Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A919C47E/BCEDF442B0BF11E886392237C4F9AE02/02BFF64EE6A811EFB5943878C4F9AE02.roa
File: 02BFF64EE6A811EFB5943878C4F9AE02.roa (raw, json)
Hash identifier: GoAy5cjhZ6tHusMFJznhNoSIq/l4hxWlmp0vD6wrtPc=
Subject key identifier: 14:14:E1:09:6A:25:BA:1C:F6:79:6A:84:26:11:21:C3:E5:62:6C:68
Certificate issuer: /CN=A919C47E/serialNumber=894FE11398B679AEB1B118B1BDE673E18CF6E934
Certificate serial: 13B4
Authority key identifier: 89:4F:E1:13:98:B6:79:AE:B1:B1:18:B1:BD:E6:73:E1:8C:F6:E9:34
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iU_hE5i2ea6xsRixveZz4Yz26TQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A919C47E/BCEDF442B0BF11E886392237C4F9AE02/02BFF64EE6A811EFB5943878C4F9AE02.roa
Signing time: Sat 04 Oct 2025 17:15:58 +0000
ROA not before: Sat 04 Oct 2025 17:15:58 +0000
ROA not after: Tue 01 Dec 2026 00:00:00 +0000
asID: 138398
IP address blocks: 103.121.34.0/23 maxlen: 23
103.121.34.0/24 maxlen: 24
103.121.35.0/24 maxlen: 24
103.130.68.0/24 maxlen: 24
103.130.69.0/24 maxlen: 24
103.139.78.0/24 maxlen: 24
2403:b4c0::/36 maxlen: 36
2403:b4c0:1000::/36 maxlen: 36
2403:b4c0:2000::/36 maxlen: 36
2403:b4c0:3000::/36 maxlen: 36
2403:b4c0:5000::/36 maxlen: 36
2403:b4c0:6000::/36 maxlen: 36
2403:b4c0:7000::/36 maxlen: 36
2403:b4c0:8000::/48 maxlen: 48
2403:b4c0:8001::/48 maxlen: 48
2403:b4c0:8002::/48 maxlen: 48
2403:b4c0:8003::/48 maxlen: 48
2403:b4c0:8004::/48 maxlen: 48
2403:b4c0:8005::/48 maxlen: 48
2403:b4c0:9000::/36 maxlen: 36
2403:b4c0:aa00::/40 maxlen: 40
2403:b4c0:ae00::/40 maxlen: 40
2403:b4c0:af00::/40 maxlen: 40
2403:b4c0:f000::/36 maxlen: 36
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A919C47E/BCEDF442B0BF11E886392237C4F9AE02/iU_hE5i2ea6xsRixveZz4Yz26TQ.crl
rsync://rpki.apnic.net/member_repository/A919C47E/BCEDF442B0BF11E886392237C4F9AE02/iU_hE5i2ea6xsRixveZz4Yz26TQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iU_hE5i2ea6xsRixveZz4Yz26TQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 25 Oct 2025 17:30:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5044 (0x13b4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A919C47E, serialNumber=894FE11398B679AEB1B118B1BDE673E18CF6E934
Validity
Not Before: Oct 4 17:15:58 2025 GMT
Not After : Dec 1 00:00:00 2026 GMT
Subject: CN=68e1564e-7c6a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:ab:cd:6a:51:3c:3c:de:e5:c8:75:de:a8:3b:
a2:22:04:49:56:fb:df:25:a1:0a:14:bd:42:44:14:
45:bc:51:91:57:7d:e6:1e:8c:0c:65:d5:8c:69:17:
d7:5b:05:43:60:0b:bf:99:33:76:6e:9b:ad:44:4b:
fd:a1:07:0d:54:20:02:23:f9:c2:92:c5:ba:2d:79:
e3:0b:04:7e:ba:e7:70:f5:2b:c8:9a:f4:c0:df:7b:
0e:9a:64:f5:bb:f2:4f:31:18:40:99:37:e6:a7:8b:
38:a2:c7:ab:d3:fb:c2:1f:22:25:7c:c4:78:bc:d5:
3b:a5:6f:f6:36:09:f6:ee:5c:b7:64:bd:5c:16:50:
08:fe:cb:38:c2:1a:55:f4:9e:16:b0:f5:f0:75:e5:
14:fd:cd:98:95:f8:5a:c4:4e:51:60:1c:99:32:e9:
46:e8:c5:87:e8:cd:33:b9:a4:5e:cf:3a:c9:89:e5:
d0:5b:dd:cb:e5:d7:97:d5:91:3e:a1:41:86:fb:1a:
ad:e5:cf:0e:a3:be:91:34:a0:eb:83:1b:30:47:df:
aa:2a:ee:29:59:a3:cc:2e:85:f0:6d:d8:a1:20:1a:
8e:50:47:37:6d:f4:79:84:62:af:96:90:47:bd:37:
31:44:09:97:5e:84:bd:90:f7:6a:77:9f:10:b5:43:
a4:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:14:E1:09:6A:25:BA:1C:F6:79:6A:84:26:11:21:C3:E5:62:6C:68
X509v3 Authority Key Identifier:
keyid:89:4F:E1:13:98:B6:79:AE:B1:B1:18:B1:BD:E6:73:E1:8C:F6:E9:34
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A919C47E/BCEDF442B0BF11E886392237C4F9AE02/iU_hE5i2ea6xsRixveZz4Yz26TQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iU_hE5i2ea6xsRixveZz4Yz26TQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919C47E/BCEDF442B0BF11E886392237C4F9AE02/02BFF64EE6A811EFB5943878C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.121.34.0/23
103.130.68.0/23
103.139.78.0/24
IPv6:
2403:b4c0::/34
2403:b4c0:5000::-2403:b4c0:8005:ffff:ffff:ffff:ffff:ffff
2403:b4c0:9000::/36
2403:b4c0:aa00::/40
2403:b4c0:ae00::/39
2403:b4c0:f000::/36
Signature Algorithm: sha256WithRSAEncryption
54:c6:6f:47:ed:f9:ed:25:13:05:81:ea:8a:67:a0:bf:f4:90:
f6:ce:64:c1:ae:f5:1a:e7:e3:b4:71:96:3f:9c:ac:35:b3:35:
af:28:d3:e1:5f:1a:a7:b1:08:6f:ec:99:89:65:b5:e1:e6:6f:
4d:a6:64:ad:e0:76:39:f2:c8:2d:c9:4d:b2:80:b0:0a:7c:f1:
2d:9d:9e:ac:e7:df:78:82:68:41:54:47:7f:9f:35:10:55:fc:
e0:83:25:18:43:65:7c:e3:f7:f8:17:b4:24:76:ee:c4:3d:57:
c4:7d:60:f1:86:03:05:7c:be:85:c9:af:46:4d:04:88:67:d6:
0c:9a:36:47:58:83:5a:91:6c:b3:73:18:d9:e1:d4:62:a1:e3:
f0:5f:39:bd:85:e3:3d:6f:52:09:17:1c:cb:86:86:a6:09:2a:
3d:7d:c5:c0:6c:4e:8a:5c:be:63:d4:57:a5:6c:4b:c9:99:84:
67:72:ac:a8:fa:2e:dc:d9:d0:c3:be:1e:96:62:ea:3d:21:d7:
37:42:2c:ae:c3:79:ad:e3:e9:90:11:02:11:3b:45:fb:70:ef:
83:9c:74:bb:ff:95:0f:ec:66:25:5b:58:94:9c:ae:ca:cc:75:
85:34:cb:92:ee:6e:c7:f1:bc:12:8b:ae:16:50:f5:9a:31:f2:
cb:4b:03:cd
-----BEGIN CERTIFICATE-----
MIIFwDCCBKigAwIBAgICE7QwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OUM0N0UxMTAvBgNVBAUTKDg5NEZFMTEzOThCNjc5QUVCMUIxMThCMUJERTY3M0Ux
OENGNkU5MzQwHhcNMjUxMDA0MTcxNTU4WhcNMjYxMjAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02OGUxNTY0ZS03YzZhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAw6vNalE8PN7lyHXeqDuiIgRJVvvfJaEKFL1CRBRFvFGRV33mHowMZdWMaRfX
WwVDYAu/mTN2bputREv9oQcNVCACI/nCksW6LXnjCwR+uudw9SvImvTA33sOmmT1
u/JPMRhAmTfmp4s4oser0/vCHyIlfMR4vNU7pW/2Ngn27ly3ZL1cFlAI/ss4whpV
9J4WsPXwdeUU/c2YlfhaxE5RYByZMulG6MWH6M0zuaRezzrJieXQW93L5deX1ZE+
oUGG+xqt5c8Oo76RNKDrgxswR9+qKu4pWaPMLoXwbdihIBqOUEc3bfR5hGKvlpBH
vTcxRAmXXoS9kPdqd58QtUOkMQIDAQABo4IC5DCCAuAwHQYDVR0OBBYEFBQU4Qlq
Jboc9nlqhCYRIcPlYmxoMB8GA1UdIwQYMBaAFIlP4ROYtnmusbEYsb3mc+GM9uk0
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5QzQ3RS9CQ0VERjQ0MkIw
QkYxMUU4ODYzOTIyMzdDNEY5QUUwMi9pVV9oRTVpMmVhNnhzUml4dmVaejRZejI2
VFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2lVX2hFNWkyZWE2eHNSaXh2ZVp6NFl6MjZUUS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
OUM0N0UvQkNFREY0NDJCMEJGMTFFODg2MzkyMjM3QzRGOUFFMDIvMDJCRkY2NEVF
NkE4MTFFRkI1OTQzODc4QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwbgYIKwYBBQUHAQcBAf8E
XzBdMBgEAgABMBIDBAFneSIDBAFngkQDBABni04wQQQCAAIwOwMGBiQDtMAAMBED
BgQkA7TAUAMHASQDtMCABAMGBCQDtMCQAwYAJAO0wKoDBgEkA7TArgMGBCQDtMDw
MA0GCSqGSIb3DQEBCwUAA4IBAQBUxm9H7fntJRMFgeqKZ6C/9JD2zmTBrvUa5+O0
cZY/nKw1szWvKNPhXxqnsQhv7JmJZbXh5m9NpmSt4HY58sgtyU2ygLAKfPEtnZ6s
5994gmhBVEd/nzUQVfzggyUYQ2V84/f4F7Qkdu7EPVfEfWDxhgMFfL6Fya9GTQSI
Z9YMmjZHWINakWyzcxjZ4dRioePwXzm9heM9b1IJFxzLhoamCSo9fcXAbE6KXL5j
1FelbEvJmYRncqyo+i7c2dDDvh6WYuo9Idc3Qiyuw3mt4+mQEQIRO0X7cO+DnHS7
/5UP7GYlW1iUnK7KzHWFNMuS7m7H8bwSi64WUPWaMfLLSwPN
-----END CERTIFICATE-----
Generated at Mon Oct 20 12:19:15 2025 by rpki-client