Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/497A818CA02311F0BC2D2F31C4F9AE02.roa
File: 497A818CA02311F0BC2D2F31C4F9AE02.roa (raw, json)
Hash identifier: jIVZa9HPskPH8mS0e5xXZk0GX61xjbnE/VZ6qVYy4Nk=
Subject key identifier: 71:CE:E7:20:EA:44:50:14:A2:0C:CF:04:25:2D:4F:FB:35:7D:B6:89
Certificate issuer: /CN=A91E6134/serialNumber=8308087911EA49E215DC4926B0226A521E5B39C4
Certificate serial: 2A34
Authority key identifier: 83:08:08:79:11:EA:49:E2:15:DC:49:26:B0:22:6A:52:1E:5B:39:C4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/497A818CA02311F0BC2D2F31C4F9AE02.roa
Signing time: Fri 17 Oct 2025 14:26:52 +0000
ROA not before: Fri 17 Oct 2025 14:26:52 +0000
ROA not after: Thu 30 Jul 2026 00:00:00 +0000
asID: 138241
IP address blocks: 103.11.63.0/24 maxlen: 24
113.203.208.0/24 maxlen: 24
113.203.209.0/24 maxlen: 24
113.203.210.0/24 maxlen: 24
113.203.211.0/24 maxlen: 24
113.203.212.0/24 maxlen: 24
113.203.213.0/24 maxlen: 24
113.203.214.0/24 maxlen: 24
113.203.215.0/24 maxlen: 24
113.203.216.0/24 maxlen: 24
113.203.217.0/24 maxlen: 24
113.203.218.0/24 maxlen: 24
113.203.219.0/24 maxlen: 24
113.203.220.0/24 maxlen: 24
113.203.221.0/24 maxlen: 24
113.203.222.0/24 maxlen: 24
113.203.223.0/24 maxlen: 24
113.203.227.0/24 maxlen: 24
113.203.233.0/24 maxlen: 24
113.203.241.0/24 maxlen: 24
113.203.246.0/24 maxlen: 24
113.203.248.0/22 maxlen: 22
113.203.252.0/24 maxlen: 24
113.203.253.0/24 maxlen: 24
113.203.254.0/24 maxlen: 24
113.203.255.0/24 maxlen: 24
115.167.0.0/24 maxlen: 24
115.167.1.0/24 maxlen: 24
115.167.2.0/24 maxlen: 24
115.167.3.0/24 maxlen: 24
115.167.4.0/24 maxlen: 24
115.167.5.0/24 maxlen: 24
115.167.6.0/24 maxlen: 24
115.167.7.0/24 maxlen: 24
115.167.8.0/24 maxlen: 24
115.167.9.0/24 maxlen: 24
115.167.10.0/24 maxlen: 24
115.167.11.0/24 maxlen: 24
115.167.12.0/24 maxlen: 24
115.167.13.0/24 maxlen: 24
115.167.14.0/24 maxlen: 24
115.167.15.0/24 maxlen: 24
115.167.16.0/22 maxlen: 24
115.167.20.0/22 maxlen: 24
115.167.24.0/22 maxlen: 24
115.167.28.0/24 maxlen: 24
115.167.29.0/24 maxlen: 24
115.167.30.0/24 maxlen: 24
115.167.31.0/24 maxlen: 24
115.167.48.0/24 maxlen: 24
115.167.49.0/24 maxlen: 24
115.167.50.0/24 maxlen: 24
115.167.51.0/24 maxlen: 24
115.167.52.0/24 maxlen: 24
115.167.53.0/24 maxlen: 24
115.167.54.0/24 maxlen: 24
115.167.55.0/24 maxlen: 24
115.167.56.0/22 maxlen: 24
115.167.60.0/24 maxlen: 24
115.167.61.0/24 maxlen: 24
115.167.62.0/24 maxlen: 24
