Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A911ABDD/3AE004B4D77811E4B3778B72C4F9AE02/4FA6792A8F6711E6A509C92DC4F9AE02.roa
File: 4FA6792A8F6711E6A509C92DC4F9AE02.roa (raw, json)
Hash identifier: a2YIRJWcOj/2F2QJjwyVL+lBSin617P7TaoPIuqLmpo=
Subject key identifier: 1F:00:96:3F:D8:17:F4:A8:5D:C8:8F:D3:64:19:8F:B1:6B:6A:47:D3
Certificate issuer: /CN=A911ABDD/serialNumber=4287B3332176DB486A2CBC425402FA9C86B6DC48
Certificate serial: 1ECB
Authority key identifier: 42:87:B3:33:21:76:DB:48:6A:2C:BC:42:54:02:FA:9C:86:B6:DC:48
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QoezMyF220hqLLxCVAL6nIa23Eg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911ABDD/3AE004B4D77811E4B3778B72C4F9AE02/4FA6792A8F6711E6A509C92DC4F9AE02.roa
Signing time: Sun 01 Mar 2026 15:53:24 +0000
ROA not before: Fri 08 Aug 2025 15:53:00 +0000
ROA not after: Sat 31 Oct 2026 00:00:00 +0000
asID: 45223
IP address blocks: 180.128.0.0/16 maxlen: 16
180.128.0.0/17 maxlen: 17
180.128.0.0/23 maxlen: 23
180.128.2.0/23 maxlen: 23
180.128.4.0/23 maxlen: 23
180.128.6.0/23 maxlen: 23
180.128.8.0/23 maxlen: 23
180.128.10.0/23 maxlen: 23
180.128.12.0/23 maxlen: 23
180.128.14.0/23 maxlen: 23
180.128.16.0/23 maxlen: 23
180.128.18.0/23 maxlen: 23
180.128.20.0/23 maxlen: 23
180.128.22.0/23 maxlen: 23
180.128.24.0/23 maxlen: 23
180.128.26.0/23 maxlen: 23
180.128.28.0/23 maxlen: 23
180.128.30.0/23 maxlen: 23
180.128.32.0/23 maxlen: 23
180.128.34.0/23 maxlen: 23
180.128.40.0/23 maxlen: 23
180.128.42.0/23 maxlen: 23
180.128.44.0/23 maxlen: 23
180.128.240.0/21 maxlen: 21
180.128.240.0/23 maxlen: 23
180.128.242.0/23 maxlen: 23
180.128.244.0/23 maxlen: 23
180.128.246.0/23 maxlen: 23
202.44.52.0/22 maxlen: 22
202.44.52.0/23 maxlen: 23
202.44.54.0/23 maxlen: 23
202.52.4.0/22 maxlen: 22
202.52.4.0/23 maxlen: 23
202.52.6.0/23 maxlen: 23
203.145.112.0/22 maxlen: 22
203.145.116.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A911ABDD/3AE004B4D77811E4B3778B72C4F9AE02/QoezMyF220hqLLxCVAL6nIa23Eg.crl
rsync://rpki.apnic.net/member_repository/A911ABDD/3AE004B4D77811E4B3778B72C4F9AE02/QoezMyF220hqLLxCVAL6nIa23Eg.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QoezMyF220hqLLxCVAL6nIa23Eg.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 02:36:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7883 (0x1ecb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911ABDD, serialNumber=4287B3332176DB486A2CBC425402FA9C86B6DC48
Validity
Not Before: Aug 8 15:53:00 2025 GMT
