Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A911D75C/2BC5FD4006C011EABC43B709C4F9AE02/D56F7FF2635611F1B3748DBC9B47A888.roa
File: D56F7FF2635611F1B3748DBC9B47A888.roa (raw, json)
Hash identifier: dsJg18m5mrxYhkg7yugi1O9ZuT6p9PFj0K0zE1hSxQU=
Subject key identifier: 0A:15:E6:EF:3D:60:2C:B9:1F:11:11:36:46:47:8E:F7:EC:4C:3D:EC
Certificate issuer: /CN=A911D75C/serialNumber=1A1A40AD93A4A4307ED7264D47D252CAF62DEFFD
Certificate serial: 0DE0
Authority key identifier: 1A:1A:40:AD:93:A4:A4:30:7E:D7:26:4D:47:D2:52:CA:F6:2D:EF:FD
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GhpArZOkpDB-1yZNR9JSyvYt7_0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911D75C/2BC5FD4006C011EABC43B709C4F9AE02/D56F7FF2635611F1B3748DBC9B47A888.roa
Signing time: Mon 08 Jun 2026 16:26:42 +0000
ROA not before: Mon 08 Jun 2026 16:26:42 +0000
ROA not after: Wed 30 Sep 2026 00:00:00 +0000
asID: 134371
IP address blocks: 103.62.140.0/22 maxlen: 24
202.136.88.0/22 maxlen: 24
2400:3dc0::/32 maxlen: 32
2400:3dc0::/36 maxlen: 36
2400:3dc0::/44 maxlen: 48
2400:3dc0:10::/44 maxlen: 48
2400:3dc0:2e::/48 maxlen: 48
2400:3dc0:2f::/48 maxlen: 48
2400:3dc0:3e::/48 maxlen: 48
2400:3dc0:3f::/48 maxlen: 48
2400:3dc0:40::/44 maxlen: 47
2400:3dc0:40::/48 maxlen: 48
2400:3dc0:43::/48 maxlen: 48
2400:3dc0:45::/48 maxlen: 48
2400:3dc0:46::/48 maxlen: 48
2400:3dc0:49::/48 maxlen: 48
2400:3dc0:4b::/48 maxlen: 48
2400:3dc0:4c::/48 maxlen: 48
2400:3dc0:50::/44 maxlen: 47
2400:3dc0:57::/48 maxlen: 48
2400:3dc0:58::/48 maxlen: 48
2400:3dc0:5a::/47 maxlen: 48
2400:3dc0:60::/44 maxlen: 47
2400:3dc0:60::/47 maxlen: 48
2400:3dc0:68::/47 maxlen: 48
2400:3dc0:6a::/48 maxlen: 48
2400:3dc0:6c::/48 maxlen: 48
2400:3dc0:6e::/47 maxlen: 48
2400:3dc0:70::/48 maxlen: 48
2400:3dc0:78::/48 maxlen: 48
2400:3dc0:7b::/48 maxlen: 48
2400:3dc0:89::/48 maxlen: 48
2400:3dc0:100::/48 maxlen: 48
2400:3dc0:101::/48 maxlen: 48
2400:3dc0:140::/48 maxlen: 48
2400:3dc0:200::/48 maxlen: 48
2400:3dc0:201::/48 maxlen: 48
2400:3dc0:300::/48 maxlen: 48
2400:3dc0:400::/48 maxlen: 48
2400:3dc0:500::/48 maxlen: 48
2400:3dc0:600::/48 maxlen: 48
2400:3dc0:700::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A911D75C/2BC5FD4006C011EABC43B709C4F9AE02/GhpArZOkpDB-1yZNR9JSyvYt7_0.crl
rsync://rpki.apnic.net/member_repository/A911D75C/2BC5FD4006C011EABC43B709C4F9AE02/GhpArZOkpDB-1yZNR9JSyvYt7_0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GhpArZOkpDB-1yZNR9JSyvYt7_0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 19 Jun 2026 18:14:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3552 (0xde0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911D75C, serialNumber=1A1A40AD93A4A4307ED7264D47D252CAF62DEFFD
