Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/5CC0FB0627C811EF9719D685C4F9AE02.roa
File: 5CC0FB0627C811EF9719D685C4F9AE02.roa (raw, json)
Hash identifier: v4jvGNCqciPajsgOT9mkwjhpfMWdpi+qWzQw+wYDLYo=
Subject key identifier: 02:F2:02:7D:9D:67:83:03:A2:70:84:AB:AE:B5:0C:73:06:F5:95:DC
Certificate issuer: /CN=A9137ABC/serialNumber=61BF3ED4C3BFBC0916EF9480AAFF222A437AF02C
Certificate serial: 3B80
Authority key identifier: 61:BF:3E:D4:C3:BF:BC:09:16:EF:94:80:AA:FF:22:2A:43:7A:F0:2C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/5CC0FB0627C811EF9719D685C4F9AE02.roa
Signing time: Sun 01 Mar 2026 19:29:11 +0000
ROA not before: Fri 22 Aug 2025 05:16:54 +0000
ROA not after: Wed 30 Sep 2026 00:00:00 +0000
asID: 7470
IP address blocks: 27.145.0.0/16 maxlen: 24
58.8.0.0/16 maxlen: 24
58.9.0.0/16 maxlen: 24
58.10.0.0/16 maxlen: 24
58.11.0.0/16 maxlen: 24
58.97.0.0/18 maxlen: 24
58.97.64.0/18 maxlen: 24
61.90.0.0/17 maxlen: 24
61.90.128.0/17 maxlen: 24
61.91.0.0/18 maxlen: 24
61.91.64.0/18 maxlen: 24
61.91.128.0/19 maxlen: 24
61.91.160.0/19 maxlen: 24
61.91.192.0/18 maxlen: 24
103.3.176.0/22 maxlen: 24
110.168.0.0/16 maxlen: 24
110.169.0.0/16 maxlen: 24
110.170.0.0/15 maxlen: 24
114.109.0.0/16 maxlen: 24
115.87.0.0/16 maxlen: 24
119.46.0.0/16 maxlen: 22
119.46.0.0/18 maxlen: 24
119.46.64.0/19 maxlen: 24
119.46.96.0/24 maxlen: 24
119.46.97.0/24 maxlen: 24
119.46.98.0/23 maxlen: 24
119.46.100.0/22 maxlen: 24
119.46.104.0/21 maxlen: 24
119.46.112.0/20 maxlen: 24
119.46.128.0/19 maxlen: 24
119.46.160.0/20 maxlen: 24
119.46.176.0/23 maxlen: 24
119.46.178.0/24 maxlen: 24
119.46.179.0/24 maxlen: 24
119.46.180.0/22 maxlen: 24
119.46.184.0/21 maxlen: 24
119.46.192.0/18 maxlen: 24
119.76.0.0/16 maxlen: 24
124.120.0.0/16 maxlen: 24
124.121.0.0/16 maxlen: 24
124.122.0.0/16 maxlen: 24
171.96.0.0/16 maxlen: 24
171.97.0.0/16 maxlen: 24
171.98.0.0/16 maxlen: 24
171.99.0.0/16 maxlen: 24
171.100.0.0/16 maxlen: 24
171.101.0.0/16 maxlen: 24
171.102.0.0/16 maxlen: 19
171.102.0.0/17 maxlen: 24
171.102.144.0/20 maxlen: 24
171.102.160.0/19 maxlen: 24
171.102.192.0/18 maxlen: 23
171.102.192.0/20 maxlen: 24
171.102.208.0/21 maxlen: 24
171.102.216.0/22 maxlen: 24
171.102.220.0/24 maxlen: 24
171.102.222.0/23 maxlen: 24
171.102.224.0/21 maxlen: 24
171.102.232.0/22 maxlen: 24
171.102.236.0/23 maxlen: 24
171.102.239.0/24 maxlen: 24
171.102.240.0/20 maxlen: 24
171.103.0.0/16 maxlen: 24
182.17.0.0/16 maxlen: 24
202.93.48.0/20 maxlen: 20
202.133.128.0/20 maxlen: 24
202.133.144.0/20 maxlen: 24
202.133.160.0/19 maxlen: 24
202.176.64.0/18 maxlen: 18
202.176.64.0/19 maxlen: 24
202.176.96.0/19 maxlen: 24
202.176.128.0/18 maxlen: 24
203.118.64.0/20 maxlen: 20
203.118.80.0/20 maxlen: 20
