Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/493C56AEDE3C11EF979E6834C4F9AE02.roa
File: 493C56AEDE3C11EF979E6834C4F9AE02.roa (raw, json)
Hash identifier: sP4pK9PISJi4KrDm9JrlbfDaiouJTg3pWV51EsJ4gEI=
Subject key identifier: DF:9A:74:55:FE:46:93:9E:5B:3A:36:81:1A:97:12:8D:D2:ED:CF:80
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: C30F
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/493C56AEDE3C11EF979E6834C4F9AE02.roa
Signing time: Thu 21 Aug 2025 10:00:35 +0000
ROA not before: Thu 21 Aug 2025 10:00:35 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 132768
IP address blocks: 103.16.144.0/22 maxlen: 24
103.16.196.0/24 maxlen: 24
103.18.68.0/22 maxlen: 24
103.18.120.0/22 maxlen: 24
103.18.164.0/22 maxlen: 24
103.18.242.0/24 maxlen: 24
103.25.132.0/22 maxlen: 24
103.30.80.0/22 maxlen: 24
103.103.212.0/22 maxlen: 24
103.107.96.0/22 maxlen: 24
103.198.10.0/23 maxlen: 24
103.241.242.0/24 maxlen: 24
103.241.243.0/24 maxlen: 24
103.246.170.0/23 maxlen: 24
103.253.148.0/22 maxlen: 24
139.5.36.0/22 maxlen: 24
150.107.92.0/22 maxlen: 24
183.87.12.0/22 maxlen: 24
2405:ec0::/32 maxlen: 32
2405:ec0::/36 maxlen: 36
2405:ec0:1000::/36 maxlen: 36
2405:ec0:2000::/36 maxlen: 36
2407:a780:1000::/36 maxlen: 36
2407:a780:1000::/48 maxlen: 48
2407:a780:1001::/48 maxlen: 48
2407:a780:1002::/48 maxlen: 48
2407:a780:1003::/48 maxlen: 48
2407:a780:1004::/48 maxlen: 48
2407:a780:1005::/48 maxlen: 48
2407:a780:1006::/48 maxlen: 48
2407:a780:1007::/48 maxlen: 48
2407:a780:1008::/48 maxlen: 48
2407:a780:1009::/48 maxlen: 48
2407:a780:100a::/48 maxlen: 48
2407:a780:100b::/48 maxlen: 48
2407:a780:100c::/48 maxlen: 48
2407:a780:100d::/48 maxlen: 48
2407:a780:100e::/48 maxlen: 48
2407:a780:100f::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 29 Aug 2025 15:25:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 49935 (0xc30f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Validity
Not Before: Aug 21 10:00:35 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=68a6ee43-62d8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:1d:a1:71:ec:78:52:cb:60:21:e0:30:46:7c:
c3:bf:23:73:a4:8d:e7:e0:ab:db:b7:54:94:1c:1f:
08:f4:8d:3e:ff:84:99:c7:e2:dc:59:82:99:d1:7a:
00:e4:1a:ff:e6:59:ac:5c:df:16:39:4f:a8:30:c2:
88:5c:4a:e7:fe:28:44:5c:a7:22:8c:59:f6:42:51:
04:c1:0e:43:c5:3a:84:b7:38:60:d3:c2:3e:b0:e5:
4c:fe:c0:ea:9f:4c:bd:54:ce:c8:28:86:f7:23:9f:
fb:a6:ab:d0:2b:6a:a8:70:fd:e5:85:2c:72:3c:42:
b9:5c:69:54:b9:a7:5e:8f:54:3c:26:21:b3:6b:e3:
50:a9:f0:3e:b4:12:44:09:b3:f0:6f:57:90:f7:c5:
db:61:1f:54:0a:1a:6b:6e:ee:da:c6:b0:f8:36:07:
b1:8a:29:e9:ec:3a:d4:c6:ed:92:4d:15:b0:c3:5c:
1a:e6:4b:8a:ca:15:5c:55:ed:3e:79:3c:b9:1f:8e:
50:74:be:e1:f1:86:58:03:b2:ce:1a:b2:96:c2:e5:
86:ac:2a:4a:ce:ee:83:34:97:13:ea:31:fa:df:eb:
fa:b5:41:e6:a4:d1:71:ab:2c:16:ba:60:a5:61:28:
1e:aa:10:df:c4:27:56:c3:a8:d7:d7:f3:9a:a8:29:
7c:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:9A:74:55:FE:46:93:9E:5B:3A:36:81:1A:97:12:8D:D2:ED:CF:80
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/493C56AEDE3C11EF979E6834C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.16.144.0/22
103.16.196.0/24
103.18.68.0/22
103.18.120.0/22
103.18.164.0/22
103.18.242.0/24
103.25.132.0/22
103.30.80.0/22
103.103.212.0/22
103.107.96.0/22
103.198.10.0/23
103.241.242.0/23
103.246.170.0/23
103.253.148.0/22
139.5.36.0/22
150.107.92.0/22
183.87.12.0/22
IPv6:
2405:ec0::/32
2407:a780:1000::/36
Signature Algorithm: sha256WithRSAEncryption
b1:5a:5f:86:ea:bb:21:c2:29:a7:94:8b:1a:b9:4d:94:3f:c3:
6f:70:fa:28:94:d5:2e:c3:77:54:2a:4f:1e:1a:8f:1e:33:fb:
43:a6:dd:49:26:ff:9d:f1:79:dc:08:68:0d:67:3d:02:73:ba:
85:69:04:6d:77:1a:07:10:7b:e1:c4:9d:c6:ac:d3:62:6c:e3:
2d:22:31:31:4f:52:4f:35:dd:e0:78:4f:2d:ee:0a:d6:a9:53:
0d:2d:bb:21:4a:ea:38:41:3e:7a:87:8f:7d:62:56:a5:ad:8a:
78:4b:c5:d3:d5:36:ca:c8:bf:9f:b6:23:6a:03:51:80:4f:ba:
a2:22:54:fa:3b:a8:8a:36:10:33:e4:ae:dc:2c:2a:f2:fe:35:
07:b9:06:60:49:bb:71:3b:83:36:56:6f:69:8b:c8:3b:2b:9a:
e3:6e:32:b6:eb:24:ca:b7:06:a3:ff:43:16:b2:a5:81:91:18:
ef:79:ca:71:42:2a:16:fb:d7:3e:51:72:4d:59:a9:1f:ac:43:
fe:19:1e:77:bc:c7:3d:ef:38:52:08:1d:32:0f:49:3b:c2:9e:
93:6e:f3:ee:3a:be:2c:7b:04:df:1c:f5:99:2d:fe:ca:74:d1:
93:ef:24:76:f7:39:11:eb:f5:fc:32:d4:54:f9:be:66:0e:ab:
18:f9:d7:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 04:44:18 2025 by rpki-client