Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A912B600/A36A626E1D9311E286175DF708B02CD2/CBCF6A88358611F08913BB23C4F9AE02.roa
File: CBCF6A88358611F08913BB23C4F9AE02.roa (raw, json)
Hash identifier: IpjTugbacRrmVDXaQ3QI6KXxc3S9UtKA8Py8AWeqxg8=
Subject key identifier: BA:02:6C:6D:B7:D2:DD:33:E9:B4:87:7D:C6:40:84:EF:37:0C:E4:91
Certificate issuer: /CN=A912B600/serialNumber=2F44AEBA0A5544065889705BC2EF1CDAE1158325
Certificate serial: 356D
Authority key identifier: 2F:44:AE:BA:0A:55:44:06:58:89:70:5B:C2:EF:1C:DA:E1:15:83:25
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L0SuugpVRAZYiXBbwu8c2uEVgyU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912B600/A36A626E1D9311E286175DF708B02CD2/CBCF6A88358611F08913BB23C4F9AE02.roa
Signing time: Sun 01 Mar 2026 13:34:58 +0000
ROA not before: Wed 24 Sep 2025 15:00:59 +0000
ROA not after: Tue 01 Dec 2026 00:00:00 +0000
asID: 38466
IP address blocks: 27.125.224.0/19 maxlen: 19
27.125.224.0/24 maxlen: 24
27.125.225.0/24 maxlen: 24
27.125.226.0/24 maxlen: 24
27.125.227.0/24 maxlen: 24
27.125.228.0/24 maxlen: 24
27.125.229.0/24 maxlen: 24
27.125.230.0/24 maxlen: 24
27.125.231.0/24 maxlen: 24
27.125.232.0/24 maxlen: 24
27.125.233.0/24 maxlen: 24
27.125.234.0/24 maxlen: 24
27.125.235.0/24 maxlen: 24
27.125.236.0/24 maxlen: 24
27.125.237.0/24 maxlen: 24
27.125.238.0/24 maxlen: 24
27.125.239.0/24 maxlen: 24
27.125.240.0/24 maxlen: 24
27.125.241.0/24 maxlen: 24
27.125.242.0/24 maxlen: 24
27.125.243.0/24 maxlen: 24
27.125.244.0/24 maxlen: 24
27.125.245.0/24 maxlen: 24
27.125.246.0/24 maxlen: 24
27.125.247.0/24 maxlen: 24
27.125.248.0/24 maxlen: 24
27.125.249.0/24 maxlen: 24
27.125.250.0/24 maxlen: 24
27.125.251.0/24 maxlen: 24
27.125.252.0/24 maxlen: 24
27.125.253.0/24 maxlen: 24
27.125.254.0/24 maxlen: 24
27.125.255.0/24 maxlen: 24
103.1.144.0/22 maxlen: 22
103.1.144.0/24 maxlen: 24
103.1.145.0/24 maxlen: 24
103.1.146.0/24 maxlen: 24
103.1.147.0/24 maxlen: 24
113.30.232.0/21 maxlen: 21
113.30.232.0/24 maxlen: 24
113.30.233.0/24 maxlen: 24
113.30.234.0/23 maxlen: 24
113.30.236.0/22 maxlen: 24
123.136.96.0/19 maxlen: 19
123.136.96.0/24 maxlen: 24
123.136.97.0/24 maxlen: 24
123.136.98.0/24 maxlen: 24
123.136.99.0/24 maxlen: 24
123.136.100.0/24 maxlen: 24
123.136.101.0/24 maxlen: 24
123.136.102.0/23 maxlen: 24
123.136.104.0/22 maxlen: 22
123.136.104.0/24 maxlen: 24
123.136.105.0/24 maxlen: 24
123.136.106.0/24 maxlen: 24
123.136.107.0/24 maxlen: 24
123.136.108.0/24 maxlen: 24
123.136.109.0/24 maxlen: 24
123.136.110.0/24 maxlen: 24