Not After : Oct 31 00:00:00 2026 GMT
Subject: CN=69a460f4-21b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:9e:20:99:6d:b2:5d:fc:0d:5d:ac:03:78:66:
5e:b9:85:c7:f6:00:68:f3:7a:33:a8:29:23:3e:1b:
86:cd:25:0f:9a:6e:d7:ff:4c:c9:dd:2d:81:ed:f1:
80:fb:2e:43:cc:0d:b5:e8:21:0d:f5:f8:19:6a:7d:
1b:97:0d:1e:c1:dd:02:cd:47:a2:00:3f:20:f8:f9:
90:1c:ff:c7:dc:d8:e6:06:b4:22:d5:e7:07:42:2d:
d6:31:31:16:25:bd:fc:91:b2:e2:da:8d:ee:bf:dc:
05:b3:f7:38:52:e3:bf:a6:1c:90:c8:66:26:a3:a6:
c1:12:3f:28:75:97:5c:2f:64:82:94:0e:ec:e9:7a:
5f:57:c5:aa:42:c1:f3:05:66:0e:11:b1:06:41:6e:
09:d9:78:89:e6:82:09:4b:07:53:ee:7d:3b:14:08:
5e:25:89:e6:09:cb:e1:11:64:2b:b8:47:e6:e7:32:
03:49:aa:98:7f:9a:2e:c0:62:01:e3:52:f8:e0:c4:
ca:5b:2e:99:3a:29:4d:4d:b4:60:34:ce:9e:d2:87:
bd:f4:94:89:c8:55:64:54:92:ff:67:45:d8:6d:c6:
0a:13:f7:6a:5d:be:5c:c0:6c:d9:0b:a0:e0:c8:69:
e6:5c:36:76:5c:b8:b2:d0:8f:50:7c:1b:78:1d:c6:
2a:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:00:96:3F:D8:17:F4:A8:5D:C8:8F:D3:64:19:8F:B1:6B:6A:47:D3
X509v3 Authority Key Identifier:
keyid:42:87:B3:33:21:76:DB:48:6A:2C:BC:42:54:02:FA:9C:86:B6:DC:48
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911ABDD/3AE004B4D77811E4B3778B72C4F9AE02/QoezMyF220hqLLxCVAL6nIa23Eg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QoezMyF220hqLLxCVAL6nIa23Eg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911ABDD/3AE004B4D77811E4B3778B72C4F9AE02/4FA6792A8F6711E6A509C92DC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
180.128.0.0/16
202.44.52.0/22
202.52.4.0/22
203.145.112.0/21
Signature Algorithm: sha256WithRSAEncryption
4a:3c:af:79:7c:38:cb:47:10:8a:04:ef:12:06:0a:4b:60:ff:
4f:7b:9f:2f:15:be:13:cb:34:d7:e8:29:79:97:07:ca:23:d6:
91:25:ac:f3:07:b8:76:8e:70:ad:5b:6c:4e:65:a0:71:2e:b7:
72:8a:82:ac:8c:8e:5e:40:73:81:c4:c6:f6:e1:15:4a:6a:9f:
36:94:40:7e:6b:9a:10:51:66:06:79:67:f6:cd:ed:c9:7b:51:
48:be:7b:a7:51:f2:89:f4:90:45:2d:b9:39:bf:fa:63:d8:1b:
9c:30:5e:dd:c4:4f:cc:e4:ad:96:a2:da:ab:cb:d7:8d:28:25:
49:d9:8d:a7:d5:a9:91:9f:1f:66:06:ed:b0:7c:2e:fe:fe:56:
61:aa:ca:13:48:50:fa:3b:b9:47:20:26:ff:06:0c:ea:68:de:
0e:88:aa:bc:56:29:5b:48:c2:10:07:06:34:c3:59:a6:72:b4:
07:ad:49:0a:15:7d:30:6a:1e:e7:15:5d:70:97:18:f9:1c:26:
01:1d:61:48:91:c9:19:a7:3c:9a:b6:a9:13:2e:73:42:93:c7:
d4:ae:cc:f4:64:dc:76:a5:92:e1:57:14:d8:27:38:8e:12:70:
8b:7f:16:37:26:08:c6:42:a6:d7:b8:36:c4:f1:6a:b5:d0:5d:
a8:67:5f:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 12:41:43 2026 by rpki-client