Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91406AA/8F5BB4F886C111EBBAB3184BC4F9AE02/3C30815CABB611ED8370AB5DC4F9AE02.roa
File: 3C30815CABB611ED8370AB5DC4F9AE02.roa (raw, json)
Hash identifier: b7WrbMrC6XaJkF2VHrxWWnDlQpNHTRCf5XkevKZGK1Q=
Subject key identifier: 0F:27:00:B8:2D:10:13:E8:15:FB:0C:72:27:B1:CF:04:F9:EB:55:2C
Certificate issuer: /CN=A91406AA/serialNumber=315513E54AB0C99B8BCA84042E38358B60DB1B2C
Certificate serial: 08B9
Authority key identifier: 31:55:13:E5:4A:B0:C9:9B:8B:CA:84:04:2E:38:35:8B:60:DB:1B:2C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MVUT5UqwyZuLyoQELjg1i2DbGyw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91406AA/8F5BB4F886C111EBBAB3184BC4F9AE02/3C30815CABB611ED8370AB5DC4F9AE02.roa
Signing time: Mon 18 May 2026 04:10:28 +0000
ROA not before: Mon 18 May 2026 04:10:28 +0000
ROA not after: Tue 01 Dec 2026 00:00:00 +0000
asID: 140220
IP address blocks: 60.234.7.0/24 maxlen: 24
60.234.8.0/24 maxlen: 24
60.234.10.0/24 maxlen: 24
60.234.11.0/24 maxlen: 24
60.234.12.0/24 maxlen: 24
60.234.13.0/24 maxlen: 24
60.234.14.0/24 maxlen: 24
60.234.15.0/24 maxlen: 24
60.234.31.0/24 maxlen: 24
60.234.32.0/24 maxlen: 24
60.234.33.0/24 maxlen: 24
60.234.39.0/24 maxlen: 24
60.234.40.0/23 maxlen: 24
60.234.46.0/24 maxlen: 24
60.234.50.0/24 maxlen: 24
60.234.51.0/24 maxlen: 24
60.234.52.0/24 maxlen: 24
60.234.53.0/24 maxlen: 24
60.234.63.0/24 maxlen: 24
60.234.68.0/24 maxlen: 24
60.234.72.0/24 maxlen: 24
60.234.73.0/24 maxlen: 24
60.234.75.0/24 maxlen: 24
60.234.82.0/23 maxlen: 24
60.234.84.0/22 maxlen: 24
60.234.88.0/24 maxlen: 24
60.234.89.0/24 maxlen: 24
60.234.90.0/23 maxlen: 24
60.234.92.0/23 maxlen: 24
60.234.94.0/24 maxlen: 24
60.234.95.0/24 maxlen: 24
60.234.96.0/24 maxlen: 24
60.234.98.0/24 maxlen: 24
60.234.99.0/24 maxlen: 24
60.234.100.0/23 maxlen: 24
60.234.102.0/23 maxlen: 24
60.234.104.0/22 maxlen: 24
60.234.108.0/24 maxlen: 24
60.234.109.0/24 maxlen: 24
60.234.110.0/24 maxlen: 24
60.234.111.0/24 maxlen: 24
60.234.112.0/24 maxlen: 24
60.234.113.0/24 maxlen: 24
60.234.114.0/24 maxlen: 24
60.234.115.0/24 maxlen: 24
60.234.116.0/23 maxlen: 24
60.234.118.0/24 maxlen: 24
60.234.119.0/24 maxlen: 24
60.234.120.0/24 maxlen: 24
60.234.121.0/24 maxlen: 24
60.234.122.0/23 maxlen: 24
60.234.124.0/24 maxlen: 24
60.234.125.0/24 maxlen: 24
60.234.126.0/24 maxlen: 24
60.234.127.0/24 maxlen: 24
60.234.128.0/24 maxlen: 24
60.234.129.0/24 maxlen: 24
60.234.130.0/24 maxlen: 24
60.234.131.0/24 maxlen: 24
60.234.132.0/24 maxlen: 24
