Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B5D92/357798B0402A11EEA7161872C4F9AE02/3AFA35E04B2E11EEA07FEE34C4F9AE02.roa
File: 3AFA35E04B2E11EEA07FEE34C4F9AE02.roa (raw, json)
Hash identifier: N6Bn0tjkAYOIirhCnX+L9qAa4FcrjkrvnPohqveujZw=
Subject key identifier: 82:6B:03:1D:E6:63:18:B1:71:D1:3C:F7:7A:96:D8:69:DF:B6:EE:8A
Certificate issuer: /CN=A91B5D92/serialNumber=6111807E828AC4F9842693D38611952DF03D7247
Certificate serial: 01A6
Authority key identifier: 61:11:80:7E:82:8A:C4:F9:84:26:93:D3:86:11:95:2D:F0:3D:72:47
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YRGAfoKKxPmEJpPThhGVLfA9ckc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B5D92/357798B0402A11EEA7161872C4F9AE02/3AFA35E04B2E11EEA07FEE34C4F9AE02.roa
Signing time: Tue 07 Oct 2025 04:00:50 +0000
ROA not before: Tue 07 Oct 2025 04:00:50 +0000
ROA not after: Tue 01 Dec 2026 00:00:00 +0000
asID: 24424
IP address blocks: 113.197.104.0/22 maxlen: 22
113.197.104.0/23 maxlen: 23
113.197.104.0/24 maxlen: 24
113.197.105.0/24 maxlen: 24
113.197.106.0/23 maxlen: 23
113.197.106.0/24 maxlen: 24
113.197.107.0/24 maxlen: 24
2401:fa00:40::/43 maxlen: 43
2401:fa00:40::/44 maxlen: 44
2401:fa00:40::/45 maxlen: 45
2401:fa00:40::/46 maxlen: 46
2401:fa00:40::/47 maxlen: 47
2401:fa00:40::/48 maxlen: 48
2401:fa00:41::/48 maxlen: 48
2401:fa00:42::/47 maxlen: 47
2401:fa00:42::/48 maxlen: 48
2401:fa00:43::/48 maxlen: 48
2401:fa00:44::/46 maxlen: 46
2401:fa00:44::/47 maxlen: 47
2401:fa00:44::/48 maxlen: 48
2401:fa00:45::/48 maxlen: 48
2401:fa00:46::/47 maxlen: 47
2401:fa00:46::/48 maxlen: 48
2401:fa00:47::/48 maxlen: 48
2401:fa00:48::/45 maxlen: 45
2401:fa00:48::/46 maxlen: 46
2401:fa00:48::/47 maxlen: 47
2401:fa00:48::/48 maxlen: 48
2401:fa00:49::/48 maxlen: 48
2401:fa00:4a::/47 maxlen: 47
2401:fa00:4a::/48 maxlen: 48
2401:fa00:4b::/48 maxlen: 48
2401:fa00:4c::/46 maxlen: 46
2401:fa00:4c::/47 maxlen: 47
2401:fa00:4c::/48 maxlen: 48
2401:fa00:4d::/48 maxlen: 48
2401:fa00:4e::/47 maxlen: 47
2401:fa00:4e::/48 maxlen: 48
2401:fa00:4f::/48 maxlen: 48
2401:fa00:50::/44 maxlen: 44
2401:fa00:50::/45 maxlen: 45
2401:fa00:50::/46 maxlen: 46
2401:fa00:50::/47 maxlen: 47
2401:fa00:50::/48 maxlen: 48
2401:fa00:51::/48 maxlen: 48
2401:fa00:52::/47 maxlen: 47
2401:fa00:52::/48 maxlen: 48
2401:fa00:53::/48 maxlen: 48
2401:fa00:54::/46 maxlen: 46
2401:fa00:54::/47 maxlen: 47
2401:fa00:54::/48 maxlen: 48
2401:fa00:55::/48 maxlen: 48
2401:fa00:56::/47 maxlen: 47
2401:fa00:56::/48 maxlen: 48
2401:fa00:57::/48 maxlen: 48
2401:fa00:58::/45 maxlen: 45
2401:fa00:58::/46 maxlen: 46
2401:fa00:58::/47 maxlen: 47
2401:fa00:58::/48 maxlen: 48
2401:fa00:59::/48 maxlen: 48
2401:fa00:5a::/47 maxlen: 47
2401:fa00:5a::/48 maxlen: 48
2401:fa00:5b::/48 maxlen: 48
2401:fa00:5c::/46 maxlen: 46
2401:fa00:5c::/47 maxlen: 47
2401:fa00:5c::/48 maxlen: 48
2401:fa00:5d::/48 maxlen: 48
2401:fa00:5e::/47 maxlen: 47
2401:fa00:5e::/48 maxlen: 48
2401:fa00:5f::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B5D92/357798B0402A11EEA7161872C4F9AE02/YRGAfoKKxPmEJpPThhGVLfA9ckc.crl
