Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C2CC7/791C6A347B3811E9BC0D3B32C4F9AE02/B1F39E9C334111EF9770A542C4F9AE02.roa
File: B1F39E9C334111EF9770A542C4F9AE02.roa (raw, json)
Hash identifier: ZKO21v7I5AsbeHedpQVwlDjC0YYOzEud39SdbR3CgmA=
Subject key identifier: 87:8F:FE:84:62:E9:CA:72:A2:94:A4:04:C2:12:DD:D0:D2:45:A3:5B
Certificate issuer: /CN=A91C2CC7/serialNumber=77486B610D333AEBDA8F255C501411B01F18FF49
Certificate serial: 101E
Authority key identifier: 77:48:6B:61:0D:33:3A:EB:DA:8F:25:5C:50:14:11:B0:1F:18:FF:49
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d0hrYQ0zOuvajyVcUBQRsB8Y_0k.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C2CC7/791C6A347B3811E9BC0D3B32C4F9AE02/B1F39E9C334111EF9770A542C4F9AE02.roa
Signing time: Fri 03 Oct 2025 11:52:24 +0000
ROA not before: Fri 03 Oct 2025 11:52:24 +0000
ROA not after: Thu 28 May 2026 00:00:00 +0000
asID: 202
IP address blocks: 103.30.186.0/23 maxlen: 23
202.53.197.0/24 maxlen: 24
202.53.204.0/23 maxlen: 23
202.53.206.0/23 maxlen: 23
2401:df00:1::/48 maxlen: 48
2401:df00:2::/48 maxlen: 48
2401:df00:7::/48 maxlen: 48
2401:df00:11::/48 maxlen: 48
2401:df00:12::/48 maxlen: 48
2401:df00:21::/48 maxlen: 48
2401:df00:22::/48 maxlen: 48
2401:df00:27::/48 maxlen: 48
2401:df00:31::/48 maxlen: 48
2401:df00:32::/48 maxlen: 48
2401:df00:41::/48 maxlen: 48
2401:df00:42::/48 maxlen: 48
2401:df00:47::/48 maxlen: 48
2401:df00:51::/48 maxlen: 48
2401:df00:52::/48 maxlen: 48
2401:df00:57::/48 maxlen: 48
2401:df00:61::/48 maxlen: 48
2401:df00:62::/48 maxlen: 48
2401:df00:181::/48 maxlen: 48
2401:df00:182::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C2CC7/791C6A347B3811E9BC0D3B32C4F9AE02/d0hrYQ0zOuvajyVcUBQRsB8Y_0k.crl
rsync://rpki.apnic.net/member_repository/A91C2CC7/791C6A347B3811E9BC0D3B32C4F9AE02/d0hrYQ0zOuvajyVcUBQRsB8Y_0k.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d0hrYQ0zOuvajyVcUBQRsB8Y_0k.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 25 Oct 2025 18:11:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4126 (0x101e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C2CC7, serialNumber=77486B610D333AEBDA8F255C501411B01F18FF49
Validity
Not Before: Oct 3 11:52:24 2025 GMT
Not After : May 28 00:00:00 2026 GMT
Subject: CN=68dfb8f7-764e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:c8:cf:72:a7:bb:03:b0:c1:bf:56:98:54:6c:
