Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/960C5D5EE35111EDB7F6B44EC4F9AE02.roa
File: 960C5D5EE35111EDB7F6B44EC4F9AE02.roa (raw, json)
Hash identifier: ULb+wAYVlw1uMaXEy8Ttj5Q14EMB+VkmMDyTs7Sp8wI=
Subject key identifier: 2B:20:02:29:90:B3:B9:63:D6:48:E5:D1:36:79:81:55:CB:4E:EE:83
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: C596
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/960C5D5EE35111EDB7F6B44EC4F9AE02.roa
Signing time: Sun 28 Sep 2025 05:53:12 +0000
ROA not before: Sun 28 Sep 2025 05:53:12 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 137655
IP address blocks: 103.80.54.0/23 maxlen: 24
103.121.174.0/24 maxlen: 24
103.140.2.0/24 maxlen: 24
103.141.133.0/24 maxlen: 24
103.148.43.0/24 maxlen: 24
103.152.134.0/24 maxlen: 24
103.154.105.0/24 maxlen: 24
103.164.198.0/23 maxlen: 24
103.171.193.0/24 maxlen: 24
103.176.214.0/24 maxlen: 24
103.189.182.0/23 maxlen: 24
103.214.2.0/24 maxlen: 24
163.223.136.0/24 maxlen: 24
2001:df1:a180::/48 maxlen: 48
2001:df2:8c80::/48 maxlen: 48
2001:df6:5080::/48 maxlen: 48
2001:df6:d880::/48 maxlen: 48
2001:df7:5080::/48 maxlen: 48
2401:7a0::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 25 Oct 2025 15:33:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 50582 (0xc596)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Validity
Not Before: Sep 28 05:53:12 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=68d8cd47-2a04
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:6d:91:0a:a0:2c:ca:3b:e1:51:1b:4e:81:77:
1c:a0:47:ae:8a:ea:04:42:01:b5:28:4d:67:ed:cf:
c5:7f:25:91:8f:cd:27:f1:6e:ec:60:6d:26:c8:d3:
a6:a6:ba:b1:3b:7c:7c:1e:ad:20:05:f0:1e:7b:82:
55:d5:5e:3d:ee:83:ae:3c:6f:cc:af:2b:2e:dd:5f:
8e:e1:b9:4c:fb:87:05:60:89:8c:78:df:f2:7b:7d:
08:fe:5f:d7:d6:17:68:3a:21:4e:ec:85:a2:d4:76:
1c:02:f2:e7:84:0e:c8:46:e7:09:d2:00:44:14:ee:
4e:cc:fd:bc:e8:d8:24:ea:28:52:cc:ce:07:21:a1:
5e:aa:3a:0e:47:56:5e:c2:59:12:20:c8:19:b1:79:
e9:ce:0b:0f:f1:3f:70:cd:d3:1f:1a:96:10:6f:b9:
0e:02:61:86:f1:0c:f2:b5:2b:a5:2a:7c:bb:1c:0d:
80:59:e1:96:be:88:6a:84:a0:1f:25:81:75:e3:11:
6a:ab:76:55:38:c0:d4:3b:5d:fb:5d:9f:89:0e:4b:
97:c1:d5:74:b0:76:13:97:8e:79:fb:b1:6f:73:8b:
47:b1:79:d6:32:99:9a:58:05:31:2e:20:fe:44:cc:
d0:02:42:d7:13:08:d8:8a:2e:a2:18:31:e8:08:8a:
1d:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:20:02:29:90:B3:B9:63:D6:48:E5:D1:36:79:81:55:CB:4E:EE:83
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/960C5D5EE35111EDB7F6B44EC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.80.54.0/23
103.121.174.0/24
103.140.2.0/24
103.141.133.0/24
103.148.43.0/24
103.152.134.0/24
103.154.105.0/24
103.164.198.0/23
103.171.193.0/24
103.176.214.0/24
103.189.182.0/23
103.214.2.0/24
163.223.136.0/24
IPv6:
2001:df1:a180::/48
2001:df2:8c80::/48
2001:df6:5080::/48
2001:df6:d880::/48
2001:df7:5080::/48
2401:7a0::/32
Signature Algorithm: sha256WithRSAEncryption
a6:ec:d6:ea:dc:b9:67:49:96:9c:5d:c4:2e:8b:8d:d8:70:87:
7c:f6:58:94:72:85:67:8e:0b:6e:65:46:64:be:35:f7:6d:82:
c8:5c:06:0e:9f:8e:d4:05:36:34:fb:a8:55:de:93:2b:09:fa:
0f:1e:46:aa:d1:28:a6:d9:d9:d1:7f:26:9c:90:a4:a9:23:bc:
ce:57:8f:4d:8f:fc:ea:e2:70:10:b5:1b:31:a9:c8:ab:45:10:
68:04:e1:9f:3c:3a:be:37:73:88:87:bb:f5:e5:f1:f2:32:a1:
23:67:f6:42:0f:41:98:87:b7:35:3e:bc:02:8a:e6:fc:4f:f1:
60:36:0a:e6:38:9b:40:09:f3:1d:a0:72:cb:9c:b1:c0:df:f9:
1e:d8:78:f8:6a:81:c9:17:96:f6:3c:90:f7:b7:58:90:b2:6b:
fc:11:4d:23:a8:ff:bd:6a:af:16:05:8b:05:43:59:3c:c7:ea:
cc:96:2b:45:b9:a5:f1:1b:20:a4:d0:9c:34:08:df:d9:a2:55:
1e:eb:17:91:5b:27:bb:c9:d9:97:8e:fa:a1:44:fb:ad:0f:45:
f0:2f:33:c2:63:27:73:67:1b:23:b1:24:32:86:cc:0d:e4:1a:
ef:3e:88:93:e7:1e:9c:fa:41:e9:8e:0a:81:a2:dd:29:48:26:
1f:5c:09:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 22:41:01 2025 by rpki-client