Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9146AD7/F8BABACA8B8911E790115C3FC4F9AE02/669662644C4B11EE9AC4B26BC4F9AE02.roa
File: 669662644C4B11EE9AC4B26BC4F9AE02.roa (raw, json)
Hash identifier: WkOGv0z8Ach2j5QKTGVdZSS4odRu7QjJXvA4xXQ5j6o=
Subject key identifier: 00:CD:5C:F0:EF:58:05:43:8E:0D:11:04:DE:B4:9B:52:F2:F2:FE:5A
Certificate issuer: /CN=A9146AD7/serialNumber=BAF5ADA32CA0D34CF3CCF53ABDF86DE6F8ED9005
Certificate serial: 1AA5
Authority key identifier: BA:F5:AD:A3:2C:A0:D3:4C:F3:CC:F5:3A:BD:F8:6D:E6:F8:ED:90:05
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uvWtoyyg00zzzPU6vfht5vjtkAU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9146AD7/F8BABACA8B8911E790115C3FC4F9AE02/669662644C4B11EE9AC4B26BC4F9AE02.roa
Signing time: Sun 01 Mar 2026 18:24:06 +0000
ROA not before: Sat 12 Apr 2025 16:25:00 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 4768
IP address blocks: 121.72.0.0/15 maxlen: 15
202.0.32.0/19 maxlen: 19
202.0.33.0/24 maxlen: 24
202.0.34.0/24 maxlen: 24
202.0.35.0/24 maxlen: 24
202.0.36.0/24 maxlen: 24
202.0.50.0/23 maxlen: 23
202.0.56.0/23 maxlen: 23
202.0.58.0/24 maxlen: 24
202.20.93.0/24 maxlen: 24
202.37.61.0/24 maxlen: 24
202.78.128.0/19 maxlen: 22
203.79.64.0/18 maxlen: 18
203.79.66.0/24 maxlen: 24
203.79.68.0/23 maxlen: 23
203.79.71.0/24 maxlen: 24
203.79.82.0/24 maxlen: 24
203.79.84.0/24 maxlen: 24
203.79.96.0/20 maxlen: 20
203.79.114.0/24 maxlen: 24
203.79.116.0/22 maxlen: 22
203.79.120.0/22 maxlen: 22
203.96.144.0/20 maxlen: 20
203.96.152.0/24 maxlen: 24
203.96.159.0/24 maxlen: 24
203.97.0.0/17 maxlen: 17
203.97.24.0/24 maxlen: 24
203.97.30.0/24 maxlen: 24
203.97.32.0/21 maxlen: 21
203.97.46.0/24 maxlen: 24
203.97.96.0/20 maxlen: 20
203.97.112.0/20 maxlen: 20
203.97.128.0/17 maxlen: 17
203.97.169.0/24 maxlen: 24
203.97.170.0/23 maxlen: 23
203.97.172.0/23 maxlen: 23
203.97.174.0/24 maxlen: 24
203.97.183.0/24 maxlen: 24
203.97.184.0/23 maxlen: 23
203.97.212.0/22 maxlen: 22
203.97.216.0/23 maxlen: 23
203.97.218.0/24 maxlen: 24
203.97.220.0/22 maxlen: 22
203.97.233.0/24 maxlen: 24
203.97.234.0/23 maxlen: 23
203.97.236.0/24 maxlen: 24
203.97.238.0/23 maxlen: 23
203.97.240.0/24 maxlen: 24
203.97.247.0/24 maxlen: 24
203.97.248.0/21 maxlen: 21
203.98.0.0/18 maxlen: 18
203.98.21.0/24 maxlen: 24
203.98.38.0/24 maxlen: 24
203.98.50.0/24 maxlen: 24
203.167.128.0/17 maxlen: 17
203.167.130.0/24 maxlen: 24
203.167.187.0/24 maxlen: 24
218.101.0.0/18 maxlen: 18
218.101.56.0/24 maxlen: 24
2001:4400::/31 maxlen: 31
2001:4403:dd05::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9146AD7/F8BABACA8B8911E790115C3FC4F9AE02/uvWtoyyg00zzzPU6vfht5vjtkAU.crl
rsync://rpki.apnic.net/member_repository/A9146AD7/F8BABACA8B8911E790115C3FC4F9AE02/uvWtoyyg00zzzPU6vfht5vjtkAU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uvWtoyyg00zzzPU6vfht5vjtkAU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 02:40:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6821 (0x1aa5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9146AD7, serialNumber=BAF5ADA32CA0D34CF3CCF53ABDF86DE6F8ED9005
