Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91EB2B8/3F44CBAE2F4D11ED8F5A6A64C4F9AE02/20978DD270E411F08F40242AC4F9AE02.roa
File: 20978DD270E411F08F40242AC4F9AE02.roa (raw, json)
Hash identifier: 84pcGrR9yrb0lc+y5Ras78T88Umec4YhuuH1jDixkUs=
Subject key identifier: 46:0B:D4:12:55:2D:E4:F2:82:9F:79:A9:EC:8F:06:37:C6:B0:6E:52
Certificate issuer: /CN=A91EB2B8/serialNumber=A69700E78D0C812AD2E2C114C82C655A0ACD447F
Certificate serial: 0321
Authority key identifier: A6:97:00:E7:8D:0C:81:2A:D2:E2:C1:14:C8:2C:65:5A:0A:CD:44:7F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ppcA540MgSrS4sEUyCxlWgrNRH8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91EB2B8/3F44CBAE2F4D11ED8F5A6A64C4F9AE02/20978DD270E411F08F40242AC4F9AE02.roa
Signing time: Tue 23 Sep 2025 07:14:09 +0000
ROA not before: Tue 23 Sep 2025 07:14:09 +0000
ROA not after: Mon 31 Aug 2026 00:00:00 +0000
asID: 139057
IP address blocks: 103.137.168.0/24 maxlen: 24
103.137.169.0/24 maxlen: 24
103.137.170.0/24 maxlen: 24
103.137.171.0/24 maxlen: 24
103.138.247.0/24 maxlen: 24
103.189.255.0/24 maxlen: 24
103.243.92.0/24 maxlen: 24
103.243.93.0/24 maxlen: 24
103.243.94.0/24 maxlen: 24
103.243.95.0/24 maxlen: 24
123.108.72.0/24 maxlen: 24
123.108.73.0/24 maxlen: 24
2407:2440:1::/48 maxlen: 48
2407:2440:2::/48 maxlen: 48
2407:2440:3::/48 maxlen: 48
2407:2440:4::/48 maxlen: 48
2407:2440:5::/48 maxlen: 48
2407:2440:6::/48 maxlen: 48
2407:2440:7::/48 maxlen: 48
2407:2440:8::/48 maxlen: 48
2407:2440:9::/48 maxlen: 48
2407:2440:a::/48 maxlen: 48
2407:2440:b::/48 maxlen: 48
2407:2440:c::/48 maxlen: 48
2407:2440:d::/48 maxlen: 48
2407:2440:e::/48 maxlen: 48
2407:2440:f::/48 maxlen: 48
2407:2440:10::/48 maxlen: 48
2407:2440:11::/48 maxlen: 48
2407:2440:12::/48 maxlen: 48
2407:2440:13::/48 maxlen: 48
2407:2440:14::/48 maxlen: 48
2407:2440:15::/48 maxlen: 48
2407:2440:16::/48 maxlen: 48
2407:2440:17::/48 maxlen: 48
2407:2440:18::/48 maxlen: 48
2407:2440:19::/48 maxlen: 48
2407:2440:1e::/48 maxlen: 48
2407:2440:1f::/48 maxlen: 48
2407:2440:20::/48 maxlen: 48
2407:2440:22::/48 maxlen: 48
2407:2440:23::/48 maxlen: 48
2407:2440:25::/48 maxlen: 48
2407:2440:28::/48 maxlen: 48
2407:2440:2a::/48 maxlen: 48
2407:2440:2b::/48 maxlen: 48
2407:2440:2c::/48 maxlen: 48
2407:2440:2d::/48 maxlen: 48
2407:2440:a001::/48 maxlen: 48
2407:2440:a002::/48 maxlen: 48
2407:2440:a003::/48 maxlen: 48
2407:2440:a004::/48 maxlen: 48
2407:2440:a005::/48 maxlen: 48
2407:2440:a007::/48 maxlen: 48
2407:2440:a008::/48 maxlen: 48
2407:2440:a009::/48 maxlen: 48
2407:2440:b001::/48 maxlen: 48
2407:2440:b002::/48 maxlen: 48
2407:2440:b003::/48 maxlen: 48
2407:2440:b004::/48 maxlen: 48
2407:2440:b005::/48 maxlen: 48
2407:2440:c001::/48 maxlen: 48
2407:2440:d001::/48 maxlen: 48
2407:2440:e001::/48 maxlen: 48
2407:2440:e002::/48 maxlen: 48
2407:2440:e003::/48 maxlen: 48
2407:2440:e004::/48 maxlen: 48
2407:2440:e007::/48 maxlen: 48
2407:2440:e008::/48 maxlen: 48
2407:2440:e009::/48 maxlen: 48
2407:2440:e00a::/48 maxlen: 48
2407:2440:e00b::/48 maxlen: 48
2407:2440:f001::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91EB2B8/3F44CBAE2F4D11ED8F5A6A64C4F9AE02/ppcA540MgSrS4sEUyCxlWgrNRH8.crl