60.234.133.0/24 maxlen: 24
60.234.134.0/24 maxlen: 24
60.234.135.0/24 maxlen: 24
60.234.136.0/24 maxlen: 24
60.234.137.0/24 maxlen: 24
60.234.138.0/24 maxlen: 24
60.234.139.0/24 maxlen: 24
60.234.140.0/24 maxlen: 24
60.234.141.0/24 maxlen: 24
60.234.142.0/24 maxlen: 24
60.234.143.0/24 maxlen: 24
60.234.144.0/23 maxlen: 24
60.234.146.0/23 maxlen: 24
60.234.148.0/24 maxlen: 24
60.234.149.0/24 maxlen: 24
60.234.150.0/23 maxlen: 24
60.234.152.0/21 maxlen: 24
60.234.160.0/24 maxlen: 24
60.234.161.0/24 maxlen: 24
60.234.162.0/23 maxlen: 24
60.234.164.0/24 maxlen: 24
60.234.165.0/24 maxlen: 24
60.234.166.0/24 maxlen: 24
60.234.167.0/24 maxlen: 24
60.234.168.0/24 maxlen: 24
60.234.169.0/24 maxlen: 24
60.234.170.0/24 maxlen: 24
60.234.171.0/24 maxlen: 24
60.234.172.0/24 maxlen: 24
60.234.173.0/24 maxlen: 24
60.234.174.0/24 maxlen: 24
60.234.175.0/24 maxlen: 24
60.234.176.0/24 maxlen: 24
60.234.178.0/24 maxlen: 24
60.234.181.0/24 maxlen: 24
60.234.182.0/23 maxlen: 24
60.234.184.0/23 maxlen: 24
60.234.186.0/24 maxlen: 24
60.234.187.0/24 maxlen: 24
60.234.188.0/24 maxlen: 24
60.234.189.0/24 maxlen: 24
60.234.190.0/24 maxlen: 24
60.234.191.0/24 maxlen: 24
60.234.192.0/24 maxlen: 24
60.234.193.0/24 maxlen: 24
60.234.194.0/23 maxlen: 24
60.234.196.0/23 maxlen: 24
60.234.198.0/23 maxlen: 24
60.234.201.0/24 maxlen: 24
60.234.202.0/23 maxlen: 24
60.234.204.0/24 maxlen: 24
60.234.205.0/24 maxlen: 24
60.234.206.0/24 maxlen: 24
60.234.207.0/24 maxlen: 24
60.234.208.0/20 maxlen: 24
60.234.224.0/19 maxlen: 24
121.98.32.0/24 maxlen: 24
121.98.33.0/24 maxlen: 24
121.98.34.0/23 maxlen: 24
121.98.36.0/22 maxlen: 24
121.98.124.0/23 maxlen: 24
202.127.8.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91406AA/8F5BB4F886C111EBBAB3184BC4F9AE02/MVUT5UqwyZuLyoQELjg1i2DbGyw.crl
rsync://rpki.apnic.net/member_repository/A91406AA/8F5BB4F886C111EBBAB3184BC4F9AE02/MVUT5UqwyZuLyoQELjg1i2DbGyw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MVUT5UqwyZuLyoQELjg1i2DbGyw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 19 Jun 2026 22:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2233 (0x8b9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91406AA, serialNumber=315513E54AB0C99B8BCA84042E38358B60DB1B2C
Validity
Not Before: May 18 04:10:28 2026 GMT
Not After : Dec 1 00:00:00 2026 GMT
Subject: CN=6a0a9134-26ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:22:ca:12:b2:3f:18:bd:ab:94:d9:7f:88:9c:
a1:f2:39:bb:56:13:ec:24:a2:0d:42:ab:05:a4:48:
56:ac:8e:0c:c2:5b:42:0e:86:a4:d2:ed:23:0a:ec:
ac:48:e1:06:ec:b6:2a:45:76:81:74:48:ec:fc:ed:
25:82:99:fc:fe:58:b2:e6:83:0e:be:98:78:02:e4:
91:53:fb:7e:c9:5c:da:81:0d:dd:8c:a7:83:b9:59:
ea:e8:fe:69:ed:49:5c:1c:e3:77:06:7c:22:58:22:
67:6e:e4:b3:9c:d6:25:f0:6a:c1:07:f9:76:3c:a6:
7f:30:fa:63:ce:36:2d:fe:da:b4:e2:b9:b2:82:31:
48:67:c0:2e:a5:d3:4d:86:3a:9c:ce:d6:33:8f:da:
ae:0b:7e:ba:02:a9:dc:89:7a:1e:40:fb:77:33:ab:
53:a5:7a:92:50:0e:0d:05:4b:e6:09:73:78:e2:d4:
87:10:87:1e:4c:15:34:ce:35:0f:29:dd:3c:c6:b8:
f4:f6:04:53:12:d6:8e:41:10:4b:12:96:56:08:72:
e8:a1:9d:f4:f1:39:9b:62:02:00:09:87:c0:38:68:
db:bc:46:c1:6e:54:0a:89:1d:22:09:22:3e:58:c0:
de:20:60:c8:58:8d:3b:9a:e4:28:72:22:8e:75:0e:
a0:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:27:00:B8:2D:10:13:E8:15:FB:0C:72:27:B1:CF:04:F9:EB:55:2C
X509v3 Authority Key Identifier:
keyid:31:55:13:E5:4A:B0:C9:9B:8B:CA:84:04:2E:38:35:8B:60:DB:1B:2C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91406AA/8F5BB4F886C111EBBAB3184BC4F9AE02/MVUT5UqwyZuLyoQELjg1i2DbGyw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MVUT5UqwyZuLyoQELjg1i2DbGyw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91406AA/8F5BB4F886C111EBBAB3184BC4F9AE02/3C30815CABB611ED8370AB5DC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
60.234.7.0-60.234.8.255
60.234.10.0-60.234.15.255
60.234.31.0-60.234.33.255
60.234.39.0-60.234.41.255
60.234.46.0/24
60.234.50.0-60.234.53.255
60.234.63.0/24
60.234.68.0/24
60.234.72.0/23
60.234.75.0/24
60.234.82.0-60.234.96.255
60.234.98.0-60.234.176.255
60.234.178.0/24
60.234.181.0-60.234.199.255
60.234.201.0-60.234.255.255
121.98.32.0/21
121.98.124.0/23
202.127.8.0/22
Signature Algorithm: sha256WithRSAEncryption
75:2b:e1:fc:4f:90:1e:23:2c:97:84:e3:69:13:2b:31:7b:13:
c5:6e:4b:6c:e4:bb:4a:b6:00:fa:85:29:9c:d3:eb:33:aa:5c:
6f:33:5f:fd:da:75:63:19:23:7d:9e:d1:ec:ef:9c:ae:a1:16:
d8:5f:1b:61:7a:dc:c7:0e:a5:3b:b5:24:24:2e:6e:dc:30:6c:
69:e0:79:0d:94:9f:31:d4:78:8c:aa:18:83:37:8e:63:88:f1:
f8:91:f6:ee:c0:06:48:a9:10:00:a9:04:25:54:e0:03:63:fa:
84:c5:8c:bf:bc:5c:ea:e3:c5:cf:39:fa:58:9a:22:9e:e9:3a:
6c:89:cd:2c:45:5a:5b:d4:ef:90:a9:57:7a:bf:40:1d:b2:f4:
32:e7:20:67:27:8d:d3:12:33:77:99:5a:e5:7e:e6:14:86:1e:
a7:2c:c8:1f:18:37:92:f8:5e:0a:42:1b:ee:0c:3b:a9:7e:f8:
bf:70:98:ed:da:bb:42:60:8a:81:39:79:08:ca:70:d4:50:36:
65:9f:da:db:d2:55:3b:86:0b:16:0b:28:cf:87:40:09:7c:9b:
9c:a9:92:c3:b1:be:3e:9f:9f:9d:d8:b6:b5:b3:27:5d:8d:62:
4c:75:a5:97:27:5c:19:1d:29:49:3b:f6:ae:72:8d:b0:92:47:
a7:b2:f0:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 11:20:16 2026 by rpki-client