203.118.96.0/20 maxlen: 20
203.118.99.0/24 maxlen: 24
203.118.112.0/20 maxlen: 20
203.144.128.0/20 maxlen: 24
203.144.144.0/20 maxlen: 24
203.144.160.0/20 maxlen: 24
203.144.176.0/20 maxlen: 24
203.144.192.0/20 maxlen: 24
203.144.208.0/20 maxlen: 24
203.144.224.0/20 maxlen: 24
203.144.244.0/24 maxlen: 24
203.144.246.0/24 maxlen: 24
203.144.254.0/24 maxlen: 24
203.144.255.0/24 maxlen: 24
203.153.128.0/20 maxlen: 20
210.86.128.0/18 maxlen: 18
210.86.128.0/21 maxlen: 21
210.86.140.0/22 maxlen: 22
210.86.140.0/24 maxlen: 24
210.86.141.0/24 maxlen: 24
210.86.145.0/24 maxlen: 24
210.86.160.0/24 maxlen: 24
210.86.161.0/24 maxlen: 24
210.86.162.0/24 maxlen: 24
210.86.163.0/24 maxlen: 24
210.86.164.0/24 maxlen: 24
210.86.165.0/24 maxlen: 24
210.86.166.0/24 maxlen: 24
210.86.167.0/24 maxlen: 24
210.86.168.0/24 maxlen: 24
210.86.169.0/24 maxlen: 24
210.86.170.0/24 maxlen: 24
210.86.171.0/24 maxlen: 24
210.86.172.0/24 maxlen: 24
210.86.173.0/24 maxlen: 24
210.86.174.0/24 maxlen: 24
210.86.175.0/24 maxlen: 24
210.86.190.0/24 maxlen: 24
210.86.191.0/24 maxlen: 24
210.86.192.0/19 maxlen: 19
210.86.213.0/24 maxlen: 24
210.86.214.0/24 maxlen: 24
210.213.0.0/18 maxlen: 24
2001:fb0::/32 maxlen: 32
2001:fb0:101::/48 maxlen: 48
2001:fb0:102::/48 maxlen: 48
2001:fb0:1004::/48 maxlen: 48
2001:fb0:1005::/48 maxlen: 48
2001:fb0:1061:12::/64 maxlen: 64
2001:fb0:1064::/48 maxlen: 48
2001:fb0:1065::/48 maxlen: 48
2001:fb0:109f::/48 maxlen: 48
2001:fb0:109f:4::/64 maxlen: 64
2001:fb0:109f:5::/64 maxlen: 64
2001:fb0:109f:1a::/64 maxlen: 64
2001:fb0:109f:1b::/64 maxlen: 64
2001:fb0:109f:8000::/64 maxlen: 64
2001:fb0:109f:8001::/64 maxlen: 64
2001:fb0:109f:8016::/64 maxlen: 64
2001:fb0:109f:8017::/64 maxlen: 64
2001:fb0:109f:8019::/64 maxlen: 64
2001:fb0:109f:801a::/64 maxlen: 64
2001:fb0:109f:801b::/64 maxlen: 64
2001:fb0:109f:801e::/64 maxlen: 64
2001:fb0:109f:801f::/64 maxlen: 64
2001:fb1::/32 maxlen: 48
2405:4000:800:1::15e/127 maxlen: 127
2405:4000:800:1::160/127 maxlen: 127
2405:4000:800:1::162/127 maxlen: 127
2405:4000:800:1::164/127 maxlen: 127
2405:4000:800:6::/64 maxlen: 64
2405:4000:800:7::/64 maxlen: 64
2405:4000:801::/64 maxlen: 64
2405:4000:801:1::/64 maxlen: 64
2405:4000:801:2::/64 maxlen: 64
2405:4000:801:3::/64 maxlen: 64
2405:4000:801:4::/64 maxlen: 64
2405:4000:801:5::/64 maxlen: 64
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.crl
rsync://rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 01:15:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 15232 (0x3b80)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9137ABC, serialNumber=61BF3ED4C3BFBC0916EF9480AAFF222A437AF02C
Validity
Not Before: Aug 22 05:16:54 2025 GMT
