Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A913D1EA/9C932B48173A11EBA3B97E7FC4F9AE02/60820156870F11F1B3BF48936A11F970.roa
File: 60820156870F11F1B3BF48936A11F970.roa (raw, json)
Hash identifier: oWZgU1w+b7QMsoa3DW9jptru7ay+PG55i/qX0QvSkQ4=
Subject key identifier: 1E:4A:68:B2:D0:7D:E6:DD:2D:B5:5F:C9:8B:87:40:17:A4:91:84:E7
Certificate issuer: /CN=A913D1EA/serialNumber=E692C5B60B3EF1C2044439FC390AD56DC3CBCD63
Certificate serial: 09C7
Authority key identifier: E6:92:C5:B6:0B:3E:F1:C2:04:44:39:FC:39:0A:D5:6D:C3:CB:CD:63
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5pLFtgs-8cIERDn8OQrVbcPLzWM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A913D1EA/9C932B48173A11EBA3B97E7FC4F9AE02/60820156870F11F1B3BF48936A11F970.roa
Signing time: Fri 24 Jul 2026 03:25:54 +0000
ROA not before: Fri 24 Jul 2026 03:25:54 +0000
ROA not after: Wed 30 Dec 2026 00:00:00 +0000
asID: 135607
IP address blocks: 61.245.4.0/24 maxlen: 24
61.245.5.0/24 maxlen: 24
61.245.6.0/24 maxlen: 24
61.245.7.0/24 maxlen: 24
61.245.8.0/24 maxlen: 24
61.245.9.0/24 maxlen: 24
61.245.12.0/24 maxlen: 24
61.245.13.0/24 maxlen: 24
61.245.14.0/24 maxlen: 24
61.245.15.0/24 maxlen: 24
61.245.16.0/24 maxlen: 24
61.245.17.0/24 maxlen: 24
61.245.18.0/24 maxlen: 24
61.245.19.0/24 maxlen: 24
61.245.20.0/24 maxlen: 24
61.245.21.0/24 maxlen: 24
61.245.22.0/24 maxlen: 24
61.245.23.0/24 maxlen: 24
61.245.24.0/24 maxlen: 24
61.245.25.0/24 maxlen: 24
61.245.26.0/24 maxlen: 24
61.245.27.0/24 maxlen: 24
61.245.28.0/24 maxlen: 24
61.245.29.0/24 maxlen: 24
61.245.30.0/24 maxlen: 24
61.245.120.0/24 maxlen: 24
61.245.121.0/24 maxlen: 24
61.245.122.0/24 maxlen: 24
61.245.123.0/24 maxlen: 24
103.76.160.0/23 maxlen: 23
103.76.160.0/24 maxlen: 24
103.76.161.0/24 maxlen: 24
103.100.100.0/23 maxlen: 23
103.100.100.0/24 maxlen: 24
103.100.101.0/24 maxlen: 24
126.52.128.0/24 maxlen: 24
126.52.129.0/24 maxlen: 24
126.52.131.0/24 maxlen: 24
126.52.132.0/24 maxlen: 24
126.52.133.0/24 maxlen: 24
126.52.134.0/24 maxlen: 24
126.52.135.0/24 maxlen: 24
126.52.136.0/24 maxlen: 24
126.52.137.0/24 maxlen: 24
126.52.138.0/24 maxlen: 24
126.52.139.0/24 maxlen: 24
126.52.140.0/24 maxlen: 24
126.52.141.0/24 maxlen: 24
126.52.142.0/24 maxlen: 24
126.52.143.0/24 maxlen: 24
126.52.144.0/24 maxlen: 24
126.52.145.0/24 maxlen: 24
126.52.146.0/24 maxlen: 24
126.52.147.0/24 maxlen: 24
126.52.148.0/24 maxlen: 24
126.52.149.0/24 maxlen: 24
126.52.150.0/24 maxlen: 24
126.52.151.0/24 maxlen: 24
126.52.152.0/24 maxlen: 24
126.52.153.0/24 maxlen: 24
126.52.154.0/24 maxlen: 24
126.52.155.0/24 maxlen: 24
126.52.156.0/24 maxlen: 24
126.52.157.0/24 maxlen: 24
126.52.158.0/24 maxlen: 24
126.209.0.0/22 maxlen: 24
126.209.4.0/22 maxlen: 24
126.209.8.0/24 maxlen: 24
126.209.9.0/24 maxlen: 24
126.209.10.0/24 maxlen: 24
126.209.11.0/24 maxlen: 24
