Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B7F47/330A008CCE5911E9A0908287C4F9AE02/8B41351885EB11F0B665685EC4F9AE02.roa
File: 8B41351885EB11F0B665685EC4F9AE02.roa (raw, json)
Hash identifier: 3jicQmgQkvww41dqycYyBrr/vfnWtkA7h6bxqXU86fw=
Subject key identifier: 66:7F:5C:4C:60:4B:2D:5F:C7:FB:56:D2:77:2B:39:1A:D0:4D:B3:46
Certificate issuer: /CN=A91B7F47/serialNumber=E30A4CDDF6C269ACBA39CA58AA9592D8986401F4
Certificate serial: 0DC4
Authority key identifier: E3:0A:4C:DD:F6:C2:69:AC:BA:39:CA:58:AA:95:92:D8:98:64:01:F4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4wpM3fbCaay6OcpYqpWS2JhkAfQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B7F47/330A008CCE5911E9A0908287C4F9AE02/8B41351885EB11F0B665685EC4F9AE02.roa
Signing time: Sat 30 Aug 2025 21:51:55 +0000
ROA not before: Sat 30 Aug 2025 21:51:55 +0000
ROA not after: Wed 30 Sep 2026 00:00:00 +0000
asID: 137935
IP address blocks: 103.117.108.0/24 maxlen: 24
103.117.109.0/24 maxlen: 24
2403:1940::/32 maxlen: 32
2403:1940::/35 maxlen: 35
2403:1940::/48 maxlen: 48
2403:1940:1::/48 maxlen: 48
2403:1940:2::/48 maxlen: 48
2403:1940:3::/48 maxlen: 48
2403:1940:4::/48 maxlen: 48
2403:1940:5::/48 maxlen: 48
2403:1940:6::/48 maxlen: 48
2403:1940:7::/48 maxlen: 48
2403:1940:8::/48 maxlen: 48
2403:1940:9::/48 maxlen: 48
2403:1940:d::/48 maxlen: 48
2403:1940:10::/48 maxlen: 48
2403:1940:11::/48 maxlen: 48
2403:1940:12::/48 maxlen: 48
2403:1940:13::/48 maxlen: 48
2403:1940:14::/48 maxlen: 48
2403:1940:15::/48 maxlen: 48
2403:1940:16::/48 maxlen: 48
2403:1940:17::/48 maxlen: 48
2403:1940:18::/48 maxlen: 48
2403:1940:19::/48 maxlen: 48
2403:1940:20::/48 maxlen: 48
2403:1940:21::/48 maxlen: 48
2403:1940:22::/48 maxlen: 48
2403:1940:23::/48 maxlen: 48
2403:1940:24::/48 maxlen: 48
2403:1940:25::/48 maxlen: 48
2403:1940:26::/48 maxlen: 48
2403:1940:27::/48 maxlen: 48
2403:1940:28::/48 maxlen: 48
2403:1940:29::/48 maxlen: 48
2403:1940:30::/48 maxlen: 48
2403:1940:31::/48 maxlen: 48
2403:1940:32::/48 maxlen: 48
2403:1940:33::/48 maxlen: 48
2403:1940:34::/48 maxlen: 48
2403:1940:35::/48 maxlen: 48
2403:1940:36::/48 maxlen: 48
2403:1940:37::/48 maxlen: 48
2403:1940:38::/48 maxlen: 48
2403:1940:39::/48 maxlen: 48
2403:1940:40::/48 maxlen: 48
2403:1940:41::/48 maxlen: 48
2403:1940:42::/48 maxlen: 48
2403:1940:43::/48 maxlen: 48
2403:1940:44::/48 maxlen: 48
2403:1940:45::/48 maxlen: 48
2403:1940:46::/48 maxlen: 48
2403:1940:47::/48 maxlen: 48
2403:1940:48::/48 maxlen: 48
2403:1940:49::/48 maxlen: 48
2403:1940:50::/48 maxlen: 48
2403:1940:60::/48 maxlen: 48
2403:1940:70::/48 maxlen: 48
2403:1940:80::/48 maxlen: 48
2403:1940:90::/48 maxlen: 48
2403:1940:100::/48 maxlen: 48
2403:1940:200::/48 maxlen: 48
2403:1940:1000::/36 maxlen: 36
2403:1940:2000::/36 maxlen: 36
2403:1940:acc1::/48 maxlen: 48
2403:1940:acc2::/48 maxlen: 48
2403:1940:acc3::/48 maxlen: 48
2403:1940:ccc1::/48 maxlen: 48
2403:1940:ccc2::/48 maxlen: 48
2403:1940:ccc3::/48 maxlen: 48
2403:1940:dac1::/48 maxlen: 48
2403:1940:dac1:dac1::/64 maxlen: 64
2403:1940:daca::/48 maxlen: 48
2403:1940:dacb::/48 maxlen: 48
