Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A911C5B0/40C8D5A61D8311E2823A5FD808B02CD2/DC67BC1E8E1A11F08364EF73C4F9AE02.roa
File: DC67BC1E8E1A11F08364EF73C4F9AE02.roa (raw, json)
Hash identifier: 7mgw4y6gg1SBlVNEQHsCERtFq1CWUXWcJo30iKspb4c=
Subject key identifier: E3:09:D5:BD:6D:49:19:BC:A0:AB:34:13:4C:5E:44:A7:72:0D:55:0C
Certificate issuer: /CN=A911C5B0/serialNumber=7A961769549E0AAD0A9BF9925683BAEF733A2F1A
Certificate serial: 35ED
Authority key identifier: 7A:96:17:69:54:9E:0A:AD:0A:9B:F9:92:56:83:BA:EF:73:3A:2F:1A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/epYXaVSeCq0Km_mSVoO673M6Lxo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911C5B0/40C8D5A61D8311E2823A5FD808B02CD2/DC67BC1E8E1A11F08364EF73C4F9AE02.roa
Signing time: Tue 28 Jul 2026 15:10:41 +0000
ROA not before: Tue 28 Jul 2026 15:10:41 +0000
ROA not after: Thu 30 Sep 2027 00:00:00 +0000
asID: 23884
IP address blocks: 210.246.200.0/24 maxlen: 24
210.246.201.0/24 maxlen: 24
210.246.202.0/24 maxlen: 24
210.246.206.0/24 maxlen: 24
210.246.207.0/24 maxlen: 24
210.246.208.0/24 maxlen: 24
210.246.209.0/24 maxlen: 24
210.246.210.0/24 maxlen: 24
210.246.211.0/24 maxlen: 24
210.246.212.0/24 maxlen: 24
210.246.213.0/24 maxlen: 24
210.246.214.0/24 maxlen: 24
210.246.215.0/24 maxlen: 24
210.246.216.0/24 maxlen: 24
210.246.217.0/24 maxlen: 24
210.246.218.0/24 maxlen: 24
210.246.219.0/24 maxlen: 24
210.246.230.0/24 maxlen: 24
210.246.231.0/24 maxlen: 24
210.246.236.0/24 maxlen: 24
210.246.237.0/24 maxlen: 24
210.246.239.0/24 maxlen: 24
210.246.245.0/24 maxlen: 24
210.246.246.0/24 maxlen: 24
210.246.247.0/24 maxlen: 24
210.246.248.0/24 maxlen: 24
210.246.249.0/24 maxlen: 24
210.246.250.0/24 maxlen: 24
210.246.251.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A911C5B0/40C8D5A61D8311E2823A5FD808B02CD2/epYXaVSeCq0Km_mSVoO673M6Lxo.crl
rsync://rpki.apnic.net/member_repository/A911C5B0/40C8D5A61D8311E2823A5FD808B02CD2/epYXaVSeCq0Km_mSVoO673M6Lxo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/epYXaVSeCq0Km_mSVoO673M6Lxo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 04 Aug 2026 15:10:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13805 (0x35ed)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911C5B0, serialNumber=7A961769549E0AAD0A9BF9925683BAEF733A2F1A
Validity
Not Before: Jul 28 15:10:41 2026 GMT
Not After : Sep 30 00:00:00 2027 GMT
Subject: CN=6a68c671-8f39
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:ac:a0:59:a6:1f:28:0d:74:67:96:ce:ca:8f:
ec:e6:33:6a:39:25:ac:33:6a:95:f1:a6:22:1d:7f:
eb:c3:d4:cd:c0:31:f9:be:a7:00:53:29:e4:99:4b:
04:de:3c:2e:b0:70:03:72:fe:dd:d5:b6:19:b9:98:
06:22:a2:84:dd:64:58:aa:66:6a:a3:36:dd:86:84:
c6:5d:1a:34:e6:76:8f:90:a1:bb:50:8b:8a:a4:18:
ff:12:ac:19:ea:c3:96:35:0a:9e:8c:6c:54:5d:4a:
5c:17:f6:32:ee:e5:fb:88:ad:4b:3a:55:b7:c1:71:
ba:7e:28:02:a2:36:62:67:e3:ec:97:72:5c:d5:9a:
41:a3:ef:c2:97:29:97:2a:5e:75:07:e6:8e:ef:a4:
9b:c7:48:af:ab:f8:78:d2:2a:bf:27:6c:ee:60:0c:
c9:7b:42:8b:e5:7b:67:b2:e4:1e:9b:14:10:44:c9:
2c:2b:46:2c:21:21:e4:56:31:7f:e7:78:80:0a:dc:
dc:cb:ee:21:10:a4:de:a3:d5:59:52:2f:4f:8a:cf:
07:31:bc:7c:8a:15:9a:b2:b2:94:87:e0:9c:b7:c3:
a6:18:84:80:91:ad:da:be:4d:f9:b1:e5:e7:94:32:
8d:07:9a:8c:59:9b:4c:d3:d8:cc:e3:71:58:7a:2e:
7b:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:09:D5:BD:6D:49:19:BC:A0:AB:34:13:4C:5E:44:A7:72:0D:55:0C
X509v3 Authority Key Identifier:
keyid:7A:96:17:69:54:9E:0A:AD:0A:9B:F9:92:56:83:BA:EF:73:3A:2F:1A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911C5B0/40C8D5A61D8311E2823A5FD808B02CD2/epYXaVSeCq0Km_mSVoO673M6Lxo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/epYXaVSeCq0Km_mSVoO673M6Lxo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911C5B0/40C8D5A61D8311E2823A5FD808B02CD2/DC67BC1E8E1A11F08364EF73C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
210.246.200.0-210.246.202.255
210.246.206.0-210.246.219.255
210.246.230.0/23
210.246.236.0/23
210.246.239.0/24
210.246.245.0-210.246.251.255
Signature Algorithm: sha256WithRSAEncryption
6b:b9:d8:4a:da:a1:8b:f7:d2:0d:2a:8a:fd:66:fb:88:ab:8d:
1e:3f:94:57:ae:75:49:41:a0:dc:d9:aa:50:32:4d:04:a5:e2:
69:cc:02:05:6e:01:f0:9d:01:ab:4c:7c:86:5e:3f:e7:85:c2:
9f:92:7a:91:c5:08:2d:86:cf:3c:1c:ed:ee:c1:48:8d:fb:2a:
9c:53:9b:90:26:47:aa:0c:70:62:1b:cb:ae:09:e9:78:cf:4e:
53:28:78:04:49:9f:fe:6d:26:e6:96:52:0a:7a:88:74:0b:6e:
0c:28:35:d9:03:71:b9:31:1b:de:02:73:2b:b8:58:97:6e:e9:
fa:2f:e4:65:7b:62:14:cb:77:3f:ff:b0:fa:ed:50:bb:4d:33:
bd:32:17:e9:52:45:a1:6f:b7:f7:fe:4b:ea:eb:e3:8f:3f:3d:
83:aa:99:50:f9:19:b3:fb:36:de:8e:0a:c7:c0:f6:37:b2:dd:
8f:7f:51:99:61:01:e8:a4:da:7d:b0:d2:e8:86:18:7c:ef:58:
df:1d:c3:ea:e5:b5:34:99:5e:5c:4d:54:05:a5:6a:bc:a1:1c:
37:80:cd:7f:07:34:bf:94:56:89:30:27:46:e5:4f:46:96:38:
a4:2e:48:80:6e:4f:3a:3f:36:1a:42:bd:d4:aa:f7:b9:92:85:
e2:1c:70:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 22:52:16 2026 by rpki-client