126.209.12.0/24 maxlen: 24
126.209.13.0/24 maxlen: 24
126.209.14.0/24 maxlen: 24
126.209.16.0/24 maxlen: 24
126.209.17.0/24 maxlen: 24
126.209.18.0/24 maxlen: 24
126.209.19.0/24 maxlen: 24
126.209.20.0/24 maxlen: 24
126.209.21.0/24 maxlen: 24
126.209.22.0/24 maxlen: 24
126.209.23.0/24 maxlen: 24
126.209.24.0/24 maxlen: 24
126.209.25.0/24 maxlen: 24
126.209.26.0/24 maxlen: 24
126.209.27.0/24 maxlen: 24
126.209.28.0/24 maxlen: 24
126.209.29.0/24 maxlen: 24
126.209.30.0/24 maxlen: 24
126.209.31.0/24 maxlen: 24
126.209.32.0/24 maxlen: 24
126.209.34.0/24 maxlen: 24
126.209.35.0/24 maxlen: 24
126.209.36.0/24 maxlen: 24
126.209.39.0/24 maxlen: 24
126.209.41.0/24 maxlen: 24
126.209.44.0/24 maxlen: 24
126.209.45.0/24 maxlen: 24
126.209.46.0/24 maxlen: 24
126.209.47.0/24 maxlen: 24
126.209.48.0/24 maxlen: 24
126.209.49.0/24 maxlen: 24
126.209.50.0/24 maxlen: 24
126.209.52.0/24 maxlen: 24
126.209.53.0/24 maxlen: 24
126.209.54.0/24 maxlen: 24
126.209.55.0/24 maxlen: 24
126.209.56.0/24 maxlen: 24
126.209.57.0/24 maxlen: 24
126.209.61.0/24 maxlen: 24
126.209.62.0/24 maxlen: 24
126.209.64.0/24 maxlen: 24
126.209.65.0/24 maxlen: 24
126.209.66.0/24 maxlen: 24
126.209.67.0/24 maxlen: 24
126.209.68.0/24 maxlen: 24
126.209.69.0/24 maxlen: 24
126.209.70.0/24 maxlen: 24
126.209.71.0/24 maxlen: 24
126.209.72.0/24 maxlen: 24
126.209.73.0/24 maxlen: 24
126.209.74.0/24 maxlen: 24
126.209.75.0/24 maxlen: 24
126.209.76.0/24 maxlen: 24
126.209.77.0/24 maxlen: 24
126.209.78.0/24 maxlen: 24
126.209.79.0/24 maxlen: 24
126.209.82.0/24 maxlen: 24
126.209.83.0/24 maxlen: 24
126.209.84.0/24 maxlen: 24
126.209.87.0/24 maxlen: 24
126.209.92.0/24 maxlen: 24
126.209.93.0/24 maxlen: 24
126.209.95.0/24 maxlen: 24
126.209.104.0/24 maxlen: 24
126.209.105.0/24 maxlen: 24
126.209.106.0/24 maxlen: 24
126.209.107.0/24 maxlen: 24
126.209.108.0/24 maxlen: 24
126.209.109.0/24 maxlen: 24
126.209.110.0/24 maxlen: 24
126.209.112.0/24 maxlen: 24
126.209.113.0/24 maxlen: 24
126.209.114.0/24 maxlen: 24
126.209.115.0/24 maxlen: 24
126.209.122.0/24 maxlen: 24
126.209.124.0/24 maxlen: 24
126.209.125.0/24 maxlen: 24
2401:e740::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A913D1EA/9C932B48173A11EBA3B97E7FC4F9AE02/5pLFtgs-8cIERDn8OQrVbcPLzWM.crl
rsync://rpki.apnic.net/member_repository/A913D1EA/9C932B48173A11EBA3B97E7FC4F9AE02/5pLFtgs-8cIERDn8OQrVbcPLzWM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5pLFtgs-8cIERDn8OQrVbcPLzWM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 04 Aug 2026 21:22:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2503 (0x9c7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A913D1EA, serialNumber=E692C5B60B3EF1C2044439FC390AD56DC3CBCD63
Validity
Not Before: Jul 24 03:25:54 2026 GMT
Not After : Dec 30 00:00:00 2026 GMT
Subject: CN=6a62db42-f031