123.136.111.0/24 maxlen: 24
123.136.112.0/24 maxlen: 24
123.136.113.0/24 maxlen: 24
123.136.114.0/24 maxlen: 24
123.136.115.0/24 maxlen: 24
123.136.116.0/24 maxlen: 24
123.136.117.0/24 maxlen: 24
123.136.118.0/24 maxlen: 24
123.136.119.0/24 maxlen: 24
123.136.120.0/24 maxlen: 24
123.136.121.0/24 maxlen: 24
123.136.122.0/24 maxlen: 24
123.136.123.0/24 maxlen: 24
123.136.124.0/24 maxlen: 24
123.136.125.0/24 maxlen: 24
123.136.126.0/24 maxlen: 24
123.136.127.0/24 maxlen: 24
203.168.160.0/19 maxlen: 19
203.168.160.0/24 maxlen: 24
203.168.161.0/24 maxlen: 24
203.168.162.0/24 maxlen: 24
203.168.163.0/24 maxlen: 24
203.168.164.0/22 maxlen: 22
203.168.164.0/24 maxlen: 24
203.168.165.0/24 maxlen: 24
203.168.166.0/24 maxlen: 24
203.168.167.0/24 maxlen: 24
203.168.168.0/24 maxlen: 24
203.168.169.0/24 maxlen: 24
203.168.170.0/24 maxlen: 24
203.168.171.0/24 maxlen: 24
203.168.172.0/24 maxlen: 24
203.168.173.0/24 maxlen: 24
203.168.174.0/24 maxlen: 24
203.168.175.0/24 maxlen: 24
203.168.176.0/24 maxlen: 24
203.168.177.0/24 maxlen: 24
203.168.178.0/24 maxlen: 24
203.168.179.0/24 maxlen: 24
203.168.180.0/24 maxlen: 24
203.168.181.0/24 maxlen: 24
203.168.182.0/24 maxlen: 24
203.168.183.0/24 maxlen: 24
203.168.184.0/24 maxlen: 24
203.168.185.0/24 maxlen: 24
203.168.186.0/24 maxlen: 24
203.168.187.0/24 maxlen: 24
203.168.188.0/24 maxlen: 24
203.168.189.0/24 maxlen: 24
203.168.190.0/24 maxlen: 24
203.168.191.0/24 maxlen: 24
2405:3800::/32 maxlen: 32
2405:3800::/48 maxlen: 48
2405:3800:1::/48 maxlen: 48
2405:3800:800::/43 maxlen: 43
2405:3800:820::/43 maxlen: 43
2405:3800:840::/43 maxlen: 43
2405:3800:860::/43 maxlen: 43
2405:3800:880::/43 maxlen: 43
2405:3800:8a0::/43 maxlen: 43
2405:3800:8c0::/43 maxlen: 43
2405:3800:8e0::/43 maxlen: 43
2405:3800:900::/43 maxlen: 43
2405:3800:dc2::/47 maxlen: 47
2405:3800:dc4::/47 maxlen: 47
2405:3800:dc6::/47 maxlen: 47
2405:3800:dd0::/45 maxlen: 45
2405:3801::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A912B600/A36A626E1D9311E286175DF708B02CD2/L0SuugpVRAZYiXBbwu8c2uEVgyU.crl
rsync://rpki.apnic.net/member_repository/A912B600/A36A626E1D9311E286175DF708B02CD2/L0SuugpVRAZYiXBbwu8c2uEVgyU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L0SuugpVRAZYiXBbwu8c2uEVgyU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 01:17:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13677 (0x356d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912B600, serialNumber=2F44AEBA0A5544065889705BC2EF1CDAE1158325
Validity
Not Before: Sep 24 15:00:59 2025 GMT