Not After : Sep 30 00:00:00 2026 GMT
Subject: CN=69a49387-a0ce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:53:40:93:5f:d5:8b:53:03:05:44:da:79:15:
c7:2d:2d:99:0d:1f:9c:b0:2c:b8:7c:39:55:8e:b1:
7a:89:00:67:f0:44:92:fb:5c:c8:f8:e6:fd:3d:88:
0b:54:68:25:6b:60:9e:5a:1b:9b:0c:59:44:f2:b3:
03:c9:87:2a:a2:cb:a2:c3:8e:f4:cc:6f:ef:54:54:
d3:c9:41:1a:27:70:62:d0:46:74:cc:22:14:f9:e7:
15:e2:fb:d0:dd:7a:d9:22:a6:c8:e8:45:16:35:3d:
0a:43:ed:87:9d:33:cd:d6:9e:cb:35:1a:a6:f8:00:
d5:88:ef:e9:74:17:3b:2b:98:ca:46:4b:9c:67:5f:
5e:52:59:37:ef:91:5b:8e:09:4f:7f:c4:e1:df:80:
29:05:4d:90:c2:a9:11:17:0d:09:fc:e2:55:07:cd:
27:a5:9a:66:fd:9b:cb:14:8e:ce:2f:f6:14:85:58:
82:7a:1f:35:5f:99:0f:84:ef:a1:bd:a0:57:ab:56:
88:bb:d0:a4:22:e0:50:5a:f2:2b:79:9e:2d:90:6c:
c0:a1:d6:33:aa:4b:9b:f3:83:4d:65:d1:9c:45:90:
88:34:cb:27:a3:9d:2d:02:1d:1d:bb:23:03:39:8f:
12:63:92:68:1b:04:05:b3:60:c7:f2:10:ad:84:35:
c4:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:F2:02:7D:9D:67:83:03:A2:70:84:AB:AE:B5:0C:73:06:F5:95:DC
X509v3 Authority Key Identifier:
keyid:61:BF:3E:D4:C3:BF:BC:09:16:EF:94:80:AA:FF:22:2A:43:7A:F0:2C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/5CC0FB0627C811EF9719D685C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
27.145.0.0/16
58.8.0.0/14
58.97.0.0/17
61.90.0.0/15
103.3.176.0/22
110.168.0.0/14
114.109.0.0/16
115.87.0.0/16
119.46.0.0/16
119.76.0.0/16
124.120.0.0-124.122.255.255
171.96.0.0/13
182.17.0.0/16
202.93.48.0/20
202.133.128.0/18
202.176.64.0-202.176.191.255
203.118.64.0/18
203.144.128.0-203.144.239.255
203.144.244.0/24
203.144.246.0/24
203.144.254.0/23
203.153.128.0/20
210.86.128.0-210.86.223.255
210.213.0.0/18
IPv6:
2001:fb0::/31
2405:4000:800:1:0:0:0:15e-2405:4000:800:1:0:0:0:165
2405:4000:800:6::/63
2405:4000:801::-2405:4000:801:5:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
7f:aa:79:5e:64:10:0f:be:b6:d7:b3:0c:dc:eb:57:51:d7:46:
2c:f0:1b:dc:52:87:2f:a6:9a:3f:57:7a:98:81:fa:b4:57:3e:
80:ba:bb:63:d3:70:3f:7b:bb:cd:58:27:10:7b:09:e2:9e:51:
41:c0:72:a1:da:68:1c:f4:a8:0d:af:ef:40:f5:73:51:6f:ad:
27:19:0b:81:ee:f5:e5:43:d9:a2:1c:49:b0:43:96:57:c1:df:
4a:1b:00:1a:e4:32:36:ef:4b:be:a0:69:15:08:f0:09:0e:f3:
1d:3e:1b:52:b1:a7:57:b1:85:88:17:dc:09:87:6f:c4:df:05:
c8:a2:64:c7:bb:0c:86:95:93:ab:84:33:49:50:06:f1:58:8d:
d2:c6:38:ee:cd:f9:90:a4:0b:83:8c:f9:f2:39:a9:c2:cc:4f:
07:4d:c1:44:fb:c4:eb:3d:32:48:2b:c7:e5:36:fc:b4:52:90:
9a:d0:87:d9:8c:a3:26:c2:1e:68:ee:67:86:45:e3:73:ec:f5:
dd:97:e7:ed:df:ab:cf:7f:c3:51:b9:cc:d4:26:96:0d:24:3f:
8a:48:61:d7:51:c0:4f:79:9a:82:50:2c:bd:62:cb:12:4a:f7:
d5:cf:85:89:19:08:25:17:25:81:e9:f2:0c:58:c3:c9:9f:41:
11:a0:8f:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 10:14:14 2026 by rpki-client