Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A913D1EA/9C932B48173A11EBA3B97E7FC4F9AE02/C34D8010A7D311F0A3E6E75EC4F9AE02.roa
File: C34D8010A7D311F0A3E6E75EC4F9AE02.roa (raw, json)
Hash identifier: E/cmWCt7wJm7XfYKnd6uTnnMTRXprrckSYOl8rNGMiw=
Subject key identifier: AE:8F:57:51:B8:A8:EA:C2:C5:6D:40:78:18:F8:DC:7D:38:7B:41:BA
Certificate issuer: /CN=A913D1EA/serialNumber=E692C5B60B3EF1C2044439FC390AD56DC3CBCD63
Certificate serial: 08E9
Authority key identifier: E6:92:C5:B6:0B:3E:F1:C2:04:44:39:FC:39:0A:D5:6D:C3:CB:CD:63
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5pLFtgs-8cIERDn8OQrVbcPLzWM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A913D1EA/9C932B48173A11EBA3B97E7FC4F9AE02/C34D8010A7D311F0A3E6E75EC4F9AE02.roa
Signing time: Tue 04 Nov 2025 21:40:31 +0000
ROA not before: Tue 04 Nov 2025 21:40:31 +0000
ROA not after: Wed 30 Dec 2026 00:00:00 +0000
asID: 135607
IP address blocks: 61.245.4.0/24 maxlen: 24
61.245.5.0/24 maxlen: 24
61.245.6.0/24 maxlen: 24
61.245.7.0/24 maxlen: 24
61.245.8.0/24 maxlen: 24
61.245.9.0/24 maxlen: 24
61.245.12.0/24 maxlen: 24
61.245.13.0/24 maxlen: 24
61.245.14.0/24 maxlen: 24
61.245.15.0/24 maxlen: 24
61.245.16.0/24 maxlen: 24
61.245.17.0/24 maxlen: 24
61.245.18.0/24 maxlen: 24
61.245.19.0/24 maxlen: 24
61.245.20.0/24 maxlen: 24
61.245.21.0/24 maxlen: 24
61.245.22.0/24 maxlen: 24
61.245.23.0/24 maxlen: 24
61.245.24.0/24 maxlen: 24
61.245.25.0/24 maxlen: 24
61.245.26.0/24 maxlen: 24
61.245.27.0/24 maxlen: 24
61.245.28.0/24 maxlen: 24
61.245.29.0/24 maxlen: 24
61.245.30.0/24 maxlen: 24
61.245.120.0/24 maxlen: 24
61.245.121.0/24 maxlen: 24
61.245.122.0/24 maxlen: 24
61.245.123.0/24 maxlen: 24
103.76.160.0/23 maxlen: 23
103.76.160.0/24 maxlen: 24
103.76.161.0/24 maxlen: 24
103.100.100.0/23 maxlen: 23
103.100.100.0/24 maxlen: 24
103.100.101.0/24 maxlen: 24
126.209.0.0/22 maxlen: 24
126.209.4.0/22 maxlen: 24
126.209.8.0/24 maxlen: 24
126.209.9.0/24 maxlen: 24
126.209.10.0/24 maxlen: 24
126.209.11.0/24 maxlen: 24
126.209.12.0/24 maxlen: 24
126.209.13.0/24 maxlen: 24
126.209.14.0/24 maxlen: 24
126.209.16.0/24 maxlen: 24
126.209.17.0/24 maxlen: 24
126.209.18.0/24 maxlen: 24
126.209.19.0/24 maxlen: 24
126.209.20.0/24 maxlen: 24
126.209.21.0/24 maxlen: 24
126.209.22.0/24 maxlen: 24
126.209.23.0/24 maxlen: 24
126.209.24.0/24 maxlen: 24
126.209.25.0/24 maxlen: 24
126.209.26.0/24 maxlen: 24
126.209.27.0/24 maxlen: 24
126.209.28.0/24 maxlen: 24
126.209.29.0/24 maxlen: 24