Validity
Not Before: Jun 8 16:26:42 2026 GMT
Not After : Sep 30 00:00:00 2026 GMT
Subject: CN=6a26ed42-6d9f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:11:b9:c7:20:7e:52:67:2a:7c:30:82:db:e9:
ff:29:ff:a2:75:f3:d7:d7:ce:74:68:f9:cb:39:b4:
90:2f:6d:b9:2e:0b:53:7a:00:3e:51:cb:fc:62:ca:
0e:08:e6:c1:5b:77:b0:45:28:32:1c:45:52:2e:2b:
b5:41:e5:3c:97:ae:7e:95:56:03:0d:d0:9c:b9:12:
46:ad:e6:eb:b0:d0:d4:4e:ae:00:6e:c0:0e:b6:2b:
ee:f8:31:29:10:87:c2:af:ce:72:de:46:0f:05:3b:
8d:52:92:39:70:32:0d:d1:25:c3:9c:ca:84:34:8a:
fd:c8:e7:46:4b:a8:57:40:e4:f5:5c:ef:36:38:31:
78:39:99:77:6c:29:b1:cb:a5:3e:1b:b2:4a:4f:36:
0b:7b:c7:70:ed:ab:74:b4:8a:bb:20:86:7d:12:14:
46:33:99:81:af:7b:5b:27:4c:dc:18:7c:36:bf:aa:
53:a4:90:88:73:9a:9b:9d:20:e3:30:61:c2:d1:71:
3c:8e:9d:7d:53:73:98:af:63:6e:5c:ce:b4:f7:b3:
a2:05:f9:1b:0c:63:f1:63:f4:09:16:4b:d9:e1:db:
99:fc:3d:13:fd:f2:d0:ba:d2:ce:6a:97:3c:11:29:
8a:9f:71:a6:42:5f:56:57:e1:58:dc:c2:42:09:65:
94:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:15:E6:EF:3D:60:2C:B9:1F:11:11:36:46:47:8E:F7:EC:4C:3D:EC
X509v3 Authority Key Identifier:
keyid:1A:1A:40:AD:93:A4:A4:30:7E:D7:26:4D:47:D2:52:CA:F6:2D:EF:FD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911D75C/2BC5FD4006C011EABC43B709C4F9AE02/GhpArZOkpDB-1yZNR9JSyvYt7_0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GhpArZOkpDB-1yZNR9JSyvYt7_0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911D75C/2BC5FD4006C011EABC43B709C4F9AE02/D56F7FF2635611F1B3748DBC9B47A888.roa
sbgp-ipAddrBlock: critical
IPv4:
103.62.140.0/22
202.136.88.0/22
IPv6:
2400:3dc0::/32
Signature Algorithm: sha256WithRSAEncryption
08:f5:f0:8b:73:36:7c:10:e7:22:ba:ec:ec:14:c0:2c:2d:0d:
54:93:82:55:b9:5e:61:1d:2a:96:b7:90:76:52:2f:5d:a5:f9:
94:5b:92:c5:72:92:84:6f:f4:4e:d9:7a:e8:81:8b:4e:47:bb:
fe:3d:60:c3:08:51:48:11:eb:fc:89:75:47:b1:15:66:45:a9:
43:99:49:c3:78:8b:20:14:06:35:6d:b1:14:f2:49:27:1e:7b:
43:4c:5e:bc:ad:ed:79:91:96:b8:74:79:c4:4f:16:af:27:dc:
dd:aa:e2:d8:dd:4d:e3:8a:95:4f:bc:60:7f:56:21:5b:41:ca:
2e:a3:63:09:71:52:95:dd:0b:bf:25:9e:92:e3:30:fe:f2:b1:
70:72:74:9e:7a:98:29:bc:68:0a:a4:ee:5a:bb:e6:2c:dd:86:
0c:6b:83:c8:8d:b9:81:0d:0b:28:98:c6:cb:c3:f6:f9:43:27:
65:d4:ef:5f:06:58:cb:9b:1f:03:3e:68:01:22:25:a6:cb:ee:
3f:30:4e:2e:64:01:dd:03:68:4a:87:8c:1b:fd:a3:76:5a:9e:
73:4e:9b:2b:b1:b9:63:bb:b9:90:cc:17:7e:aa:d0:f0:ab:7d:
2c:10:60:7a:c7:95:46:3f:92:84:00:df:4c:7b:af:1f:f1:ba:
e0:c8:da:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 18:28:32 2026 by rpki-client