Route Origin Authorization
$ rpki-client -vvvf rpki.apnic.net/member_repository/A911BD54/3E281C98004911E5B4B64F63C4F9AE02/5DF74F48956211F1AC3F97E96811F970.roa
File: 5DF74F48956211F1AC3F97E96811F970.roa (raw, json)
Hash identifier: agjwA9nqjnI8BwYmCnLbtrkQjvgy1tTIcsqHlNHQPZk=
Subject key identifier: C7:63:AD:EA:60:63:51:7C:DB:C0:91:EB:E6:58:5C:F6:FB:ED:3A:A1
Certificate issuer: /CN=A911BD54/serialNumber=BCFAF8D33F18A8D3602029EBCEDE1E36AF20715C
Certificate serial: 304D
Authority key identifier: BC:FA:F8:D3:3F:18:A8:D3:60:20:29:EB:CE:DE:1E:36:AF:20:71:5C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vPr40z8YqNNgICnrzt4eNq8gcVw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911BD54/3E281C98004911E5B4B64F63C4F9AE02/5DF74F48956211F1AC3F97E96811F970.roa
Signing time: Wed 16 Sep 2026 05:14:17 +0000
ROA not before: Wed 16 Sep 2026 05:14:17 +0000
ROA not after: Tue 02 Mar 2027 00:00:00 +0000
asID: 45430
IP address blocks: 14.207.246.0/24 maxlen: 24
49.0.64.0/18 maxlen: 18
49.229.0.0/16 maxlen: 16
49.229.0.0/20 maxlen: 20
49.229.8.0/24 maxlen: 24
49.229.31.0/24 maxlen: 24
49.229.33.0/24 maxlen: 24
49.229.68.0/24 maxlen: 24
49.229.94.0/24 maxlen: 24
49.229.95.0/24 maxlen: 24
49.229.112.0/21 maxlen: 21
49.229.128.0/17 maxlen: 17
49.229.160.0/19 maxlen: 19
49.229.192.0/19 maxlen: 19
49.229.224.0/19 maxlen: 19
49.230.0.0/16 maxlen: 16
49.230.40.0/24 maxlen: 24
49.230.41.0/24 maxlen: 24
49.230.42.0/24 maxlen: 24
49.230.43.0/24 maxlen: 24
49.231.0.0/16 maxlen: 16
49.231.32.0/21 maxlen: 21
49.231.44.0/22 maxlen: 24
49.231.48.0/20 maxlen: 24
49.231.64.0/21 maxlen: 21
49.231.70.0/24 maxlen: 24
49.231.71.0/24 maxlen: 24
49.231.80.0/20 maxlen: 20
49.231.87.0/24 maxlen: 24
49.231.96.0/19 maxlen: 24
58.64.0.0/17 maxlen: 17
58.64.64.0/18 maxlen: 18
58.136.0.0/16 maxlen: 16
103.3.64.0/22 maxlen: 22
103.3.64.0/24 maxlen: 24
110.49.113.0/24 maxlen: 24
115.178.56.0/22 maxlen: 22
115.178.57.0/24 maxlen: 24
115.178.59.0/24 maxlen: 24
119.31.0.0/17 maxlen: 17
182.232.0.0/16 maxlen: 16
202.80.224.0/19 maxlen: 19
2001:df2:400::/48 maxlen: 48
2001:44c8::/32 maxlen: 32
2405:9800::/32 maxlen: 32
2405:9800:8::/48 maxlen: 48
2405:9800:8::/49 maxlen: 64
2405:9800:8:8000::/49 maxlen: 64
2405:9800:c::/48 maxlen: 48
2405:9800:d::/48 maxlen: 48
2405:9800:10::/48 maxlen: 48
2405:9800:10::/49 maxlen: 64
2405:9800:10:8000::/49 maxlen: 64
2405:9800:12::/48 maxlen: 48
2405:9800:13::/48 maxlen: 48
2405:9800:13::/49 maxlen: 64
2405:9800:14::/48 maxlen: 48
2405:9800:14::/49 maxlen: 64
2405:9800:16::/48 maxlen: 48
2405:9800:16::/49 maxlen: 64
2405:9800:20::/48 maxlen: 48
2405:9800:20::/49 maxlen: 64
2405:9800:20:8000::/49 maxlen: 64
2405:9800:21::/48 maxlen: 48
2405:9800:21::/49 maxlen: 64
2405:9800:21:8000::/49 maxlen: 64
2405:9800:30::/44 maxlen: 48
2405:9800:30::/49 maxlen: 64
2405:9800:30:8000::/49 maxlen: 64
2405:9800:31::/49 maxlen: 64
2405:9800:31:8000::/49 maxlen: 64
2405:9800:40::/48 maxlen: 48
2405:9800:40::/49 maxlen: 64
2405:9800:40:8000::/49 maxlen: 64
2405:9800:41::/48 maxlen: 48
2405:9800:42::/48 maxlen: 48
2405:9800:42::/49 maxlen: 64
2405:9800:42:8000::/49 maxlen: 64
2405:9800:60::/44 maxlen: 44
2405:9800:9800::/48 maxlen: 48
2405:9800:9805::/48 maxlen: 48
2405:9800:9813::/48 maxlen: 48
2405:9800:b000::/36 maxlen: 36
2405:9800:c820::/44 maxlen: 44
