Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91DA898/69ADC19E1D8C11E286B69EE708B02CD2/AB9A0D320D6011EDA50DFA25C4F9AE02.roa
File: AB9A0D320D6011EDA50DFA25C4F9AE02.roa (raw, json)
Hash identifier: 24BjWAqe2qRsQURE8DMBPNk7l6vHhbx1QB6qiJta7cs=
Subject key identifier: 97:5D:C3:94:A7:30:EF:54:DB:1D:D4:52:44:C5:8F:F2:F6:53:3C:2C
Certificate issuer: /CN=A91DA898/serialNumber=1A55DB627A2A2E4B26672EE0E1D7512F86414E83
Certificate serial: 34C2
Authority key identifier: 1A:55:DB:62:7A:2A:2E:4B:26:67:2E:E0:E1:D7:51:2F:86:41:4E:83
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GlXbYnoqLksmZy7g4ddRL4ZBToM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91DA898/69ADC19E1D8C11E286B69EE708B02CD2/AB9A0D320D6011EDA50DFA25C4F9AE02.roa
Signing time: Mon 16 Jun 2025 15:10:36 +0000
ROA not before: Mon 16 Jun 2025 15:10:36 +0000
ROA not after: Wed 30 Sep 2026 00:00:00 +0000
asID: 10219
IP address blocks: 103.23.48.0/22 maxlen: 22
103.23.48.0/24 maxlen: 24
103.23.49.0/24 maxlen: 24
103.23.50.0/24 maxlen: 24
103.23.51.0/24 maxlen: 24
112.72.0.0/20 maxlen: 20
112.72.0.0/24 maxlen: 24
112.72.1.0/24 maxlen: 24
112.72.2.0/24 maxlen: 24
112.72.3.0/24 maxlen: 24
112.72.4.0/24 maxlen: 24
112.72.5.0/24 maxlen: 24
112.72.6.0/24 maxlen: 24
112.72.7.0/24 maxlen: 24
112.72.8.0/24 maxlen: 24
112.72.9.0/24 maxlen: 24
112.72.10.0/24 maxlen: 24
112.72.11.0/24 maxlen: 24
112.72.12.0/24 maxlen: 24
112.72.13.0/24 maxlen: 24
112.72.14.0/24 maxlen: 24
112.72.15.0/24 maxlen: 24
202.9.40.0/21 maxlen: 21
202.9.40.0/24 maxlen: 24
202.9.41.0/24 maxlen: 24
202.9.42.0/24 maxlen: 24
202.9.43.0/24 maxlen: 24
202.9.44.0/24 maxlen: 24
202.9.45.0/24 maxlen: 24
202.9.46.0/24 maxlen: 24
202.9.47.0/24 maxlen: 24
202.55.176.0/20 maxlen: 20
202.55.176.0/24 maxlen: 24
202.55.177.0/24 maxlen: 24
202.55.178.0/24 maxlen: 24
202.55.179.0/24 maxlen: 24
202.55.180.0/24 maxlen: 24
202.55.181.0/24 maxlen: 24
202.55.182.0/24 maxlen: 24
202.55.183.0/24 maxlen: 24
202.55.184.0/24 maxlen: 24
202.55.185.0/24 maxlen: 24
202.55.186.0/24 maxlen: 24
202.55.187.0/24 maxlen: 24
202.55.188.0/24 maxlen: 24
202.55.189.0/24 maxlen: 24
202.55.190.0/24 maxlen: 24
202.55.191.0/24 maxlen: 24
2405:ae00::/32 maxlen: 36
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91DA898/69ADC19E1D8C11E286B69EE708B02CD2/GlXbYnoqLksmZy7g4ddRL4ZBToM.crl