rsync://rpki.apnic.net/member_repository/A91EB2B8/3F44CBAE2F4D11ED8F5A6A64C4F9AE02/ppcA540MgSrS4sEUyCxlWgrNRH8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ppcA540MgSrS4sEUyCxlWgrNRH8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 26 Oct 2025 03:54:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 801 (0x321)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91EB2B8, serialNumber=A69700E78D0C812AD2E2C114C82C655A0ACD447F
Validity
Not Before: Sep 23 07:14:09 2025 GMT
Not After : Aug 31 00:00:00 2026 GMT
Subject: CN=68d248c0-af03
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f5:20:86:c3:ba:2c:86:b5:2a:ad:b2:71:e4:6c:
6c:6e:cf:18:af:82:3c:97:a6:a8:02:6e:d1:30:6c:
a7:b3:00:06:08:42:11:ee:d4:cc:70:5c:0d:7d:f8:
83:5a:21:f5:1f:7c:51:8b:24:d7:be:1e:9a:ff:ab:
69:46:e6:f8:6c:1e:a7:60:a9:25:1a:dd:7c:c1:38:
8a:8c:ae:6b:9c:f3:9b:01:f3:6c:69:a5:dc:48:3d:
ac:3e:98:1a:07:46:73:17:06:1f:77:03:b2:ec:cb:
a7:cc:c3:81:1a:4e:a7:51:cd:7e:57:4a:25:97:a7:
3f:21:33:78:fa:ff:cf:c0:48:72:f3:df:b8:20:ae:
a9:47:e3:9c:13:49:4c:22:c6:7f:d5:27:95:8a:1b:
ec:05:65:fa:b1:e3:02:c3:03:ed:dc:20:5b:4b:61:
85:6a:dc:aa:e3:4e:be:dd:6e:1d:28:26:c4:6c:5d:
5f:4d:0d:76:20:f1:a6:f0:99:46:87:9f:84:dd:4d:
ad:6e:12:c2:9e:b0:9c:e9:83:a0:d4:87:e4:00:5a:
ca:99:59:92:20:34:8c:7a:56:8f:3a:53:63:f2:99:
ec:74:53:f9:a8:1a:b2:5e:c7:25:93:8b:43:33:40:
58:d3:04:91:9e:5d:93:5f:41:ce:d7:31:56:68:b5:
63:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:0B:D4:12:55:2D:E4:F2:82:9F:79:A9:EC:8F:06:37:C6:B0:6E:52
X509v3 Authority Key Identifier:
keyid:A6:97:00:E7:8D:0C:81:2A:D2:E2:C1:14:C8:2C:65:5A:0A:CD:44:7F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91EB2B8/3F44CBAE2F4D11ED8F5A6A64C4F9AE02/ppcA540MgSrS4sEUyCxlWgrNRH8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ppcA540MgSrS4sEUyCxlWgrNRH8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EB2B8/3F44CBAE2F4D11ED8F5A6A64C4F9AE02/20978DD270E411F08F40242AC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.137.168.0/22
103.138.247.0/24
103.189.255.0/24
103.243.92.0/22
123.108.72.0/23
IPv6:
2407:2440:1::-2407:2440:19:ffff:ffff:ffff:ffff:ffff
2407:2440:1e::-2407:2440:20:ffff:ffff:ffff:ffff:ffff
2407:2440:22::/47
2407:2440:25::/48
2407:2440:28::/48
2407:2440:2a::-2407:2440:2d:ffff:ffff:ffff:ffff:ffff
2407:2440:a001::-2407:2440:a005:ffff:ffff:ffff:ffff:ffff
2407:2440:a007::-2407:2440:a009:ffff:ffff:ffff:ffff:ffff
2407:2440:b001::-2407:2440:b005:ffff:ffff:ffff:ffff:ffff
2407:2440:c001::/48
2407:2440:d001::/48
2407:2440:e001::-2407:2440:e004:ffff:ffff:ffff:ffff:ffff
2407:2440:e007::-2407:2440:e00b:ffff:ffff:ffff:ffff:ffff
2407:2440:f001::/48
Signature Algorithm: sha256WithRSAEncryption
2c:ff:2b:75:75:7e:93:ec:e9:1b:ec:34:a6:b3:20:dc:94:f2:
de:da:01:7e:c7:30:cd:c9:ca:a6:92:4b:59:a0:e4:59:da:f5:
32:28:eb:e2:e5:06:63:0f:df:4f:3a:45:8f:08:01:24:79:d3:
0e:26:b4:67:3b:6a:f4:71:b0:0c:8d:d7:7e:27:f0:49:1c:01:
f3:0c:45:6a:f4:f5:94:e0:84:17:7d:2b:1f:9c:f8:b1:2d:8b:
6c:a3:53:76:2d:be:76:64:d3:b5:88:46:cf:02:03:12:80:cc:
a8:3a:fb:b8:e2:0a:20:67:26:bf:9f:14:66:10:65:6f:0d:a4:
3a:49:94:7f:ec:c8:fc:ee:f0:ca:6e:60:e8:53:db:b4:97:7a:
7d:44:83:7c:8e:85:3c:0c:3b:10:64:5f:83:e2:ea:1a:c4:c7:
35:57:99:68:d9:96:f8:ca:39:83:66:70:ca:82:bf:62:5b:ce:
7e:f5:71:f7:fe:8f:b5:cd:67:13:7b:91:97:b8:38:8a:6c:e7:
c4:c6:ba:8d:84:6b:30:05:2e:6c:70:a7:33:d0:5a:a5:3b:ab:
8b:31:70:ab:a6:7f:23:ba:59:d9:c5:ba:b0:ba:e8:b2:b1:7b:
ed:52:4c:44:c7:83:86:b2:5b:08:14:fb:ef:26:bd:29:cc:54:
2d:19:f5:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 10:47:58 2025 by rpki-client