Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E4463/A4D4400C139F11EAA6582860C4F9AE02/6EBD0E788EAA11EFA6C1D33AC4F9AE02.roa
File: 6EBD0E788EAA11EFA6C1D33AC4F9AE02.roa (raw, json)
Hash identifier: koYkzKfCTAv1tCwfqS1UV81p0eyhkxC28R0kJ+9NqSg=
Subject key identifier: C7:0A:51:3F:34:AE:17:A2:60:AD:BF:E2:20:47:FB:5D:73:13:44:14
Certificate issuer: /CN=A91E4463/serialNumber=771230A82EDBC27716AB3DC6A82FC5AEC45EEF67
Certificate serial: 0C96
Authority key identifier: 77:12:30:A8:2E:DB:C2:77:16:AB:3D:C6:A8:2F:C5:AE:C4:5E:EF:67
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dxIwqC7bwncWqz3GqC_FrsRe72c.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E4463/A4D4400C139F11EAA6582860C4F9AE02/6EBD0E788EAA11EFA6C1D33AC4F9AE02.roa
Signing time: Wed 24 Sep 2025 19:15:51 +0000
ROA not before: Wed 24 Sep 2025 19:15:51 +0000
ROA not after: Tue 31 Mar 2026 00:00:00 +0000
asID: 136224
IP address blocks: 103.84.36.0/22 maxlen: 22
103.84.36.0/23 maxlen: 23
103.84.36.0/24 maxlen: 24
103.84.37.0/24 maxlen: 24
103.84.38.0/23 maxlen: 23
103.84.38.0/24 maxlen: 24
103.84.39.0/24 maxlen: 24
113.212.108.0/22 maxlen: 22
113.212.108.0/23 maxlen: 23
113.212.108.0/24 maxlen: 24
113.212.109.0/24 maxlen: 24
113.212.110.0/23 maxlen: 23
113.212.110.0/24 maxlen: 24
113.212.111.0/24 maxlen: 24
2400:9940:5::/48 maxlen: 48
2400:9940:1000::/36 maxlen: 40
2400:9940:1000::/48 maxlen: 48
2400:9940:1001::/48 maxlen: 48
2400:9940:1002::/48 maxlen: 48
2400:9940:1003::/48 maxlen: 48
2400:9940:1004::/48 maxlen: 48
2400:9940:1100::/48 maxlen: 48
2400:9940:1101::/48 maxlen: 48
2400:9940:1102::/48 maxlen: 48
2400:9940:1103::/48 maxlen: 48
2400:9940:1104::/48 maxlen: 48
2400:9940:1137::/48 maxlen: 48
2400:9940:1138::/48 maxlen: 48
2400:9940:1139::/48 maxlen: 48
2400:9940:1142::/48 maxlen: 48
2400:9940:1143::/48 maxlen: 48
2400:9940:1144::/48 maxlen: 48
2400:9940:1145::/48 maxlen: 48
2400:9940:1146::/48 maxlen: 48
2400:9940:1147::/48 maxlen: 48
2400:9940:1200::/48 maxlen: 48
2400:9940:1201::/48 maxlen: 48
2400:9940:1202::/48 maxlen: 48
2400:9940:1203::/48 maxlen: 48
2400:9940:1204::/48 maxlen: 48
2400:9940:1300::/48 maxlen: 48
2400:9940:1301::/48 maxlen: 48
2400:9940:1302::/48 maxlen: 48
2400:9940:1303::/48 maxlen: 48
2400:9940:1304::/48 maxlen: 48
2400:9940:1400::/48 maxlen: 48
2400:9940:1401::/48 maxlen: 48
2400:9940:1402::/48 maxlen: 48
2400:9940:1403::/48 maxlen: 48
2400:9940:1404::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E4463/A4D4400C139F11EAA6582860C4F9AE02/dxIwqC7bwncWqz3GqC_FrsRe72c.crl
