Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A911C5B0/40C8D5A61D8311E2823A5FD808B02CD2/A9B6556E064311F0BA61C549C4F9AE02.roa
File: A9B6556E064311F0BA61C549C4F9AE02.roa (raw, json)
Hash identifier: jTPpPZ5LH71JdUajcwKXpYreDPG+XIGjiYKM4RGwxFk=
Subject key identifier: 72:78:F0:9B:D6:14:74:36:CA:18:4B:00:E9:64:4D:74:E3:4D:33:A1
Certificate issuer: /CN=A911C5B0/serialNumber=7A961769549E0AAD0A9BF9925683BAEF733A2F1A
Certificate serial: 35F0
Authority key identifier: 7A:96:17:69:54:9E:0A:AD:0A:9B:F9:92:56:83:BA:EF:73:3A:2F:1A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/epYXaVSeCq0Km_mSVoO673M6Lxo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911C5B0/40C8D5A61D8311E2823A5FD808B02CD2/A9B6556E064311F0BA61C549C4F9AE02.roa
Signing time: Tue 28 Jul 2026 15:10:46 +0000
ROA not before: Tue 28 Jul 2026 15:10:46 +0000
ROA not after: Thu 30 Sep 2027 00:00:00 +0000
asID: 4741
IP address blocks: 203.149.0.0/18 maxlen: 18
203.149.0.0/19 maxlen: 19
203.149.0.0/20 maxlen: 20
203.149.0.0/22 maxlen: 22
203.149.0.0/24 maxlen: 24
203.149.6.0/24 maxlen: 24
203.149.8.0/24 maxlen: 24
203.149.9.0/24 maxlen: 24
203.149.10.0/24 maxlen: 24
203.149.11.0/24 maxlen: 24
203.149.16.0/20 maxlen: 20
203.149.20.0/24 maxlen: 24
203.149.21.0/24 maxlen: 24
203.149.29.0/24 maxlen: 24
203.149.31.0/24 maxlen: 24
203.149.32.0/19 maxlen: 19
203.149.32.0/24 maxlen: 24
203.149.37.0/24 maxlen: 24
203.149.38.0/24 maxlen: 24
203.149.44.0/24 maxlen: 24
203.149.45.0/24 maxlen: 24
203.149.46.0/23 maxlen: 23
203.149.48.0/20 maxlen: 20
203.149.62.0/24 maxlen: 24
203.149.63.0/24 maxlen: 24
210.246.64.0/18 maxlen: 18
210.246.64.0/19 maxlen: 19
210.246.64.0/20 maxlen: 20
210.246.80.0/20 maxlen: 20
210.246.96.0/19 maxlen: 19
210.246.96.0/20 maxlen: 20
210.246.112.0/20 maxlen: 20
210.246.128.0/17 maxlen: 17
210.246.128.0/18 maxlen: 18
210.246.128.0/20 maxlen: 20
210.246.144.0/20 maxlen: 20
210.246.150.0/24 maxlen: 24
210.246.151.0/24 maxlen: 24
210.246.152.0/24 maxlen: 24
210.246.154.0/24 maxlen: 24
210.246.155.0/24 maxlen: 24
210.246.176.0/20 maxlen: 20
210.246.176.0/21 maxlen: 21
210.246.176.0/24 maxlen: 24
210.246.177.0/24 maxlen: 24
210.246.178.0/24 maxlen: 24
210.246.179.0/24 maxlen: 24
210.246.184.0/21 maxlen: 21
210.246.184.0/24 maxlen: 24
210.246.185.0/24 maxlen: 24
210.246.186.0/24 maxlen: 24
210.246.187.0/24 maxlen: 24
210.246.188.0/24 maxlen: 24
210.246.192.0/18 maxlen: 18
210.246.192.0/20 maxlen: 20
210.246.232.0/22 maxlen: 22
210.246.253.0/24 maxlen: 24
2403:c000::/32 maxlen: 32
2403:c000:1000::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A911C5B0/40C8D5A61D8311E2823A5FD808B02CD2/epYXaVSeCq0Km_mSVoO673M6Lxo.crl
