:c8:50:6d:99:e0:9f:a3:20:e2:ab:fc:
39:44:62:48:4f:ca:af:0e:1a:5d:8d:a9:b7:57:61:a4:17:12:
ea:da:6e:31:18:b3:2f:34:59:94:49:98:69:3d:06:5e:af:0e:
ac:5c:19:ff:6c:78:e7:b9:35:eb:20:6d:4d:b1:28:c3:32:43:
cc:5c:2c:e8:ba:ce:d2:d9:15:ed:e6:c4:c6:fe:70:d2:a0:8e:
06:1b:b0:e3:60:f4:f0:bb:ff:fd:af:80:00:74:e2:71:2c:a2:
11:1c:76:34:ea:19:4c:37:ef:9b:51:ea:d0:72:2e:16:c4:7d:
e1:d5:88:da:ec:ea:17:f3:8c:9c:e2:6e:e8:27:a8:1a:1c:49:
2f:cd:21:e3:63:c7:57:d3:da:0b:bc:cd:56:1a:25:0c:13:46:
8c:68:c5:b1:25:b7:c2:56:ce:53:bd:0d:f9:84:5c:ab:a4:36:
f8:25:1b:5f:d6:0e:ee:e5:aa:39:55:8a:e4:66:7b:32:fb:2e:
49:45:0e:3e:86:56:e8:b0:6b:24:8e:c8:91:69:17:8a:62:ac:
39:75:3a:c3:b3:34:65:c5:64:0d:e9:36:b5:59:99:5e:9f:b1:
23:df:5d:5c:bb:70:24:34:d6:ca:64:c5:74:fa:32:e6:ee:c1:
0c:84:d3:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 07:20:23 2025 by rpki-client