Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9194522/DE20FC96275C11ED8DAC6A68C4F9AE02/9995D8D6276011EDAF21D06DC4F9AE02.roa
File: 9995D8D6276011EDAF21D06DC4F9AE02.roa (raw, json)
Hash identifier: Wj0dfxEXWEqNmFFsrnNZwxMr0sW6AdEgdi4BAZhUFLo=
Subject key identifier: 09:41:A5:48:27:A6:D0:FB:60:17:FB:BA:90:A7:21:14:67:19:7E:F5
Certificate issuer: /CN=A9194522/serialNumber=A6389C774DAD65D88DF2E6D4F43DE2A0B572EE7A
Certificate serial: 0295
Authority key identifier: A6:38:9C:77:4D:AD:65:D8:8D:F2:E6:D4:F4:3D:E2:A0:B5:72:EE:7A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pjicd02tZdiN8ubU9D3ioLVy7no.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9194522/DE20FC96275C11ED8DAC6A68C4F9AE02/9995D8D6276011EDAF21D06DC4F9AE02.roa
Signing time: Sun 05 Oct 2025 01:57:17 +0000
ROA not before: Sun 05 Oct 2025 01:57:17 +0000
ROA not after: Tue 01 Dec 2026 00:00:00 +0000
asID: 150178
IP address blocks: 103.198.94.0/23 maxlen: 23
103.198.94.0/24 maxlen: 24
103.198.95.0/24 maxlen: 24
2400:a3a0::/32 maxlen: 32
2400:a3a0::/48 maxlen: 48
2400:a3a0:1::/48 maxlen: 48
2400:a3a0:2::/48 maxlen: 48
2400:a3a0:3::/48 maxlen: 48
2400:a3a0:4::/48 maxlen: 48
2400:a3a0:5::/48 maxlen: 48
2400:a3a0:6::/48 maxlen: 48
2400:a3a0:94::/48 maxlen: 48
2400:a3a0:95::/48 maxlen: 48
2400:a3a0:fb::/48 maxlen: 48
2400:a3a0:1000::/36 maxlen: 36
2400:a3a0:1000::/48 maxlen: 48
2400:a3a0:2000::/36 maxlen: 36
2400:a3a0:2000::/48 maxlen: 48
2400:a3a0:3000::/48 maxlen: 48
2400:a3a0:4000::/42 maxlen: 42
2400:a3a0:4001::/48 maxlen: 48
2400:a3a0:4002::/48 maxlen: 48
2400:a3a0:4003::/48 maxlen: 48
2400:a3a0:4004::/48 maxlen: 48
2400:a3a0:4005::/48 maxlen: 48
2400:a3a0:4006::/48 maxlen: 48
2400:a3a0:4007::/48 maxlen: 48
2400:a3a0:4008::/48 maxlen: 48
2400:a3a0:4009::/48 maxlen: 48
2400:a3a0:400a::/48 maxlen: 48
2400:a3a0:400b::/48 maxlen: 48
2400:a3a0:400c::/48 maxlen: 48
2400:a3a0:400d::/48 maxlen: 48
2400:a3a0:400e::/48 maxlen: 48
2400:a3a0:400f::/48 maxlen: 48
2400:a3a0:4010::/48 maxlen: 48
2400:a3a0:4011::/48 maxlen: 48
2400:a3a0:4012::/48 maxlen: 48
2400:a3a0:4013::/48 maxlen: 48
2400:a3a0:4014::/48 maxlen: 48
2400:a3a0:4015::/48 maxlen: 48
2400:a3a0:4016::/48 maxlen: 48
2400:a3a0:4017::/48 maxlen: 48
2400:a3a0:4018::/48 maxlen: 48
2400:a3a0:4019::/48 maxlen: 48
2400:a3a0:401a::/48 maxlen: 48
2400:a3a0:401b::/48 maxlen: 48
2400:a3a0:401c::/48 maxlen: 48
2400:a3a0:401d::/48 maxlen: 48
2400:a3a0:401e::/48 maxlen: 48
2400:a3a0:401f::/48 maxlen: 48
2400:a3a0:4020::/48 maxlen: 48
2400:a3a0:4021::/48 maxlen: 48
2400:a3a0:4022::/48 maxlen: 48
2400:a3a0:4023::/48 maxlen: 48
2400:a3a0:4024::/48 maxlen: 48
2400:a3a0:4025::/48 maxlen: 48
2400:a3a0:4026::/48 maxlen: 48
2400:a3a0:4027::/48 maxlen: 48
2400:a3a0:4028::/48 maxlen: 48
