Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91DF93A/FF51E59EE5F311EAB3A91561C4F9AE02/A709BC948FAE11F09FAE9C69C4F9AE02.roa
File: A709BC948FAE11F09FAE9C69C4F9AE02.roa (raw, json)
Hash identifier: h5BGjGSDw6jhnZlF9NOXRKNYmdB5F7XUQytmx7kt8pU=
Subject key identifier: 03:A1:46:34:1C:2A:06:D5:0C:A3:E5:84:E0:92:78:C5:1E:C9:29:35
Certificate issuer: /CN=A91DF93A/serialNumber=07A1C08545CACC65E0882D49E9F2F8CFD2BE8260
Certificate serial: 08F2
Authority key identifier: 07:A1:C0:85:45:CA:CC:65:E0:88:2D:49:E9:F2:F8:CF:D2:BE:82:60
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B6HAhUXKzGXgiC1J6fL4z9K-gmA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91DF93A/FF51E59EE5F311EAB3A91561C4F9AE02/A709BC948FAE11F09FAE9C69C4F9AE02.roa
Signing time: Fri 12 Sep 2025 08:01:14 +0000
ROA not before: Fri 12 Sep 2025 08:01:14 +0000
ROA not after: Mon 31 Aug 2026 00:00:00 +0000
asID: 10122
IP address blocks: 103.139.72.0/24 maxlen: 24
103.139.73.0/24 maxlen: 24
164.90.64.0/24 maxlen: 24
164.90.65.0/24 maxlen: 24
164.90.66.0/24 maxlen: 24
164.90.67.0/24 maxlen: 24
164.90.68.0/24 maxlen: 24
164.90.69.0/24 maxlen: 24
164.90.70.0/24 maxlen: 24
164.90.71.0/24 maxlen: 24
164.90.72.0/24 maxlen: 24
164.90.74.0/24 maxlen: 24
164.90.75.0/24 maxlen: 24
164.90.76.0/24 maxlen: 24
164.90.77.0/24 maxlen: 24
164.90.78.0/24 maxlen: 24
164.90.79.0/24 maxlen: 24
164.90.80.0/24 maxlen: 24
164.90.81.0/24 maxlen: 24
164.90.82.0/24 maxlen: 24
164.90.83.0/24 maxlen: 24
164.90.84.0/24 maxlen: 24
164.90.85.0/24 maxlen: 24
164.90.86.0/24 maxlen: 24
164.90.87.0/24 maxlen: 24
164.90.88.0/24 maxlen: 24
164.90.89.0/24 maxlen: 24
164.90.90.0/24 maxlen: 24
164.90.91.0/24 maxlen: 24
164.90.92.0/24 maxlen: 24
164.90.93.0/24 maxlen: 24
164.90.94.0/24 maxlen: 24
164.90.95.0/24 maxlen: 24
164.90.96.0/24 maxlen: 24
164.90.98.0/24 maxlen: 24
164.90.101.0/24 maxlen: 24
164.90.102.0/24 maxlen: 24
164.90.103.0/24 maxlen: 24
164.90.105.0/24 maxlen: 24
164.90.106.0/24 maxlen: 24
164.90.107.0/24 maxlen: 24
164.90.108.0/24 maxlen: 24
164.90.109.0/24 maxlen: 24
164.90.110.0/24 maxlen: 24
164.90.111.0/24 maxlen: 24
164.90.112.0/24 maxlen: 24
164.90.113.0/24 maxlen: 24
164.90.114.0/24 maxlen: 24
164.90.115.0/24 maxlen: 24
164.90.116.0/24 maxlen: 24
164.90.117.0/24 maxlen: 24
164.90.121.0/24 maxlen: 24
164.90.122.0/24 maxlen: 24
164.90.125.0/24 maxlen: 24
164.90.126.0/24 maxlen: 24
164.90.127.0/24 maxlen: 24
202.63.32.0/24 maxlen: 24
202.63.33.0/24 maxlen: 24
202.63.34.0/24 maxlen: 24
202.63.35.0/24 maxlen: 24
