Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A918404E/BC030C76F1DA11EAAFC6C70AC4F9AE02/8C2F4DBA8D3111EFA61E9282C4F9AE02.roa
File: 8C2F4DBA8D3111EFA61E9282C4F9AE02.roa (raw, json)
Hash identifier: KgLz5HsW8UOR0Qo+kzG0XV7/s9WwfN/Pyvk3BeK3Mjg=
Subject key identifier: D9:69:72:1E:FE:2C:5A:F8:3A:F4:3B:9D:86:BF:63:61:33:19:36:99
Certificate issuer: /CN=A918404E/serialNumber=9C7C776F6BF6003283F0CAB43E2DC61494997162
Certificate serial: 0957
Authority key identifier: 9C:7C:77:6F:6B:F6:00:32:83:F0:CA:B4:3E:2D:C6:14:94:99:71:62
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nHx3b2v2ADKD8Mq0Pi3GFJSZcWI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918404E/BC030C76F1DA11EAAFC6C70AC4F9AE02/8C2F4DBA8D3111EFA61E9282C4F9AE02.roa
Signing time: Thu 18 Sep 2025 08:01:00 +0000
ROA not before: Thu 18 Sep 2025 08:01:00 +0000
ROA not after: Sat 31 Oct 2026 00:00:00 +0000
asID: 132115
IP address blocks: 45.117.200.0/24 maxlen: 24
45.117.201.0/24 maxlen: 24
45.117.202.0/24 maxlen: 24
45.117.203.0/24 maxlen: 24
45.117.204.0/24 maxlen: 24
45.117.205.0/24 maxlen: 24
45.117.206.0/24 maxlen: 24
45.117.207.0/24 maxlen: 24
45.126.160.0/24 maxlen: 24
45.126.161.0/24 maxlen: 24
45.126.162.0/24 maxlen: 24
45.126.163.0/24 maxlen: 24
103.24.188.0/24 maxlen: 24
103.24.189.0/24 maxlen: 24
103.24.190.0/24 maxlen: 24
103.24.191.0/24 maxlen: 24
103.57.236.0/24 maxlen: 24
103.57.237.0/24 maxlen: 24
103.57.238.0/24 maxlen: 24
103.57.239.0/24 maxlen: 24
103.57.240.0/24 maxlen: 24
103.57.241.0/24 maxlen: 24
103.57.242.0/24 maxlen: 24
103.57.243.0/24 maxlen: 24
103.57.244.0/24 maxlen: 24
103.57.245.0/24 maxlen: 24
103.57.246.0/24 maxlen: 24
103.57.247.0/24 maxlen: 24
103.70.208.0/24 maxlen: 24
103.70.209.0/24 maxlen: 24
103.70.210.0/24 maxlen: 24
103.70.211.0/24 maxlen: 24
103.75.192.0/24 maxlen: 24
103.75.193.0/24 maxlen: 24
103.75.194.0/24 maxlen: 24
103.75.195.0/24 maxlen: 24
103.225.176.0/24 maxlen: 24
103.225.177.0/24 maxlen: 24
103.225.178.0/24 maxlen: 24
103.225.179.0/24 maxlen: 24
103.244.4.0/24 maxlen: 24
103.244.5.0/24 maxlen: 24
103.244.6.0/24 maxlen: 24
103.244.7.0/24 maxlen: 24
150.107.10.0/24 maxlen: 24
150.107.11.0/24 maxlen: 24
150.129.124.0/24 maxlen: 24
150.129.125.0/24 maxlen: 24
150.129.126.0/24 maxlen: 24
150.129.127.0/24 maxlen: 24
202.142.64.0/24 maxlen: 24
202.142.65.0/24 maxlen: 24
202.142.66.0/24 maxlen: 24
202.142.67.0/24 maxlen: 24
202.142.68.0/24 maxlen: 24
202.142.69.0/24 maxlen: 24
202.142.70.0/24 maxlen: 24
202.142.71.0/24 maxlen: 24
202.142.72.0/24 maxlen: 24