2400:a3a0:4029::/48 maxlen: 48
2400:a3a0:402a::/48 maxlen: 48
2400:a3a0:402b::/48 maxlen: 48
2400:a3a0:402c::/48 maxlen: 48
2400:a3a0:402d::/48 maxlen: 48
2400:a3a0:402e::/48 maxlen: 48
2400:a3a0:402f::/48 maxlen: 48
2400:a3a0:4030::/48 maxlen: 48
2400:a3a0:4031::/48 maxlen: 48
2400:a3a0:4032::/48 maxlen: 48
2400:a3a0:4033::/48 maxlen: 48
2400:a3a0:4034::/48 maxlen: 48
2400:a3a0:4035::/48 maxlen: 48
2400:a3a0:4036::/48 maxlen: 48
2400:a3a0:4037::/48 maxlen: 48
2400:a3a0:4038::/48 maxlen: 48
2400:a3a0:4039::/48 maxlen: 48
2400:a3a0:403a::/48 maxlen: 48
2400:a3a0:403b::/48 maxlen: 48
2400:a3a0:403c::/48 maxlen: 48
2400:a3a0:403d::/48 maxlen: 48
2400:a3a0:403e::/48 maxlen: 48
2400:a3a0:403f::/48 maxlen: 48
2400:a3a0:8000::/36 maxlen: 36
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9194522/DE20FC96275C11ED8DAC6A68C4F9AE02/pjicd02tZdiN8ubU9D3ioLVy7no.crl
rsync://rpki.apnic.net/member_repository/A9194522/DE20FC96275C11ED8DAC6A68C4F9AE02/pjicd02tZdiN8ubU9D3ioLVy7no.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pjicd02tZdiN8ubU9D3ioLVy7no.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 26 Oct 2025 03:50:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 661 (0x295)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9194522, serialNumber=A6389C774DAD65D88DF2E6D4F43DE2A0B572EE7A
Validity
Not Before: Oct 5 01:57:17 2025 GMT
Not After : Dec 1 00:00:00 2026 GMT
Subject: CN=68e1d07d-25a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:8e:ef:42:16:6d:44:25:64:87:cd:a7:f4:c1:
b0:8e:86:57:55:2e:47:a9:5b:05:02:1f:77:26:66:
d7:92:e7:a5:58:16:63:5b:d7:c5:03:a3:cf:ba:76:
10:9d:92:aa:65:b0:ec:79:4f:6b:78:9d:84:7e:47:
bb:46:06:f6:86:b0:e5:9e:17:77:15:ce:a4:52:f9:
2a:96:86:4d:ef:4b:cf:3c:51:65:77:b1:7e:2f:db:
02:4c:74:53:6c:31:c6:a1:55:a9:92:36:5d:5a:a7:
65:9e:8a:a8:aa:32:bf:64:aa:84:69:a2:7d:b9:bd:
ee:61:2d:59:4b:24:ad:54:c9:4d:b2:7f:10:96:6f:
f3:5f:ae:e1:72:fc:c2:19:2d:4b:03:28:60:fa:7b:
7e:8b:96:d7:08:d3:c4:a4:dc:d6:e2:ed:88:a4:d1:
7c:3c:af:9b:e8:b2:f4:a8:8b:9d:f5:59:b2:31:bf:
5f:ff:0e:fe:0a:f9:49:ad:18:53:c0:e8:9c:61:d6:
43:41:29:9c:d8:e1:1a:67:b9:87:80:33:19:85:fc:
2b:29:ef:c3:81:e8:d9:35:78:06:83:8f:29:57:42:
71:06:d8:cd:bf:2f:1a:73:c5:0e:3a:a1:f6:ca:4c:
c4:e6:02:1e:2e:15:43:7f:3d:32:96:71:91:69:1e:
73:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:41:A5:48:27:A6:D0:FB:60:17:FB:BA:90:A7:21:14:67:19:7E:F5
X509v3 Authority Key Identifier:
keyid:A6:38:9C:77:4D:AD:65:D8:8D:F2:E6:D4:F4:3D:E2:A0:B5:72:EE:7A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9194522/DE20FC96275C11ED8DAC6A68C4F9AE02/pjicd02tZdiN8ubU9D3ioLVy7no.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pjicd02tZdiN8ubU9D3ioLVy7no.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9194522/DE20FC96275C11ED8DAC6A68C4F9AE02/9995D8D6276011EDAF21D06DC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.198.94.0/23
