Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A1EE0/D23634461D8A11E2820F04E508B02CD2/44E2CCAEBA9811EFBA471E62C4F9AE02.roa
File: 44E2CCAEBA9811EFBA471E62C4F9AE02.roa (raw, json)
Hash identifier: L9XUW5EKcX3N5kGAQjlCulKdYkLxOgguoKHEktNkp/4=
Subject key identifier: D7:D6:69:71:92:A7:C3:78:C8:DF:73:90:E1:D8:25:6B:D1:88:EF:01
Certificate issuer: /CN=A91A1EE0/serialNumber=860C0904CED7BB0D1D97B292FDB662E8B9A8AFF0
Certificate serial: 3516
Authority key identifier: 86:0C:09:04:CE:D7:BB:0D:1D:97:B2:92:FD:B6:62:E8:B9:A8:AF:F0
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hgwJBM7Xuw0dl7KS_bZi6Lmor_A.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A1EE0/D23634461D8A11E2820F04E508B02CD2/44E2CCAEBA9811EFBA471E62C4F9AE02.roa
Signing time: Wed 10 Sep 2025 14:50:48 +0000
ROA not before: Wed 10 Sep 2025 14:50:48 +0000
ROA not after: Tue 01 Dec 2026 00:00:00 +0000
asID: 24122
IP address blocks: 43.243.204.0/23 maxlen: 23
43.243.204.0/24 maxlen: 24
43.243.205.0/24 maxlen: 24
43.243.206.0/23 maxlen: 23
43.243.206.0/24 maxlen: 24
43.243.207.0/24 maxlen: 24
103.16.72.0/22 maxlen: 22
103.16.72.0/23 maxlen: 23
103.16.72.0/24 maxlen: 24
103.16.73.0/24 maxlen: 24
103.16.74.0/23 maxlen: 23
103.16.74.0/24 maxlen: 24
103.16.75.0/24 maxlen: 24
119.40.80.0/20 maxlen: 20
119.40.80.0/20 maxlen: 24
119.40.80.0/21 maxlen: 21
119.40.80.0/23 maxlen: 23
119.40.80.0/24 maxlen: 24
119.40.81.0/24 maxlen: 24
119.40.82.0/24 maxlen: 24
119.40.83.0/24 maxlen: 24
119.40.84.0/23 maxlen: 23
119.40.84.0/24 maxlen: 24
119.40.85.0/24 maxlen: 24
119.40.86.0/24 maxlen: 24
119.40.87.0/24 maxlen: 24
119.40.88.0/21 maxlen: 21
119.40.88.0/22 maxlen: 22
119.40.88.0/24 maxlen: 24
119.40.89.0/24 maxlen: 24
119.40.90.0/24 maxlen: 24
119.40.91.0/24 maxlen: 24
119.40.92.0/22 maxlen: 22
119.40.92.0/24 maxlen: 24
119.40.93.0/24 maxlen: 24
119.40.94.0/24 maxlen: 24
119.40.95.0/24 maxlen: 24
210.4.64.0/20 maxlen: 20
210.4.64.0/20 maxlen: 24
210.4.64.0/21 maxlen: 21
210.4.64.0/24 maxlen: 24
210.4.65.0/24 maxlen: 24
210.4.66.0/23 maxlen: 23
210.4.66.0/24 maxlen: 24
210.4.67.0/24 maxlen: 24
210.4.68.0/24 maxlen: 24
210.4.69.0/24 maxlen: 24
210.4.70.0/23 maxlen: 23
210.4.70.0/24 maxlen: 24
210.4.71.0/24 maxlen: 24
210.4.72.0/21 maxlen: 21
210.4.72.0/24 maxlen: 24
210.4.73.0/24 maxlen: 24
210.4.74.0/23 maxlen: 23
210.4.74.0/24 maxlen: 24
210.4.75.0/24 maxlen: 24
210.4.76.0/24 maxlen: 24
210.4.77.0/24 maxlen: 24
210.4.78.0/24 maxlen: 24
210.4.79.0/24 maxlen: 24
2403:4000::/32 maxlen: 32
2403:4000:17::/48 maxlen: 48
2403:4000:18::/48 maxlen: 48
2403:4000:19::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A1EE0/D23634461D8A11E2820F04E508B02CD2/hgwJBM7Xuw0dl7KS_bZi6Lmor_A.crl