126.209.30.0/24 maxlen: 24
126.209.31.0/24 maxlen: 24
126.209.32.0/24 maxlen: 24
126.209.34.0/24 maxlen: 24
126.209.35.0/24 maxlen: 24
126.209.36.0/24 maxlen: 24
126.209.38.0/24 maxlen: 24
126.209.39.0/24 maxlen: 24
126.209.40.0/24 maxlen: 24
126.209.41.0/24 maxlen: 24
126.209.44.0/24 maxlen: 24
126.209.45.0/24 maxlen: 24
126.209.46.0/24 maxlen: 24
126.209.47.0/24 maxlen: 24
126.209.48.0/24 maxlen: 24
126.209.49.0/24 maxlen: 24
126.209.50.0/24 maxlen: 24
126.209.52.0/24 maxlen: 24
126.209.53.0/24 maxlen: 24
126.209.54.0/24 maxlen: 24
126.209.55.0/24 maxlen: 24
126.209.56.0/24 maxlen: 24
126.209.57.0/24 maxlen: 24
126.209.61.0/24 maxlen: 24
126.209.62.0/24 maxlen: 24
126.209.64.0/24 maxlen: 24
126.209.65.0/24 maxlen: 24
126.209.66.0/24 maxlen: 24
126.209.67.0/24 maxlen: 24
126.209.68.0/24 maxlen: 24
126.209.69.0/24 maxlen: 24
126.209.70.0/24 maxlen: 24
126.209.71.0/24 maxlen: 24
126.209.72.0/24 maxlen: 24
126.209.73.0/24 maxlen: 24
126.209.74.0/24 maxlen: 24
126.209.75.0/24 maxlen: 24
126.209.76.0/24 maxlen: 24
126.209.77.0/24 maxlen: 24
126.209.78.0/24 maxlen: 24
126.209.79.0/24 maxlen: 24
126.209.82.0/24 maxlen: 24
126.209.83.0/24 maxlen: 24
126.209.84.0/24 maxlen: 24
126.209.87.0/24 maxlen: 24
126.209.92.0/24 maxlen: 24
126.209.93.0/24 maxlen: 24
126.209.95.0/24 maxlen: 24
126.209.104.0/24 maxlen: 24
126.209.105.0/24 maxlen: 24
126.209.106.0/24 maxlen: 24
126.209.107.0/24 maxlen: 24
126.209.108.0/24 maxlen: 24
126.209.109.0/24 maxlen: 24
126.209.110.0/24 maxlen: 24
126.209.111.0/24 maxlen: 24
126.209.112.0/24 maxlen: 24
126.209.113.0/24 maxlen: 24
126.209.114.0/24 maxlen: 24
126.209.115.0/24 maxlen: 24
126.209.116.0/24 maxlen: 24
126.209.117.0/24 maxlen: 24
126.209.118.0/24 maxlen: 24
126.209.119.0/24 maxlen: 24
126.209.120.0/24 maxlen: 24
126.209.121.0/24 maxlen: 24
126.209.122.0/24 maxlen: 24
126.209.123.0/24 maxlen: 24
126.209.124.0/24 maxlen: 24
126.209.125.0/24 maxlen: 24
126.209.126.0/24 maxlen: 24
126.209.127.0/24 maxlen: 24
2401:e740::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A913D1EA/9C932B48173A11EBA3B97E7FC4F9AE02/5pLFtgs-8cIERDn8OQrVbcPLzWM.crl
rsync://rpki.apnic.net/member_repository/A913D1EA/9C932B48173A11EBA3B97E7FC4F9AE02/5pLFtgs-8cIERDn8OQrVbcPLzWM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5pLFtgs-8cIERDn8OQrVbcPLzWM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 11 Nov 2025 21:40:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2281 (0x8e9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A913D1EA, serialNumber=E692C5B60B3EF1C2044439FC390AD56DC3CBCD63
