Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B49F2/82E4C2A0A6EE11E985F3B011C4F9AE02/BB0AA59C0A3D11EB82ECEA4BC4F9AE02.roa
File: BB0AA59C0A3D11EB82ECEA4BC4F9AE02.roa (raw, json)
Hash identifier: ecUYAzKP1VHNDV8/DURQ3XmWYJTnzDR9mLUMMYKH7wE=
Subject key identifier: 1A:CE:9B:16:35:5A:65:A8:D9:A4:FB:D1:94:38:45:E4:CB:6B:43:E3
Certificate issuer: /CN=A91B49F2/serialNumber=C873BB610B913C3ECDC708A265A74B1141A76F54
Certificate serial: 0E76
Authority key identifier: C8:73:BB:61:0B:91:3C:3E:CD:C7:08:A2:65:A7:4B:11:41:A7:6F:54
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yHO7YQuRPD7NxwiiZadLEUGnb1Q.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B49F2/82E4C2A0A6EE11E985F3B011C4F9AE02/BB0AA59C0A3D11EB82ECEA4BC4F9AE02.roa
Signing time: Mon 18 Aug 2025 18:27:17 +0000
ROA not before: Mon 18 Aug 2025 18:27:17 +0000
ROA not after: Wed 30 Sep 2026 00:00:00 +0000
asID: 55944
IP address blocks: 43.231.28.0/22 maxlen: 24
43.247.140.0/22 maxlen: 24
103.15.52.0/22 maxlen: 24
103.19.224.0/22 maxlen: 24
103.50.104.0/22 maxlen: 24
103.248.112.0/22 maxlen: 24
150.107.196.0/22 maxlen: 24
202.153.80.0/21 maxlen: 21
202.153.80.0/23 maxlen: 24
202.153.82.0/23 maxlen: 24
202.153.84.0/23 maxlen: 24
202.153.86.0/23 maxlen: 24
2404:ab80::/48 maxlen: 48
2404:ab80:1::/48 maxlen: 48
2404:ab80:2::/48 maxlen: 48
2404:ab80:3::/48 maxlen: 48
2404:ab80:4::/48 maxlen: 48
2404:ab80:5::/48 maxlen: 48
2404:ab80:6::/48 maxlen: 48
2404:ab80:7::/48 maxlen: 48
2404:ab80:8::/48 maxlen: 48
2404:ab80:9::/48 maxlen: 48
2404:ab80:9:400::/64 maxlen: 64
2404:ab80:9:401::/64 maxlen: 64
2404:ab80:a::/48 maxlen: 48
2404:ab80:b::/48 maxlen: 48
2404:ab80:c::/48 maxlen: 48
2404:ab80:d::/48 maxlen: 48
2404:ab80:e::/48 maxlen: 48
2404:ab80:f::/48 maxlen: 48
2404:ab80:10::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B49F2/82E4C2A0A6EE11E985F3B011C4F9AE02/yHO7YQuRPD7NxwiiZadLEUGnb1Q.crl
rsync://rpki.apnic.net/member_repository/A91B49F2/82E4C2A0A6EE11E985F3B011C4F9AE02/yHO7YQuRPD7NxwiiZadLEUGnb1Q.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yHO7YQuRPD7NxwiiZadLEUGnb1Q.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 29 Aug 2025 17:52:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3702 (0xe76)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B49F2, serialNumber=C873BB610B913C3ECDC708A265A74B1141A76F54
Validity
Not Before: Aug 18 18:27:17 2025 GMT
Not After : Sep 30 00:00:00 2026 GMT