IPv6:
2400:a3a0::/32
Signature Algorithm: sha256WithRSAEncryption
6b:63:5d:58:c7:c6:04:45:7f:83:a8:7c:f6:7d:41:f0:b2:a8:
e0:f4:ee:84:d7:dc:ee:cd:f0:b5:bd:da:a6:4e:5c:3e:41:bd:
e1:28:38:63:cc:84:ea:8c:cc:31:71:d6:89:2a:f4:ed:ea:1b:
99:96:93:8f:43:b4:b2:9b:22:1a:91:a3:2c:12:7c:d3:59:14:
8d:1d:2b:e1:8a:71:02:df:23:81:1c:3d:26:83:e8:f0:e6:bc:
35:95:7c:d5:06:c4:b8:dd:c1:0d:0c:2c:01:97:ef:00:bd:90:
85:c1:f1:f3:9a:38:69:33:b0:37:77:dc:49:2b:4e:ab:3e:82:
54:8e:00:80:be:70:03:84:87:c3:d2:68:3a:5b:6c:f9:fe:e6:
01:45:76:84:be:8a:cf:46:8c:1e:f8:4e:a3:e8:95:11:01:29:
2a:04:82:cc:fb:42:4e:05:f6:eb:71:36:38:d7:b0:28:8e:66:
7f:9e:fd:e4:cd:92:3a:dd:12:59:24:5a:09:eb:96:03:7d:de:
de:8b:4e:69:90:ce:7b:9c:ed:9f:03:78:7f:c5:31:da:14:7a:
bb:bd:6b:81:1b:8b:c5:1f:e0:7c:8c:37:48:b6:e4:c1:63:d5:
c4:d1:69:20:d0:a7:58:a4:1e:91:66:64:ff:40:5d:42:fa:c3:
72:db:e2:a1
-----BEGIN CERTIFICATE-----
MIIFgDCCBGigAwIBAgICApUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OTQ1MjIxMTAvBgNVBAUTKEE2Mzg5Qzc3NERBRDY1RDg4REYyRTZENEY0M0RFMkEw
QjU3MkVFN0EwHhcNMjUxMDA1MDE1NzE3WhcNMjYxMjAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02OGUxZDA3ZC0yNWEzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAo47vQhZtRCVkh82n9MGwjoZXVS5HqVsFAh93JmbXkuelWBZjW9fFA6PPunYQ
nZKqZbDseU9reJ2Efke7Rgb2hrDlnhd3Fc6kUvkqloZN70vPPFFld7F+L9sCTHRT
bDHGoVWpkjZdWqdlnoqoqjK/ZKqEaaJ9ub3uYS1ZSyStVMlNsn8Qlm/zX67hcvzC
GS1LAyhg+nt+i5bXCNPEpNzW4u2IpNF8PK+b6LL0qIud9VmyMb9f/w7+CvlJrRhT
wOicYdZDQSmc2OEaZ7mHgDMZhfwrKe/DgejZNXgGg48pV0JxBtjNvy8ac8UOOqH2
ykzE5gIeLhVDfz0ylnGRaR5zXwIDAQABo4ICpDCCAqAwHQYDVR0OBBYEFAlBpUgn
ptD7YBf7upCnIRRnGX71MB8GA1UdIwQYMBaAFKY4nHdNrWXYjfLm1PQ94qC1cu56
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NDUyMi9ERTIwRkM5NjI3
NUMxMUVEOERBQzZBNjhDNEY5QUUwMi9wamljZDAydFpkaU44dWJVOUQzaW9MVnk3
bm8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3BqaWNkMDJ0WmRpTjh1YlU5RDNpb0xWeTduby5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
OTQ1MjIvREUyMEZDOTYyNzVDMTFFRDhEQUM2QTY4QzRGOUFFMDIvOTk5NUQ4RDYy
NzYwMTFFREFGMjFEMDZEQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwLgYIKwYBBQUHAQcBAf8E
HzAdMAwEAgABMAYDBAFnxl4wDQQCAAIwBwMFACQAo6AwDQYJKoZIhvcNAQELBQAD
ggEBAGtjXVjHxgRFf4OofPZ9QfCyqOD07oTX3O7N8LW92qZOXD5BveEoOGPMhOqM
zDFx1okq9O3qG5mWk49DtLKbIhqRoywSfNNZFI0dK+GKcQLfI4EcPSaD6PDmvDWV
fNUGxLjdwQ0MLAGX7wC9kIXB8fOaOGkzsDd33EkrTqs+glSOAIC+cAOEh8PSaDpb
bPn+5gFFdoS+is9GjB74TqPolREBKSoEgsz7Qk4F9utxNjjXsCiOZn+e/eTNkjrd
ElkkWgnrlgN93t6LTmmQznuc7Z8DeH/FMdoUeru9a4Ebi8Uf4HyMN0i25MFj1cTR
aSDQp1ikHpFmZP9AXUL6w3Lb4qE=
-----END CERTIFICATE-----
Generated at Mon Oct 20 11:26:54 2025 by rpki-client