Validity
Not Before: Nov 4 21:40:31 2025 GMT
Not After : Dec 30 00:00:00 2026 GMT
Subject: CN=690a72cf-f364
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:cd:67:a6:1f:fd:3a:79:8f:57:2a:2d:69:c7:
9f:be:30:28:a5:a3:f8:49:87:bb:6f:b1:e1:88:15:
8e:74:de:72:53:dd:fb:ff:2e:f8:f5:e8:97:02:b5:
2d:c1:a7:8a:f2:40:5a:28:6d:7d:19:59:9c:18:3b:
ed:b2:80:d0:70:26:fa:6e:d1:e0:4e:0f:22:6c:1a:
c6:53:e3:0f:bd:8e:43:75:4e:4a:f9:4d:cd:89:a0:
e2:a1:7e:0a:78:7c:25:16:ed:26:d6:8f:3b:f8:07:
c3:09:ac:8b:32:9d:b7:b8:5b:df:f6:d9:90:11:60:
38:a8:8f:7a:34:77:aa:d6:b1:1e:6d:36:7b:94:77:
f2:92:5d:10:cb:f4:78:79:0b:7d:80:a2:10:ec:84:
31:af:ec:1f:c3:05:37:63:16:ae:2c:ed:d4:3d:57:
72:07:66:a5:17:e0:81:9c:64:64:7e:65:9c:68:a3:
3f:56:00:da:fd:48:ae:9b:ff:f2:d9:a3:f5:21:05:
79:36:76:b2:64:eb:31:b3:af:4e:e8:0a:76:34:d0:
aa:a8:fd:47:18:20:7d:03:82:3b:dd:57:31:9c:49:
c2:61:29:d6:5c:f2:f6:5b:2a:c6:06:c5:b0:41:6c:
02:ad:c7:66:d2:08:f6:ac:c4:27:0a:1c:6a:59:48:
69:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:8F:57:51:B8:A8:EA:C2:C5:6D:40:78:18:F8:DC:7D:38:7B:41:BA
X509v3 Authority Key Identifier:
keyid:E6:92:C5:B6:0B:3E:F1:C2:04:44:39:FC:39:0A:D5:6D:C3:CB:CD:63
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A913D1EA/9C932B48173A11EBA3B97E7FC4F9AE02/5pLFtgs-8cIERDn8OQrVbcPLzWM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5pLFtgs-8cIERDn8OQrVbcPLzWM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913D1EA/9C932B48173A11EBA3B97E7FC4F9AE02/C34D8010A7D311F0A3E6E75EC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
61.245.4.0-61.245.9.255
61.245.12.0-61.245.30.255
61.245.120.0/22
103.76.160.0/23
103.100.100.0/23
126.209.0.0-126.209.14.255
126.209.16.0-126.209.32.255
126.209.34.0-126.209.36.255
126.209.38.0-126.209.41.255
126.209.44.0-126.209.50.255
126.209.52.0-126.209.57.255
126.209.61.0-126.209.62.255
126.209.64.0/20
126.209.82.0-126.209.84.255
126.209.87.0/24
126.209.92.0/23
126.209.95.0/24
126.209.104.0-126.209.127.255
IPv6:
2401:e740::/32
Signature Algorithm: sha256WithRSAEncryption
4b:87:45:4b:19:19:fe:68:2b:6c:c8:f6:6a:54:d3:2f:e1:0a:
da:28:37:79:de:7a:f5:ae:ee:0f:b7:f2:b8:1c:cd:96:50:33:
96:4d:91:ad:41:cd:6b:b0:b3:3c:4f:a2:d3:3a:3f:db:2a:d8:
3e:61:81:0b:86:b3:94:13:00:13:04:c3:9b:a0:39:b0:ff:9d:
6a:4c:2d:45:17:32:2e:cb:b2:da:4f:35:39:a9:1a:49:7e:07:
a5:9f:ce:90:42:52:f2:76:3d:74:9b:fb:46:fc:13:30:2a:55:
2d:f0:62:e9:f5:a0:35:a7:d0:53:2c:ea:24:78:69:a1:d1:0f:
9e:04:68:48:e4:56:f0:6c:7f:75:25:63:75:b4:7c:e4:ae:92:
71:f3:62:90:79:69:6c:af:d4:7f:23:98:42:d9:c9:91:1f:8d:
a8:b8:06:5d:92:bf:32:46:79:3e:e8:cd:82:ab:0e:b7:02:95:
7d:80:ad:a4:59:0b:38:36:ef:6a:56:bd:8b:ac:6b:ee:33:db:
67:ea:7d:67:fb:5d:bb:00:c2:2d:fe:79:c8:16:34:e8:87:9b:
03:ee:e2:df:59:ad:64:aa:4c:6a:7c:b8:70:db:d0:dd:2f:81:
a8:e7:ad:26:ce:f5:88:5e:20:ba:56:c0:fc:8c:c5:67:0f:80:
c7:ef:db:f3
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgICCOkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
M0QxRUExMTAvBgNVBAUTKEU2OTJDNUI2MEIzRUYxQzIwNDQ0MzlGQzM5MEFENTZE
QzNDQkNENjMwHhcNMjUxMTA0MjE0MDMxWhcNMjYxMjMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02OTBhNzJjZi1mMzY0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAts1nph/9OnmPVyotacefvjAopaP4SYe7b7HhiBWOdN5yU937/y749eiXArUt
waeK8kBaKG19GVmcGDvtsoDQcCb6btHgTg8ibBrGU+MPvY5DdU5K+U3NiaDioX4K
eHwlFu0m1o87+AfDCayLMp23uFvf9tmQEWA4qI96NHeq1rEebTZ7lHfykl0Qy/R4
eQt9gKIQ7IQxr+wfwwU3YxauLO3UPVdyB2alF+CBnGRkfmWcaKM/VgDa/Uium//y
2aP1IQV5NnayZOsxs69O6Ap2NNCqqP1HGCB9A4I73VcxnEnCYSnWXPL2WyrGBsWw
QWwCrcdm0gj2rMQnChxqWUhpqQIDAQABo4IDZjCCA2IwHQYDVR0OBBYEFK6PV1G4
qOrCxW1AeBj43H04e0G6MB8GA1UdIwQYMBaAFOaSxbYLPvHCBEQ5/DkK1W3Dy81j
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzRDFFQS85QzkzMkI0ODE3
M0ExMUVCQTNCOTdFN0ZDNEY5QUUwMi81cExGdGdzLThjSUVSRG44T1FyVmJjUEx6
V00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzVwTEZ0Z3MtOGNJRVJEbjhPUXJWYmNQTHpXTS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
M0QxRUEvOUM5MzJCNDgxNzNBMTFFQkEzQjk3RTdGQzRGOUFFMDIvQzM0RDgwMTBB
N0QzMTFGMEEzRTZFNzVFQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwge8GCCsGAQUFBwEHAQH/
BIHfMIHcMIHKBAIAATCBwzAMAwQCPfUEAwQBPfUIMAwDBAI99QwDBAA99R4DBAI9
9XgDBAFnTKADBAFnZGQwCwMDAH7RAwQAftEOMAwDBAR+0RADBAB+0SAwDAMEAX7R
IgMEAH7RJDAMAwQBftEmAwQBftEoMAwDBAJ+0SwDBAB+0TIwDAMEAn7RNAMEAX7R
ODAMAwQAftE9AwQAftE+AwQEftFAMAwDBAF+0VIDBAB+0VQDBAB+0VcDBAF+0VwD
BAB+0V8wDAMEA37RaAMEB37RADANBAIAAjAHAwUAJAHnQDANBgkqhkiG9w0BAQsF
AAOCAQEAS4dFSxkZ/mgrbMj2alTTL+EK2ig3ed569a7uD7fyuBzNllAzlk2RrUHN
a7CzPE+i0zo/2yrYPmGBC4azlBMAEwTDm6A5sP+dakwtRRcyLsuy2k81OakaSX4H
pZ/OkEJS8nY9dJv7RvwTMCpVLfBi6fWgNafQUyzqJHhpodEPngRoSORW8Gx/dSVj
dbR85K6ScfNikHlpbK/UfyOYQtnJkR+NqLgGXZK/MkZ5PujNgqsOtwKVfYCtpFkL
ODbvala9i6xr7jPbZ+p9Z/tduwDCLf55yBY06IebA+7i31mtZKpMany4cNvQ3S+B
qOetJs71iF4gulbA/IzFZw+Ax+/b8w==
-----END CERTIFICATE-----
Generated at Wed Nov 5 00:02:42 2025 by rpki-client