Route Origin Authorization
$ rpki-client -vvvf rpki.apnic.net/member_repository/A913D1EA/9C932B48173A11EBA3B97E7FC4F9AE02/D6011C5AAD9811F1B4E8CBF46A11F970.roa
File: D6011C5AAD9811F1B4E8CBF46A11F970.roa (raw, json)
Hash identifier: b28Ex1N54w6rpGGP58z8s9hERidI1so2TC9OIUEgb5I=
Subject key identifier: B0:85:9A:B1:04:ED:B2:EB:19:42:5D:EF:4F:BB:8A:EE:98:63:1A:AA
Certificate issuer: /CN=A913D1EA/serialNumber=E692C5B60B3EF1C2044439FC390AD56DC3CBCD63
Certificate serial: 09F1
Authority key identifier: E6:92:C5:B6:0B:3E:F1:C2:04:44:39:FC:39:0A:D5:6D:C3:CB:CD:63
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5pLFtgs-8cIERDn8OQrVbcPLzWM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A913D1EA/9C932B48173A11EBA3B97E7FC4F9AE02/D6011C5AAD9811F1B4E8CBF46A11F970.roa
Signing time: Fri 11 Sep 2026 04:25:36 +0000
ROA not before: Fri 11 Sep 2026 04:25:36 +0000
ROA not after: Wed 30 Dec 2026 00:00:00 +0000
asID: 135607
IP address blocks: 61.245.4.0/24 maxlen: 24
61.245.5.0/24 maxlen: 24
61.245.6.0/24 maxlen: 24
61.245.7.0/24 maxlen: 24
61.245.8.0/24 maxlen: 24
61.245.9.0/24 maxlen: 24
61.245.12.0/24 maxlen: 24
61.245.13.0/24 maxlen: 24
61.245.14.0/24 maxlen: 24
61.245.15.0/24 maxlen: 24
61.245.16.0/24 maxlen: 24
61.245.17.0/24 maxlen: 24
61.245.18.0/24 maxlen: 24
61.245.19.0/24 maxlen: 24
61.245.20.0/24 maxlen: 24
61.245.21.0/24 maxlen: 24
61.245.22.0/24 maxlen: 24
61.245.23.0/24 maxlen: 24
61.245.24.0/24 maxlen: 24
61.245.25.0/24 maxlen: 24
61.245.26.0/24 maxlen: 24
61.245.27.0/24 maxlen: 24
61.245.28.0/24 maxlen: 24
61.245.29.0/24 maxlen: 24
61.245.30.0/24 maxlen: 24
61.245.120.0/24 maxlen: 24
61.245.121.0/24 maxlen: 24
61.245.122.0/24 maxlen: 24
61.245.123.0/24 maxlen: 24
103.76.160.0/23 maxlen: 23
103.76.160.0/24 maxlen: 24
103.76.161.0/24 maxlen: 24
103.100.100.0/23 maxlen: 23
103.100.100.0/24 maxlen: 24
103.100.101.0/24 maxlen: 24
126.52.128.0/24 maxlen: 24
126.52.129.0/24 maxlen: 24
126.52.132.0/24 maxlen: 24
126.52.138.0/24 maxlen: 24
126.52.139.0/24 maxlen: 24
126.52.140.0/24 maxlen: 24
126.52.141.0/24 maxlen: 24
126.52.142.0/24 maxlen: 24
126.52.143.0/24 maxlen: 24
126.52.144.0/24 maxlen: 24
126.52.145.0/24 maxlen: 24
126.52.146.0/24 maxlen: 24
126.52.147.0/24 maxlen: 24
126.52.148.0/24 maxlen: 24
126.52.149.0/24 maxlen: 24
126.52.150.0/24 maxlen: 24
126.52.151.0/24 maxlen: 24
126.52.152.0/24 maxlen: 24
126.52.153.0/24 maxlen: 24
126.52.154.0/24 maxlen: 24
126.52.155.0/24 maxlen: 24
126.52.156.0/24 maxlen: 24
126.52.157.0/24 maxlen: 24
126.52.158.0/24 maxlen: 24
126.209.0.0/22 maxlen: 24
126.209.4.0/22 maxlen: 24
