Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B7F47/330A008CCE5911E9A0908287C4F9AE02/4E98421A162311EB90D1657AC4F9AE02.roa
File: 4E98421A162311EB90D1657AC4F9AE02.roa (raw, json)
Hash identifier: WuP8PbwAvn5ZuVpPVwFIOAD7pGpuzCnA4Z3ircNjmXc=
Subject key identifier: 17:C2:BC:18:82:78:53:35:27:E3:55:F8:60:5F:63:B6:16:CF:E6:86
Certificate issuer: /CN=A91B7F47/serialNumber=E30A4CDDF6C269ACBA39CA58AA9592D8986401F4
Certificate serial: 0DB4
Authority key identifier: E3:0A:4C:DD:F6:C2:69:AC:BA:39:CA:58:AA:95:92:D8:98:64:01:F4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4wpM3fbCaay6OcpYqpWS2JhkAfQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B7F47/330A008CCE5911E9A0908287C4F9AE02/4E98421A162311EB90D1657AC4F9AE02.roa
Signing time: Tue 12 Aug 2025 18:28:22 +0000
ROA not before: Tue 12 Aug 2025 18:28:22 +0000
ROA not after: Wed 30 Sep 2026 00:00:00 +0000
asID: 137935
IP address blocks: 103.117.108.0/24 maxlen: 24
103.117.109.0/24 maxlen: 24
103.117.110.0/24 maxlen: 24
103.117.111.0/24 maxlen: 24
2403:1940::/32 maxlen: 32
2403:1940::/35 maxlen: 35
2403:1940::/48 maxlen: 48
2403:1940:1::/48 maxlen: 48
2403:1940:2::/48 maxlen: 48
2403:1940:3::/48 maxlen: 48
2403:1940:4::/48 maxlen: 48
2403:1940:5::/48 maxlen: 48
2403:1940:6::/48 maxlen: 48
2403:1940:7::/48 maxlen: 48
2403:1940:8::/48 maxlen: 48
2403:1940:9::/48 maxlen: 48
2403:1940:d::/48 maxlen: 48
2403:1940:10::/48 maxlen: 48
2403:1940:11::/48 maxlen: 48
2403:1940:12::/48 maxlen: 48
2403:1940:13::/48 maxlen: 48
2403:1940:14::/48 maxlen: 48
2403:1940:15::/48 maxlen: 48
2403:1940:16::/48 maxlen: 48
2403:1940:17::/48 maxlen: 48
2403:1940:18::/48 maxlen: 48
2403:1940:19::/48 maxlen: 48
2403:1940:20::/48 maxlen: 48
2403:1940:21::/48 maxlen: 48
2403:1940:22::/48 maxlen: 48
2403:1940:23::/48 maxlen: 48
2403:1940:24::/48 maxlen: 48
2403:1940:25::/48 maxlen: 48
2403:1940:26::/48 maxlen: 48
2403:1940:27::/48 maxlen: 48
2403:1940:28::/48 maxlen: 48
2403:1940:29::/48 maxlen: 48
2403:1940:30::/48 maxlen: 48
2403:1940:31::/48 maxlen: 48
2403:1940:32::/48 maxlen: 48
2403:1940:33::/48 maxlen: 48
2403:1940:34::/48 maxlen: 48
2403:1940:35::/48 maxlen: 48
2403:1940:36::/48 maxlen: 48
2403:1940:37::/48 maxlen: 48
2403:1940:38::/48 maxlen: 48
2403:1940:39::/48 maxlen: 48
2403:1940:40::/48 maxlen: 48
2403:1940:41::/48 maxlen: 48
2403:1940:42::/48 maxlen: 48
2403:1940:43::/48 maxlen: 48
2403:1940:44::/48 maxlen: 48
2403:1940:45::/48 maxlen: 48
2403:1940:46::/48 maxlen: 48
2403:1940:47::/48 maxlen: 48
2403:1940:48::/48 maxlen: 48
2403:1940:49::/48 maxlen: 48
2403:1940:50::/48 maxlen: 48
2403:1940:60::/48 maxlen: 48
2403:1940:70::/48 maxlen: 48
2403:1940:80::/48 maxlen: 48
2403:1940:90::/48 maxlen: 48
2403:1940:100::/48 maxlen: 48
2403:1940:200::/48 maxlen: 48
2403:1940:1000::/36 maxlen: 36
2403:1940:2000::/36 maxlen: 36
2403:1940:acc1::/48 maxlen: 48
2403:1940:acc2::/48 maxlen: 48
2403:1940:acc3::/48 maxlen: 48
2403:1940:ccc1::/48 maxlen: 48
2403:1940:ccc2::/48 maxlen: 48
2403:1940:ccc3::/48 maxlen: 48
2403:1940:dac1::/48 maxlen: 48
2403:1940:dac1:dac1::/64 maxlen: 64
2403:1940:daca::/48 maxlen: 48
