Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/49B66EEE558311F0B24AEB1EC4F9AE02.roa
File: 49B66EEE558311F0B24AEB1EC4F9AE02.roa (raw, json)
Hash identifier: /D9OdqMIsAdsAarQP3HXq/+oRYNNI/2AX+qYrW4b46c=
Subject key identifier: 2E:DE:81:C2:BD:41:98:7A:D9:1E:CB:E1:61:97:09:E2:1C:86:C2:54
Certificate issuer: /CN=A91E6134/serialNumber=8308087911EA49E215DC4926B0226A521E5B39C4
Certificate serial: 27F1
Authority key identifier: 83:08:08:79:11:EA:49:E2:15:DC:49:26:B0:22:6A:52:1E:5B:39:C4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/49B66EEE558311F0B24AEB1EC4F9AE02.roa
Signing time: Mon 30 Jun 2025 07:24:41 +0000
ROA not before: Mon 30 Jun 2025 07:24:41 +0000
ROA not after: Thu 30 Jul 2026 00:00:00 +0000
asID: 138241
IP address blocks: 103.11.63.0/24 maxlen: 24
103.151.27.0/24 maxlen: 24
113.203.208.0/24 maxlen: 24
113.203.209.0/24 maxlen: 24
113.203.210.0/24 maxlen: 24
113.203.211.0/24 maxlen: 24
113.203.212.0/24 maxlen: 24
113.203.213.0/24 maxlen: 24
113.203.214.0/24 maxlen: 24
113.203.215.0/24 maxlen: 24
113.203.216.0/24 maxlen: 24
113.203.217.0/24 maxlen: 24
113.203.218.0/24 maxlen: 24
113.203.219.0/24 maxlen: 24
113.203.220.0/24 maxlen: 24
113.203.222.0/24 maxlen: 24
113.203.223.0/24 maxlen: 24
113.203.224.0/24 maxlen: 24
113.203.225.0/24 maxlen: 24
113.203.226.0/24 maxlen: 24
113.203.227.0/24 maxlen: 24
113.203.228.0/24 maxlen: 24
113.203.229.0/24 maxlen: 24
113.203.230.0/24 maxlen: 24
113.203.231.0/24 maxlen: 24
113.203.233.0/24 maxlen: 24
113.203.241.0/24 maxlen: 24
113.203.242.0/24 maxlen: 24
113.203.243.0/24 maxlen: 24
113.203.244.0/24 maxlen: 24
113.203.245.0/24 maxlen: 24
113.203.246.0/24 maxlen: 24
113.203.248.0/24 maxlen: 24
113.203.252.0/24 maxlen: 24
113.203.253.0/24 maxlen: 24
113.203.254.0/24 maxlen: 24
113.203.255.0/24 maxlen: 24
115.167.2.0/24 maxlen: 24
115.167.6.0/24 maxlen: 24
115.167.11.0/24 maxlen: 24
115.167.12.0/24 maxlen: 24
115.167.13.0/24 maxlen: 24
115.167.15.0/24 maxlen: 24
115.167.16.0/22 maxlen: 24
115.167.20.0/22 maxlen: 24
115.167.24.0/22 maxlen: 24
115.167.28.0/24 maxlen: 24
115.167.29.0/24 maxlen: 24
115.167.30.0/24 maxlen: 24
115.167.31.0/24 maxlen: 24
115.167.48.0/24 maxlen: 24
115.167.50.0/24 maxlen: 24
115.167.56.0/22 maxlen: 24
115.167.60.0/24 maxlen: 24
115.167.61.0/24 maxlen: 24
115.167.64.0/24 maxlen: 24
115.167.66.0/24 maxlen: 24
115.167.96.0/22 maxlen: 24
115.167.101.0/24 maxlen: 24
115.167.102.0/24 maxlen: 24
