Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E2454/D4C30B421D8711E2A19822E008B02CD2/D4B25B928C6B11F09545B981C4F9AE02.roa
File: D4B25B928C6B11F09545B981C4F9AE02.roa (raw, json)
Hash identifier: pR1yc8aEmPb2Q8qUdycAP8NbLrXlxbLvJ23POTBrAso=
Subject key identifier: CB:73:3B:5E:20:56:E6:AB:55:70:D4:C2:23:C8:6D:06:EA:9F:33:FC
Certificate issuer: /CN=A91E2454/serialNumber=AB6262BC7D02EC1AD48B71DA98B73D22A362DAF0
Certificate serial: 362C
Authority key identifier: AB:62:62:BC:7D:02:EC:1A:D4:8B:71:DA:98:B7:3D:22:A3:62:DA:F0
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q2JivH0C7BrUi3HamLc9IqNi2vA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E2454/D4C30B421D8711E2A19822E008B02CD2/D4B25B928C6B11F09545B981C4F9AE02.roa
Signing time: Mon 08 Sep 2025 04:25:21 +0000
ROA not before: Mon 08 Sep 2025 04:25:21 +0000
ROA not after: Sat 31 Jan 2026 00:00:00 +0000
asID: 17639
IP address blocks: 103.93.220.0/22 maxlen: 22
111.125.64.0/18 maxlen: 18
111.125.64.0/22 maxlen: 22
111.125.68.0/22 maxlen: 22
111.125.72.0/22 maxlen: 22
111.125.76.0/22 maxlen: 22
111.125.80.0/22 maxlen: 23
111.125.80.0/23 maxlen: 24
111.125.82.0/24 maxlen: 24
111.125.84.0/22 maxlen: 22
111.125.88.0/22 maxlen: 22
111.125.92.0/22 maxlen: 22
111.125.96.0/22 maxlen: 22
111.125.97.0/24 maxlen: 24
111.125.100.0/22 maxlen: 22
111.125.102.0/24 maxlen: 24
111.125.104.0/22 maxlen: 24
111.125.112.0/22 maxlen: 22
111.125.116.0/22 maxlen: 24
111.125.124.0/22 maxlen: 22
111.125.124.0/23 maxlen: 23
111.125.126.0/24 maxlen: 24
120.29.64.0/18 maxlen: 18
120.29.64.0/22 maxlen: 23
120.29.64.0/23 maxlen: 24
120.29.66.0/24 maxlen: 24
120.29.68.0/22 maxlen: 23
120.29.68.0/23 maxlen: 24
120.29.72.0/22 maxlen: 22
120.29.72.0/23 maxlen: 24
120.29.74.0/24 maxlen: 24
120.29.75.0/24 maxlen: 24
120.29.76.0/22 maxlen: 22
120.29.76.0/24 maxlen: 24
120.29.77.0/24 maxlen: 24
120.29.78.0/24 maxlen: 24
120.29.79.0/24 maxlen: 24
120.29.80.0/22 maxlen: 23
120.29.80.0/24 maxlen: 24
120.29.82.0/24 maxlen: 24
120.29.84.0/22 maxlen: 22
120.29.84.0/24 maxlen: 24
120.29.85.0/24 maxlen: 24
120.29.86.0/24 maxlen: 24
120.29.87.0/24 maxlen: 24
120.29.88.0/22 maxlen: 22
120.29.88.0/24 maxlen: 24
120.29.89.0/24 maxlen: 24
120.29.90.0/24 maxlen: 24
120.29.91.0/24 maxlen: 24
120.29.92.0/22 maxlen: 22
120.29.92.0/23 maxlen: 23
120.29.92.0/24 maxlen: 24
120.29.94.0/24 maxlen: 24
120.29.95.0/24 maxlen: 24
120.29.96.0/22 maxlen: 22
120.29.96.0/23 maxlen: 24
120.29.98.0/24 maxlen: 24
120.29.99.0/24 maxlen: 24
120.29.100.0/22 maxlen: 22
120.29.100.0/24 maxlen: 24
120.29.101.0/24 maxlen: 24
120.29.102.0/24 maxlen: 24
120.29.103.0/24 maxlen: 24
120.29.108.0/22 maxlen: 22
120.29.108.0/23 maxlen: 23
120.29.110.0/24 maxlen: 24
120.29.111.0/24 maxlen: 24
120.29.112.0/22 maxlen: 22
120.29.113.0/24 maxlen: 24
120.29.115.0/24 maxlen: 24