2403:1940:dacb::/48 maxlen: 48
2403:1940:dacc::/48 maxlen: 48
2403:1940:dacd::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B7F47/330A008CCE5911E9A0908287C4F9AE02/4wpM3fbCaay6OcpYqpWS2JhkAfQ.crl
rsync://rpki.apnic.net/member_repository/A91B7F47/330A008CCE5911E9A0908287C4F9AE02/4wpM3fbCaay6OcpYqpWS2JhkAfQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4wpM3fbCaay6OcpYqpWS2JhkAfQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 29 Aug 2025 18:03:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3508 (0xdb4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B7F47, serialNumber=E30A4CDDF6C269ACBA39CA58AA9592D8986401F4
Validity
Not Before: Aug 12 18:28:22 2025 GMT
Not After : Sep 30 00:00:00 2026 GMT
Subject: CN=689b87c5-539a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:a9:1f:aa:fe:c5:96:ee:d4:f2:4d:fa:ba:c5:
ee:84:9e:e2:6d:ce:fe:d5:0c:d3:dc:3c:9c:0e:88:
9f:1a:9a:85:05:75:33:32:3c:5c:29:79:c0:7a:9b:
3c:cc:eb:ec:7f:11:cd:a1:79:ce:28:ad:b9:fd:8b:
eb:a4:19:2b:4e:9d:da:c6:8e:b8:c2:75:9e:b1:9a:
f7:e6:2c:19:ff:43:3e:10:62:f9:8e:90:80:e1:78:
7b:9a:af:1e:ee:3f:88:6e:44:19:79:ba:fb:a5:1c:
b2:7c:0c:4d:44:cb:c0:f4:48:9d:5d:1b:24:13:b5:
9b:8a:32:0e:4e:bb:f4:08:7c:9c:e2:aa:e2:8d:e7:
87:00:b1:aa:12:1d:95:4d:e9:ba:db:67:b9:82:5d:
29:ab:f5:78:c3:d5:18:5f:11:0b:59:ed:db:92:bc:
5c:27:6a:6c:0a:1f:94:d1:2e:99:1e:7f:80:4e:b6:
b4:73:74:5c:95:cc:ab:ab:b9:ab:75:19:07:5b:a4:
f3:c2:88:ac:12:0e:1b:5f:5c:87:b3:88:74:4d:d2:
b8:98:fc:76:1f:37:ca:24:b8:49:6a:f9:17:89:58:
d4:5f:fd:a5:43:0e:54:3d:7a:fb:9e:44:e7:f9:d9:
a8:2c:7c:af:04:b1:49:64:4e:d2:7d:8e:f6:3e:2a:
d8:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:C2:BC:18:82:78:53:35:27:E3:55:F8:60:5F:63:B6:16:CF:E6:86
X509v3 Authority Key Identifier:
keyid:E3:0A:4C:DD:F6:C2:69:AC:BA:39:CA:58:AA:95:92:D8:98:64:01:F4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B7F47/330A008CCE5911E9A0908287C4F9AE02/4wpM3fbCaay6OcpYqpWS2JhkAfQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4wpM3fbCaay6OcpYqpWS2JhkAfQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B7F47/330A008CCE5911E9A0908287C4F9AE02/4E98421A162311EB90D1657AC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.117.108.0/22
IPv6:
2403:1940::/32
Signature Algorithm: sha256WithRSAEncryption
04:8d:32:5e:df:9c:b8:79:c1:57:65:ad:d8:84:3e:8f:32:8b:
97:1f:f2:99:82:ce:25:51:27:6d:c1:4e:47:dc:4d:33:63:da:
8a:b8:d2:1c:ef:e8:f0:ad:52:13:53:3c:6e:89:dc:52:8c:ca:
f4:b2:39:7d:e3:74:37:a6:72:46:d5:1c:4f:2d:4b:c5:51:e8:
ab:f6:46:cf:6e:a7:8f:d5:30:84:1f:63:78:52:0b:df:b8:83:
fa:dc:f8:26:05:b7:11:c5:af:6e:a7:ed:1f:4c:11:e9:69:14:
f8:49:b2:18:aa:24:63:27:e0:41:a1:c6:95:00:cf:db:4f:84:
13:2d:5e:a9:e7:54:20:05:18:7d:64:45:37:17:36:22:96:52:
52:f4:40:5d:ea:c9:2d:db:49:f2:f1:6d:4b:1a:ed:8a:d4:ba:
0e:cf:9e:2a:28:66:03:03:7f:72:1e:52:36:7d:56:8a:a4:73:
01:69:3d:8c:c8:33:07:b5:7e:5a:63:25:28:62:c5:0c:c6:be:
43:68:cd:9c:e6:f4:bc:4e:d3:24:3d:25:99:08:6c:38:25:18:
8e:78:20:93:a7:a4:dc:dd:23:54:91:d1:e3:46:81:1d:77:53:
5e:85:cf:94:e0:a4:b0:05:74:c6:6c:cb:7e:ee:3b:74:65:3b:
6c:a6:80:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 21:26:53 2025 by rpki-client