202.63.36.0/24 maxlen: 24
202.63.37.0/24 maxlen: 24
202.63.38.0/24 maxlen: 24
202.63.39.0/24 maxlen: 24
202.63.40.0/24 maxlen: 24
202.63.41.0/24 maxlen: 24
202.63.42.0/24 maxlen: 24
202.63.43.0/24 maxlen: 24
202.63.44.0/24 maxlen: 24
202.63.45.0/24 maxlen: 24
202.63.46.0/24 maxlen: 24
202.63.47.0/24 maxlen: 24
202.63.48.0/24 maxlen: 24
202.63.49.0/24 maxlen: 24
202.63.50.0/24 maxlen: 24
202.63.51.0/24 maxlen: 24
202.63.52.0/24 maxlen: 24
202.63.53.0/24 maxlen: 24
202.63.54.0/24 maxlen: 24
202.63.55.0/24 maxlen: 24
202.63.56.0/24 maxlen: 24
202.63.57.0/24 maxlen: 24
202.63.58.0/24 maxlen: 24
202.63.59.0/24 maxlen: 24
202.63.60.0/24 maxlen: 24
202.63.61.0/24 maxlen: 24
202.63.62.0/24 maxlen: 24
202.63.63.0/24 maxlen: 24
202.168.96.0/24 maxlen: 24
202.168.97.0/24 maxlen: 24
202.168.99.0/24 maxlen: 24
202.168.100.0/24 maxlen: 24
202.168.101.0/24 maxlen: 24
202.168.102.0/24 maxlen: 24
202.168.103.0/24 maxlen: 24
202.168.104.0/24 maxlen: 24
202.168.105.0/24 maxlen: 24
202.168.106.0/24 maxlen: 24
202.168.107.0/24 maxlen: 24
202.168.108.0/24 maxlen: 24
202.168.109.0/24 maxlen: 24
202.168.110.0/24 maxlen: 24
202.168.112.0/24 maxlen: 24
202.168.113.0/24 maxlen: 24
202.168.114.0/24 maxlen: 24
202.168.115.0/24 maxlen: 24
202.168.116.0/24 maxlen: 24
202.168.117.0/24 maxlen: 24
202.168.118.0/24 maxlen: 24
202.168.119.0/24 maxlen: 24
202.168.120.0/24 maxlen: 24
202.168.121.0/24 maxlen: 24
202.168.122.0/24 maxlen: 24
202.168.123.0/24 maxlen: 24
202.168.124.0/23 maxlen: 23
202.168.124.0/24 maxlen: 24
202.168.125.0/24 maxlen: 24
202.168.126.0/24 maxlen: 24
202.168.127.0/24 maxlen: 24
2404:efc0:155::/48 maxlen: 48
2404:efc0:235::/48 maxlen: 48
2404:efc0:236::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91DF93A/FF51E59EE5F311EAB3A91561C4F9AE02/B6HAhUXKzGXgiC1J6fL4z9K-gmA.crl
rsync://rpki.apnic.net/member_repository/A91DF93A/FF51E59EE5F311EAB3A91561C4F9AE02/B6HAhUXKzGXgiC1J6fL4z9K-gmA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B6HAhUXKzGXgiC1J6fL4z9K-gmA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 25 Oct 2025 21:56:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2290 (0x8f2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91DF93A, serialNumber=07A1C08545CACC65E0882D49E9F2F8CFD2BE8260
Validity
Not Before: Sep 12 08:01:14 2025 GMT
Not After : Aug 31 00:00:00 2026 GMT
Subject: CN=68c3d34a-ab9f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:64:9b:11:fe:f8:3b:f5:eb:da:65:78:ad:04:
44:91:6d:f2:ab:89:ad:d9:8a:b2:4f:56:76:c7:8f:
c6:61:28:02:fa:cc:20:48:b9:9c:44:d3:a0:df:26:
37:58:3e:79:2c:54:cb:93:e7:bc:39:f0:df:8e:66:
2d:70:7f:ac:74:89:ef:c8:6a:9e:6f:4c:9f:59:9d:
d0:3c:af:59:06:50:89:50:7e:f9:43:f9:74:fe:ca:
e5:f2:ef:ca:f4:eb:b7:28:df:9b:c5:5d:55:7f:c3:
4c:ef:9d:be:cb:53:a9:07:39:7d:e0:b2:a7:bb:6a:
d8:4b:b7:e6:45:4f:ae:8c:23:2b:3b:6a:ce:e0:a7:
f4:23:e8:00:27:7f:be:a8:27:e4:7e:36:4f:a0:9c:
5d:39:95:fd:9e:9b:75:f7:20:50:6f:6e:39:e4:e2:
d5:1b:f9:5f:ac:59:96:77:32:2c:b7:08:d9:cc:a4:
a8:e1:5d:93:11:c1:63:44:0f:c9:84:07:c4:17:24:
54:5c:4a:f4:4d:37:30:da:57:f9:9d:2a:79:75:99:
18:d9:50:b8:71:84:7f:50:6e:ef:b4:3b:79:32:53:
8c:7e:ed:37:0b:f7:b2:8c:5d:1e:9c:df:3b:79:75:
95:b7:60:7a:25:39:ae:ba:c9:7c:3d:25:a7:95:f4:
9c:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:A1:46:34:1C:2A:06:D5:0C:A3:E5:84:E0:92:78:C5:1E:C9:29:35
X509v3 Authority Key Identifier:
keyid:07:A1:C0:85:45:CA:CC:65:E0:88:2D:49:E9:F2:F8:CF:D2:BE:82:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91DF93A/FF51E59EE5F311EAB3A91561C4F9AE02/B6HAhUXKzGXgiC1J6fL4z9K-gmA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B6HAhUXKzGXgiC1J6fL4z9K-gmA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DF93A/FF51E59EE5F311EAB3A91561C4F9AE02/A709BC948FAE11F09FAE9C69C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.139.72.0/23
164.90.64.0-164.90.72.255
164.90.74.0-164.90.96.255
164.90.98.0/24
164.90.101.0-164.90.103.255
164.90.105.0-164.90.117.255
164.90.121.0-164.90.122.255
164.90.125.0-164.90.127.255
202.63.32.0/19
202.168.96.0/23
202.168.99.0-202.168.110.255
202.168.112.0/20
IPv6:
2404:efc0:155::/48
2404:efc0:235::-2404:efc0:236:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
50:bc:d0:95:17:4e:37:68:3f:eb:1f:a3:a3:ee:07:ca:63:28:
7e:71:1f:db:4d:41:fc:e3:30:01:0c:60:1e:31:56:9c:b0:e1:
54:94:8a:a6:d8:6d:39:01:ea:4a:2b:a9:a0:b7:32:83:d9:cb:
9a:c8:0f:c7:3a:3f:fc:7c:75:9e:92:a2:e7:78:39:d8:14:0d:
d3:0e:04:c2:16:79:a4:e8:a9:4a:71:bc:67:a8:23:5c:e5:36:
d6:60:97:81:68:fa:77:8c:4d:55:c7:77:a9:f1:a1:e0:d3:d0:
1f:02:83:47:b5:c6:2f:ef:cb:04:02:ec:85:d2:60:1d:15:bc:
df:c9:8c:99:50:a9:a4:7d:6e:83:5d:12:fe:32:8a:cc:ea:de:
cd:8b:51:2d:18:35:b0:42:67:d7:92:ab:53:a2:34:ef:94:33:
b0:15:7d:03:c0:b8:36:a4:7a:00:e0:a4:9a:2d:a0:da:10:6d:
47:7e:50:f4:69:f2:50:66:25:aa:80:18:39:7d:ca:d3:db:a1:
7e:39:ae:cb:fc:6a:ad:0a:0c:c1:bd:73:7d:09:91:a8:55:4d:
1b:49:8f:13:7d:6f:81:fb:2c:7a:93:f4:65:b2:66:1c:f9:27:
dc:ce:ad:d1:65:d2:3a:7e:7f:8e:f9:34:8a:f8:31:50:d2:4d:
37:19:1a:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 13:01:06 2025 by rpki-client