126.209.8.0/24 maxlen: 24
126.209.9.0/24 maxlen: 24
126.209.10.0/24 maxlen: 24
126.209.11.0/24 maxlen: 24
126.209.12.0/24 maxlen: 24
126.209.13.0/24 maxlen: 24
126.209.14.0/24 maxlen: 24
126.209.16.0/24 maxlen: 24
126.209.17.0/24 maxlen: 24
126.209.18.0/24 maxlen: 24
126.209.19.0/24 maxlen: 24
126.209.20.0/24 maxlen: 24
126.209.21.0/24 maxlen: 24
126.209.22.0/24 maxlen: 24
126.209.23.0/24 maxlen: 24
126.209.24.0/24 maxlen: 24
126.209.25.0/24 maxlen: 24
126.209.26.0/24 maxlen: 24
126.209.27.0/24 maxlen: 24
126.209.28.0/24 maxlen: 24
126.209.29.0/24 maxlen: 24
126.209.30.0/24 maxlen: 24
126.209.31.0/24 maxlen: 24
126.209.32.0/24 maxlen: 24
126.209.34.0/24 maxlen: 24
126.209.35.0/24 maxlen: 24
126.209.36.0/24 maxlen: 24
126.209.39.0/24 maxlen: 24
126.209.41.0/24 maxlen: 24
126.209.44.0/24 maxlen: 24
126.209.45.0/24 maxlen: 24
126.209.46.0/24 maxlen: 24
126.209.47.0/24 maxlen: 24
126.209.48.0/24 maxlen: 24
126.209.49.0/24 maxlen: 24
126.209.50.0/24 maxlen: 24
126.209.52.0/24 maxlen: 24
126.209.53.0/24 maxlen: 24
126.209.54.0/24 maxlen: 24
126.209.55.0/24 maxlen: 24
126.209.56.0/24 maxlen: 24
126.209.57.0/24 maxlen: 24
126.209.61.0/24 maxlen: 24
126.209.62.0/24 maxlen: 24
126.209.64.0/24 maxlen: 24
126.209.65.0/24 maxlen: 24
126.209.66.0/24 maxlen: 24
126.209.67.0/24 maxlen: 24
126.209.68.0/24 maxlen: 24
126.209.69.0/24 maxlen: 24
126.209.70.0/24 maxlen: 24
126.209.71.0/24 maxlen: 24
126.209.72.0/24 maxlen: 24
126.209.73.0/24 maxlen: 24
126.209.74.0/24 maxlen: 24
126.209.75.0/24 maxlen: 24
126.209.76.0/24 maxlen: 24
126.209.77.0/24 maxlen: 24
126.209.78.0/24 maxlen: 24
126.209.79.0/24 maxlen: 24
126.209.82.0/24 maxlen: 24
126.209.83.0/24 maxlen: 24
126.209.84.0/24 maxlen: 24
126.209.87.0/24 maxlen: 24
126.209.92.0/24 maxlen: 24
126.209.93.0/24 maxlen: 24
126.209.95.0/24 maxlen: 24
126.209.104.0/24 maxlen: 24
126.209.105.0/24 maxlen: 24
126.209.106.0/24 maxlen: 24
126.209.107.0/24 maxlen: 24
126.209.108.0/24 maxlen: 24
126.209.109.0/24 maxlen: 24
126.209.110.0/24 maxlen: 24
126.209.112.0/24 maxlen: 24
126.209.113.0/24 maxlen: 24
126.209.114.0/24 maxlen: 24
126.209.115.0/24 maxlen: 24
126.209.122.0/24 maxlen: 24
126.209.124.0/24 maxlen: 24
126.209.125.0/24 maxlen: 24
2401:e740::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A913D1EA/9C932B48173A11EBA3B97E7FC4F9AE02/5pLFtgs-8cIERDn8OQrVbcPLzWM.crl
rsync://rpki.apnic.net/member_repository/A913D1EA/9C932B48173A11EBA3B97E7FC4F9AE02/5pLFtgs-8cIERDn8OQrVbcPLzWM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5pLFtgs-8cIERDn8OQrVbcPLzWM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 27 Sep 2026 20:47:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2545 (0x9f1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A913D1EA, serialNumber=E692C5B60B3EF1C2044439FC390AD56DC3CBCD63