115.167.63.0/24 maxlen: 24
115.167.96.0/22 maxlen: 24
115.167.101.0/24 maxlen: 24
115.167.102.0/24 maxlen: 24
115.167.103.0/24 maxlen: 24
115.167.104.0/22 maxlen: 22
115.167.112.0/22 maxlen: 22
115.167.116.0/24 maxlen: 24
115.167.117.0/24 maxlen: 24
115.167.118.0/24 maxlen: 24
115.167.119.0/24 maxlen: 24
115.167.120.0/24 maxlen: 24
115.167.121.0/24 maxlen: 24
115.167.122.0/24 maxlen: 24
115.167.123.0/24 maxlen: 24
115.167.124.0/24 maxlen: 24
115.167.125.0/24 maxlen: 24
175.110.64.0/24 maxlen: 24
175.110.65.0/24 maxlen: 24
175.110.66.0/24 maxlen: 24
175.110.67.0/24 maxlen: 24
175.110.81.0/24 maxlen: 24
175.110.82.0/24 maxlen: 24
175.110.83.0/24 maxlen: 24
175.110.88.0/24 maxlen: 24
175.110.90.0/24 maxlen: 24
175.110.91.0/24 maxlen: 24
175.110.96.0/24 maxlen: 24
175.110.97.0/24 maxlen: 24
175.110.98.0/24 maxlen: 24
175.110.99.0/24 maxlen: 24
175.110.100.0/24 maxlen: 24
175.110.101.0/24 maxlen: 24
175.110.102.0/24 maxlen: 24
175.110.103.0/24 maxlen: 24
175.110.104.0/21 maxlen: 21
180.178.142.0/24 maxlen: 24
180.178.144.0/24 maxlen: 24
180.178.145.0/24 maxlen: 24
180.178.146.0/24 maxlen: 24
180.178.147.0/24 maxlen: 24
180.178.148.0/24 maxlen: 24
180.178.149.0/24 maxlen: 24
180.178.150.0/24 maxlen: 24
180.178.151.0/24 maxlen: 24
180.178.152.0/21 maxlen: 21
180.178.160.0/21 maxlen: 21
180.178.168.0/24 maxlen: 24
180.178.169.0/24 maxlen: 24
180.178.170.0/24 maxlen: 24
180.178.171.0/24 maxlen: 24
180.178.176.0/21 maxlen: 21
180.178.185.0/24 maxlen: 24
180.178.186.0/24 maxlen: 24
180.178.187.0/24 maxlen: 24
180.178.188.0/24 maxlen: 24
180.178.190.0/24 maxlen: 24
180.178.191.0/24 maxlen: 24
202.92.20.0/24 maxlen: 24
202.92.26.0/24 maxlen: 24
223.29.228.0/24 maxlen: 24
223.29.229.0/24 maxlen: 24
223.29.230.0/24 maxlen: 24
223.29.231.0/24 maxlen: 24
223.29.236.0/24 maxlen: 24
223.29.238.0/24 maxlen: 24
223.29.239.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.crl
rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 25 Oct 2025 21:36:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 10804 (0x2a34)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E6134, serialNumber=8308087911EA49E215DC4926B0226A521E5B39C4
Validity
Not Before: Oct 17 14:26:52 2025 GMT
Not After : Jul 30 00:00:00 2026 GMT
Subject: CN=68f2522c-e61e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:06:84:f8:d1:c8:44:1a:fc:59:21:87:09:1b:
9f:fd:33:7b:2d:a1:fb:09:de:e6:04:63:cd:02:f4:
1a:11:09:9c:90:0d:a8:5e:2b:dc:d6:2b:7f:ce:4b:
