Route Origin Authorization
$ rpki-client -vvvf rpki.apnic.net/member_repository/A911D834/DFBA50B81D8D11E2824DEDEB08B02CD2/58213782AC2311F1817C69D13511F970.roa
File: 58213782AC2311F1817C69D13511F970.roa (raw, json)
Hash identifier: ZgJHAZVTMmGqaB24EGOqNAsXR8XE/1yCeyICN4nO8I4=
Subject key identifier: 1F:5E:0D:A9:75:8E:F6:22:2E:D3:6F:39:5D:EE:52:E6:16:C1:C9:E1
Certificate issuer: /CN=A911D834/serialNumber=FDB2754D950630EB11DF84E2855CAAB7D1626F80
Certificate serial: 35E7
Authority key identifier: FD:B2:75:4D:95:06:30:EB:11:DF:84:E2:85:5C:AA:B7:D1:62:6F:80
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_bJ1TZUGMOsR34TihVyqt9Fib4A.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911D834/DFBA50B81D8D11E2824DEDEB08B02CD2/58213782AC2311F1817C69D13511F970.roa
Signing time: Wed 09 Sep 2026 07:52:03 +0000
ROA not before: Wed 09 Sep 2026 07:52:03 +0000
ROA not after: Tue 01 Dec 2026 00:00:00 +0000
asID: 4007
IP address blocks: 103.232.152.0/22 maxlen: 24
103.235.196.0/22 maxlen: 24
110.34.0.0/19 maxlen: 24
116.66.192.0/21 maxlen: 24
163.47.148.0/22 maxlen: 22
163.47.148.0/24 maxlen: 24
163.47.149.0/24 maxlen: 24
163.47.150.0/24 maxlen: 24
163.47.151.0/24 maxlen: 24
163.53.24.0/23 maxlen: 23
163.53.24.0/24 maxlen: 24
163.53.25.0/24 maxlen: 24
182.93.64.0/19 maxlen: 24
202.51.80.0/24 maxlen: 24
202.51.88.0/23 maxlen: 24
202.51.92.0/23 maxlen: 24
202.63.240.0/21 maxlen: 24
2403:3800::/32 maxlen: 40
2403:3800:8::/48 maxlen: 48
2403:3800:600::/48 maxlen: 48
2403:3800:700::/48 maxlen: 48
2403:3800:820::/48 maxlen: 48
2403:3800:1200::/44 maxlen: 44
2403:3800:1210::/44 maxlen: 44
2403:3800:1220::/44 maxlen: 44
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A911D834/DFBA50B81D8D11E2824DEDEB08B02CD2/_bJ1TZUGMOsR34TihVyqt9Fib4A.crl
rsync://rpki.apnic.net/member_repository/A911D834/DFBA50B81D8D11E2824DEDEB08B02CD2/_bJ1TZUGMOsR34TihVyqt9Fib4A.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_bJ1TZUGMOsR34TihVyqt9Fib4A.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 27 Sep 2026 14:37:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13799 (0x35e7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911D834, serialNumber=FDB2754D950630EB11DF84E2855CAAB7D1626F80
Validity
Not Before: Sep 9 07:52:03 2026 GMT
Not After : Dec 1 00:00:00 2026 GMT
Subject: CN=6aa11023-cb9b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:e4:b9:33:bc:ed:93:38:83:c8:f5:84:6a:0d:
50:fe:e8:37:8a:af:1b:99:36:da:23:c3:be:51:b3:
63:96:c9:ee:e9:ed:e3:1e:ae:cd:48:19:7c:33:17:
df:4d:7d:d8:3a:de:82:4c:38:04:71:8f:70:1c:12:
3a:83:3e:bb:f2:44:9b:e1:d3:d5:53:b4:c9:9e:36:
e9:ba:7e:30:a6:d4:0b:22:64:20:3e:d7:c4:f4:26:
2a:93:15:0e:4b:bb:a9:57:3e:f4:7b:d5:84:83:01:
3f:72:34:c0:d9:cb:96:d6:20:8a:61:27:31:13:3c:
1b:fe:c7:98:99:cc:77:1a:e5:a6:85:6d:23:00:37:
c0:fb:c2:ef:e2:31:2a:3a:60:63:29:89:6f:f8:4b:
01:02:7a:cf:dd:8e:b8:25:f3:14:26:20:cd:31:d4:
6e:8a:65:94:bf:cf:49:e7:27:a5:6e:5a:ae:e3:26:
53:d0:db:5f:3b:ea:5a:a5:53:a2:78:dd:97:4f:99:
3e:6e:8e:2d:9a:f7:16:2c:cd:53:a1:3c:7b:bf:fa:
07:cb:82:50:44:b2:33:33:43:27:70:bd:6b:51:b2:
e7:0d:4e:44:b5:b0:33:db:d6:dc:fa:d9:77:96:d5:
b4:e7:c0:a5:ca:be:cc:2e:13:19:5a:d6:90:ef:5e:
a6:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:5E:0D:A9:75:8E:F6:22:2E:D3:6F:39:5D:EE:52:E6:16:C1:C9:E1
X509v3 Authority Key Identifier:
keyid:FD:B2:75:4D:95:06:30:EB:11:DF:84:E2:85:5C:AA:B7:D1:62:6F:80
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911D834/DFBA50B81D8D11E2824DEDEB08B02CD2/_bJ1TZUGMOsR34TihVyqt9Fib4A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_bJ1TZUGMOsR34TihVyqt9Fib4A.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911D834/DFBA50B81D8D11E2824DEDEB08B02CD2/58213782AC2311F1817C69D13511F970.roa
sbgp-ipAddrBlock: critical
IPv4:
103.232.152.0/22
103.235.196.0/22
110.34.0.0/19
116.66.192.0/21
163.47.148.0/22
163.53.24.0/23
182.93.64.0/19
202.51.80.0/24
202.51.88.0/23
202.51.92.0/23
202.63.240.0/21
IPv6:
2403:3800::/32
Signature Algorithm: sha256WithRSAEncryption
60:aa:ac:00:1a:d6:fa:03:2c:57:a5:7d:bc:87:f1:d1:8f:f7:
90:51:cc:dd:5e:11:c5:1e:84:bb:f7:78:70:a3:ad:23:a4:76:
0b:2f:cd:4c:36:5e:dd:68:c0:38:f3:39:c2:ce:a4:be:c9:58:
89:08:9a:71:b8:cc:bc:f8:90:da:02:af:4e:4d:d7:7d:fc:26:
35:1d:ce:91:11:4b:a0:f6:d3:45:0c:0f:1b:b4:ac:0d:5e:6f:
3b:e8:63:eb:cf:ee:38:76:6e:d9:fb:f1:08:6b:95:a9:26:87:
ca:30:40:20:00:53:9f:e7:71:85:49:89:f3:61:10:70:a1:9d:
c5:00:87:e2:55:b0:25:a0:71:56:aa:d7:af:7f:cc:72:52:fb:
bf:34:78:ce:28:7c:de:4a:1a:23:63:79:e3:42:fd:cc:be:4d:
45:03:14:0d:88:8a:80:2e:09:79:13:b6:7e:64:e3:27:00:58:
0f:f0:46:96:00:72:9a:9b:02:b8:15:62:7b:f0:e3:a0:bf:21:
7c:7b:46:a3:21:f2:d6:1e:d4:29:85:d3:48:61:06:79:f5:5b:
01:9b:91:f6:03:46:ef:b5:a0:01:ac:8d:3a:0d:42:49:25:35:
3e:a4:c9:3b:57:e8:35:8d:53:15:9f:28:34:31:d9:d3:c1:42:
b8:ac:10:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 20:50:18 2026 by rpki-client