Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A913E32A/1B4F9F96FAD311E496C6E80CC4F9AE02/665C2DFC1C1511EFB1AF8F28C4F9AE02.roa
File: 665C2DFC1C1511EFB1AF8F28C4F9AE02.roa (raw, json)
Hash identifier: iWPjEnXjIzrm+5IZL3J0A09F9tdO53qvr62Qap7pWNA=
Subject key identifier: C3:66:7F:7B:BE:18:67:AE:31:0F:3F:30:4D:70:89:E1:52:0F:CB:C1
Certificate issuer: /CN=A913E32A/serialNumber=C1C46FC4A71969E58504A734D4904A7BD2FF0543
Certificate serial: 269E
Authority key identifier: C1:C4:6F:C4:A7:19:69:E5:85:04:A7:34:D4:90:4A:7B:D2:FF:05:43
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wcRvxKcZaeWFBKc01JBKe9L_BUM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A913E32A/1B4F9F96FAD311E496C6E80CC4F9AE02/665C2DFC1C1511EFB1AF8F28C4F9AE02.roa
Signing time: Sun 01 Mar 2026 11:27:02 +0000
ROA not before: Fri 06 Jun 2025 15:52:33 +0000
ROA not after: Thu 30 Jul 2026 00:00:00 +0000
asID: 7590
IP address blocks: 203.124.32.0/24 maxlen: 24
203.124.33.0/24 maxlen: 24
203.124.35.0/24 maxlen: 24
203.124.36.0/24 maxlen: 24
203.124.37.0/24 maxlen: 24
203.124.38.0/24 maxlen: 24
203.124.39.0/24 maxlen: 24
203.124.40.0/24 maxlen: 24
203.124.41.0/24 maxlen: 24
203.124.42.0/24 maxlen: 24
203.124.43.0/24 maxlen: 24
203.124.44.0/24 maxlen: 24
203.124.45.0/24 maxlen: 24
203.124.46.0/24 maxlen: 24
203.124.47.0/24 maxlen: 24
203.124.48.0/24 maxlen: 24
203.124.49.0/24 maxlen: 24
203.124.50.0/24 maxlen: 24
203.124.51.0/24 maxlen: 24
203.124.52.0/24 maxlen: 24
203.124.53.0/24 maxlen: 24
203.124.56.0/24 maxlen: 24
203.124.57.0/24 maxlen: 24
203.124.58.0/24 maxlen: 24
203.124.59.0/24 maxlen: 24
203.124.60.0/24 maxlen: 24
203.124.61.0/24 maxlen: 24
203.124.62.0/24 maxlen: 24
203.124.63.0/24 maxlen: 24
210.56.0.0/24 maxlen: 24
210.56.1.0/24 maxlen: 24
210.56.2.0/24 maxlen: 24
210.56.3.0/24 maxlen: 24
210.56.4.0/24 maxlen: 24
210.56.5.0/24 maxlen: 24
210.56.6.0/24 maxlen: 24
210.56.7.0/24 maxlen: 24
210.56.8.0/24 maxlen: 24
210.56.9.0/24 maxlen: 24
210.56.10.0/24 maxlen: 24
210.56.11.0/24 maxlen: 24
210.56.12.0/24 maxlen: 24
210.56.13.0/24 maxlen: 24
210.56.14.0/24 maxlen: 24
210.56.15.0/24 maxlen: 24
210.56.16.0/24 maxlen: 24
210.56.17.0/24 maxlen: 24
210.56.18.0/24 maxlen: 24
210.56.19.0/24 maxlen: 24
210.56.20.0/24 maxlen: 24
210.56.21.0/24 maxlen: 24
210.56.22.0/24 maxlen: 24
210.56.23.0/24 maxlen: 24
210.56.24.0/24 maxlen: 24
210.56.25.0/24 maxlen: 24
210.56.26.0/24 maxlen: 24
210.56.27.0/24 maxlen: 24
