Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/E9DBE7221E8411F0A85F5565C4F9AE02.roa
File: E9DBE7221E8411F0A85F5565C4F9AE02.roa (raw, json)
Hash identifier: JF/8jiBnABG6RwKwy5yVwEaX0LCwViG6J4VWnKnvpI8=
Subject key identifier: 87:8C:51:31:12:64:88:69:09:67:C0:BF:8C:14:B9:CA:5B:F7:98:AD
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: C523
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/E9DBE7221E8411F0A85F5565C4F9AE02.roa
Signing time: Thu 18 Sep 2025 04:57:47 +0000
ROA not before: Thu 18 Sep 2025 04:57:47 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 132770
IP address blocks: 43.227.20.0/22 maxlen: 24
43.228.72.0/22 maxlen: 24
43.241.24.0/22 maxlen: 24
45.119.57.0/24 maxlen: 24
45.119.58.0/24 maxlen: 24
45.119.59.0/24 maxlen: 24
45.252.72.0/22 maxlen: 24
103.59.104.0/24 maxlen: 24
103.81.36.0/22 maxlen: 24
103.93.240.0/24 maxlen: 24
103.93.241.0/24 maxlen: 24
103.93.242.0/24 maxlen: 24
103.93.243.0/24 maxlen: 24
103.94.56.0/22 maxlen: 23
103.94.57.0/24 maxlen: 24
103.94.59.0/24 maxlen: 24
103.125.72.0/23 maxlen: 24
103.126.68.0/22 maxlen: 24
103.178.206.0/23 maxlen: 24
103.184.86.0/24 maxlen: 24
103.184.87.0/24 maxlen: 24
103.204.36.0/22 maxlen: 24
103.211.60.0/24 maxlen: 24
103.211.61.0/24 maxlen: 24
103.211.62.0/24 maxlen: 24
103.211.63.0/24 maxlen: 24
103.221.72.0/22 maxlen: 24
103.239.84.0/22 maxlen: 24
103.241.80.0/22 maxlen: 24
103.243.112.0/22 maxlen: 24
103.249.240.0/22 maxlen: 24
103.251.208.0/22 maxlen: 24
103.254.52.0/22 maxlen: 24
150.129.128.0/22 maxlen: 24
150.129.156.0/22 maxlen: 24
163.53.200.0/22 maxlen: 24
202.136.68.0/22 maxlen: 24
2404:4980::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 25 Oct 2025 15:33:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 50467 (0xc523)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Validity
Not Before: Sep 18 04:57:47 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=68cb914b-3f60
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:09:28:3f:52:f0:93:c3:81:c1:7e:60:58:f1:
9f:b6:66:d0:37:c4:c0:2a:7f:c1:d4:f1:fe:ac:37:
90:d7:09:df:b6:66:27:d9:23:5f:38:76:28:22:ce:
79:35:b4:90:c9:6d:15:09:41:31:1e:34:41:85:ad:
f7:53:2d:5c:9f:4a:09:ff:be:3a:d9:9b:ee:4a:0f:
95:b9:27:82:cd:ee:6c:e9:c1:a5:aa:e6:e7:d9:9f:
79:90:ca:81:1b:91:a6:11:b6:3e:bd:88:be:7b:f0:
32:c1:b7:67:8b:a1:86:0c:aa:07:33:19:17:00:f3:
4f:78:d9:a2:40:ce:33:75:8b:3d:35:91:19:b3:bd:
39:f8:00:80:ad:fe:c1:73:e1:bc:21:6b:bc:b0:1d:
03:a8:aa:ca:a1:93:b9:17:45:ea:72:74:b0:50:25:
28:d4:13:0d:33:2d:80:37:77:b2:50:ef:58:c0:58:
c2:54:4e:09:0d:40:56:26:07:f7:1f:86:d4:cf:57:
e0:ec:25:47:26:3d:3d:28:c0:5b:e5:3c:c5:45:cf:
bf:88:cc:7a:9a:a8:0c:24:1e:65:0c:c4:e8:0f:03:
d5:0c:55:1f:1b:d7:60:15:7b:80:6e:4b:19:0a:76:
b0:77:8f:44:8c:15:60:da:38:a9:59:81:d2:4f:64:
29:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:8C:51:31:12:64:88:69:09:67:C0:BF:8C:14:B9:CA:5B:F7:98:AD
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/E9DBE7221E8411F0A85F5565C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
43.227.20.0/22
43.228.72.0/22
43.241.24.0/22
45.119.57.0-45.119.59.255
45.252.72.0/22
103.59.104.0/24
103.81.36.0/22
103.93.240.0/22
103.94.56.0/22
103.125.72.0/23
103.126.68.0/22
103.178.206.0/23
103.184.86.0/23
103.204.36.0/22
103.211.60.0/22
103.221.72.0/22
103.239.84.0/22
103.241.80.0/22
103.243.112.0/22
103.249.240.0/22
103.251.208.0/22
103.254.52.0/22
150.129.128.0/22
150.129.156.0/22
163.53.200.0/22
202.136.68.0/22
IPv6:
2404:4980::/32
Signature Algorithm: sha256WithRSAEncryption
6b:c2:ae:4d:80:81:f7:c2:b3:70:c2:76:66:3b:d9:80:29:45:
ba:03:2a:bb:f5:30:57:42:5e:5e:1d:d9:c1:89:59:1c:82:88:
ee:3e:58:8f:df:b3:c8:38:d5:b8:ad:88:90:d7:d3:0d:a1:4c:
22:7e:c5:e1:40:05:1d:5c:16:dd:b3:9c:0c:7e:8b:b9:00:94:
33:2b:83:c3:81:d7:90:16:6b:17:97:e0:85:ce:a9:3e:43:39:
94:79:1a:6b:7a:89:81:d0:30:5f:a6:66:00:aa:f7:95:e3:71:
f9:29:33:47:25:68:11:80:cb:ed:0c:b1:42:86:10:ed:74:be:
18:86:c1:1d:a5:9d:d7:39:9d:bb:ab:02:09:e9:db:af:e7:5b:
c5:e5:b6:22:2b:b8:4b:05:eb:c3:d1:e6:68:17:3a:1b:55:26:
85:dc:df:b9:1d:bd:10:44:cf:6d:6b:5f:39:3c:90:f1:c8:08:
76:73:e3:8f:65:f9:6d:08:8e:7b:62:c0:e3:f1:dd:69:59:f2:
dc:c1:a9:5d:d3:c5:cf:91:ae:c0:b3:45:12:74:b4:9e:3a:ca:
89:bb:39:15:1e:1f:cb:b0:a9:36:34:4d:67:23:60:5d:46:a5:
5b:c2:a3:0b:59:24:78:2f:96:60:3d:64:60:d7:d4:62:2d:8b:
8b:d7:e9:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 01:27:55 2025 by rpki-client