Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C2CC7/791C6A347B3811E9BC0D3B32C4F9AE02/B2AB6010721811F09FD98A22C4F9AE02.roa
File: B2AB6010721811F09FD98A22C4F9AE02.roa (raw, json)
Hash identifier: zq3r2bqYk5JoyYAxGmuwDEsSoCRJP0AIOXoJJj3slFs=
Subject key identifier: AE:B8:D6:B3:A0:64:84:08:1B:CF:B7:50:43:A3:D9:10:3B:51:B1:CC
Certificate issuer: /CN=A91C2CC7/serialNumber=77486B610D333AEBDA8F255C501411B01F18FF49
Certificate serial: 1021
Authority key identifier: 77:48:6B:61:0D:33:3A:EB:DA:8F:25:5C:50:14:11:B0:1F:18:FF:49
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d0hrYQ0zOuvajyVcUBQRsB8Y_0k.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C2CC7/791C6A347B3811E9BC0D3B32C4F9AE02/B2AB6010721811F09FD98A22C4F9AE02.roa
Signing time: Fri 03 Oct 2025 11:52:26 +0000
ROA not before: Fri 03 Oct 2025 11:52:26 +0000
ROA not after: Thu 28 May 2026 00:00:00 +0000
asID: 3360
IP address blocks: 103.30.186.0/23 maxlen: 23
202.53.197.0/24 maxlen: 24
202.53.204.0/23 maxlen: 23
202.53.206.0/23 maxlen: 23
2401:df00:1::/48 maxlen: 48
2401:df00:2::/48 maxlen: 48
2401:df00:7::/48 maxlen: 48
2401:df00:11::/48 maxlen: 48
2401:df00:12::/48 maxlen: 48
2401:df00:21::/48 maxlen: 48
2401:df00:22::/48 maxlen: 48
2401:df00:27::/48 maxlen: 48
2401:df00:31::/48 maxlen: 48
2401:df00:32::/48 maxlen: 48
2401:df00:41::/48 maxlen: 48
2401:df00:42::/48 maxlen: 48
2401:df00:47::/48 maxlen: 48
2401:df00:51::/48 maxlen: 48
2401:df00:52::/48 maxlen: 48
2401:df00:57::/48 maxlen: 48
2401:df00:61::/48 maxlen: 48
2401:df00:62::/48 maxlen: 48
2401:df00:181::/48 maxlen: 48
2401:df00:182::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C2CC7/791C6A347B3811E9BC0D3B32C4F9AE02/d0hrYQ0zOuvajyVcUBQRsB8Y_0k.crl
rsync://rpki.apnic.net/member_repository/A91C2CC7/791C6A347B3811E9BC0D3B32C4F9AE02/d0hrYQ0zOuvajyVcUBQRsB8Y_0k.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d0hrYQ0zOuvajyVcUBQRsB8Y_0k.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 25 Oct 2025 18:11:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4129 (0x1021)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C2CC7, serialNumber=77486B610D333AEBDA8F255C501411B01F18FF49
Validity
Not Before: Oct 3 11:52:26 2025 GMT
Not After : May 28 00:00:00 2026 GMT
Subject: CN=68dfb8fa-5541
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:9a:ad:82:38:13:b2:78:19:12:9f:87:0a:c6:
4d:03:62:15:20:bc:94:98:79:0b:4f:d8:88:47:54:
87:cc:98:be:b1:2d:16:02:88:df:57:40:15:d7:69:
11:d7:7e:0f:ae:38:08:21:5a:2a:d8:03:fb:c3:79:
87:0e:db:bd:5c:12:bd:34:2c:89:c7:b1:41:d2:f5:
7e:8b:d2:f8:41:2a:cd:5b:33:98:ac:76:5a:38:dc:
08:5f:2c:6f:54:f9:e4:69:f0:d8:b8:67:68:bb:b4:
e7:51:fc:30:fb:dd:ac:84:15:6d:d3:b7:17:98:ae:
9e:d7:3a:3f:6e:6a:ae:f9:ca:ab:bd:dd:f3:5d:51:
38:89:f6:99:42:fd:70:84:b1:88:88:c5:f5:a5:18:
5a:51:81:93:6a:9c:6a:13:cf:a1:4c:dd:18:cd:31:
c3:e6:aa:56:01:d0:f0:f2:a8:7e:bd:17:e9:99:81:
cd:15:a5:b0:a0:d2:cb:d8:a9:40:43:e0:df:41:3f:
30:be:63:8f:a1:0a:9f:73:8f:6a:b1:c2:69:c4:ee:
2e:d3:d1:b0:6e:5d:be:be:91:d2:a0:fc:fd:22:b5:
d6:53:98:cd:63:90:92:30:2e:e7:61:81:d8:1f:f1:
5a:41:44:e0:d8:ec:25:0c:7d:7a:81:fe:23:e2:37:
d1:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:B8:D6:B3:A0:64:84:08:1B:CF:B7:50:43:A3:D9:10:3B:51:B1:CC
X509v3 Authority Key Identifier:
keyid:77:48:6B:61:0D:33:3A:EB:DA:8F:25:5C:50:14:11:B0:1F:18:FF:49
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C2CC7/791C6A347B3811E9BC0D3B32C4F9AE02/d0hrYQ0zOuvajyVcUBQRsB8Y_0k.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d0hrYQ0zOuvajyVcUBQRsB8Y_0k.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C2CC7/791C6A347B3811E9BC0D3B32C4F9AE02/B2AB6010721811F09FD98A22C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.30.186.0/23
202.53.197.0/24
202.53.204.0/22
IPv6:
2401:df00:1::-2401:df00:2:ffff:ffff:ffff:ffff:ffff
2401:df00:7::/48
2401:df00:11::-2401:df00:12:ffff:ffff:ffff:ffff:ffff
2401:df00:21::-2401:df00:22:ffff:ffff:ffff:ffff:ffff
2401:df00:27::/48
2401:df00:31::-2401:df00:32:ffff:ffff:ffff:ffff:ffff
2401:df00:41::-2401:df00:42:ffff:ffff:ffff:ffff:ffff
2401:df00:47::/48
2401:df00:51::-2401:df00:52:ffff:ffff:ffff:ffff:ffff
2401:df00:57::/48
2401:df00:61::-2401:df00:62:ffff:ffff:ffff:ffff:ffff
2401:df00:181::-2401:df00:182:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
69:9b:24:59:0c:7d:f1:26:49:4f:8b:b7:bf:e5:f1:56:54:1b:
79:2b:49:c8:b0:4c:c7:af:a4:76:a6:d8:24:6a:87:06:0b:da:
16:ab:e7:49:f1:8a:6a:47:be:b2:32:1e:2f:b6:93:8b:75:f6:
68:0d:1a:69:c2:67:10:da:48:e2:69:47:86:28:c1:4d:6d:f8:
8f:52:45:6e:08:23:23:25:a6:55:de:2b:a2:db:8c:04:f9:f7:
5c:4f:9a:00:a5:1c:6f:26:2f:cf:6b:da:37:37:10:ee:2c:13:
82:f2:3c:20:d2:17:d4:50:ac:5a:e8:b0:2e:19:4f:b8:11:6f:
b5:a5:8b:0e:5c:5e:17:b2:d0:74:9a:e0:84:16:73:29:2f:ef:
37:53:df:f3:ac:d7:22:04:de:e1:5b:cc:48:58:bd:81:cb:4d:
ef:1b:6f:1a:ea:a6:8d:76:d9:2e:11:b6:9b:9c:0f:ee:4e:7f:
45:5e:4a:d6:d6:3c:ed:de:a8:3a:c1:a6:75:2e:de:a0:cf:a2:
8f:c4:7a:11:cb:ac:bb:94:16:75:14:d6:45:af:7d:c6:f9:a5:
69:09:9c:7e:0a:93:d4:d1:5f:ba:93:eb:e9:93:79:50:49:44:
ad:e2:1b:ab:98:a1:03:42:5e:20:96:60:fe:cd:4a:76:41:55:
20:8b:cf:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 13:49:35 2025 by rpki-client