rsync://rpki.apnic.net/member_repository/A91E4463/A4D4400C139F11EAA6582860C4F9AE02/dxIwqC7bwncWqz3GqC_FrsRe72c.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dxIwqC7bwncWqz3GqC_FrsRe72c.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 25 Oct 2025 19:25:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3222 (0xc96)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E4463, serialNumber=771230A82EDBC27716AB3DC6A82FC5AEC45EEF67
Validity
Not Before: Sep 24 19:15:51 2025 GMT
Not After : Mar 31 00:00:00 2026 GMT
Subject: CN=68d44367-1db7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:d3:41:eb:46:c1:71:2b:fb:35:c2:d1:73:4d:
1c:1f:e6:38:98:f1:f7:4e:67:d9:34:20:a1:54:7b:
df:cb:1d:0b:3e:54:37:95:3a:3f:8d:79:e4:6a:1f:
69:6b:8b:b2:f9:87:8b:2e:eb:e2:df:d2:58:e9:ba:
bb:02:ba:28:89:20:96:09:07:e7:7d:ef:75:c6:c5:
31:bd:2b:e7:cd:f6:c6:d8:c6:ed:c4:08:c2:43:52:
c6:4b:15:9c:ac:f6:1e:51:5d:e5:20:6f:e5:7f:16:
48:a5:94:a0:79:10:b9:fb:c4:71:9b:be:76:bf:4e:
d5:d9:9b:76:76:77:a5:70:0c:ff:d3:40:f9:ff:35:
5c:94:a4:cf:ba:10:3c:51:d2:c9:40:c7:20:f1:ea:
61:f8:03:6e:6e:dd:6e:2e:33:d6:fe:d8:54:58:51:
d6:5e:ef:ca:d9:90:c4:8d:ba:fd:b6:3d:8e:cc:19:
01:1a:31:66:e0:8e:fb:0c:a8:76:97:76:3c:5e:1c:
9e:f1:5a:40:8d:f2:de:45:74:21:c1:80:70:f1:60:
06:ff:a0:eb:bd:b6:bb:ff:12:a6:0d:9e:1e:30:fa:
02:1d:ce:4a:7a:eb:4a:0a:b6:7c:81:88:61:82:75:
6f:0c:ef:a3:1b:aa:1e:d3:1d:00:47:80:e9:7d:88:
d8:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:0A:51:3F:34:AE:17:A2:60:AD:BF:E2:20:47:FB:5D:73:13:44:14
X509v3 Authority Key Identifier:
keyid:77:12:30:A8:2E:DB:C2:77:16:AB:3D:C6:A8:2F:C5:AE:C4:5E:EF:67
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E4463/A4D4400C139F11EAA6582860C4F9AE02/dxIwqC7bwncWqz3GqC_FrsRe72c.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dxIwqC7bwncWqz3GqC_FrsRe72c.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E4463/A4D4400C139F11EAA6582860C4F9AE02/6EBD0E788EAA11EFA6C1D33AC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.84.36.0/22
113.212.108.0/22
IPv6:
2400:9940:5::/48
2400:9940:1000::/36
Signature Algorithm: sha256WithRSAEncryption
bb:ea:23:d5:11:75:7f:8f:8f:7e:ec:6c:90:31:36:c5:93:f5:
b4:62:e6:26:23:e9:cb:ae:81:68:e5:d4:15:21:48:97:0e:1f:
45:46:13:a7:b8:4d:0c:41:76:0c:eb:af:e1:8f:83:67:5d:9c:
22:4c:0d:c5:f8:20:a2:9e:35:15:d7:21:8c:0f:2b:87:e3:11:
4e:ee:49:08:6c:5b:a9:3f:a5:5b:f8:b6:42:90:70:3a:51:63:
b0:e5:95:6c:95:ee:4c:bf:4e:03:fd:d8:ad:6e:21:8b:fe:87:
f2:0c:f2:f0:b1:9f:9e:40:b7:ea:25:a7:3f:be:37:d1:4e:f6:
52:cc:de:b1:0a:44:32:1d:3a:e9:8e:03:97:38:0a:55:5f:8d:
33:b1:f9:a6:0e:6a:65:90:57:d1:d0:b4:ac:3c:60:75:f7:e4:
5e:0a:38:2d:03:eb:54:fc:93:bb:0b:1f:1e:69:77:e8:ab:32:
2c:2e:f6:58:a8:e8:31:32:7d:00:6b:6d:f5:e9:8c:82:95:e5:
e9:f7:20:bf:0d:c7:e5:6a:a9:f9:4e:a8:1e:ae:1e:f7:8d:2d:
32:dd:b1:fa:f1:51:fa:36:34:2e:07:7d:71:b0:cf:ee:22:38:
60:9e:a3:cf:be:db:b5:c0:5e:c7:33:7e:61:81:f4:ce:9d:07:
cc:af:e3:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 11:26:47 2025 by rpki-client