Validity
Not Before: Apr 12 16:25:00 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=69a48446-6e1a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:a7:f5:e3:73:c2:c0:8c:ee:6d:c7:49:2c:4f:
72:de:96:58:3e:cb:70:00:4a:a0:5c:a9:d7:1f:2b:
e7:97:85:1f:6e:cb:05:e7:73:7c:95:2c:df:b2:4f:
10:5a:0d:3e:f1:73:4c:c7:d9:b8:42:ed:de:1f:cd:
ad:ca:0d:07:24:64:85:97:74:ab:b7:e3:ad:62:1e:
57:db:2c:de:63:f2:d3:66:3d:dd:4c:2e:fd:20:c5:
aa:70:f4:6f:d3:61:eb:ad:3e:03:e9:48:75:54:0d:
c0:4e:c6:3e:f8:65:0d:4e:37:cb:89:04:cc:6f:b9:
86:da:a8:17:4b:22:c5:8b:57:58:92:f4:1a:fa:43:
ff:4f:de:8e:3b:8f:61:62:97:b0:42:fb:1d:cc:2d:
21:28:95:21:c6:5f:d4:b5:20:d6:4c:c7:be:1e:1c:
4c:48:86:ee:ef:e9:45:16:6e:4c:8d:f8:e7:fa:d7:
d2:3f:d9:21:19:3f:c6:cd:6b:aa:3d:89:94:1d:4c:
12:3b:28:7b:cf:b0:df:62:46:5d:95:54:3f:19:4e:
b9:37:8b:4c:e8:7d:aa:20:ca:f1:37:bc:f0:a8:05:
e6:ed:5b:3b:63:a4:9f:d2:fa:aa:3c:8c:27:f5:25:
ba:95:9d:63:c4:64:52:bf:d1:2f:c0:7e:2a:2e:93:
7e:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:CD:5C:F0:EF:58:05:43:8E:0D:11:04:DE:B4:9B:52:F2:F2:FE:5A
X509v3 Authority Key Identifier:
keyid:BA:F5:AD:A3:2C:A0:D3:4C:F3:CC:F5:3A:BD:F8:6D:E6:F8:ED:90:05
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9146AD7/F8BABACA8B8911E790115C3FC4F9AE02/uvWtoyyg00zzzPU6vfht5vjtkAU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uvWtoyyg00zzzPU6vfht5vjtkAU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9146AD7/F8BABACA8B8911E790115C3FC4F9AE02/669662644C4B11EE9AC4B26BC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
121.72.0.0/15
202.0.32.0/19
202.20.93.0/24
202.37.61.0/24
202.78.128.0/19
203.79.64.0/18
203.96.144.0/20
203.97.0.0-203.98.63.255
203.167.128.0/17
218.101.0.0/18
IPv6:
2001:4400::/31
2001:4403:dd05::/48
Signature Algorithm: sha256WithRSAEncryption
a6:35:ea:02:7b:a6:32:49:0e:9b:58:52:f5:ea:03:72:ee:c4:
33:2b:3c:b3:4b:0c:30:53:08:79:ef:62:77:05:01:8d:a3:a0:
ef:2f:ff:31:1f:24:b7:65:38:3c:f0:ce:05:b0:79:e8:b4:1a:
75:d2:8f:90:58:8e:65:ba:36:67:e5:a3:75:1d:f0:f1:59:43:
ba:73:7c:4f:10:61:2c:b7:90:d0:80:b0:c9:01:25:9b:0a:cd:
2c:a6:f7:45:65:9a:21:98:d8:1c:82:68:a1:9f:0e:6f:8b:32:
19:be:84:fd:37:bb:87:39:49:51:48:33:c0:f9:78:61:7f:87:
ec:6d:3f:70:d6:21:11:b4:87:0f:9d:af:79:ea:f6:36:c0:43:
c8:23:80:f2:1f:71:2c:f1:f2:23:75:4e:51:18:0c:95:ad:a3:
fa:df:14:73:de:32:36:d2:08:83:43:aa:6f:0f:b4:f3:a1:37:
e9:28:e9:12:77:48:b3:a2:37:17:6b:41:5d:2c:45:96:a4:7f:
b3:01:41:d1:b6:10:27:0b:b5:5e:66:f9:04:74:d8:1a:8a:fa:
95:d5:6e:0c:be:4c:0e:db:c1:9e:40:1d:21:52:83:45:10:1a:
0d:75:e4:1e:4c:9d:02:45:eb:e4:f6:6a:84:7d:e7:d8:8f:1f:
70:1e:10:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 06:16:37 2026 by rpki-client