120.29.116.0/22 maxlen: 22
120.29.116.0/23 maxlen: 23
120.29.116.0/24 maxlen: 24
120.29.118.0/24 maxlen: 24
120.29.119.0/24 maxlen: 24
120.29.120.0/22 maxlen: 22
120.29.124.0/22 maxlen: 22
121.58.192.0/18 maxlen: 18
121.58.192.0/22 maxlen: 24
121.58.196.0/22 maxlen: 22
121.58.200.0/22 maxlen: 22
121.58.204.0/22 maxlen: 24
121.58.208.0/22 maxlen: 24
121.58.212.0/22 maxlen: 24
121.58.216.0/22 maxlen: 22
121.58.220.0/22 maxlen: 22
121.58.224.0/22 maxlen: 22
121.58.228.0/22 maxlen: 24
121.58.232.0/22 maxlen: 22
121.58.232.0/24 maxlen: 24
121.58.233.0/24 maxlen: 24
121.58.234.0/23 maxlen: 24
121.58.236.0/22 maxlen: 22
121.58.236.0/23 maxlen: 24
121.58.238.0/24 maxlen: 24
121.58.239.0/24 maxlen: 24
121.58.240.0/22 maxlen: 23
121.58.240.0/24 maxlen: 24
121.58.242.0/23 maxlen: 24
121.58.244.0/22 maxlen: 24
121.58.248.0/22 maxlen: 24
121.58.252.0/22 maxlen: 22
123.253.136.0/22 maxlen: 22
123.253.136.0/24 maxlen: 24
123.253.137.0/24 maxlen: 24
123.253.139.0/24 maxlen: 24
202.69.160.0/19 maxlen: 19
202.69.160.0/24 maxlen: 24
202.69.161.0/24 maxlen: 24
202.69.162.0/24 maxlen: 24
202.69.164.0/22 maxlen: 24
202.69.168.0/22 maxlen: 24
202.69.172.0/22 maxlen: 24
202.69.176.0/22 maxlen: 24
202.69.180.0/22 maxlen: 24
202.69.184.0/22 maxlen: 24
202.69.188.0/22 maxlen: 24
210.4.96.0/19 maxlen: 19
210.4.96.0/22 maxlen: 22
210.4.96.0/24 maxlen: 24
210.4.97.0/24 maxlen: 24
210.4.98.0/24 maxlen: 24
210.4.99.0/24 maxlen: 24
210.4.100.0/22 maxlen: 22
210.4.101.0/24 maxlen: 24
210.4.102.0/24 maxlen: 24
210.4.104.0/22 maxlen: 22
210.4.105.0/24 maxlen: 24
210.4.106.0/24 maxlen: 24
210.4.107.0/24 maxlen: 24
210.4.108.0/22 maxlen: 22
210.4.108.0/24 maxlen: 24
210.4.109.0/24 maxlen: 24
210.4.112.0/22 maxlen: 22
210.4.112.0/24 maxlen: 24
210.4.113.0/24 maxlen: 24
210.4.114.0/24 maxlen: 24
210.4.115.0/24 maxlen: 24
210.4.116.0/22 maxlen: 22
210.4.117.0/24 maxlen: 24
210.4.118.0/24 maxlen: 24
210.4.119.0/24 maxlen: 24
210.4.120.0/22 maxlen: 22
210.4.120.0/24 maxlen: 24
210.4.121.0/24 maxlen: 24
210.4.122.0/24 maxlen: 24
210.4.123.0/24 maxlen: 24
210.4.124.0/22 maxlen: 22
210.4.124.0/24 maxlen: 24
210.4.125.0/24 maxlen: 24
210.4.126.0/24 maxlen: 24
210.4.127.0/24 maxlen: 24
2405:3200::/32 maxlen: 32
2405:3200::/36 maxlen: 36
2405:3200:2::/48 maxlen: 48
2405:3200:101::/48 maxlen: 48
2405:3200:107::/48 maxlen: 48
2405:3200:108::/48 maxlen: 48
2405:3200:111::/48 maxlen: 48
2405:3200:112::/48 maxlen: 48
2405:3200:120::/48 maxlen: 48
2405:3200:121::/48 maxlen: 48
2405:3200:122::/48 maxlen: 48
2405:3200:130::/48 maxlen: 48
2405:3200:131::/48 maxlen: 48
2405:3200:132::/48 maxlen: 48
2405:3200:140::/48 maxlen: 48
2405:3200:141::/48 maxlen: 48
2405:3200:142::/48 maxlen: 48
2405:3200:150::/48 maxlen: 48
2405:3200:151::/48 maxlen: 48
2405:3200:152::/48 maxlen: 48
2405:3200:160::/48 maxlen: 48