rsync://rpki.apnic.net/member_repository/A911C5B0/40C8D5A61D8311E2823A5FD808B02CD2/epYXaVSeCq0Km_mSVoO673M6Lxo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/epYXaVSeCq0Km_mSVoO673M6Lxo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 04 Aug 2026 15:10:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13808 (0x35f0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911C5B0, serialNumber=7A961769549E0AAD0A9BF9925683BAEF733A2F1A
Validity
Not Before: Jul 28 15:10:46 2026 GMT
Not After : Sep 30 00:00:00 2027 GMT
Subject: CN=6a68c676-281a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:77:52:1c:ab:19:43:ab:84:28:61:65:74:db:
8e:59:29:bd:d2:d0:93:fd:f0:43:5a:ca:19:7d:fb:
df:72:7b:d8:af:c1:d0:59:03:69:81:44:05:e3:b6:
9a:2b:55:8e:54:7e:d6:23:bc:cc:54:87:2d:7c:cb:
5a:02:ca:16:4c:c8:90:ec:1a:a6:96:5d:fa:c0:41:
3d:65:b5:75:35:4b:73:b9:d1:82:14:5e:7e:98:47:
f7:97:81:87:17:1a:eb:14:23:7c:80:1b:07:9c:39:
85:66:03:29:f1:aa:c6:e2:20:d0:ed:9d:94:16:cf:
58:fb:55:5f:05:3a:01:42:fd:5e:ef:c1:d5:ee:cb:
b6:c3:ae:66:b2:54:34:8e:6a:f2:0b:4f:d6:1d:5b:
5a:26:87:33:66:f8:25:35:1d:44:11:2b:18:79:da:
e3:7d:27:36:ba:31:ac:22:7e:e2:71:48:a5:cb:e4:
12:51:4f:53:db:61:08:08:32:75:dd:13:93:9c:03:
a9:fd:f3:f6:5f:9f:ab:24:9b:ff:ac:bf:ce:3e:c2:
17:7b:27:9c:1d:09:b1:bb:23:93:6b:a6:f4:63:b3:
17:d2:41:6e:6f:50:c3:5a:6e:ad:bb:d6:58:ed:8d:
ca:d0:ac:48:31:25:38:96:33:ca:8f:86:c8:76:83:
68:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:78:F0:9B:D6:14:74:36:CA:18:4B:00:E9:64:4D:74:E3:4D:33:A1
X509v3 Authority Key Identifier:
keyid:7A:96:17:69:54:9E:0A:AD:0A:9B:F9:92:56:83:BA:EF:73:3A:2F:1A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911C5B0/40C8D5A61D8311E2823A5FD808B02CD2/epYXaVSeCq0Km_mSVoO673M6Lxo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/epYXaVSeCq0Km_mSVoO673M6Lxo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911C5B0/40C8D5A61D8311E2823A5FD808B02CD2/A9B6556E064311F0BA61C549C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
203.149.0.0/18
210.246.64.0-210.246.255.255
IPv6:
2403:c000::/32
Signature Algorithm: sha256WithRSAEncryption
80:d9:ae:80:0c:ab:53:ff:72:d4:3f:8b:5e:00:6a:4b:96:10:
bc:03:80:f7:fc:8a:5e:ec:ed:43:83:93:db:36:ea:9e:76:9e:
d4:29:c3:83:bc:d2:39:67:15:61:21:d1:92:69:79:29:47:82:
55:86:9b:bb:53:4a:5e:07:a3:1d:54:93:1d:d4:e1:5e:55:ca:
b6:40:7a:f2:6d:07:b5:94:16:4a:c5:79:a3:0e:e2:83:ba:a7:
2e:8c:4c:36:7b:ce:01:a3:27:4f:9f:0c:56:42:37:2b:cc:eb:
07:7a:3a:b1:66:5e:9d:37:5c:43:6e:f3:31:29:99:e7:78:c5:
7c:1a:e9:93:28:6a:29:f7:e7:3f:8c:71:e7:80:db:d1:f4:57:
0a:7c:87:79:c8:47:4c:f2:85:cc:37:de:ed:c8:a4:a5:cf:6a:
03:ea:03:25:34:18:c7:49:6a:30:ff:f4:b3:c0:fb:d5:44:02:
93:05:4b:5d:06:48:54:ab:62:81:aa:2b:cc:dc:cc:49:f7:78:
83:34:c6:9e:f2:7a:7e:0c:1a:b2:26:1f:17:96:9a:79:2b:98:
bc:c4:67:8e:31:b5:8c:6e:f1:7d:9e:98:d0:c2:39:5f:9c:64:
93:17:d9:84:5f:22:43:7a:e0:70:ef:70:59:c4:59:f5:c8:0d:
9e:5a:6f:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 04:33:49 2026 by rpki-client