rsync://rpki.apnic.net/member_repository/A91B5D92/357798B0402A11EEA7161872C4F9AE02/YRGAfoKKxPmEJpPThhGVLfA9ckc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YRGAfoKKxPmEJpPThhGVLfA9ckc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 26 Oct 2025 05:58:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 422 (0x1a6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B5D92, serialNumber=6111807E828AC4F9842693D38611952DF03D7247
Validity
Not Before: Oct 7 04:00:50 2025 GMT
Not After : Dec 1 00:00:00 2026 GMT
Subject: CN=68e49072-52cf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:67:a7:16:13:63:a4:67:a1:2b:b8:1d:3f:bc:
75:f1:9b:79:92:c7:e3:cd:ec:fb:d5:f9:02:45:dd:
c7:8c:97:0b:d8:0a:bd:1d:33:25:81:f6:bf:08:54:
40:fd:9c:ab:ba:83:7c:2b:ca:f9:4c:e1:c8:a7:00:
36:82:6b:6f:18:34:e9:c6:eb:1d:27:1b:ff:b5:61:
1d:b7:db:f8:be:9a:46:87:c6:a2:8c:fd:b7:6e:13:
b9:20:b7:0f:80:d4:0a:98:91:d7:01:5f:d9:ab:88:
d8:71:ee:75:90:42:b4:18:bf:e9:81:3e:5a:ab:90:
d3:9f:cd:ff:9a:e0:5b:d7:df:93:fd:69:f4:0c:ac:
c1:1c:4f:6f:28:e7:38:2a:25:c0:3e:3c:0a:40:73:
2b:1e:d0:22:5a:db:c8:1a:90:01:4a:75:c1:9d:2c:
35:37:a9:12:85:5f:b9:c9:f8:ea:cc:15:6b:f4:e9:
96:ac:34:0b:a7:2a:52:83:c7:5d:bd:66:c6:97:11:
18:a8:34:ac:59:2e:a8:b5:2f:83:ec:05:02:f3:ea:
e5:4b:17:9b:bd:9b:77:83:99:54:f3:36:ad:fb:db:
0e:03:33:92:59:2d:bb:fc:86:ae:95:bb:76:ac:c5:
2c:f2:63:b2:b4:31:f0:4c:60:df:5e:cd:34:1d:17:
4b:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:6B:03:1D:E6:63:18:B1:71:D1:3C:F7:7A:96:D8:69:DF:B6:EE:8A
X509v3 Authority Key Identifier:
keyid:61:11:80:7E:82:8A:C4:F9:84:26:93:D3:86:11:95:2D:F0:3D:72:47
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B5D92/357798B0402A11EEA7161872C4F9AE02/YRGAfoKKxPmEJpPThhGVLfA9ckc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YRGAfoKKxPmEJpPThhGVLfA9ckc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B5D92/357798B0402A11EEA7161872C4F9AE02/3AFA35E04B2E11EEA07FEE34C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
113.197.104.0/22
IPv6:
2401:fa00:40::/43
Signature Algorithm: sha256WithRSAEncryption
5a:c3:ea:16:fc:e9:61:d0:2c:35:4b:2e:56:93:88:92:ee:f8:
8e:df:c1:5e:9a:3a:ac:cd:93:dc:23:3f:4c:1f:3a:8e:5d:1f:
c0:81:1b:70:23:5b:a3:89:b6:5f:97:8b:b4:03:c4:7c:a0:26:
c4:f5:9e:fc:21:f1:69:24:ed:0e:2e:14:75:6f:32:85:a7:75:
ef:bf:05:28:35:20:08:b7:9f:c9:0a:63:cf:ae:08:e2:89:c0:
ed:77:04:dc:a0:ab:61:77:b5:79:20:4d:ca:3d:c0:11:c7:fd:
23:ab:7d:b2:94:2f:5a:e9:7a:68:19:e6:2c:73:50:ff:ab:53:
53:de:7d:e6:d2:83:3d:45:95:8d:05:71:67:18:5b:75:31:a3:
d4:60:6a:16:06:57:fa:2c:cc:fe:a8:49:ef:9d:50:15:c2:24:
cd:84:0b:7f:91:01:a0:4c:cf:3b:db:2d:12:39:43:dd:82:ab:
56:87:96:38:d4:af:21:f3:40:97:45:c3:3d:ca:0b:f2:e5:96:
6b:3a:f7:6d:18:6d:e5:40:49:57:cc:8d:f1:9d:9b:bd:da:d0:
d0:ba:23:cc:77:0e:8c:63:48:e4:d1:a5:7b:6c:06:51:bc:62:
d6:49:fd:85:38:5a:bb:71:53:73:d6:b9:e7:3e:d4:d7:4f:2e:
32:9c:61:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 04:46:21 2025 by rpki-client