210.56.28.0/24 maxlen: 24
210.56.29.0/24 maxlen: 24
210.56.30.0/24 maxlen: 24
210.56.31.0/24 maxlen: 24
2402:1680:1::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A913E32A/1B4F9F96FAD311E496C6E80CC4F9AE02/wcRvxKcZaeWFBKc01JBKe9L_BUM.crl
rsync://rpki.apnic.net/member_repository/A913E32A/1B4F9F96FAD311E496C6E80CC4F9AE02/wcRvxKcZaeWFBKc01JBKe9L_BUM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wcRvxKcZaeWFBKc01JBKe9L_BUM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 02:39:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 9886 (0x269e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A913E32A, serialNumber=C1C46FC4A71969E58504A734D4904A7BD2FF0543
Validity
Not Before: Jun 6 15:52:33 2025 GMT
Not After : Jul 30 00:00:00 2026 GMT
Subject: CN=69a42286-b3b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:a1:4f:02:80:3a:0d:b4:3a:e5:b4:2b:6d:b3:
49:c3:89:61:22:45:9c:61:e0:89:d7:96:83:5a:ee:
50:59:a1:a8:b9:9a:2e:10:51:1e:62:41:db:1e:19:
d1:aa:ed:3c:83:9a:1a:86:a6:4f:88:e2:69:28:4b:
e3:39:38:eb:5e:c2:97:ea:0d:d8:16:51:4c:91:dc:
fb:3f:0a:01:c9:43:41:b5:e6:44:54:4a:47:ec:fd:
c3:4a:56:b4:50:5d:2a:89:33:4f:6b:59:c7:be:7d:
53:b9:c6:ca:c4:61:9f:ff:e6:a8:39:50:81:bf:df:
81:f2:7c:92:39:df:58:c4:8e:eb:bd:4e:8a:ae:65:
82:0d:4b:c9:a1:43:57:91:ea:23:22:72:2e:df:82:
35:6c:72:a5:e1:c7:28:a6:c6:92:75:77:fa:8e:04:
40:e2:c8:a7:52:5c:86:6f:5e:82:56:2a:00:68:68:
51:40:1e:86:c1:6e:c2:15:77:e0:b5:17:6e:11:b9:
3d:b4:2f:93:c6:31:8a:cb:0a:59:19:45:2d:f5:58:
b5:22:24:24:45:79:8f:6d:d1:3e:fc:33:97:b6:cf:
8d:7b:37:29:f7:f2:c1:90:8a:01:f7:2e:a8:b2:cf:
48:28:73:b9:7b:25:4c:73:98:3e:59:cc:66:c1:d5:
41:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:66:7F:7B:BE:18:67:AE:31:0F:3F:30:4D:70:89:E1:52:0F:CB:C1
X509v3 Authority Key Identifier:
keyid:C1:C4:6F:C4:A7:19:69:E5:85:04:A7:34:D4:90:4A:7B:D2:FF:05:43
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A913E32A/1B4F9F96FAD311E496C6E80CC4F9AE02/wcRvxKcZaeWFBKc01JBKe9L_BUM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wcRvxKcZaeWFBKc01JBKe9L_BUM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913E32A/1B4F9F96FAD311E496C6E80CC4F9AE02/665C2DFC1C1511EFB1AF8F28C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
203.124.32.0/23
203.124.35.0-203.124.53.255
203.124.56.0/21
210.56.0.0/19
IPv6:
2402:1680:1::/48
Signature Algorithm: sha256WithRSAEncryption
03:43:50:38:df:bd:c9:40:5d:4f:c8:ba:c7:df:0b:25:3b:ad:
bb:f8:71:18:38:39:f4:08:64:8d:19:81:56:c8:38:88:c4:49:
24:e7:2e:bf:2c:76:da:80:1b:65:46:9e:60:84:de:ea:37:76:
48:80:ef:4a:2f:52:bf:d1:5f:c1:be:7a:f5:6f:14:14:42:d5:
4c:0b:a7:ef:19:b1:c3:44:30:55:7e:ca:52:8e:b5:1c:55:4f:
88:b9:80:18:0d:5a:07:49:95:3d:a7:64:52:13:4d:7d:86:22:
69:9f:17:19:67:fc:36:62:48:ba:80:b3:94:14:98:8f:00:a3:
94:6c:d4:b3:de:22:ff:35:7d:48:a8:33:74:4c:b0:27:ba:dd:
36:b3:78:0e:45:2c:0e:7f:a6:4b:10:a2:5a:f1:b8:8a:0f:81:
cc:90:b7:55:96:4a:79:c5:c8:7a:ba:f2:ac:20:19:7a:f8:06:
de:98:06:a4:d1:f4:6c:10:b1:71:85:ac:b8:55:80:46:cc:6a:
22:8a:f4:65:f7:2c:6c:32:aa:b2:db:99:6c:21:c8:23:1a:76:
6a:15:3e:ba:da:56:bc:f8:1f:d0:5c:22:68:76:41:69:21:c6:
be:ae:c8:f3:3c:c3:b1:b6:33:1f:ea:c9:90:ae:2e:1d:88:46:
54:e8:4e:f1
-----BEGIN CERTIFICATE-----
MIIFZzCCBE+gAwIBAgICJp4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
M0UzMkExMTAvBgNVBAUTKEMxQzQ2RkM0QTcxOTY5RTU4NTA0QTczNEQ0OTA0QTdC
RDJGRjA1NDMwHhcNMjUwNjA2MTU1MjMzWhcNMjYwNzMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02OWE0MjI4Ni1iM2I3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAwaFPAoA6DbQ65bQrbbNJw4lhIkWcYeCJ15aDWu5QWaGouZouEFEeYkHbHhnR
qu08g5oahqZPiOJpKEvjOTjrXsKX6g3YFlFMkdz7PwoByUNBteZEVEpH7P3DSla0
UF0qiTNPa1nHvn1TucbKxGGf/+aoOVCBv9+B8nySOd9YxI7rvU6KrmWCDUvJoUNX
keojInIu34I1bHKl4ccopsaSdXf6jgRA4sinUlyGb16CVioAaGhRQB6GwW7CFXfg
tRduEbk9tC+TxjGKywpZGUUt9Vi1IiQkRXmPbdE+/DOXts+Nezcp9/LBkIoB9y6o
ss9IKHO5eyVMc5g+WcxmwdVBQwIDAQABo4ICizCCAocwHQYDVR0OBBYEFMNmf3u+
GGeuMQ8/ME1wieFSD8vBMB8GA1UdIwQYMBaAFMHEb8SnGWnlhQSnNNSQSnvS/wVD
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzRTMyQS8xQjRGOUY5NkZB
RDMxMUU0OTZDNkU4MENDNEY5QUUwMi93Y1J2eEtjWmFlV0ZCS2MwMUpCS2U5TF9C
VU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3djUnZ4S2NaYWVXRkJLYzAxSkJLZTlMX0JVTS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
M0UzMkEvMUI0RjlGOTZGQUQzMTFFNDk2QzZFODBDQzRGOUFFMDIvNjY1QzJERkMx
QzE1MTFFRkIxQUY4RjI4QzRGOUFFMDIucm9hMEoGCCsGAQUFBwEHAQH/BDswOTAm
BAIAATAgAwQBy3wgMAwDBADLfCMDBAHLfDQDBAPLfDgDBAXSOAAwDwQCAAIwCQMH
ACQCFoAAATANBgkqhkiG9w0BAQsFAAOCAQEAA0NQON+9yUBdT8i6x98LJTutu/hx
GDg59AhkjRmBVsg4iMRJJOcuvyx22oAbZUaeYITe6jd2SIDvSi9Sv9Ffwb569W8U
FELVTAun7xmxw0QwVX7KUo61HFVPiLmAGA1aB0mVPadkUhNNfYYiaZ8XGWf8NmJI
uoCzlBSYjwCjlGzUs94i/zV9SKgzdEywJ7rdNrN4DkUsDn+mSxCiWvG4ig+BzJC3
VZZKecXIerryrCAZevgG3pgGpNH0bBCxcYWsuFWARsxqIor0ZfcsbDKqstuZbCHI
Ixp2ahU+utpWvPgf0FwiaHZBaSHGvq7I8zzDsbYzH+rJkK4uHYhGVOhO8Q==
-----END CERTIFICATE-----
Generated at Mon Mar 2 07:28:50 2026 by rpki-client