rsync://rpki.apnic.net/member_repository/A91DA898/69ADC19E1D8C11E286B69EE708B02CD2/GlXbYnoqLksmZy7g4ddRL4ZBToM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GlXbYnoqLksmZy7g4ddRL4ZBToM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 09 Jul 2025 14:38:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13506 (0x34c2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91DA898, serialNumber=1A55DB627A2A2E4B26672EE0E1D7512F86414E83
Validity
Not Before: Jun 16 15:10:36 2025 GMT
Not After : Sep 30 00:00:00 2026 GMT
Subject: CN=685033ec-9eba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:6a:64:2c:ec:ef:38:9a:c6:56:63:be:26:e1:
e2:63:38:fe:7f:72:c2:34:e6:e3:d3:f2:da:1b:08:
8f:ca:9a:43:18:b7:9b:d2:b2:da:c7:51:f9:16:ad:
80:2b:fd:f1:d8:77:03:9b:7a:3f:0e:02:ce:44:71:
2c:06:95:66:b3:50:bf:8a:00:54:79:b5:1b:ac:6d:
f0:a8:2d:77:ad:af:79:ad:27:e1:af:42:4f:b8:a2:
2b:86:aa:60:bf:5f:07:f1:87:5b:75:4d:9d:66:1b:
00:c1:0c:be:ea:fb:cb:5a:a2:19:d8:98:88:68:f0:
26:fc:bf:c3:ba:ef:0a:96:f0:d9:4c:8c:72:d3:df:
0a:a2:24:b1:7c:cd:79:1d:b9:61:fd:d4:af:9c:a3:
9f:be:a2:da:29:1e:47:d6:4c:08:8c:fb:f2:94:79:
41:5b:68:2a:f7:3f:f6:52:10:34:26:34:cd:42:de:
85:9f:c5:c5:0e:3d:a2:2c:6b:88:93:35:04:c3:58:
52:d8:7a:57:00:45:7d:53:5b:1e:0a:bc:bf:90:64:
e2:fa:c1:fd:17:37:80:38:12:47:1d:1d:95:87:68:
e3:84:12:45:59:61:e5:3b:d9:96:83:c8:29:f4:a7:
b3:9a:ca:38:d1:36:7e:bc:09:46:70:77:3d:bf:5d:
eb:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:5D:C3:94:A7:30:EF:54:DB:1D:D4:52:44:C5:8F:F2:F6:53:3C:2C
X509v3 Authority Key Identifier:
keyid:1A:55:DB:62:7A:2A:2E:4B:26:67:2E:E0:E1:D7:51:2F:86:41:4E:83
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91DA898/69ADC19E1D8C11E286B69EE708B02CD2/GlXbYnoqLksmZy7g4ddRL4ZBToM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GlXbYnoqLksmZy7g4ddRL4ZBToM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DA898/69ADC19E1D8C11E286B69EE708B02CD2/AB9A0D320D6011EDA50DFA25C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.23.48.0/22
112.72.0.0/20
202.9.40.0/21
202.55.176.0/20
IPv6:
2405:ae00::/32
Signature Algorithm: sha256WithRSAEncryption
1c:65:f6:83:4d:3a:c0:c2:b6:0a:62:7e:bf:c9:54:f3:33:83:
99:5d:c6:ba:80:d5:aa:6b:ff:a3:f1:cd:6f:62:11:78:e6:62:
0f:69:2c:60:21:65:b7:e7:fb:be:09:be:c1:28:df:83:d3:8f:
b8:ea:88:ac:58:bd:88:37:de:3b:96:6e:a1:80:b9:1f:c2:2b:
fe:05:4d:37:88:64:5b:44:f6:fa:dc:df:07:90:0b:b8:84:38:
59:68:1e:3a:b7:28:29:9f:3e:0a:b3:84:b4:31:f2:5a:02:4c:
21:67:52:bb:59:e6:fe:fc:63:e2:54:cb:22:bf:d5:c6:79:d2:
14:98:0d:35:60:ec:8f:56:2b:ac:26:ea:73:92:91:0a:e0:b9:
51:12:40:4b:29:93:2e:e0:e0:ae:db:52:d9:e6:07:af:95:7e:
94:05:17:6c:69:e4:04:b5:b4:e9:b5:94:7c:fd:c7:55:1f:3e:
9c:28:ab:49:63:67:6b:9e:74:8e:0f:40:31:a1:12:16:3b:c2:
50:ad:ab:3a:22:02:15:74:ce:c2:c1:98:76:f4:ea:e4:a1:b6:
60:bb:e2:0b:ee:25:31:20:94:89:0a:8c:d0:df:e7:f0:88:1c:
47:ff:fe:61:66:4d:67:1f:52:49:af:6c:8e:70:35:95:20:a4:
f4:fb:4e:d2
-----BEGIN CERTIFICATE-----
MIIFkjCCBHqgAwIBAgICNMIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
REE4OTgxMTAvBgNVBAUTKDFBNTVEQjYyN0EyQTJFNEIyNjY3MkVFMEUxRDc1MTJG
ODY0MTRFODMwHhcNMjUwNjE2MTUxMDM2WhcNMjYwOTMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02ODUwMzNlYy05ZWJhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAn2pkLOzvOJrGVmO+JuHiYzj+f3LCNObj0/LaGwiPyppDGLeb0rLax1H5Fq2A
K/3x2HcDm3o/DgLORHEsBpVms1C/igBUebUbrG3wqC13ra95rSfhr0JPuKIrhqpg
v18H8YdbdU2dZhsAwQy+6vvLWqIZ2JiIaPAm/L/Duu8KlvDZTIxy098KoiSxfM15
Hblh/dSvnKOfvqLaKR5H1kwIjPvylHlBW2gq9z/2UhA0JjTNQt6Fn8XFDj2iLGuI
kzUEw1hS2HpXAEV9U1seCry/kGTi+sH9FzeAOBJHHR2Vh2jjhBJFWWHlO9mWg8gp
9Kezmso40TZ+vAlGcHc9v13rzQIDAQABo4ICtjCCArIwHQYDVR0OBBYEFJddw5Sn
MO9U2x3UUkTFj/L2UzwsMB8GA1UdIwQYMBaAFBpV22J6Ki5LJmcu4OHXUS+GQU6D
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEQTg5OC82OUFEQzE5RTFE
OEMxMUUyODZCNjlFRTcwOEIwMkNEMi9HbFhiWW5vcUxrc21aeTdnNGRkUkw0WkJU
b00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0dsWGJZbm9xTGtzbVp5N2c0ZGRSTDRaQlRvTS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
REE4OTgvNjlBREMxOUUxRDhDMTFFMjg2QjY5RUU3MDhCMDJDRDIvQUI5QTBEMzIw
RDYwMTFFREE1MERGQTI1QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwQAYIKwYBBQUHAQcBAf8E
MTAvMB4EAgABMBgDBAJnFzADBARwSAADBAPKCSgDBATKN7AwDQQCAAIwBwMFACQF
rgAwDQYJKoZIhvcNAQELBQADggEBABxl9oNNOsDCtgpifr/JVPMzg5ldxrqA1apr
/6PxzW9iEXjmYg9pLGAhZbfn+74JvsEo34PTj7jqiKxYvYg33juWbqGAuR/CK/4F
TTeIZFtE9vrc3weQC7iEOFloHjq3KCmfPgqzhLQx8loCTCFnUrtZ5v78Y+JUyyK/
1cZ50hSYDTVg7I9WK6wm6nOSkQrguVESQEspky7g4K7bUtnmB6+VfpQFF2xp5AS1
tOm1lHz9x1UfPpwoq0ljZ2uedI4PQDGhEhY7wlCtqzoiAhV0zsLBmHb06uShtmC7
4gvuJTEglIkKjNDf5/CIHEf//mFmTWcfUkmvbI5wNZUgpPT7TtI=
-----END CERTIFICATE-----
Generated at Thu Jul 3 13:17:02 2025 by rpki-client