Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A911C362/6A08F492257711EFBB0B8251C4F9AE02/F6F5564601C811F1888DF3AC726F56BC.roa
File: F6F5564601C811F1888DF3AC726F56BC.roa (raw, json)
Hash identifier: vVryTwQ+ebHsbPlYE5VbAAx34XCzBrPDiS7AfOcev4g=
Subject key identifier: F5:37:85:D4:CA:52:1C:05:4C:F7:55:45:2F:84:ED:AF:5E:D4:4F:EC
Certificate issuer: /CN=A911C362/serialNumber=EA83AF4A21CBC2071F56956E5DDD584C7638FA5B
Certificate serial: 019A
Authority key identifier: EA:83:AF:4A:21:CB:C2:07:1F:56:95:6E:5D:DD:58:4C:76:38:FA:5B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6oOvSiHLwgcfVpVuXd1YTHY4-ls.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911C362/6A08F492257711EFBB0B8251C4F9AE02/F6F5564601C811F1888DF3AC726F56BC.roa
Signing time: Sun 01 Mar 2026 16:17:25 +0000
ROA not before: Wed 04 Feb 2026 12:56:47 +0000
ROA not after: Mon 31 Aug 2026 00:00:00 +0000
asID: 132335
IP address blocks: 43.230.200.0/24 maxlen: 24
43.230.201.0/24 maxlen: 24
43.230.202.0/24 maxlen: 24
45.64.104.0/24 maxlen: 24
45.64.105.0/24 maxlen: 24
45.64.106.0/24 maxlen: 24
45.113.225.0/24 maxlen: 24
45.120.136.0/22 maxlen: 22
45.120.136.0/24 maxlen: 24
45.120.137.0/24 maxlen: 24
45.120.138.0/24 maxlen: 24
45.120.139.0/24 maxlen: 24
103.12.211.0/24 maxlen: 24
103.13.112.0/24 maxlen: 24
103.13.113.0/24 maxlen: 24
103.13.114.0/24 maxlen: 24
103.13.115.0/24 maxlen: 24
103.26.204.0/22 maxlen: 24
103.250.184.0/23 maxlen: 24
157.119.40.0/24 maxlen: 24
2001:df2:1000::/48 maxlen: 48
2001:df2:1001::/48 maxlen: 48
2405:7140::/48 maxlen: 48
2405:7140:1::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A911C362/6A08F492257711EFBB0B8251C4F9AE02/6oOvSiHLwgcfVpVuXd1YTHY4-ls.crl
rsync://rpki.apnic.net/member_repository/A911C362/6A08F492257711EFBB0B8251C4F9AE02/6oOvSiHLwgcfVpVuXd1YTHY4-ls.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6oOvSiHLwgcfVpVuXd1YTHY4-ls.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 01:28:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 410 (0x19a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911C362, serialNumber=EA83AF4A21CBC2071F56956E5DDD584C7638FA5B
Validity
Not Before: Feb 4 12:56:47 2026 GMT
Not After : Aug 31 00:00:00 2026 GMT
Subject: CN=69a46695-0c4e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:0f:bd:43:21:29:ee:2e:8b:43:00:11:a6:5a:
29:fd:75:2f:2e:31:29:e6:77:d6:88:0d:82:02:40:
74:4d:5a:4e:1b:14:06:60:2f:4e:f2:d2:18:47:8f:
22:e0:be:7d:16:20:71:a4:4d:f4:0c:d2:52:4b:97:
df:62:f1:fc:04:40:8c:3d:a3:e0:a2:84:77:b1:19:
95:6e:59:09:0e:5f:2b:c6:fa:92:d2:fc:d3:14:52:
d8:36:77:01:fb:a2:8d:f1:e6:d1:fa:bf:21:73:37:
91:58:91:09:30:8e:6d:d5:e3:24:3b:7e:73:16:4b:
dd:95:79:10:ec:ba:96:ee:1c:d5:b6:9c:72:22:4c:
0c:4c:ff:1b:ff:89:e0:7c:55:3a:a3:26:4a:ac:07:
fd:a9:61:65:33:c4:da:da:0c:cf:a0:6e:bc:53:af:
40:80:ec:eb:13:9b:68:47:56:98:c5:b9:55:62:ca:
9b:2d:5d:30:05:33:b2:14:ce:ca:08:90:02:5b:78:
b5:29:89:c6:7a:a9:af:28:24:34:e2:e3:c1:05:96:
ae:39:bc:89:f5:8b:66:b8:4e:9f:32:06:2e:09:c8:
51:b0:11:ca:41:fd:f1:9a:da:08:1b:6d:0f:a1:fe:
58:21:c3:d8:78:f6:2b:33:d8:99:6c:79:e4:ba:2e:
09:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:37:85:D4:CA:52:1C:05:4C:F7:55:45:2F:84:ED:AF:5E:D4:4F:EC
X509v3 Authority Key Identifier:
keyid:EA:83:AF:4A:21:CB:C2:07:1F:56:95:6E:5D:DD:58:4C:76:38:FA:5B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911C362/6A08F492257711EFBB0B8251C4F9AE02/6oOvSiHLwgcfVpVuXd1YTHY4-ls.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6oOvSiHLwgcfVpVuXd1YTHY4-ls.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911C362/6A08F492257711EFBB0B8251C4F9AE02/F6F5564601C811F1888DF3AC726F56BC.roa
sbgp-ipAddrBlock: critical
IPv4:
43.230.200.0-43.230.202.255
45.64.104.0-45.64.106.255
45.113.225.0/24
45.120.136.0/22
103.12.211.0/24
103.13.112.0/22
103.26.204.0/22
103.250.184.0/23
157.119.40.0/24
IPv6:
2001:df2:1000::/47
2405:7140::/47
Signature Algorithm: sha256WithRSAEncryption
39:fc:f0:da:48:86:47:7c:52:1b:80:14:a7:6c:0d:73:25:a9:
64:49:9b:66:1f:80:38:bc:32:da:96:b6:44:75:de:bf:b9:e5:
48:14:82:a9:38:37:5e:cb:23:a0:bc:17:bc:3f:de:47:59:c1:
4a:70:ca:f5:2f:7b:87:42:12:bf:2d:1f:ff:1e:30:c5:b5:83:
64:f1:9a:0b:37:86:a5:1b:46:84:c0:7d:86:12:d3:34:9e:48:
91:d9:23:ee:c1:af:6b:14:dc:8e:a8:86:87:33:2e:cc:aa:fa:
55:11:ab:be:32:b1:6c:80:db:a6:51:c0:69:5f:c7:41:27:81:
a0:34:5f:ea:8b:d1:84:7e:21:af:7a:9e:ac:80:dc:73:66:81:
ae:8b:f3:f8:89:cc:fd:7d:dc:62:46:56:41:32:e1:fb:f8:6b:
7a:cf:dc:aa:ba:39:6c:c9:cc:58:a9:fc:99:19:b1:7f:24:5d:
d4:aa:d2:2d:7f:ca:01:20:9e:b9:31:52:3f:55:d2:4e:20:82:
30:f1:fa:9f:18:42:91:c4:f5:5d:8b:30:6b:e9:33:b8:98:6c:
fd:f7:24:26:49:3d:fb:2f:3b:66:50:fc:1a:61:03:b5:3f:0b:
4d:fd:34:29:38:e6:bb:b0:52:59:f4:cc:84:43:90:cc:9c:cd:
69:5e:60:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 09:26:54 2026 by rpki-client