Validity
Not Before: Sep 11 04:25:36 2026 GMT
Not After : Dec 30 00:00:00 2026 GMT
Subject: CN=6aa382c0-2e63
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:b5:f3:20:77:06:b1:fa:2c:83:a1:cf:9d:50:
34:8d:3a:2a:fa:5a:15:41:f3:65:77:f8:85:24:25:
f1:d1:2f:21:90:53:49:6e:0e:86:4c:a2:bd:44:f5:
f6:dc:b1:cf:e3:ea:58:d8:6d:67:ff:f8:5e:67:a8:
39:e9:14:10:e1:5b:b3:14:30:4e:ba:01:e9:1d:97:
4f:11:8f:00:05:bf:b8:6a:34:5a:08:c3:56:fa:fd:
63:6f:7a:b3:f6:60:22:ea:76:7c:e2:5e:a9:c1:29:
4b:16:94:c3:0b:ed:90:47:6d:34:5b:19:0f:0f:4d:
7d:6f:f1:05:80:58:f3:02:2a:a4:1d:2c:34:7b:66:
0b:fc:d7:c5:54:9c:a1:7d:cb:1c:85:74:9e:57:2b:
99:8a:26:37:09:d7:e3:51:a5:f5:c6:24:78:3f:fb:
07:4a:a5:b9:aa:20:9d:41:e7:6f:a5:0b:da:36:90:
55:af:4e:d0:7d:2a:43:f4:b0:e8:f9:a7:1a:18:80:
dc:12:d9:0c:f5:6f:6b:f2:b7:8b:ca:da:5a:b7:d4:
7f:a9:4d:14:64:19:b4:f8:ed:2d:f6:be:57:9b:aa:
f1:c2:13:19:e6:e5:e7:b2:5f:a0:a5:67:eb:0e:f6:
33:36:a0:25:46:48:f5:48:67:56:8a:ac:98:6d:2b:
b6:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:85:9A:B1:04:ED:B2:EB:19:42:5D:EF:4F:BB:8A:EE:98:63:1A:AA
X509v3 Authority Key Identifier:
keyid:E6:92:C5:B6:0B:3E:F1:C2:04:44:39:FC:39:0A:D5:6D:C3:CB:CD:63
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A913D1EA/9C932B48173A11EBA3B97E7FC4F9AE02/5pLFtgs-8cIERDn8OQrVbcPLzWM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5pLFtgs-8cIERDn8OQrVbcPLzWM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913D1EA/9C932B48173A11EBA3B97E7FC4F9AE02/D6011C5AAD9811F1B4E8CBF46A11F970.roa
sbgp-ipAddrBlock: critical
IPv4:
61.245.4.0-61.245.9.255
61.245.12.0-61.245.30.255
61.245.120.0/22
103.76.160.0/23
103.100.100.0/23
126.52.128.0/23
126.52.132.0/24
126.52.138.0-126.52.158.255
126.209.0.0-126.209.14.255
126.209.16.0-126.209.32.255
126.209.34.0-126.209.36.255
126.209.39.0/24
126.209.41.0/24
126.209.44.0-126.209.50.255
126.209.52.0-126.209.57.255
126.209.61.0-126.209.62.255
126.209.64.0/20
126.209.82.0-126.209.84.255
126.209.87.0/24
126.209.92.0/23
126.209.95.0/24
126.209.104.0-126.209.110.255
126.209.112.0/22
126.209.122.0/24
126.209.124.0/23
IPv6:
2401:e740::/32
Signature Algorithm: sha256WithRSAEncryption
3a:39:62:5a:24:cd:f5:2a:57:c1:58:b8:a5:6a:5e:2b:d8:51:
1a:f7:13:56:5c:ce:b0:34:4b:83:dd:39:9c:d6:e1:af:5a:8b:
bd:6c:93:74:a8:4c:83:ef:dc:31:25:45:75:86:36:01:58:00:
c4:fb:c6:b5:8a:55:1b:48:8f:c0:a9:76:05:a2:97:73:14:a3:
c0:09:76:75:d4:47:b6:b8:b2:eb:60:0c:ab:c8:2e:5e:31:ce:
d5:0c:cc:89:7f:ac:92:62:33:1b:c9:24:ae:f5:54:d5:cd:68:
86:aa:79:fb:ac:1c:84:a7:0e:34:91:7b:c9:96:89:7a:b0:17:
c8:f2:53:a2:39:36:35:43:c5:a1:d6:09:21:63:42:ec:1c:21:
a0:dc:9c:11:97:cc:90:f2:88:82:3b:41:70:de:61:19:87:c3:
93:28:23:4c:9e:d9:3f:79:5a:c6:12:8c:78:8f:d5:54:29:39:
ab:a0:e1:6e:08:17:19:02:60:44:42:77:f7:04:a3:24:da:e0:
b5:c9:f3:11:e2:6a:38:66:6e:38:eb:58:e5:7d:43:93:cb:36:
de:4f:e5:e3:a1:02:7c:d9:b6:2c:7a:b1:60:87:9c:bf:8c:b2:
cd:dc:16:e6:c7:ef:f7:58:4f:d0:9e:e9:36:44:2b:5f:4a:3e:
0d:c2:9d:63
-----BEGIN CERTIFICATE-----
MIIGOjCCBSKgAwIBAgICCfEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
M0QxRUExMTAvBgNVBAUTKEU2OTJDNUI2MEIzRUYxQzIwNDQ0MzlGQzM5MEFENTZE
QzNDQkNENjMwHhcNMjYwOTExMDQyNTM2WhcNMjYxMjMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02YWEzODJjMC0yZTYzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA0rXzIHcGsfosg6HPnVA0jToq+loVQfNld/iFJCXx0S8hkFNJbg6GTKK9RPX2
3LHP4+pY2G1n//heZ6g56RQQ4VuzFDBOugHpHZdPEY8ABb+4ajRaCMNW+v1jb3qz
9mAi6nZ84l6pwSlLFpTDC+2QR200WxkPD019b/EFgFjzAiqkHSw0e2YL/NfFVJyh
fcschXSeVyuZiiY3CdfjUaX1xiR4P/sHSqW5qiCdQedvpQvaNpBVr07QfSpD9LDo
+acaGIDcEtkM9W9r8reLytpat9R/qU0UZBm0+O0t9r5Xm6rxwhMZ5uXnsl+gpWfr
DvYzNqAlRkj1SGdWiqyYbSu2uwIDAQABo4IDXjCCA1owHQYDVR0OBBYEFLCFmrEE
7bLrGUJd70+7iu6YYxqqMB8GA1UdIwQYMBaAFOaSxbYLPvHCBEQ5/DkK1W3Dy81j
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzRDFFQS85QzkzMkI0ODE3
M0ExMUVCQTNCOTdFN0ZDNEY5QUUwMi81cExGdGdzLThjSUVSRG44T1FyVmJjUEx6
V00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzVwTEZ0Z3MtOGNJRVJEbjhPUXJWYmNQTHpXTS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
M0QxRUEvOUM5MzJCNDgxNzNBMTFFQkEzQjk3RTdGQzRGOUFFMDIvRDYwMTFDNUFB
RDk4MTFGMUI0RThDQkY0NkExMUY5NzAucm9hMIIBGwYIKwYBBQUHAQcBAf8EggEK
MIIBBjCB9AQCAAEwge0wDAMEAj31BAMEAT31CDAMAwQCPfUMAwQAPfUeAwQCPfV4
AwQBZ0ygAwQBZ2RkAwQBfjSAAwQAfjSEMAwDBAF+NIoDBAB+NJ4wCwMDAH7RAwQA
ftEOMAwDBAR+0RADBAB+0SAwDAMEAX7RIgMEAH7RJAMEAH7RJwMEAH7RKTAMAwQC
ftEsAwQAftEyMAwDBAJ+0TQDBAF+0TgwDAMEAH7RPQMEAH7RPgMEBH7RQDAMAwQB
ftFSAwQAftFUAwQAftFXAwQBftFcAwQAftFfMAwDBAN+0WgDBAB+0W4DBAJ+0XAD
BAB+0XoDBAF+0XwwDQQCAAIwBwMFACQB50AwDQYJKoZIhvcNAQELBQADggEBADo5
YlokzfUqV8FYuKVqXivYURr3E1ZczrA0S4PdOZzW4a9ai71sk3SoTIPv3DElRXWG
NgFYAMT7xrWKVRtIj8CpdgWil3MUo8AJdnXUR7a4sutgDKvILl4xztUMzIl/rJJi
MxvJJK71VNXNaIaqefusHISnDjSRe8mWiXqwF8jyU6I5NjVDxaHWCSFjQuwcIaDc
nBGXzJDyiII7QXDeYRmHw5MoI0ye2T95WsYSjHiP1VQpOaug4W4IFxkCYERCd/cE
oyTa4LXJ8xHiajhmbjjrWOV9Q5PLNt5P5eOhAnzZtix6sWCHnL+Mss3cFubH7/dY
T9Ce6TZEK19KPg3CnWM=
-----END CERTIFICATE-----
Generated at Tue Sep 22 18:27:44 2026 by rpki-client