Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9135B49/5318A108120111EFADC85345C4F9AE02/CAF0BBBCDB0811F0A3EA0CD881D3641D.roa
File: CAF0BBBCDB0811F0A3EA0CD881D3641D.roa (raw, json)
Hash identifier: K6rhOjUE5MsA7iPT9OzT+5zbheWWIvW6req+7O+50Rk=
Subject key identifier: 0D:2E:BC:53:2B:C8:72:7A:CB:B3:18:F4:4C:CF:C3:8F:1C:E2:F4:9F
Certificate issuer: /CN=A9135B49/serialNumber=4C365E36A6479D8EB0B50D90F36D1D7B19EF84D3
Certificate serial: 01B8
Authority key identifier: 4C:36:5E:36:A6:47:9D:8E:B0:B5:0D:90:F3:6D:1D:7B:19:EF:84:D3
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TDZeNqZHnY6wtQ2Q820dexnvhNM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9135B49/5318A108120111EFADC85345C4F9AE02/CAF0BBBCDB0811F0A3EA0CD881D3641D.roa
Signing time: Sun 01 Mar 2026 18:25:18 +0000
ROA not before: Mon 29 Dec 2025 04:23:37 +0000
ROA not after: Tue 02 Mar 2027 00:00:00 +0000
asID: 17466
IP address blocks: 58.2.0.0/20 maxlen: 20
58.2.16.0/20 maxlen: 20
58.2.16.0/21 maxlen: 21
58.2.16.0/22 maxlen: 22
58.2.20.0/22 maxlen: 22
58.2.32.0/19 maxlen: 19
58.2.128.0/19 maxlen: 19
58.2.192.0/19 maxlen: 19
58.2.224.0/21 maxlen: 21
58.2.232.0/22 maxlen: 22
58.2.240.0/20 maxlen: 20
119.43.0.0/17 maxlen: 17
119.43.128.0/18 maxlen: 18
119.43.192.0/21 maxlen: 21
119.43.205.0/24 maxlen: 24
119.43.206.0/23 maxlen: 23
119.43.208.0/20 maxlen: 20
119.43.224.0/19 maxlen: 19
124.4.0.0/19 maxlen: 19
124.4.32.0/21 maxlen: 21
124.4.40.0/22 maxlen: 22
124.4.44.0/24 maxlen: 24
124.4.45.0/24 maxlen: 24
124.4.46.0/23 maxlen: 23
124.4.48.0/20 maxlen: 20
124.4.64.0/18 maxlen: 18
124.4.120.0/23 maxlen: 24
124.4.122.0/23 maxlen: 24
124.4.128.0/18 maxlen: 18
124.4.192.0/21 maxlen: 21
124.4.204.0/22 maxlen: 22
124.4.208.0/20 maxlen: 20
124.4.252.0/22 maxlen: 22
182.94.0.0/17 maxlen: 17
182.94.128.0/18 maxlen: 18
182.94.192.0/19 maxlen: 19
182.94.224.0/21 maxlen: 21
182.94.232.0/22 maxlen: 22
182.94.236.0/23 maxlen: 24
182.94.238.0/23 maxlen: 24
182.94.240.0/24 maxlen: 24
182.94.241.0/24 maxlen: 24
182.94.242.0/23 maxlen: 23
182.94.244.0/22 maxlen: 22
182.94.248.0/21 maxlen: 21
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9135B49/5318A108120111EFADC85345C4F9AE02/TDZeNqZHnY6wtQ2Q820dexnvhNM.crl
rsync://rpki.apnic.net/member_repository/A9135B49/5318A108120111EFADC85345C4F9AE02/TDZeNqZHnY6wtQ2Q820dexnvhNM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TDZeNqZHnY6wtQ2Q820dexnvhNM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 01:33:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 440 (0x1b8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9135B49, serialNumber=4C365E36A6479D8EB0B50D90F36D1D7B19EF84D3