2405:3200:161::/48 maxlen: 48
2405:3200:162::/48 maxlen: 48
2405:3200:501::/48 maxlen: 48
2405:3200:504::/48 maxlen: 48
2405:3200:505::/48 maxlen: 48
2405:3200:506::/48 maxlen: 48
2405:3200:600::/40 maxlen: 40
2405:3200:610::/48 maxlen: 48
2405:3200:700::/48 maxlen: 48
2405:3200:710::/48 maxlen: 48
2405:3200:1000::/36 maxlen: 36
2405:3200:1200:50::/64 maxlen: 64
2405:3200:1201::/48 maxlen: 48
2405:3200:1202::/48 maxlen: 48
2405:3200:1203::/48 maxlen: 48
2405:3200:1300::/48 maxlen: 48
2405:3200:5002::/48 maxlen: 48
2405:3200:7200::/48 maxlen: 48
2405:3200:b001::/48 maxlen: 48
2405:3200:b100::/48 maxlen: 48
2405:3200:b101::/48 maxlen: 48
2405:3200:e001::/48 maxlen: 48
2405:3200:e100::/48 maxlen: 48
2405:3200:e101::/48 maxlen: 48
2405:3200:f000::/36 maxlen: 36
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E2454/D4C30B421D8711E2A19822E008B02CD2/q2JivH0C7BrUi3HamLc9IqNi2vA.crl
rsync://rpki.apnic.net/member_repository/A91E2454/D4C30B421D8711E2A19822E008B02CD2/q2JivH0C7BrUi3HamLc9IqNi2vA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q2JivH0C7BrUi3HamLc9IqNi2vA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 25 Oct 2025 14:31:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13868 (0x362c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E2454, serialNumber=AB6262BC7D02EC1AD48B71DA98B73D22A362DAF0
Validity
Not Before: Sep 8 04:25:21 2025 GMT
Not After : Jan 31 00:00:00 2026 GMT
Subject: CN=68be5ab0-b4b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:77:04:00:cb:69:b1:a8:21:02:df:56:39:7e:
8d:23:92:38:5c:71:72:c7:06:16:1e:e6:35:99:57:
52:7d:25:7f:32:a7:5f:7f:49:65:10:36:81:da:11:
2e:b2:83:87:53:f1:09:cf:05:8e:1b:d8:f0:53:32:
22:48:aa:08:0d:d0:8d:aa:b5:3f:9a:e8:b4:0a:27:
96:83:83:d6:7f:ef:6f:f2:85:1e:91:0d:46:d6:f4:
fe:e5:23:81:1c:6a:7e:14:a0:6c:43:67:bd:6c:cb:
6c:f0:28:ae:3f:c2:22:8a:82:2a:f3:76:e5:e8:22:
5f:48:37:a2:76:5d:0d:b1:00:50:84:50:19:bc:48:
cd:f6:0d:22:c6:06:44:87:55:1d:91:32:a1:d5:a1:
ff:53:2b:68:80:00:18:1f:09:49:61:96:91:1d:69:
4b:b9:de:f1:d0:1b:30:1b:8b:31:ae:98:16:f2:af:
02:9b:4f:7b:d9:d5:61:40:66:15:55:62:89:e4:2e:
ea:96:95:be:cb:1c:40:24:b3:25:f3:61:96:1b:e4:
ec:92:49:e8:fc:3c:13:6c:c8:e0:bd:4a:0d:25:da:
9d:64:4e:54:fb:6a:c2:47:91:4f:20:1c:f6:8c:c9:
76:1b:95:96:2a:37:d5:dd:37:30:92:df:c9:87:b9:
6b:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:73:3B:5E:20:56:E6:AB:55:70:D4:C2:23:C8:6D:06:EA:9F:33:FC
X509v3 Authority Key Identifier:
keyid:AB:62:62:BC:7D:02:EC:1A:D4:8B:71:DA:98:B7:3D:22:A3:62:DA:F0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E2454/D4C30B421D8711E2A19822E008B02CD2/q2JivH0C7BrUi3HamLc9IqNi2vA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q2JivH0C7BrUi3HamLc9IqNi2vA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E2454/D4C30B421D8711E2A19822E008B02CD2/D4B25B928C6B11F09545B981C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.93.220.0/22