202.142.73.0/24 maxlen: 24
202.142.74.0/24 maxlen: 24
202.142.75.0/24 maxlen: 24
202.142.76.0/24 maxlen: 24
202.142.77.0/24 maxlen: 24
202.142.78.0/24 maxlen: 24
202.142.79.0/24 maxlen: 24
202.142.81.0/24 maxlen: 24
202.142.83.0/24 maxlen: 24
202.142.85.0/24 maxlen: 24
202.142.86.0/24 maxlen: 24
202.142.87.0/24 maxlen: 24
202.142.89.0/24 maxlen: 24
202.142.90.0/24 maxlen: 24
202.142.91.0/24 maxlen: 24
202.142.92.0/24 maxlen: 24
202.142.93.0/24 maxlen: 24
202.142.95.0/24 maxlen: 24
202.142.96.0/24 maxlen: 24
202.142.97.0/24 maxlen: 24
202.142.98.0/24 maxlen: 24
202.142.99.0/24 maxlen: 24
202.142.100.0/24 maxlen: 24
202.142.101.0/24 maxlen: 24
202.142.102.0/24 maxlen: 24
202.142.103.0/24 maxlen: 24
202.142.104.0/24 maxlen: 24
202.142.105.0/24 maxlen: 24
202.142.106.0/24 maxlen: 24
202.142.107.0/24 maxlen: 24
202.142.110.0/24 maxlen: 24
202.142.112.0/24 maxlen: 24
202.142.113.0/24 maxlen: 24
202.142.114.0/24 maxlen: 24
202.142.115.0/24 maxlen: 24
202.142.118.0/24 maxlen: 24
202.142.119.0/24 maxlen: 24
202.142.120.0/24 maxlen: 24
202.142.123.0/24 maxlen: 24
202.142.124.0/24 maxlen: 24
202.142.125.0/24 maxlen: 24
202.142.126.0/24 maxlen: 24
202.142.127.0/24 maxlen: 24
2406:3c80::/48 maxlen: 48
2406:3c80:1::/48 maxlen: 48
2406:3c80:2::/48 maxlen: 48
2406:3c80:3::/48 maxlen: 48
2406:3c80:4::/48 maxlen: 48
2406:3c80:5::/48 maxlen: 48
2406:3c80:6::/48 maxlen: 48
2406:3c80:7::/48 maxlen: 48
2406:3c80:8::/48 maxlen: 48
2406:3c80:18::/48 maxlen: 48
2406:3c80:400::/48 maxlen: 48
2406:3c80:401::/48 maxlen: 48
2406:3c80:402::/48 maxlen: 48
2406:3c80:403::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918404E/BC030C76F1DA11EAAFC6C70AC4F9AE02/nHx3b2v2ADKD8Mq0Pi3GFJSZcWI.crl
rsync://rpki.apnic.net/member_repository/A918404E/BC030C76F1DA11EAAFC6C70AC4F9AE02/nHx3b2v2ADKD8Mq0Pi3GFJSZcWI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nHx3b2v2ADKD8Mq0Pi3GFJSZcWI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 25 Oct 2025 22:04:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2391 (0x957)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918404E, serialNumber=9C7C776F6BF6003283F0CAB43E2DC61494997162
Validity
Not Before: Sep 18 08:01:00 2025 GMT
Not After : Oct 31 00:00:00 2026 GMT
Subject: CN=68cbbc3c-0904
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:49:42:05:48:3a:78:7d:a4:a9:1d:24:65:f7:
c3:f3:b2:6b:cb:75:6c:27:23:db:a7:88:2f:2e:f4:
36:a3:a0:34:12:da:ee:d3:87:7b:8f:0c:4b:ad:dd:
a3:c3:b9:56:dc:d9:fd:a8:fb:0c:bd:37:c8:5b:0b:
f9:de:f5:d5:0d:a3:aa:2e:e9:e5:79:ff:2a:7c:0e:
ad:cf:23:62:01:54:f3:ba:9f:74:c8:a7:e6:f6:cc:
68:81:4a:f1:3d:b3:9f:3a:68:6b:b1:d7:20:2a:9d:
b0:15:c6:a5:7f:5c:23:72:66:bf:b6:07:5a:2d:ba:
c0:05:3d:da:c9:8a:2e:5e:06:d5:e0:8b:fc:8f:09:
cf:65:27:03:9a:c5:23:51:71:fa:c1:5b:7b:05:7d:
8b:7b:8f:ca:b6:17:8c:d0:32:d6:79:5c:1c:69:83:
aa:70:74:30:ed:31:a6:f1:45:5e:32:c2:ea:f7:30:
bc:70:75:e2:2b:a2:1a:08:a4:4e:d9:93:5a:94:27:
12:34:db:a2:30:c5:ef:d6:b8:ba:eb:85:a3:c6:b9:
62:2f:ae:11:6c:77:32:22:8f:8b:39:02:aa:59:cd:
38:56:13:67:95:29:24:a2:23:79:b5:7d:c0:ee:43:
5f:10:d7:bf:54:50:e5:04:1f:c6:eb:ff:58:a1:1d:
62:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:69:72:1E:FE:2C:5A:F8:3A:F4:3B:9D:86:BF:63:61:33:19:36:99
X509v3 Authority Key Identifier:
keyid:9C:7C:77:6F:6B:F6:00:32:83:F0:CA:B4:3E:2D:C6:14:94:99:71:62
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918404E/BC030C76F1DA11EAAFC6C70AC4F9AE02/nHx3b2v2ADKD8Mq0Pi3GFJSZcWI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nHx3b2v2ADKD8Mq0Pi3GFJSZcWI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918404E/BC030C76F1DA11EAAFC6C70AC4F9AE02/8C2F4DBA8D3111EFA61E9282C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.117.200.0/21
45.126.160.0/22
103.24.188.0/22
103.57.236.0-103.57.247.255
103.70.208.0/22
103.75.192.0/22
103.225.176.0/22
103.244.4.0/22
150.107.10.0/23
150.129.124.0/22
202.142.64.0/20
202.142.81.0/24
202.142.83.0/24
202.142.85.0-202.142.87.255
202.142.89.0-202.142.93.255
202.142.95.0-202.142.107.255
202.142.110.0/24
202.142.112.0/22
202.142.118.0-202.142.120.255
202.142.123.0-202.142.127.255
IPv6:
2406:3c80::-2406:3c80:8:ffff:ffff:ffff:ffff:ffff
2406:3c80:18::/48
2406:3c80:400::/46
Signature Algorithm: sha256WithRSAEncryption
8f:d7:a4:ef:82:f8:31:0f:c9:ac:e7:4e:9b:30:8d:f7:c9:6a:
46:96:23:c2:41:ad:0c:f5:b0:77:2d:5a:ef:59:10:9d:b6:0d:
91:b8:9a:f4:2d:1e:56:d4:36:cc:37:01:c5:cf:1d:bf:9e:3e:
f6:34:19:3c:d9:8f:ff:0d:e9:f9:1d:71:d5:62:0f:b0:56:a8:
b2:17:90:f2:34:12:66:c1:1d:4f:ac:29:20:35:b6:87:17:ee:
9a:ae:98:4b:65:b8:6e:74:ff:71:89:e1:fc:89:d6:ca:05:13:
8b:2b:62:b8:3c:44:d0:86:18:31:83:0a:33:30:9b:d6:5c:a3:
78:c0:f0:6a:4d:05:2b:cf:9e:56:5e:68:23:28:88:64:17:d5:
19:56:c6:75:43:49:ea:fd:12:f7:8f:4e:87:44:ea:7f:44:30:
01:36:1c:33:f6:21:76:be:25:c1:be:c2:24:28:3a:09:f2:44:
70:14:3e:b9:5e:7d:2d:61:93:99:0d:18:ad:69:a4:a5:5f:4c:
2b:02:6e:ba:6a:40:c5:ec:c3:fe:f2:02:cd:a9:f2:d0:0b:be:
54:9b:8f:ef:3a:ca:10:15:72:0c:04:62:7a:47:27:2b:de:77:
eb:16:69:7f:a3:1c:a2:fd:c5:20:43:6f:b0:9a:ea:a8:04:de:
14:0b:1e:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 18:38:34 2025 by rpki-client