Not After : Dec 1 00:00:00 2026 GMT
Subject: CN=69a44081-b474
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:a6:9e:ff:cb:46:6d:1d:c6:dd:dd:e9:24:9d:
9c:ff:c7:d0:91:75:3c:cd:7c:fc:15:44:2e:e7:24:
ca:03:d2:28:6f:fd:2a:47:d9:72:68:5d:7b:16:5c:
71:61:86:37:6c:37:a5:72:a4:ab:b7:1f:1b:86:15:
9f:2b:c8:36:52:d7:d8:04:37:f5:19:6d:d3:70:c5:
a9:88:49:4d:5a:77:d0:be:68:22:85:d6:9c:db:f5:
40:4f:dd:ee:ea:4a:79:99:a3:96:b5:c8:df:af:2a:
1a:8b:fc:e2:6f:8f:e8:4c:52:f9:37:4e:1b:36:2c:
43:81:bd:ae:eb:83:f8:0c:2e:49:d2:dc:e9:81:1a:
32:bc:44:ce:b0:ee:b8:e9:61:2a:62:55:e3:14:3b:
30:e6:18:52:8c:44:98:32:b7:f9:ae:d8:0c:82:a0:
82:ee:bb:eb:af:b7:6a:b8:c5:6b:14:d7:0b:95:c1:
e2:d0:0a:f1:1a:6c:01:f8:ba:75:f4:3d:14:de:58:
5b:58:17:48:6a:c1:96:35:52:47:75:ff:13:b5:76:
f8:ca:2f:bb:6d:63:0b:68:db:0f:99:69:d6:88:56:
27:94:31:49:af:1c:b8:c1:78:6c:f1:9f:85:b5:1d:
91:9f:f0:8c:2d:8a:b3:c3:76:41:4f:57:da:49:3f:
19:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:02:6C:6D:B7:D2:DD:33:E9:B4:87:7D:C6:40:84:EF:37:0C:E4:91
X509v3 Authority Key Identifier:
keyid:2F:44:AE:BA:0A:55:44:06:58:89:70:5B:C2:EF:1C:DA:E1:15:83:25
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912B600/A36A626E1D9311E286175DF708B02CD2/L0SuugpVRAZYiXBbwu8c2uEVgyU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L0SuugpVRAZYiXBbwu8c2uEVgyU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912B600/A36A626E1D9311E286175DF708B02CD2/CBCF6A88358611F08913BB23C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
27.125.224.0/19
103.1.144.0/22
113.30.232.0/21
123.136.96.0/19
203.168.160.0/19
IPv6:
2405:3800::/31
Signature Algorithm: sha256WithRSAEncryption
37:99:4e:b8:e9:0b:db:da:10:c5:65:f7:ed:c5:dd:97:4c:cd:
bd:c9:78:5a:56:7a:14:d9:1c:90:56:f1:de:83:f9:de:8b:4b:
1a:f3:1d:9d:65:53:5a:df:5d:3d:b0:df:08:a4:4a:5f:f6:a3:
7f:af:b1:d3:21:f0:a0:b6:bf:1a:47:3d:2b:c8:7e:14:b2:8a:
17:1d:0b:56:11:d2:ee:36:de:78:a1:18:93:48:8b:a6:61:94:
ab:67:29:4e:0b:78:fb:8b:25:ab:62:9a:f6:11:f0:de:24:db:
c1:a7:f2:29:5b:ff:21:1b:df:a9:5d:3f:4f:1b:3c:09:db:cf:
4c:7a:e6:9d:fd:87:3f:66:ad:3f:e2:15:dd:80:9d:e1:8f:55:
87:1f:74:da:d9:81:a5:93:88:4a:0d:ba:78:b9:0c:74:ea:4e:
f4:f6:f3:7f:28:82:ed:a5:da:20:3d:8e:0d:a2:fd:79:22:6c:
15:ad:1c:da:28:99:e9:03:f9:50:d4:fd:2a:04:5b:7d:82:9a:
6e:a7:32:1c:50:fd:00:76:7c:a1:d7:1b:02:3e:fd:29:6c:53:
45:94:f8:42:d6:d4:b8:6f:59:9b:0d:cf:52:b5:0d:2d:20:7f:
c1:69:4f:eb:b6:53:fc:56:61:be:f9:da:89:a2:32:ec:70:1e:
e9:34:3f:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 08:33:34 2026 by rpki-client