cf:18:0d:84:5b:39:af:75:f2:84:b1:db:d9:03:17:
01:6f:93:06:09:53:a1:73:20:0a:a9:8b:33:87:ff:
e3:4b:0a:1b:94:76:1e:3a:a1:84:85:b6:e2:11:ff:
69:7f:0e:b5:0a:87:e0:6e:de:18:26:f7:63:1c:fd:
39:3f:74:a3:85:d4:a3:01:a5:d2:dd:d8:b6:c3:6b:
6a:55:ec:69:35:9a:5e:78:44:37:4c:5f:71:b0:32:
fa:8f:0c:00:ea:e5:cb:1f:d3:8e:6f:dd:c9:da:da:
02:cf:5f:3c:e8:34:fd:59:1c:87:c5:5e:81:0a:ed:
9b:ee:c0:22:7f:70:a0:bb:10:fa:ee:e0:3b:01:d3:
b3:ae:ad:4b:bb:8b:4b:58:94:68:12:ee:b6:07:03:
b4:5d:34:07:39:55:3d:8b:a4:dc:07:4c:6a:44:d8:
e2:dc:f3:7d:84:b3:96:71:65:e1:bd:f5:32:9d:63:
b3:2e:08:99:5c:48:67:a6:a1:1a:19:d5:41:ce:c4:
af:b9:58:f9:9e:02:c8:b9:89:4a:a9:81:ed:c8:76:
75:cb:9c:bb:77:1b:10:96:12:05:0d:ce:95:13:ab:
e1:f9:9d:16:86:83:bd:5d:a8:61:86:08:a8:df:26:
91:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:8F:FE:84:62:E9:CA:72:A2:94:A4:04:C2:12:DD:D0:D2:45:A3:5B
X509v3 Authority Key Identifier:
keyid:77:48:6B:61:0D:33:3A:EB:DA:8F:25:5C:50:14:11:B0:1F:18:FF:49
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C2CC7/791C6A347B3811E9BC0D3B32C4F9AE02/d0hrYQ0zOuvajyVcUBQRsB8Y_0k.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d0hrYQ0zOuvajyVcUBQRsB8Y_0k.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C2CC7/791C6A347B3811E9BC0D3B32C4F9AE02/B1F39E9C334111EF9770A542C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.30.186.0/23
202.53.197.0/24
202.53.204.0/22
IPv6:
2401:df00:1::-2401:df00:2:ffff:ffff:ffff:ffff:ffff
2401:df00:7::/48
2401:df00:11::-2401:df00:12:ffff:ffff:ffff:ffff:ffff
2401:df00:21::-2401:df00:22:ffff:ffff:ffff:ffff:ffff
2401:df00:27::/48
2401:df00:31::-2401:df00:32:ffff:ffff:ffff:ffff:ffff
2401:df00:41::-2401:df00:42:ffff:ffff:ffff:ffff:ffff
2401:df00:47::/48
2401:df00:51::-2401:df00:52:ffff:ffff:ffff:ffff:ffff
2401:df00:57::/48
2401:df00:61::-2401:df00:62:ffff:ffff:ffff:ffff:ffff
2401:df00:181::-2401:df00:182:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
21:93:9f:b5:80:09:77:f6:b1:44:7c:dd:ae:63:58:44:de:4c:
47:99:aa:71:0a:59:7c:8f:b1:8e:bb:47:8c:ef:9b:ef:ea:a8:
7c:0f:f6:84:f6:28:1b:64:4f:ff:cc:95:63:32:25:10:1c:1e:
ff:1f:c7:e0:61:2e:51:bf:94:43:09:85:87:ea:6f:5c:c8:3a:
28:cd:9b:50:db:20:23:0c:2e:1a:e7:57:ba:6a:52:58:26:bd:
2e:13:0a:4b:fa:e9:f2:98:7f:09:73:72:6b:c5:58:df:03:a4:
74:ac:94:3f:07:c8:53:e6:4a:6a:1a:05:49:d8:19:94:3e:88:
44:d5:a2:85:2a:82:90:11:e4:1c:8c:c8:fc:38:e4:55:ac:38:
42:c1:76:14:6b:37:62:92:70:3b:34:b5:a0:57:bd:89:60:ec:
a3:9f:5d:a6:0c:ac:eb:f0:16:f1:6b:c1:0c:f7:93:12:07:1d:
20:ce:fa:53:33:55:80:62:e1:4e:de:e1:3a:75:29:9a:75:8c:
32:44:59:32:01:36:2a:ab:df:72:76:7f:35:15:5a:80:60:4d:
15:15:35:50:64:a1:39:1c:d7:8f:30:9e:e5:6e:7b:30:c0:69:
c4:51:1e:53:06:75:a8:76:9d:2f:62:9c:5f:c8:e6:bf:d5:85:
84:7c:37:24
-----BEGIN CERTIFICATE-----
MIIGTjCCBTagAwIBAgICEB4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QzJDQzcxMTAvBgNVBAUTKDc3NDg2QjYxMEQzMzNBRUJEQThGMjU1QzUwMTQxMUIw
MUYxOEZGNDkwHhcNMjUxMDAzMTE1MjI0WhcNMjYwNTI4MDAwMDAwWjAYMRYwFAYD
VQQDEw02OGRmYjhmNy03NjRlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAusjPcqe7A7DBv1aYVGzPGA2EWzmvdfKEsdvZAxcBb5MGCVOhcyAKqYszh//j
SwoblHYeOqGEhbbiEf9pfw61Cofgbt4YJvdjHP05P3SjhdSjAaXS3di2w2tqVexp
NZpeeEQ3TF9xsDL6jwwA6uXLH9OOb93J2toCz1886DT9WRyHxV6BCu2b7sAif3Cg
uxD67uA7AdOzrq1Lu4tLWJRoEu62BwO0XTQHOVU9i6TcB0xqRNji3PN9hLOWcWXh
vfUynWOzLgiZXEhnpqEaGdVBzsSvuVj5ngLIuYlKqYHtyHZ1y5y7dxsQlhIFDc6V
E6vh+Z0WhoO9Xahhhgio3yaRlQIDAQABo4IDcjCCA24wHQYDVR0OBBYEFIeP/oRi
6cpyopSkBMIS3dDSRaNbMB8GA1UdIwQYMBaAFHdIa2ENMzrr2o8lXFAUEbAfGP9J
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMkNDNy83OTFDNkEzNDdC
MzgxMUU5QkMwRDNCMzJDNEY5QUUwMi9kMGhyWVEwek91dmFqeVZjVUJRUnNCOFlf
MGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2QwaHJZUTB6T3V2YWp5VmNVQlFSc0I4WV8way5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
QzJDQzcvNzkxQzZBMzQ3QjM4MTFFOUJDMEQzQjMyQzRGOUFFMDIvQjFGMzlFOUMz
MzQxMTFFRjk3NzBBNTQyQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwgfsGCCsGAQUFBwEHAQH/
BIHrMIHoMBgEAgABMBIDBAFnHroDBADKNcUDBALKNcwwgcsEAgACMIHEMBIDBwAk
Ad8AAAEDBwAkAd8AAAIDBwAkAd8AAAcwEgMHACQB3wAAEQMHACQB3wAAEjASAwcA
JAHfAAAhAwcAJAHfAAAiAwcAJAHfAAAnMBIDBwAkAd8AADEDBwAkAd8AADIwEgMH
ACQB3wAAQQMHACQB3wAAQgMHACQB3wAARzASAwcAJAHfAABRAwcAJAHfAABSAwcA
JAHfAABXMBIDBwAkAd8AAGEDBwAkAd8AAGIwEgMHACQB3wABgQMHACQB3wABgjAN
BgkqhkiG9w0BAQsFAAOCAQEAIZOftYAJd/axRHzdrmNYRN5MR5mqcQpZfI+xjrtH
jO+b7+qofA/2hPYoG2RP/8yVYzIlEBwe/x/H4GEuUb+UQwmFh+pvXMg6KM2bUNsg
IwwuGudXumpSWCa9LhMKS/rp8ph/CXNya8VY3wOkdKyUPwfIU+ZKahoFSdgZlD6I
RNWihSqCkBHkHIzI/DjkVaw4QsF2FGs3YpJwOzS1oFe9iWDso59dpgys6/AW8WvB
DPeTEgcdIM76UzNVgGLhTt7hOnUpmnWMMkRZMgE2KqvfcnZ/NRVagGBNFRU1UGSh
ORzXjzCe5W57MMBpxFEeUwZ1qHadL2KcX8jmv9WFhHw3JA==
-----END CERTIFICATE-----
Generated at Mon Oct 20 05:49:04 2025 by rpki-client