2403:1940:dacc::/48 maxlen: 48
2403:1940:dacd::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B7F47/330A008CCE5911E9A0908287C4F9AE02/4wpM3fbCaay6OcpYqpWS2JhkAfQ.crl
rsync://rpki.apnic.net/member_repository/A91B7F47/330A008CCE5911E9A0908287C4F9AE02/4wpM3fbCaay6OcpYqpWS2JhkAfQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4wpM3fbCaay6OcpYqpWS2JhkAfQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 27 Oct 2025 18:27:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3524 (0xdc4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B7F47, serialNumber=E30A4CDDF6C269ACBA39CA58AA9592D8986401F4
Validity
Not Before: Aug 30 21:51:55 2025 GMT
Not After : Sep 30 00:00:00 2026 GMT
Subject: CN=68b3727b-cf7d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:a6:9d:bf:b1:f5:0b:ee:b2:b2:13:93:a3:f9:
07:8f:1d:48:bc:91:e3:0f:6b:8a:cd:7a:98:96:7a:
15:55:b9:6d:4e:61:84:0f:40:8d:a2:5f:25:82:1c:
61:07:64:1c:43:53:b8:4b:25:cb:43:da:98:8a:bc:
95:f7:b7:92:ae:8b:14:3c:2d:54:9f:f9:b0:66:7b:
72:a0:e0:4d:96:f6:58:3e:66:db:9a:11:c5:db:79:
a4:97:3a:f6:32:14:1d:c5:23:d4:e6:34:bf:61:5b:
80:8d:e4:65:b2:02:cd:da:4e:dd:81:c7:d9:df:4c:
39:17:76:da:6a:f5:d2:99:af:16:67:50:42:df:ca:
ea:2b:24:dd:ca:7d:3e:45:01:d9:c0:f4:ee:b7:49:
ff:92:50:b7:84:47:e2:ef:90:dd:9c:5e:d7:aa:6c:
75:5f:c8:c5:58:c9:0f:c1:f0:81:14:e9:62:74:d9:
d9:df:6a:47:d7:2f:55:bc:94:65:aa:04:55:0b:43:
2f:ba:b1:9e:77:7e:be:a7:27:3c:db:93:9d:42:72:
d7:03:54:a4:29:97:f5:4d:94:fe:bd:2a:fa:5e:aa:
f7:9f:1b:90:9a:71:6c:07:c7:43:83:35:39:88:66:
d7:d8:74:97:9e:55:86:25:2a:0d:ed:bf:7f:03:55:
84:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:7F:5C:4C:60:4B:2D:5F:C7:FB:56:D2:77:2B:39:1A:D0:4D:B3:46
X509v3 Authority Key Identifier:
keyid:E3:0A:4C:DD:F6:C2:69:AC:BA:39:CA:58:AA:95:92:D8:98:64:01:F4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B7F47/330A008CCE5911E9A0908287C4F9AE02/4wpM3fbCaay6OcpYqpWS2JhkAfQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4wpM3fbCaay6OcpYqpWS2JhkAfQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B7F47/330A008CCE5911E9A0908287C4F9AE02/8B41351885EB11F0B665685EC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.117.108.0/23
IPv6:
2403:1940::/32
Signature Algorithm: sha256WithRSAEncryption
28:b8:71:37:6e:ae:d1:2e:d9:e6:c6:be:8b:71:d4:41:fc:a3:
d0:74:9f:d5:ba:0a:36:96:64:14:fe:57:bd:c8:0a:dc:60:bd:
29:8f:b8:5e:66:e9:89:77:5b:16:52:cc:34:cb:10:06:53:f6:
4f:bf:79:c5:49:ef:99:45:a3:67:7a:28:0d:be:bd:d5:76:ba:
d8:01:b8:55:ff:8b:d9:d4:95:cd:80:67:43:b2:26:97:db:d7:
15:09:91:58:5e:8f:73:1b:c4:31:40:06:9c:e7:51:25:8c:a5:
19:98:71:76:3d:e9:6c:49:e2:37:71:ba:8c:6d:e1:0d:51:3e:
f1:b9:d4:7a:68:8b:8d:e1:ae:fa:8a:a9:30:8b:af:b8:d7:d1:
dd:dc:c3:5f:93:ac:14:5e:22:7b:02:5f:ef:b1:f0:36:5a:0f:
ad:5b:d9:76:47:06:1d:0a:5c:09:ad:8f:e1:3a:a8:74:67:0b:
5e:25:91:ed:4b:7b:1a:d5:e6:3e:1a:83:94:9a:26:28:3f:fc:
53:b7:d9:f7:0c:55:f2:01:c1:64:28:1f:75:b5:80:23:23:1c:
0f:c7:d0:d7:32:8a:63:55:96:be:a3:19:f1:7d:b7:f3:75:f2:
06:84:5a:95:a4:7f:07:8d:c0:95:a9:ac:62:88:15:bf:e3:9e:
f1:42:e8:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 22:19:41 2025 by rpki-client