111.125.64.0/18
120.29.64.0/18
121.58.192.0/18
123.253.136.0/22
202.69.160.0/19
210.4.96.0/19
IPv6:
2405:3200::/32
Signature Algorithm: sha256WithRSAEncryption
40:22:7f:f0:1f:d5:bf:0a:92:69:7b:58:e8:1f:9b:16:3f:dc:
39:b7:e6:5f:0e:5f:d4:0e:c4:ee:97:30:41:72:b9:a6:35:7b:
23:af:74:94:7f:d8:06:b9:b1:91:d4:c9:3c:42:6c:86:fe:12:
26:ec:66:41:61:8a:89:03:ab:33:ff:7c:5a:0a:cd:4d:1d:73:
65:5c:e7:dd:12:72:7b:74:91:7c:55:25:cf:75:d0:5e:3c:e9:
d0:ee:04:72:08:ce:58:2e:1c:80:bb:d4:45:9a:97:dd:d0:99:
9b:7e:94:68:63:63:ef:fe:30:7e:e2:4a:42:86:be:3f:32:b0:
45:e4:c4:38:57:8b:ed:13:32:db:94:0f:45:dd:38:77:4c:31:
6d:14:f0:c7:64:5d:5c:d4:34:8e:aa:75:17:3c:c2:63:6d:9f:
ec:db:97:80:80:83:4d:cc:31:f7:ff:9a:26:d2:74:2b:25:9a:
09:33:92:c9:da:df:d4:79:09:d2:39:45:ad:14:4a:b3:46:0e:
f6:1e:ef:68:a4:e7:d5:6d:82:3d:58:63:a2:fe:d3:25:88:e6:
fe:f1:0f:0f:19:f7:21:6c:6d:48:41:de:89:d9:87:ac:8e:c5:
8c:54:5a:19:b7:24:d2:21:7a:bc:34:6d:82:d2:34:12:a8:0b:
0e:62:2d:9d
-----BEGIN CERTIFICATE-----
MIIFpDCCBIygAwIBAgICNiwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RTI0NTQxMTAvBgNVBAUTKEFCNjI2MkJDN0QwMkVDMUFENDhCNzFEQTk4QjczRDIy
QTM2MkRBRjAwHhcNMjUwOTA4MDQyNTIxWhcNMjYwMTMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02OGJlNWFiMC1iNGI2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAyHcEAMtpsaghAt9WOX6NI5I4XHFyxwYWHuY1mVdSfSV/Mqdff0llEDaB2hEu
soOHU/EJzwWOG9jwUzIiSKoIDdCNqrU/mui0CieWg4PWf+9v8oUekQ1G1vT+5SOB
HGp+FKBsQ2e9bMts8CiuP8IiioIq83bl6CJfSDeidl0NsQBQhFAZvEjN9g0ixgZE
h1UdkTKh1aH/UytogAAYHwlJYZaRHWlLud7x0BswG4sxrpgW8q8Cm0972dVhQGYV
VWKJ5C7qlpW+yxxAJLMl82GWG+Tskkno/DwTbMjgvUoNJdqdZE5U+2rCR5FPIBz2
jMl2G5WWKjfV3Tcwkt/Jh7lrjQIDAQABo4ICyDCCAsQwHQYDVR0OBBYEFMtzO14g
VuarVXDUwiPIbQbqnzP8MB8GA1UdIwQYMBaAFKtiYrx9Auwa1Itx2pi3PSKjYtrw
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMjQ1NC9ENEMzMEI0MjFE
ODcxMUUyQTE5ODIyRTAwOEIwMkNEMi9xMkppdkgwQzdCclVpM0hhbUxjOUlxTmky
dkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3EySml2SDBDN0JyVWkzSGFtTGM5SXFOaTJ2QS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
RTI0NTQvRDRDMzBCNDIxRDg3MTFFMkExOTgyMkUwMDhCMDJDRDIvRDRCMjVCOTI4
QzZCMTFGMDk1NDVCOTgxQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwUgYIKwYBBQUHAQcBAf8E
QzBBMDAEAgABMCoDBAJnXdwDBAZvfUADBAZ4HUADBAZ5OsADBAJ7/YgDBAXKRaAD
BAXSBGAwDQQCAAIwBwMFACQFMgAwDQYJKoZIhvcNAQELBQADggEBAEAif/Af1b8K
kml7WOgfmxY/3Dm35l8OX9QOxO6XMEFyuaY1eyOvdJR/2Aa5sZHUyTxCbIb+Eibs
ZkFhiokDqzP/fFoKzU0dc2Vc590Scnt0kXxVJc910F486dDuBHIIzlguHIC71EWa
l93QmZt+lGhjY+/+MH7iSkKGvj8ysEXkxDhXi+0TMtuUD0XdOHdMMW0U8MdkXVzU
NI6qdRc8wmNtn+zbl4CAg03MMff/mibSdCslmgkzksna39R5CdI5Ra0USrNGDvYe
72ik59Vtgj1YY6L+0yWI5v7xDw8Z9yFsbUhB3onZh6yOxYxUWhm3JNIherw0bYLS
NBKoCw5iLZ0=
-----END CERTIFICATE-----
Generated at Mon Oct 20 13:00:05 2025 by rpki-client