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:4d:de:56:d4:ee:43:a4:69:1e:85:c1:09:ec:
f8:99:82:e7:7b:73:ff:7b:88:32:ed:50:ba:65:3c:
44:77:3f:9e:09:97:e4:2d:07:cd:7b:03:1d:9b:aa:
8a:e2:0e:69:c0:e9:e3:60:49:ac:4e:1d:0b:83:c4:
b1:3c:0d:ea:5f:2c:b5:c3:6b:db:1d:0f:bb:3b:ea:
b9:52:89:d7:5a:6e:1b:62:f5:93:38:e0:98:e9:7d:
ca:9c:6d:5a:cd:7f:4a:7a:71:99:6f:4b:cb:a7:33:
cd:3e:3c:ca:d5:e4:fa:81:a2:16:b5:1e:e0:6b:be:
06:05:ea:5d:28:a3:60:0f:d2:35:a6:e6:18:d2:46:
f8:e9:1d:64:6f:31:bc:e5:75:d9:4b:41:0e:b2:0c:
bd:1c:a3:f0:cc:c5:c2:ff:33:af:77:20:d7:7d:a5:
01:9e:91:e7:0c:14:4b:98:a6:a7:25:3b:49:85:b0:
68:8d:c9:79:b0:c0:2f:f7:f5:9c:b6:e5:14:21:74:
cc:6e:af:06:7e:c9:c3:c4:24:69:74:ad:ad:6a:e3:
93:04:6e:7d:39:96:32:4b:a1:1a:06:02:bd:7a:96:
b5:9f:36:73:fe:a7:ac:c2:c7:d4:b6:ba:b7:d9:7c:
82:e1:98:95:58:1f:76:a7:78:74:70:a8:af:14:1b:
c5:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:4A:68:B2:D0:7D:E6:DD:2D:B5:5F:C9:8B:87:40:17:A4:91:84:E7
X509v3 Authority Key Identifier:
keyid:E6:92:C5:B6:0B:3E:F1:C2:04:44:39:FC:39:0A:D5:6D:C3:CB:CD:63
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A913D1EA/9C932B48173A11EBA3B97E7FC4F9AE02/5pLFtgs-8cIERDn8OQrVbcPLzWM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5pLFtgs-8cIERDn8OQrVbcPLzWM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913D1EA/9C932B48173A11EBA3B97E7FC4F9AE02/60820156870F11F1B3BF48936A11F970.roa
sbgp-ipAddrBlock: critical
IPv4:
61.245.4.0-61.245.9.255
61.245.12.0-61.245.30.255
61.245.120.0/22
103.76.160.0/23
103.100.100.0/23
126.52.128.0/23
126.52.131.0-126.52.158.255
126.209.0.0-126.209.14.255
126.209.16.0-126.209.32.255
126.209.34.0-126.209.36.255
126.209.39.0/24
126.209.41.0/24
126.209.44.0-126.209.50.255
126.209.52.0-126.209.57.255
126.209.61.0-126.209.62.255
126.209.64.0/20
126.209.82.0-126.209.84.255
126.209.87.0/24
126.209.92.0/23
126.209.95.0/24
126.209.104.0-126.209.110.255
126.209.112.0/22
126.209.122.0/24
126.209.124.0/23
IPv6:
2401:e740::/32
Signature Algorithm: sha256WithRSAEncryption
70:db:e3:68:50:f6:8a:fe:17:6e:1a:67:cd:05:95:61:a1:17:
55:ad:31:69:5f:6a:0c:04:e3:fb:91:42:3e:69:e5:05:9a:6c:
71:42:00:39:da:3a:08:ce:2a:d4:08:b5:4e:a3:2e:b5:13:f5:
df:3c:76:23:b2:cf:83:00:3d:a9:bd:fb:1a:27:fc:93:c3:50:
f6:5b:4b:64:b4:82:b5:7f:ec:78:96:c1:af:c2:4d:ca:40:94:
45:60:c3:6b:69:a2:fa:f1:bb:ed:61:9a:33:bb:f6:f9:1b:21:
d1:d3:7e:30:60:b2:8a:81:90:0e:c0:14:be:1d:9b:ce:56:74:
bd:8e:5d:4f:cc:8e:fa:bf:60:82:08:a7:51:78:5a:04:dd:31:
30:83:0b:eb:f9:43:5e:83:7f:d5:09:54:76:1f:dc:29:49:d0:
37:6f:59:01:9a:f2:bd:e9:a9:fa:b4:1f:32:12:30:c2:b0:5f:
4f:09:7d:00:ee:1d:6d:15:15:fa:93:19:e0:59:ab:f3:0a:fa:
48:03:0d:a4:0e:92:8b:39:54:8b:9a:94:ed:64:6d:fe:4c:84:
9c:b9:e7:f6:48:a3:32:82:74:ef:68:2c:f5:1c:b5:c7:1f:1e:
02:78:da:ca:61:08:ca:fc:81:c0:e9:a0:4f:e3:65:30:ac:a5:
a1:ab:6e:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 03:27:22 2026 by rpki-client