Subject: CN=68a37085-edd9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:9c:15:4c:4f:62:4e:8c:46:f6:31:51:d8:92:
84:e0:1a:d5:a1:ca:71:3a:03:78:78:72:78:d6:53:
6a:61:2d:19:13:33:e3:b3:61:73:02:41:7e:ce:28:
57:aa:44:67:43:9d:a3:55:12:84:ce:af:8b:26:b1:
79:96:52:17:3c:91:e9:ae:14:0f:6f:31:3e:08:d7:
a4:29:8f:dc:ec:dd:5e:00:3b:c6:42:95:f1:93:cb:
42:23:76:93:21:a7:aa:bd:bc:8a:08:82:bd:d3:e2:
07:61:33:b4:26:93:9d:36:80:f0:e3:f3:21:d5:1a:
0d:ab:a9:f2:45:86:8a:b1:ac:42:c1:70:c0:00:d6:
cf:b5:b9:32:a2:90:82:9d:27:a2:d0:1c:e1:c5:4d:
c6:d6:b8:c8:14:58:88:1c:ce:b5:9d:df:3b:b4:bf:
b9:31:fd:4b:01:bc:90:51:2a:76:d0:8c:f8:de:09:
3a:54:69:da:ae:27:d4:85:b0:42:f2:29:22:5d:65:
b5:d4:22:38:ad:f3:01:f2:1d:fd:b5:a8:ef:09:7d:
63:fd:5d:22:38:58:5f:40:49:fc:02:6d:67:de:68:
11:de:11:4b:d3:65:3a:99:c8:de:d6:36:3b:4a:70:
0f:ac:87:e2:80:28:e1:f7:cb:cc:a5:47:43:f9:12:
7a:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:CE:9B:16:35:5A:65:A8:D9:A4:FB:D1:94:38:45:E4:CB:6B:43:E3
X509v3 Authority Key Identifier:
keyid:C8:73:BB:61:0B:91:3C:3E:CD:C7:08:A2:65:A7:4B:11:41:A7:6F:54
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B49F2/82E4C2A0A6EE11E985F3B011C4F9AE02/yHO7YQuRPD7NxwiiZadLEUGnb1Q.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yHO7YQuRPD7NxwiiZadLEUGnb1Q.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B49F2/82E4C2A0A6EE11E985F3B011C4F9AE02/BB0AA59C0A3D11EB82ECEA4BC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
43.231.28.0/22
43.247.140.0/22
103.15.52.0/22
103.19.224.0/22
103.50.104.0/22
103.248.112.0/22
150.107.196.0/22
202.153.80.0/21
IPv6:
2404:ab80::-2404:ab80:10:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
2d:3d:b0:38:3e:4b:e0:74:8a:fb:06:ec:57:fe:0e:d9:12:9e:
a4:5b:7b:12:1d:4a:56:1d:61:68:eb:2d:ae:12:96:d5:a0:17:
da:39:18:55:66:27:c5:a6:01:6d:cf:3a:14:d1:73:ef:d0:f0:
b2:8c:03:14:b2:95:69:02:9f:86:84:79:56:67:d1:3c:b8:c5:
d6:86:2d:9a:c2:aa:c8:d4:43:48:ea:2c:ef:a5:9a:76:ba:91:
6d:41:b8:c7:1b:2b:b7:2b:b6:41:b0:7c:7d:e6:d3:4f:64:67:
00:18:04:b0:0f:ff:4b:b0:a4:25:94:5a:64:6f:dd:7e:87:a8:
98:73:9d:3f:bc:44:38:b5:79:2f:ce:b2:6d:38:d1:18:98:e9:
21:3a:87:9e:cc:a5:32:3d:2d:90:c2:e7:89:7b:d9:fd:e1:68:
74:f0:29:f8:ad:7f:14:88:7c:7c:e2:64:1f:ee:94:fd:fa:25:
8d:c3:f4:a0:17:ea:b9:18:9f:8c:8f:2e:e1:45:80:6b:6f:c6:
02:0d:32:c2:b6:c9:93:58:72:5c:cf:45:d2:32:a6:87:67:15:
de:c3:72:76:1a:f2:8d:fb:d1:4a:d9:fa:9c:2d:8d:e7:da:bf:
87:1b:45:60:d5:21:cb:13:79:db:03:8c:42:d5:3a:38:8d:85:
d0:dd:fc:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 00:50:26 2025 by rpki-client