Route Origin Authorization
$ rpki-client -vvvf rpki.apnic.net/member_repository/A911C362/6A08F492257711EFBB0B8251C4F9AE02/6492D4985B9011EF8DB48C24C4F9AE02.roa
File: 6492D4985B9011EF8DB48C24C4F9AE02.roa (raw, json)
Hash identifier: 1TF355JzlXgriBJcX04jFFPZcrOg0ofrrer/SDDZmq4=
Subject key identifier: 28:1A:B4:B5:E8:05:9D:97:AB:04:DB:16:19:CB:1D:BB:27:49:AC:D5
Certificate issuer: /CN=A911C362/serialNumber=EA83AF4A21CBC2071F56956E5DDD584C7638FA5B
Certificate serial: 022A
Authority key identifier: EA:83:AF:4A:21:CB:C2:07:1F:56:95:6E:5D:DD:58:4C:76:38:FA:5B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6oOvSiHLwgcfVpVuXd1YTHY4-ls.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911C362/6A08F492257711EFBB0B8251C4F9AE02/6492D4985B9011EF8DB48C24C4F9AE02.roa
Signing time: Mon 12 Oct 2026 06:19:43 +0000
ROA not before: Mon 12 Oct 2026 06:19:43 +0000
ROA not after: Tue 31 Aug 2027 00:00:00 +0000
asID: 146943
IP address blocks: 43.230.200.0/24 maxlen: 24
43.230.201.0/24 maxlen: 24
43.230.202.0/24 maxlen: 24
43.230.203.0/24 maxlen: 24
45.64.105.0/24 maxlen: 24
45.64.107.0/24 maxlen: 24
45.113.224.0/24 maxlen: 24
45.113.225.0/24 maxlen: 24
45.113.226.0/24 maxlen: 24
45.113.227.0/24 maxlen: 24
45.120.137.0/24 maxlen: 24
45.120.138.0/24 maxlen: 24
103.13.112.0/24 maxlen: 24
103.13.113.0/24 maxlen: 24
103.13.114.0/24 maxlen: 24
103.13.115.0/24 maxlen: 24
103.26.205.0/24 maxlen: 24
103.26.207.0/24 maxlen: 24
103.250.186.0/24 maxlen: 24
157.119.40.0/24 maxlen: 24
157.119.41.0/24 maxlen: 24
157.119.42.0/24 maxlen: 24
157.119.43.0/24 maxlen: 24
2405:7140:1::/48 maxlen: 48
2405:7140:2::/48 maxlen: 48
2405:7140:4::/48 maxlen: 48
2405:7140:5::/48 maxlen: 48
2405:7140:6::/48 maxlen: 48
2405:7140:7::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A911C362/6A08F492257711EFBB0B8251C4F9AE02/6oOvSiHLwgcfVpVuXd1YTHY4-ls.crl
rsync://rpki.apnic.net/member_repository/A911C362/6A08F492257711EFBB0B8251C4F9AE02/6oOvSiHLwgcfVpVuXd1YTHY4-ls.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6oOvSiHLwgcfVpVuXd1YTHY4-ls.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 20 Oct 2026 04:30:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 554 (0x22a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911C362, serialNumber=EA83AF4A21CBC2071F56956E5DDD584C7638FA5B
Validity
Not Before: Oct 12 06:19:43 2026 GMT
Not After : Aug 31 00:00:00 2027 GMT
Subject: CN=6acc7bfe-5c89
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:21:c3:b5:88:ca:57:ef:b3:06:6d:8d:a4:63:
b7:47:6b:09:e6:54:fa:30:75:23:e1:1d:73:15:d2:
94:d1:09:aa:55:b1:72:41:6d:56:57:5e:b5:a7:33:
ec:87:7c:06:4a:44:53:95:1e:74:1c:4a:20:7d:4d:
e8:a5:7d:80:d0:ad:e2:93:b5:67:fb:c3:77:9a:2b:
74:1c:9b:69:5b:fe:a1:d1:11:90:75:b7:e5:f6:90:
eb:b5:6e:95:de:86:72:f3:38:08:23:09:e1:44:79:
ba:bd:26:2d:fe:1c:cc:8e:77:19:8b:da:28:19:af:
31:19:8a:d9:3b:ca:f9:ef:fc:33:28:c1:c7:22:33:
7a:32:5c:bb:c4:df:d3:01:92:02:1d:ea:23:f0:8a:
9a:ea:a0:02:05:05:51:ae:c4:b3:ef:5a:91:61:bc:
28:f3:08:36:bb:9c:37:ad:d0:73:f3:4e:49:44:fe:
f1:e7:63:df:fb:3c:3d:53:97:61:10:2c:f4:12:d0:
7a:4d:ef:51:ec:7a:0b:d7:af:f9:60:0e:0e:77:df:
9b:63:c8:ed:0b:52:90:41:bc:8e:ef:b1:8e:9a:fb:
78:92:f9:a0:d0:26:b8:bb:13:4b:1c:7d:b2:67:46:
f8:92:cd:6b:97:92:dd:a1:50:87:e3:3e:3d:5e:13:
ed:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:1A:B4:B5:E8:05:9D:97:AB:04:DB:16:19:CB:1D:BB:27:49:AC:D5
X509v3 Authority Key Identifier:
keyid:EA:83:AF:4A:21:CB:C2:07:1F:56:95:6E:5D:DD:58:4C:76:38:FA:5B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911C362/6A08F492257711EFBB0B8251C4F9AE02/6oOvSiHLwgcfVpVuXd1YTHY4-ls.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6oOvSiHLwgcfVpVuXd1YTHY4-ls.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911C362/6A08F492257711EFBB0B8251C4F9AE02/6492D4985B9011EF8DB48C24C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
43.230.200.0/22
45.64.105.0/24
45.64.107.0/24
45.113.224.0/22
45.120.137.0-45.120.138.255
103.13.112.0/22
103.26.205.0/24
103.26.207.0/24
103.250.186.0/24
157.119.40.0/22
IPv6:
2405:7140:1::-2405:7140:2:ffff:ffff:ffff:ffff:ffff
2405:7140:4::/46
Signature Algorithm: sha256WithRSAEncryption
17:03:7c:db:24:7e:25:67:81:ae:90:f8:51:92:f2:22:cc:3a:
f8:2f:e2:7b:29:70:08:f7:c4:9f:46:01:22:87:d3:ee:35:6d:
32:35:c3:69:aa:5a:41:bb:45:80:87:b1:ec:e4:69:69:60:b7:
9a:e1:37:f0:8f:94:09:ac:a8:8f:53:32:38:d4:5c:96:d2:0a:
cd:40:d1:2f:27:75:55:71:98:40:9d:1b:74:f9:d6:2b:25:3b:
c6:23:9a:72:86:6d:f0:1b:3c:d8:41:bf:0c:48:1c:c6:d0:d8:
20:41:63:70:e3:48:36:bd:7e:80:75:f7:6d:d8:37:73:d4:7e:
30:26:76:d4:5c:87:3f:ab:6d:e5:cc:70:cc:f6:f4:56:74:f3:
5a:ba:5d:f7:57:39:c4:26:8d:b5:ad:5f:07:42:9c:00:6d:db:
b7:8f:1a:8e:7c:6e:34:96:2e:0f:36:e1:93:66:a7:d8:08:e1:
b2:49:8b:0e:3e:c2:68:9c:fd:55:73:23:8d:ff:64:b2:6f:cf:
4d:bd:12:9e:31:af:f4:d3:73:9e:a6:56:2d:b9:ca:2b:a4:a4:
90:f8:e4:11:c9:64:99:58:77:92:92:d0:7b:14:56:19:dd:74:
9e:d9:c2:99:53:a2:1c:65:59:b6:a3:db:f1:e8:63:e1:22:52:
56:01:29:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 05:29:28 2026 by rpki-client