Route Origin Authorization
$ rpki-client -vvvf rpki.apnic.net/member_repository/A913E32A/1B4F9F96FAD311E496C6E80CC4F9AE02/6B0A8C22B24F11F1A932D7E76711F970.roa
File: 6B0A8C22B24F11F1A932D7E76711F970.roa (raw, json)
Hash identifier: V/kZ5U+nSk6U+h9M+1v0R7B/IUSnnzvNChqnOHrT6xQ=
Subject key identifier: F5:CB:CF:81:32:B2:1B:BD:73:8D:06:0A:D9:82:DF:7A:32:DD:99:6E
Certificate issuer: /CN=A913E32A/serialNumber=C1C46FC4A71969E58504A734D4904A7BD2FF0543
Certificate serial: 276F
Authority key identifier: C1:C4:6F:C4:A7:19:69:E5:85:04:A7:34:D4:90:4A:7B:D2:FF:05:43
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wcRvxKcZaeWFBKc01JBKe9L_BUM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A913E32A/1B4F9F96FAD311E496C6E80CC4F9AE02/6B0A8C22B24F11F1A932D7E76711F970.roa
Signing time: Thu 17 Sep 2026 04:22:40 +0000
ROA not before: Thu 17 Sep 2026 04:22:40 +0000
ROA not after: Fri 30 Jul 2027 00:00:00 +0000
asID: 7590
IP address blocks: 203.124.32.0/24 maxlen: 24
203.124.33.0/24 maxlen: 24
203.124.35.0/24 maxlen: 24
203.124.36.0/24 maxlen: 24
203.124.37.0/24 maxlen: 24
203.124.39.0/24 maxlen: 24
203.124.40.0/24 maxlen: 24
203.124.41.0/24 maxlen: 24
203.124.42.0/24 maxlen: 24
203.124.43.0/24 maxlen: 24
203.124.44.0/24 maxlen: 24
203.124.45.0/24 maxlen: 24
203.124.46.0/24 maxlen: 24
203.124.47.0/24 maxlen: 24
203.124.48.0/24 maxlen: 24
203.124.50.0/24 maxlen: 24
203.124.51.0/24 maxlen: 24
203.124.52.0/24 maxlen: 24
203.124.53.0/24 maxlen: 24
203.124.54.0/24 maxlen: 24
203.124.59.0/24 maxlen: 24
203.124.63.0/24 maxlen: 24
210.56.0.0/24 maxlen: 24
210.56.1.0/24 maxlen: 24
210.56.2.0/24 maxlen: 24
210.56.8.0/24 maxlen: 24
210.56.9.0/24 maxlen: 24
210.56.10.0/24 maxlen: 24
210.56.11.0/24 maxlen: 24
210.56.12.0/24 maxlen: 24
210.56.13.0/24 maxlen: 24
210.56.14.0/24 maxlen: 24
210.56.15.0/24 maxlen: 24
210.56.16.0/24 maxlen: 24
210.56.17.0/24 maxlen: 24
210.56.20.0/24 maxlen: 24
210.56.21.0/24 maxlen: 24
210.56.23.0/24 maxlen: 24
210.56.24.0/24 maxlen: 24
210.56.25.0/24 maxlen: 24
210.56.27.0/24 maxlen: 24
210.56.28.0/24 maxlen: 24
210.56.29.0/24 maxlen: 24
210.56.30.0/24 maxlen: 24
210.56.31.0/24 maxlen: 24
2402:1680:1::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A913E32A/1B4F9F96FAD311E496C6E80CC4F9AE02/wcRvxKcZaeWFBKc01JBKe9L_BUM.crl