b8:ac:02:0c:f7:15:b1:4d:d5:f9:fc:4d:cd:1f:af:
27:91:5a:82:e1:5d:86:e0:75:c9:4b:e6:dc:46:fb:
16:f1:fb:bb:a1:b7:67:9f:e7:79:ab:ef:11:41:16:
c4:92:3f:1c:f4:aa:c0:e0:4d:2e:f1:d9:28:70:3b:
c5:cb:1b:95:f8:4b:93:ef:56:fa:a5:4e:db:b8:64:
b3:1f:3d:f6:a9:8b:14:b9:c3:73:f3:72:a2:83:1a:
b4:89:62:cd:f8:0f:4a:4e:10:56:43:a8:43:44:3f:
65:8c:0e:f0:a3:e4:03:3e:b1:7b:8d:df:8a:ab:75:
7f:84:5a:5f:aa:aa:3c:f7:df:66:53:d7:88:e4:45:
4a:a0:a9:c0:e3:a5:0d:20:da:2e:48:de:84:23:54:
5f:ea:b3:2c:1b:51:31:37:a8:50:ca:b7:ae:d4:12:
1f:d2:fb:8b:15:5f:c2:16:5f:68:59:96:28:a4:6f:
f2:68:9e:98:e6:00:72:7d:7c:4d:e1:ee:38:9c:3f:
a4:1d:3f:16:ea:97:a1:fc:da:41:30:7b:d8:3e:68:
91:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:CE:E7:20:EA:44:50:14:A2:0C:CF:04:25:2D:4F:FB:35:7D:B6:89
X509v3 Authority Key Identifier:
keyid:83:08:08:79:11:EA:49:E2:15:DC:49:26:B0:22:6A:52:1E:5B:39:C4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/497A818CA02311F0BC2D2F31C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.11.63.0/24
113.203.208.0/20
113.203.227.0/24
113.203.233.0/24
113.203.241.0/24
113.203.246.0/24
113.203.248.0/21
115.167.0.0/19
115.167.48.0/20
115.167.96.0/22
115.167.101.0-115.167.107.255
115.167.112.0-115.167.125.255
175.110.64.0/22
175.110.81.0-175.110.83.255
175.110.88.0/24
175.110.90.0/23
175.110.96.0/20
180.178.142.0/24
180.178.144.0-180.178.171.255
180.178.176.0/21
180.178.185.0-180.178.188.255
180.178.190.0/23
202.92.20.0/24
202.92.26.0/24
223.29.228.0/22
223.29.236.0/24
223.29.238.0/23
Signature Algorithm: sha256WithRSAEncryption
b4:61:37:db:da:86:e2:8d:bc:04:29:e7:03:6b:72:80:b3:61:
86:a5:3c:30:9f:fa:74:94:4e:fb:dd:35:a4:3b:2f:d2:70:f0:
15:b1:61:f6:a3:17:59:68:04:3f:27:76:d2:0f:a9:5d:47:10:
73:5e:c5:37:bb:fe:39:3c:9b:90:0f:8b:d7:f3:67:bd:54:f1:
33:9c:91:6d:f5:4e:a4:20:dd:94:ff:de:81:6a:6d:4e:3e:62:
b9:ed:de:f0:8c:eb:92:14:28:f0:b6:84:6b:45:d6:0b:4e:b9:
d9:85:02:3f:f6:bb:12:a1:9a:89:0e:b3:a4:55:c8:4a:28:bb:
f0:82:c6:81:09:41:92:59:8c:e8:3e:8e:5f:23:59:d7:d4:8f:
8e:ca:1f:78:f7:46:55:85:e9:d3:65:5c:52:8a:75:24:c8:b3:
92:96:3b:dc:ee:b6:d0:5e:2a:15:62:0f:52:b7:ef:fd:c2:14:
24:c9:5d:56:c0:38:e2:22:1c:11:97:4a:d1:03:da:48:7d:c8:
26:c9:a9:d9:95:61:7c:7e:4b:8e:ed:7e:9e:08:25:9f:0d:e4:
3a:10:97:e5:8e:b6:71:4f:44:ef:7a:7f:c8:b9:f5:20:12:d4:
31:9c:17:b2:e1:28:35:68:e9:2e:87:9e:c8:8c:99:7b:b4:3d:
1a:ee:fb:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 03:50:22 2025 by rpki-client