Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/6E40C0588FCF11F0B7947813C4F9AE02.roa
File: 6E40C0588FCF11F0B7947813C4F9AE02.roa (raw, json)
Hash identifier: mkmJqH+K16nUR5KZ6ofPVharIiW87fVTF0HJxmGPmxg=
Subject key identifier: C2:02:0A:67:08:B9:E2:2D:A0:86:BE:40:F0:1F:36:C9:A9:9E:13:65
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: C4D4
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/6E40C0588FCF11F0B7947813C4F9AE02.roa
Signing time: Fri 12 Sep 2025 11:55:52 +0000
ROA not before: Fri 12 Sep 2025 11:55:52 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 132116
IP address blocks: 27.123.240.0/22 maxlen: 24
43.247.40.0/24 maxlen: 24
43.247.41.0/24 maxlen: 24
43.247.42.0/24 maxlen: 24
43.247.43.0/24 maxlen: 24
43.248.152.0/22 maxlen: 24
43.248.240.0/24 maxlen: 24
43.248.241.0/24 maxlen: 24
43.248.242.0/24 maxlen: 24
43.248.243.0/24 maxlen: 24
45.248.0.0/22 maxlen: 24
103.16.28.0/24 maxlen: 24
103.16.29.0/24 maxlen: 24
103.16.30.0/24 maxlen: 24
103.16.31.0/24 maxlen: 24
103.28.252.0/22 maxlen: 24
103.40.200.0/22 maxlen: 24
103.68.20.0/24 maxlen: 24
103.68.22.0/24 maxlen: 24
103.68.23.0/24 maxlen: 24
103.69.24.0/24 maxlen: 24
103.69.25.0/24 maxlen: 24
103.69.26.0/24 maxlen: 24
103.69.27.0/24 maxlen: 24
103.69.244.0/22 maxlen: 24
103.70.80.0/24 maxlen: 24
103.70.81.0/24 maxlen: 24
103.70.82.0/24 maxlen: 24
103.70.83.0/24 maxlen: 24
103.91.73.0/24 maxlen: 24
103.91.74.0/24 maxlen: 24
103.94.83.0/24 maxlen: 24
103.100.4.0/22 maxlen: 24
103.102.147.0/24 maxlen: 24
103.103.55.0/24 maxlen: 24
103.105.96.0/24 maxlen: 24
103.124.120.0/23 maxlen: 24
103.153.12.0/24 maxlen: 24
103.164.141.0/24 maxlen: 24
103.165.88.0/23 maxlen: 24
103.165.102.0/23 maxlen: 24
103.167.154.0/23 maxlen: 24
103.167.182.0/23 maxlen: 24
103.167.224.0/23 maxlen: 24
103.167.238.0/23 maxlen: 24
103.168.60.0/23 maxlen: 24
103.169.242.0/24 maxlen: 24
103.169.243.0/24 maxlen: 24
103.170.36.0/23 maxlen: 24
103.170.38.0/23 maxlen: 24
103.170.84.0/23 maxlen: 24
103.183.86.0/23 maxlen: 24
103.190.8.0/24 maxlen: 24
103.190.9.0/24 maxlen: 24
103.192.64.0/24 maxlen: 24
103.192.66.0/24 maxlen: 24
103.192.67.0/24 maxlen: 24
103.198.172.0/22 maxlen: 24
103.216.140.0/24 maxlen: 24
103.216.142.0/24 maxlen: 24
103.216.143.0/24 maxlen: 24
103.224.144.0/22 maxlen: 24
119.42.56.0/22 maxlen: 24
163.53.84.0/22 maxlen: 24
180.149.225.0/24 maxlen: 24
180.149.226.0/24 maxlen: 24
180.149.227.0/24 maxlen: 24
2001:df1:d240::/48 maxlen: 48
2001:df3:6ec0::/48 maxlen: 48
2405:e100::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 25 Oct 2025 15:33:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 50388 (0xc4d4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Validity