Validity
Not Before: Dec 29 04:23:37 2025 GMT
Not After : Mar 2 00:00:00 2027 GMT
Subject: CN=69a4848e-ce7f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:ae:a6:55:32:f8:ff:ff:24:ea:53:a9:72:64:
e4:9b:55:ae:7c:70:9d:49:4f:7d:10:65:cb:07:1f:
1e:6f:d2:5a:ed:85:2c:ad:68:7c:38:48:fc:a9:2c:
25:94:69:70:0c:44:a9:38:ef:77:fd:d4:4d:cb:3a:
53:51:b2:03:ad:34:f5:56:79:47:d8:c5:d4:57:e8:
d6:e7:34:80:b2:e7:d2:d8:bc:23:ec:91:5f:ed:c3:
f8:19:6f:74:81:b2:2e:4e:de:f2:47:56:96:b8:7b:
0d:cd:79:b4:75:36:80:d8:1e:8f:c6:68:01:27:0e:
55:fa:69:d4:48:8a:c0:57:f3:82:c4:93:88:32:cb:
34:8e:7e:c3:2e:a8:9d:ab:eb:9f:cf:f5:45:60:fb:
33:35:1e:4e:56:9d:ae:7a:cc:1d:b2:72:f0:88:aa:
fe:b6:c9:f3:3f:60:38:3b:56:fb:f0:9e:31:07:1d:
4b:eb:63:e5:bf:48:5a:92:95:6d:26:07:34:f0:7c:
98:f7:df:2d:eb:88:ca:a3:fb:eb:ff:22:22:57:73:
87:72:af:3a:99:b0:58:d5:37:73:10:08:29:20:4b:
67:54:ed:4e:e9:8d:89:0a:ed:9a:79:30:a4:d5:dd:
57:11:9d:4f:0e:95:0e:4e:72:d3:de:31:39:60:fe:
ce:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:2E:BC:53:2B:C8:72:7A:CB:B3:18:F4:4C:CF:C3:8F:1C:E2:F4:9F
X509v3 Authority Key Identifier:
keyid:4C:36:5E:36:A6:47:9D:8E:B0:B5:0D:90:F3:6D:1D:7B:19:EF:84:D3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9135B49/5318A108120111EFADC85345C4F9AE02/TDZeNqZHnY6wtQ2Q820dexnvhNM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TDZeNqZHnY6wtQ2Q820dexnvhNM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9135B49/5318A108120111EFADC85345C4F9AE02/CAF0BBBCDB0811F0A3EA0CD881D3641D.roa
sbgp-ipAddrBlock: critical
IPv4:
58.2.0.0/18
58.2.128.0/19
58.2.192.0-58.2.235.255
58.2.240.0/20
119.43.0.0-119.43.199.255
119.43.205.0-119.43.255.255
124.4.0.0-124.4.199.255
124.4.204.0-124.4.223.255
124.4.252.0/22
182.94.0.0/16
Signature Algorithm: sha256WithRSAEncryption
0e:58:f7:65:2d:e9:6d:a9:f7:a1:6e:17:a1:4f:a3:e8:29:69:
0d:fe:bd:83:32:9a:0e:52:2f:96:60:f6:e5:f3:05:45:8f:cf:
53:95:9c:f9:65:28:de:e7:d1:38:2c:48:b1:66:75:a4:79:64:
4e:7b:bd:4f:fe:0a:30:cf:ec:9b:26:35:9f:bd:b4:ef:d9:2e:
01:a0:e7:18:70:08:57:6f:cb:27:10:81:d2:d1:62:c8:3a:21:
cf:16:6e:17:37:ff:02:b7:be:6e:f6:ed:8c:b0:d3:39:a7:9c:
3e:34:c9:e4:c6:5c:ea:75:15:e6:95:cd:f7:ca:7e:37:c1:05:
a3:18:1c:79:8f:51:05:bd:b4:cf:81:d2:16:84:43:fd:cd:1f:
1b:a9:e7:f6:84:76:0e:17:9c:45:4f:d1:d8:7c:ad:63:a4:31:
55:d7:55:f2:54:10:f4:04:ff:49:f7:fb:51:c8:8c:28:fc:0e:
a3:5c:ff:a5:63:87:52:35:9b:e5:ab:ff:48:04:c7:2d:5a:ce:
a6:e9:a1:86:c7:43:cc:f7:a2:6e:38:9b:2e:ae:4f:06:2f:bf:
93:5a:98:61:82:e8:57:6d:47:30:6f:67:03:0b:97:f1:5b:15:
07:9c:3f:fa:83:9d:43:90:d5:04:16:61:41:42:64:ec:28:e1:
ef:55:48:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 08:32:21 2026 by rpki-client