Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/3F9A5134146811F09306AD61C4F9AE02.roa
File: 3F9A5134146811F09306AD61C4F9AE02.roa (raw, json)
Hash identifier: 5GfHbdJNXEZI/Cj3mKKm9q5G+Q33gBB7xN3tQOiK1FY=
Subject key identifier: E1:0A:50:75:72:0D:BA:14:5A:01:64:A6:75:D7:D2:21:8F:8C:99:23
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: BE3B
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/3F9A5134146811F09306AD61C4F9AE02.roa
Signing time: Mon 16 Jun 2025 09:50:10 +0000
ROA not before: Mon 16 Jun 2025 09:50:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 9830
IP address blocks: 103.21.67.0/24 maxlen: 24
103.60.198.0/24 maxlen: 24
103.60.199.0/24 maxlen: 24
103.170.20.0/24 maxlen: 24
103.239.64.0/23 maxlen: 24
160.20.4.0/23 maxlen: 24
163.227.198.0/23 maxlen: 24
202.91.64.0/24 maxlen: 24
202.91.65.0/24 maxlen: 24
202.91.66.0/24 maxlen: 24
202.91.67.0/24 maxlen: 24
202.91.68.0/24 maxlen: 24
202.91.69.0/24 maxlen: 24
202.91.70.0/24 maxlen: 24
202.91.71.0/24 maxlen: 24
202.91.72.0/24 maxlen: 24
202.91.73.0/24 maxlen: 24
202.91.74.0/24 maxlen: 24
202.91.75.0/24 maxlen: 24
202.91.76.0/24 maxlen: 24
202.91.77.0/24 maxlen: 24
202.91.78.0/24 maxlen: 24
202.91.79.0/24 maxlen: 24
202.91.80.0/24 maxlen: 24
202.91.81.0/24 maxlen: 24
202.91.82.0/24 maxlen: 24
202.91.83.0/24 maxlen: 24
202.91.84.0/24 maxlen: 24
202.91.85.0/24 maxlen: 24
202.91.86.0/24 maxlen: 24
202.91.87.0/24 maxlen: 24
202.91.88.0/24 maxlen: 24
202.91.89.0/24 maxlen: 24
202.91.90.0/24 maxlen: 24
202.91.91.0/24 maxlen: 24
202.91.92.0/24 maxlen: 24
202.91.93.0/24 maxlen: 24
202.91.94.0/24 maxlen: 24
202.91.95.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 09 Jul 2025 15:29:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 48699 (0xbe3b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Validity
Not Before: Jun 16 09:50:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=684fe8d2-5fc5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:c5:61:94:46:00:6f:3a:fa:0a:86:d8:e9:61:
45:67:fc:88:6f:fb:01:92:c7:26:65:3d:44:55:ec:
0a:5c:4c:e5:53:e1:a2:ad:7c:12:62:c4:00:e1:5f:
12:df:d3:61:1c:91:ee:c2:8c:39:a3:72:e4:5e:52:
0b:2a:2d:e8:9e:92:84:b2:b3:bc:88:a4:f4:76:f6:
ee:de:d7:db:2f:cc:c5:bf:93:0f:b1:c9:b0:bd:55:
0e:66:fa:ac:91:c8:03:4b:55:0c:70:0b:5b:d0:a2:
c5:26:16:b0:02:d2:d3:13:8c:fe:b7:42:21:5c:8d:
31:e8:ae:4e:dc:87:b7:12:e6:ac:8a:89:ef:dc:35:
98:17:82:d0:12:5a:8e:3a:c5:8b:b1:f4:de:31:47:
1a:c7:3c:ba:5d:69:34:6e:b6:cd:bd:dc:41:8e:ce:
df:e2:8f:e9:6f:d5:ce:1e:dd:ac:79:fa:c4:e6:01:
1d:e6:cf:00:f3:9f:2d:da:ef:9c:c3:78:f7:04:b8:
05:58:02:f6:54:c5:d8:07:35:1c:bf:dc:29:35:0e:
99:e8:16:cf:63:1a:f3:e4:8f:dd:44:15:52:54:4a:
9a:69:52:a9:73:58:97:7f:7d:d0:24:60:90:9b:d0:
6a:89:95:e5:90:3f:bc:c5:fd:37:8e:45:56:af:cc:
37:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:0A:50:75:72:0D:BA:14:5A:01:64:A6:75:D7:D2:21:8F:8C:99:23
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/3F9A5134146811F09306AD61C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.21.67.0/24
103.60.198.0/23
103.170.20.0/24
103.239.64.0/23
160.20.4.0/23
163.227.198.0/23
202.91.64.0/19
Signature Algorithm: sha256WithRSAEncryption
48:05:e8:9e:3a:1b:5e:ee:91:84:45:ee:17:a2:96:f6:56:25:
cb:94:cf:31:85:8f:40:67:aa:fd:b2:cc:e7:7e:33:17:5b:c4:
59:ac:2e:9d:4f:3f:9b:99:be:65:9f:df:4c:59:be:de:ac:7f:
a8:7d:08:01:31:bd:08:bb:d8:98:c5:91:30:9d:cb:9b:87:c4:
09:f8:08:84:73:10:c3:71:88:f4:3a:d1:0d:35:65:08:f9:2f:
90:b2:cf:99:d2:35:9a:99:28:b4:4b:ef:56:34:83:a3:3f:76:
a2:91:87:94:95:20:99:30:7d:27:ea:2e:9d:6a:22:5c:76:bb:
84:ed:36:d3:9d:c2:79:22:a0:07:bb:76:c2:61:d9:22:37:da:
d9:3f:60:6f:88:2b:3e:3c:38:e9:fc:20:75:2b:94:b2:e9:75:
18:50:45:9d:15:34:d0:ed:3b:02:79:e3:2e:5d:40:11:40:92:
2d:31:e9:0f:6a:d8:f8:58:4e:2a:cd:c5:ee:44:44:0b:f5:68:
8e:fe:7b:c3:0e:04:92:29:0a:8c:3f:ff:a9:a6:da:76:21:c1:
c2:39:9e:f7:cc:83:4c:6e:48:04:c5:a7:e6:68:39:7d:bf:c2:
0f:18:3a:3c:3c:21:52:80:a2:e8:29:c8:87:92:ae:ff:dd:45:
26:0d:23:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 3 06:03:31 2025 by rpki-client