Not Before: Sep 12 11:55:52 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=68c40a48-52bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:a4:e9:b5:c1:53:83:ff:c0:42:eb:ff:88:26:
06:1b:3d:4e:14:e6:fb:b9:34:9e:03:23:6f:d7:68:
f9:3b:24:bd:fc:6e:26:f5:44:c9:7c:6a:5a:e0:6e:
92:45:9e:b7:d7:ec:b5:96:78:24:be:4b:2f:0c:05:
42:34:c0:01:2b:48:fa:98:16:4e:b5:b7:96:f7:06:
c7:86:d1:77:fc:51:95:d8:13:db:6d:a6:9e:99:5a:
d4:fc:19:4a:c3:06:ab:77:a0:50:22:ef:6d:6e:d1:
eb:7f:1b:53:a0:b8:f7:a6:93:ca:5b:62:78:cd:f6:
fe:bd:69:ff:b7:de:65:28:bc:6f:3c:c8:b8:9e:d0:
47:64:84:e2:e3:9d:7a:23:7f:37:ab:93:be:44:d0:
d9:7d:f1:19:22:51:db:4f:cc:d6:aa:76:d8:c0:f4:
20:e5:3e:53:1e:e7:9a:8c:03:70:eb:79:1a:0c:3b:
c4:9a:ae:c6:03:69:61:82:8d:7f:72:92:37:06:60:
8d:24:b7:00:5e:96:a6:2b:a0:4c:8c:7d:bc:b7:9f:
df:fe:80:2b:11:42:f6:87:3f:48:3e:42:8b:95:29:
08:e6:6d:86:f1:df:dd:90:4c:a5:ab:fb:c4:35:b1:
7b:69:bd:fe:35:81:5a:b9:a1:83:73:7f:4b:3a:17:
e6:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:02:0A:67:08:B9:E2:2D:A0:86:BE:40:F0:1F:36:C9:A9:9E:13:65
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/6E40C0588FCF11F0B7947813C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
27.123.240.0/22
43.247.40.0/22
43.248.152.0/22
43.248.240.0/22
45.248.0.0/22
103.16.28.0/22
103.28.252.0/22
103.40.200.0/22
103.68.20.0/24
103.68.22.0/23
103.69.24.0/22
103.69.244.0/22
103.70.80.0/22
103.91.73.0-103.91.74.255
103.94.83.0/24
103.100.4.0/22
103.102.147.0/24
103.103.55.0/24
103.105.96.0/24
103.124.120.0/23
103.153.12.0/24
103.164.141.0/24
103.165.88.0/23
103.165.102.0/23
103.167.154.0/23
103.167.182.0/23
103.167.224.0/23
103.167.238.0/23
103.168.60.0/23
103.169.242.0/23
103.170.36.0/22
103.170.84.0/23
103.183.86.0/23
103.190.8.0/23
103.192.64.0/24
103.192.66.0/23
103.198.172.0/22
103.216.140.0/24
103.216.142.0/23
103.224.144.0/22
119.42.56.0/22
163.53.84.0/22
180.149.225.0-180.149.227.255
IPv6:
2001:df1:d240::/48
2001:df3:6ec0::/48
2405:e100::/48
Signature Algorithm: sha256WithRSAEncryption
8d:bd:2a:81:bd:4c:66:95:5a:ba:6b:fe:fc:69:a5:ad:5e:bd:
82:09:c3:56:32:2a:28:6a:fc:4a:8b:94:b2:fa:f9:d9:d0:4e:
47:b1:5e:9b:6d:d4:1b:02:d8:1e:0a:fa:53:0c:cd:2a:a6:41:
c1:a5:68:0b:46:17:03:25:4d:4a:18:57:1b:c2:5f:89:a5:8a:
4c:15:88:76:2a:d3:84:3b:11:7d:92:fc:39:3f:f6:21:99:83:
a5:74:51:53:07:6b:39:50:a4:96:a9:8d:ce:6d:8a:ca:7f:e4:
b6:b5:25:2a:7f:4b:ef:18:b5:3d:85:8e:67:25:42:42:1c:28:
74:e8:d4:1d:ad:cd:b3:1b:e6:1e:71:1b:59:7f:15:9f:3d:12:
b9:56:e6:79:16:1f:50:cb:a2:ea:e0:8d:c5:ad:d4:f7:3f:da:
71:90:c3:88:cb:00:45:61:26:f0:25:b0:2f:c7:4b:9d:b9:37:
be:61:65:31:61:dd:72:4c:05:7e:89:5a:2b:f0:af:b6:69:e1:
ea:90:06:05:76:f8:3e:2f:7d:65:cd:4d:fd:56:7f:a5:92:0e:
de:be:52:4b:27:f3:53:2b:e1:33:02:24:c4:43:de:00:fa:cf:
b1:13:f7:20:2f:7e:53:96:b0:fd:e7:28:cb:ac:6b:85:08:08:
70:25:9e:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:06:08 2025 by rpki-client