115.167.103.0/24 maxlen: 24
115.167.112.0/22 maxlen: 24
115.167.116.0/24 maxlen: 24
115.167.117.0/24 maxlen: 24
115.167.118.0/24 maxlen: 24
115.167.119.0/24 maxlen: 24
115.167.120.0/24 maxlen: 24
115.167.121.0/24 maxlen: 24
115.167.122.0/24 maxlen: 24
115.167.123.0/24 maxlen: 24
115.167.124.0/24 maxlen: 24
115.167.125.0/24 maxlen: 24
175.110.64.0/24 maxlen: 24
175.110.65.0/24 maxlen: 24
175.110.66.0/24 maxlen: 24
175.110.67.0/24 maxlen: 24
175.110.82.0/24 maxlen: 24
175.110.90.0/24 maxlen: 24
175.110.91.0/24 maxlen: 24
175.110.97.0/24 maxlen: 24
175.110.98.0/24 maxlen: 24
175.110.101.0/24 maxlen: 24
175.110.102.0/24 maxlen: 24
175.110.103.0/24 maxlen: 24
175.110.104.0/21 maxlen: 21
180.178.142.0/24 maxlen: 24
180.178.144.0/24 maxlen: 24
180.178.146.0/24 maxlen: 24
180.178.147.0/24 maxlen: 24
180.178.148.0/24 maxlen: 24
180.178.149.0/24 maxlen: 24
180.178.150.0/24 maxlen: 24
180.178.152.0/21 maxlen: 21
180.178.160.0/21 maxlen: 21
180.178.168.0/24 maxlen: 24
180.178.169.0/24 maxlen: 24
180.178.170.0/24 maxlen: 24
180.178.171.0/24 maxlen: 24
180.178.176.0/21 maxlen: 21
180.178.185.0/24 maxlen: 24
180.178.186.0/24 maxlen: 24
180.178.187.0/24 maxlen: 24
180.178.188.0/24 maxlen: 24
180.178.190.0/24 maxlen: 24
180.178.191.0/24 maxlen: 24
202.92.26.0/24 maxlen: 24
223.29.225.0/24 maxlen: 24
223.29.226.0/24 maxlen: 24
223.29.228.0/24 maxlen: 24
223.29.229.0/24 maxlen: 24
223.29.230.0/24 maxlen: 24
223.29.231.0/24 maxlen: 24
223.29.235.0/24 maxlen: 24
223.29.236.0/24 maxlen: 24
223.29.238.0/24 maxlen: 24
223.29.239.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.crl
rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 09 Jul 2025 20:53:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 10225 (0x27f1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E6134, serialNumber=8308087911EA49E215DC4926B0226A521E5B39C4
Validity
Not Before: Jun 30 07:24:41 2025 GMT
Not After : Jul 30 00:00:00 2026 GMT
Subject: CN=68623bb9-26e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:df:a0:b9:fb:78:4e:28:e1:aa:45:1a:4c:24:
37:b7:fd:af:8f:df:be:b9:6b:de:9c:ef:8a:5e:66:
8f:07:47:e9:ab:c2:1e:71:6c:9f:64:05:b0:ea:47:
26:4a:0d:5e:28:f5:da:76:51:c1:f5:95:d5:b3:ec:
25:b3:2c:7d:c2:c8:12:b9:27:e6:35:8c:5a:cb:db:
70:91:e8:a5:61:b3:05:67:0c:2c:f6:38:79:42:e1:
3a:95:81:7c:b6:64:02:dd:86:88:99:81:e4:57:e6:
1e:ea:fd:3c:09:0f:66:46:f4:9b:21:51:48:de:da:
7a:bd:22:95:6a:32:ac:76:8b:8d:44:c1:92:a5:36:
f7:b3:f4:d9:46:9b:de:80:51:b6:23:d5:25:31:fb:
c0:bb:60:65:ce:91:84:a7:4f:f0:91:90:da:cf:bd:
6d:cc:cb:b6:ba:ab:25:5f:97:34:08:51:d0:a1:7f:
46:a0:7a:bf:b9:39:86:25:f5:e0:96:65:12:64:d0:
f2:f9:1f:c4:18:ed:67:68:a7:1a:c4:72:ad:8d:d9:
e8:86:8d:e8:df:a6:dd:4a:42:e7:4a:b5:b9:3f:e0:
b8:62:13:c3:c1:28:a9:b0:1e:8b:ae:67:e8:a2:64:
90:fd:7b:8e:1c:91:c9:c4:13:48:81:c1:89:df:78:
a9:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:DE:81:C2:BD:41:98:7A:D9:1E:CB:E1:61:97:09:E2:1C:86:C2:54
X509v3 Authority Key Identifier:
keyid:83:08:08:79:11:EA:49:E2:15:DC:49:26:B0:22:6A:52:1E:5B:39:C4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/49B66EEE558311F0B24AEB1EC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.11.63.0/24
103.151.27.0/24
113.203.208.0-113.203.220.255
113.203.222.0-113.203.231.255
113.203.233.0/24
113.203.241.0-113.203.246.255
113.203.248.0/24
113.203.252.0/22
115.167.2.0/24
115.167.6.0/24
115.167.11.0-115.167.13.255
115.167.15.0-115.167.31.255
115.167.48.0/24
115.167.50.0/24
115.167.56.0-115.167.61.255
115.167.64.0/24
115.167.66.0/24
115.167.96.0/22
115.167.101.0-115.167.103.255
115.167.112.0-115.167.125.255
175.110.64.0/22
175.110.82.0/24
175.110.90.0/23
175.110.97.0-175.110.98.255
175.110.101.0-175.110.111.255
180.178.142.0/24
180.178.144.0/24
180.178.146.0-180.178.150.255
180.178.152.0-180.178.171.255
180.178.176.0/21
180.178.185.0-180.178.188.255
180.178.190.0/23
202.92.26.0/24
223.29.225.0-223.29.226.255
223.29.228.0/22
223.29.235.0-223.29.236.255
223.29.238.0/23
Signature Algorithm: sha256WithRSAEncryption
4e:ec:a2:8f:90:bf:61:85:2e:f3:b6:19:6b:a7:4a:c2:2f:23:
8e:cd:d6:01:12:2e:28:e0:fd:ec:90:c6:ac:0b:12:9b:71:1a:
5d:54:80:93:44:c5:d5:3d:31:b0:9a:54:d0:86:19:ae:6d:86:
e2:d3:19:88:54:95:ee:8c:f8:06:86:68:2d:75:57:7d:c8:bf:
b6:48:21:af:5f:98:27:34:91:12:7a:62:48:a6:55:db:72:44:
54:29:87:38:77:65:f5:44:eb:ee:f5:64:f5:fa:61:1a:13:a6:
3d:8b:0d:c7:62:71:ec:de:93:9a:09:fc:52:81:0b:cf:2c:63:
4a:25:d9:42:48:cb:c7:c5:f3:a0:d8:90:5e:42:1e:a7:54:f6:
4e:21:20:4c:a6:f5:79:b6:fa:ed:b0:0f:83:cc:a5:60:a9:6d:
8c:04:4b:86:91:d7:82:78:a5:d2:c7:27:2d:f7:a5:c4:68:58:
84:63:db:9f:80:5d:3c:bb:cf:69:75:b0:b3:5e:8e:ac:af:a9:
89:33:17:c6:14:04:ee:6a:74:f6:be:92:90:94:db:9e:ec:1f:
4c:9b:0e:5a:69:4b:f1:e4:b5:a2:64:1a:57:24:73:48:c0:b5:
ff:f3:2e:2a:18:12:11:26:9b:a6:d1:b6:a4:a3:d6:92:fb:62:
ba:62:82:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 3 10:08:03 2025 by rpki-client