2405:9800:c925::/48 maxlen: 48
2405:9800:c92e::/48 maxlen: 48
2405:9800:f00f::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A911BD54/3E281C98004911E5B4B64F63C4F9AE02/vPr40z8YqNNgICnrzt4eNq8gcVw.crl
rsync://rpki.apnic.net/member_repository/A911BD54/3E281C98004911E5B4B64F63C4F9AE02/vPr40z8YqNNgICnrzt4eNq8gcVw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vPr40z8YqNNgICnrzt4eNq8gcVw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 29 Sep 2026 15:21:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 12365 (0x304d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911BD54, serialNumber=BCFAF8D33F18A8D3602029EBCEDE1E36AF20715C
Validity
Not Before: Sep 16 05:14:17 2026 GMT
Not After : Mar 2 00:00:00 2027 GMT
Subject: CN=6aaa25a9-18bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:ae:5b:1d:01:8b:3b:4c:60:81:bf:15:63:34:
7f:a5:63:e7:7c:88:f0:17:b7:54:50:0b:20:a8:57:
94:2a:1a:d6:94:91:e6:91:c3:b8:73:3e:e9:80:be:
f0:6b:59:80:08:b9:01:95:04:3c:74:f4:f9:eb:16:
a4:fe:f9:59:77:10:d0:b0:61:88:25:e7:a3:70:70:
1e:a5:53:3c:1e:55:a2:6a:3d:ce:ba:78:1e:e7:51:
3c:a8:8f:9b:68:c8:de:3a:5e:84:6d:fe:b1:14:ee:
62:34:26:b3:a0:f5:ef:f9:74:91:ca:36:67:57:39:
99:6d:37:84:12:b9:8a:aa:d1:fb:81:36:ce:a0:1f:
ef:73:6e:9a:ea:3b:6b:ad:a1:db:36:98:4b:77:46:
3c:ed:24:b8:eb:42:8c:26:ab:5e:d8:98:04:0c:fd:
0d:ab:0e:a9:1c:e4:6f:61:16:e4:5a:7a:3d:60:4c:
79:51:f6:e8:5b:4a:77:8b:d6:c5:cb:f9:05:bb:4b:
42:bc:58:4a:36:f2:48:5b:29:7d:40:09:8f:70:e4:
69:7a:61:c0:08:8c:9f:d7:52:1f:df:26:77:0b:02:
d8:b4:0f:04:d4:3a:04:c6:50:ba:da:dc:1f:f8:9f:
dc:11:66:77:5a:fc:c9:b7:36:90:03:88:44:74:83:
64:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:63:AD:EA:60:63:51:7C:DB:C0:91:EB:E6:58:5C:F6:FB:ED:3A:A1
X509v3 Authority Key Identifier:
keyid:BC:FA:F8:D3:3F:18:A8:D3:60:20:29:EB:CE:DE:1E:36:AF:20:71:5C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911BD54/3E281C98004911E5B4B64F63C4F9AE02/vPr40z8YqNNgICnrzt4eNq8gcVw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vPr40z8YqNNgICnrzt4eNq8gcVw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911BD54/3E281C98004911E5B4B64F63C4F9AE02/5DF74F48956211F1AC3F97E96811F970.roa
sbgp-ipAddrBlock: critical
IPv4:
14.207.246.0/24
49.0.64.0/18
49.229.0.0-49.231.255.255
58.64.0.0/17
58.136.0.0/16
103.3.64.0/22
110.49.113.0/24
115.178.56.0/22
119.31.0.0/17
182.232.0.0/16
202.80.224.0/19
IPv6:
2001:df2:400::/48
2001:44c8::/32
2405:9800::/32
Signature Algorithm: sha256WithRSAEncryption
01:18:d6:70:a1:8c:32:c3:f1:7f:ec:59:99:1d:b4:b0:9b:9b:
5f:7c:4f:26:24:8c:eb:67:bc:b9:c4:59:ab:b4:31:c4:79:f9:
e7:00:82:61:4d:c9:98:34:d5:f0:41:dc:b5:40:ac:c4:11:8d:
b5:a0:94:cb:d1:f7:33:fc:21:68:02:d4:24:2f:96:4c:a4:64:
0d:83:79:75:45:fb:b5:56:6f:3a:4e:66:77:e7:cb:48:c9:2d:
1d:8b:50:7c:49:6e:5e:76:3d:2f:be:4e:78:18:24:c4:63:96:
bd:20:cb:ac:a8:fa:75:cd:6e:61:91:83:fc:21:e9:97:b1:8c:
d0:53:9d:8e:22:46:d2:ce:1c:3a:dd:f1:34:f8:9d:14:aa:31:
01:55:0c:19:5e:64:64:c6:00:55:84:bc:aa:27:ff:6b:72:f3:
2e:6b:c7:14:b3:b4:d2:44:d6:d8:1d:5d:c0:3d:99:7b:65:8e:
8c:b5:ca:c7:89:2c:fc:f9:73:ca:41:d2:29:6a:cc:a5:39:5b:
c1:f2:fd:d7:f8:27:48:d3:36:52:90:da:39:03:04:45:68:c9:
e0:fd:82:5d:8f:19:db:40:5f:09:22:90:89:ca:f3:2e:64:6a:
ba:05:db:0d:c7:3c:af:79:68:3c:ec:98:9d:5f:2c:f7:b2:22:
d5:c2:84:d1
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Tue Sep 22 20:50:10 2026 by rpki-client