rsync://rpki.apnic.net/member_repository/A91A1EE0/D23634461D8A11E2820F04E508B02CD2/hgwJBM7Xuw0dl7KS_bZi6Lmor_A.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hgwJBM7Xuw0dl7KS_bZi6Lmor_A.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 27 Oct 2025 14:36:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13590 (0x3516)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A1EE0, serialNumber=860C0904CED7BB0D1D97B292FDB662E8B9A8AFF0
Validity
Not Before: Sep 10 14:50:48 2025 GMT
Not After : Dec 1 00:00:00 2026 GMT
Subject: CN=68c19047-ff9e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:ea:49:44:40:09:14:f1:2e:fa:4e:0d:b0:10:
d5:5d:85:83:be:d0:a3:99:e9:8f:d6:fa:53:87:a8:
5f:c1:d5:2c:85:bf:66:61:9f:b7:71:bc:fb:26:2b:
a5:f7:ad:73:1c:0e:dc:f4:b1:77:ff:fa:83:79:63:
16:8b:cf:88:ff:c6:02:6c:3c:6f:e0:c4:35:0e:bd:
9b:6a:25:cf:16:81:cc:53:41:8b:30:05:f5:0d:49:
c3:21:30:56:4a:5d:73:0f:ec:ef:5f:94:25:a2:97:
7e:3c:90:db:f4:04:ec:d6:1a:15:32:29:42:14:fc:
3d:64:86:84:37:de:34:38:80:3e:fa:bd:7d:54:66:
3a:19:b3:b0:80:92:07:e9:8b:cb:a2:3a:c3:f1:d7:
5e:67:4a:f9:66:47:3c:c4:b8:64:5f:9c:b1:31:21:
2b:17:f5:41:31:8e:c6:fa:20:15:0b:cc:ae:c6:4e:
1b:1e:12:8e:50:e0:50:fc:70:46:22:0c:bf:ec:ed:
e9:f7:19:e0:ce:c1:1c:9b:be:bd:ce:56:44:69:26:
67:ed:5c:b2:e1:2d:a9:7b:cc:9c:84:72:94:57:12:
4e:67:dd:e8:d0:82:02:20:8f:06:e3:13:9a:df:e2:
c3:50:1d:58:3f:77:11:1f:16:22:9d:77:c6:96:a9:
99:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:D6:69:71:92:A7:C3:78:C8:DF:73:90:E1:D8:25:6B:D1:88:EF:01
X509v3 Authority Key Identifier:
keyid:86:0C:09:04:CE:D7:BB:0D:1D:97:B2:92:FD:B6:62:E8:B9:A8:AF:F0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A1EE0/D23634461D8A11E2820F04E508B02CD2/hgwJBM7Xuw0dl7KS_bZi6Lmor_A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hgwJBM7Xuw0dl7KS_bZi6Lmor_A.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A1EE0/D23634461D8A11E2820F04E508B02CD2/44E2CCAEBA9811EFBA471E62C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
43.243.204.0/22
103.16.72.0/22
119.40.80.0/20
210.4.64.0/20
IPv6:
2403:4000::/32
Signature Algorithm: sha256WithRSAEncryption
46:c0:0f:20:6e:fc:e6:d6:6a:7d:60:ce:87:7c:9e:6b:98:7c:
30:12:99:2c:d5:e2:12:65:33:f3:ff:ab:2e:41:ef:b0:01:78:
6b:9c:bf:72:88:63:d8:be:b3:9f:95:ec:8f:b6:cc:47:dc:a0:
66:d4:48:da:4d:b1:d2:54:d2:f3:66:a2:f0:91:31:3c:63:6a:
0b:c3:7a:3d:45:92:25:4f:c0:e5:25:ef:57:c0:08:8f:a6:18:
87:36:5e:d3:57:63:1c:eb:ae:1d:0d:1b:1f:6f:f4:ef:38:07:
62:9e:36:55:0e:46:02:5a:e4:38:8a:99:12:1b:ac:6f:41:69:
50:33:c9:c2:4a:27:f3:37:11:8a:7e:e5:de:ed:b3:91:ab:c5:
b5:67:c1:9a:85:90:ea:24:aa:00:79:55:29:e6:c7:d8:94:32:
40:8d:3e:c0:f6:5c:4f:c2:8e:68:69:04:b9:55:dc:bc:14:26:
dc:08:6d:9f:f5:f4:94:1b:b0:9e:b4:e7:43:b2:78:d0:c0:b3:
96:f6:36:c5:f3:63:f7:a0:b2:1c:61:a8:62:24:ae:d0:e0:6f:
69:02:4d:29:d1:0b:5a:63:3a:9a:48:67:14:49:5c:f7:00:7c:
e0:e1:68:c9:90:03:84:6f:8b:9c:e8:8f:6c:d1:94:bc:61:13:
a4:68:9b:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 21:37:50 2025 by rpki-client