Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/92E79D5C03DC11EBBC0DBC0BC4F9AE02.roa
File: 92E79D5C03DC11EBBC0DBC0BC4F9AE02.roa (raw, json)
Hash identifier: aONzEAhxICxuyMr5kbO7XAOWBIxvrXX6Tj8Q73u0hsE=
Subject key identifier: A2:03:41:85:31:66:6A:04:DA:7A:0E:E9:9D:E5:7D:71:0B:6F:E5:A8
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: C4FE
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/92E79D5C03DC11EBBC0DBC0BC4F9AE02.roa
Signing time: Mon 15 Sep 2025 10:17:00 +0000
ROA not before: Mon 15 Sep 2025 10:17:00 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 132137
IP address blocks: 45.112.0.0/22 maxlen: 24
45.123.92.0/22 maxlen: 24
45.252.68.0/22 maxlen: 24
103.1.48.0/23 maxlen: 24
103.36.44.0/22 maxlen: 24
103.51.72.0/22 maxlen: 24
103.74.196.0/22 maxlen: 24
103.75.28.0/22 maxlen: 24
103.135.200.0/24 maxlen: 24
103.135.201.0/24 maxlen: 24
103.135.202.0/24 maxlen: 24
103.135.203.0/24 maxlen: 24
103.162.162.0/23 maxlen: 24
103.221.68.0/22 maxlen: 24
103.246.240.0/22 maxlen: 24
110.44.100.0/22 maxlen: 24
111.125.244.0/24 maxlen: 24
113.30.216.0/22 maxlen: 24
183.87.192.0/24 maxlen: 24
183.87.240.0/21 maxlen: 24
183.87.248.0/23 maxlen: 24
2401:e500::/32 maxlen: 32
2401:e500::/33 maxlen: 40
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 25 Oct 2025 15:33:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 50430 (0xc4fe)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Validity
Not Before: Sep 15 10:17:00 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=68c7e79c-6a3f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:10:b6:45:90:bb:f6:77:ef:e0:45:d7:01:b5:
68:85:2b:7e:27:8a:3f:da:98:d3:22:77:a4:9a:4a:
db:0a:38:fb:27:48:9e:73:b1:10:ec:59:ed:d5:0c:
aa:c1:85:62:65:8d:8f:17:56:cd:f2:b3:63:f0:fd:
0e:b9:85:a6:6f:f6:e8:2f:0c:3a:4e:7f:4b:03:ae:
a9:75:33:c4:76:12:84:81:c4:49:9f:b2:2d:25:22:
0a:1d:1a:13:20:86:aa:4f:d6:4f:47:d9:ed:ac:fa:
2e:1f:18:48:81:6d:cb:1f:ed:07:ba:90:77:06:0b:
76:a1:de:1a:9d:f9:8e:13:3d:5c:09:e5:bc:aa:37:
f0:95:9c:ff:e0:90:0a:f0:0f:19:73:ad:83:dc:47:
94:0b:01:6d:af:14:be:6e:79:23:d6:20:4c:e6:b3:
7a:fc:3d:58:96:1e:c8:a3:5d:eb:98:54:77:69:55:
a5:27:dc:c8:7b:ec:82:00:55:fc:81:e6:4a:26:eb:
07:56:c0:a4:d0:e0:d1:66:57:8d:00:2b:19:f0:93:
c4:4b:00:2e:c5:b2:dc:aa:87:ea:ea:67:ad:ea:b1:
03:7a:14:e2:d7:15:ee:79:76:9d:83:26:4f:24:4b:
99:db:bb:d1:e0:97:1e:5d:94:97:ee:76:53:e1:d2:
44:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:03:41:85:31:66:6A:04:DA:7A:0E:E9:9D:E5:7D:71:0B:6F:E5:A8
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/92E79D5C03DC11EBBC0DBC0BC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.112.0.0/22
45.123.92.0/22
45.252.68.0/22
103.1.48.0/23
103.36.44.0/22
103.51.72.0/22
103.74.196.0/22
103.75.28.0/22
103.135.200.0/22
103.162.162.0/23
103.221.68.0/22
103.246.240.0/22
110.44.100.0/22
111.125.244.0/24
113.30.216.0/22
183.87.192.0/24
183.87.240.0-183.87.249.255
IPv6:
2401:e500::/32
Signature Algorithm: sha256WithRSAEncryption
05:86:6f:00:81:1b:ef:8f:fa:20:2b:e4:e7:ad:5b:15:f6:bb:
4e:66:ec:fb:a7:6f:c9:f1:de:5e:6a:be:51:57:b1:c7:ac:6b:
65:e0:2f:63:85:4b:10:e5:be:2e:3a:da:fa:67:31:6c:8c:e1:
fc:9d:87:d6:13:f5:45:df:42:bf:9e:61:4e:ab:7c:29:a5:18:
ee:50:1e:8a:20:99:ee:76:99:cc:76:fa:c1:7a:2b:d8:25:5e:
89:89:e0:78:35:d2:ef:28:27:d3:14:9c:67:7c:26:0e:e6:cb:
7d:b7:6f:5f:79:ab:cd:69:81:91:8e:8a:a4:0d:d1:b7:c9:4f:
19:d4:c1:62:78:fa:b3:93:ec:e3:39:30:7e:54:1a:d8:b3:23:
1e:82:3c:cd:3d:c2:ce:07:70:ab:16:62:3a:1f:26:36:09:dc:
0b:8a:b5:c4:1d:e2:06:bb:c8:4b:17:d2:0c:ae:4a:e8:e4:1f:
4a:14:29:ef:00:76:c2:49:30:d9:07:77:ef:99:9f:f5:d0:2c:
03:e7:69:3d:ff:03:8e:18:c9:a7:e2:d3:4d:01:c4:2e:16:9f:
56:c0:83:64:90:91:e2:98:fe:d0:eb:61:21:df:62:55:75:7c:
df:f9:bd:14:44:2d:db:08:60:54:83:2b:76:a7:0c:6b:9d:7e:
4f:1d:f2:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 11:32:03 2025 by rpki-client