rsync://rpki.apnic.net/member_repository/A913E32A/1B4F9F96FAD311E496C6E80CC4F9AE02/wcRvxKcZaeWFBKc01JBKe9L_BUM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wcRvxKcZaeWFBKc01JBKe9L_BUM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 29 Sep 2026 15:21:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 10095 (0x276f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A913E32A, serialNumber=C1C46FC4A71969E58504A734D4904A7BD2FF0543
Validity
Not Before: Sep 17 04:22:40 2026 GMT
Not After : Jul 30 00:00:00 2027 GMT
Subject: CN=6aab6b0f-5b2f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:24:f6:15:d7:c7:11:74:cb:70:24:49:3e:ac:
b9:60:13:d6:31:21:59:e1:dc:54:06:2a:5a:ab:c4:
1e:10:25:21:58:67:3b:e6:a5:de:71:b7:e2:5b:3e:
87:c3:4b:40:38:b8:57:05:a5:a9:03:cd:47:28:59:
84:83:46:41:c0:09:5c:d8:5a:18:f3:f3:97:4c:fa:
f9:3b:cf:ed:d0:eb:36:ae:23:93:f9:7c:81:c0:9a:
36:80:bb:9f:17:74:35:2f:90:9b:9b:26:f4:1b:75:
57:a3:db:48:ae:34:f6:7a:73:84:b9:d4:7f:05:78:
65:43:6c:6a:e4:06:0b:ac:1c:d6:69:54:11:54:c7:
73:5d:ab:86:e1:61:1f:68:eb:f1:86:8a:37:54:18:
3f:ef:cc:ef:c1:dc:56:9b:e9:74:ac:61:e4:74:43:
75:72:e8:1c:04:c9:2a:3e:fe:5d:3a:01:5f:53:4e:
1a:44:11:18:1d:60:32:ba:ae:d0:a4:c3:b6:13:40:
51:fc:ed:5d:eb:b4:f9:6d:fb:67:cc:e4:4d:53:6c:
11:66:db:b1:f3:e7:fe:b4:b1:0f:6f:ab:ce:09:78:
5d:14:62:80:61:9a:63:3f:21:b9:de:fe:32:76:6c:
a8:8e:1c:7f:7a:3b:5d:dd:82:41:65:ff:2a:54:f8:
48:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:CB:CF:81:32:B2:1B:BD:73:8D:06:0A:D9:82:DF:7A:32:DD:99:6E
X509v3 Authority Key Identifier:
keyid:C1:C4:6F:C4:A7:19:69:E5:85:04:A7:34:D4:90:4A:7B:D2:FF:05:43
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A913E32A/1B4F9F96FAD311E496C6E80CC4F9AE02/wcRvxKcZaeWFBKc01JBKe9L_BUM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wcRvxKcZaeWFBKc01JBKe9L_BUM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913E32A/1B4F9F96FAD311E496C6E80CC4F9AE02/6B0A8C22B24F11F1A932D7E76711F970.roa
sbgp-ipAddrBlock: critical
IPv4:
203.124.32.0/23
203.124.35.0-203.124.37.255
203.124.39.0-203.124.48.255
203.124.50.0-203.124.54.255
203.124.59.0/24
203.124.63.0/24
210.56.0.0-210.56.2.255
210.56.8.0-210.56.17.255
210.56.20.0/23
210.56.23.0-210.56.25.255
210.56.27.0-210.56.31.255
IPv6:
2402:1680:1::/48
Signature Algorithm: sha256WithRSAEncryption
b3:87:ea:4e:66:ce:23:90:11:bd:66:8f:fc:82:c9:32:f0:20:
44:79:da:04:57:26:6e:86:78:24:53:25:5b:15:f3:d4:67:c2:
e0:79:cb:b4:1b:95:a6:d2:ad:4f:f6:ed:e5:e0:5e:d8:17:cb:
ae:43:e2:06:7c:e5:74:e3:70:2d:5b:5d:1c:1c:47:0b:e5:32:
b2:81:23:53:c9:09:81:ed:26:51:30:bf:2d:19:be:e8:a1:50:
b9:4f:83:f9:c6:86:2b:ec:a7:39:60:d4:c3:9b:bb:1a:7a:3b:
0e:f1:78:ca:1a:64:4a:46:54:96:f5:ad:f9:d6:7d:96:1f:da:
16:34:65:e7:d3:6b:b8:12:4d:ee:a0:1c:d2:a3:61:85:15:cf:
4f:18:be:29:b6:f3:2b:d8:7b:da:ec:15:c9:e7:75:6c:72:1d:
99:d9:40:7a:c9:f0:39:c4:92:f4:bd:e2:cb:57:7b:a4:ce:01:
ed:12:a8:63:2b:7b:b7:4b:a6:9c:73:a9:82:fe:f4:43:22:b4:
65:bc:b2:55:39:3e:7e:3b:69:64:f2:b4:c3:75:d1:eb:c5:fa:
17:a5:05:35:ab:28:f6:4b:d5:b6:84:e2:35:8f:67:e5:e5:5c:
ac:c6:ce:e4:7c:a5:bd:34:a2:54:4f:ed:b6:71:d2:75:e5:c3:
64:3e:59:92
-----BEGIN CERTIFICATE-----
MIIFwzCCBKugAwIBAgICJ28wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
M0UzMkExMTAvBgNVBAUTKEMxQzQ2RkM0QTcxOTY5RTU4NTA0QTczNEQ0OTA0QTdC
RDJGRjA1NDMwHhcNMjYwOTE3MDQyMjQwWhcNMjcwNzMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02YWFiNmIwZi01YjJmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAnST2FdfHEXTLcCRJPqy5YBPWMSFZ4dxUBipaq8QeECUhWGc75qXecbfiWz6H
w0tAOLhXBaWpA81HKFmEg0ZBwAlc2FoY8/OXTPr5O8/t0Os2riOT+XyBwJo2gLuf
F3Q1L5Cbmyb0G3VXo9tIrjT2enOEudR/BXhlQ2xq5AYLrBzWaVQRVMdzXauG4WEf
aOvxhoo3VBg/78zvwdxWm+l0rGHkdEN1cugcBMkqPv5dOgFfU04aRBEYHWAyuq7Q
pMO2E0BR/O1d67T5bftnzORNU2wRZtux8+f+tLEPb6vOCXhdFGKAYZpjPyG53v4y
dmyojhx/ejtd3YJBZf8qVPhIOwIDAQABo4IC5zCCAuMwHQYDVR0OBBYEFPXLz4Ey
shu9c40GCtmC33oy3ZluMB8GA1UdIwQYMBaAFMHEb8SnGWnlhQSnNNSQSnvS/wVD
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzRTMyQS8xQjRGOUY5NkZB
RDMxMUU0OTZDNkU4MENDNEY5QUUwMi93Y1J2eEtjWmFlV0ZCS2MwMUpCS2U5TF9C
VU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3djUnZ4S2NaYWVXRkJLYzAxSkJLZTlMX0JVTS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
M0UzMkEvMUI0RjlGOTZGQUQzMTFFNDk2QzZFODBDQzRGOUFFMDIvNkIwQThDMjJC
MjRGMTFGMUE5MzJEN0U3NjcxMUY5NzAucm9hMIGlBggrBgEFBQcBBwEB/wSBlTCB
kjB/BAIAATB5AwQBy3wgMAwDBADLfCMDBAHLfCQwDAMEAMt8JwMEAMt8MDAMAwQB
y3wyAwQAy3w2AwQAy3w7AwQAy3w/MAsDAwPSOAMEANI4AjAMAwQD0jgIAwQB0jgQ
AwQB0jgUMAwDBADSOBcDBAHSOBgwDAMEANI4GwMEBdI4ADAPBAIAAjAJAwcAJAIW
gAABMA0GCSqGSIb3DQEBCwUAA4IBAQCzh+pOZs4jkBG9Zo/8gsky8CBEedoEVyZu
hngkUyVbFfPUZ8Lgecu0G5Wm0q1P9u3l4F7YF8uuQ+IGfOV043AtW10cHEcL5TKy
gSNTyQmB7SZRML8tGb7ooVC5T4P5xoYr7Kc5YNTDm7saejsO8XjKGmRKRlSW9a35
1n2WH9oWNGXn02u4Ek3uoBzSo2GFFc9PGL4ptvMr2Hva7BXJ53Vsch2Z2UB6yfA5
xJL0veLLV3ukzgHtEqhjK3u3S6acc6mC/vRDIrRlvLJVOT5+O2lk8rTDddHrxfoX
pQU1qyj2S9W2hOI1j2fl5Vysxs7kfKW9NKJUT+22cdJ15cNkPlmS
-----END CERTIFICATE-----
Generated at Tue Sep 22 22:52:42 2026 by rpki-client